IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
1answer
7k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
2
votes
1answer
2k views

OpenSwan (IPSEC) on Fedora 13 with Snow Leopard as a client

I recently installed OpenSwan on my Fedora 13 machine. I want to use it to connect with Mac OS X with L2TP over IPSEC, unfortunately I am already stuck on the IPSEC-negotation part. My server is ...
1
vote
1answer
367 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
1answer
2k views

VPN Between Checkpoint R75.20 and AWS VPC

I have been trying for a long time now to configure a site-to-site VPN connection between Amazon and a Checkpoint R75.20 (previously i tried with Azure) unsuccessfully. I have tried everything and ...
0
votes
1answer
1k views

OpenSWAN KLIPS not working

I am trying to setup IPSec between 2 VM launched by OpenNebula. I'm using OpenSWAN for that. This is the ipsec.conf file config setup oe=off interfaces=%defaultroute protostack=...
3
votes
1answer
2k views

IKE Phase 1 Aggressive Mode exchange does not complete

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows: /etc/...
1
vote
1answer
85 views

What configuration issue is preventing Samba Network Shares from being visible over VPN?

I set up a VPN using L2TP and IPSEC (with LibreSwan) using this script: https://github.com/hwdsl2/setup-ipsec-vpn The only change I had to make was to change the instances of 'eth0' to the new format ...
1
vote
0answers
16 views

Cisco ASA VPN DH Groups for AWS VPC

AWS provides a neat function in its VPC that exposes a VPN service. I've configured this, and confirmed that it functions. Our customer is using a Cisco 5500 Series ASA appliance to connect to the ...
3
votes
1answer
8k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
0
votes
0answers
10 views

Ipsec in juniper SRX220

Our problem is in setting up IPsec vpn between srx220 (12.1X46) and Sophos astaro. We have spent a lot of time and finally discovered that when we use only one subnet for local and remote networks no ...
6
votes
1answer
5k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
0
votes
0answers
17 views

L2TP gives error 410 on attempt to connect to VPN

I'm getting error 410 while trying to connect via L2TP. This error occurs very often, but sometimes I'm able to connect, which leads to a fact that I configured everything properly. I have Ubuntu 14....
1
vote
1answer
33 views

Protecting wired LAN from packet sniffers

How one encrypts traffic in wired LAN segment? Can IPv6 in combination with IPSec be configured for IKE/ISAKMP authentication? OR Will I drown in configuring appropriate IKE host-to-host rules for ...
3
votes
2answers
2k views

Using Ubuntu Karmic as an L2TP Client for VPN

I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working. The only details I have are the remote IP address, username & password, and a shared secret string; ...
0
votes
0answers
10 views

OpenSwan IPsec VPN server not responding to remote router DPD packets

We have setup a IPsec connection, on an Ubuntu server, with OpenSwan IPsec implementation (version U2.6.38/K3.13.0-24-generic). The connection establishes successfully, but around a minute later (...
1
vote
2answers
2k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ....
1
vote
1answer
4k views

L2TP over IPSec VPN (OpenSwan, CentOS 6) unable to connect via iPhone (iOS 5.1) and Android (JellyBean)

I have successfully installed L2TP over IPsec VPN (PSK) using OpenSwan 2.6.38 running on CentOS. Connect DOES WORK perfectly from Windows 8. But doesn't work AT ALL from iPhone 4 (ios 5.1) or ...
0
votes
1answer
1k views

IPSec VPN Fortigate Phase 2 stuck

Trying to setup a VPN connection to Office Fortigate but I can't pass phase 2. Received info from sysadmins: PSK IKE v1 Aggressive mode Phase1 3DES-SHA1 DH group 5 Key lifetime 28800 XAUTH PAP ...
0
votes
0answers
12 views

L2TP and Openswan NAT

I have a connection between a local CentOS7 machine and a remote customer server connected via L2TP. I can communicate CentOS7 <--> Customer flawlessly, but the problem begins when I try to ...
1
vote
1answer
3k views

