IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
0answers
6 views

Cisco IPSec OSX multiple user accounts

Is it possible to force a Cisco IPSec Connection to prompt for UN/PW before login on OSX 10.10? I want to store the VPN Connection on the OSX machine, but I want users of that device to enter their ...
1
vote
1answer
52 views

Windows 8.1 IPSec by GPO - no firewall rules generated

I am seeing very strange behavior on Windows 8.1 clients when attempting to configure IPSec rules via group policy. I am configuring several rules through several policies, to be able to target the ...
1
vote
1answer
54 views

IPSec: is it possible to check that a packet passed via IPSec tunnel? [duplicate]

In our deployment we have two servers. I want to connect it via host to host VPN: Host-To-Host VPN Using Openswan On one server we have JMS broker on the second server we have JMS client and I want ...
0
votes
0answers
27 views

Openswan and nat_traversal

I got a problem with openswan and nat_traversal option. If it is set to no, my tunnel goes up but i cannot exchange packets with the peers because i'm behind a router. If it is set to yes, a lot of ...
0
votes
0answers
60 views

Use RRAS Assigned Static IP for TCP

I'm using RRAS on Windows Server 2012 to establish a VPN client connection from a server I have offsite and my home computer. What I would like to do is use the RRAS assigned static IP that I am ...
2
votes
1answer
305 views

How to set up routes for IPSec VPN where VPN endpoint itself must be able to contact remote network

I have a situation identical to the question at IPSec VPN : Traffic not routing correctly (however I don't seem to be able to contact that user directly, nor can I place a comment on that question - ...
1
vote
1answer
54 views

GRE - overlay network

I am renting a set of dedicated servers, and they only have a single interface to internet. However, for a lot of use cases, I would like my servers to communicate through a private IP network. For ...
0
votes
1answer
285 views

L2TP VPN without certificates between Windows XP and ZyWALL USG 200

I'm trying to configure a ZyWALL USG 200 firewall to let Windows XP remote clients (dynamic IP address) to connect to the workplace network with a L2TP VPN. I don't want to use certificates, a common ...
1
vote
0answers
513 views

Connect Ubuntu 14.04 with Strongswan to Microsoft Azure

I want to connect my Ubuntu 14.04 server with Strongswan to Microsoft Azure Gateway. I only want to establish a connection between Azure and that Ubuntu server. In Azure I configured a dynamic gateway....
1
vote
2answers
96 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
1
vote
0answers
298 views

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few moments....
1
vote
1answer
487 views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways ...
-1
votes
1answer
326 views

Strongswan: clients can connect to server but no internet access

I've set up an ipsec server and after a while I could connect to it from my android device. but there is no internet connection in client side. I have also added NAT rules to forward traffics from ...
0
votes
0answers
332 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 server)--...
0
votes
0answers
190 views

How to add static route to a second network on IPSec racoon tunnel

I have something like this: 192.168.25.35 -- 10.104.146.97 -- (eth2)10.104.146.99(eth0) --[IPSec VPN]-- (eth0)10.2.10.11(eth2) -- 10.2.10.20 I am trying to connect from computer 10.2.10.20 to server ...
2
votes
1answer
285 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
2
votes
0answers
136 views

Is there an extension of host to host ipsec to a many-many configuration?

Having a typical host to host transport mode ipsec configuration, conn appserver01-to-swift01 leftid=@appserver01.server.com left=10.133.176.246 leftrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxx ...
0
votes
0answers
340 views

Strongswan IPsec: routing arbitrary subnets over /32 IPsec endpoints

I have a basic setup between two sites A (FreeBSD, 10.0.0.1/24 nat'd to 1.1.1.1), B (Linux, 2.2.2.2), with only A behind NAT. I've only been able to get it working in tunnel mode. Here's my ipsec.conf:...
0
votes
1answer
304 views

IPsec VPN between Fortigate 60C and openswan up, but no traffic

I get visual confirmation that the tunnel is working from the fortigate GUI but, it also says i don't have 1 byte of traffic, the linux server also confirms the tunnel is open but i can't ping nowhere,...
0
votes
2answers
581 views

Docker & StrongSwan: Destination Host Unreachable

I'm having a bit of trouble communicating between containers using my IPsec tunnels. Here's my setup: I have Docker installed on multiple Ubuntu 14.04 hosts and I'm running various containers on each....
0
votes
1answer
4k views

How to setup L2TP IPsec VPN server on Windows Server 2008 R2?

The Windows 2008 R2 (SBS) machine was earlier setup to run a PPTP VPN server. Due to security concerns I do want to replace the PPTP by L2TP/IPsec VPN server. The server is behind a NAT router where ...
3
votes
1answer
680 views

VPN ERROR 500 STATE_MAIN_I1, unable to start phase2

i'm trying to set up a site to site vpn to a fortigate 60c from a CentOS 7 with openswan, the error i get everytime is the following 000 #1: "office":500 STATE_MAIN_I1 (sent MI1, expecting MR1); ...
0
votes
1answer
164 views

How can I tell strongswan that left is local (independent of IPs)?

Is there something like local = left which I could use in the strongSwan configuration? I don’t want to use any IP-addresses, as they might change. And I don’t want the server to guess it, I want to ...
0
votes
1answer
57 views

Start ipsec tunnel from another machine

I have to monitor the IPsec tunnel on machine A which is behind a firewall F, where the OpenSwan sits on. From machine A, if the tunnel goes down, I would restart the tunnel on machine F. What I did ...
1
vote
0answers
61 views

Microsoft Message Analyzer and Windows Advanced Firewall ipsec tunnel packet sniffing

I am trying to view connections or attempted connections in windows advanced firewall. I have tried using the Windows Firewall Service provider however the trace does not return anything. Any ideas?
1
vote
1answer
175 views

When and with which parameters does strongSwan select a connection?

