IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
1answer
3k views

Openswan ipsec transport tunnel not going up

On ClusterA and B I have installed the "openswan" package on Debian Squeeze. ClusterA ip is 172.16.0.107, B is 172.16.0.108 When they ping one another, it does not reach the destination. ...
0
votes
1answer
201 views

VPN still working after rebooting without client - DrayTek client shows “No Connection”

My home network is a simple router + pc's setup, nothing fancy - the router has DHCP enabled for 192.168.0.X (255.255.255.0) and my PC picks up the address 192.168.0.82. There are no devices on my ...
0
votes
1answer
128 views

one client multi IPSEC server with same configuration

I am able to establish IPSEC connection between one client per server. Actually I can connect multi Ipsec server at the same time. But I have realized that when servers have same xl2tpd.conf file like ...
0
votes
1answer
302 views

Strongswan and OpenVPN together

I have an host in Amazon EC2 which is configured with an OpenVPN Access Server. The only client to this server is acting as a gateway from a private network. I installed StrongSWAN 5 on the same host ...
1
vote
0answers
1k views

Strongswan configuration to Cisco

We have an issue configuring Strongswan to a Cisco router. The connection is made, but I'm not getting the routing correct. There are multiple networks behind the router on the remote side (operated ...
0
votes
1answer
288 views

Windows 7 keep internet connection after IPSec established

How I can keep internet connection after establishing IpSec connection to server? I have followed to following link to establish IpSec server ...
1
vote
2answers
483 views

xl2tpd[845]: parse_config: line 13: data 'ipsec sared=yes' occurs with no context

When I executed xl2tpd I amhaving following error. # xl2tpd -D xl2tpd[845]: parse_config: line 13: data 'ipsec sared=yes' occurs with no context xl2tpd[845]: init: Unable to load config file When I ...
4
votes
1answer
522 views

Cisco ASA ipsec IKEv1 remote access for Avaya VPN phone - no client address assigned

I'm having a strange issue with remote access VPN connectivity on our ASA cluster. Normal site-to-site tunnels and AnyConnect connections works just fine. However, a special ipsec ikev1 tunnel does ...
2
votes
1answer
1k views

Ipsec reload fails to load ipsec.conf Strongswan 5.0

I am having trouble configuring a connection to an Android device using a fedora 17 linux machine and strongSwanv5.0.1dr2. I have made some progress but when I try adding the configuration to support ...
1
vote
0answers
279 views

Linux IPsec VPN and SNAT

I'm trying to connect my network to an IPSec VPN, and for this my connexions need to come from a given domain. The network is the following: Internal network eth1:10.0.0.1/14 eth0:1.2.3.4 ...
4
votes
2answers
277 views

Best security practice for small networks - wifi, lan,

We regularly setup small networks for clients in different locations to allow them to work on different products now the question what should be the best security practice. Currently we have a wifi ...
3
votes
1answer
187 views

Windows Firewall IPSec configuration, how to protect the AD

Here's my infrastructure configuration: All servers have public IP I've setup a GPO to enable IPSec on everyone of them with a "require for inbound and request for outbound" rule, for all server, ...
1
vote
2answers
225 views

Unable to connect from Windows to VPN while Android and iPad can

I've got a L2TP/IPSec VPN set up on CentOS (Amazon AMI) with racoon, ipsec-tools and xl2tp. I'm using a version of racoon from this repo, as it allows the use of IPSec ID wildcards (or no ...
0
votes
1answer
699 views

Is there a free linux distribution that provides network services with an Web interface? [closed]

What I have in mind and used is a commercial gateway/firewall with an web-interface for configuration that has this specifications: Administration Network Monitoring and logging Authentication ...
6
votes
1answer
161 views

Bypassing an Active Directory assigned IPSEC policy

I was in the process of translating some locally defined IPSEC policies on my test systems into group policies. In the process I applied an incomplete policy which was missing the line that allows ...
2
votes
1answer
368 views

Cisco ASA dropping IPsec VPN between istself and CentOS server

Currently we're trying to set up an IPsec VPN between a Cisco ASA Version 8.0(4) and a CentOS Linux server. The tunnel comes up successfully, but for some reason that we can't figure out, the ...
1
vote
1answer
326 views

