IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

4
votes
0answers
208 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
4
votes
0answers
225 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
4
votes
0answers
425 views

Firewall “Connection Security” when there is no trust and NATing between the two computers

First a little explanation of my network topology. I have a internal domain, and edge network domain. There is no trust between the two domains (and IT will not allow a one way trust to be set up ...
4
votes
0answers
870 views

How do I configure OpenSwan to allow pure IPsec (not L2TP) connections from an iPhone?

Similar to this question, I want to configure an IPsec server on Linux which will accept connections from the iPhone. However, unlike the other question, I want to be able to test with pre-shared keys ...
4
votes
0answers
653 views

Trying to get a new user up on pfSense IPSec VPN; Config file import failed, now getting gateway errors

Caveat: I am not a sysadmin, so please forgive the n00bness of the query. We have a new user and I'm trying to get them up on VPN. We use pfsense as an IPSEC endpoint. This person is using Shrewsoft ...
2
votes
0answers
34 views

Dual path VPN on ASA 9.2

We have two sites that are joined by a VPN over two WAN links, one primary and one backup only. The VPN endpoints are a pair of active/standby ASA clusters at each site. Each site also has multiple ...
2
votes
0answers
62 views

Strongswan RA and Strongswan site-2-site with ASA

Task: Establish communication between remote clients (192.168.79.0/24) that are connecting to VPN server (on Ubuntu) and corporate network (10.1.2.0/24) connected to Cisco ASA. Schema: ...
2
votes
0answers
28 views

Manually specify a tunnel gateway for an IPSec VPN Connection (ASA)

I have currently got several VPN's on-premise that are setup on the outside interface and using the default gateway on the interface as an originating source of the VPN tunnel. Although the outside ...
2
votes
0answers
65 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
2
votes
0answers
101 views

Dynamically enable IPSec for IP connections between many servers

For a given list of internet server (example): S001 - 45.67.89.12 S002 - 67.78.90.34 S... S999 - 98.76.65.54 I want to talk from each server to any other server to any TCP service using the public ...
2
votes
0answers
35 views

Windows Firewall Connection Security, require encryption with IPv6?

I've set up Windows Firewall on a Server 2012 R2 to always require IPSec Encryption for all Connection Security Rules. I've then specified Inbound Rules for specific ports and services, and ...
2
votes
0answers
114 views

Is there an extension of host to host ipsec to a many-many configuration?

Having a typical host to host transport mode ipsec configuration, conn appserver01-to-swift01 leftid=@appserver01.server.com left=10.133.176.246 leftrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxx ...
2
votes
0answers
83 views

Does Windows support IPComp?

The title says it all. I've configured an IPSec IKEv2 connection between a Strongswan server and a Windows 7 workstation and I'd like to use compression if possible. The config on both sides is dead ...
2
votes
0answers
62 views

IPsec - strange behavior

I have set up site-to-site ipsec connection between linux(debian) and mikrotik router. The tunnel is up linux configuration: config setup interfaces=%defaultroute keep_alive=60 ...
2
votes
0answers
1k views

Creating redundant IPSec connections using OpenSwan

I have a linux (netkey) instance with openswan installed, the instance has two connection to the same IPSec peer that needs to act as redundant connections. both connections' properties are the same ...
2
votes
0answers
3k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
2
votes
0answers
290 views

Having trouble installing Racoon and Strongswan on the same system

I have two applications that I need to run, one uses Racoon for establishing IPSec tunnels and the other uses Strongswan. Therefore, I need both Racoon and Strongswan installed simultaneously on my ...
2
votes
0answers
2k views

Site-to-site VPN between Azure Virtual Network and a Cisco RV016

I'm attempting to configure a Cisco RV016 router to connect to an Azure Virtual Network to create a site-to-site VPN, but it's not working. I'm aware that a Cisco RV016 is not in the list of ...
2
votes
0answers
555 views

