0
votes
1answer
24 views

How to set up vpn tunnel (ipsec) connection

I'm working with a client who wants to set up a vpn tunnel between their network and ours. They're in charge of the tunnel and to give us the access they are asking me my public IP and my LAN IP. ...
4
votes
2answers
162 views

TCP connection through IPSec (Linux/Strongswan) stalls after exceeding PMTU

The backups (via Bacula) of one of my servers (“A”) connected via IPSec (Strongswan on Debian testing) to a storage daemon (“B”) don't finish 95% of the times they run. What apparently happens, is: ...
0
votes
1answer
74 views

How is my GRE-Tunneled packet being routed? [closed]

I'm trying to figure out exactly what is happening when I create a GRE tunnel. My network looks like this (-> means directly connected): Computer A (eth0: 10.0.1.1) -> (eth0: 10.0.1.2) Router B ...
0
votes
1answer
95 views

EAP password prompt in strongSwan

I'm trying to setup a host-host configuration using strongSwan. I did manage to set it up using certificates and now I wish to set it up using certificates + EAP authentication. I mixed this ...
0
votes
0answers
59 views

Need help troubleshooting QuickVPN hang

have QuickVPN 1.4.0.5 on XP Pro SP3 and am trying to connect to a RVS4000 using its public IP address. QuickVPN gets to "Connecting..." and hangs. The context menu on the systray icon won't come ...
0
votes
0answers
213 views

IPSec tunnel not working when set up asynchronously

I'm trying to create a tunnel using StrongSwan. In order to do this, I'm creating two sh files, one for each gateway router. All I'm doing in the sh files is creating the tunnel, configuring it, and ...
2
votes
1answer
224 views

Poor SMB Download Speed over VPN

I'm at a bit of a loss for trying to figure out how to improve our file sharing with remote users. The setup is as follows: Cogent Fiber 100 Mb/s Up and Down Sonicwall running SonicOS 5.8.1 Dell ...
0
votes
0answers
63 views

No such device error when trying to create IPSec tunnels

I'm trying to establish parallel tunnels between the same two routers, each of which route traffic from slightly different subnets. I can always set up the first tunnel without a problem, however when ...
5
votes
1answer
333 views

Cisco QuickVPN Can't view local computers

I am connected to my QuickVPN connection to my RV180 VPN Router and I can access the router via IP but I can't find or see any of the computers. How can I fix that? Do I need to do some more advanced ...
0
votes
2answers
322 views

Using strongswan, what's the difference between auto=add, and auto=start?

The docs on this are pretty vague, what operation, if any, should be done automatically at IPsec startup. add loads a connection without starting it. route loads a connection and installs kernel ...
1
vote
1answer
473 views

How do I allow only certain IPSet set's to access a certain port with iptables?

I'm using IPSet to build IP ranges for different countries as follows : # Canada ipset -F ca.zone ipset -N ca.zone nethash for IP in $(wget -O - http://www.ipdeny.com/ipblocks/data/countries/ca.zone) ...
0
votes
1answer
521 views

xauth with ipsec-tools on openwrt: authentication failing?

I'am trying to set up xauth with ipsec-tools on openwrt, my settings show below: cat /etc/racoon.conf: path include "/etc/racoon"; path pre_shared_key "/etc/racoon/psk.txt"; path certificate ...
1
vote
0answers
126 views

IPsec connection established but xl2tpd times out

This may or may not be related to my problem with passing ipsec verify. I have configured L2TP/IPsec VPN on Ubuntu 13.04 following Ubuntu's community documentation and while IPsec connection seems ...
2
votes
1answer
2k views

Configure ipsec vpn tunnel (network to network with IKE with preshared key) on Centos 6 with openswan

I have Cisco Linksys router configured as VPN gateway (network to network) : Now I wanna configure ipsec VPN similarly on Centos 6 with openswan. I was looking in internet but have no luck (there ...
0
votes
2answers
164 views

How does VPN software 'hijack' packets for tunneling?

