IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
0answers
9 views

openSwan VPN is up can't ping remote subnet

When I run the command ipsec auto status i get the following output: ...... 172.16.255.1/32===104.131.13.155<104.131.13.155>:17/1701...41.203.65.124<41.203. ...
-1
votes
0answers
9 views

why does openswan create only UDP poliices in XFRM

See output of ip xfrm policy: src 172.16.255.1/32 dst 10.100.108.51/32 proto udp sport 1701 dir out priority 2080 tmpl src 104.131.13.155 dst 41.203.65.124 proto esp reqid 16393 ...
1
vote
0answers
11 views

What could cause racoonctl to show a Phase2 count higher than the number of ports racoon is listening on?

In my setup I have some EC2 instances in different regions linked by GRE tunnels, using ISAKMP via racoon. This setup is inherited, so bear with me if I fumble with terminology. Sometimes I get weird ...
0
votes
0answers
19 views

Routing Outbound Traffic through IPSEC Tunnel

I've been trying my hardest to figure this out for the past week, and think I have a general idea of what's going on, but can't figure out how to solve it. We have an OpenSwan server in an AWS VPC ...
0
votes
0answers
20 views

How to create a IPsec tunnel between Windows Server 2012 R2 and Ubuntu with Racoon

I've configured several IPsec site to site tunnels between Ubuntu 15.10 machines using Racoon. I'm now trying to add the same kind of IPsec tunnel between a Ubuntu machine and a Windows Server 2012 R2 ...
2
votes
0answers
20 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
1
vote
1answer
28 views

IPSec Tunnel goes down during long periods of inactivity

I have 2 AWS regions I have connected using an OpenSWAN IPSec tunnel. This works great in our production environment but in our test environment where 1 of the regions has long periods of inactivity, ...
0
votes
2answers
15 views

How to configure Fortigate 60D as L2PT/IPSEC client

I have a firewall Fortigate 60D and I need to create a tunnel to a L2TP/IPSEC server, so the firewall has to act as a client. Is it possible? I configured the L2TP/IPSEC server on a Linux Debian ...
0
votes
0answers
13 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
0
votes
0answers
10 views

IPSEC over LAN on Ubuntu [closed]

Can I set up an IPSEC tunnel over a LAN with Ubuntu? The two machines are on the same LAN and have the same public IP address.
1
vote
1answer
22 views

RV325 to RV320 site to site ipsec tunnel

Gateway to gateway tunnel from RV325 to RV320 (either direction) won't connect. I can't find any sort of error log. Both are WAN1 (only one connected) and IKE PSK. Both local and remote groups ...
0
votes
0answers
8 views

Network ACL configuration for IPsec in AWS

Running in to a bit of a brick wall with this: I have 2 AWS VPC's which I have peered using an IPSec VPN. Traffic works using this tunnel no problems. I am now looking at introducing NACLs in the VPC ...
0
votes
1answer
19 views

How to setup this IPSec VPN?

I have a main network (Net-A), there my work should be done there. On the other network, I have host server where it can reach to Net-A. On the host server, I'll create a couple of virtual machines, ...
0
votes
1answer
53 views

How to start and stop a libreswan connection

I have a connection configured on my libreswan instance on two machines. The connection start automatically when I start the pluto daemon, I have try other settings, but the connection also starts if ...
0
votes
1answer
33 views

Can't ping public endpoints when IPSec tunnel is up

I'm using openswan to link two machines via IPSec. The tunnel comes online fine and I have connectivity to each endpoint via the VPN. However, when the tunnel is up, I lose connectivity to the ...
2
votes
0answers
77 views

Dynamically enable IPSec for IP connections between many servers

For a given list of internet server (example): S001 - 45.67.89.12 S002 - 67.78.90.34 S... S999 - 98.76.65.54 I want to talk from each server to any other server to any TCP service using the public ...
0
votes
0answers
5 views

Unable to Apply Qos Policy map

I have a 20Mbps MPLS connection , when trying to apply the Qos Policy Map (wich is 60% for Silver traffic , and 40% for gold Traffic), i get the Following Error : "I/f FastEthernet0/0 class DSCP-AF31 ...
0
votes
0answers
23 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
32 views

What is the ip xfrm tmpl and how is it different than an SA?