Network to network VPN Centos 5

I am trying to follow "http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-vpn.html#s1-ipsec-net2net" I have come up with the following On local router machine: in my ifcfg-ipsec0: ...
1
vote
1answer
1k views

IPSec VPN using ZyWALL IPSec VPN Client: unable to connect from some providers

I'm trying to configure an IPSec VPN to one company from my home. The company has SANET internet service provider. I was able to create a VPN connection from another company that has the same internet ...
1
vote
0answers
115 views

cisco hub-spoke ipsec vpn, ping between spokes

I have a hub-spoke vpn setup between different locations, Hub: 10.10.10.0/24 A: 192.168.2.0/24 B: 192.168.41.0/24 There is ipsec vpn tunnel between Hub-A, and Hub-B, and the connection is fine. ...
0
votes
1answer
220 views

Should we migrate our VPN from MSCHAP V2 to something else?

We bought a new Firewall a couple months back, a Netgear UTM9S, and one of the features we enabled is the PPTP VPN to enable access to SQL, Web and File servers for remote users. But now, after ...
1
vote
0answers
483 views

No private key and IKEv2

I'm trying to run a linux server with ikev2 (by using strongswan ) . It seems the exact problem is about certificate and private key . I've used so many topics about doing it such as this topic when ...
1
vote
0answers
275 views

Deciphering IPSEC errors

I have a host I am trying to setup for ipsec. But I am finding some errors in the log that don't make much sense to me. The system are Rhel 5.5 boxes. I followed RHEL's IPSec deployment directions ...
-2
votes
2answers
915 views

ISAKMP Allows Weak IPsec Encryption Settings (PCI compliance)

I am working on a client's PCI compliance. One of the failing items is: 3.1.5. ISAKMP Allows Weak IPsec Encryption Settings (ipsecweakencryptionsettings) The solution given is: "Modify the ISAKMP ...
0
votes
0answers
143 views

L2TP VPN server using Linux

I have had trouble deploying L2TP+IPSEC on Linux; my server is running kernel 2.6.38. But my problem is this -- Sometimes my Mac and iPhone won't reconnect after disconnecting. This was supposed to ...
1
vote
0answers
337 views

IPSec VPN : Traffic not routing correctly

We have a server which is windows 2008 running on a VPS with a single public IP address. I've configured the firewall to allow IPSEC VPN connections to be established with our Draytek routers at ...
0
votes
0answers
411 views

IPSec VPN between Amazon VPC and Linux Server - Unable to ping Neighbor IP Address

I am using a similar configurations as mentioned in IPSec VPN between Amazon VPC and Linux Server , but I am ubable to ping the gateways IPs 169.254.255.1 169.254.255.2 The main reference article ...
0
votes
1answer
202 views

IPSec Cisco vs Windows Server 2K8 R2

I noticed by RVS4000 is losing performance while IPSec is enabled on the Cisco. Would it be wiser to use the Windows Server IPSec to handle the processing instead? What are the risks/rewards in this ...
0
votes
2answers
250 views

Use a ipsec tunnel with a vpn

The company I work for has a ipsec tunnel to another site that we use to have access to various tools. The vpn and ipsec is set up on a Ubuntu server. All of the tools are accessed through a web ...
0
votes
1answer
15k views

Fortigate Remote VPN : no matching gateway for new request

I am trying to configure a Fortigate 60C to act as an IPSec endpoint for remote VPN. I configured it like this : SCR-F0-FGT100C-1 # diagnose vpn ike config vd: root/0 name: SCR-REMOTEVPN serial: 7 ...
0
votes
1answer
2k views

Connecting debian and windows via IPsec VPN with Racoon and ipsec-tools

I've some trouble with the IPsec configuration on my debian server (6 squeeze). This server should connect via IPsec VPN to an windows server, which is protected by an firewall. I've used racoon and ...
2
votes
1answer
688 views

IKE Phase 1 Aggressive Mode exchange does not complete

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows: ...
2
votes
0answers
1k views

Connecting to IPSec/L2tp with OpenSwan/xl2tpd from Windows7 to Amazon EC2

I am trying to connect from my Windows7 at home to my OpenSwan/xl2tpd setup on an Ubuntu EC2 instance at Amazon. It is a connection being NATed from both the client and server ends. I was following ...
2
votes
0answers
2k views

ipsec IKE phase 1 failure

I have a wireless gateway that supports site-to-site IPSec. I have configured openswan on Ubuntu Server 12.04 (left side of the tunnel) with the following /etc/ipsec.conf: version 2.0 config setup ...
2
votes
2answers
2k views

