IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

1
vote
0answers
65 views

Windows server 2003 ipsec error

I have a Windows Server 2003 domain controller and a bunch of clients. Something happened and now IPSec service fails on the server. After IPSec fails to start, all TCP/IP traffic is blocked to the ...
1
vote
1answer
1k views

Cisco IPSEC VPN Slow Speeds

We have a site to site IPSEC VPN, both endpoints are Cisco PIX 515e's. The links at both end are 100mb, however speeds over the VPN (logged using jperf) are at most 4mb. Obviously this represents a ...
0
votes
2answers
139 views

Cisco IPSec Hardware Requirements

In order to use IPSec on 2811 and 2651XM Cisco routers, does one need any particular hardware module(s) or just the appropriate software?
1
vote
2answers
220 views

How Can You Tell If IPSec Is Installed on Cisco

How can I tell if my Cisco router has IPSec installed? I went into configuration mode to see about setting up a crypto policy, but the 'crypto' keyword isn't available. Is this an indication that it ...
0
votes
1answer
438 views

Routing Strategy for Multiple VPCs on AWS

I am planning to setup multiple Virtual Private Clouds (VPC) on AWS. These VPCs will be located in different geos. Each VPC will have public as well as private instances. I need to incorporate an ...
0
votes
2answers
155 views

Limit Privoxy access with iptables to IP range

I would like to limit the access of the Privoxy port to a selected IP range. Background: I'm using an IPSec-VPN which users get 10.0.0.0/8 addresses assigned and only those users should be able to use ...
2
votes
3answers
2k views

VLAN over VPN (ASA 5520)? if not any other options available?

Is it possible to extend the local VLANs to a Remote site connected by IPSEC VPN using ASA 5520 / Cisco 1841 DSL router. can we have many VPN tunnels between the ASAs? (from every VLAN one vpn ...
0
votes
1answer
411 views

Locked out of RDP access to web server - how to stop IPsec Policy Agent?

An ipsec filter rule was deleted in error that has now locked me out of RDP access to the server - very big problem (this is a Windows Web Server 2008 R2 (64-bit) rented from 1&1). I can connect ...
0
votes
1answer
531 views

Site-to-Site VPN from Windows Azure to Cyberoam CR25iNG

I'm trying to configure Site-to-Site VPN between Windows Azure and on Premise network using Cyberoam CR25iNG UTM Firewall The Local Network Subnet is 192.168.0.1/20 (192.168.0.0 - 192.168.15.255) ...
2
votes
1answer
340 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
0
votes
0answers
799 views

Route all traffic through IPSec VPN with ZyWALL USG 100 and OpenSwan

i want to route all traffic from our ZyWALL USG 100 through an IPSec tunnel. I was able to establish a connection from the ZyWALL, but now i have no idea how i can route the traffic through the ...
0
votes
0answers
619 views

l2tp vpn is disconnected after few minutes

I installed IPSec/L2TP on my vps server. I tried to connect from my mac to this VPN server. First time, connection is succeeded. But after a few minutes, connection was broken by itself. After ...
4
votes
2answers
2k views

IPSec tunnel on ASA keeps disconnecting

I have an ASA IPSec tunnel configured between an ASA5505 and Microsoft TMG 2010 SP2. The tunnel sometimes works for a few hours, and then disconnects, and other times it works for 5 minutes and then ...
2
votes
1answer
1k views

L2TP/IPsec through HTTP Port 80

i got an VPN (L2TP/IPsec) Tunnel running on my synology nas. my router is configured for vpn passthrough. so everything is fine. furthermore i got an webservice running on port 80. now i got the ...
0
votes
0answers
517 views

IPSec tunnel not working when set up asynchronously

I'm trying to create a tunnel using StrongSwan. In order to do this, I'm creating two sh files, one for each gateway router. All I'm doing in the sh files is creating the tunnel, configuring it, and ...
1
vote
0answers
1k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
2
votes
1answer
687 views

