IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
1answer
17 views

Creating a separate PPTP VPN VLan in network with tagging possible?

I have a gateway to gateway PPTP VPN that I would like to connect to my network and have it on a VLAN where it is shared to a VLAN tagged wireless router. This way I can have two wireless AP's where ...
0
votes
0answers
13 views

iked mutex lock issue

On Ubuntu 15.04, fresh install of iked with these requirements installed: cmake libqt4-core libqt4-dev libqt4-gui libedit-dev libssl-dev checkinstall flex bison results in: $ sudo iked iked: ...
0
votes
0answers
21 views

Ubuntu 14.04 Cant connect to openswan/xl2tpd/IPsec VPN via iOS

I am setting up a VPN using openswan, xl2tpd, and IPsec and i am getting issues with connecting via an iOS device with the error "You were disconnected by the communication device". This is configured ...
0
votes
1answer
27 views

Route all traffic through StrongSwan VPN

I'm new to this - please excuse my ignorance. I have looked through many other similar questions to no avail. Trying to set up a StrongSwan VPN such that client C can connect to host H, be assigned ...
0
votes
0answers
20 views

How to forward traffic from ipsec host to local network?

Could anybody explain how to implement forward traffic from host in IPsec to local network. On my server I have 3 network cards: red0 - extern orange0 - dmz green0 - local IPsec builds through ...
0
votes
0answers
50 views

Windows Phone 8.1 client unable to connect to Ubuntu VPN server (L2TP with IPsec)

I have set up an L2TP + IPsec VPN server on my Ubuntu server (14.04.2 64bit) using openswan. I got it working with Android and Windows 8.1 clients, though Windows 8.1 required some tweaking. When ...
0
votes
0answers
30 views

Self Signed Certificate for RDP over Internet - Why Not?

I was recently informed on SF that using a self-signed certificate for RDP over a public interface is not recommended. In this particular scenario, I'd like to understand more about why. The ...
0
votes
1answer
94 views

IPSec VPN Fortigate Phase 2 stuck

Trying to setup a VPN connection to Office Fortigate but I can't pass phase 2. Received info from sysadmins: PSK IKE v1 Aggressive mode Phase1 3DES-SHA1 DH group 5 Key lifetime 28800 XAUTH PAP ...
2
votes
0answers
31 views

Does Windows support IPComp?

The title says it all. I've configured an IPSec IKEv2 connection between a Strongswan server and a Windows 7 workstation and I'd like to use compression if possible. The config on both sides is dead ...
0
votes
0answers
20 views

It is possible to make an IPSEC VPN Bonding?

I wanted to know if It is possible to bound two IPSEC tunnels ? I've already done a VPN bonding of SSH tunnels, but It will be better if I use IPSEC.
0
votes
0answers
28 views

IPsec, PepVPN, SpeedFusion Hot Failover and SpeedFusion Bonding (PepLink Load balancer)

I was looking for the difference between IPsec, PepVPN, SpeedFusion Hot Failover and SpeedFusion Bonding (PepLink Load balancer) but i can't find something well explained. I'll be glad if someone can ...
-2
votes
2answers
91 views

Networking VPN expert out there? Should Remote VPN “Client” be pingable/reachable FROM the VPN server?

I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER. BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
0
votes
1answer
17 views

Quick mode negotiation failed - no policy configured - Windows 2008 R2?

I am establishing an IPSEC Tunnel from my office to Amazon Web Services VPC, using the windows 2008 R2 machine as the "customer gateway". I configured my machine using this guide here. However the ...
0
votes
0answers
69 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
1answer
40 views

IPSEC one way issue

We have a frustrating issue and I'm hoping someone here can see what I'm missing. We have a small hub and spoke network between 4 sites and a datacenter, each location connecting to each other ...
0
votes
0answers
55 views

racoon Road Warrior VPN Client - Tunnel Established but no ping

I'm trying to configure a road warrior VPN client on a Linux distribution. Here my configuraiton : Client VPN LINUX - 1.1.1.1 - INTERNET - 2.2.2.2 - FireWall - 10.0.0.0/8 I wish to create a tunnel ...
0
votes
0answers
45 views

IPSec site to site VPN

I am trying to connect our server to cisco site-to-site IPSec VPN with one of our partners servers, they asked us to implement the settings they gave us into our router, but actually we don't have ...
1
vote
1answer
42 views

Seeing Who is Logged into LibreSwan VPN

We recently setup a LibreSwan VPN and for the most part it is working great. One thing we are having some trouble with is trying to see who is currently logged in. I found a solution for seeing ...
0
votes
0answers
26 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
0
votes
0answers
56 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
10
votes
2answers
207 views

20Mbps WAN limited to 10Mbps over IPSec Tunnel

We recently upgraded a remote site from a 10/10Mbps fibre to a 20/20Mbps fibre link (it is fibre to the basement, then VDSL from the basement to the office, roughly 30 meters). There are regular large ...
0
votes
0answers
21 views

strongSwan on Angstrom

My problem is to establish a VPN tunnel between cRIO 9068 and a Cisco router. To accomplish this task I was planning to install strongswan on cRIO (opkg install strongswan). I have installed it on ...
0
votes
0answers
119 views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
67 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
0
votes
0answers
23 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
1answer
771 views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...
0
votes
0answers
91 views

Strongswan transport mode ipsec within subnet

Is there any way to configure strongswan to automatically start encryption to a given subnet rather than specific host? For example, if I know that my hosts at w.x.y.z/28 will be have the same PSK ...
0
votes
2answers
112 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
0
votes
0answers
250 views

VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel

I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0
votes
0answers
58 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?
3
votes
0answers
51 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
0
votes
0answers
140 views

Configuring OpenSwan for IKEv2 (via iOS8)

I'm trying to configure OpenSwan (running on Ubuntu) to accept connections from an iOS8 device. I receive the following logs, which seems to indicate the server denies IKEv2 connections (even though ...
1
vote
1answer
69 views

What's an inexpensive way to connect 3 sites over VPN, each with dynamic IPs?

