IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

-2
votes
2answers
44 views

Networking VPN expert out there? Should Remote VPN “Client” be pingable/reachable FROM the VPN server?

I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER. BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
0
votes
0answers
6 views

How to monitor L2TP IPSEC VPN [on hold]

I have a debian wheezy server with L2TP over IPsec and Openswan installed. I want to know if there is a tool (or commands / logs where to extract data) where I can see: connected users number and name ...
0
votes
1answer
8 views

Quick mode negotiation failed - no policy configured - Windows 2008 R2?

I am establishing an IPSEC Tunnel from my office to Amazon Web Services VPC, using the windows 2008 R2 machine as the "customer gateway". I configured my machine using this guide here. However the ...
1
vote
0answers
14 views

Zywall IPSEC config for remote shares using ipsecuritas [migrated]

I have a Zywall USG 20 using IPsec. It works and connects fine however I can only access the zywall its self. Traffic does not route to other computers on the subnet. In my case I need to access linux ...
-1
votes
0answers
20 views

L2TP/IPSec - Windows can't connect to OpenSwan

I'm trying to connect a VPN (L2TP/IPSec) running Ubuntu with openswan/x2ltpd. It looks like the connection is estabilished but IPsec receives a disconnection right after. Probably is happening on ...
0
votes
0answers
26 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
1answer
24 views

IPSEC one way issue

We have a frustrating issue and I'm hoping someone here can see what I'm missing. We have a small hub and spoke network between 4 sites and a datacenter, each location connecting to each other ...
0
votes
0answers
18 views

racoon Road Warrior VPN Client - Tunnel Established but no ping

I'm trying to configure a road warrior VPN client on a Linux distribution. Here my configuraiton : Client VPN LINUX - 1.1.1.1 - INTERNET - 2.2.2.2 - FireWall - 10.0.0.0/8 I wish to create a tunnel ...
0
votes
0answers
35 views

IPSec site to site VPN

I am trying to connect our server to cisco site-to-site IPSec VPN with one of our partners servers, they asked us to implement the settings they gave us into our router, but actually we don't have ...
1
vote
1answer
30 views

Seeing Who is Logged into LibreSwan VPN

We recently setup a LibreSwan VPN and for the most part it is working great. One thing we are having some trouble with is trying to see who is currently logged in. I found a solution for seeing ...
0
votes
0answers
23 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
0
votes
0answers
30 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
10
votes
2answers
179 views

20Mbps WAN limited to 10Mbps over IPSec Tunnel

We recently upgraded a remote site from a 10/10Mbps fibre to a 20/20Mbps fibre link (it is fibre to the basement, then VDSL from the basement to the office, roughly 30 meters). There are regular large ...
0
votes
0answers
13 views

strongSwan on Angstrom

My problem is to establish a VPN tunnel between cRIO 9068 and a Cisco router. To accomplish this task I was planning to install strongswan on cRIO (opkg install strongswan). I have installed it on ...
-1
votes
0answers
16 views

Openswan tunnel established; but have access problems

I am working on connecting two office using OpenSwan IPsec VPN. I have successfully established the tunnel, but ran into strange problems: Let's say subnetA(192.168.1.x/24) and ...
0
votes
0answers
51 views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
45 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
0
votes
0answers
21 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
1answer
420 views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...
0
votes
0answers
51 views

Strongswan transport mode ipsec within subnet

Is there any way to configure strongswan to automatically start encryption to a given subnet rather than specific host? For example, if I know that my hosts at w.x.y.z/28 will be have the same PSK ...
0
votes
2answers
83 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
0
votes
0answers
154 views

VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel

I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0
votes
0answers
37 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?
3
votes
0answers
43 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
0
votes
0answers
90 views

Configuring OpenSwan for IKEv2 (via iOS8)

I'm trying to configure OpenSwan (running on Ubuntu) to accept connections from an iOS8 device. I receive the following logs, which seems to indicate the server denies IKEv2 connections (even though ...
1
vote
1answer
55 views

What's an inexpensive way to connect 3 sites over VPN, each with dynamic IPs?

I have 3 networks that I would like to connect to each other over VPN (IPSec or OpenVPN). Each site has a single dynamic public IP address and is running NAT. How can I connect each of the sites ...
0
votes
1answer
110 views

Azure Site-to-Site VPN to Cyberoam cannot ping Azure VM from local VPN PC

I've set up Azure site-to-site VPN to Cyberoam following these instructions. The problem is that I can ping the local PC through the Azure VM but I cannot ping/access the shared folder/rdp of the VM ...
0
votes
0answers
23 views

L2TP daemon server multiple IP

I have VPS with 3 public IP - Debian 7. I would like to have 3 L2TP damemons (one ip each) NATing traffic to each ip. Something like this l2tp_multiple_public_ip_diagram. I have set up l2tp daemon for ...
0
votes
0answers
17 views

Multihomed Windows 2003 IPsec tunnel source IP address

As Windows 2003 EOL comes near, I'm starting to disband old machines still active in my network. Now one of these is in a branch office and used as RRAS server just for servicing a VPN connection to ...
0
votes
1answer
299 views

No traffic routing between Cisco CSR1000v and Strongswan IPSec end points on AWS

I am trying to configure a Cisco CSR1000V on AWS to create an IPSec VPN with Strongswan 5.1.2 (on Ubuntu 14.04) on another AWS machine. I can establish the VPN from the Strongswan end and it appears ...
1
vote
1answer
80 views