Poor SMB Download Speed over VPN

I'm at a bit of a loss for trying to figure out how to improve our file sharing with remote users. The setup is as follows: Cogent Fiber 100 Mb/s Up and Down Sonicwall running SonicOS 5.8.1 Dell ...
2
votes
2answers
8k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
0
votes
0answers
42 views

simple subnetting, regarding vpn

i am using 2 cisco rv180 to build up a ipsec tunnel. thats working. but i cant get any packets trough the tunnel. first i was using: local: 10.0.0.X 255.0.0.0 remote 10.0.1.x 255.0.0.0 but 0 ...
0
votes
2answers
401 views

VPNs and NetBIOS

I have a Cisco RV180 VPN Firewall Router and I have QuickVPN and PPTP working. However, I am not able to get NetBIOS working so that I can access everything via NAMES or get the systems to show up ...
2
votes
1answer
917 views

Cisco QuickVPN Can't view local computers

I am connected to my QuickVPN connection to my RV180 VPN Router and I can access the router via IP but I can't find or see any of the computers. How can I fix that? Do I need to do some more advanced ...
0
votes
2answers
1k views

Using strongswan, what's the difference between auto=add, and auto=start?

The docs on this are pretty vague, what operation, if any, should be done automatically at IPsec startup. add loads a connection without starting it. route loads a connection and installs kernel ...
2
votes
1answer
3k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
0answers
866 views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...
1
vote
1answer
276 views

What do transmit errors on Linux IPsec virtual tunnel interfaces indicate?

Our monitoring system is indicating transmit errors on the IPsec VTIs on our Vyatta Core routers when they are under high load. They only appear fairly occasionally, and don't appear to seriously ...
0
votes
1answer
1k views

VPN Between Checkpoint R75.20 and AWS VPC

I have been trying for a long time now to configure a site-to-site VPN connection between Amazon and a Checkpoint R75.20 (previously i tried with Azure) unsuccessfully. I have tried everything and ...
3
votes
1answer
3k views

What is the difference between “Main” mode and “Quick” mode when using IPsec in Windows Server?

What is the difference between “Main” mode and “Quick” mode when using IPsec in Windows Server? When does each one come into play?
0
votes
1answer
984 views

StrongSwan + xl2tpd client timeout between 2-5 minutes

I run CentOS 6.4 on Amazon EC2, using xl2tpd-1.3.1 from EPEL repository together with StrongSwan 5.0.4. I setup a simple IPSec connection: conn l2tp type=transport keyexchange=ikev1 ...
2
votes
1answer
1k views

How do I allow only certain IPSet set's to access a certain port with iptables?

I'm using IPSet to build IP ranges for different countries as follows : # Canada ipset -F ca.zone ipset -N ca.zone nethash for IP in $(wget -O - http://www.ipdeny.com/ipblocks/data/countries/ca.zone) ...
1
vote
1answer
105 views

Inspect IPSec payload prior to encryption

I have a Windows 7 IPSec VPN setup. When inspecting the IPSec packets generated by Windows in Wireshark the corresponding payloads are, as expected, encrypted. Is there a way to inspect the ...
2
votes
0answers
221 views

Having trouble installing Racoon and Strongswan on the same system

I have two applications that I need to run, one uses Racoon for establishing IPSec tunnels and the other uses Strongswan. Therefore, I need both Racoon and Strongswan installed simultaneously on my ...
0
votes
1answer
157 views

VPN ipsec tunnel from router to single windows server computer (gateway-to-host)

Firstly, is this possible? I haven't seen any posts that talk about this. The situation: 2 different ISP's. One has several servers and a firewall running. The other is limited to only one virtual ...
3
votes
0answers
263 views

Restrict access to RD Gateway based on IP

I'm trying to restrict who can access our RD Gateway based on both their group membership and IP address (so people in group A can only access the system from IP address X). The Network Policy Server ...
0
votes
0answers
35 views

Side2Side VPN avoid subnet configuration

I have a side2side VPN created with strongSwan. It is working so far. But I have a basic problem regarding the configuration effort. The VPN Gateway (cloud) should handle a lot of connections from ...
1
vote
1answer
4k views

