IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

2
votes
1answer
3k views

Configure ipsec vpn tunnel (network to network with IKE with preshared key) on Centos 6 with openswan

I have Cisco Linksys router configured as VPN gateway (network to network) : Now I wanna configure ipsec VPN similarly on Centos 6 with openswan. I was looking in internet but have no luck (there ...
0
votes
1answer
6k views

Routing traffic through IPSec with NAT and IP Alias in pfSense

I have a pfSense firewall and I need to connect to a remote site (form my client). I'm running into several issues, and don't see traffic flowing in any way. Here's my setup: LAN is 192.168.0.0/16 ...
1
vote
0answers
1k views

ASA Slow IPSec Performance with Inconsistent Window Size

I have a IPSec link between two sites over ASA 5520s running 8.4(3) and I am getting extremely poor performance when traffic passes over the IPSec VPN. CPU on the devices is ~13%, Memory at 408 MB, ...
3
votes
1answer
125 views

IPSEC AES key length in kernel 3.9.3

I have a working ipsec-tools configuration which uses aes-ctr encryption with 224-bit key (192bit for key+32bit for nonce). Everything works well on 3.2.0 kernel. Here's what man setkey says about ...
1
vote
1answer
186 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
2
votes
2answers
450 views

Cisco 871: IPsec Remote VPN

After having followed several tutorials and none of them worked for me, someone might help me here. I have a Cisco 871 router, version 12.4(4)T7. Currently, I have it configured as a PPTP VPN ...
5
votes
3answers
2k views

How do I route a public IP range over an IPSEC VPN?

So, I have an established IPSec Site to Site tunnel. Site A has a SonicWall, Site B has a EdgeRouter. The first tunnel consists of Site A's NATed ips to Site B's NATed ips. Everything works as ...
0
votes
1answer
260 views

ipsec (openswan) routing or dns issue with iphone

I got an established VPN connection, but either the routing or the resolving is not working. The configuration is taken from ...
0
votes
1answer
149 views

ipsec routing / strange routing behavior

I have following network configuration: Office1 <-- openvpn --> office2 <-- ipsec tunnel --> branch office Office1 and office2 are on Debian, Branch office: juniper srx100 Office1 ...
1
vote
2answers
162 views

Interaction of IPSec and WinPE in MDT 2010 sequence

I'm in the process of enabling IPSec and Windows Advanced Firewall within my organization. We are also using MDT 2010 for OS deployment. This is the first time I've tried a new sysprep and capture ...
2
votes
1answer
115 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
1
vote
1answer
404 views

Routing Asterisk traffic evading a VPN

I have two offices set in two distant locations, connected through a IPSec VPN (using pfSense). On one office, I have an Asterisk PBX where all the extensions connect, and the Asterisk PBX is ...
0
votes
2answers
1k views

what does “openssl FIPS mode(0) unavailable” mean?

I compiled and installed strongswan ipsec vpn successfully, as demonstrated by the fact that the service starts successfully: as3:~# ipsec restart Stopping strongSwan IPsec... Starting ...
2
votes
1answer
3k views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
0
votes
2answers
641 views

Can IPv6 IPSec replace https/ssl for secure website network encryption?

Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.) Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
0answers
699 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
3
votes
0answers
182 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
2
votes
0answers
1k views

Site-to-site VPN between Azure Virtual Network and a Cisco RV016

I'm attempting to configure a Cisco RV016 router to connect to an Azure Virtual Network to create a site-to-site VPN, but it's not working. I'm aware that a Cisco RV016 is not in the list of ...
0
votes
1answer
159 views

Cisco IPSec VPN: Multiple address ranges for crypto map?

I'm setting up an IPSec VPN using a Cisco router. The relevant part of the config: crypto map MYVPN 10 ipsec-isakmp set peer 173.1.2.3 set transform-set my-transform set pfs group2 match ...
3
votes
0answers
404 views

IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat

I have recently configured a VPN server hosted in AWS EC2. Details: Centos 6.4, openswan, xl2tpd, NAT-traversal. The configuration works great for a scenario when only one user connects form a given ...
2
votes
2answers
6k views

Openswan tunnel up, but works only in one direction

I've successfully established an IPsec connection, but it works only partially. One side does not send out packets through the tunnel. It seems as if the network topology is unclear to this side. ...
0
votes
1answer
587 views

Does Windows Server 2008 R2 firewall ipsec tunnel encapsulated data in one port?

Today I have the following setup: All my servers are located in the internet, they are protected by Windows Firewall and Advanced Secutiry using IPSec with certificate. It includes the Domain ...
0
votes
1answer
1k views

Finally get my win 7 connected to strongSwan VPN, but there's no Internet

I believe I've followed all the instructions, and my win 7 did get connected, but there's no Internet. Background: Server OS: ubuntu 12.04 on linode xen VPS strongSwan Version: 4.6.4 ...
0
votes
2answers
231 views

How does VPN software 'hijack' packets for tunneling?

