IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
1answer
51 views

openSwan VPN is up can't ping remote subnet

When I run the command ipsec auto status i get the following output: ...... 172.16.255.1/32===104.131.13.155<104.131.13.155>:17/1701...41.203.65.124<41.203. ...
0
votes
0answers
18 views

How to view l2tp/ipsec clients

I have an l2tp/ipsec server. How I can list who is connected to server? I used to use last for ppp users using pptp. but that not working. I tired who too, but no luck. The only option I have is ...
1
vote
1answer
24 views

Route ipsec to openvpn with iptables

I am not a very experienced user but I do have determination, after a week with no progres it is getting rough. I have two NIC, one facing to the internet and one towards the internal network. Both ...
0
votes
0answers
12 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...
0
votes
0answers
8 views

IPsec tunnel, receiving data with wrong destination address

I've managed to stablish an IPsec tunnel using strongswan to a Cisco router. My server is an Azure VM, so it is behind NAT. I do not have control over the Cisco router. This is my /etc/ipsec.conf: ...
1
vote
0answers
11 views

L2TP/IPsec with certificates: INVALID_KEY_INFORMATION

I'm trying to configure a L2TP/IPsec client on Centos 7, the packages are: libreswan-3.15-5 xl2tpd-1.3.6-8 The server is MS Windows I cannot bring up the vpn. Error are as follows: ● ...
0
votes
0answers
3 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
1
vote
1answer
22 views

How to redirect traffic through IPv6 IPSec (strongswan) gateway?

I'm trying to set up IPSec secured connection to the gateway. Have three hosts: A: eth1 - fec0:1::1/64 B: eth1 - fec0:1::2/64 eth2 - fec0:2::2/64 which is gateway between A and C; forwarding is set ...
0
votes
0answers
16 views

What is wrong with my IKEv2 configuration, and how can I fix it?

I've attempted to set up an IKEv2 VPN on my DigitalOcean server following this guide. So far, I get a connection, but I can't seem to send any data through it at all. I'm not sure what's going on or ...
0
votes
1answer
2k views

VPN Between Checkpoint R75.20 and AWS VPC

I have been trying for a long time now to configure a site-to-site VPN connection between Amazon and a Checkpoint R75.20 (previously i tried with Azure) unsuccessfully. I have tried everything and ...
2
votes
1answer
2k views

OpenSwan (IPSEC) on Fedora 13 with Snow Leopard as a client

I recently installed OpenSwan on my Fedora 13 machine. I want to use it to connect with Mac OS X with L2TP over IPSEC, unfortunately I am already stuck on the IPSEC-negotation part. My server is ...
0
votes
1answer
6k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
0
votes
1answer
1k views

OpenSWAN KLIPS not working

I am trying to setup IPSec between 2 VM launched by OpenNebula. I'm using OpenSWAN for that. This is the ipsec.conf file config setup oe=off interfaces=%defaultroute ...
1
vote
0answers
15 views

AnyConnect on ASA5520 licensing required? [duplicate]

longtime reader, first-time poster. I'm currently working in a small shop and I am new to the Sys Admin role. We pay our ISP a lot for our VPN and we are looking for a different provider. We are ...
0
votes
0answers
35 views

How to debug issues with IPSec VPN using Shrewsoft's VPN client

I am trying to connect (from an ubuntu machine) to a IPSec VPN with pre-shared key using Shrewsoft's VPN (ike) client (just because there is an exported configuration for this client available, there ...
4
votes
1answer
3k views

Why are only 3 ip xfrm policies needed for a IPsec tunnel?

I have a site-to-site IPsec tunnel up and running between a strongswan (v5.2.0) instance (site A) and a RouterOS router (site B). Everything works fine, the hosts in the two private subnets setup for ...
3
votes
1answer
2k views

IKE Phase 1 Aggressive Mode exchange does not complete

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows: ...
0
votes
2answers
84 views

How do you reset the default “IP Security Policies on Active Directory” back to their factory settings?

How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?
0
votes
0answers
13 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
6
votes
1answer
5k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
3
votes
1answer
7k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
0
votes
1answer
55 views

Is using the “IP Security Policies on Active Directory” settings in Group Policy a best practice?

Is using the "IP Security Policies on Active Directory" settings in Group Policy a best practice? I recently created a new GPO and assigned the "Server (Request Security)" policy. Almost instantly I ...
1
vote
0answers
11 views

IPsec and pinging rightsubnets

I have been racking my brain about this. I have openswan running and I have been able to get tunnels up. Unfortunately, when I try to ping computers on my right subnet, I am not able to get any ...
0
votes
1answer
61 views

PFSense IPSec and NAT

Due to bad design and hosting provider constraints I have a network where I don't control the router. Our network: 172.16.0.0/12 - LAN x.x.x.0/24 - WAN (Router is connected to the switches, we have ...
0
votes
1answer
43 views

pfsense ipsec vpn to amazon aws not connecting

I'm trying to set up an ipsec vpn from our DC networks to our amazon vpc, so a site2site aka network to network connection. For this I've set up pfsense 2.2.6 and gave it a public IP on a WAN ...
3
votes
2answers
2k views

Using Ubuntu Karmic as an L2TP Client for VPN

I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working. The only details I have are the remote IP address, username & password, and a shared secret string; ...
1
vote
1answer
2k views

L2TP over IPSec VPN with OpenSwan and XL2TPD can't connect, timeout on Centos 6

I'm setting up LT2p over IPSec on my Centos 6.3 fresh install. I have iptables flushed, permit all. Whenever I try to connect, i get a 'no reply from vpn' and nothi Here's my ipsec.conf file ...
0
votes
1answer
1k views

