IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
0answers
255 views

Windows RRAS server behind NAT to remote Fortigate via IPSec

I am about to deploy a Windows sever 2012 R2 RRAS server to connect to a FortiGate device via IPSec for site-2-site VPN. Phase 1 ending successfully, however, the Phase 2 failing, the Windows server ...
0
votes
1answer
330 views

Can't route back down ipsec tunnel from VPS

I am trying to establish an ipsec VPN from a Draytek router on the edge of our corporate network to a VPS on Digital Ocean. I've set up the VPN on the VPS using this script on an Ubuntu 14.04 machine. ...
0
votes
3answers
2k views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...
0
votes
0answers
300 views

Sonicwall GVC client failing on IKE phase 1 over LTE cell data connection

We're using Sonicwall's Global VPN Client to connect to our TZ210. It works fine over general WiFi, but not with the data connection on our on-call phone. When tethered via WiFi to the phone's ...
0
votes
0answers
230 views

(RouterOS) IPSec server can't find static policy on client connection

When trying to connect to server that have following settings: /ip ipsec peer> print 0 address=0.0.0.0/0 local-address=0.0.0.0 passive=yes port=500 auth-method=rsa-signature ...
1
vote
0answers
351 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
0
votes
1answer
258 views

How to deny connections to xl2tp without ipsec encryption?

I try to setup l2tp+ipsec server for my mobile use and my home router use. So I made some setup and checked it works fine from android device. I see encryption on ipsec --status. My system is CentOS ...
0
votes
1answer
3k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
1
vote
1answer
159 views

Force Cisco ASA to change source port NAT

I have a 2 devices, a Cisco ASA and sitting behind it another device. Both the Cisco and the other device have IPsec tunnels but to different locations. I need to ensure that the source port of the ...
0
votes
0answers
172 views

Connect Multiple Users Behind same NAT l2tp/IPsec

I have installed OpenSwan on CentOS 6, the clients connection to the server is successful and when i direct my browser to http://whatismyipaddress.com on the client it shows the public ip of the ...
1
vote
0answers
129 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
2
votes
1answer
2k views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
0
votes
2answers
231 views

How can I connect to a Cisco ASA5540 from Windows Server 2012 over IPSEC?

Given a windows server 2012 client (which I have under full administrator control), and an external Cisco ASA5540 router (which I don't), I'd like to connect to the router to access their internal ...
0
votes
0answers
369 views

How to debug IPsec L2TP authentication failure (Ubuntu StrongSwan client to Windows Server 2012)

I'm trying to connect via IPsec L2TP to a Windows Server 2012 server. Both the clients and the host are behind a NAT. I can connect from a Windows 7 machine without any problems, but when trying to ...
0
votes
0answers
77 views

Route AAA LDAP traffic from ASA through IPSEC-tunnel to Windows DCs

We have one Cisco ASA 5505 in our HQ responsible for connect our remote office with a IPSEC-tunnel and one ASA 5505 at the remote office. The Cisco ASA 5505 in our HQ is also responsible for VPN users ...
1
vote
1answer
1k views

IPSec Site-to-site VPN speed between Germany and China very poor

we have successfully setup a Site-to-site IPSec VPN connection between our two offices in Germany and China. Below are the characteristics of both sites, VPN and current speeds: Germany VPN Router ...
0
votes
0answers
53 views

Reach non existing AWS VPC subnet from IPSec tunnel

So here is my setup: VPC: 172.16.0.0/16 Subnet 1: 172.16.1.0/24 openvpn server: eth0: 172.16.1.10 tun0: 172.17.0.1 ovpn client 1: 172.17.0.6 ovpn client 2: 172.17.0.10 IPSec VPN is using ...
0
votes
0answers
159 views

ClearOS OpenSwan to Linksys RV042 VPN not encapsulating packets

I have a big problem which prevents our IP Phones to be working properly for a week now; Our old DFL-210 fried during an electrical event. It was doing an IPSec VPN with our remote site via their ...
0
votes
0answers
110 views

How to configure strongswan to support iOS mobile devices?