My current mental model An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation Somewhere along the line before the ...
0
votes
2answers
106 views

Is there a Juniper limitation on the number of SA in 'any to any' ACL in IKEv1

I've connected Juniper SRX5800 and another enodeB device (don't know the vendor) by an IPSec tunnel. It uses IKEv1 for negotiation of keys. there are 10 ACLs on the enodeB side and on Juniper SRX, I ...
1
vote
0answers
131 views

Peer to peer ipsec tunnel - virtual network interface

I'm trying to create an IPSEC tunnel between two machines (not between two networks). Using ipsec-tools, TUNNEL mode. I think I can cope with all those add and spdadd, but how to create a virtual ...
2
votes
1answer
2k views

IPsec tunnel to Android device not created even though there is an IKE SA

I'm trying to configure a VPN tunnel between an Android device running 4.1 and a Fedora 17 Linux box running strongSwan 5.0. The device reports that it is connected and strongSwan statusall returns ...
0
votes
1answer
206 views

VPN still working after rebooting without client - DrayTek client shows “No Connection”

My home network is a simple router + pc's setup, nothing fancy - the router has DHCP enabled for 192.168.0.X (255.255.255.0) and my PC picks up the address 192.168.0.82. There are no devices on my ...
4
votes
2answers
291 views

Best security practice for small networks - wifi, lan,

We regularly setup small networks for clients in different locations to allow them to work on different products now the question what should be the best security practice. Currently we have a wifi ...
1
vote
1answer
350 views

Network to network VPN Centos 5

I am trying to follow "http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-vpn.html#s1-ipsec-net2net" I have come up with the following On local router machine: in my ifcfg-ipsec0: ...
1
vote
0answers
503 views

No private key and IKEv2

I'm trying to run a linux server with ikev2 (by using strongswan ) . It seems the exact problem is about certificate and private key . I've used so many topics about doing it such as this topic when ...
1
vote
0answers
304 views

Deciphering IPSEC errors

I have a host I am trying to setup for ipsec. But I am finding some errors in the log that don't make much sense to me. The system are Rhel 5.5 boxes. I followed RHEL's IPSec deployment directions ...
3
votes
3answers
476 views

Suggestions for transitioning to new GW/private network

I am replacing a private T1 link with a new firewall device with an ipsec tunnel for a branch office. I am trying to figure out the right way to transition folks at the new site over to the new ...
0
votes
3answers
416 views

Can I attach a VPN firewall to an existing network and have it manage VPN connections?

I'm quite new to networking and am trying to set up my first VPN connection. The Situation: I have been contracted for some programming at a facility some distance from my location. I would like to ...
1
vote
0answers
298 views

Cisco with site-to-site and EzVPN - configuration Issue

This is the first time for me to work with Cisco Router. The below mentioned is my configuration where Cisco Srv is Cisco 7200 Series Router XYZ is one VPN Server running on Linux. RAC is ...
0
votes
1answer
700 views

Windows 7 + IPSec: Force all remote traffic through VPN

I have set up a VPN connection to an remote L2TP/IPSec VPN server, which works fine. Now i like to ensure that all remote traffic is being routed through this VPN, so if the VPN connection drops, no ...
0
votes
1answer
360 views

IPSec Tunnel via Shared band using local IP instead of external

We have recently moved onto Shared Band which is causing us some issues. We have a direct Ip Address Mapping which maps our External Address down to our internal address set on the router (which ...
0
votes
1answer
252 views

Linux IPSec Tunnels does not forward IP Packet with ECN bit set to CE (Congestion Experienced)

I have a Linux IPSec Tunnel between a GGSN of a network operator and our data center. The IPSec works fine for all traffic but IP Packets coming from our side and are marked with ECN bit set to 0x3 ...
1
vote
2answers
1k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
2
votes
1answer
630 views