The Linux ip xfrm policy command creates an IPsec policy, associating particular traffic with an SA. It uses something called a "template" (tmpl), which, as far as I can tell, is just a means of ...
0
votes
0answers
116 views

Strongswan VPN: no matching peer config found

I'm trying to setup a Strongswan VPN but can't get it to work. It does not find a matching peer config and I don't know why: LOG: [ENC] <1> generating IKE_SA_INIT response 0 [ SA KE No ...
3
votes
2answers
113 views

Cannot ssh to remote system after enabling IPSec

I have created two VMs on top of base OS and have enabled IPSec between the two VMs. Now the problem is as soon as IPsec starts and SA is established between the two VMs, I am not able to ping or ssh ...
3
votes
1answer
37 views

Cisco ASA 5505 L2L vpn issue

this is my setup I already have a working L2L VPN between the sites I added the 10.10.0.0/24 to the object-groups that defines the internal network on the 1615 ASA And as a remote subnet on the ...
0
votes
0answers
17 views

Ipsec not working, cannot ping from server

I have a ubuntu server with public ip and want to connect to some network with ipsec tunnel. I can establish the connection (tunel), but when I try to ping the internal network PCs, there is no ...
0
votes
0answers
18 views

RRAS Demand Dial Vs IPSec /w Connection Rules

Whats the difference between using the 'demand dial' feature of RRAS when establishing VPN's versus just using Windows Advanced firewall connection rules to establish IPSec connectivity between two ...
0
votes
0answers
51 views

Setting Up StrongSwan on CentOS 6 to Connect to Amazon VPC VPN

NB: This questions pertains to connecting Strongswan to AWS hardware VPN, NOT between two servers running Strongswan I tried following the tutorial here: http://www.mynameistoby.com/ It won't work ...
0
votes
0answers
13 views

IPSec host2host transport-mode

I want to secure all traffic between our servers that are distrubuted through various datacenters. We don't have VLANs, just plain Debian 7 & Debian 8 based Virtual Private Servers (around 20), ...
0
votes
0answers
30 views

Change IPsec source port on windows. (Multiple clients behind NAT use same source port)

I have the exact same problem as this question, but I can't upvote it/comment on it: Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time How ...
1
vote
0answers
57 views

Openswan IPSec VPN on AWS tunnel established but no traffic

I am setting up a tunnel with a telco using AWS/VPC/EC2/Centos7/Libreswan and have been stuck for weeks. Appreciate any help! I have 192.168.16.73 (VPN GW, EIP 52.76.x.x) and 192.168.16.116 ...
1
vote
1answer
35 views

How to debug ip xfrm rules

I created ip xfrm rules on 2 machine and trying to pass traffic through the ipsec tunnel. The packet comes into the other end, encrypted, and disappears. I traced them through iptables, and here is ...
0
votes
0answers
6 views

IPsec Tunnel Deterministic Delay

I setup a site-to-site IPSec tunnel using OpensWan. I notice a constant delay of 15sec before the firewall gives back the response to the application running on a host behind it. 17:50:41.638828 IP ...
0
votes
0answers
12 views

IIS to SQL Server IPSec configuration

I'm trying to configure 2 servers on a VPC on Amazon AWS to use IPSec. One server has Win2008 R2 with SQL Server 2008 and the other one is a Win 2012 R2 with IIS. I want to secure the connection ...
2
votes
0answers
26 views

Windows Firewall Connection Security, require encryption with IPv6?

I've set up Windows Firewall on a Server 2012 R2 to always require IPSec Encryption for all Connection Security Rules. I've then specified Inbound Rules for specific ports and services, and ...
0
votes
1answer
19 views

AWS Connecting 2 regions

I've seen ways of connecting 2 regions to be a private network using AMI's but is there not a way to do this via VPC or DirectConnect. At the minute we have: eu-west-1 (11 servers) on ...
1
vote
1answer
83 views

