IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
1answer
990 views

Openswan is not sending packets on new ip after DPD

I have configured tunnel with DDNS. After appliance get rebooted the other side is not sending packets on new ip-address (even i have set dpdaction=restart). I am using openswan 2.6.38. Here is my ...
0
votes
1answer
633 views

Strongswan with X.509 authentication and LDAP authorization

I would like to setup Strongswan/Libreswan with PKI authentication. Now I have searched and found only how to configure specific accepted client certificates like here: ...
1
vote
1answer
181 views

VPN Tunnel set up Issues - Cisco WRVS 4400N to Server 2008 R2behind ASA5505

I was wondering if someone could help with a scenario i have that i am not sure how to set up regarding a VPN tunnel set up. I have a Cisco WRVS4400N business router , and on this device , i need to ...
0
votes
1answer
1k views

Cannot connect to VPN on Server 2012

We run a small business and have a server that runs our VPN on Windows Server 2012. Our VPN was working fine until we restarted our router and it seems that restart procedure broke the VPN. We are ...
0
votes
0answers
820 views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
1
vote
1answer
147 views

Is using EAP-MD5 in strongSwan a security risk?

Quoting Wikipedia: It offers minimal security; the MD5 hash function is vulnerable to dictionary attacks, and does not support key generation, which makes it unsuitable for use with dynamic WEP, ...
1
vote
1answer
394 views

IPSec on Domain Controllers and Trusted Domains

I am looking at configuring IPSec as follows: Isolation Request authentication for inbound and outbound connections Computer and user (Kerberos V5) I am looking to do a blanket deployment across ...
1
vote
1answer
199 views

Testing IPsec with Nagios / Icinga?

Several of my Windows servers are running IPsec. There are a small handful that have problems when rebooting with the IPsec services not coming up. As a result I'd like to set up a monitoring check ...
0
votes
1answer
302 views

Linux IPSec between Amazon EC2 instances on same subnet

I have a requirement to secure all communications between our Linux instances on Amazon EC2 - we need to treat the EC2 network as compromised and therefore want to protect the data that's being ...
0
votes
1answer
144 views

How is my GRE-Tunneled packet being routed? [closed]

I'm trying to figure out exactly what is happening when I create a GRE tunnel. My network looks like this (-> means directly connected): Computer A (eth0: 10.0.1.1) -> (eth0: 10.0.1.2) Router B ...
2
votes
1answer
68 views

Should we accomodate a customer asking us to NAT servers behind new PUBLIC IPs within a VPN?

We're a SaaS provider, setting up a IPSec VPN between our data center and a customer's site so they can directly access their hosted database server from their LAN. Instead of exposing our internal ...
0
votes
0answers
214 views

Site-to-Site VPN not connecting with Cisco 877

I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit ...
1
vote
1answer
4k views

strongSwan setup where both sides are behind NAT

I'm trying to setup a strongSwan server in my home and connect to it from another network. Let's say sun is the VPN server and venus is the client. Both sun and venus are behind NAT networks. sun is ...
0
votes
1answer
282 views

EAP password prompt in strongSwan

I'm trying to setup a host-host configuration using strongSwan. I did manage to set it up using certificates and now I wish to set it up using certificates + EAP authentication. I mixed this ...
4
votes
2answers
4k views

Is it possible for L2TP VPN to do auto route configuration for client during connected?

We've setup a L2TP VPN server with this tutorial, everything works like a charm. The only issue is We don't want client to route all traffic using this VPN, only a particular subnet, e.g. ...
0
votes
0answers
618 views

Site to site IPSec VPN between Server 2012 and USG 50

I am looking to setup an IPSec VPN server in our organisation using a Windows server 2012 machine with remote access and routing installed. I would then like to perform a site to site IPSec VPN ...
0
votes
0answers
376 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
1
vote
1answer
406 views

Issues with StrongSwan on FreeBSD 10.0. Charon refuses to start

The charon.log with full debug levels (4) is as follows: Jan 21 16:09:47 00[DMN] Starting IKE charon daemon (strongSwan 5.0.4, FreeBSD 10.0-RELEASE, amd64) Jan 21 16:09:47 00[LIB] plugin 'aes': ...
-1
votes
1answer
74 views

Is secure pptp not possible on Ubuntu?

From [1], it was said that 1) All users and providers of PPTP VPN solutions should immediately start migrating to a different VPN protocol. PPTP traffic should be considered ...
0
votes
0answers
859 views

Fortigate VPN can't reach site

I've two Fortigate's here and I use one of them for each site. Site A Site B 192.168.2.0/24 <---------- VPN ...
1
vote
0answers
71 views

Windows server 2003 ipsec error

I have a Windows Server 2003 domain controller and a bunch of clients. Something happened and now IPSec service fails on the server. After IPSec fails to start, all TCP/IP traffic is blocked to the ...
1
vote
1answer
1k views

Cisco IPSEC VPN Slow Speeds

We have a site to site IPSEC VPN, both endpoints are Cisco PIX 515e's. The links at both end are 100mb, however speeds over the VPN (logged using jperf) are at most 4mb. Obviously this represents a ...
0
votes
2answers
145 views

Cisco IPSec Hardware Requirements

In order to use IPSec on 2811 and 2651XM Cisco routers, does one need any particular hardware module(s) or just the appropriate software?
1
vote
2answers
248 views

How Can You Tell If IPSec Is Installed on Cisco

How can I tell if my Cisco router has IPSec installed? I went into configuration mode to see about setting up a crypto policy, but the 'crypto' keyword isn't available. Is this an indication that it ...
0
votes
1answer
505 views

Routing Strategy for Multiple VPCs on AWS

I am planning to setup multiple Virtual Private Clouds (VPC) on AWS. These VPCs will be located in different geos. Each VPC will have public as well as private instances. I need to incorporate an ...
0
votes
2answers
158 views

Limit Privoxy access with iptables to IP range

I would like to limit the access of the Privoxy port to a selected IP range. Background: I'm using an IPSec-VPN which users get 10.0.0.0/8 addresses assigned and only those users should be able to use ...
2
votes
3answers
2k views

VLAN over VPN (ASA 5520)? if not any other options available?

