IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
0answers
10 views

Two road warrior clients behind the same NAT device (IKEv2, StrongSwan, LibreSwan)

I have an IKEv2 VPN that is set up and works properly, however I run into issues when I have two road warriors behind the same NAT device. Both devices connect however the second device seems to kick ...
1
vote
0answers
7 views

ipsec: Can't authenticate: no preshared key found for

I'm using Openswan with ipsec and ipsec keeps complaining about the shared-key not being present. I'm running Ubuntu 14.04 . I'm just experimenting on a couple of internal systems since I'm new to ...
0
votes
1answer
8 views

Why does 'ipsec statusall' not show any connections?

I've finally been able to get a tunnel between my computer (strongswan) and a Zyxel Zywall 110 up and running. I'm connecting using certificates, and judging from the logs the actual VPN connection ...
0
votes
0answers
7 views

Is IPSec + L2TP doable on Ubuntu 14.04?

We just got a new firewall, and our old PPTP VPN has been replaced with a new IPSec + L2TP VPN. Setting up VPN connections for Windows + Mac users is a breeze. Getting it to work on Ubuntu is hard (at ...
0
votes
0answers
21 views

How to view l2tp/ipsec clients

I have an l2tp/ipsec server. How I can list who is connected to server? I used to use last for ppp users using pptp. but that not working. I tired who too, but no luck. The only option I have is ...
1
vote
1answer
24 views

Route ipsec to openvpn with iptables

I am not a very experienced user but I do have determination, after a week with no progres it is getting rough. I have two NIC, one facing to the internet and one towards the internal network. Both ...
0
votes
0answers
13 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...
0
votes
0answers
12 views

IPsec tunnel, receiving data with wrong destination address

I've managed to stablish an IPsec tunnel using strongswan to a Cisco router. My server is an Azure VM, so it is behind NAT. I do not have control over the Cisco router. This is my /etc/ipsec.conf: ...
0
votes
0answers
8 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
1
vote
0answers
12 views

L2TP/IPsec with certificates: INVALID_KEY_INFORMATION

I'm trying to configure a L2TP/IPsec client on Centos 7, the packages are: libreswan-3.15-5 xl2tpd-1.3.6-8 The server is MS Windows I cannot bring up the vpn. Error are as follows: ● ...
-1
votes
0answers
34 views

What is wrong with my IKEv2 configuration, and how can I fix it?

I've attempted to set up an IKEv2 VPN on my DigitalOcean server following this guide. So far, I get a connection, but I can't seem to send any data through it at all. I'm not sure what's going on or ...
1
vote
1answer
24 views

How to redirect traffic through IPv6 IPSec (strongswan) gateway?

I'm trying to set up IPSec secured connection to the gateway. Have three hosts: A: eth1 - fec0:1::1/64 B: eth1 - fec0:1::2/64 eth2 - fec0:2::2/64 which is gateway between A and C; forwarding is set ...
1
vote
0answers
15 views

AnyConnect on ASA5520 licensing required? [duplicate]

longtime reader, first-time poster. I'm currently working in a small shop and I am new to the Sys Admin role. We pay our ISP a lot for our VPN and we are looking for a different provider. We are ...
0
votes
0answers
40 views

How to debug issues with IPSec VPN using Shrewsoft's VPN client

I am trying to connect (from an ubuntu machine) to a IPSec VPN with pre-shared key using Shrewsoft's VPN (ike) client (just because there is an exported configuration for this client available, there ...
0
votes
0answers
14 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
0
votes
2answers
96 views

How do you reset the default “IP Security Policies on Active Directory” back to their factory settings?

How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?
0
votes
1answer
66 views

Is using the “IP Security Policies on Active Directory” settings in Group Policy a best practice?