I'm trying to configure strongswan server to support iPhones and iPads. I'm using client certificate for authentication, I have the following configuration for iOS in strongswan.conf : conn iOS ...
0
votes
0answers
120 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
3
votes
1answer
563 views

Can I have an alert when a IPSEC is down in Fortigate 80C?

We have a fortigate 80c and 60D with an IPSEC VPN . Is there a way to use the log (or other tool) to send an email alert when the tunnel is down? I couldn't see anything on the Log & Report tab
0
votes
0answers
51 views

Tagged traffic over Checkpoint IPSec

How can I forward tagged traffic over Checkpoint IPSec? Where I can read more info about it? I have Checkpoint R76 and I need to use tagged vlan over IPSec tunnel.
0
votes
1answer
59 views

IP Addresses over IPSec

I've got four hosts setup as follows: I've got an IPSec tunnel via OpenSwan over the internet between Servers B and C. Servers A and D are configured to route traffic to the other via B and C ...
0
votes
0answers
22 views

Issue with SNAT and IPsec

Hi I am having issues with an IPsec connection I have, the connection is established this is the output of ipsec whack --status 000 #17: "connection/0x1":500 STATE_QUICK_I2 (sent QI2, IPsec SA ...
2
votes
0answers
57 views

IPsec - strange behavior

I have set up site-to-site ipsec connection between linux(debian) and mikrotik router. The tunnel is up linux configuration: config setup interfaces=%defaultroute keep_alive=60 ...
2
votes
1answer
2k views

Why are only 3 ip xfrm policies needed for a IPsec tunnel?

I have a site-to-site IPsec tunnel up and running between a strongswan (v5.2.0) instance (site A) and a RouterOS router (site B). Everything works fine, the hosts in the two private subnets setup for ...
1
vote
1answer
578 views

Security risks of using Google DNS to resolve names on a private net (192.168.x.x)?

Are there any known risks associated with using a public DNS versus a DNS which we or our partners control? Our solution involves a few embedded devices so using Google DNS would give us a degree of ...
2
votes
1answer
230 views

Does a site-to-site IPSEC vpn need an always on connection?

Does a site-to-site IPSEC vpn needs an always on connection/tunnel with keepalives or is it possible to only encrypts packets when needed (when it matches a route or something like that)?
0
votes
0answers
61 views

Ipsec right side multiple ip's and phases lifetimes

This is my setup for ipsec: conn outside_company authby=secret ike=aes256-sha1;dh2 phase2=esp phase2alg=aes256-sha1;dh2 pfs=yes keyingtries=3 ikelifetime=24h ...
0
votes
0answers
730 views

vpnc: no response from target

I have not be able to for a tunnel using vpnc or shrew soft to my pfsense box running IPSec. I have made sure that the correct ports are open, the user I'm trying to log in has the correct permissions ...
1
vote
1answer
917 views

Cisco 2901 - IPSec VPN Maxing CPU

We have a Cisco 2901 on the edge of a 100Mbps/100Mbps WAN link which is providing an endpoint for an IPSec VPN to a Juniper SSG 550M. The problem is that we are seeing a max of 'only' 40Mbps over the ...
0
votes
1answer
245 views

FreeBSD L2TP VPN connection error

I have a L2TP/IPsec VPN server on FreeBSD 10 set as this article. Everything works fine except clients cannot receive packets from outside. Here is the tcpdump result when a connected client tries to ...
1
vote
0answers
536 views

Creating redundant IPSec connections using OpenSwan

I have a linux (netkey) instance with openswan installed, the instance has two connection to the same IPSec peer that needs to act as redundant connections. both connections' properties are the same ...
1
vote
2answers
188 views

Allow only IPSEC outgoing traffic to a port (using IPTABLE?)

