0
votes
0answers
20 views

Site to Site VPN - Openswan and CISCO A2A

Below is the diagram that the VPN connection between Openswan server and CISCO A2A. http://i.stack.imgur.com/yQBSw.jpg client A and B are remote hosts with static ips. client X and Y are behind the ...
0
votes
0answers
81 views

Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time

I have set up a L2TP/IPsec VPN server on a cloud VM (with a public IP address) running CentOS 6.5 (kernel: 2.6.32) with openswan/xl2tpd (openswan: 2.6.37, xl2tpd: 1.3.6). However, if multiple Windows ...
0
votes
0answers
121 views

Cannot connect to IPSEC/L2TP VPN Arch Linux/Windows 8

I have check a lot of other L2TP/IPsec VPN post and none of them seem to quite match the issues I am having so here is what going on. I am trying to set up a VPN on my Arch Linux server that I can ...
0
votes
1answer
82 views

Openswan and OpenVPN

I have installed Openswan and have configured IPSec tunnels and they work perfect until i install OpenVPN. Now i can't find out way the ping wont work. When i execute the "service ipsec status" it ...
0
votes
1answer
34 views

VPN and router pass-through

I have been having trouble with VPN on my router, so I thought that since it allowed VPN Pass-through, I would set up a VPN server on an Ubuntu box here, and pass through to that. I have set up PPTP, ...
1
vote
0answers
52 views

Openswan and sonicwall and encryption parameters

This error leads me to investigate my encryption parameters: 003 "sonicwall" #2: ignoring unknown Vendor ID payload [...] Can some expert please have a look at tell me what is wrong? Sonic wall ...
1
vote
0answers
239 views

OpenSwan + AWS + Ubuntu 14.04 - Cannot reach server

i'm currently trying to set up a VPN in order to login into a private subnet hosted on AWS. The target host has Ubuntu 14.04 and installed OpenSwan. I've setup ipsec.conf, ipsec.secrets, xl2tpd.conf, ...
0
votes
1answer
56 views

xl2tpd doesn't connect and no logs with Openswan

I'm using Openswan and xl2tpd to set up a VPN connection for a Windows computer, everything looks perfectly configured and the IPSec connection is successful : STATE_QUICK_R2: IPsec SA established ...
0
votes
0answers
150 views

Openswan sessions hanging with multi user VPN configuration (ipsec/l2tpd)

I've got a linux box running openswan and xl2tpd. It's a simple configuration with multiple users connecting using a sharedKey, and then establishing an L2TP connection with PPPD providing the ...
1
vote
0answers
119 views

Is it possible to do IPSec Site to Site VPN without static & public IP on one end?

I am working on a project for my engineering degree that requires me to interface with some pre-existing equipment, so I am rather limited on my options. I'm rather new to VPN and ipsec for that ...
0
votes
0answers
56 views

Openswan is not restaring

I am configuring new ip-address in configuration file /etc/ipsec.conf & restarting Openswan. But, It struck & not started. Here is my logs: Apr 26 18:02:16 (none) authpriv.warn pluto[11631]: ...
0
votes
1answer
282 views

Openswan is not sending packets on new ip after DPD

I have configured tunnel with DDNS. After appliance get rebooted the other side is not sending packets on new ip-address (even i have set dpdaction=restart). I am using openswan 2.6.38. Here is my ...
0
votes
1answer
184 views

Strongswan with X.509 authentication and LDAP authorization

I would like to setup Strongswan/Libreswan with PKI authentication. Now I have searched and found only how to configure specific accepted client certificates like here: ...
0
votes
0answers
47 views

NO_PROPOSAL_CHOSEN error while connecting

crypto isakmp policy 1 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group vpn key cse123 pool SDM_POOL_1 acl 100 netmask 255.255.255.0 crypto isakmp ...
0
votes
0answers
215 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
0
votes
1answer
113 views

L2TP VPN Connection on Debian Squeeze

I need to make an L2TP VPN connection from a Debian Squeeze server. What I have is: The server IP address Shared Key My username and password Just using these 3 parameteres I can establish the ...
1
vote
1answer
176 views

What is the simplest open source Linux VPN software/configuration with Windows Clients?

