IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

2
votes
0answers
11 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
1
vote
1answer
23 views

IPSec Tunnel goes down during long periods of inactivity

I have 2 AWS regions I have connected using an OpenSWAN IPSec tunnel. This works great in our production environment but in our test environment where 1 of the regions has long periods of inactivity, ...
0
votes
2answers
14 views

How to configure Fortigate 60D as L2PT/IPSEC client

I have a firewall Fortigate 60D and I need to create a tunnel to a L2TP/IPSEC server, so the firewall has to act as a client. Is it possible? I configured the L2TP/IPSEC server on a Linux Debian ...
0
votes
0answers
10 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
0
votes
0answers
9 views

IPSEC over LAN on Ubuntu [on hold]

Can I set up an IPSEC tunnel over a LAN with Ubuntu? The two machines are on the same LAN and have the same public IP address.
1
vote
1answer
15 views

RV325 to RV320 site to site ipsec tunnel

Gateway to gateway tunnel from RV325 to RV320 (either direction) won't connect. I can't find any sort of error log. Both are WAN1 (only one connected) and IKE PSK. Both local and remote groups ...
0
votes
0answers
8 views

Network ACL configuration for IPsec in AWS

Running in to a bit of a brick wall with this: I have 2 AWS VPC's which I have peered using an IPSec VPN. Traffic works using this tunnel no problems. I am now looking at introducing NACLs in the VPC ...
0
votes
1answer
17 views

How to setup this IPSec VPN?

I have a main network (Net-A), there my work should be done there. On the other network, I have host server where it can reach to Net-A. On the host server, I'll create a couple of virtual machines, ...
0
votes
1answer
46 views

How to start and stop a libreswan connection

I have a connection configured on my libreswan instance on two machines. The connection start automatically when I start the pluto daemon, I have try other settings, but the connection also starts if ...
0
votes
1answer
27 views

Can't ping public endpoints when IPSec tunnel is up

I'm using openswan to link two machines via IPSec. The tunnel comes online fine and I have connectivity to each endpoint via the VPN. However, when the tunnel is up, I lose connectivity to the ...
2
votes
0answers
69 views

Dynamically enable IPSec for IP connections between many servers

For a given list of internet server (example): S001 - 45.67.89.12 S002 - 67.78.90.34 S... S999 - 98.76.65.54 I want to talk from each server to any other server to any TCP service using the public ...
0
votes
0answers
5 views

Unable to Apply Qos Policy map

I have a 20Mbps MPLS connection , when trying to apply the Qos Policy Map (wich is 60% for Silver traffic , and 40% for gold Traffic), i get the Following Error : "I/f FastEthernet0/0 class DSCP-AF31 ...
0
votes
0answers
23 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
30 views

What is the ip xfrm tmpl and how is it different than an SA?

The Linux ip xfrm policy command creates an IPsec policy, associating particular traffic with an SA. It uses something called a "template" (tmpl), which, as far as I can tell, is just a means of ...
0
votes
0answers
94 views

Strongswan VPN: no matching peer config found

I'm trying to setup a Strongswan VPN but can't get it to work. It does not find a matching peer config and I don't know why: LOG: [ENC] <1> generating IKE_SA_INIT response 0 [ SA KE No ...
3
votes
2answers
111 views

Cannot ssh to remote system after enabling IPSec

I have created two VMs on top of base OS and have enabled IPSec between the two VMs. Now the problem is as soon as IPsec starts and SA is established between the two VMs, I am not able to ping or ssh ...
3
votes
1answer
36 views

Cisco ASA 5505 L2L vpn issue

this is my setup I already have a working L2L VPN between the sites I added the 10.10.0.0/24 to the object-groups that defines the internal network on the 1615 ASA And as a remote subnet on the ...
0
votes
0answers
17 views

Ipsec not working, cannot ping from server

I have a ubuntu server with public ip and want to connect to some network with ipsec tunnel. I can establish the connection (tunel), but when I try to ping the internal network PCs, there is no ...
0
votes
0answers
18 views

RRAS Demand Dial Vs IPSec /w Connection Rules

Whats the difference between using the 'demand dial' feature of RRAS when establishing VPN's versus just using Windows Advanced firewall connection rules to establish IPSec connectivity between two ...
0
votes
0answers
45 views

Setting Up StrongSwan on CentOS 6 to Connect to Amazon VPC VPN

NB: This questions pertains to connecting Strongswan to AWS hardware VPN, NOT between two servers running Strongswan I tried following the tutorial here: http://www.mynameistoby.com/ It won't work ...
0
votes
0answers
12 views

IPSec host2host transport-mode

I want to secure all traffic between our servers that are distrubuted through various datacenters. We don't have VLANs, just plain Debian 7 & Debian 8 based Virtual Private Servers (around 20), ...
0
votes
0answers
29 views

Change IPsec source port on windows. (Multiple clients behind NAT use same source port)

I have the exact same problem as this question, but I can't upvote it/comment on it: Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time How ...
1
vote
0answers
52 views

Openswan IPSec VPN on AWS tunnel established but no traffic

I am setting up a tunnel with a telco using AWS/VPC/EC2/Centos7/Libreswan and have been stuck for weeks. Appreciate any help! I have 192.168.16.73 (VPN GW, EIP 52.76.x.x) and 192.168.16.116 ...
1
vote
1answer
32 views

How to debug ip xfrm rules

I created ip xfrm rules on 2 machine and trying to pass traffic through the ipsec tunnel. The packet comes into the other end, encrypted, and disappears. I traced them through iptables, and here is ...
0
votes
0answers
6 views

IPsec Tunnel Deterministic Delay

I setup a site-to-site IPSec tunnel using OpensWan. I notice a constant delay of 15sec before the firewall gives back the response to the application running on a host behind it. 17:50:41.638828 IP ...
0
votes
0answers
11 views

IIS to SQL Server IPSec configuration

I'm trying to configure 2 servers on a VPC on Amazon AWS to use IPSec. One server has Win2008 R2 with SQL Server 2008 and the other one is a Win 2012 R2 with IIS. I want to secure the connection ...
2
votes
0answers
25 views

Windows Firewall Connection Security, require encryption with IPv6?