StrongSwan (as responder) selects a configured connection (conn section in ipsec.conf) for each incoming initiator key exchange intent. At which times does strongSwan pick a connection configuration? ...
3
votes
1answer
283 views

Windows Server FIrewall (2012) Ipsec tunnel problems

I am new to Ipsec tunnels. I have successfully created a tunnel to a Cisco offsite router using a preshare key at a supplier. In Endpoints 1 : I have the servers ip address and the remote servers ip ...
2
votes
1answer
676 views

OS X 10.10 to StrongSwan VPN

I'm trying to to test a new (in progress) StrongSwan IPSec VPN server by connecting from OS X 10.10. This is very frustrating because the the logs show a series of "success" messages, but then the ...
0
votes
0answers
57 views

IPSec tunnel through ASA from specific IPs

I'm having some difficulty getting an IPSec tunnel to work through an ASA5510 that is already configured with a number of different tunnels that it terminates, as well as individual VPN clients. ...
0
votes
0answers
35 views

Enable IPSec on Firewall

I am using ProfitBrick for my Cloud infra. However, if I enable their firewall, IPsec does not pass through. The ports opened on firewall are: TCP 53 TCP 51 TCP 4500 TCP 500 UDP 4500 UDP 500 Does ...
0
votes
0answers
391 views

Missing /etc/init.d/ipsec script after installing strongswan 5.3.2 from source

Ubuntu 14.04 (Amazon's Ubuntu AMI). Installed strongswan 5.3.2 from source (latest version in repo is too old and doesn't work). 1 question: 1) Noticed that the /init.d/ipsec (or /init/) script is ...
1
vote
3answers
37 views

Cloud based security gateway

An organisation whose IT I'm involved with has offices in a country which blocks access to various well know services such as Skype. I can get around the issue by routing all the traffic over IPSec ...
0
votes
0answers
109 views

ipsec.conf leftsubnet different than actual subnet

I've been tasked with troubleshooting an ipsec.conf and I'm having difficulty understanding a specific portion of the configuration. Specifically, I cannot figure out why this config is using a ...
1
vote
0answers
27 views

IPsec Security Associations prevail even after IPsec tunnel is down

I am working on a script that can detect if existing IPsec tunnels on a system have gone down. From my observations, I have seen that it can take any where between 1 second to 8 minutes for this to be ...
2
votes
1answer
181 views

Poor IPsec over GRE performances

I have set up an IPsec over GRE connection with a remote host, both are NetBSD 6.1 based. The "client" is connected to the Internet through a 400Mbps fiber connection. The "server" is located on a ...
0
votes
0answers
360 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
1answer
805 views

Configure StrongSwan to work with DHCP

I have implemented a StrongSwan VPN server and would like to configure it to dynamically assign IPs to the end client. The VPN works if I give it an IP range however not if I set it to DHCP. This is ...
1
vote
1answer
1k views

ipsec vpn up, but no traffic, no ping

I've set up a VPN between my mikrotik router and Google Cloud Platform VPN. According to the Green check next to peer IP on the VPN Console, VPN is up, but all pings are timed out. > /ip ipsec ...
0
votes
0answers
313 views

Creating IPsec tunnel Ubuntu 15.04 ip sec tools

I'm trying to setup a VPN/Tunnel between three(3) Ubuntu 15.04 servers. I've googled and it seems that I can use IPsec tools for this. I've only found the following tutorial:https://help.ubuntu.com/...
0
votes
0answers
133 views

IOS FlexVPN client keeping create child SA every 60s?

I got a flexvpn client with sVTI tunnel interface, but it keeps creating child sa every 60s, like below. The VPN server is a linux Strongswan box, the config works fine in IOS 15.3 but not 15.4+. Any ...
1
vote
1answer
644 views

Routing between pfSense Subnets and IPSec VPN

I have a pfSense Router, which is the endpoint of a site-to-site IPSec VPN. In the pfSense the main LAN Interface is 10.0.2.1/24 and it has a virtual IP 10.0.125.1/24 The IPSec Phase 2 connects the 10....
-1
votes
1answer
185 views

firewalld: match which zone by policy

I have the following zones that are relevant for this question. SemiTrusted and Public I want to treat IPSEC-encrypted traffic (that is coming from some specific IP addresses) as belonging to ...
0
votes
1answer
323 views

TCP syn, ack Lost Before Entering IPsec VPN tunnel

I have configured a site to site VPN which is working fine as traffic is going through the tunnel. I am able to ping and Telnet hosts on the other network and they are able to ping me back. The ...
0
votes
0answers
416 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
1answer
664 views

CentOS 7 ipsec hardware rngd erorr

ipsec verify Hardware RNG detected, testing if used properly [FAILED] Hardware RNG is present but 'rngd' is not running. No harware random used! Someone suggest to edit /etc/...
3
votes
2answers
2k views

Strongswan VPN tunnel between two AWS instances won't connect

I am trying to set up a VPN tunnel using StrongSwan 5.1.2 between two Amazon AWS EC2 instances running Ubuntu 14.04.2 LTS. Prior to using StrongSwan, I used open(libre)swan on an Amazon RedHat AMI, ...
1
vote
1answer
586 views

Setting up site-to-site IPsec in bridged mode

I'd like to set up site-to-site IPsec in bridged mode: that is, where the hosts in each site don't need to be modified to use the IPsec gateway, but the IPsec gateway acts as a pseudowire. My plan to ...