IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.
4
votes
1answer
591 views
Windows Server 2003 IPSec Tunnel Connected, But Not Working (Possibly NAT/RRAS Related)
Configuration
I have setup a "raw" IPSec tunnel between a Windows Server 2003 (SBS) machine and a Netgear FVG318 according to the instructions in Microsoft KB816514. The configuration is as follows ...
0
votes
2answers
36 views
what does “openssl FIPS mode(0) unavailable” mean?
I compiled and installed strongswan ipsec vpn successfully, as demonstrated by the fact that the service starts successfully:
as3:~# ipsec restart
Stopping strongSwan IPsec...
Starting ...
0
votes
0answers
8 views
Use ipsec-tools with pre-shared key for windows client?
I want to setup a ipsec server with ipsec-tools for my windows client with pre-shared key, it's OK to setup it, but I want to a anonymous access to the ipsec server with my windows client, I mean my ...
1
vote
1answer
25 views
How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?
I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites.
Existing:
[10.1.0.2...] = source client
|
[10.1.0.1 ASA ...
2
votes
3answers
831 views
pfsense 2.0.2 racoon(ipsec vpn) unreliable
I'm having issues with racoon (ipsec VPN) on pFSense 2.0.2 (and 2.0.1).
According to racoon all my tunnels are up (I have about 130 of them), but over time more and more of them won't pass traffic ...
1
vote
1answer
685 views
Routing for IPSec tunnel
For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I ...
0
votes
2answers
41 views
Can IPv6 IPSec replace https/ssl for secure website network encryption?
Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.)
Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
1answer
26 views
Howto enable IPSec with IPv6 automatically?
Although IPSec is included in the IPv6 protocol, this doesn't mean that it gets actually used.
I know how I could create a VPN manually via e.g. racoon or any other VPN-Server software, but that's ...
0
votes
0answers
20 views
Cisco ASA IPSec Mobile VPN Drops After Inactivity
When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
0
votes
0answers
44 views
Site-to-site VPN between Azure Virtual Network and a Cisco RV016
I'm attempting to configure a Cisco RV016 router to connect to an Azure Virtual Network to create a site-to-site VPN, but it's not working.
I'm aware that a Cisco RV016 is not in the list of ...
-1
votes
0answers
10 views
Difference connection security rules and IPSEC [closed]
I'm havin diffuculties seeing the difference between setting connection security rules (translated correct? I'm using a localized version) in a GPO or setting up IPSec in said GPO.
As I can basically ...
2
votes
1answer
1k views
OpenSwan (IPSEC) on Fedora 13 with Snow Leopard as a client
I recently installed OpenSwan on my Fedora 13 machine. I want to use it to connect with Mac OS X with L2TP over IPSEC, unfortunately I am already stuck on the IPSEC-negotation part.
My server is ...
2
votes
0answers
24 views
Cisco ASA ipsec vs Anyconnect client issue
So I have an ipad that has a IPSec VPN created, it connects from the outside and I can access my local lan files just fine. Now when I connect with the Cisco AnyConnect client from the same device it ...
0
votes
1answer
12 views
Cisco IPSec VPN: Multiple address ranges for crypto map?
I'm setting up an IPSec VPN using a Cisco router. The relevant part of the config:
crypto map MYVPN 10 ipsec-isakmp
set peer 173.1.2.3
set transform-set my-transform
set pfs group2
match ...
0
votes
1answer
1k views
Ipsec config problem // openswan
I try to configure Ipsec on server with openswan as client.
But receive error - possible, it's auth error.
What I wrote wrong in config ?
Thank you for answers.
#1: STATE_MAIN_I2: ...
0
votes
0answers
17 views
IPSec configuration between a (Cisco) routed network and a (Racoon) NATed network?
I am trying to set up the following WAN configuration:
Both interfaces on the router at the datacenter connect to public networks. However, our office is behind a standard cable modem and is ...
1
vote
0answers
30 views
IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat
I have recently configured a VPN server hosted in AWS EC2.
Details: Centos 6.4, openswan, xl2tpd, NAT-traversal.
The configuration works great for a scenario when only one user connects form a given ...
