IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
1answer
12 views

How can I tell strongswan that left is local (independent of IPs)?

Is there something like local = left which I could use in the strongSwan configuration? I don’t want to use any IP-addresses, as they might change. And I don’t want the server to guess it, I want to ...
0
votes
1answer
63 views
+50

Windows Server FIrewall (2012) Ipsec tunnel problems

I am new to Ipsec tunnels. I have successfully created a tunnel to a Cisco offsite router using a preshare key at a supplier. In Endpoints 1 : I have the servers ip address and the remote servers ip ...
0
votes
1answer
10 views

Start ipsec tunnel from another machine

I have to monitor the IPsec tunnel on machine A which is behind a firewall F, where the OpenSwan sits on. From machine A, if the tunnel goes down, I would restart the tunnel on machine F. What I did ...
1
vote
2answers
2k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
1
vote
1answer
14 views

When and with which parameters does strongSwan select a connection?

StrongSwan (as responder) selects a configured connection (conn section in ipsec.conf) for each incoming initiator key exchange intent. At which times does strongSwan pick a connection configuration? ...
1
vote
0answers
4 views

Microsoft Message Analyzer and Windows Advanced Firewall ipsec tunnel packet sniffing

I am trying to view connections or attempted connections in windows advanced firewall. I have tried using the Windows Firewall Service provider however the trace does not return anything. Any ideas?
2
votes
3answers
1k views

How to configure a CISCO ASA to support the OS X VPN Client

Given that OS X now supports (natively) CISCO IPSec VPN connections I am wondering what the requirements for the VPN configuration are on the remote end? I have evaluated a number of CISCO devices ...
-2
votes
0answers
23 views

IPSec Connection established but no IP-Traffic going through with OS X client

Please leave an explanation in the comments section if you feel like down voting this question so I can fix it. Thank you! I've got a problem that's driving me nuts! I'm at my girlfriend's house here ...
0
votes
1answer
2k views

L2TP over IPSec VPN with OpenSwan and XL2TPD can't connect, timeout on Centos 6

I'm setting up LT2p over IPSec on my Centos 6.3 fresh install. I have iptables flushed, permit all. Whenever I try to connect, i get a 'no reply from vpn' and nothi Here's my ipsec.conf file ...
0
votes
1answer
26 views

TCP syn, ack Lost Before Entering IPsec VPN tunnel

I have configured a site to site VPN which is working fine as traffic is going through the tunnel. I am able to ping and Telnet hosts on the other network and they are able to ping me back. The ...
2
votes
1answer
38 views

OS X 10.10 to StrongSwan VPN

I'm trying to to test a new (in progress) StrongSwan IPSec VPN server by connecting from OS X 10.10. This is very frustrating because the the logs show a series of "success" messages, but then the ...
1
vote
1answer
4k views

Openswan + xl2tpd connections time out after a while

I have a non-NATed Openswan+xl2tpd server (Ubuntu 12.04), to which I connect with a Windows 8 behind NAT. The client loses its connection after a while of doing nothing (between 30 and 60 minutes, but ...
0
votes
0answers
23 views

IPSec tunnel through ASA from specific IPs

I'm having some difficulty getting an IPSec tunnel to work through an ASA5510 that is already configured with a number of different tunnels that it terminates, as well as individual VPN clients. ...
0
votes
0answers
14 views

Enable IPSec on Firewall

I am using ProfitBrick for my Cloud infra. However, if I enable their firewall, IPsec does not pass through. The ports opened on firewall are: TCP 53 TCP 51 TCP 4500 TCP 500 UDP 4500 UDP 500 Does ...
0
votes
0answers
37 views

Missing /etc/init.d/ipsec script after installing strongswan 5.3.2 from source

Ubuntu 14.04 (Amazon's Ubuntu AMI). Installed strongswan 5.3.2 from source (latest version in repo is too old and doesn't work). 1 question: 1) Noticed that the /init.d/ipsec (or /init/) script is ...
4
votes
1answer
4k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
1
vote
1answer
3k views