IPSec VPN : Traffic not routing correctly

We have a server which is windows 2008 running on a VPS with a single public IP address. I've configured the firewall to allow IPSEC VPN connections to be established with our Draytek routers at ...
2
votes
0answers
5k views

ipsec IKE phase 1 failure

I have a wireless gateway that supports site-to-site IPSec. I have configured openswan on Ubuntu Server 12.04 (left side of the tunnel) with the following /etc/ipsec.conf: version 2.0 config setup ...
2
votes
0answers
222 views

Sending L2tp/IPsec PSK client packets to OpenSwan server

I'm trying (kind of) to create VPN client, I set my server on Ubuntu using OpenSwan (L2tp/IPsec PSK). What I'm doing right now is sending packets to my server and trying to exchange my keys with the ...
2
votes
0answers
3k views

Debian squeeze as L2TP/IPSec gateway for Android devices

I'm trying to configure Debian squeeze as L2TP/IPSec VPN for Android devices, but with no great success. So far I have done following: Successfully configured Debian with openswan implementation of ...
2
votes
0answers
673 views

configuring IPsec with IPV6

I am working with racoon tool and ipsec-tools and I have been able to connect two devices with IPSEC working in transport mode. However, I did it with IPv4 addresses and when I change them to IPV6 ...
2
votes
0answers
783 views

Getting ipsec-tools to work between Ubuntu Lucid hosts

I have two hosts, one is Charity with IP 67.207.128.184, the other is Hope with IP 67.207.130.204. I've installed the ipsec-tools package on each host. I have not installed racoon on either host. ...
2
votes
0answers
634 views

IPsec tunnels between Linux and Solaris

I have a Solaris machine sitting out in the ether somewhere that I would like to make part of my network via IPsec. I have this working between Solaris machines but not between Solaris and Linux. I ...
2
votes
0answers
990 views

StrongSwan - Windows 7 0 IPSec IKEv2 connection problems

I am trying to configure a roadwarrior scenario between a linux box with StrongSwan and a Windows Box with Agile VPN. I successfully configured my StrongSwan and my Windows box to connect. The Windows ...
1
vote
0answers
11 views

L2TP/IPsec with certificates: INVALID_KEY_INFORMATION

I'm trying to configure a L2TP/IPsec client on Centos 7, the packages are: libreswan-3.15-5 xl2tpd-1.3.6-8 The server is MS Windows I cannot bring up the vpn. Error are as follows: ● ...
1
vote
0answers
11 views

IPsec and pinging rightsubnets

I have been racking my brain about this. I have openswan running and I have been able to get tunnels up. Unfortunately, when I try to ping computers on my right subnet, I am not able to get any ...
1
vote
0answers
24 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...
1
vote
0answers
29 views

What could cause racoonctl to show a Phase2 count higher than the number of ports racoon is listening on?

In my setup I have some EC2 instances in different regions linked by GRE tunnels, using ISAKMP via racoon. This setup is inherited, so bear with me if I fumble with terminology. Sometimes I get weird ...
1
vote
0answers
114 views

Openswan IPSec VPN on AWS tunnel established but no traffic

I am setting up a tunnel with a telco using AWS/VPC/EC2/Centos7/Libreswan and have been stuck for weeks. Appreciate any help! I have 192.168.16.73 (VPN GW, EIP 52.76.x.x) and 192.168.16.116 ...
1
vote
0answers
42 views

internet access for system over multiple hops of ipsec using GRE and OSPF

I have the following setup: linux client @ 172.16.10.68 linux gateway @ 172.16.10.69, ipsec tunnel to aws box #1, gre tunnel 10.254.0.0/30 aws box #1, ipsec tunnel from linux gw, ipsec tunnel to ...
1
vote
0answers
43 views

Connect pfsense and VPC in AWS by ipsec tunnel

I'm trying to connect my pfsense box with AWS VPC by ipsec tunnel. I read couple of tutorials and all looks good. But ... Yes, always there is some but. When only one person is working then all is ...
1
vote
0answers
105 views