I used Strong Swan (server/client cert) server before with a Windows 8.1 client base and it was a nightmare to configure (that's an understatement). The documentation was poor. I read books on ...
0
votes
0answers
321 views

l2tp vpn is disconnected after few minutes

I installed IPSec/L2TP on my vps server. I tried to connect from my mac to this VPN server. First time, connection is succeeded. But after a few minutes, connection was broken by itself. After ...
0
votes
0answers
291 views

ignoring informational payload, type INVALID_COOKIE msgid=00000000

I'm configuring a site-to-site vpn between openswan ipsec and cisco asa 5540. After the step, i started ipesc service but the error i'm seeing is: ignoring informational payload, type INVALID_COOKIE ...
1
vote
1answer
2k views

How do I configure routing for an IPSEC tunnel between Openswan and RouterOS

I am trying to create a site-to-site VPN between a Linux router that runs openswan and shorewall (host A, serving subnet 10.10.0.0/16) and a MikroTek RouterBoard running RouterOS 6.3 (host B, serving ...
0
votes
0answers
59 views

VPN Server Doesn't Allow Internet Access

I recently set up a VPN on my local network to test and confirm that I could do it before sending it to my production server on Amazon AWS. It worked perfectly well, and I was satisfied with the ...
0
votes
0answers
56 views

OpenSwan issuing same IP

So I have finally got the authentication to work, and it will now connect, but when I go to use the connection I can't actually use the network. looking at the connections it seems to be issuing the ...
0
votes
1answer
275 views

Openswan does not connect when using sha256 (RHEL 6.2)

I am trying to connect openswan 2.6.16 on two RHEL 6.2 (kernel 2.6.32-220) virtual machines (gateway1 and gateway2) using IKEv2. It all works well and makes tunnel with ESP authentication algorithms ...
0
votes
0answers
1k views

IPSEC Tunnel with OpenSwan on Ubuntu <-> CISCO Router

I have setup a tunnel between a UBUNTU SERVER linux box and a CISCO ROUTER. This is what's the topology looks like: host 1 ------ UBUNTU SERVER IPSEC <---> CISCO ROUTER ------ host 2 | ...
1
vote
1answer
631 views

Openswan tunnel to remote public NAT'd host

Need help on this VPN set-up to work. Left-hand. EC2: eth0:10.0.0.100/EIP=1.1.1.1 (ie. NAT'd IP) eth1:10.0.0.200/EIP=2.2.2.2 Peer ip/leftid: 1.1.1.1 Right-hand. Cisco: Peer ip: 3.3.3.3 ...
0
votes
1answer
125 views

L2TP/IPSec Conectivity Problems

We ar traying to establish a VPN to our office. We sucesful configured a debian server using openswan and lx2tpd. We test the conection on the local network, and established a VPN conection with the ...
3
votes
2answers
6k views

Simple L2TP/IPsec server not working (openswan, xl2tpd, Ubuntu, Windows)

I configured openswan and xl2tpd on an Ubuntu 12.04 server (on EC2) by following various tutorials/documentation which seem to largely say the same things, but most recently this one. However, my ...
2
votes
0answers
2k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
1
vote
1answer
3k views

FortiGate IPsec VPN: Configuring Multiple Phase 2 Connections (Multiple Subnets)

I am trying to make an IPsec connection to a FortiGate router using OpenSwan. The FortiGate sits on two distinct subnets and I need to access both of them. In the FortiGate I have defined one Phase 1 ...
1
vote
0answers
528 views

L2TP & IPSec (OpenSwan) on Centos time out when connecting

I'm having big trouble setting up a very simple VPN. Using Centos 6. My Server Address : 61.34.26.32 (fictive) Whenever I try to connect (from iPhone5 or MacOS X) i get a connection timeout. I ...
0
votes
1answer
893 views

L2TP over IPSec VPN with OpenSwan and XL2TPD can't connect, timeout on Centos 6

I'm setting up LT2p over IPSec on my Centos 6.3 fresh install. I have iptables flushed, permit all. Whenever I try to connect, i get a 'no reply from vpn' and nothi Here's my ipsec.conf file ...
0
votes
0answers
492 views

l2tp / ipsec debian Openswan U2.6.38 does not connect

i am trying to get ipsec/l2tp running on a debian server with an iphone as a client but always get: Dec 2 21:00:04 vpn pluto[22711]: packet from <clientip>:43598: received Vendor ID payload ...
0
votes
1answer
290 views

How do I limit one connection per user for L2TP/IPSec using OpenSwan?