I have 3 networks that I would like to connect to each other over VPN (IPSec or OpenVPN). Each site has a single dynamic public IP address and is running NAT. How can I connect each of the sites ...
0
votes
1answer
169 views

Azure Site-to-Site VPN to Cyberoam cannot ping Azure VM from local VPN PC

I've set up Azure site-to-site VPN to Cyberoam following these instructions. The problem is that I can ping the local PC through the Azure VM but I cannot ping/access the shared folder/rdp of the VM ...
0
votes
0answers
34 views

L2TP daemon server multiple IP

I have VPS with 3 public IP - Debian 7. I would like to have 3 L2TP damemons (one ip each) NATing traffic to each ip. Something like this l2tp_multiple_public_ip_diagram. I have set up l2tp daemon for ...
0
votes
0answers
23 views

Multihomed Windows 2003 IPsec tunnel source IP address

As Windows 2003 EOL comes near, I'm starting to disband old machines still active in my network. Now one of these is in a branch office and used as RRAS server just for servicing a VPN connection to ...
0
votes
1answer
481 views

No traffic routing between Cisco CSR1000v and Strongswan IPSec end points on AWS

I am trying to configure a Cisco CSR1000V on AWS to create an IPSec VPN with Strongswan 5.1.2 (on Ubuntu 14.04) on another AWS machine. I can establish the VPN from the Strongswan end and it appears ...
1
vote
1answer
107 views

Strongswan to OpenBSD isakmpd IPSec VPN

At my end I have a StrongSwan installation, connecting to an IPSec VPN hosted by an OpenBSD box running stock isakmpd. The OpenBSD box already hosts multiple other associations, but the StrongSwan box ...
0
votes
0answers
121 views

MikroTik L2TP\IPsec along with IPsec tunnels

How to configure L2TP\IPsec whit IPsec working along? I have looked many tutorials, but none of them was explaining how to setup L2TP\IPsec while IPsec tunnels are running. L2TP\IPsec VPN will be used ...
0
votes
1answer
223 views

Use Openswan / IPSec on Ubuntu server to connect to existing Openswan VPN - NAT broken

I have an existing Openswan VPN, all working fairly well with Windows, Mac and Phones. [Office 192.168.0.0/24]---[VPN A.B.C.D]----[Internet]---[Home Routers (NAT), Dynamic IPs]----[Workstations] Now ...
0
votes
0answers
22 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
1
vote
2answers
37 views

Is IPSEC used by default on Win7/'08-R2 NFS (TCP139/445&UDP137/138)

We'd like to share files through an Win08R2 EC2 instance with clients (Windows 7 machines) through the default NFS (i.e. avoiding 3rd party software like Dropbox/Aws-s3 etc.). Encryption at rest is ...
0
votes
1answer
59 views

Difference between ISAKMP exchanges types IKE_SA_INIT and Identity protection

I have some Wireshark traces to see how ISAKMP works. This traces were taken from peers when a IPsec tunnel is stablished. It seems that the traces display a different IPsec implementation. When IKE ...
1
vote
0answers
207 views

FreeBSD L2TP/IPsec not routing traffic to vpn server

I have configured a VPN server on my FreeBSD server, it all seems to be running, but the VPN traffic is not routing through to the local VPN server and I cannot figure out as to why. So my question ...
2
votes
1answer
92 views

Remote end of IPSec transport is 'permenantly glued' to loopback after some messing around with GRE

So, I have managed to get IPSec transport over ESP between two hosts using racoon: the 'local' host, 1.1.1.1, and the remote, 2.2.2.2. It only worked for ICMP (other traffic ignored the SA), but ...
0
votes
0answers
33 views

openswan - computing tunnel count?

When I do an /etc/init.d/ipsec status I see: pluto pid 10435 12 tunnels up some eroutes exist Question is how can I compute ahead of time how many tunnels will exist? I have one site-to-site that ...
1
vote
1answer
71 views

Expose a machine on the far side of a VPN

We're using a VPN to connect a remote office to our main office, and a machine in the remote office needs to expose port 22 to the outside internet. Complications: The main office has a fixed IP ...
0
votes
0answers
21 views

Racoon: inherit configurations

Starting to get acquainted with ipsec-tools and racoon, I'm wondering how stage 1 configuration inheritance works. With a sample configuration like this: remote "ParentConfig" { proposal { # ...
0
votes
1answer
115 views

IPsec transport mode and MTU

[Similar to Right way to set the MTU of an IPsec Client (Linux/Racoon), but different in that there is no router on the responder side] I have a setup where machines in a local network need to talk ...
0
votes
0answers
146 views

Right way to set the MTU of an IPsec Client ( Linux/Racoon)

Here's the network topology : (PC1:IPsec Client)eth0---Internet CPE---((Internet))---Internet CPE---(PC2:IPsec Server) I've set up an IPsec Internet Gateway : PC1 sends all traffic, encrypted in an ...