IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
2answers
41 views

IPSec: Reason for differentiating between Security Associations and Security policies

In IPSec, why does it make sense to differentiate between Security Associations and Security policies?
2
votes
1answer
1k views

Configure ipsec vpn tunnel (network to network with IKE with preshared key) on Centos 6 with openswan

I have Cisco Linksys router configured as VPN gateway (network to network) : Now I wanna configure ipsec VPN similarly on Centos 6 with openswan. I was looking in internet but have no luck (there ...
0
votes
0answers
53 views

Aruba VPN configuration for Ubuntu Server 12.04

I need to configure VPN client for Aruba Intranet Access. Aruba provides VPN clients only for Windows, Mac and Android not for Linux. May be someone can help me to configure Linux server? Thank you ...
0
votes
1answer
1k views

Routing traffic through IPSec with NAT and IP Alias in pfSense

I have a pfSense firewall and I need to connect to a remote site (form my client). I'm running into several issues, and don't see traffic flowing in any way. Here's my setup: LAN is 192.168.0.0/16 ...
0
votes
0answers
28 views

IPSec 2 hosts (preshared key) - network shares very slow

I'm testing a IPSec config between 2 hosts, using ipsec auth with preshared key, very simple configuration. (I want to start with a IPSec simple preshared key config, and then step up to a ...
1
vote
0answers
416 views

ASA Slow IPSec Performance with Inconsistent Window Size

I have a IPSec link between two sites over ASA 5520s running 8.4(3) and I am getting extremely poor performance when traffic passes over the IPSec VPN. CPU on the devices is ~13%, Memory at 408 MB, ...
3
votes
1answer
76 views

IPSEC AES key length in kernel 3.9.3

I have a working ipsec-tools configuration which uses aes-ctr encryption with 224-bit key (192bit for key+32bit for nonce). Everything works well on 3.2.0 kernel. Here's what man setkey says about ...
0
votes
0answers
37 views

NPS connection for IPSec Vpn takes a long time to establish

After changing my NPS server my IPSEC VPN connection from the ASA takes ~15 seconds to establish a VPN connection. This was almost instant previously. I exported the NPS configuration from the ...
1
vote
1answer
95 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
2
votes
2answers
209 views

Cisco 871: IPsec Remote VPN

After having followed several tutorials and none of them worked for me, someone might help me here. I have a Cisco 871 router, version 12.4(4)T7. Currently, I have it configured as a PPTP VPN ...
0
votes
0answers
27 views

How to track the status of ipsec-tools?

How can I track the status of ipsec-tools, I mean that I want to get the connection status of per peer connection, etc.
5
votes
2answers
798 views

How do I route a public IP range over an IPSEC VPN?

So, I have an established IPSec Site to Site tunnel. Site A has a SonicWall, Site B has a EdgeRouter. The first tunnel consists of Site A's NATed ips to Site B's NATed ips. Everything works as ...
0
votes
1answer
141 views

ipsec (openswan) routing or dns issue with iphone

I got an established VPN connection, but either the routing or the resolving is not working. The configuration is taken from ...
0
votes
1answer
104 views

ipsec routing / strange routing behavior

I have following network configuration: Office1 <-- openvpn --> office2 <-- ipsec tunnel --> branch office Office1 and office2 are on Debian, Branch office: juniper srx100 Office1 ...
0
votes
0answers
147 views

Racoon IPSec between 2 networks - wrong routing in one direction. How to debug/fix?

I am trying to connect a VPN router (situated behind an NAT router) to a linux server (firewall, public ip) via IPSec. The linux server uses racoon. The VPN connection seems to be up and running, ...
1
vote
2answers
64 views

Interaction of IPSec and WinPE in MDT 2010 sequence

I'm in the process of enabling IPSec and Windows Advanced Firewall within my organization. We are also using MDT 2010 for OS deployment. This is the first time I've tried a new sysprep and capture ...
1
vote
1answer
66 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
1
vote
1answer
194 views

Routing Asterisk traffic evading a VPN

I have two offices set in two distant locations, connected through a IPSec VPN (using pfSense). On one office, I have an Asterisk PBX where all the extensions connect, and the Asterisk PBX is ...
0
votes
0answers
66 views

Use ipsec-tools with pre-shared key for windows client?

I want to setup a ipsec server with ipsec-tools for my windows client with pre-shared key, it's OK to setup it, but I want to a anonymous access to the ipsec server with my windows client, I mean my ...
0
votes
2answers
552 views

what does “openssl FIPS mode(0) unavailable” mean?

I compiled and installed strongswan ipsec vpn successfully, as demonstrated by the fact that the service starts successfully: as3:~# ipsec restart Stopping strongSwan IPsec... Starting ...
1
vote
1answer
160 views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
0
votes
2answers
165 views

Can IPv6 IPSec replace https/ssl for secure website network encryption?

Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.) Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
1answer
94 views

Howto enable IPSec with IPv6 automatically?

Although IPSec is included in the IPv6 protocol, this doesn't mean that it gets actually used. I know how I could create a VPN manually via e.g. racoon or any other VPN-Server software, but that's ...
0
votes
0answers
260 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
3
votes
0answers
105 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
1
vote
0answers
482 views

Site-to-site VPN between Azure Virtual Network and a Cisco RV016

I'm attempting to configure a Cisco RV016 router to connect to an Azure Virtual Network to create a site-to-site VPN, but it's not working. I'm aware that a Cisco RV016 is not in the list of ...
0
votes
1answer
53 views

Cisco IPSec VPN: Multiple address ranges for crypto map?

