IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
0answers
28 views

IPSEC passes only ICMP

I have FreeBSD and Mikrotik with IP 1.1.1.1 and 2.2.2.2. Local subnets are 192.168.1.0/24 and 192.168.2.0/24. Firewall is disabled for testing. I am bringing up gre tunnel between them. FreeBSD: ...
0
votes
0answers
12 views

Using OpenSSL Certificate with Windows Firewall Connection Security

I'm attempting to set up an IPSec transport mode connection between Windows 7 machines, using Windows Firewall Connection Security, authenticating using certificates. I can get it to work correctly by ...
1
vote
1answer
26 views

Azure vpn is establish but causing delay or no traffic sometimes

We are trying to establish VPN Hillstone FW (device) with Azure. VPN details are: VPN type: Policy based Gateway Subnet: 192.168.50.10/29 default subnet: 192.168.50.0/29 VM inet Address: ...
0
votes
0answers
10 views

IPSEC VPN point-to-site connection works but remote network is not rechable

I have a probelm with ipsec configuration. I have to connect to remote network (client! to site), where is Fortigate firewall. On left side (where I have access, this is my dedicated server), I have a ...
0
votes
1answer
40 views

Connecting to a FortiGate VPN from a remote Linux machine via OpenSwan

Here's the setup: I have a FortiGate unit on a business network, which has a FortiGate VPN set up. Machines on a remote network that can run FortiClient (Windows and Mac machines) have no problem ...
0
votes
0answers
28 views

IPSec VPN between Fortigate 5.2 and Linux with ipsec-tools - data does not pass

We have an IPSec VPN tunnel between Fortigate device and Linux box running racoon and ipsec-tools. The setup worked in Fortigate 4.X, but with 5.2 the SAs are negotiated OK and no traffic can be ...
0
votes
1answer
12 views

IPSEC VPN site-to-“alias”

I am trying to connect my CentOS (CentOS release 6.7) server to a 3rd party VPN so traffic can be routed between my Apache instance listening on an aliased private IP (192.168.253.1), through the ...
0
votes
1answer
13 views

How to enable debug logs in OpenSwan?

I use OpenSwan IPSec tunnel on CentOS 6.7. I have added the following configuration in /etc/ipsec.secrets according to this link: http://linux.die.net/man/5/ipsec.conf config setup plutodebug=all ...
1
vote
1answer
45 views

What configuration issue is preventing Samba Network Shares from being visible over VPN?

I set up a VPN using L2TP and IPSEC (with LibreSwan) using this script: https://github.com/hwdsl2/setup-ipsec-vpn The only change I had to make was to change the instances of 'eth0' to the new format ...
0
votes
0answers
21 views

IPSec - Is it possible to have remote access clients (road warriors) all behind the same NAT device?

This is a topic that I find mixed information on. Is it possible to have two IPSec road warriors that are behind the same NAT, even with an ASA as the VPN endpoint? I have been trying with Libreswan ...
0
votes
1answer
17 views

How do I route traffic over the a tun0 device (IPSec VPN connection)?

I've set up an IPSec VPN tunnel between my laptop and work. The tunnel gets established, but routing does not. The relevant part of ifconfig is : eth0 Link encap:Ethernet HWaddr ...
0
votes
0answers
23 views

Forwarding UPnP, DLNA traffic via computer to server

I'm about to tear out what is left of my hair with this. I was able to finally see traffic coming through, but not working in full, when using socat but this setup is not ideal. The idea: I have a ...
0
votes
0answers
26 views

Two road warrior clients behind the same NAT device (IKEv2, StrongSwan, LibreSwan)

I have an IKEv2 VPN that is set up and works properly, however I run into issues when I have two road warriors behind the same NAT device. Both devices connect however the second device seems to kick ...
1
vote
0answers
24 views

ipsec: Can't authenticate: no preshared key found for

I'm using Openswan with ipsec and ipsec keeps complaining about the shared-key not being present. I'm running Ubuntu 14.04 . I'm just experimenting on a couple of internal systems since I'm new to ...
0
votes
1answer
19 views

Why does 'ipsec statusall' not show any connections?

