The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
4 views

why does openswan create only UDP poliices in XFRM

See output of ip xfrm policy: src 172.16.255.1/32 dst 10.100.108.51/32 proto udp sport 1701 dir out priority 2080 tmpl src 104.131.13.155 dst 41.203.65.124 proto esp reqid 16393 ...
0
votes
0answers
19 views

Routing Outbound Traffic through IPSEC Tunnel

I've been trying my hardest to figure this out for the past week, and think I have a general idea of what's going on, but can't figure out how to solve it. We have an OpenSwan server in an AWS VPC ...
1
vote
1answer
27 views

IPSec Tunnel goes down during long periods of inactivity

I have 2 AWS regions I have connected using an OpenSWAN IPSec tunnel. This works great in our production environment but in our test environment where 1 of the regions has long periods of inactivity, ...
0
votes
0answers
13 views

OpenSwan on Amazon EC2 - max number of retransmissions reached STATE_MAIN_I3. Possible authentication failure:

We are communicating with one of our clients over a VPN Tunnel. Openswan tunnel was working perfectly fine before. Today we attached an Elastic IP to the server and rebooted. Since then the tunnel ...
0
votes
1answer
52 views

How to start and stop a libreswan connection

I have a connection configured on my libreswan instance on two machines. The connection start automatically when I start the pluto daemon, I have try other settings, but the connection also starts if ...
0
votes
1answer
29 views

Can't ping public endpoints when IPSec tunnel is up

I'm using openswan to link two machines via IPSec. The tunnel comes online fine and I have connectivity to each endpoint via the VPN. However, when the tunnel is up, I lose connectivity to the ...
1
vote
0answers
57 views

Openswan IPSec VPN on AWS tunnel established but no traffic

I am setting up a tunnel with a telco using AWS/VPC/EC2/Centos7/Libreswan and have been stuck for weeks. Appreciate any help! I have 192.168.16.73 (VPN GW, EIP 52.76.x.x) and 192.168.16.116 ...
0
votes
0answers
6 views

IPsec Tunnel Deterministic Delay

I setup a site-to-site IPSec tunnel using OpensWan. I notice a constant delay of 15sec before the firewall gives back the response to the application running on a host behind it. 17:50:41.638828 IP ...
0
votes
0answers
35 views

Why I have 2 tunnels up on Openswan?

I have started to use Openswan on Centos6 and was able to configure Host to Host using the following document: ...
0
votes
0answers
18 views

Why ping stop to work when I stop ipsec service?

I have started to use Openswan on Centos6 and was able to configure Host to Host using the following document: ...
0
votes
0answers
21 views

Openswan and nat_traversal

I got a problem with openswan and nat_traversal option. If it is set to no, my tunnel goes up but i cannot exchange packets with the peers because i'm behind a router. If it is set to yes, a lot of ...
1
vote
1answer
241 views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways ...
0
votes
0answers
203 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 ...
2
votes
0answers
77 views

Is there an extension of host to host ipsec to a many-many configuration?

Having a typical host to host transport mode ipsec configuration, conn appserver01-to-swift01 leftid=@appserver01.server.com left=10.133.176.246 leftrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxx ...
0
votes
1answer
57 views

Openswan L2TP setup to allow admin user access to AWS VPC

I've got an ssh bastion host, but managing the ssh whitelist is annoying, opening ssh to the world is suboptimal. I'd like to tuck a vpn server in front. Can't get openvpn to stay connected for more ...
0
votes
0answers
37 views

Hyper-V and Openswan

I have Openswan on Hyper-V and I have notice that for every tunnel I have there is no route. So the tunnels are established, local pc can ping each other. With "ip xfrm policy" the policy are shown, ...
0
votes
1answer
191 views

IPsec VPN between Fortigate 60C and openswan up, but no traffic

I get visual confirmation that the tunnel is working from the fortigate GUI but, it also says i don't have 1 byte of traffic, the linux server also confirms the tunnel is open but i can't ping ...
3
votes
1answer
357 views

