Questions tagged [ipsec]
IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.
1,033
questions
0
votes
0
answers
9
views
How can I set separate phase 1 and phase 2 IPs using AWS Managed IPSec offerring?
I'm trying to setup an AWS Site-to-Site VPN connection that is IPSec based. It seems to be their managed offering. A particular connection I am trying to setup specifies distinct Phase 1 and Phase 2 ...
0
votes
2
answers
6k
views
Setup l2tp using Strongswan
I setup ikev2 using Strongswan, Now I need to add l2tp support to that
What is the best and easy method to add l2tp support to Strongswan?
Appreciate for any help
0
votes
0
answers
14
views
Accessing adjacent remote network from existing network tunnel in pfsense ipsec
We have two offices, A and B, with IP segment 192.168.10.0/24 and 192.168.20.0/24 respectively, connected to each other using IPsec tunnel mode.
Additionally, office B has an IPsec tunnel mode ...
0
votes
1
answer
77
views
Unable to ping other subnet through IPSEC tunnel
I'm configuring an S2S IPSEC VPN tunnel between two Fortigate firewalls.
The tunnel is up and running. Network topology:
When I ping from the LAN interface, which is directly connected to the ...
8
votes
0
answers
1k
views
How to limit bandwidth per VPN connection?
I have a StrongSwan (IKEv2) server setup and would like to limit each VPN connection to 512kb/s.
After researching I came across tc in Ubuntu. I don't quite understand it and am fighting through the ...
0
votes
1
answer
28k
views
Mikrotik IPSec Tunnels not working after RouterOS upgrade
We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating
failed to pre-process ph2 packet.
In the ...
0
votes
2
answers
114
views
Routing with ipsec tunnel
We are trying to determine how to route traffic from our office 1 worker subnet through the office 1 server subnet over the IPSec tunnel to our office 2 server subnet.
We want the office 2 worker ...
3
votes
0
answers
51
views
Spread IPsec decryption over multiple CPUs
All IPsec traffic being decrypted is processed on a single CPU, despite having multiple IPsec tunnels (SAs.) How can I get the load shared across multiple CPUs?
I'm running Strongswan IPsec on Ubuntu ...
3
votes
1
answer
4k
views
IKE Phase 1 Aggressive Mode exchange does not complete
I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows:
/etc/...
1
vote
1
answer
96
views
Strongswan IPsec site-to-site on Gcloud
I am trying to initialise an IPsec tunnel between an Ubuntu VM on Google Cloud and a remote site.
The connection is correctly established but from the Ubuntu machine on Google Cloud I cannot reach a ...
4
votes
2
answers
8k
views
subnet-to-subnet libreswan ipsec vpn
I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan.
Each server has two nic as showed in the following image.
I would allow secure communication between the subnets ...
3
votes
1
answer
6k
views
L2TP over IPSec VPN (OpenSwan, CentOS 6) unable to connect via iPhone (iOS 5.1) and Android (JellyBean)
I have successfully installed L2TP over IPsec VPN (PSK) using OpenSwan 2.6.38 running on CentOS.
Connect DOES WORK perfectly from Windows 8.
But doesn't work AT ALL from iPhone 4 (ios 5.1) or ...
0
votes
2
answers
5k
views
Strongswan IKEv2 for iOS devices
I want to connect a Strongswan IKEv2 VPN on iOS devices. It uses FreeRADIUS server for AAA of users.
It's already working perfectly on Android and Windows devices. but when I try to connect using ...
1
vote
1
answer
5k
views
Check if Remote Server Port is Blocking my IKEv2/IPSec VPN Connections
I am using StrongSwan on Ubuntu to try to establish a site-to-site VPN connection to a remote IKEv2 IPSec VPN server, but it appears that my connection requests are not reaching the remote server.
Is ...
0
votes
0
answers
85
views
Change IPSec IKEV2 VPN Default Ports 500 & 4500 To Anothers
For some reason OpenVPN is working on my local machine very well, But IPSec IKEV2 VPN not & it only works when OpenVPN is connect.
I have a domain for IPSec IKEV2 VPN & in local machine vpn is ...
0
votes
0
answers
98
views
Windows 11 RDP over IPSEC issue
We manage a limited number of servers (running different versions of Windows Server) by a limited number of remote clients (running Windows 10) using RDP connections over IPSec (in "transport ...
0
votes
0
answers
25
views
The IPSec connection has been successfully established. I can only ping the remote endpoint, but cannot ping the entire subnet
server A:
enter image description here
config setup
charondebug="all"
uniqueids=yes
conn home-to-aliyun
ikelifetime=36000s
keylife=8h
rekeymargin=3m
...