Is using the "IP Security Policies on Active Directory" settings in Group Policy a best practice? I recently created a new GPO and assigned the "Server (Request Security)" policy. Almost instantly I ...
1
vote
0answers
11 views

IPsec and pinging rightsubnets

I have been racking my brain about this. I have openswan running and I have been able to get tunnels up. Unfortunately, when I try to ping computers on my right subnet, I am not able to get any ...
0
votes
1answer
53 views

pfsense ipsec vpn to amazon aws not connecting

I'm trying to set up an ipsec vpn from our DC networks to our amazon vpc, so a site2site aka network to network connection. For this I've set up pfsense 2.2.6 and gave it a public IP on a WAN ...
0
votes
0answers
59 views

OpenSwan VPN IPSEC Tunnel Connection

I was hoping this website would be able to help with solving this issue since I've been running in circles on my end! I am using OpenSwan to setup an IPSec tunnel between a VPN server on Rackspace ...
0
votes
1answer
64 views

PFSense IPSec and NAT

Due to bad design and hosting provider constraints I have a network where I don't control the router. Our network: 172.16.0.0/12 - LAN x.x.x.0/24 - WAN (Router is connected to the switches, we have ...
2
votes
0answers
34 views

Dual path VPN on ASA 9.2

We have two sites that are joined by a VPN over two WAN links, one primary and one backup only. The VPN endpoints are a pair of active/standby ASA clusters at each site. Each site also has multiple ...
0
votes
0answers
31 views

IPv4 over IPv6 IPsec tunnel

I've got two Cisco 2811 routers, both with a global static IPv6 adress, and an IPsec tunnel between them (using VTIs). Is it possible to send IPv4 traffic over this tunnel? The relevant parts of the ...
1
vote
0answers
24 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...
0
votes
0answers
25 views

Linux route issue when using IPSEC tunnel with PPTP client

There are network configurations of my box: The interface pptp-vpn is a ppp connection to a remote VPN. 192.168.6.229 is a IPSEC tunnel IP of my cell phone. eth0.2 is the wan interface. I try to ...
0
votes
0answers
38 views

StrongSwan IPsec and NAT

I have an IPSec tunnel to the network of our customer running on a Linux box with StrongSwan. On there I have to do source NAT to translate our network addresses to the subnet they assigned us. This ...
0
votes
0answers
15 views

IPSec not getting established using digital certificates with ipsec whack CLI

I am trying to establish IPSec SA by giving run time commands to Pluto but it fails in negotiation phase by not exchanging the certificates. Command used on server : ipsec whack --name hello ...
3
votes
3answers
170 views

VPN Tunnel, subnets conflict

I'm trying to create IPsec VPN Tunnel between two sites. Site 1 Fortigate 140D Local subnet : 192.168.1.0/24 Site 2 Fortigate 100D Local Subnet : 192.168.2.0/24 But when I try to create it, it ...
2
votes
0answers
62 views

Strongswan RA and Strongswan site-2-site with ASA

Task: Establish communication between remote clients (192.168.79.0/24) that are connecting to VPN server (on Ubuntu) and corporate network (10.1.2.0/24) connected to Cisco ASA. Schema: ...
2
votes
2answers
41 views

Issue with Cisco ASA 5515-X VPN Connection

I had an existing setup with a 5515-X serving as my firewall and VPN, which worked fine. Since moving to a new location, and thus a new outside interface IP, I can successfully connect to the VPN, but ...
0
votes
0answers
16 views

Why server/client digital certificates are required on server and client for negotiation?

I am trying to create a IPsec channel between my server and client using digital certificates authentication. Now, if I import server/client certificates in the server ipsec database and server/client ...
0
votes
0answers
42 views

strongSwan site2site to a docker subnet

The problem I'm running docker on a public server and want to connect the subnet of the docker containers to a private subnet on a remote site and use strongSwan with a modified IKEv1 net2net PSK ...
0
votes
0answers
44 views

migrate from openswan to strongswan (linux - windows ipsec)

i have working openswan ipsec on linux router in our office, which is connected to few remote windows 2008/2012 servers using psk. i need to migrate it to strongswan ipsec (4.5.2). this is my ...
0
votes
0answers
18 views

ifconfig dont shows any tunnel (ipsec)