VPN ERROR 500 STATE_MAIN_I1, unable to start phase2

i'm trying to set up a site to site vpn to a fortigate 60c from a CentOS 7 with openswan, the error i get everytime is the following 000 #1: "office":500 STATE_MAIN_I1 (sent MI1, expecting MR1); ...
1
vote
0answers
230 views

Openswan through Amazon VPC Routing to Office Network

Were trying to create a road warrior VPN network. Since the internet in our office is slow, we are running it through a VPC with a replicated AD and File Server. There is currently an Amazon VPC VPN ...
0
votes
0answers
345 views

IPSec Tunnel AWS VPC <-> openSwan CentOS 6.6 Tunnel up, no traffic

EDIT: Allow ESP traffic through firewall. This resolved the issue. I managed to get a tunnel up between a CentOS 6.6 box and our AWS VPC. It shows as connected on the box, and in AWS, but the ...
0
votes
0answers
70 views

OpenSwan IPSec tunnel not routing correctly

I am trying to enable site-to-site connectivity between my network and a Windows Azure network. I have configured openswan in the local network and service ipsec status reports that the tunnel is up ...
0
votes
1answer
428 views

CentOS 7 ipsec hardware rngd erorr

ipsec verify Hardware RNG detected, testing if used properly [FAILED] Hardware RNG is present but 'rngd' is not running. No harware random used! Someone suggest to edit ...
0
votes
0answers
48 views

Openswan : Traffic not passing through tunnel

PLEASE HELP : whenever I ping one of the other site servers , the connection does not go through the other site public ip. the setup is as follows : Public gw ip of other site : 6.6.6.6 Server that ...
0
votes
0answers
43 views

Openswan VPN routing issue

I have configured the openswan VPN correctly on an EC2 server ( Elastic IP ), and it shows 2 tunnels up. Given the following setup : MY_PUBLIC_IP: x.x.x.193, MY_ENCRYPTION_DOMAIN: ...
1
vote
0answers
157 views

openswan IPSEC site to site randomly disconnects on debian server

goodmorning my friends, this is my situation: I have two debian servers with static IP connected through a site to site VPN OPENSWAN, everything works like a charm, I can ping the entire lan from any ...
0
votes
1answer
186 views

OpenSwan Dead Peer Detection for Mac WIFI clients

I am running an OpenSwan server to facilitate client-server connections into a secure data centre. I have a problem with the standard L2TP over IPSEC client in MacOS, specifically when using WIFI. ...
0
votes
0answers
217 views

Ubuntu 14.04 Cant connect to openswan/xl2tpd/IPsec VPN via iOS

I am setting up a VPN using openswan, xl2tpd, and IPsec and i am getting issues with connecting via an iOS device with the error "You were disconnected by the communication device". This is configured ...
0
votes
0answers
295 views

Windows Phone 8.1 client unable to connect to Ubuntu VPN server (L2TP with IPsec)

I have set up an L2TP + IPsec VPN server on my Ubuntu server (14.04.2 64bit) using openswan. I got it working with Android and Windows 8.1 clients, though Windows 8.1 required some tweaking. When ...
0
votes
1answer
809 views

IPSec VPN Fortigate Phase 2 stuck

Trying to setup a VPN connection to Office Fortigate but I can't pass phase 2. Received info from sysadmins: PSK IKE v1 Aggressive mode Phase1 3DES-SHA1 DH group 5 Key lifetime 28800 XAUTH PAP ...
0
votes
0answers
856 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
0answers
106 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
0
votes
0answers
835 views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
86 views

Site to Site VPN tunnel to private network

I'm looking for a little help with a network setup. I have a router which I will be using for routing network, this will be 10.0.100.1 and it will be connected to the internet with a public static ...
0
votes
0answers
206 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
0
votes
0answers
487 views