Understanding ipsec with NAT and dynamic IP's

I'm using OpenSWAN to set up a net-to-net VPN tunnel. I have succeeded in configuring a test scenario as follows: About test and test2: they are Ubuntu 12.04 virtual machines created using ...
1
vote
0answers
112 views

My IPSec VPN isn't allowing me to connect

I'm following this guide to create an IPsec VPN on a debian server. I followed all the steps, and it still isn't working. If I try connecting to it, I get an error. I've looked for the logs, but I'm ...
3
votes
3answers
462 views

Suggestions for transitioning to new GW/private network

I am replacing a private T1 link with a new firewall device with an ipsec tunnel for a branch office. I am trying to figure out the right way to transition folks at the new site over to the new ...
1
vote
0answers
17 views

Issues with enpoint mapper service

In short, we have a VPN server and an AD server. The VPN server is our connection to a remote AD server. From the VPN server, I can use port query to verify that port 135 is not filtered and it ...
0
votes
1answer
155 views

Cisco client to site VPN IPSEC

I've set an EasyVPN on a cisco, when connected to the vpn i'm unable to use internet even the default route is through the tun0 interface created by my VPN client vpnc. Please how to connect to VPN ...
4
votes
2answers
253 views

Implementing an isolated guest WLAN via IPSec VPN on Windows

We are attempting to set up a guest WLAN network that is isolated from the rest of our network. This is proving difficult due to a couple of technical reasons. My first choice was to use a separate ...
1
vote
0answers
468 views

Partial VPN connections on Cisco ASA

Cisco ASA 5505 in remote site, connecting as Easy VPN client to ASA 5510 at HQ. VPN light is green, and sh crypto isakmp sa shows active security association. However connectivity to some of our ...
7
votes
2answers
2k views

IPSec VPN between Amazon VPC and Linux Server

I'm trying to set up an IPSec VPN connection between our corporate network and Amazon's Virtual Private Cloud, using their VPN system and a Linux server. Unfortunately, the only guide I've found ...
3
votes
1answer
492 views

selective routing through a VPN tunnel

The problem: after establishing an IPsec VPN tunnel all traffic is routed to the remote endpoint, while I only need to route the packets destined to that internal network and still be able to access ...
0
votes
1answer
8k views

OpenSwan IPSec phase #2 complications

Phase #1 (IKE) succeeds without any problems (verified at the target host). Phase #2 (IPSec), however, is erroneous at some point (apparently due to misconfiguration on localhost). This should be an ...
3
votes
0answers
295 views

Firewall “Connection Security” when there is no trust and NATing between the two computers

First a little explanation of my network topology. I have a internal domain, and edge network domain. There is no trust between the two domains (and IT will not allow a one way trust to be set up ...
0
votes
3answers
393 views

Can I attach a VPN firewall to an existing network and have it manage VPN connections?

I'm quite new to networking and am trying to set up my first VPN connection. The Situation: I have been contracted for some programming at a facility some distance from my location. I would like to ...
0
votes
1answer
207 views

Have some questions about setting up a VPN to my private cloud servers

TLDR: I wish to VPN to our cloud servers. Is there any free VPN server software that runs on W2K8? No, I don't want to : Download 3rd party software for the -clients- (We want to use the built in ...
1
vote
0answers
63 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
2
votes
0answers
186 views

Sending L2tp/IPsec PSK client packets to OpenSwan server

I'm trying (kind of) to create VPN client, I set my server on Ubuntu using OpenSwan (L2tp/IPsec PSK). What I'm doing right now is sending packets to my server and trying to exchange my keys with the ...
0
votes
0answers
345 views

Using TMG IPSec Site-2-Site to send packets to networks other than Internal

We have two TMG servers set up with an IPSec Tunnel between them and can connect fine between the two internal networks. Each TMG server has 3 NICs Internal External DMZ The problem I have is I ...
1
vote
2answers
308 views

netfilter: How to mark packet by reqid?

I have the following problem. I have SAs that use firewall marks. So only packets that have that mark get encoded and decoded. I managed to set the mark for packets that shall be encoded but I cannot ...