I've set up Windows Firewall on a Server 2012 R2 to always require IPSec Encryption for all Connection Security Rules. I've then specified Inbound Rules for specific ports and services, and ...
0
votes
1answer
19 views

AWS Connecting 2 regions

I've seen ways of connecting 2 regions to be a private network using AMI's but is there not a way to do this via VPC or DirectConnect. At the minute we have: eu-west-1 (11 servers) on ...
1
vote
1answer
76 views

Running an IPsec client VPN server within Azure

I'm currently exploring my options for running a client VPN server within Azure. I've examined the Point-to-Site VPN functionality, and it seems to be more of a method for administrators to dial in, ...
1
vote
0answers
27 views

internet access for system over multiple hops of ipsec using GRE and OSPF

I have the following setup: linux client @ 172.16.10.68 linux gateway @ 172.16.10.69, ipsec tunnel to aws box #1, gre tunnel 10.254.0.0/30 aws box #1, ipsec tunnel from linux gw, ipsec tunnel to ...
1
vote
0answers
28 views

Connect pfsense and VPC in AWS by ipsec tunnel

I'm trying to connect my pfsense box with AWS VPC by ipsec tunnel. I read couple of tutorials and all looks good. But ... Yes, always there is some but. When only one person is working then all is ...
0
votes
0answers
36 views

How to copy TOS/QoS field from IPsec payload to outside tunnel packet?

Using e.g. strongswan to build an IPsec tunnel (i.e. tunnel mode, ESP), how do I copy the TOS/QoS/DSCP field from the unencrypted original packet to the outer wrapping packet? There is this ...
2
votes
1answer
161 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and not a third-party. Two hosts: 10.0.2.10 ...
0
votes
1answer
28 views

Packet is not entering IPSEC tunnel Juniper SRX

IPSec tunnel to Amazon cloud doesn't work. My local subnet is 192.168.42.0/24. I'm trying to access Amazon cloud private subnet 172.0.3.0/24. My firewall model is Juniper SRX550. Tunnel is up (I can ...
-1
votes
1answer
57 views

Strongswan - IOS Roadwarrior cannot access hosts on the internet

I'm having a rather strange problem with a Strongswan IPSec VPN not being able to access hosts on the internet. I can connect to the VPN fine, and I can access hosts on my local network. I also ...
1
vote
0answers
66 views

AWS VPC failed communicating through VPN Tunnel

I have created a VPC scenario 3 in AWS. Configured ipsec vpn site to site between aws and cyberoam. Tunnels are up. I have added the security groups to the ec2 instance in private subnet to give full ...
0
votes
0answers
5 views

Cisco IPSec OSX multiple user accounts

Is it possible to force a Cisco IPSec Connection to prompt for UN/PW before login on OSX 10.10? I want to store the VPN Connection on the OSX machine, but I want users of that device to enter their ...
1
vote
1answer
45 views

Windows 8.1 IPSec by GPO - no firewall rules generated

I am seeing very strange behavior on Windows 8.1 clients when attempting to configure IPSec rules via group policy. I am configuring several rules through several policies, to be able to target the ...
1
vote
1answer
35 views

IPSec: is it possible to check that a packet passed via IPSec tunnel? [duplicate]

In our deployment we have two servers. I want to connect it via host to host VPN: Host-To-Host VPN Using Openswan On one server we have JMS broker on the second server we have JMS client and I want ...
0
votes
0answers
21 views

Openswan and nat_traversal

I got a problem with openswan and nat_traversal option. If it is set to no, my tunnel goes up but i cannot exchange packets with the peers because i'm behind a router. If it is set to yes, a lot of ...
0
votes
0answers
41 views

Use RRAS Assigned Static IP for TCP

I'm using RRAS on Windows Server 2012 to establish a VPN client connection from a server I have offsite and my home computer. What I would like to do is use the RRAS assigned static IP that I am ...
2
votes
1answer
127 views

How to set up routes for IPSec VPN where VPN endpoint itself must be able to contact remote network

I have a situation identical to the question at IPSec VPN : Traffic not routing correctly (however I don't seem to be able to contact that user directly, nor can I place a comment on that question - ...
1
vote
1answer
39 views

GRE - overlay network

I am renting a set of dedicated servers, and they only have a single interface to internet. However, for a lot of use cases, I would like my servers to communicate through a private IP network. For ...
0
votes
1answer
111 views

L2TP VPN without certificates between Windows XP and ZyWALL USG 200

I'm trying to configure a ZyWALL USG 200 firewall to let Windows XP remote clients (dynamic IP address) to connect to the workplace network with a L2TP VPN. I don't want to use certificates, a common ...
1
vote
0answers
228 views

Connect Ubuntu 14.04 with Strongswan to Microsoft Azure

I want to connect my Ubuntu 14.04 server with Strongswan to Microsoft Azure Gateway. I only want to establish a connection between Azure and that Ubuntu server. In Azure I configured a dynamic ...
1
vote
2answers
54 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
1
vote
0answers
217 views

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few ...
1
vote
1answer
237 views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways ...
0
votes
0answers
180 views

Strongswan: clients can connect to server but no internet access

I've set up an ipsec server and after a while I could connect to it from my android device. but there is no internet connection in client side. I have also added NAT rules to forward traffics from ...
0
votes
0answers
202 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 ...