L2TP over IPSec VPN with OpenSwan and XL2TPD can't connect, timeout on Centos 6

I'm setting up LT2p over IPSec on my Centos 6.3 fresh install. I have iptables flushed, permit all. Whenever I try to connect, i get a 'no reply from vpn' and nothi Here's my ipsec.conf file (...
0
votes
0answers
21 views

IPsec with EC2 client and Elastic IP, but nat_traversal=no

After researching this quite a bit, I feel I may be asking the impossible here, but I thought I'd give it a shot. I'm trying to configure an Openswan IPsec client on an EC2 server (inside VPC, if it ...
1
vote
2answers
511 views

How Can You Tell If IPSec Is Installed on Cisco

How can I tell if my Cisco router has IPSec installed? I went into configuration mode to see about setting up a crypto policy, but the 'crypto' keyword isn't available. Is this an indication that it ...
1
vote
1answer
5k views

Openswan + xl2tpd connections time out after a while

I have a non-NATed Openswan+xl2tpd server (Ubuntu 12.04), to which I connect with a Windows 8 behind NAT. The client loses its connection after a while of doing nothing (between 30 and 60 minutes, but ...
0
votes
1answer
2k views

Route all traffic through StrongSwan VPN

I'm new to this - please excuse my ignorance. I have looked through many other similar questions to no avail. Trying to set up a StrongSwan VPN such that client C can connect to host H, be assigned ...
0
votes
0answers
12 views

“The session has been cancelled” in Windows Firewall IPSEC

I have a bit of a head scratcher. For some reason a couple of my 2012r2 boxes aren't able to establish Quick Mode connections. Main mode is established just fine. This only happens after the ...
0
votes
0answers
57 views

IPSEC passes only ICMP

I have FreeBSD and Mikrotik with IP 1.1.1.1 and 2.2.2.2. Local subnets are 192.168.1.0/24 and 192.168.2.0/24. Firewall is disabled for testing. I am bringing up gre tunnel between them. FreeBSD: ...
0
votes
1answer
1k views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
1
vote
1answer
44 views

Azure vpn is establish but causing delay or no traffic sometimes

We are trying to establish VPN Hillstone FW (device) with Azure. VPN details are: VPN type: Policy based Gateway Subnet: 192.168.50.10/29 default subnet: 192.168.50.0/29 VM inet Address: 192.168.50....
0
votes
0answers
15 views

Using OpenSSL Certificate with Windows Firewall Connection Security

I'm attempting to set up an IPSec transport mode connection between Windows 7 machines, using Windows Firewall Connection Security, authenticating using certificates. I can get it to work correctly by ...
3
votes
2answers
3k views

ipsec vpn with racoon drops traffic on phase 1 renegotiation

We are running racoon on Linux connecting to a Checkpoint firewall. The connection comes up fine, but we see an interruption to traffic every 24 hours, corresponding to Phase 1 regenogiation. Our ...
0
votes
0answers
11 views

IPSEC VPN point-to-site connection works but remote network is not rechable

I have a probelm with ipsec configuration. I have to connect to remote network (client! to site), where is Fortigate firewall. On left side (where I have access, this is my dedicated server), I have a ...
1
vote
0answers
138 views

AWS VPC failed communicating through VPN Tunnel

I have created a VPC scenario 3 in AWS. Configured ipsec vpn site to site between aws and cyberoam. Tunnels are up. I have added the security groups to the ec2 instance in private subnet to give full ...
0
votes
1answer
13 views

IPSEC VPN site-to-“alias”

I am trying to connect my CentOS (CentOS release 6.7) server to a 3rd party VPN so traffic can be routed between my Apache instance listening on an aliased private IP (192.168.253.1), through the ...
0
votes
1answer
75 views

