The tag has no wiki summary.

learn more… | top users | synonyms

5
votes
1answer
2k views

Issue routing openswan vpn traffic beyond the server

Trying to set up a openswan based server sitting in an Amazon VPC cluster. The goal is to make it so we can VPN into VPC and have our workstations be as if they were on the network, more of a ...
3
votes
1answer
1k views

IKE Phase 1 Aggressive Mode exchange does not complete

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows: ...
2
votes
1answer
444 views

OpenSwan + AWS + Ubuntu 14.04 - Cannot reach server

i'm currently trying to set up a VPN in order to login into a private subnet hosted on AWS. The target host has Ubuntu 14.04 and installed OpenSwan. I've setup ipsec.conf, ipsec.secrets, xl2tpd.conf, ...
2
votes
1answer
4k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
1
vote
1answer
3k views

Openswan + xl2tpd connections time out after a while

I have a non-NATed Openswan+xl2tpd server (Ubuntu 12.04), to which I connect with a Windows 8 behind NAT. The client loses its connection after a while of doing nothing (between 30 and 60 minutes, but ...
1
vote
1answer
579 views

Replace a Cisco VPN IPSec concentrator with an Ubuntu-box

Is it possible to replace a Cisco VPN IPSec concentrator with Ubuntu and for instance Strongswan? 1) Do Strongswan implement the same protocolls that Cisco uses? 2) Can we retrieve keys from the ...
0
votes
1answer
191 views

Use Openswan / IPSec on Ubuntu server to connect to existing Openswan VPN - NAT broken

I have an existing Openswan VPN, all working fairly well with Windows, Mac and Phones. [Office 192.168.0.0/24]---[VPN A.B.C.D]----[Internet]---[Home Routers (NAT), Dynamic IPs]----[Workstations] Now ...
3
votes
0answers
391 views

IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat

I have recently configured a VPN server hosted in AWS EC2. Details: Centos 6.4, openswan, xl2tpd, NAT-traversal. The configuration works great for a scenario when only one user connects form a given ...
3
votes
0answers
784 views

How do I configure OpenSwan to allow pure IPsec (not L2TP) connections from an iPhone?

Similar to this question, I want to configure an IPsec server on Linux which will accept connections from the iPhone. However, unlike the other question, I want to be able to test with pre-shared keys ...
2
votes
0answers
116 views

Openswan bad routing record after connect

I have a problem in openswan configuration. In the routing table create following lines on the client, after connect to server: Dest mask Gateway Conn Metric 0.0.0.0 ...
2
votes
0answers
3k views

ipsec IKE phase 1 failure

I have a wireless gateway that supports site-to-site IPSec. I have configured openswan on Ubuntu Server 12.04 (left side of the tunnel) with the following /etc/ipsec.conf: version 2.0 config setup ...
2
votes
0answers
205 views

Sending L2tp/IPsec PSK client packets to OpenSwan server

I'm trying (kind of) to create VPN client, I set my server on Ubuntu using OpenSwan (L2tp/IPsec PSK). What I'm doing right now is sending packets to my server and trying to exchange my keys with the ...
1
vote
0answers
306 views

Creating redundant IPSec connections using OpenSwan

I have a linux (netkey) instance with openswan installed, the instance has two connection to the same IPSec peer that needs to act as redundant connections. both connections' properties are the same ...
1
vote
0answers
192 views

Openswan ip tunnel not passing traffic

I had this tunnel already working, but now I needed to add two more ips 10.50.240.48/28 and 10.50.96.0/20. I set up my left and right and leftsubnets and rightsubnets properly in the openswan config. ...
1
vote
0answers
1k views

Cannot connect to IPSEC/L2TP VPN Arch Linux/Windows 8

I have check a lot of other L2TP/IPsec VPN post and none of them seem to quite match the issues I am having so here is what going on. I am trying to set up a VPN on my Arch Linux server that I can ...
1
vote
0answers
175 views

Openswan and sonicwall and encryption parameters

This error leads me to investigate my encryption parameters: 003 "sonicwall" #2: ignoring unknown Vendor ID payload [...] Can some expert please have a look at tell me what is wrong? Sonic wall ...
1
vote
0answers
295 views

Is it possible to do IPSec Site to Site VPN without static & public IP on one end?

I am working on a project for my engineering degree that requires me to interface with some pre-existing equipment, so I am rather limited on my options. I'm rather new to VPN and ipsec for that ...
1
vote
0answers
195 views

IPsec connection established but xl2tpd times out

This may or may not be related to my problem with passing ipsec verify. I have configured L2TP/IPsec VPN on Ubuntu 13.04 following Ubuntu's community documentation and while IPsec connection seems ...
1
vote
0answers
622 views

L2TP & IPSec (OpenSwan) on Centos time out when connecting

I'm having big trouble setting up a very simple VPN. Using Centos 6. My Server Address : 61.34.26.32 (fictive) Whenever I try to connect (from iPhone5 or MacOS X) i get a connection timeout. I ...
1
vote
0answers
257 views

Trouble connecting my server to a firefwall trough VPN

I have a server running Ubuntu and Openswan, but I'm not able to connect to the remote firewall. I hope that anybody can help me. My ipsec.conf-file is as follows: config setup protostack=netkey ...
0
votes
0answers
30 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
0answers
37 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
0
votes
0answers
67 views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
54 views