Problem: I've a situation where IPSEC server and the target server (Say http server) happens to be the same machine and I need allow ONLY the traffic coming through IPSEC server to have access to a ...
1
vote
0answers
336 views

Shorewall: DNAT to IPSEC tunnel zone not routing correctly

I have a ipsec tunnel working that gives access to a 192.168.4.0/24 lan. It is working fine and I can access hosts on the other side without problem: # from fw and lan hosts: # ping 192.168.4.44 PING ...
0
votes
0answers
82 views

Openswan not updating the routing table

I have problems to find solution about this. I have Openswan and ASA configure IPSec VPN tunnel and the connections is established and working but with some little problems. The topology is looking ...
0
votes
0answers
227 views

IPSEC VPN with same remote peer IP - Only 1 remote connection at a time

I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address. The first phone connects fine, when the second phone connects the first phone ...
0
votes
0answers
344 views

OpenSwan IPsec connection drops after 30 seconds

I'm trying to connect from my Linux Mint 16 box to a CloudStack server through IPsec L2TP. Building up the connection works (pings work across the tunnel). However 30 seconds later the IPsec tunnel ...
0
votes
1answer
55 views

How to set up vpn tunnel (ipsec) connection

I'm working with a client who wants to set up a vpn tunnel between their network and ours. They're in charge of the tunnel and to give us the access they are asking me my public IP and my LAN IP. ...
0
votes
1answer
910 views

Routing internet traffic through a site-to-site IPsec tunnel

We are trying to replicate what is described at https://doc.pfsense.org/index.php/Routing_internet_traffic_through_a_site-to-site_IPsec_tunnel#Set_up_the_IPsec_tunnel_Phase_2 We are using 2 ...
0
votes
0answers
274 views

IpSec/Racoon: Packets go to wrong tunnel

I use Debian and Racoon to connect to a Cisco VPN Gateway. We have got two tunnels between the same endpoints. Somehow and sometimes, packets go to the wrong tunnel. This is the log message from the ...
2
votes
2answers
5k views

ipsec verify on ubuntu Two or more interfaces found, checking IP forwarding [FAILED]

Ubuntu 14.04, Openswan U2.6.38/K3.13.0-30-generic When I run ipsec verify I get this error. Two or more interfaces found, checking IP forwarding [FAILED] I see quite a few of this same ...
0
votes
0answers
668 views

Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time

I have set up a L2TP/IPsec VPN server on a cloud VM (with a public IP address) running CentOS 6.5 (kernel: 2.6.32) with openswan/xl2tpd (openswan: 2.6.37, xl2tpd: 1.3.6). However, if multiple Windows ...
3
votes
1answer
2k views

Site-to-Site IPsec vpn not sending ping across a tunnel

This is my first attempt at a site-to-site VPN. I chose to use IPec because it appeared to be the best solution for what I needed to accomplish. I've followed several different tutorials over the last ...
1
vote
0answers
33 views

IPSEC on linux with multiple remote ISP

I have configured 2 ipsec VPN connection from my linux server to my clients locations. the reason being the client has two ISPs a primary and a secondary on. The client wants to switch to secondary ...
1
vote
0answers
1k views

Cannot connect to IPSEC/L2TP VPN Arch Linux/Windows 8

I have check a lot of other L2TP/IPsec VPN post and none of them seem to quite match the issues I am having so here is what going on. I am trying to set up a VPN on my Arch Linux server that I can ...
2
votes
2answers
2k views

Trying to replicate a working IPSec/L2TP config from OpenSWAN to StrongSWAN

I have a working OpenSWAN implementation for RA, using IPsec transport and l2tp for the tunnel, running in AWS. The instance has a private IP, with a public EIP mapped to it. I use the private ip for ...
0
votes
1answer
696 views

Openswan and OpenVPN

I have installed Openswan and have configured IPSec tunnels and they work perfect until i install OpenVPN. Now i can't find out way the ping wont work. When i execute the "service ipsec status" it ...
4
votes
2answers
656 views

TCP connection through IPSec (Linux/Strongswan) stalls after exceeding PMTU

The backups (via Bacula) of one of my servers (“A”) connected via IPSec (Strongswan on Debian testing) to a storage daemon (“B”) don't finish 95% of the times they run. What apparently happens, is: ...
1
vote
1answer
645 views

Windows 7/8 Strongswan IKEv2 Wrong Gateway

I have setup Strongswan on Ubuntu 14.04 from the official package. I use IKEv2 with PKI authentication and a custom authorization plugin. This works great for Android and Ubuntu clients using ...