IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.
1
vote
1answer
22 views
Linux networking and routing
I have 3 networks:
192.168.1.0/24
192.168.11.0/24
192.168.50.0/24
192.168.1.0/24 and 192.168.11.0/24 are connected to each other through an IPSec tunnel, and 192.168.11.0/24 and 192.168.50.0/24 are ...
0
votes
1answer
24 views
IPSec Tunnel via Shared band using local IP instead of external
We have recently moved onto Shared Band which is causing us some issues. We have a direct Ip Address Mapping which maps our External Address down to our internal address set on the router (which ...
0
votes
1answer
17 views
Linux IPSec Tunnels does not forward IP Packet with ECN bit set to CE (Congestion Experienced)
I have a Linux IPSec Tunnel between a GGSN of a network operator and our data center. The IPSec works fine for all traffic but IP Packets coming from our side and are marked with ECN bit set to 0x3 ...
0
votes
0answers
44 views
ISAKMP IPSEC CentOS SITE to SITE IPSEC VPN
Today I got these parameters from a client:
PHASE1 (ISAKMP):
encryption algorithm: 3DES
hash algorithm: Secure Hash Standard
authentication method: Pre-Shared Key
Diffie-Hellman group: #2 ...
0
votes
0answers
32 views
L2TP over IPSec on Debian
I've configured the IPSec and XL2TPd daemons properly, both boot fine. At the moment, the issue I'm having is I get this message.
ipsec_setup: multiple ip addresses, using 127.0.0.2 on venet0
...
0
votes
1answer
31 views
IPSec Connection Ports
i configured a VPN server with IPSec to surfe secure at public networks. At generally it works. Now i would like to access my vpn server from my campus. Here i can't get any connection.
I know, that ...
1
vote
1answer
32 views
Add Port Forward to ASA5505 with IPSEC Tunnel
I have an ASA 5505 on 8.2 in the field already working. It has two interfaces, LAN/inside and WAN/outside. There is an L2 site-to-site IPSec tunnel configured from the outside interface of the local ...
1
vote
1answer
31 views
pfSEnse-pfSense IPSec Tunnel, cannot open documents on Sharepoint WebDAV share
I set up an IPSec tunnel between my home network and work. We have a Sharepoint server in the office that I used to be able to access just fine remotely. Now that requests to the server are routed ...
0
votes
1answer
38 views
ASA IPSec tunnel up, but logging errors?
I am getting the following errors on an ASA;
Jan 24 2012 17:15:13 ASA1 : %ASA-7-714003: IP = 1.2.3.4, IKE Responder starting QM: msg id = 5293ff7c
Jan 24 2012 17:15:13 ASA1 : %ASA-7-713236: IP = ...
0
votes
0answers
148 views
Can't get the L2TP IPSEC up and running
i have an Ubuntu 11.10 (oneiric) server running on a ReadyNAS. Im planning to use this to accept ipsec+l2tp connections through a router. However, the connection is failing somewhere half through. ...
1
vote
0answers
29 views
ipsec tunnel connectivity issue
I trying to connect Solaris 10 box to Cisco PIX with IPsec tunnel.
And it seem halt at some point.
And from the post @
http://www.mail-archive.com/networking-discuss@opensolaris.org/msg07573.html
...
0
votes
0answers
15 views
Windows egress filtering with Netsh
I have a problem where I know I will be given an unpatched windows box lets say its a XP and a windows 7.
They will not be connected to the internet so I want to write a script that will use netsh to ...
1
vote
1answer
104 views
Smoothwall Express interface issues
I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
2
votes
1answer
73 views
Recommendation for a virtual site-to-site VPN appliance [closed]
can you please recommend an Virtual Appliance or Operating System for creating multiple site-to-site VPN?
The appliance must of course handle IPSec. It should also be OpenVPN capable. An Additional ...
2
votes
0answers
102 views
How secure is IPsec w/RSA but without XAuth username/passwords?
I'm using pfSense 2.0 and have an IPsec VPN configured (which uses the Raccoon IPsec daemon).
I'm connecting to the VPN using my iPhone (iOS 5).
However, the iPhone doesn't allowing saving of XAuth ...
0
votes
1answer
200 views
StrongSwan ipsec ubuntu “ignoring informational payload, type NO_PROPOSAL_CHOSEN”
I have StrongSwan running on a ubuntu server and I'm trying to create an ipsec encrypted VPN tunnel with a Cisco 2821 router . The connection is not working and I cannot figure out why. It appears ...