1
vote
1answer
336 views
How to delete IPSEC VPN tunnel from Fortigate 60
I have had a IPSEC connection setup between two firewalls. Now I want to remove the tunnel in my firewall, a "Fortigate 60".
There are two phases, "Phase 1" and "Phase 2" for each IPSEC connection. ...
1
vote
2answers
47 views
Openswan tunnel up, but works only in one direction
I've successfully established an IPsec connection, but it works only partially. One side does not send out packets through the tunnel. It seems as if the network topology is unclear to this side.
...
0
votes
0answers
32 views
How can I make racoon verify peer certificates?
I am attempting to set up IPSec on my LAN using automatic key setup with racoon using PKI for authentication.
Each of my host certificates has the host's FQDN as the Common Name with the FQDN and IP ...
3
votes
1answer
6k views
Cisco ASA 5505 - L2TP over IPsec
I have followed this document on cisco site to set up the L2TP over IPsec connection.
When I try to establish a VPN to ASA 5505 from my Windows XP, after I click on "connect" button, the "Connecting ...
0
votes
1answer
75 views
Does Windows Server 2008 R2 firewall ipsec tunnel encapsulated data in one port?
Today I have the following setup:
All my servers are located in the internet, they are protected by Windows Firewall and Advanced Secutiry using IPSec with certificate. It includes the Domain ...
0
votes
1answer
1k views
Connecting debian and windows via IPsec VPN with Racoon and ipsec-tools
I've some trouble with the IPsec configuration on my debian server (6 squeeze). This server should connect via IPsec VPN to an windows server, which is protected by an firewall.
I've used racoon and ...
0
votes
0answers
24 views
How can I add encryption to a GRE tunnel?
I'm using a GRE tunnel on a few Ubuntu servers to join multiple AWS regions in separate VPCs into one internal network to reduce the number of IPs I need, as well as network complexity.
Right now, my ...
2
votes
2answers
2k views
Using Ubuntu Karmic as an L2TP Client for VPN
I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working.
The only details I have are the remote IP address, username & password, and a shared secret string; ...
1
vote
2answers
653 views
Smoothwall Express interface issues
I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
0
votes
0answers
52 views
Finally get my win 7 connected to strongSwan VPN, but there's no Internet
I believe I've followed all the instructions, and my win 7 did get connected, but there's no Internet.
Background:
Server OS: ubuntu 12.04 on linode xen VPS
strongSwan Version: 4.6.4
...
0
votes
2answers
65 views
How does VPN software 'hijack' packets for tunneling?
My current mental model
An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation
Somewhere along the line before the ...
1
vote
1answer
889 views
IPSec VPN using ZyWALL IPSec VPN Client: unable to connect from some providers
I'm trying to configure an IPSec VPN to one company from my home. The company has SANET internet service provider. I was able to create a VPN connection from another company that has the same internet ...
0
votes
1answer
107 views
Pfsense 2.02 unstable ipsec vpn.Tunnels will come up upon restarting raccon [duplicate]
Pfsense 2.02 Ispec VPN tunnels drops randomly,but when the raccon service is restarted all tunnels are back up.Here is my ipsec vpn configuration.Any fix on this issue?
I have tried enabling and ...
0
votes
1answer
20 views
Can't setup IPSec policy for LDAP
I'm trying to setup IPSec policy for TCP port 389 that only allow limited group of IP address to connect. (The target machine was a domain controller.)
So I added two filters,
one to deny all ...
0
votes
1answer
177 views
Pfsense 2.02 ipsec vpn tunnel goes down randomly
Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this.
These are the logs:
racoon: ...
4
votes
2answers
5k views
How to make iPhone Cisco VPN client work with ASA with certificate authentication
I have an ASA that's providing IPsec VPN services using certificate authentication (no xauth, just the certs). It works perfectly with the Cisco IPsec VPN Client. Now I'm trying to let iPhones ...
1
vote
1answer
112 views
VPN with xl2tpd and racoon - how to NAT traffic out of non-default IP address
I have a server running Debian which has networking like this:
eth0 - has public IP address 1.2.3.4
eth1 - has public IP address 1.2.3.5
I'm trying to set up a VPN on the server which I can connect ...
1
vote
0answers
45 views
Windows Advanced Firewall - adding Authorized Computers breaks rule
How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity?