L2TP over IPSec VPN (OpenSwan, CentOS 6) unable to connect via iPhone (iOS 5.1) and Android (JellyBean)

I have successfully installed L2TP over IPsec VPN (PSK) using OpenSwan 2.6.38 running on CentOS. Connect DOES WORK perfectly from Windows 8. But doesn't work AT ALL from iPhone 4 (ios 5.1) or ...
1
vote
3answers
24 views

Cloud based security gateway

An organisation whose IT I'm involved with has offices in a country which blocks access to various well know services such as Skype. I can get around the issue by routing all the traffic over IPSec ...
1
vote
0answers
20 views

IPsec Security Associations prevail even after IPsec tunnel is down

I am working on a script that can detect if existing IPsec tunnels on a system have gone down. From my observations, I have seen that it can take any where between 1 second to 8 minutes for this to be ...
0
votes
0answers
11 views

ipsec.conf leftsubnet different than actual subnet

I've been tasked with troubleshooting an ipsec.conf and I'm having difficulty understanding a specific portion of the configuration. Specifically, I cannot figure out why this config is using a ...
2
votes
1answer
123 views

Poor IPsec over GRE performances

I have set up an IPsec over GRE connection with a remote host, both are NetBSD 6.1 based. The "client" is connected to the Internet through a 400Mbps fiber connection. The "server" is located on a ...
0
votes
1answer
1k views

Vpn tunnel to Amazon VPC with pfsense

I'm trying to create an ipsec tunnel between my office and our Amazon VPC. However I have never used ipsec before so I'm at lost. The gateway/firewall is running pfsense 2.1.3-RELEASE (i386) on ...
0
votes
1answer
2k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
5
votes
1answer
2k views

Issue routing openswan vpn traffic beyond the server

Trying to set up a openswan based server sitting in an Amazon VPC cluster. The goal is to make it so we can VPN into VPC and have our workstations be as if they were on the network, more of a ...
3
votes
1answer
3k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
1answer
33 views

Configure StrongSwan to work with DHCP

I have implemented a StrongSwan VPN server and would like to configure it to dynamically assign IPs to the end client. The VPN works if I give it an IP range however not if I set it to DHCP. This is ...
0
votes
0answers
43 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
1answer
1k views

VPN Between Checkpoint R75.20 and AWS VPC

I have been trying for a long time now to configure a site-to-site VPN connection between Amazon and a Checkpoint R75.20 (previously i tried with Azure) unsuccessfully. I have tried everything and ...
0
votes
2answers
92 views

Strongswan VPN tunnel between two AWS instances won't connect

I am trying to set up a VPN tunnel using StrongSwan 5.1.2 between two Amazon AWS EC2 instances running Ubuntu 14.04.2 LTS. Prior to using StrongSwan, I used open(libre)swan on an Amazon RedHat AMI, ...
2
votes
1answer
2k views

OpenSwan (IPSEC) on Fedora 13 with Snow Leopard as a client

I recently installed OpenSwan on my Fedora 13 machine. I want to use it to connect with Mac OS X with L2TP over IPSEC, unfortunately I am already stuck on the IPSEC-negotation part. My server is ...
0
votes
1answer
966 views

OpenSWAN KLIPS not working

I am trying to setup IPSec between 2 VM launched by OpenNebula. I'm using OpenSWAN for that. This is the ipsec.conf file config setup oe=off interfaces=%defaultroute ...
0
votes
0answers
55 views

ipsec vpn up, but no traffic, no ping

I've set up a VPN between my mikrotik router and Google Cloud Platform VPN. According to the Green check next to peer IP on the VPN Console, VPN is up, but all pings are timed out. > /ip ipsec ...
1
vote
1answer
1k views

Finally get my win 7 connected to strongSwan VPN, but there's no Internet [closed]

I believe I've followed all the instructions, and my win 7 did get connected, but there's no Internet. Background: Server OS: ubuntu 12.04 on linode xen VPS strongSwan Version: 4.6.4 ...
0
votes
0answers
63 views

Creating IPsec tunnel Ubuntu 15.04 ip sec tools

I'm trying to setup a VPN/Tunnel between three(3) Ubuntu 15.04 servers. I've googled and it seems that I can use IPsec tools for this. I've only found the following ...
0
votes
0answers
22 views

IOS FlexVPN client keeping create child SA every 60s?