2
votes
3
answers
11k
views
ipsec: Can't authenticate: no preshared key found for
I'm using Openswan with ipsec and ipsec keeps complaining about the shared-key not being present. I'm running Ubuntu 14.04 .
I'm just experimenting on a couple of internal systems since I'm new to ...
1
vote
1
answer
8k
views
IPSec VPN Fortigate Phase 2 stuck
Trying to setup a VPN connection to Office Fortigate but I can't pass phase
2.
Received info from sysadmins:
PSK
IKE v1
Aggressive mode
Phase1 3DES-SHA1
DH group 5
Key lifetime 28800
XAUTH PAP ...
0
votes
1
answer
5k
views
Failure to connect to a L2TP VPN over IPSec on Ubuntu 16.04
I am having issues connecting to my company's L2TP VPN over IPSEC. This is a Pelink Balance 305 router which has been configured correctly. I have checked that other colleagues have been able to ...
4
votes
4
answers
16k
views
How can I route traffic over IPSec tunnel?
I have two sites: MAIN (local subnet 192.168.0.0/24, external IP: M.M.M.M) and CLIENT (10.0.0.0/24, external IP: C.C.C.C). I created an IPSec tunnel between the sites and both sites can ping computers ...
0
votes
1
answer
101
views
IPsec tunnel gets connected, Phase 2 is successful but no IP adapter is created thus tunnel does not work
I am trying to establish an IPsec tunnel between my virtual server and a customer's server. The IPsec tunnel gets established successfuly in Phase 2, but no IP gets added to my system.
This is the ...
1
vote
1
answer
7k
views
xl2tp + strongswan ipsec -- xl2tp timeout
I'm trying to connect to a ipsec/l2tp vpn from a private network behind a nat-router. It works from different windows clients, but from my linux machine (openSuSE 12.3, strongswan 5.1.3, xl2tp 1.3.0) ...
2
votes
2
answers
4k
views
Smoothwall Express interface issues
I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ....
-1
votes
1
answer
148
views
Draytek VPN stuck on Authentica IKEv2 EAP
I've set up the following configurations on my draytek vigor 2926:
IPsec general setup
and the remote dial-in user:
remote dial-in user
I get the following error: unknown error
Status in Smartclient: ...
0
votes
0
answers
28
views
How Can I Update Encryption and Deffie Hellman Groups for VPN in GCP?
So, I've got a VPN set up at the moment that's connected to the client's VPN and it's all good. Now, the client wants to tweak the encryption method to AES256 and Deffie Hellman groups to 19.
Is it ...
0
votes
0
answers
268
views
AWS StrongSwan IPSec Tunnel with Cisco fails during Phase 2 with TS_UNACCEPTABLE
I need to to setup a site-to-site IPSec tunnel with a vendor whom We need to access each other's API servers seating on the LANs using their respective Public IPs. We're using AWS, And I have ...
0
votes
0
answers
75
views
sometimes, vpn connection doesn't work on ipsec(strongswan) configuration
I'm using ipsec with strongswan between aws and on-premise
here is strongswan configuration
config setup
uniqueids = no
charondebug="ike 1, knl 1, cfg 0"
conn %default
ikelifetime=...
0
votes
1
answer
131
views
Android .sswan profile to ipsec.conf
I have a .sswan profile with an embedded cert and username/password from a server admin. It connects to a Watchguard VPN without any issues. I was told by the server admin I can connect with my ubuntu ...
0
votes
0
answers
128
views
How to set up an IPSec VPN with failover on linux without virtual IP?
I need to set up a VPN connection using IPsec between a client system and our Linux server. There shall be a fallback in case of failure of the VPN endpoint, i.e. some sort of automatic failover.
From ...
0
votes
0
answers
169
views
Strongswan site to site with fortigate issue seems some thing about phase 2
Hello all, sorry to bother you guys, i already spend 3 days on it,
still can not make it work, Could you take a look? Thank you in
advance <3.
fortigate info:
Public ip: 41.223.XX.XX
Internal ...
2
votes
1
answer
110
views
what is the proposal string for aes-gem256 deffie helman group 20, esp
As a developer tasked with connecting to a vpn without preconfigured profile scripts, i'm fumbling through setting up a strongswan ipsec.conf file. My current hurdle is an "invalid proposal ...
1
vote
1
answer
955
views
Ping across IPSec tunnel sends both ICMP and ESP packets
I've been using Strongswan to setup an IPSec tunnel between two units. The tunnels SAs get setup without any issues and traffic can pass across the connection.