I'm setting up an IPSec VPN using a Cisco router. The relevant part of the config: crypto map MYVPN 10 ipsec-isakmp set peer 173.1.2.3 set transform-set my-transform set pfs group2 match ...
0
votes
0answers
146 views

IPSec configuration between a (Cisco) routed network and a (Racoon) NATed network?

I am trying to set up the following WAN configuration: Both interfaces on the router at the datacenter connect to public networks. However, our office is behind a standard cable modem and is ...
1
vote
0answers
151 views

IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat

I have recently configured a VPN server hosted in AWS EC2. Details: Centos 6.4, openswan, xl2tpd, NAT-traversal. The configuration works great for a scenario when only one user connects form a given ...
0
votes
0answers
318 views

How can I make racoon verify peer certificates?

I am attempting to set up IPSec on my LAN using automatic key setup with racoon using PKI for authentication. Each of my host certificates has the host's FQDN as the Common Name with the FQDN and IP ...
1
vote
2answers
2k views

Openswan tunnel up, but works only in one direction

I've successfully established an IPsec connection, but it works only partially. One side does not send out packets through the tunnel. It seems as if the network topology is unclear to this side. ...
0
votes
1answer
287 views

Does Windows Server 2008 R2 firewall ipsec tunnel encapsulated data in one port?

Today I have the following setup: All my servers are located in the internet, they are protected by Windows Firewall and Advanced Secutiry using IPSec with certificate. It includes the Domain ...
0
votes
0answers
108 views

How can I add encryption to a GRE tunnel?

I'm using a GRE tunnel on a few Ubuntu servers to join multiple AWS regions in separate VPCs into one internal network to reduce the number of IPs I need, as well as network complexity. Right now, my ...
0
votes
1answer
453 views

Finally get my win 7 connected to strongSwan VPN, but there's no Internet

I believe I've followed all the instructions, and my win 7 did get connected, but there's no Internet. Background: Server OS: ubuntu 12.04 on linode xen VPS strongSwan Version: 4.6.4 ...
0
votes
2answers
151 views

How does VPN software 'hijack' packets for tunneling?

My current mental model An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation Somewhere along the line before the ...
0
votes
1answer
727 views

Pfsense 2.02 unstable ipsec vpn.Tunnels will come up upon restarting raccon [duplicate]

Pfsense 2.02 Ispec VPN tunnels drops randomly,but when the raccon service is restarted all tunnels are back up.Here is my ipsec vpn configuration.Any fix on this issue? I have tried enabling and ...
0
votes
1answer
50 views

Can't setup IPSec policy for LDAP

I'm trying to setup IPSec policy for TCP port 389 that only allow limited group of IP address to connect. (The target machine was a domain controller.) So I added two filters, one to deny all ...
0
votes
1answer
949 views

Pfsense 2.02 ipsec vpn tunnel goes down randomly

Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this. These are the logs: racoon: ...
1
vote
1answer
331 views

VPN with xl2tpd and racoon - how to NAT traffic out of non-default IP address

I have a server running Debian which has networking like this: eth0 - has public IP address 1.2.3.4 eth1 - has public IP address 1.2.3.5 I'm trying to set up a VPN on the server which I can connect ...
1
vote
0answers
91 views

Running a VPN server and a captive portal on the same machine with a DNS too

I don't know if this can be done but I'm asking anyways. Let's say that I've an Ubuntu machine with OpenSwan and xl2ptd to handle incoming VPN connections. Now, what I need to do is something like ...
0
votes
1answer
88 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
1
vote
1answer
176 views

Windows Advanced Firewall - adding Authorized Computers breaks rule

How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity? Background: I'm setting up a basic set of client rules that restrict ...
1
vote
0answers
50 views

List of valid Vendor ID in Vendor ID payload

I have some logs from a VPN with lines like this one: Ignoring Vendor ID payload [4a131c8107035845...] Can I use the hexadecimal code there to identify what kind of hardware attempted to establish ...
3
votes
1answer
457 views

IPSec L2L Failover between two pfSense devices

Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
0
votes
0answers
1k views

IPSEC Tunnel with OpenSwan on Ubuntu <-> CISCO Router

I have setup a tunnel between a UBUNTU SERVER linux box and a CISCO ROUTER. This is what's the topology looks like: host 1 ------ UBUNTU SERVER IPSEC <---> CISCO ROUTER ------ host 2 | ...
1
vote
0answers
61 views

Can I make Windows 7 process the IPsec INITIAL-CONTACT message?

Windows 7 seems to ignore the IPsec INITIAL-CONTACT notification described in RFC 2407. Is there a setting to make it process the message? When Windows receives the notification, it should delete its ...
0
votes
1answer
177 views

IPSec VPN routing

This is supposed to be a pretty simple question but I couldn't google a answer for it! I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has ...
0
votes
1answer
217 views

Router with multiple incoming IPSec VPN Tunnels?

We currently have a Draytek Vigor 3200 Multi-Wan router which has 5 incoming VPN tunnels using IPSec AES encrypted configurations. All five sites are using Draytek Vigor routers, most are Vigor ...
0
votes
2answers
104 views

Is an IPSEC tunnel limited to the slowest direction of an asynchronous connection?

If I am running an IPSEC tunnel over an ADSL connection with bandwidth limits 2mbps down and 1mbps up is the bandwidth over the tunnel limited to 1mbps in both directions or is it also asynchronous? ...
1
vote
0answers
278 views

Android devices fail to connect to MS L2TP PSK

I have configured MS Server 2003 RRAS with IPSec / L2TP using PSK. iPhone devices connect fine however Android devices fail to connect. The MS "Oakley" trace file shows the negotiations for Apple and ...