The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
10 views

OpenSwan IPsec VPN server not responding to remote router DPD packets

We have setup a IPsec connection, on an Ubuntu server, with OpenSwan IPsec implementation (version U2.6.38/K3.13.0-24-generic). The connection establishes successfully, but around a minute later (...
0
votes
0answers
21 views

IPsec with EC2 client and Elastic IP, but nat_traversal=no

After researching this quite a bit, I feel I may be asking the impossible here, but I thought I'd give it a shot. I'm trying to configure an Openswan IPsec client on an EC2 server (inside VPC, if it ...
0
votes
1answer
78 views

Connecting to a FortiGate VPN from a remote Linux machine via OpenSwan

Here's the setup: I have a FortiGate unit on a business network, which has a FortiGate VPN set up. Machines on a remote network that can run FortiClient (Windows and Mac machines) have no problem ...
0
votes
1answer
14 views

IPSEC VPN site-to-“alias”

I am trying to connect my CentOS (CentOS release 6.7) server to a 3rd party VPN so traffic can be routed between my Apache instance listening on an aliased private IP (192.168.253.1), through the ...
0
votes
1answer
62 views

How to enable debug logs in OpenSwan?

I use OpenSwan IPSec tunnel on CentOS 6.7. I have added the following configuration in /etc/ipsec.secrets according to this link: http://linux.die.net/man/5/ipsec.conf config setup plutodebug=all ...
1
vote
0answers
68 views

ipsec: Can't authenticate: no preshared key found for

I'm using Openswan with ipsec and ipsec keeps complaining about the shared-key not being present. I'm running Ubuntu 14.04 . I'm just experimenting on a couple of internal systems since I'm new to ...
0
votes
0answers
53 views

Docker + VPN LAN to LAN

We just migrated our applications to a Docker environment. I have many containers running my Python Application in my VM. (4 containers per VM). This is a multi-tenant application. This application ...
0
votes
0answers
29 views

Can't connect Cisco 2621 to AWS EC2 Openswan site to site vpn

I am configuring Site-to-Site vpn between my home Cisco 2621 router and Amazon EC2 instance running openswan. I keep on getting the following message on the openswan server: " NO_PROPOSAL_CHOSEN " My ...
0
votes
0answers
20 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
1
vote
0answers
16 views

IPsec and pinging rightsubnets

I have been racking my brain about this. I have openswan running and I have been able to get tunnels up. Unfortunately, when I try to ping computers on my right subnet, I am not able to get any ...
0
votes
0answers
97 views

OpenSwan VPN IPSEC Tunnel Connection

I was hoping this website would be able to help with solving this issue since I've been running in circles on my end! I am using OpenSwan to setup an IPSec tunnel between a VPN server on Rackspace ...
0
votes
0answers
32 views

Ipsec one way traffic (libreswan / openstack)

'm currently trying to setup an IPSEC tunnel to allow communications between my on site subnet 192.168.1.0/24 and my openstack cloud subnet 192.168.4.0/24. To do so, I have a Debian jessie with ...
0
votes
1answer
70 views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...
0
votes
1answer
70 views

openSwan VPN is up can't ping remote subnet

When I run the command ipsec auto status i get the following output: ...... 172.16.255.1/32===104.131.13.155<104.131.13.155>:17/1701...41.203.65.124<41.203. 65.124>===10.100....
0
votes
0answers
57 views

Routing Outbound Traffic through IPSEC Tunnel

I've been trying my hardest to figure this out for the past week, and think I have a general idea of what's going on, but can't figure out how to solve it. We have an OpenSwan server in an AWS VPC ...
1
vote
1answer
40 views

IPSec Tunnel goes down during long periods of inactivity

I have 2 AWS regions I have connected using an OpenSWAN IPSec tunnel. This works great in our production environment but in our test environment where 1 of the regions has long periods of inactivity, ...
0
votes
0answers
47 views

OpenSwan on Amazon EC2 - max number of retransmissions reached STATE_MAIN_I3. Possible authentication failure:

We are communicating with one of our clients over a VPN Tunnel. Openswan tunnel was working perfectly fine before. Today we attached an Elastic IP to the server and rebooted. Since then the tunnel ...
0
votes
1answer
198 views

How to start and stop a libreswan connection

I have a connection configured on my libreswan instance on two machines. The connection start automatically when I start the pluto daemon, I have try other settings, but the connection also starts if ...
0
votes
1answer
63 views

Can't ping public endpoints when IPSec tunnel is up

I'm using openswan to link two machines via IPSec. The tunnel comes online fine and I have connectivity to each endpoint via the VPN. However, when the tunnel is up, I lose connectivity to the ...
1
vote
0answers
149 views

Openswan IPSec VPN on AWS tunnel established but no traffic

I am setting up a tunnel with a telco using AWS/VPC/EC2/Centos7/Libreswan and have been stuck for weeks. Appreciate any help! I have 192.168.16.73 (VPN GW, EIP 52.76.x.x) and 192.168.16.116 (...
0
votes
0answers
9 views

IPsec Tunnel Deterministic Delay

I setup a site-to-site IPSec tunnel using OpensWan. I notice a constant delay of 15sec before the firewall gives back the response to the application running on a host behind it. 17:50:41.638828 IP ...
0
votes
0answers
63 views

Why I have 2 tunnels up on Openswan?

I have started to use Openswan on Centos6 and was able to configure Host to Host using the following document: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/...
0
votes
0answers
19 views

Why ping stop to work when I stop ipsec service?