Whenever I ping across the tunnel, the ...
1
vote
0
answers
249
views
AWS Site-to-Site VPN logging not working
Anyone encountered a problem where logging to CloudWatch for Site-To-Site VPN isn't working even though logging is enabled?
The only log file that is created is one with the title "...
1
vote
0
answers
300
views
Dynamic traffic routing via multiple GRE over IPsec tunnels
Initial data
I am learning networking based things and strongSwan proper configuration.
Using my own wildcard ssl certificate.
All tunnels are successfully lifted and authorized among themselves, ...
0
votes
0
answers
313
views
IPSec VPN Windows 10 Client Not Working - SOLVED
After 3 days of banging my head against the keyboard, I finally came up with a solution that allows my Windows 10 Professional built-in VPN client to connect to my Linux IPSec VPN server using EAP and ...
0
votes
0
answers
292
views
Error in IKE phase 1 when trying create IPSeC tunnel with Juniper SRX 300
Less than month ago we had to replace our old SRX 210 HE device with a new SRX 300 because the old device started to become unreliable. We had two IPSeC tunnels to two different places both working ...
-3
votes
1
answer
299
views
How to connect to a IPsec VPN with WireGuard client?
is it possible at all, because I know that you can't do this with openconnect?
I have:
gateway ip
preshared key
login
password
empty ipsec id (group)
2
votes
1
answer
4k
views
Routing between OpenSWAN / IPSEC tunnels
I am trying to connect multiple Amazon VPCs (across regions) together using OpenSWAN and Amazon VGW's. The router instance can ping to hosts in both VPCs, and traffic is attempting to cross the router,...
0
votes
0
answers
32
views
Best approach for deploying code to servers behind a gateway
I am attempting to adjust my deployment scripts to access a server behind a newly established gateway that I've configured. The gateway currently is accepting traffic from the internet correctly and ...
0
votes
0
answers
401
views
Why does this traffic selector not match?
(Note: I'm really using pfSense, but I'm just going to focus on the ipsec.conf files, since pfSense doesn't seem particularly relevant to the issue.)
We're getting the following error from charon:
Aug ...
1
vote
1
answer
354
views
Configure VPN via .PBK file
There is some software which can only configure VPN/L2TP-IPSec connection using pbk file (GUI has very limited number of the options).
I'm looking for pbk documentation but unsuccessul. I see a few ...
0
votes
0
answers
42
views
Wireguard aside IPSec site to site
I have the following scenario: Connecting to a server (A) through another server (B). My connection to B is via ssh normally. The connection between B and A is through ssh, but via VPN with Wireguard.
...
2
votes
1
answer
161
views
IPsec connection established but client not able to reach host until host pings the client
I am trying to establish IPsec connection between two linux machines residing in the same VPC but in different subnets.
On both machine I have following configuration:
Host machine:
conn hostConn
...
0
votes
1
answer
778
views
site to site(IpSec) between AWS and Cisco is not working
I am trying to set up a site-to-site VPN connection between AWS and Cisco ASA, but the tunnel status is shown as "Down," and under the details section, the message is "IPSEC IS DOWN.&...
0
votes
1
answer
590
views
Strongswan ike phase 1 failed: "IKE_SA being deleted"
I'm trying to build IPsec tunnel between my Strongswan cloud instance to the Cisco CSR 1000V which is from ISP.
According to the form given to me, I have to configure with the following factors in ...
0
votes
1
answer
555
views
ipsec/strongswan - tunnel is up, traffic is sent and received but replies are ignored
I need some help, I set up a strongswan IPsec tunnel with ESP and IKEv2, the tunnel is UP and remote sees packets coming and answers them, but my server is ignoring? answers.
The tunnel is between my ...
0
votes
1
answer
136
views
Can't communicate on remote ip using local vip through IPSEC (IPSEC is up + Test port works)
good afternoon.
I have the following problem in pfSense:
The Service for package Zabbix Proxy not want to go up.
The scenario is as follows:
pfSense has a IPSEC VPN with Zabbix Server
Zabbix IP is ...
0
votes
1
answer
96
views
Cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1
As the title say, I cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1.
Phase 1 and Phase 2 is UP.
Phase 2 Remote IP is 192.168.1.248 and Local IP is ...
0
votes
1
answer
199
views
How to investigate not received TCP packets sent from VPN on the same LAN?
I'm setting up a VLAN on the cloud where many servers will connect to a remote host via VPN. The setup is as follows:
Their Host d.d.d.72
|
|
...