IPSec VPN Fortigate Phase 2 stuck

Trying to setup a VPN connection to Office Fortigate but I can't pass phase 2. Received info from sysadmins: PSK IKE v1 Aggressive mode Phase1 3DES-SHA1 DH group 5 Key lifetime 28800 XAUTH PAP ...
1
vote
2answers
2k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
6
votes
2answers
3k views

Issue routing openswan vpn traffic beyond the server

Trying to set up a openswan based server sitting in an Amazon VPC cluster. The goal is to make it so we can VPN into VPC and have our workstations be as if they were on the network, more of a ...
0
votes
0answers
53 views

OpenSwan VPN IPSEC Tunnel Connection

I was hoping this website would be able to help with solving this issue since I've been running in circles on my end! I am using OpenSwan to setup an IPSec tunnel between a VPN server on Rackspace ...
1
vote
1answer
4k views

L2TP over IPSec VPN (OpenSwan, CentOS 6) unable to connect via iPhone (iOS 5.1) and Android (JellyBean)

I have successfully installed L2TP over IPsec VPN (PSK) using OpenSwan 2.6.38 running on CentOS. Connect DOES WORK perfectly from Windows 8. But doesn't work AT ALL from iPhone 4 (ios 5.1) or ...
0
votes
1answer
1k views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
2
votes
0answers
34 views

Dual path VPN on ASA 9.2

We have two sites that are joined by a VPN over two WAN links, one primary and one backup only. The VPN endpoints are a pair of active/standby ASA clusters at each site. Each site also has multiple ...
0
votes
1answer
1k views

Route all traffic through StrongSwan VPN

I'm new to this - please excuse my ignorance. I have looked through many other similar questions to no avail. Trying to set up a StrongSwan VPN such that client C can connect to host H, be assigned ...
0
votes
0answers
30 views

IPv4 over IPv6 IPsec tunnel

I've got two Cisco 2811 routers, both with a global static IPv6 adress, and an IPsec tunnel between them (using VTIs). Is it possible to send IPv4 traffic over this tunnel? The relevant parts of the ...
5
votes
3answers
8k views

ipsec verify on ubuntu Two or more interfaces found, checking IP forwarding [FAILED]

Ubuntu 14.04, Openswan U2.6.38/K3.13.0-30-generic When I run ipsec verify I get this error. Two or more interfaces found, checking IP forwarding [FAILED] I see quite a few of this same ...
1
vote
1answer
5k views

Openswan + xl2tpd connections time out after a while

I have a non-NATed Openswan+xl2tpd server (Ubuntu 12.04), to which I connect with a Windows 8 behind NAT. The client loses its connection after a while of doing nothing (between 30 and 60 minutes, but ...
1
vote
4answers
6k views

Allow traffic from ssl-vpn to enter ipsec tunnel on fortigate

we configured our FortiGate 50B to route traffic from our local net 192.168.10.* (which is our office) to a remote network 172.29.112.* using an ipsec tunnel. Everything works fine as long my computer ...
1
vote
0answers
24 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...
0
votes
0answers
24 views

Linux route issue when using IPSEC tunnel with PPTP client

There are network configurations of my box: The interface pptp-vpn is a ppp connection to a remote VPN. 192.168.6.229 is a IPSEC tunnel IP of my cell phone. eth0.2 is the wan interface. I try to ...
1
vote
1answer
940 views

ipsec vpn up, but no traffic, no ping

I've set up a VPN between my mikrotik router and Google Cloud Platform VPN. According to the Green check next to peer IP on the VPN Console, VPN is up, but all pings are timed out. > /ip ipsec ...
3
votes
3answers
165 views

VPN Tunnel, subnets conflict

I'm trying to create IPsec VPN Tunnel between two sites. Site 1 Fortigate 140D Local subnet : 192.168.1.0/24 Site 2 Fortigate 100D Local Subnet : 192.168.2.0/24 But when I try to create it, it ...
6
votes
1answer
1k views

Can I use Win 2k8 R2 as an IPSEC client?

I'm trying to connect a win server 2008 R2 box to a juniper ssg firewall using a client-to-gateway IPSEC VPN. I tried to set it up in Windows Firewall with Advanced Security, but the connection ...
2
votes
2answers
39 views

Issue with Cisco ASA 5515-X VPN Connection

I had an existing setup with a 5515-X serving as my firewall and VPN, which worked fine. Since moving to a new location, and thus a new outside interface IP, I can successfully connect to the VPN, but ...
0
votes
0answers
38 views

StrongSwan IPsec and NAT

I have an IPSec tunnel to the network of our customer running on a Linux box with StrongSwan. On there I have to do source NAT to translate our network addresses to the subnet they assigned us. This ...
0
votes
0answers
15 views

IPSec not getting established using digital certificates with ipsec whack CLI

I am trying to establish IPSec SA by giving run time commands to Pluto but it fails in negotiation phase by not exchanging the certificates. Command used on server : ipsec whack --name hello ...
2
votes
0answers
61 views

Strongswan RA and Strongswan site-2-site with ASA

Task: Establish communication between remote clients (192.168.79.0/24) that are connecting to VPN server (on Ubuntu) and corporate network (10.1.2.0/24) connected to Cisco ASA. Schema: ...
0
votes
0answers
38 views

strongSwan site2site to a docker subnet

The problem I'm running docker on a public server and want to connect the subnet of the docker containers to a private subnet on a remote site and use strongSwan with a modified IKEv1 net2net PSK ...
0
votes
0answers
16 views

Why server/client digital certificates are required on server and client for negotiation?

I am trying to create a IPsec channel between my server and client using digital certificates authentication. Now, if I import server/client certificates in the server ipsec database and server/client ...