My current mental model An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation Somewhere along the line before the ...
0
votes
1answer
2k views

Pfsense 2.02 unstable ipsec vpn.Tunnels will come up upon restarting raccon [duplicate]

Pfsense 2.02 Ispec VPN tunnels drops randomly,but when the raccon service is restarted all tunnels are back up.Here is my ipsec vpn configuration.Any fix on this issue? I have tried enabling and ...
0
votes
1answer
77 views

Can't setup IPSec policy for LDAP

I'm trying to setup IPSec policy for TCP port 389 that only allow limited group of IP address to connect. (The target machine was a domain controller.) So I added two filters, one to deny all ...
0
votes
1answer
2k views

Pfsense 2.02 ipsec vpn tunnel goes down randomly

Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this. These are the logs: racoon: ...
1
vote
1answer
590 views

VPN with xl2tpd and racoon - how to NAT traffic out of non-default IP address

I have a server running Debian which has networking like this: eth0 - has public IP address 1.2.3.4 eth1 - has public IP address 1.2.3.5 I'm trying to set up a VPN on the server which I can connect ...
1
vote
0answers
169 views

Running a VPN server and a captive portal on the same machine with a DNS too

I don't know if this can be done but I'm asking anyways. Let's say that I've an Ubuntu machine with OpenSwan and xl2ptd to handle incoming VPN connections. Now, what I need to do is something like ...
0
votes
1answer
122 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
3
votes
2answers
504 views

Windows Advanced Firewall - adding Authorized Computers breaks rule

How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity? Background: I'm setting up a basic set of client rules that restrict ...
1
vote
0answers
63 views

List of valid Vendor ID in Vendor ID payload

I have some logs from a VPN with lines like this one: Ignoring Vendor ID payload [4a131c8107035845...] Can I use the hexadecimal code there to identify what kind of hardware attempted to establish ...
3
votes
1answer
941 views

IPSec L2L Failover between two pfSense devices

Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
0
votes
1answer
3k views

IPSEC Tunnel with OpenSwan on Ubuntu <-> CISCO Router

I have setup a tunnel between a UBUNTU SERVER linux box and a CISCO ROUTER. This is what's the topology looks like: host 1 ------ UBUNTU SERVER IPSEC <---> CISCO ROUTER ------ host 2 | ...
1
vote
0answers
79 views

Can I make Windows 7 process the IPsec INITIAL-CONTACT message?

Windows 7 seems to ignore the IPsec INITIAL-CONTACT notification described in RFC 2407. Is there a setting to make it process the message? When Windows receives the notification, it should delete its ...
0
votes
1answer
372 views

IPSec VPN routing

This is supposed to be a pretty simple question but I couldn't google a answer for it! I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has ...
0
votes
1answer
382 views

Router with multiple incoming IPSec VPN Tunnels?

We currently have a Draytek Vigor 3200 Multi-Wan router which has 5 incoming VPN tunnels using IPSec AES encrypted configurations. All five sites are using Draytek Vigor routers, most are Vigor ...
0
votes
2answers
239 views

Is an IPSEC tunnel limited to the slowest direction of an asynchronous connection?

If I am running an IPSEC tunnel over an ADSL connection with bandwidth limits 2mbps down and 1mbps up is the bandwidth over the tunnel limited to 1mbps in both directions or is it also asynchronous? ...
1
vote
0answers
497 views

Android devices fail to connect to MS L2TP PSK

I have configured MS Server 2003 RRAS with IPSec / L2TP using PSK. iPhone devices connect fine however Android devices fail to connect. The MS "Oakley" trace file shows the negotiations for Apple and ...
0
votes
1answer
91 views

Configuring IPSec

If you look at my previous question, you'll see that I have two IP Addresses (for the remote device), to configuring our VPN Tunnel: VPN Device Tunnel Endpoint IP Address: 91.151.a.b Host(s): IP ...
3
votes
2answers
11k views

Simple L2TP/IPsec server not working (openswan, xl2tpd, Ubuntu, Windows)

I configured openswan and xl2tpd on an Ubuntu 12.04 server (on EC2) by following various tutorials/documentation which seem to largely say the same things, but most recently this one. However, my ...
0
votes
1answer
2k views

VPN tunnel via IPSec

I'm not so familiar with installing and configuring VPN connections, but I need to link up our web server (CentOS 6) to a Cisco 3945. Here is the information I have from the Cisco device: VPN Device ...
2
votes
1answer
4k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
2
votes
1answer
2k views

ipsec vpn with racoon drops traffic on phase 1 renegotiation

We are running racoon on Linux connecting to a Checkpoint firewall. The connection comes up fine, but we see an interruption to traffic every 24 hours, corresponding to Phase 1 regenogiation. Our ...
0
votes
1answer
214 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
0
votes
2answers
956 views

SSH session through an IPSec VPN tunnel freezes when command outputs longer text

I connect to a QNap NAS (Ubuntu 4.1.2) in the office through an IPSec tunnel established between two pfSense firewalls. This has worked fine for months. I recently replaced the NAS with a newer model ...
2
votes
2answers
6k views

FortiGate IPsec VPN: Configuring Multiple Phase 2 Connections (Multiple Subnets)

I am trying to make an IPsec connection to a FortiGate router using OpenSwan. The FortiGate sits on two distinct subnets and I need to access both of them. In the FortiGate I have defined one Phase 1 ...
1
vote
0answers
623 views

L2TP & IPSec (OpenSwan) on Centos time out when connecting

I'm having big trouble setting up a very simple VPN. Using Centos 6. My Server Address : 61.34.26.32 (fictive) Whenever I try to connect (from iPhone5 or MacOS X) i get a connection timeout. I ...
1
vote
1answer
206 views

IPSec VPN gateway solution?

We need to connect to a client's LAN through IPSec VPN, and our router does not support IPSec tunnels. We found a software IPSec VPN client (ShrewSoft) which allows us to connect from one computer. ...
0
votes
1answer
2k views

L2TP over IPSec VPN with OpenSwan and XL2TPD can't connect, timeout on Centos 6

I'm setting up LT2p over IPSec on my Centos 6.3 fresh install. I have iptables flushed, permit all. Whenever I try to connect, i get a 'no reply from vpn' and nothi Here's my ipsec.conf file ...