IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

19
votes
1answer
38k views

How to set up strongswan or openswan for pure IPSEC with iPhone client?

I'm having trouble finding concrete, up-to-date information for how to set up strongswan or openswan to be used by the iphone's VPN client. My server is behind a budget linksys NAT router. I found ...
7
votes
3answers
5k views

IPSec for LAN traffic: Basic considerations?

This is a follow-up to my Encrypting absolutely everything... question. Important: This is not about the more usual IPSec setup, where you want to encrypt traffic between two LANs. My basic goal is ...
4
votes
3answers
5k views

What might prevent IKE handshake success in building an IPSEC tunnel?

We use Cisco ASA for our IPSEC VPNs, using the EZVPN method. From time to time we encounter problems where an ISP has made a change to their network and our VPN stops working. Nine times out of ten ...
5
votes
1answer
32k views

IPsec VPN site-to-site: How should I configure the ipsec.conf files on both sites to get the tunnel up?

What I am trying to do is to create a site-to-site IPsec VPN between my network and my friend's network. We both have a router and two computers on each router, with all computers running Linux. So I ...
2
votes
1answer
1k views

How do I allow only certain IPSet set's to access a certain port with iptables?

I'm using IPSet to build IP ranges for different countries as follows : # Canada ipset -F ca.zone ipset -N ca.zone nethash for IP in $(wget -O - http://www.ipdeny.com/ipblocks/data/countries/ca.zone) ...
2
votes
3answers
753 views

Netgear VPN LAN2LAN address translation

Here's my question: I have set up a VPN IPsec LAN2LAN (or site2site) with the following parameters: local subnet: 10.178.51.64/27 remote subnet : 10.174.0.0/16 The vpn tunnel comes up correctly ...
2
votes
1answer
2k views

strongSwan ipsec setup, couple of questions

i am trying to setup a IPsec bridge between my home network and my office network. I want to use StrongSwan to encrypt the traffic as IPsec i am trying to follow this guide A brief description of ...
7
votes
1answer
2k views

With iptables, match packets arrived via IPSEC tunnel

I'm using IPSEC in a tunnel mode. How to make an iptables rule that will match only packets which arrived via IPSEC tunnel (i.e. after IPSEC decrypted them - not the IPSEC packets when they arrive ...
2
votes
2answers
826 views

Elastic IP address on EC2 instance interface without 1:1 NAT

I have a basic Amazon VPC set up with a public and private subnet. I have deployed a Vyatta router in the public subnet that does NAT for the private subnet. I have an elastic IP address assigned to ...
9
votes
2answers
11k views

strongswan vs openswan

What's the differences between OpenSwan and StrongSwan? All I found is compartation between outdated FreeSwan and testing version of OpenSwan - i.e. current stable of OpenSwan is 2.6 (3.0 is ...
3
votes
1answer
2k views

Allow traffic from single IP address, block all other addresses

I have a server running Windows Server 2003. I want to only allow traffic from my IP address and block all other traffic from all other addresses. I'd like to know how to correctly configure this IP ...
7
votes
2answers
3k views

IPSec VPN between Amazon VPC and Linux Server

I'm trying to set up an IPSec VPN connection between our corporate network and Amazon's Virtual Private Cloud, using their VPN system and a Linux server. Unfortunately, the only guide I've found ...
3
votes
0answers
399 views

IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat

I have recently configured a VPN server hosted in AWS EC2. Details: Centos 6.4, openswan, xl2tpd, NAT-traversal. The configuration works great for a scenario when only one user connects form a given ...
1
vote
1answer
908 views

Pushing IP routes to various VPN clients

With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client. I would like to know if there is an equivalent of this option ...
10
votes
2answers
194 views

20Mbps WAN limited to 10Mbps over IPSec Tunnel

We recently upgraded a remote site from a 10/10Mbps fibre to a 20/20Mbps fibre link (it is fibre to the basement, then VDSL from the basement to the office, roughly 30 meters). There are regular large ...
3
votes
3answers
563 views

Suggestions for transitioning to new GW/private network

I am replacing a private T1 link with a new firewall device with an ipsec tunnel for a branch office. I am trying to figure out the right way to transition folks at the new site over to the new ...
3
votes
5answers
520 views

The right vpn to replace heavy ssh usage

We are a small development firm looking to access the following services remotely: http smb network shares rdc / vnc Currently we do this with a lot of ssh tunnels. We are looking into switching ...
2
votes
2answers
3k views

ipsec verify on ubuntu Two or more interfaces found, checking IP forwarding [FAILED]

Ubuntu 14.04, Openswan U2.6.38/K3.13.0-30-generic When I run ipsec verify I get this error. Two or more interfaces found, checking IP forwarding [FAILED] I see quite a few of this same ...
2
votes
1answer
14k views

iptables rules to allow L2TP/IPSEC VPN behind firewall

I asked about this on the Smoothwall Express forums but they are understandably reluctant to provide to much help. After all, they really want to sell the commercial version. I need to provide an ...
0
votes
1answer
241 views

Can't route back down ipsec tunnel from VPS

I am trying to establish an ipsec VPN from a Draytek router on the edge of our corporate network to a VPS on Digital Ocean. I've set up the VPN on the VPS using this script on an Ubuntu 14.04 machine. ...
5
votes
1answer
947 views

Can I use Win 2k8 R2 as an IPSEC client?