Configuring OpenSwan for IKEv2 (via iOS8)

I'm trying to configure OpenSwan (running on Ubuntu) to accept connections from an iOS8 device. I receive the following logs, which seems to indicate the server denies IKEv2 connections (even though ...
0
votes
0answers
178 views

IPSec tunnel between Cisco and openswan

We need to setup a site to site vpn connection and Our provider use Cisco system and we are planing to use openswan on centos (hosted on digitalocean). Our provider asking us following information. ...
0
votes
1answer
410 views

Use Openswan / IPSec on Ubuntu server to connect to existing Openswan VPN - NAT broken

I have an existing Openswan VPN, all working fairly well with Windows, Mac and Phones. [Office 192.168.0.0/24]---[VPN A.B.C.D]----[Internet]---[Home Routers (NAT), Dynamic IPs]----[Workstations] Now ...
1
vote
0answers
228 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
0
votes
0answers
352 views

Openswan malfunction since update

For security reasons i performed and update from a previous version of openswan to U2.6.32/K2.6.18-194.el5 (netkey) Since that moment i've been experiencing constant tunnel drops, i've checked the ...
1
vote
2answers
394 views

How to deny connections to xl2tp without ipsec encryption?

I try to setup l2tp+ipsec server for my mobile use and my home router use. So I made some setup and checked it works fine from android device. I see encryption on ipsec --status. My system is CentOS ...
1
vote
0answers
179 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
0
votes
1answer
67 views

IP Addresses over IPSec

I've got four hosts setup as follows: I've got an IPSec tunnel via OpenSwan over the internet between Servers B and C. Servers A and D are configured to route traffic to the other via B and C ...
0
votes
1answer
487 views

Clients cannot connect to L2TP server on Ubuntu 12.04 & 14.04 LTS

I am trying to set up a L2TP/IPSec server on AWS with instance running Ubuntu 14.04LTS. I followed the instructions that I found here : https://raymii.org/s/tags/vpn.html. I tried to use 12.04LTS ...
2
votes
0answers
803 views

Creating redundant IPSec connections using OpenSwan

I have a linux (netkey) instance with openswan installed, the instance has two connection to the same IPSec peer that needs to act as redundant connections. both connections' properties are the same ...
1
vote
0answers
301 views

Openswan ip tunnel not passing traffic

I had this tunnel already working, but now I needed to add two more ips 10.50.240.48/28 and 10.50.96.0/20. I set up my left and right and leftsubnets and rightsubnets properly in the openswan config. ...
0
votes
1answer
216 views

IPsec VPN Site-to-Site: Unable to reach hosts on same subnet as gateway

I am trying to bridge an office network with an Amazon VPC cloud network. So far everything seems to be working, except that I cannot reach servers on the same subnet as the cloud gateway. Office ...
0
votes
0answers
538 views

OpenSwan IPsec connection drops after 30 seconds

I'm trying to connect from my Linux Mint 16 box to a CloudStack server through IPsec L2TP. Building up the connection works (pings work across the tunnel). However 30 seconds later the IPsec tunnel ...
0
votes
0answers
859 views

Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time

I have set up a L2TP/IPsec VPN server on a cloud VM (with a public IP address) running CentOS 6.5 (kernel: 2.6.32) with openswan/xl2tpd (openswan: 2.6.37, xl2tpd: 1.3.6). However, if multiple Windows ...
4
votes
1answer
4k views

Site-to-Site IPsec vpn not sending ping across a tunnel

This is my first attempt at a site-to-site VPN. I chose to use IPec because it appeared to be the best solution for what I needed to accomplish. I've followed several different tutorials over the last ...
1
vote
0answers
2k views

Cannot connect to IPSEC/L2TP VPN Arch Linux/Windows 8

I have check a lot of other L2TP/IPsec VPN post and none of them seem to quite match the issues I am having so here is what going on. I am trying to set up a VPN on my Arch Linux server that I can ...