I got a flexvpn client with sVTI tunnel interface, but it keeps creating child sa every 60s, like below. The VPN server is a linux Strongswan box, the config works fine in IOS 15.3 but not 15.4+. Any ...
1
vote
1answer
61 views

Routing between pfSense Subnets and IPSec VPN

I have a pfSense Router, which is the endpoint of a site-to-site IPSec VPN. In the pfSense the main LAN Interface is 10.0.2.1/24 and it has a virtual IP 10.0.125.1/24 The IPSec Phase 2 connects the ...
-1
votes
1answer
14 views

firewalld: match which zone by policy

I have the following zones that are relevant for this question. SemiTrusted and Public I want to treat IPSEC-encrypted traffic (that is coming from some specific IP addresses) as belonging to ...
2
votes
1answer
2k views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
3
votes
2answers
2k views

Using Ubuntu Karmic as an L2TP Client for VPN

I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working. The only details I have are the remote IP address, username & password, and a shared secret string; ...
2
votes
1answer
5k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
1
vote
1answer
665 views

Partial VPN connections on Cisco ASA

Cisco ASA 5505 in remote site, connecting as Easy VPN client to ASA 5510 at HQ. VPN light is green, and sh crypto isakmp sa shows active security association. However connectivity to some of our ...
0
votes
0answers
85 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
1
vote
2answers
133 views

IPSec on OpenVZ multiple ip addresses, using 127.0.0.2 on venet0

I have an OpenVZ box with IPSec enabled. root@wa000:~# ipsec verify Checking your system to see if IPsec got installed and started correctly: Version check and ipsec on-path ...
0
votes
0answers
76 views

IPSec Tunnel AWS VPC <-> openSwan CentOS 6.6 Tunnel up, no traffic

I managed to get a tunnel up between a CentOS 6.6 box and our AWS VPC. It shows as connected on the box, and in AWS, but the problem is routing the traffic from the server. Everything I've tried ...
0
votes
0answers
19 views

OpenSwan IPSec tunnel not routing correctly

I am trying to enable site-to-site connectivity between my network and a Windows Azure network. I have configured openswan in the local network and service ipsec status reports that the tunnel is up ...
0
votes
0answers
34 views

IPSec offload in Windows Server 2012 R2 with teaming

I'm interested in exploiting IPSec offloading in Windows. It is for implementing a custom PPP over L2TP/IPSec solution. Microsoft Windows VPN features are not suitable for the task, because I'm ...
3
votes
1answer
1k views

IKE Phase 1 Aggressive Mode exchange does not complete

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows: ...
0
votes
1answer
47 views

CentOS 7 ipsec hardware rngd erorr

ipsec verify Hardware RNG detected, testing if used properly [FAILED] Hardware RNG is present but 'rngd' is not running. No harware random used! Someone suggest to edit ...
0
votes
2answers
112 views

Accounting IPSec connections with RSA authentication

Apple iOS has "VPN On Demand" function. With this function the VPN connection is made whenever the device tries to connect to certain domains or to the internet at all. iOS supports "VPN On Demand" ...
0
votes
1answer
44 views

Setting up site-to-site IPsec in bridged mode

I'd like to set up site-to-site IPsec in bridged mode: that is, where the hosts in each site don't need to be modified to use the IPsec gateway, but the IPsec gateway acts as a pseudowire. My plan to ...