Im trying to connect to networks with ipsec. But its not working, after install and configure ipsec when I execute this command service ipsec start, I dont get any error, but with ifconfig none tunnel ...
0
votes
1answer
62 views

Connect a Zywall USG200 to Windows Server 2012R2 based IPSEC/l2tp VPN

I'm trying to build a network configuration where clients can connect to some servers in a VPN via a Zywall USG 200 router/firewall. the network schema The architecture is composed by a windows ...
3
votes
1answer
64 views

Why is scp so slow on my network?

scp is slow in our company network. For testing, I am copying a file from a remote server which is connected via IPsec between the routers. When using scp -vv I get lots of messages like this: ...
0
votes
0answers
20 views

Ipsec one way traffic (libreswan / openstack)

'm currently trying to setup an IPSEC tunnel to allow communications between my on site subnet 192.168.1.0/24 and my openstack cloud subnet 192.168.4.0/24. To do so, I have a Debian jessie with ...
0
votes
0answers
40 views

How to troubleshoot strongswan error: “unable to allocate SPIs from kernel”?

I am trying to setup an IPsec tunnel to a Juniper security gateway using a strongswan client on a Linux machine and preshared keys. This is what I get when trying to bring the connection up: ...
0
votes
1answer
65 views

Enable IKE tracing on windows 10 VPN

I have an IKEV2 VPN setup (including certs) that worked fine on windows 7. On Windows 10, the same config fails with 'IKE authentication credentials are unacceptable'. Server is StrongSwan. The last ...
0
votes
1answer
46 views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...
0
votes
0answers
13 views

configure SNAT on traffic over IPSEC VPN on cisco router

I have a site to site VPN to a cisco router from an openswan on linux. 10.1.1.0/24===177.19.158.163[+S=C]...189.125.24.142<189.125.24.142[+S=C]===172.16.100.0/24 The VPN is working properly. But ...
1
vote
1answer
60 views

Linux GRE keep alive

What are possibilities in Linux kernel (?) to work with Cisco endpoint encorporating GRE keep-alives? We have GRE IPsec tunnel set up with another company. We would like to have backup tunnel which ...
2
votes
0answers
28 views

Manually specify a tunnel gateway for an IPSec VPN Connection (ASA)

I have currently got several VPN's on-premise that are setup on the outside interface and using the default gateway on the interface as an originating source of the VPN tunnel. Although the outside ...
0
votes
1answer
51 views

openSwan VPN is up can't ping remote subnet

When I run the command ipsec auto status i get the following output: ...... 172.16.255.1/32===104.131.13.155<104.131.13.155>:17/1701...41.203.65.124<41.203. ...
1
vote
0answers
31 views

What could cause racoonctl to show a Phase2 count higher than the number of ports racoon is listening on?

In my setup I have some EC2 instances in different regions linked by GRE tunnels, using ISAKMP via racoon. This setup is inherited, so bear with me if I fumble with terminology. Sometimes I get weird ...
0
votes
0answers
41 views

Routing Outbound Traffic through IPSEC Tunnel

I've been trying my hardest to figure this out for the past week, and think I have a general idea of what's going on, but can't figure out how to solve it. We have an OpenSwan server in an AWS VPC ...
2
votes
0answers
69 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
1
vote
1answer
36 views

IPSec Tunnel goes down during long periods of inactivity

I have 2 AWS regions I have connected using an OpenSWAN IPSec tunnel. This works great in our production environment but in our test environment where 1 of the regions has long periods of inactivity, ...
0
votes
2answers
76 views

How to configure Fortigate 60D as L2PT/IPSEC client

I have a firewall Fortigate 60D and I need to create a tunnel to a L2TP/IPSEC server, so the firewall has to act as a client. Is it possible? I configured the L2TP/IPSEC server on a Linux Debian ...
0
votes
0answers
28 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...