I'm trying to connect a win server 2008 R2 box to a juniper ssg firewall using a client-to-gateway IPSEC VPN. I tried to set it up in Windows Firewall with Advanced Security, but the connection ...
3
votes
1answer
1k views

IKE Phase 1 Aggressive Mode exchange does not complete

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows: ...
3
votes
2answers
2k views

Using Ubuntu Karmic as an L2TP Client for VPN

I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working. The only details I have are the remote IP address, username & password, and a shared secret string; ...
2
votes
0answers
3k views

ipsec IKE phase 1 failure

I have a wireless gateway that supports site-to-site IPSec. I have configured openswan on Ubuntu Server 12.04 (left side of the tunnel) with the following /etc/ipsec.conf: version 2.0 config setup ...
2
votes
1answer
2k views

SNAT through Racoon IPSec VPN

I am trying to route traffic from a device (that I will call "target") connected to my Ubuntu box (that I will call "host") to servers at a remote office. The host uses a Racoon IPSec VPN, connected ...
2
votes
3answers
953 views

arp table filling up

I have a CentOS 5 system which serves as an IPSec VPN connector between my network and a couple of remote networks. Lately it is running into this problem once or twice a day where its ARP cache gets ...
2
votes
3answers
2k views

when to use IPSec in Windows AD domain?

As I understood the joined to Windows AD computers are always securely identified/authenticated before DC (using automatically changed computer accounts passwords). Now, I read (in non-English ...
2
votes
3answers
460 views

Is it possible to use Microsoft's “Secure Connection Rules” (IPSec) with VPN?

Is it possible to use Microsoft's "Secure Connection Rules" to authenticate/encrypt connections while using VPN at the same time? What are the configurations necessary? It should look like this: ...
1
vote
1answer
2k views

Openswan Cisco ASA 9.1 — cannot resopnd to IPsec SA request because no connection is known for

Ok, so I have a simple VPN IPSEC setup with a single Linux host that has a public IP address and a loopback interface of 172.16.255.1. On the right side I have a Cisco ASA 5505 9.1. the issue is the ...
1
vote
1answer
196 views

How to batch apply windows server IPsec rules

OS: Windows server 2003 I got a huge list of rules that need to be add in IPsec. Is there any way I can do in bulk mode instead of added one by one? If no, it will be a nightmare... Thanks.
1
vote
1answer
3k views

IPsec Tunnel Between Cisco and XP, Quick Mode fails When Initiated By Router

I have been trying to set up a IPsec tunnel between a router and my Windows XP box. The router is 192.168.254.30, and the XP machine is 192.168.254.128. However, I can't seem to get the tunnel ...
0
votes
0answers
43 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
0
votes
0answers
135 views

Right way to set the MTU of an IPsec Client ( Linux/Racoon)

Here's the network topology : (PC1:IPsec Client)eth0---Internet CPE---((Internet))---Internet CPE---(PC2:IPsec Server) I've set up an IPsec Internet Gateway : PC1 sends all traffic, encrypted in an ...
0
votes
1answer
404 views

Routing Strategy for Multiple VPCs on AWS

I am planning to setup multiple Virtual Private Clouds (VPC) on AWS. These VPCs will be located in different geos. Each VPC will have public as well as private instances. I need to incorporate an ...
0
votes
2answers
358 views

VPNs and NetBIOS

I have a Cisco RV180 VPN Firewall Router and I have QuickVPN and PPTP working. However, I am not able to get NetBIOS working so that I can access everything via NAMES or get the systems to show up ...
0
votes
1answer
2k views

Pfsense 2.02 ipsec vpn tunnel goes down randomly

Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this. These are the logs: racoon: ...
0
votes
1answer
2k views

VPN tunnel via IPSec

I'm not so familiar with installing and configuring VPN connections, but I need to link up our web server (CentOS 6) to a Cisco 3945. Here is the information I have from the Cisco device: VPN Device ...
0
votes
1answer
308 views

Linux IPSec Tunnels does not forward IP Packet with ECN bit set to CE (Congestion Experienced)

I have a Linux IPSec Tunnel between a GGSN of a network operator and our data center. The IPSec works fine for all traffic but IP Packets coming from our side and are marked with ECN bit set to 0x3 ...
0
votes
2answers
306 views

Can I hook a firewall inside a network and VPN connect to another network?

I'm wondering what I'd have to do to make the following scenario possible: _____________ __________________ | | | | | Network A | | Network ...