1
vote
0answers
39 views
IPSec between OS X clients and Windows Server (native, no 3rd party)
I would like to connect Mac OS X (Lion) with Windows Server 2008 (R2) using IPSec natively. Simplest possible settings: No certificates, no tools, no specials. Just a Windows Server with IPSec ...
0
votes
1answer
101 views
Pushing IP routes to various VPN clients
With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client.
I would like to know if there is an equivalent of this option ...
-1
votes
1answer
90 views
Linux VPN for an OS run in VirtualBox
I have virtualized Win 7 that I want to be connected via VPN. The VPN will be running on a server using Debian 6 OS.
What method should I use? KAME IPsec Tools seems to be appropriate for this ...
0
votes
1answer
76 views
Can I use my Linux BIND9 server as a dynamic dns provider for IPsec tunnels?
I am curious if I can use my BIND9 server to provide dynamic dns for a couple IPsec tunnels I want to setup. 2 of the endpoints have dynamic IP addresses, the "main" endpoint is a static address.
I ...
0
votes
0answers
139 views
Openswan Ubuntu Malformed Packet
I'm trying to create an IPSec encrypted VPN tunnel to a Cisco ASA 5540 from a ubuntu server using openswan.
I've set up VPN connections before to Cisco routers, so this task didn't seem like it would ...
-3
votes
4answers
98 views
NAT a private IP to a public IP
I have two servers A and B.
Server A has a private ip 10.0.0.4 and a public ip of 1.2.3.4
Server B has a private ip 10.0.0.5 and a public ip of 5.6.7.8
running ifconfig on Server A says eth0 has ...
0
votes
0answers
35 views
racoon / vpn - mandatory client IP within the target network
I want to login into one of our office networks via IPSec VPN. But the firewall gives me a fixed client adress within the local IP range and will only answer to this IP. identifier is a FQUN, not the ...
2
votes
1answer
213 views
Forward trafic from secure VPN (ipsec) to PPTP
I had configured my server (server1) to connect to another server(server2) over a VPN with IPsec (secure vpn). But now I need to setup another VPN (work vpn) so I will be able to connect to my ...
11
votes
2answers
182 views
What's the protocol-level difference between IPSec and “Cisco IPSec”?
Most VPN clients distinguish between IPSec and "Cisco IPSec." For example, (Apple's) iOS treats them as essentially separate things.
But I can't find any explanation of what the protocol-level ...
0
votes
1answer
59 views
pfSense command to delete stale SAD
I'm experiencing an issue with pfSense where duplicate SAD's are getting created after rekeying, forcing me to manually go ahead and delete the old SAD's. It's not a huge issue but it does get to be a ...
0
votes
0answers
41 views
IPSec VPN WIth Cisco inside of DSL Modem/Router
I am attempting to configure a user to work remotely. The individual has DSL with a Westell Versa Link modem/router.
We are using a Cisco RV120W to create the IPSec VPN Tunnel to our Cisco Pix. ...
2
votes
1answer
104 views
L2TP and multiple interfaces on the machine
We have setup ipsec and l2tp on linux. One question came up (due to firewall management policy) is whether it's possible to have 1 virtual interface instead of one per connected client.
Now we have:
...
0
votes
1answer
30 views
XCA: sign IPsec certificates with own CA
I'm trying to establish a LAN to LAN connection through a VPN tunnel. There's a Zywall at the remote office which will be responsible for establishing a connection to a Draytek at the main office. I'm ...
2
votes
1answer
51 views
What is the difference between concurrent sessions and IPsec/VPN sessions?
Our company is looking at hosting our software with an ASP model of distribution and we're looking at firewall hardware to protect our data center. My question is what is the difference between the ...
0
votes
1answer
55 views
Linux 2.6 IPSEC does not forward packets from LAN to VPN
I have site to site VPN from 10.132.2.0/24 to 10.132.1.0/24. The problem I am facing is that the packets from VPN are forwarded to LAN, as I can see them on the LAN server, but packets from LAN are ...
0
votes
0answers
19 views
IPSec configuration to enable access to a domain-joined machine from non-domain-joined machines
The company enforced an IPSec policy by Group Policy that non-domain-joined computers cannot access domain-joined computers. e.g. my desktop is domain-joined. I cannot access the share folder on it ...
-2
votes
3answers
119 views
How do I learn IPSec VPN implementation on FreeBSD from pfSense
I've been trying to figure out a complete working solution for IPSec VPN implementation on FreeBSD but with no luck till now. pfSense seems did a fantastic job on supporting IPSec and even for mobile ...