Strongswan to OpenBSD isakmpd IPSec VPN

At my end I have a StrongSwan installation, connecting to an IPSec VPN hosted by an OpenBSD box running stock isakmpd. The OpenBSD box already hosts multiple other associations, but the StrongSwan box ...
0
votes
0answers
100 views

MikroTik L2TP\IPsec along with IPsec tunnels

How to configure L2TP\IPsec whit IPsec working along? I have looked many tutorials, but none of them was explaining how to setup L2TP\IPsec while IPsec tunnels are running. L2TP\IPsec VPN will be used ...
0
votes
1answer
186 views

Use Openswan / IPSec on Ubuntu server to connect to existing Openswan VPN - NAT broken

I have an existing Openswan VPN, all working fairly well with Windows, Mac and Phones. [Office 192.168.0.0/24]---[VPN A.B.C.D]----[Internet]---[Home Routers (NAT), Dynamic IPs]----[Workstations] Now ...
0
votes
0answers
18 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
1
vote
2answers
34 views

Is IPSEC used by default on Win7/'08-R2 NFS (TCP139/445&UDP137/138)

We'd like to share files through an Win08R2 EC2 instance with clients (Windows 7 machines) through the default NFS (i.e. avoiding 3rd party software like Dropbox/Aws-s3 etc.). Encryption at rest is ...
0
votes
1answer
43 views

Difference between ISAKMP exchanges types IKE_SA_INIT and Identity protection

I have some Wireshark traces to see how ISAKMP works. This traces were taken from peers when a IPsec tunnel is stablished. It seems that the traces display a different IPsec implementation. When IKE ...
1
vote
0answers
177 views

FreeBSD L2TP/IPsec not routing traffic to vpn server

I have configured a VPN server on my FreeBSD server, it all seems to be running, but the VPN traffic is not routing through to the local VPN server and I cannot figure out as to why. So my question ...
2
votes
1answer
80 views

Remote end of IPSec transport is 'permenantly glued' to loopback after some messing around with GRE

So, I have managed to get IPSec transport over ESP between two hosts using racoon: the 'local' host, 1.1.1.1, and the remote, 2.2.2.2. It only worked for ICMP (other traffic ignored the SA), but ...
0
votes
0answers
27 views

openswan - computing tunnel count?

When I do an /etc/init.d/ipsec status I see: pluto pid 10435 12 tunnels up some eroutes exist Question is how can I compute ahead of time how many tunnels will exist? I have one site-to-site that ...
1
vote
1answer
68 views

Expose a machine on the far side of a VPN

We're using a VPN to connect a remote office to our main office, and a machine in the remote office needs to expose port 22 to the outside internet. Complications: The main office has a fixed IP ...
0
votes
0answers
19 views

Racoon: inherit configurations

Starting to get acquainted with ipsec-tools and racoon, I'm wondering how stage 1 configuration inheritance works. With a sample configuration like this: remote "ParentConfig" { proposal { # ...
0
votes
1answer
96 views

IPsec transport mode and MTU

[Similar to Right way to set the MTU of an IPsec Client (Linux/Racoon), but different in that there is no router on the responder side] I have a setup where machines in a local network need to talk ...
0
votes
0answers
125 views

Right way to set the MTU of an IPsec Client ( Linux/Racoon)

Here's the network topology : (PC1:IPsec Client)eth0---Internet CPE---((Internet))---Internet CPE---(PC2:IPsec Server) I've set up an IPsec Internet Gateway : PC1 sends all traffic, encrypted in an ...
0
votes
0answers
27 views

openswan ipsec tunel configuration

Its posible create ipsec tunel from SERVER1 to internal FTP. (i.e only for application on SERVER1) ? Network scheme: (private APP) (SERVER1 PUBLIC:1.1.1.1) ----------------------- ------- ...
0
votes
1answer
111 views

File copy problems in only 1 direction through IPSec inter-site VPN

i've a rather strange problem with 2 sites linked by an IPSec inter-site VPN and file transfert from a site to another. SYNOPSYS (tl;dr) : File transfert via smb/ftp/whatever through ipsec tunnel ...
0
votes
0answers
176 views

Cannot estabilish connection via VPN/L2TP to server

Hello system administrators! I would like to ask you a question, because I was looking at various internet tutorials for this, and nothing worked, so... I can't connect to server via VPN, it looks ...
0
votes
1answer
210 views

Ubuntu VPS running VPN server not forwarding packets

I've asked a related question here - Can't route back down ipsec tunnel from VPS - but I've answered that and moved on a bit. The end goal of what I'm trying to achieve is this: We have a bunch ...
0
votes
0answers
153 views

Windows RRAS server behind NAT to remote Fortigate via IPSec

I am about to deploy a Windows sever 2012 R2 RRAS server to connect to a FortiGate device via IPSec for site-2-site VPN. Phase 1 ending successfully, however, the Phase 2 failing, the Windows server ...
0
votes
1answer
225 views

Can't route back down ipsec tunnel from VPS

I am trying to establish an ipsec VPN from a Draytek router on the edge of our corporate network to a VPS on Digital Ocean. I've set up the VPN on the VPS using this script on an Ubuntu 14.04 machine. ...
0
votes
3answers
961 views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...