AWS VPC failed communicating through VPN Tunnel

I have created a VPC scenario 3 in AWS. Configured ipsec vpn site to site between aws and cyberoam. Tunnels are up. I have added the security groups to the ec2 instance in private subnet to give full ...
1
vote
0answers
440 views

Connect Ubuntu 14.04 with Strongswan to Microsoft Azure

I want to connect my Ubuntu 14.04 server with Strongswan to Microsoft Azure Gateway. I only want to establish a connection between Azure and that Ubuntu server. In Azure I configured a dynamic ...
1
vote
0answers
262 views

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few ...
1
vote
0answers
60 views

Microsoft Message Analyzer and Windows Advanced Firewall ipsec tunnel packet sniffing

I am trying to view connections or attempted connections in windows advanced firewall. I have tried using the Windows Firewall Service provider however the trace does not return anything. Any ideas?
1
vote
0answers
27 views

IPsec Security Associations prevail even after IPsec tunnel is down

I am working on a script that can detect if existing IPsec tunnels on a system have gone down. From my observations, I have seen that it can take any where between 1 second to 8 minutes for this to be ...
1
vote
0answers
192 views

openswan IPSEC site to site randomly disconnects on debian server

goodmorning my friends, this is my situation: I have two debian servers with static IP connected through a site to site VPN OPENSWAN, everything works like a charm, I can ping the entire lan from any ...
1
vote
0answers
203 views

Windows Firewall Connection Security with Certificate (2)

I have a similar problem as the question with the same title from last October. On a Windows Server 2008 machine, using Windows Firewall's Connection Security rules, I need to establish an IPsec ...
1
vote
0answers
323 views

Strongswan transport mode ipsec within subnet

Is there any way to configure strongswan to automatically start encryption to a given subnet rather than specific host? For example, if I know that my hosts at w.x.y.z/28 will be have the same PSK ...
1
vote
0answers
425 views

FreeBSD L2TP/IPsec not routing traffic to vpn server

I have configured a VPN server on my FreeBSD server, it all seems to be running, but the VPN traffic is not routing through to the local VPN server and I cannot figure out as to why. So my question ...
1
vote
0answers
438 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
1
vote
0answers
193 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
1
vote
0answers
426 views

Shorewall: DNAT to IPSEC tunnel zone not routing correctly

I have a ipsec tunnel working that gives access to a 192.168.4.0/24 lan. It is working fine and I can access hosts on the other side without problem: # from fw and lan hosts: # ping 192.168.4.44 PING ...
1
vote
0answers
38 views

IPSEC on linux with multiple remote ISP

I have configured 2 ipsec VPN connection from my linux server to my clients locations. the reason being the client has two ISPs a primary and a secondary on. The client wants to switch to secondary ...
1
vote
0answers
2k views

Cannot connect to IPSEC/L2TP VPN Arch Linux/Windows 8

I have check a lot of other L2TP/IPsec VPN post and none of them seem to quite match the issues I am having so here is what going on. I am trying to set up a VPN on my Arch Linux server that I can ...
1
vote
0answers
382 views

Route between two branch offices via IPsec VPN to head office?

I have TMG 2010 running on Server 2008 R2 in our head office with 2 branch offices connecting in using Dray Tek 2930 routers with IPsec site to site VPNS. The remote sites can route between the head ...
1
vote
0answers
610 views

Is it possible to do IPSec Site to Site VPN without static & public IP on one end?

I am working on a project for my engineering degree that requires me to interface with some pre-existing equipment, so I am rather limited on my options. I'm rather new to VPN and ipsec for that ...
1
vote
0answers
81 views

is there any cisco-compatible ipsec+comp module?

I am looking for a waqy to establish an Ipsec tunnel(with lzs-compression enabled) between a cisco router and a host(using strongswan or sth else). I can establish a tunnel without lzs-compression. ...