1
vote
1answer
130 views
Does Linux support IPsec service out of the box?
As per subject. I have heard of default IPsec support on later versions of Linux kernel (without need to recompile or install special packages) but maybe it's a rumour?
Interested in both VPN ...
1
vote
1answer
49 views
When is an IPsec tunnel a real candidate for NAT-T (when is it absolutely required?)?
I've had a persistent problem establishing phase 1 of an IPsec tunnel I am initiating from an endpoint at my site to a vendor.
It is a bit of an odd configuration and I am not sure if NAT-T must be ...
0
votes
2answers
84 views
How to configure a CISCO ASA to support the OS X VPN Client
Given that OS X now supports (natively) CISCO IPSec VPN connections I am wondering what the requirements for the VPN configuration are on the remote end?
I have evaluated a number of CISCO devices ...
7
votes
2answers
103 views
If IPSec has its own IP tunnel support why do some add LT2P to the stack?
I understand that you can use IPSec to tunnel data securely. According to the Wikipedia page and a few other sources it can also tunnel IP packets and then route them through an interface. That would ...
0
votes
1answer
133 views
IPsec tunnel keep crashing
I have 2 locations. On each location is installed VPN device Cisco RV042. Link between location is optical fiber. ISP is the same. Link speed on location A is symetric 3/3 Mbps, and there is
static ...
0
votes
0answers
68 views
L2TP secret vs IPsec secret?
I'm doing some testing on my Android phone and ran into an issue. In RRAS is it possible to setup an L2TP secret only instead of an IPsec secret? If not, is it possible to establish an L2TP tunnel ...
1
vote
0answers
98 views
How to allow RDP through IPSEC using netsh advfirewall command
I have an offsite windows server 2008 R2 server. And an ipsec tunnel set on our router here plus a connection security rule in Advanced Firewall on the server. I have ssh access to the console on the ...
1
vote
2answers
154 views
How to force a Cisco 2811 to rekey
We are having a IPsec/GRE VPN tunnel issue at work. Our vendor told me he "forced a rekey" and everything started working again. He alluded to a command to this, but didn't tell me the exact one. Does ...
3
votes
1answer
111 views
Where is wfp.tmf for Windows Server 2008 R2
I'm trying to debug IPSec Main Mode / IKE issues using wfp tracing and/or debugging of the IKE IPSec service. I've got the ETL files and tracefmt from the DDK, but I don't have wfp.tmf for my platform ...
1
vote
0answers
101 views
What can cause a DirectAccess IPSec Main Mode Error “no policy configured”
We have Microsoft's DirectAccess VPN set up on Server 2008 R2 with end-to-edge security, and we're having trouble with the manage-out tunnel.
The DirectAccess client has DC/DNS and intranet ...
1
vote
0answers
23 views
Openssl crypto vs kernel crypto
Is openssl's crypto equivalent to kernel's crypto? What are the main differences?
Which crypto does the ipsec-tools use?
0
votes
0answers
356 views
Zywall USG 300 ipsec config issue
We have a Zywall USG 300 which dials ipsec to a Server 2008 R2 server.
This was working until recently when any attempt to communicate with the server sees the following in the logs.
error
IPSec
...
1
vote
1answer
226 views
SNAT through Racoon IPSec VPN
I am trying to route traffic from a device (that I will call "target") connected to my Ubuntu box (that I will call "host") to servers at a remote office.
The host uses a Racoon IPSec VPN, connected ...
1
vote
2answers
86 views
Restrict access to Windows Terminal Services with dynamic IP address clients
In light of some recent worms I'm looking at ways to further restrict access to terminal services on my public facing Win2k3 server. Are firewall IP address restriction is not an option as the genuine ...
0
votes
0answers
119 views
Route based IPSec VPN Between IOS and ASA
I'd like to do a route based VPN between two sites. The purpose of this is to get remote site traffic passing through a transparent gateway at the headend, instead of using a proxy.
So currently it ...
1
vote
1answer
240 views
How can I create a host to host IPsec VPN if my server has direct Internet access and no LAN?
I have a Linux server (CentOS 5.5) that has direct access to the Internet with a fixed IP address. That is, the IP address is 200.29.X.Y. The gateway was given by the datacenter (200.29.X.Z) and the ...
0
votes
1answer
55 views
openswan installation
on a Linux machine with kernel 2.6.32, how to enable klips
i found that for enable klips mus enable
CONFIG_KLIPS_ALG=y
in kernel config.
but patch only available for 2.6.23- and for newer kernels, ...