Is it possible to extend the local VLANs to a Remote site connected by IPSEC VPN using ASA 5520 / Cisco 1841 DSL router. can we have many VPN tunnels between the ASAs? (from every VLAN one vpn ...
0
votes
1answer
451 views

Locked out of RDP access to web server - how to stop IPsec Policy Agent?

An ipsec filter rule was deleted in error that has now locked me out of RDP access to the server - very big problem (this is a Windows Web Server 2008 R2 (64-bit) rented from 1&1). I can connect ...
0
votes
1answer
583 views

Site-to-Site VPN from Windows Azure to Cyberoam CR25iNG

I'm trying to configure Site-to-Site VPN between Windows Azure and on Premise network using Cyberoam CR25iNG UTM Firewall The Local Network Subnet is 192.168.0.1/20 (192.168.0.0 - 192.168.15.255) ...
2
votes
1answer
385 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
0
votes
0answers
635 views

l2tp vpn is disconnected after few minutes

I installed IPSec/L2TP on my vps server. I tried to connect from my mac to this VPN server. First time, connection is succeeded. But after a few minutes, connection was broken by itself. After ...
4
votes
2answers
2k views

IPSec tunnel on ASA keeps disconnecting

I have an ASA IPSec tunnel configured between an ASA5505 and Microsoft TMG 2010 SP2. The tunnel sometimes works for a few hours, and then disconnects, and other times it works for 5 minutes and then ...
2
votes
1answer
1k views

L2TP/IPsec through HTTP Port 80

i got an VPN (L2TP/IPsec) Tunnel running on my synology nas. my router is configured for vpn passthrough. so everything is fine. furthermore i got an webservice running on port 80. now i got the ...
0
votes
0answers
571 views

IPSec tunnel not working when set up asynchronously

I'm trying to create a tunnel using StrongSwan. In order to do this, I'm creating two sh files, one for each gateway router. All I'm doing in the sh files is creating the tunnel, configuring it, and ...
1
vote
0answers
1k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
2
votes
1answer
749 views

Poor SMB Download Speed over VPN

I'm at a bit of a loss for trying to figure out how to improve our file sharing with remote users. The setup is as follows: Cogent Fiber 100 Mb/s Up and Down Sonicwall running SonicOS 5.8.1 Dell ...
2
votes
2answers
8k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
0
votes
0answers
42 views

simple subnetting, regarding vpn

i am using 2 cisco rv180 to build up a ipsec tunnel. thats working. but i cant get any packets trough the tunnel. first i was using: local: 10.0.0.X 255.0.0.0 remote 10.0.1.x 255.0.0.0 but 0 ...
0
votes
2answers
439 views

VPNs and NetBIOS

I have a Cisco RV180 VPN Firewall Router and I have QuickVPN and PPTP working. However, I am not able to get NetBIOS working so that I can access everything via NAMES or get the systems to show up ...
2
votes
1answer
968 views

Cisco QuickVPN Can't view local computers

I am connected to my QuickVPN connection to my RV180 VPN Router and I can access the router via IP but I can't find or see any of the computers. How can I fix that? Do I need to do some more advanced ...
0
votes
2answers
2k views

Using strongswan, what's the difference between auto=add, and auto=start?

The docs on this are pretty vague, what operation, if any, should be done automatically at IPsec startup. add loads a connection without starting it. route loads a connection and installs kernel ...
3
votes
1answer
3k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
0answers
923 views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...
1
vote
1answer
293 views

What do transmit errors on Linux IPsec virtual tunnel interfaces indicate?

Our monitoring system is indicating transmit errors on the IPsec VTIs on our Vyatta Core routers when they are under high load. They only appear fairly occasionally, and don't appear to seriously ...
0
votes
1answer
1k views

VPN Between Checkpoint R75.20 and AWS VPC

I have been trying for a long time now to configure a site-to-site VPN connection between Amazon and a Checkpoint R75.20 (previously i tried with Azure) unsuccessfully. I have tried everything and ...
3
votes
1answer
3k views

What is the difference between “Main” mode and “Quick” mode when using IPsec in Windows Server?

What is the difference between “Main” mode and “Quick” mode when using IPsec in Windows Server? When does each one come into play?
0
votes
1answer
1k views

StrongSwan + xl2tpd client timeout between 2-5 minutes

I run CentOS 6.4 on Amazon EC2, using xl2tpd-1.3.1 from EPEL repository together with StrongSwan 5.0.4. I setup a simple IPSec connection: conn l2tp type=transport keyexchange=ikev1 ...
2
votes
1answer
1k views

How do I allow only certain IPSet set's to access a certain port with iptables?

I'm using IPSet to build IP ranges for different countries as follows : # Canada ipset -F ca.zone ipset -N ca.zone nethash for IP in $(wget -O - http://www.ipdeny.com/ipblocks/data/countries/ca.zone) ...
1
vote
1answer
105 views

Inspect IPSec payload prior to encryption

I have a Windows 7 IPSec VPN setup. When inspecting the IPSec packets generated by Windows in Wireshark the corresponding payloads are, as expected, encrypted. Is there a way to inspect the ...
2
votes
0answers
231 views

Having trouble installing Racoon and Strongswan on the same system

I have two applications that I need to run, one uses Racoon for establishing IPSec tunnels and the other uses Strongswan. Therefore, I need both Racoon and Strongswan installed simultaneously on my ...