IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.
2
votes
0answers
353 views
Getting ipsec-tools to work between Ubuntu Lucid hosts
I have two hosts, one is Charity with IP 67.207.128.184, the other is Hope with IP 67.207.130.204. I've installed the ipsec-tools package on each host. I have not installed racoon on either host. ...
2
votes
0answers
1k views
Issue routing openswan vpn traffic beyond the server
Trying to set up a openswan based server sitting in an Amazon VPC cluster. The goal is to make it so we can VPN into VPC and have our workstations be as if they were on the network, more of a ...
2
votes
1answer
300 views
Find out which encryption and hash algorithm is used by strongswan ipsec
I have multiple productive IPSec VPNs on a Debian-based Linux Server using StrongSwan. Currently I am busy updating my documentation with details about each VPN. Unfortunately the IKE encryption ...
2
votes
1answer
254 views
IPsec between Windows 2003 (server) and Redhat 5 (client)
I need to setup data encryption within the network. Linux client machine will connect to a Windows 2003 server.
I need to enable IPsec on both the machines. Windows to Windows is working fine but ...
2
votes
1answer
1k views
OpenSwan (IPSEC) on Fedora 13 with Snow Leopard as a client
I recently installed OpenSwan on my Fedora 13 machine. I want to use it to connect with Mac OS X with L2TP over IPSEC, unfortunately I am already stuck on the IPSEC-negotation part.
My server is ...
2
votes
3answers
375 views
Is it possible to use Microsoft's “Secure Connection Rules” (IPSec) with VPN?
Is it possible to use Microsoft's "Secure Connection Rules" to authenticate/encrypt connections while using VPN at the same time?
What are the configurations necessary?
It should look like this:
...
2
votes
2answers
2k views
Using Ubuntu Karmic as an L2TP Client for VPN
I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working.
The only details I have are the remote IP address, username & password, and a shared secret string; ...
2
votes
5answers
607 views
Can anyone recommend an affordable IPSec appliance that is compatible with Windows 7's built-in client? [closed]
I am looking for an affordable IPSec appliance that will work with the built-in client in Windows 7.
1
vote
3answers
152 views
VPN for security
I have a server which will hold some sensitive data. At the moment, access to the server is restricted via SSH and only to a single person. The server is however on the same network that many other ...
1
vote
5answers
943 views
what is simplest VPN type approach to use with home network when travelling? [closed]
I'm going travelling and would like to be able to VPN from a internet cafe to home so I can do internet banking more securely.
Any advice re what would be the best VPN technology/approach to use ...
1
vote
3answers
902 views
when to use IPSec in Windows AD domain?
As I understood the joined to Windows AD computers are always securely identified/authenticated before DC (using automatically changed computer accounts passwords).
Now, I read (in non-English ...
1
vote
1answer
235 views
When is an IPsec tunnel a real candidate for NAT-T (when is it absolutely required?)?
I've had a persistent problem establishing phase 1 of an IPsec tunnel I am initiating from an endpoint at my site to a vendor.
It is a bit of an odd configuration and I am not sure if NAT-T must be ...
1
vote
4answers
4k views
Phase 2 Mismatch when connecting Windows 7 to ASA5505 VPN
I'm trying to stand up a new ASA5505 on our network (previously we used IPCop), and I'm having a bit of an issue getting the VPN to work. I ran through the IPSec VPN wizard in ASDM (6.3) on the ASA ...
1
vote
2answers
5k views
PPTP/GRE Multi-forwarding NAT IPTables Example
Google is showing me some returns on PPTP/GRE NAT through iptables/netfilter that will allow multiple connections.
However, I am not finding an example of using this pptp helper module that allows ...
1
vote
2answers
101 views
Connecting multiple lans by VPN
Our customer has about 10 different offices.
Head office has a router which maintains IPSec VPN connections to all of the site.
Each site has their own IP range, eg..
192.168.50.x
192.168.60.x
...
1
vote
2answers
314 views
Restrict access to Windows Terminal Services with dynamic IP address clients
In light of some recent worms I'm looking at ways to further restrict access to terminal services on my public facing Win2k3 server. Are firewall IP address restriction is not an option as the genuine ...