I've successfully set up a VPN server with openswan, pppd, and xl2tpd on Ubuntu. Everything works great, but I'm having trouble finding out how to only allow one VPN connection per user listed in the ...
0
votes
2answers
270 views

ipsec / OpenSwan VPN limit

What is the through put limit of ipsec / OpenSwan? I am connecting to a Cisco ASA I am using ipsec version: Linux Openswan U2.6.37/K3.2.22-35.60.amzn1.x86_64 (netkey)
9
votes
2answers
2k views

Setup VPN issue on Ubuntu Server 12.04

I have a problem with setup VPN server on my Ubuntu VPS, here is my server environments: Ubuntu Server 12.04 x86_64 xl2tpd 1.3.1+dfsg-1 pppd 2.4.5-5ubuntu1 openswan 1:2.6.38-1~precise1 After ...
3
votes
1answer
1k views

Connecting to IPSec/L2tp with OpenSwan/xl2tpd from Windows7 to Amazon EC2

I am trying to connect from my Windows7 at home to my OpenSwan/xl2tpd setup on an Ubuntu EC2 instance at Amazon. It is a connection being NATed from both the client and server ends. I was following ...
0
votes
0answers
238 views

Openswan VPN - Disconnects after an hour and doesn't attempt to reconnect

I am having a situation here as like a VPN tunnel establishes successfully. This remains alive for around an hour or so. And then it gets terminated from one end. However, the end doesn't attempt to ...
0
votes
1answer
9k views

OpenSwan IPSec phase #2 complications

Phase #1 (IKE) succeeds without any problems (verified at the target host). Phase #2 (IPSec), however, is erroneous at some point (apparently due to misconfiguration on localhost). This should be an ...
2
votes
0answers
188 views

Sending L2tp/IPsec PSK client packets to OpenSwan server

I'm trying (kind of) to create VPN client, I set my server on Ubuntu using OpenSwan (L2tp/IPsec PSK). What I'm doing right now is sending packets to my server and trying to exchange my keys with the ...
3
votes
1answer
23k views

IPsec VPN site-to-site: How should I configure the ipsec.conf files on both sites to get the tunnel up?

What I am trying to do is to create a site-to-site IPsec VPN between my network and my friend's network. We both have a router and two computers on each router, with all computers running Linux. So I ...
0
votes
1answer
667 views

Debian 6 and OpenSwan does not work with iPhone as client

I have just installed OpenSwan on Debian 6.0, and configured it according to this tutorial: http://confoundedtech.blogspot.co.uk/2011/08/android-nexus-one-ipsec-psk-vpn-with.html There are many ...
1
vote
0answers
298 views

L2TP/IPSec Tunnel to Virtual Network Interface

How do I set up a virtual network interface in Ubuntu so that OpenSWAN will happily forward packets between a remote mobile subnet and sockets on the local virtual device? This is my infrastructure: ...
0
votes
0answers
230 views

XL2TPd & IPsec Connectivity

I've setup xl2tpd and openswan (L2TP over IPsec) and my MacBook Pro and iPhone can connect just fine. The problem is, there's no internet access, only local. Is there some iptables rule that I have ...
3
votes
0answers
703 views

How do I configure OpenSwan to allow pure IPsec (not L2TP) connections from an iPhone?

Similar to this question, I want to configure an IPsec server on Linux which will accept connections from the iPhone. However, unlike the other question, I want to be able to test with pre-shared keys ...
1
vote
1answer
4k views

Can't get the L2TP IPSEC up and running

i have an Ubuntu 11.10 (oneiric) server running on a ReadyNAS. Im planning to use this to accept ipsec+l2tp connections through a router. However, the connection is failing somewhere half through. ...
1
vote
1answer
865 views

How can I create a host to host IPsec VPN if my server has direct Internet access and no LAN?

I have a Linux server (CentOS 5.5) that has direct access to the Internet with a fixed IP address. That is, the IP address is 200.29.X.Y. The gateway was given by the datacenter (200.29.X.Z) and the ...
0
votes
1answer
578 views

How do I configure a Linux VPN Client to get into a network through a Fortigate firewall?

In order to connect to my job's VPN, I have been given by the network admin: a username a password a PSK I run Ubuntu at home. I know Fortigate's VPN should be a vanilla IPSec, so OpenSwan should ...
1
vote
0answers
229 views

Trouble connecting my server to a firefwall trough VPN

I have a server running Ubuntu and Openswan, but I'm not able to connect to the remote firewall. I hope that anybody can help me. My ipsec.conf-file is as follows: config setup protostack=netkey ...
0
votes
1answer
2k views

Ipsec config with openswan

I try to configure Ipsec on server with openswan as client. But receive error - possible, it's auth error. What I wrote wrong in config ? Thank you for answers. #1: ...
3
votes
0answers
2k views

Issue routing openswan vpn traffic beyond the server

Trying to set up a openswan based server sitting in an Amazon VPC cluster. The goal is to make it so we can VPN into VPC and have our workstations be as if they were on the network, more of a ...