Background:
I'm setting up a basic set of client rules that restrict ...
1
vote
0answers
95 views
Peer to peer ipsec tunnel - virtual network interface
I'm trying to create an IPSEC tunnel between two machines (not between two networks). Using ipsec-tools, TUNNEL mode.
I think I can cope with all those add and spdadd, but how to create a virtual ...
0
votes
0answers
101 views
IPsec site-to-site tunnel config
I'm completely lost as to how to why this doesn't work. I can't ping, much less reach resources on the other side. Here's my configuration:
Site 1
Public IP: A.A.A.A
Private network: 10.8.6.0/24
...
1
vote
0answers
41 views
Running a VPN server and a captive portal on the same machine with a DNS too
I don't know if this can be done but I'm asking anyways.
Let's say that I've an Ubuntu machine with OpenSwan and xl2ptd to handle incoming VPN connections.
Now, what I need to do is something like ...
0
votes
1answer
463 views
FortiGate IPsec VPN: Configuring Multiple Phase 2 Connections (Multiple Subnets)
I am trying to make an IPsec connection to a FortiGate router using OpenSwan. The FortiGate sits on two distinct subnets and I need to access both of them. In the FortiGate I have defined one Phase 1 ...
0
votes
0answers
333 views
L2TP & IPSec (OpenSwan) on Centos time out when connecting
I'm having big trouble setting up a very simple VPN. Using Centos 6.
My Server Address : 61.34.26.32 (fictive)
Whenever I try to connect (from iPhone5 or MacOS X) i get a connection timeout.
I ...
0
votes
1answer
47 views
IPsec with various subnets on one side
I have the following situation:
Client subnet(192.168.0.0 /24) ----> Router ----> Internet ---->
ASA(172.17.0.2 /24) ---->
(172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
1
vote
0answers
33 views
List of valid Vendor ID in Vendor ID payload
I have some logs from a VPN with lines like this one:
Ignoring Vendor ID payload [4a131c8107035845...]
Can I use the hexadecimal code there to identify what kind of hardware attempted to establish ...
1
vote
1answer
77 views
IPSec L2L Failover between two pfSense devices
Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
0
votes
0answers
96 views
How to publish routes to the IPSec/L2TP client with nodefaultroute option specified
I would like to be able to have IPSec / L2TP clients that connect without setting a default route to the tunnel to be able to receive the internal routes of the network they are connecting to.
...
0
votes
0answers
428 views
IPSEC Tunnel with OpenSwan on Ubuntu <-> CISCO Router
I have setup a tunnel between a UBUNTU SERVER linux box and a CISCO ROUTER.
This is what's the topology looks like:
host 1 ------ UBUNTU SERVER IPSEC <---> CISCO ROUTER ------ host 2
| ...
1
vote
1answer
385 views
What can cause a DirectAccess IPSec Main Mode Error “no policy configured”
We have Microsoft's DirectAccess VPN set up on Server 2008 R2 with end-to-edge security, and we're having trouble with the manage-out tunnel.
The DirectAccess client has DC/DNS and intranet ...
1
vote
1answer
148 views
Disable Certificate Revocation in vyatta ipsec vpn
I have a problem where the VPN on a road warrior configuration.
our windows hosts work fine.
our mac's don't work so well.
Errors from StrongSwan:
ocsp status is stale or not in cache
crl not ...
2
votes
1answer
193 views
Opportunistic encryption with StrongSwan
I've been struggling with StrongSwan for a couple of days trying to get it do something like Opportunistic encryption. I've read a few places that it should be able to do it, but haven't been able to ...
2
votes
1answer
300 views
Find out which encryption and hash algorithm is used by strongswan ipsec
I have multiple productive IPSec VPNs on a Debian-based Linux Server using StrongSwan. Currently I am busy updating my documentation with details about each VPN. Unfortunately the IKE encryption ...
1
vote
0answers
40 views
Can I make Windows 7 process the IPsec INITIAL-CONTACT message?
Windows 7 seems to ignore the IPsec INITIAL-CONTACT notification described in RFC 2407. Is there a setting to make it process the message? When Windows receives the notification, it should delete its ...