I've finally been able to get a tunnel between my computer (strongswan) and a Zyxel Zywall 110 up and running. I'm connecting using certificates, and judging from the logs the actual VPN connection ...
0
votes
0answers
9 views

Is IPSec + L2TP doable on Ubuntu 14.04?

We just got a new firewall, and our old PPTP VPN has been replaced with a new IPSec + L2TP VPN. Setting up VPN connections for Windows + Mac users is a breeze. Getting it to work on Ubuntu is hard (at ...
0
votes
0answers
30 views

How to view l2tp/ipsec clients

I have an l2tp/ipsec server. How I can list who is connected to server? I used to use last for ppp users using pptp. but that not working. I tired who too, but no luck. The only option I have is ...
1
vote
1answer
28 views

Route ipsec to openvpn with iptables

I am not a very experienced user but I do have determination, after a week with no progres it is getting rough. I have two NIC, one facing to the internet and one towards the internal network. Both ...
0
votes
0answers
18 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...
0
votes
0answers
12 views

IPsec tunnel, receiving data with wrong destination address

I've managed to stablish an IPsec tunnel using strongswan to a Cisco router. My server is an Azure VM, so it is behind NAT. I do not have control over the Cisco router. This is my /etc/ipsec.conf: ...
0
votes
0answers
26 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
1
vote
0answers
17 views

L2TP/IPsec with certificates: INVALID_KEY_INFORMATION

I'm trying to configure a L2TP/IPsec client on Centos 7, the packages are: libreswan-3.15-5 xl2tpd-1.3.6-8 The server is MS Windows I cannot bring up the vpn. Error are as follows: ● ...
1
vote
1answer
37 views

How to redirect traffic through IPv6 IPSec (strongswan) gateway?

I'm trying to set up IPSec secured connection to the gateway. Have three hosts: A: eth1 - fec0:1::1/64 B: eth1 - fec0:1::2/64 eth2 - fec0:2::2/64 which is gateway between A and C; forwarding is set ...
1
vote
0answers
15 views

AnyConnect on ASA5520 licensing required? [duplicate]

longtime reader, first-time poster. I'm currently working in a small shop and I am new to the Sys Admin role. We pay our ISP a lot for our VPN and we are looking for a different provider. We are ...
0
votes
0answers
53 views

How to debug issues with IPSec VPN using Shrewsoft's VPN client

I am trying to connect (from an ubuntu machine) to a IPSec VPN with pre-shared key using Shrewsoft's VPN (ike) client (just because there is an exported configuration for this client available, there ...
0
votes
0answers
16 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
0
votes
2answers
114 views

How do you reset the default “IP Security Policies on Active Directory” back to their factory settings?

How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?
0
votes
1answer
88 views

Is using the “IP Security Policies on Active Directory” settings in Group Policy a best practice?

Is using the "IP Security Policies on Active Directory" settings in Group Policy a best practice? I recently created a new GPO and assigned the "Server (Request Security)" policy. Almost instantly I ...
1
vote
0answers
15 views

IPsec and pinging rightsubnets

I have been racking my brain about this. I have openswan running and I have been able to get tunnels up. Unfortunately, when I try to ping computers on my right subnet, I am not able to get any ...
0
votes
1answer
75 views

pfsense ipsec vpn to amazon aws not connecting

I'm trying to set up an ipsec vpn from our DC networks to our amazon vpc, so a site2site aka network to network connection. For this I've set up pfsense 2.2.6 and gave it a public IP on a WAN ...
0
votes
0answers
70 views

OpenSwan VPN IPSEC Tunnel Connection

I was hoping this website would be able to help with solving this issue since I've been running in circles on my end! I am using OpenSwan to setup an IPSec tunnel between a VPN server on Rackspace ...
0
votes
1answer
74 views

PFSense IPSec and NAT

Due to bad design and hosting provider constraints I have a network where I don't control the router. Our network: 172.16.0.0/12 - LAN x.x.x.0/24 - WAN (Router is connected to the switches, we have ...
2
votes
0answers
35 views

Dual path VPN on ASA 9.2

We have two sites that are joined by a VPN over two WAN links, one primary and one backup only. The VPN endpoints are a pair of active/standby ASA clusters at each site. Each site also has multiple ...
0
votes
0answers
54 views