Connecting to a FortiGate VPN from a remote Linux machine via OpenSwan

Here's the setup: I have a FortiGate unit on a business network, which has a FortiGate VPN set up. Machines on a remote network that can run FortiClient (Windows and Mac machines) have no problem ...
0
votes
0answers
50 views

IPSec VPN between Fortigate 5.2 and Linux with ipsec-tools - data does not pass

We have an IPSec VPN tunnel between Fortigate device and Linux box running racoon and ipsec-tools. The setup worked in Fortigate 4.X, but with 5.2 the SAs are negotiated OK and no traffic can be ...
0
votes
1answer
55 views

How to enable debug logs in OpenSwan?

I use OpenSwan IPSec tunnel on CentOS 6.7. I have added the following configuration in /etc/ipsec.secrets according to this link: http://linux.die.net/man/5/ipsec.conf config setup plutodebug=all ...
0
votes
0answers
25 views

IPSec - Is it possible to have remote access clients (road warriors) all behind the same NAT device?

This is a topic that I find mixed information on. Is it possible to have two IPSec road warriors that are behind the same NAT, even with an ASA as the VPN endpoint? I have been trying with Libreswan ...
0
votes
1answer
25 views

How do I route traffic over the a tun0 device (IPSec VPN connection)?

I've set up an IPSec VPN tunnel between my laptop and work. The tunnel gets established, but routing does not. The relevant part of ifconfig is : eth0 Link encap:Ethernet HWaddr d4:be:d9:6f:a7:...
0
votes
0answers
56 views

Forwarding UPnP, DLNA traffic via computer to server

I'm about to tear out what is left of my hair with this. I was able to finally see traffic coming through, but not working in full, when using socat but this setup is not ideal. The idea: I have a ...
0
votes
0answers
25 views

IPSec not getting established using digital certificates with ipsec whack CLI

I am trying to establish IPSec SA by giving run time commands to Pluto but it fails in negotiation phase by not exchanging the certificates. Command used on server : ipsec whack --name hello --...
0
votes
0answers
41 views

Two road warrior clients behind the same NAT device (IKEv2, StrongSwan, LibreSwan)

I have an IKEv2 VPN that is set up and works properly, however I run into issues when I have two road warriors behind the same NAT device. Both devices connect however the second device seems to kick ...
1
vote
0answers
63 views

ipsec: Can't authenticate: no preshared key found for

I'm using Openswan with ipsec and ipsec keeps complaining about the shared-key not being present. I'm running Ubuntu 14.04 . I'm just experimenting on a couple of internal systems since I'm new to ...
0
votes
1answer
36 views

Why does 'ipsec statusall' not show any connections?

I've finally been able to get a tunnel between my computer (strongswan) and a Zyxel Zywall 110 up and running. I'm connecting using certificates, and judging from the logs the actual VPN connection ...
0
votes
0answers
61 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
0
votes
0answers
15 views

Is IPSec + L2TP doable on Ubuntu 14.04?

We just got a new firewall, and our old PPTP VPN has been replaced with a new IPSec + L2TP VPN. Setting up VPN connections for Windows + Mac users is a breeze. Getting it to work on Ubuntu is hard (at ...
0
votes
1answer
69 views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...
0
votes
1answer
69 views

openSwan VPN is up can't ping remote subnet

When I run the command ipsec auto status i get the following output: ...... 172.16.255.1/32===104.131.13.155<104.131.13.155>:17/1701...41.203.65.124<41.203. 65.124>===10.100....
0
votes
0answers
33 views

How to view l2tp/ipsec clients

I have an l2tp/ipsec server. How I can list who is connected to server? I used to use last for ppp users using pptp. but that not working. I tired who too, but no luck. The only option I have is ...
1
vote
1answer
30 views

Route ipsec to openvpn with iptables

I am not a very experienced user but I do have determination, after a week with no progres it is getting rough. I have two NIC, one facing to the internet and one towards the internal network. Both ...
0
votes
0answers
20 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...