1
vote
2answers
501 views
IPSec with PSK under Win Server 2k8 R2
I'm trying to connect a Win Server 2k8 R2 system to a remote machine via IPSec. For this, I got the following settings from the other party:
Phase 1: PSK, AES256, SHA-1 Group 2
Phase 2: AES256, ...
1
vote
2answers
2k views
GRE Tunnel over IPsec with Loopback
I'm having a really hard time trying to estabilish a VPN connection using a GRE over IPsec tunnel. The problem is that it involves some sort of "loopback" connection which I don't understand -- let ...
1
vote
2answers
187 views
VoIP and IPv6 with IPsec
I had some basic questions about VoIP in a IPv6 architecture, right now I'm running
VoIP in a v4 architecture, and I was thinking about to change everything to v6.
my questions are not that practical ...
1
vote
3answers
600 views
What firewall should my network configuration be based on?
I’m working on a plan to replace a number of router/firewalls in our company’s and customer’s networks.
We have 2 offices and a number of servers hosted in a datacentre that have IPSec VPN links to ...
1
vote
1answer
149 views
How to batch apply windows server IPsec rules
OS: Windows server 2003
I got a huge list of rules that need to be add in IPsec. Is there any way I can do in bulk mode instead of added one by one? If no, it will be a nightmare... Thanks.
1
vote
1answer
28 views
How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?
I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites.
Existing:
[10.1.0.2...] = source client
|
[10.1.0.1 ASA ...
1
vote
1answer
343 views
How to delete IPSEC VPN tunnel from Fortigate 60
I have had a IPSEC connection setup between two firewalls. Now I want to remove the tunnel in my firewall, a "Fortigate 60".
There are two phases, "Phase 1" and "Phase 2" for each IPSEC connection. ...
1
vote
1answer
133 views
Changing an IPSec pre-shared key without bringing down the tunnel (too long)
How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
1
vote
1answer
92 views
Linux networking and routing
I have 3 networks:
192.168.1.0/24
192.168.11.0/24
192.168.50.0/24
192.168.1.0/24 and 192.168.11.0/24 are connected to each other through an IPSec tunnel, and 192.168.11.0/24 and 192.168.50.0/24 are ...
1
vote
1answer
732 views
Does Linux support IPsec service out of the box?
As per subject. I have heard of default IPsec support on later versions of Linux kernel (without need to recompile or install special packages) but maybe it's a rumour?
Interested in both VPN ...
1
vote
1answer
532 views
Is turning off Perfect Forward Secrecy a security threat?
I had to disable PFS in the IPsec rules on one of our ASAs to allow Android Gingerbread clients to connect. Does doing so compromise the security of the VPN? Communications are AES-256 or AES-128 with ...
1
vote
2answers
793 views
L2TP/IPSec PreShared Key VPN
I tried to setup a L2TP/IPsec VPN server with PSK authentication according to this tutorial on a Ubuntu server but there is a problem when I'm trying to connect to this server with a Windows 7 client. ...
1
vote
1answer
981 views
IPSec VPN between Amazon VPC and a Watchguard XTM?
I have a branch office behind a Watchguard XTM that needs VPN into an EC2 VPC. I am unfamiliar with Watchguard and am unable to find all of the knobs and dials in the flash admin interface to bring it ...
1
vote
2answers
903 views
Cisco IPSec, nat, and port forwarding don't play well together
I have two Cisco ADSL modems configured conventionally to nat the inside traffic to the ISP. That works.
I have two port forwards on one of them for SMTP and IMAP from the outside to the inside this ...
1
vote
2answers
7k views
How do I allow IPSec over TCP through a Cisco ASA?
I have a internal user that needs to connect via VPN to an external company. The external company's vpn is using IPSec over TCP on port 57369. When my user tries to connect it fails. The logs on my ...
1
vote
1answer
2k views
Setting-up Windows Server 2003 as an L2TP/IPSEC VPN server
I'm looking for a pointer to step-by-step instructions for setting-up a Win Server 2003 Std box as a L2TP/IPSEC VPN server. I don't need to use certificates - pre-shared key is sufficient - and the ...
1
vote
5answers
2k views
FreeBSD's VPN & Mac OS X IPSecuritas
I need to be able to VPN in to my FreeBSD server from my Mac using IPSecuritas. I was wondering if anyone ever done something, I'm reading VPN over IPsec but that mainly covers if you had 2 nodes with ...