Running an IPsec client VPN server within Azure

I'm currently exploring my options for running a client VPN server within Azure. I've examined the Point-to-Site VPN functionality, and it seems to be more of a method for administrators to dial in, ...
1
vote
0answers
29 views

internet access for system over multiple hops of ipsec using GRE and OSPF

I have the following setup: linux client @ 172.16.10.68 linux gateway @ 172.16.10.69, ipsec tunnel to aws box #1, gre tunnel 10.254.0.0/30 aws box #1, ipsec tunnel from linux gw, ipsec tunnel to ...
1
vote
0answers
30 views

Connect pfsense and VPC in AWS by ipsec tunnel

I'm trying to connect my pfsense box with AWS VPC by ipsec tunnel. I read couple of tutorials and all looks good. But ... Yes, always there is some but. When only one person is working then all is ...
0
votes
0answers
36 views

How to copy TOS/QoS field from IPsec payload to outside tunnel packet?

Using e.g. strongswan to build an IPsec tunnel (i.e. tunnel mode, ESP), how do I copy the TOS/QoS/DSCP field from the unencrypted original packet to the outer wrapping packet? There is this ...
2
votes
1answer
169 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and not a third-party. Two hosts: 10.0.2.10 ...
0
votes
1answer
32 views

Packet is not entering IPSEC tunnel Juniper SRX

IPSec tunnel to Amazon cloud doesn't work. My local subnet is 192.168.42.0/24. I'm trying to access Amazon cloud private subnet 172.0.3.0/24. My firewall model is Juniper SRX550. Tunnel is up (I can ...
-1
votes
1answer
59 views

Strongswan - IOS Roadwarrior cannot access hosts on the internet

I'm having a rather strange problem with a Strongswan IPSec VPN not being able to access hosts on the internet. I can connect to the VPN fine, and I can access hosts on my local network. I also ...
1
vote
0answers
71 views

AWS VPC failed communicating through VPN Tunnel

I have created a VPC scenario 3 in AWS. Configured ipsec vpn site to site between aws and cyberoam. Tunnels are up. I have added the security groups to the ec2 instance in private subnet to give full ...
0
votes
0answers
5 views

Cisco IPSec OSX multiple user accounts

Is it possible to force a Cisco IPSec Connection to prompt for UN/PW before login on OSX 10.10? I want to store the VPN Connection on the OSX machine, but I want users of that device to enter their ...
1
vote
1answer
46 views

Windows 8.1 IPSec by GPO - no firewall rules generated

I am seeing very strange behavior on Windows 8.1 clients when attempting to configure IPSec rules via group policy. I am configuring several rules through several policies, to be able to target the ...
1
vote
1answer
35 views

IPSec: is it possible to check that a packet passed via IPSec tunnel? [duplicate]

In our deployment we have two servers. I want to connect it via host to host VPN: Host-To-Host VPN Using Openswan On one server we have JMS broker on the second server we have JMS client and I want ...
0
votes
0answers
21 views

Openswan and nat_traversal

I got a problem with openswan and nat_traversal option. If it is set to no, my tunnel goes up but i cannot exchange packets with the peers because i'm behind a router. If it is set to yes, a lot of ...
0
votes
0answers
41 views

Use RRAS Assigned Static IP for TCP

I'm using RRAS on Windows Server 2012 to establish a VPN client connection from a server I have offsite and my home computer. What I would like to do is use the RRAS assigned static IP that I am ...
2
votes
1answer
130 views

How to set up routes for IPSec VPN where VPN endpoint itself must be able to contact remote network

I have a situation identical to the question at IPSec VPN : Traffic not routing correctly (however I don't seem to be able to contact that user directly, nor can I place a comment on that question - ...
1
vote
1answer
39 views

GRE - overlay network

I am renting a set of dedicated servers, and they only have a single interface to internet. However, for a lot of use cases, I would like my servers to communicate through a private IP network. For ...
0
votes
1answer
117 views

L2TP VPN without certificates between Windows XP and ZyWALL USG 200

I'm trying to configure a ZyWALL USG 200 firewall to let Windows XP remote clients (dynamic IP address) to connect to the workplace network with a L2TP VPN. I don't want to use certificates, a common ...
1
vote
0answers
240 views

Connect Ubuntu 14.04 with Strongswan to Microsoft Azure

I want to connect my Ubuntu 14.04 server with Strongswan to Microsoft Azure Gateway. I only want to establish a connection between Azure and that Ubuntu server. In Azure I configured a dynamic ...