How do I configure routing for an IPSEC tunnel between Openswan and RouterOS

I am trying to create a site-to-site VPN between a Linux router that runs openswan and shorewall (host A, serving subnet 10.10.0.0/16) and a MikroTek RouterBoard running RouterOS 6.3 (host B, serving ...
-1
votes
1answer
51 views

Openswan stopped writing to /var/log/secure after log deletion

I deleted the log intentionally but it seems like Openswan is not creating a new one on it's own. I tried restarting the service or even creating an empty file. Nothing works. What can I do besides ...
3
votes
1answer
738 views

Simultaneous IKEv1 and IKEv2 connection support in Strongswan

I'm using Strongswan to handle IPsec connections, and need a way to support both Windows (IKEv2) and OS X (IKEv1) clients. I would prefer to use pure IPsec (i.e. avoid having to setup L2TP) unless ...
0
votes
0answers
124 views

Automatic IPSec IP Blacklist

A new client of ours has a legacy web app on Win Server 2008 R2 and when we started diagnosing the event logs, there were multiple ip's in China trying to hit both their sa sql account and trying to ...
0
votes
1answer
839 views

xauth with ipsec-tools on openwrt: authentication failing?

I'am trying to set up xauth with ipsec-tools on openwrt, my settings show below: cat /etc/racoon.conf: path include "/etc/racoon"; path pre_shared_key "/etc/racoon/psk.txt"; path certificate ...
2
votes
2answers
6k views

strongSwan IKEv2 + Windows 7 Agile VPN: What is causing Error 13801

I have an AWS instance that I want to be a VPN server. It will connect Windows 7 clients to a private network in the Amazon cloud. I have installed Ubuntu 12.04 and the strongswan-ikev2 package. ...
1
vote
0answers
199 views

IPsec connection established but xl2tpd times out

This may or may not be related to my problem with passing ipsec verify. I have configured L2TP/IPsec VPN on Ubuntu 13.04 following Ubuntu's community documentation and while IPsec connection seems ...
1
vote
0answers
32 views

Multiple IPsec tunnels implented with raccon - need tunnel specific debug output

I have a network appliance box serving as an end point for several site to site IPsec VPN tunnels. raccon's docs specify that a log file can be written to with the -l option. My clunky approach to ...
0
votes
1answer
886 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
1
vote
0answers
629 views

How Windows establishes L2TP/IPSEC VPN connection without “IPSec ID” (group id)?

I have a third-party VPN server configured with only 4 credentials given to me: server ip, preshared key, user name and user password. Under Windows 7, i can easily connect to this VPN via standard ...
1
vote
2answers
375 views

Windows 8 and SSL's EKU serverAuth flag?

I'm reading this tutorial which says, Your gateway certificate must have: An Extended Key Usage flag explicitly allowing the certificate to be used for authentication purposes. The serverAuth EKU ...
0
votes
1answer
1k views

strongswan: entirely virtual subnet [closed]

I recently set up a strongswan IPSec VPN to access some non-public services of my home server from my android smartphone. I am using OpenVPN on some other devices for the same task, but chose ...
0
votes
1answer
474 views

Secure VPN on standalone Windows 2008 R2 server

I have been tasked with setting up a Windows 2008 R2 server, and I need to allow VPN access to it. I have RRAS set up which allows clients to connect via Windows VPN. Unfortunately, is uses PPTP by ...
1
vote
1answer
3k views

Openswan + xl2tpd connections time out after a while

I have a non-NATed Openswan+xl2tpd server (Ubuntu 12.04), to which I connect with a Windows 8 behind NAT. The client loses its connection after a while of doing nothing (between 30 and 60 minutes, but ...
0
votes
0answers
411 views

CentOS 6 VPN or Proxy Server compatible with OpenVZ

So I tried to install an L2TP/IPSEC VPN on CentOS 6 using ipsec-tools and racoon. Unfortunately my VPS host uses OpenVZ which is apparently incompatible with IPSEC. (Of course if someone knows how to ...
0
votes
1answer
403 views

CheckPoint/Amazon VPC VPN tunnel working inconsistently

First time poster, so please be gentle and correct me if there's Server Fault etiquette I'm missing. We have two CheckPoint edge devices at sites A & B, independently managed, connecting to two ...