1
vote
1answer
1k views
Command to block an IP range using IPSEC
I think there is command with netsh .... But not sure about the exact command.
1
vote
1answer
19 views
Routing Asterisk traffic evading a VPN
I have two offices set in two distant locations, connected through a IPSec VPN (using pfSense). On one office, I have an Asterisk PBX where all the extensions connect, and the Asterisk PBX is ...
1
vote
2answers
52 views
Openswan tunnel up, but works only in one direction
I've successfully established an IPsec connection, but it works only partially. One side does not send out packets through the tunnel. It seems as if the network topology is unclear to this side.
...
1
vote
1answer
80 views
IPSec L2L Failover between two pfSense devices
Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
1
vote
1answer
695 views
Centos 6.3 OpenSWAN doesn't find my connection
I've been tearing my hair off in frustration for too long and decided Serverfault might be able to help. Could anyone somehow explain this?
I've reinstalled openswan/ipsec with purge multiple times, ...
1
vote
1answer
121 views
Barracuda/ASA IPSEC tunnel is closing (which is ok, on idle) but can only be raised from the Barracuda side
We have a IPSEC tunnel set up between our ASA and a Barracuda NG on the other side. The tunnel is functional, except it seems to have a very short idle time-out (couple of seconds) and it can only be ...
1
vote
1answer
170 views
netfilter: How to mark packet by reqid?
I have the following problem. I have SAs that use firewall marks. So only packets that have that mark get encoded and decoded.
I managed to set the mark for packets that shall be encoded but I cannot ...
1
vote
2answers
177 views
How to test if a vpn has been established correctly between two pc's?
I'm trying to connect two pc's using IPsec and StrongSwan.
The first pc, which I want it to be the server runs openSUSE and the client pc runs Fedora.
So after installing StrongSwan in the first pc ...
1
vote
1answer
359 views
pfSEnse-pfSense IPSec Tunnel, cannot open documents on Sharepoint WebDAV share
I set up an IPSec tunnel between my home network and work. We have a Sharepoint server in the office that I used to be able to access just fine remotely. Now that requests to the server are routed ...
1
vote
1answer
607 views
How can I create a host to host IPsec VPN if my server has direct Internet access and no LAN?
I have a Linux server (CentOS 5.5) that has direct access to the Internet with a fixed IP address. That is, the IP address is 200.29.X.Y. The gateway was given by the datacenter (200.29.X.Z) and the ...
1
vote
1answer
1k views
strongSwan ipsec setup, couple of questions
i am trying to setup a IPsec bridge between my home network and my office network. I want to use StrongSwan to encrypt the traffic as IPsec
i am trying to follow this guide
A brief description of ...
1
vote
1answer
203 views
Can I create a IPSEC rule between two servers and still allow normal external traffic?
Simple enough really. Can I create a IPSEC rule/filter between two publically available servers (they are actually on the same network) while still allow external traffic to the same resources.
I'll ...
1
vote
1answer
624 views
IPsec isakmp_natt problem on racoon.conf
I have this weird problem where racoon complains of the following error:
WARNING: NAT-T is enabled in at least one remote{} section, but no 'isakmp_natt' address was specified!
I've already ...
1
vote
1answer
7k views
iptables rules to allow L2TP/IPSEC VPN behind firewall
I asked about this on the Smoothwall Express forums but they are understandably reluctant to provide to much help. After all, they really want to sell the commercial version.
I need to provide an ...
1
vote
1answer
364 views
Extract number of users connected to IPSsec/L2tpd server
We have a new corporate VPN server running Ipsec (Openswan) + xl2tpd + pppd. When a user connects, pppd runs the /etc/ppp/auth-up script which logs the time and username that has connected to ...
1
vote
1answer
569 views
Cisco ASA 5510 <-> Sonicwall Pro 2040 - IPSec half working
Ok... I'm having a really strange IPSec issue (at least strange to me :-) ). I have a Sonicwall Pro 2040 connected to an ASA 5510. When the traffic initiated from the Sonicwall side of the network, it ...
1
vote
1answer
201 views
Choosing protocol/method of connecting branch offices or datacentres
I have experience of openvpn, ciscos ipsec tunnels and alike but I wonder in what situation one would benefit from using a MPLS instead? If I understand it correctly, MPLS is L2 (but is sometimes ...