I have started to use Openswan on Centos6 and was able to configure Host to Host using the following document: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/...
0
votes
0answers
27 views

Openswan and nat_traversal

I got a problem with openswan and nat_traversal option. If it is set to no, my tunnel goes up but i cannot exchange packets with the peers because i'm behind a router. If it is set to yes, a lot of ...
1
vote
1answer
504 views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways ...
0
votes
0answers
333 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 server)--...
2
votes
0answers
139 views

Is there an extension of host to host ipsec to a many-many configuration?

Having a typical host to host transport mode ipsec configuration, conn appserver01-to-swift01 leftid=@appserver01.server.com left=10.133.176.246 leftrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxx ...
0
votes
1answer
68 views

Openswan L2TP setup to allow admin user access to AWS VPC

I've got an ssh bastion host, but managing the ssh whitelist is annoying, opening ssh to the world is suboptimal. I'd like to tuck a vpn server in front. Can't get openvpn to stay connected for more ...
0
votes
0answers
41 views

Hyper-V and Openswan

I have Openswan on Hyper-V and I have notice that for every tunnel I have there is no route. So the tunnels are established, local pc can ping each other. With "ip xfrm policy" the policy are shown, ...
0
votes
1answer
305 views

IPsec VPN between Fortigate 60C and openswan up, but no traffic

I get visual confirmation that the tunnel is working from the fortigate GUI but, it also says i don't have 1 byte of traffic, the linux server also confirms the tunnel is open but i can't ping nowhere,...
3
votes
1answer
694 views

VPN ERROR 500 STATE_MAIN_I1, unable to start phase2

i'm trying to set up a site to site vpn to a fortigate 60c from a CentOS 7 with openswan, the error i get everytime is the following 000 #1: "office":500 STATE_MAIN_I1 (sent MI1, expecting MR1); ...
1
vote
0answers
360 views

Openswan through Amazon VPC Routing to Office Network

Were trying to create a road warrior VPN network. Since the internet in our office is slow, we are running it through a VPC with a replicated AD and File Server. There is currently an Amazon VPC VPN ...
0
votes
1answer
681 views

CentOS 7 ipsec hardware rngd erorr

ipsec verify Hardware RNG detected, testing if used properly [FAILED] Hardware RNG is present but 'rngd' is not running. No harware random used! Someone suggest to edit /etc/...
1
vote
0answers
221 views

openswan IPSEC site to site randomly disconnects on debian server

goodmorning my friends, this is my situation: I have two debian servers with static IP connected through a site to site VPN OPENSWAN, everything works like a charm, I can ping the entire lan from any ...
0
votes
1answer
304 views

OpenSwan Dead Peer Detection for Mac WIFI clients

I am running an OpenSwan server to facilitate client-server connections into a secure data centre. I have a problem with the standard L2TP over IPSEC client in MacOS, specifically when using WIFI. ...
0
votes
1answer
1k views

IPSec VPN Fortigate Phase 2 stuck

Trying to setup a VPN connection to Office Fortigate but I can't pass phase 2. Received info from sysadmins: PSK IKE v1 Aggressive mode Phase1 3DES-SHA1 DH group 5 Key lifetime 28800 XAUTH PAP ...
0
votes
0answers
1k views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
1answer
1k views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
264 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | +-------...
0
votes
1answer
549 views

Use Openswan / IPSec on Ubuntu server to connect to existing Openswan VPN - NAT broken

I have an existing Openswan VPN, all working fairly well with Windows, Mac and Phones. [Office 192.168.0.0/24]---[VPN A.B.C.D]----[Internet]---[Home Routers (NAT), Dynamic IPs]----[Workstations] Now ...
1
vote
0answers
258 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
0
votes
0answers
428 views

Openswan malfunction since update

For security reasons i performed and update from a previous version of openswan to U2.6.32/K2.6.18-194.el5 (netkey) Since that moment i've been experiencing constant tunnel drops, i've checked the /...
1
vote
2answers
471 views

How to deny connections to xl2tp without ipsec encryption?

I try to setup l2tp+ipsec server for my mobile use and my home router use. So I made some setup and checked it works fine from android device. I see encryption on ipsec --status. My system is CentOS ...
1
vote
0answers
212 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
0
votes
1answer
74 views

IP Addresses over IPSec

I've got four hosts setup as follows: I've got an IPSec tunnel via OpenSwan over the internet between Servers B and C. Servers A and D are configured to route traffic to the other via B and C ...
0
votes
1answer
560 views

Clients cannot connect to L2TP server on Ubuntu 12.04 & 14.04 LTS

I am trying to set up a L2TP/IPSec server on AWS with instance running Ubuntu 14.04LTS. I followed the instructions that I found here : https://raymii.org/s/tags/vpn.html. I tried to use 12.04LTS ...
2
votes
0answers
1k views

Creating redundant IPSec connections using OpenSwan

I have a linux (netkey) instance with openswan installed, the instance has two connection to the same IPSec peer that needs to act as redundant connections. both connections' properties are the same (...
1
vote
0answers
368 views

Openswan ip tunnel not passing traffic

I had this tunnel already working, but now I needed to add two more ips 10.50.240.48/28 and 10.50.96.0/20. I set up my left and right and leftsubnets and rightsubnets properly in the openswan config. ...
0
votes
1answer
253 views

IPsec VPN Site-to-Site: Unable to reach hosts on same subnet as gateway

I am trying to bridge an office network with an Amazon VPC cloud network. So far everything seems to be working, except that I cannot reach servers on the same subnet as the cloud gateway. Office ...
0
votes
0answers
661 views

OpenSwan IPsec connection drops after 30 seconds

I'm trying to connect from my Linux Mint 16 box to a CloudStack server through IPsec L2TP. Building up the connection works (pings work across the tunnel). However 30 seconds later the IPsec tunnel ...