Recommendation for a virtual site-to-site VPN appliance [closed]

can you please recommend an Virtual Appliance or Operating System for creating multiple site-to-site VPN? The appliance must of course handle IPSec. It should also be OpenVPN capable. An Additional ...
-4
votes
4answers
304 views

NAT a private IP to a public IP

I have two servers A and B. Server A has a private ip 10.0.0.4 and a public ip of 1.2.3.4 Server B has a private ip 10.0.0.5 and a public ip of 5.6.7.8 running ifconfig on Server A says eth0 has ...
2
votes
1answer
272 views

L2TP and multiple interfaces on the machine

We have setup ipsec and l2tp on linux. One question came up (due to firewall management policy) is whether it's possible to have 1 virtual interface instead of one per connected client. Now we have: ...
0
votes
1answer
566 views

Linux 2.6 IPSEC does not forward packets from LAN to VPN

I have site to site VPN from 10.132.2.0/24 to 10.132.1.0/24. The problem I am facing is that the packets from VPN are forwarded to LAN, as I can see them on the LAN server, but packets from LAN are ...
0
votes
2answers
1k views

IPsec tunnel keep crashing

I have 2 locations. On each location is installed VPN device Cisco RV042. Link between location is optical fiber. ISP is the same. Link speed on location A is symetric 3/3 Mbps, and there is static ...
0
votes
0answers
3k views

Zywall USG 300 ipsec config issue

We have a Zywall USG 300 which dials ipsec to a Server 2008 R2 server. This was working until recently when any attempt to communicate with the server sees the following in the logs. error IPSec ...
2
votes
0answers
522 views

Getting ipsec-tools to work between Ubuntu Lucid hosts

I have two hosts, one is Charity with IP 67.207.128.184, the other is Hope with IP 67.207.130.204. I've installed the ipsec-tools package on each host. I have not installed racoon on either host. ...
-1
votes
2answers
763 views

racoon-tool doesn't generate full racoon.conf file in /var/lib/racoon/racoon.conf

I am using ipsec-tools/racoon to create my VPN. I am using racoon-tool to configure racoon.conf but when I run racoon-tool reload it only generates the first section - Global items. When I run ...
3
votes
1answer
884 views

Windows 2008 R2 VPN Service — Clients Disconnected

I have set up a MS VPN server on Microsoft 2008 R2 Server. There seems to be a problem where some clients get disconnected after just a few seconds. They can access machines in the VPN network with ...
0
votes
1answer
760 views

Updating Cisco VPN config to add vpnc support

I have a Cisco 1841 configured for VPN connections of two types: Site-to-site for partners' routers (IPSec) — using different crypto isakmp key and crypto map with set peer, set transform-set, match ...
3
votes
1answer
6k views

Multiple Set Peer for VPN Failover

I will have two Cisco routers at Location A serving the same internal networks, and one router in location B. Currently, I have one router in each location with a IPSec site-to-site tunnel connecting ...
0
votes
1answer
295 views

IP Default crypto isakmp key with specific keys as well

I am wondering if anyone knows how isakmp keys work when there is one for any ip and then another entry for a specific entry. Will the specific always take precedence? For example, if I have crypto ...
1
vote
1answer
3k views

IPsec Tunnel Between Cisco and XP, Quick Mode fails When Initiated By Router

I have been trying to set up a IPsec tunnel between a router and my Windows XP box. The router is 192.168.254.30, and the XP machine is 192.168.254.128. However, I can't seem to get the tunnel ...
3
votes
1answer
2k views

Decrypting ESP Packets with IPSEC Transport Mode if Pre-Shared Key is Known

I am reading up on IPSec, and was wondering if I could use wireshark to decrypt ESP packets from IPSEC transport mode sessions that are using a preshared key . From reading this thread, I have ...
0
votes
1answer
1k views

Cisco ASA -> Windows 2003 site-to-site VPN

Is it possible to set up an ipsec site-to-site VPN between a Cisco ASA (5510) and a Windows 2003 Server? (using RRAS or similar on the windows server) And the followup question - if this is ...