IPv4 over IPv6 IPsec tunnel

I've got two Cisco 2811 routers, both with a global static IPv6 adress, and an IPsec tunnel between them (using VTIs). Is it possible to send IPv4 traffic over this tunnel? The relevant parts of the ...
1
vote
0answers
24 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...
0
votes
0answers
26 views

Linux route issue when using IPSEC tunnel with PPTP client

There are network configurations of my box: The interface pptp-vpn is a ppp connection to a remote VPN. 192.168.6.229 is a IPSEC tunnel IP of my cell phone. eth0.2 is the wan interface. I try to ...
0
votes
0answers
47 views

StrongSwan IPsec and NAT

I have an IPSec tunnel to the network of our customer running on a Linux box with StrongSwan. On there I have to do source NAT to translate our network addresses to the subnet they assigned us. This ...
0
votes
0answers
23 views

IPSec not getting established using digital certificates with ipsec whack CLI

I am trying to establish IPSec SA by giving run time commands to Pluto but it fails in negotiation phase by not exchanging the certificates. Command used on server : ipsec whack --name hello ...
3
votes
3answers
182 views

VPN Tunnel, subnets conflict

I'm trying to create IPsec VPN Tunnel between two sites. Site 1 Fortigate 140D Local subnet : 192.168.1.0/24 Site 2 Fortigate 100D Local Subnet : 192.168.2.0/24 But when I try to create it, it ...
2
votes
0answers
68 views

Strongswan RA and Strongswan site-2-site with ASA

Task: Establish communication between remote clients (192.168.79.0/24) that are connecting to VPN server (on Ubuntu) and corporate network (10.1.2.0/24) connected to Cisco ASA. Schema: ...
2
votes
2answers
45 views

Issue with Cisco ASA 5515-X VPN Connection

I had an existing setup with a 5515-X serving as my firewall and VPN, which worked fine. Since moving to a new location, and thus a new outside interface IP, I can successfully connect to the VPN, but ...
0
votes
0answers
17 views

Why server/client digital certificates are required on server and client for negotiation?

I am trying to create a IPsec channel between my server and client using digital certificates authentication. Now, if I import server/client certificates in the server ipsec database and server/client ...
0
votes
0answers
53 views

strongSwan site2site to a docker subnet

The problem I'm running docker on a public server and want to connect the subnet of the docker containers to a private subnet on a remote site and use strongSwan with a modified IKEv1 net2net PSK ...
0
votes
0answers
56 views

migrate from openswan to strongswan (linux - windows ipsec)

i have working openswan ipsec on linux router in our office, which is connected to few remote windows 2008/2012 servers using psk. i need to migrate it to strongswan ipsec (4.5.2). this is my ...
0
votes
0answers
27 views

ifconfig dont shows any tunnel (ipsec)

Im trying to connect to networks with ipsec. But its not working, after install and configure ipsec when I execute this command service ipsec start, I dont get any error, but with ifconfig none tunnel ...
0
votes
1answer
82 views

Connect a Zywall USG200 to Windows Server 2012R2 based IPSEC/l2tp VPN

I'm trying to build a network configuration where clients can connect to some servers in a VPN via a Zywall USG 200 router/firewall. the network schema The architecture is composed by a windows ...
3
votes
1answer
72 views

Why is scp so slow on my network?

scp is slow in our company network. For testing, I am copying a file from a remote server which is connected via IPsec between the routers. When using scp -vv I get lots of messages like this: ...
0
votes
0answers
23 views

Ipsec one way traffic (libreswan / openstack)

'm currently trying to setup an IPSEC tunnel to allow communications between my on site subnet 192.168.1.0/24 and my openstack cloud subnet 192.168.4.0/24. To do so, I have a Debian jessie with ...
0
votes
0answers
49 views

How to troubleshoot strongswan error: “unable to allocate SPIs from kernel”?

I am trying to setup an IPsec tunnel to a Juniper security gateway using a strongswan client on a Linux machine and preshared keys. This is what I get when trying to bring the connection up: ...
0
votes
1answer
84 views

Enable IKE tracing on windows 10 VPN

I have an IKEV2 VPN setup (including certs) that worked fine on windows 7. On Windows 10, the same config fails with 'IKE authentication credentials are unacceptable'. Server is StrongSwan. The last ...