Site to Site VPN tunnel to private network

I'm looking for a little help with a network setup. I have a router which I will be using for routing network, this will be 10.0.100.1 and it will be connected to the internet with a public static ...
0
votes
0answers
48 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
0
votes
0answers
100 views

Configuring OpenSwan for IKEv2 (via iOS8)

I'm trying to configure OpenSwan (running on Ubuntu) to accept connections from an iOS8 device. I receive the following logs, which seems to indicate the server denies IKEv2 connections (even though ...
0
votes
0answers
71 views

IPSec tunnel between Cisco and openswan

We need to setup a site to site vpn connection and Our provider use Cisco system and we are planing to use openswan on centos (hosted on digitalocean). Our provider asking us following information. ...
0
votes
0answers
27 views

openswan - computing tunnel count?

When I do an /etc/init.d/ipsec status I see: pluto pid 10435 12 tunnels up some eroutes exist Question is how can I compute ahead of time how many tunnels will exist? I have one site-to-site that ...
0
votes
0answers
49 views

openswan inside a lan

I need to create an encrypted channel between two computers inside a lan using openswan, so I can show how the encrypted traffic is using wireshark. I installed openswan in both computers (running ...
0
votes
0answers
28 views

openswan ipsec tunel configuration

Its posible create ipsec tunel from SERVER1 to internal FTP. (i.e only for application on SERVER1) ? Network scheme: (private APP) (SERVER1 PUBLIC:1.1.1.1) ----------------------- ------- ...
0
votes
0answers
125 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
0
votes
0answers
112 views

Openswan malfunction since update

For security reasons i performed and update from a previous version of openswan to U2.6.32/K2.6.18-194.el5 (netkey) Since that moment i've been experiencing constant tunnel drops, i've checked the ...
0
votes
0answers
146 views

Connect Multiple Users Behind same NAT l2tp/IPsec

I have installed OpenSwan on CentOS 6, the clients connection to the server is successful and when i direct my browser to http://whatismyipaddress.com on the client it shows the public ip of the ...
0
votes
0answers
99 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
0
votes
0answers
104 views

ClearOS OpenSwan to Linksys RV042 VPN not encapsulating packets

I have a big problem which prevents our IP Phones to be working properly for a week now; Our old DFL-210 fried during an electrical event. It was doing an IPSec VPN with our remote site via their ...
0
votes
0answers
66 views

Openswan not updating the routing table

I have problems to find solution about this. I have Openswan and ASA configure IPSec VPN tunnel and the connections is established and working but with some little problems. The topology is looking ...
0
votes
0answers
248 views

OpenSwan IPsec connection drops after 30 seconds

I'm trying to connect from my Linux Mint 16 box to a CloudStack server through IPsec L2TP. Building up the connection works (pings work across the tunnel). However 30 seconds later the IPsec tunnel ...
0
votes
0answers
106 views

Site to Site VPN - Openswan and CISCO A2A

Below is the diagram that the VPN connection between Openswan server and CISCO A2A. http://i.stack.imgur.com/yQBSw.jpg client A and B are remote hosts with static ips. client X and Y are behind the ...
0
votes
0answers
122 views

openswan slow initial iperf tests

I have some working tunnel servers and although they appear to work, I'm concerned about the results of some performance tests I've been performing. The results look much like this: ...
0
votes
0answers
250 views

racoon server (debian) with openswan client (ubuntu) l2tp-ipsec-vpn - ppp mess up routes

may somebody could help me, I've setup l2tp-ipsec-vpn, it works just with little problem, but PPP pushes new routes, when in config file it's disable (nodefaultroute), even it doesn't delete original ...
0
votes
0answers
528 views

Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time

I have set up a L2TP/IPsec VPN server on a cloud VM (with a public IP address) running CentOS 6.5 (kernel: 2.6.32) with openswan/xl2tpd (openswan: 2.6.37, xl2tpd: 1.3.6). However, if multiple Windows ...
0
votes
0answers
258 views

Openswan sessions hanging with multi user VPN configuration (ipsec/l2tpd)

I've got a linux box running openswan and xl2tpd. It's a simple configuration with multiple users connecting using a sharedKey, and then establishing an L2TP connection with PPPD providing the ...
0
votes
0answers
177 views

Openswan is not restaring

I am configuring new ip-address in configuration file /etc/ipsec.conf & restarting Openswan. But, It struck & not started. Here is my logs: Apr 26 18:02:16 (none) authpriv.warn pluto[11631]: ...
0
votes
0answers
351 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
0
votes
0answers
59 views

Iptables being changed without rebooting

I configured a tunnel between my network and a remote network with OpenSwan. On my tunnel endpoint, running on Ubuntu, I added iptables rules to disable source NAT (SNAT) when the destination was the ...
0
votes
0answers
751 views

Route all traffic through IPSec VPN with ZyWALL USG 100 and OpenSwan

i want to route all traffic from our ZyWALL USG 100 through an IPSec tunnel. I was able to establish a connection from the ZyWALL, but now i have no idea how i can route the traffic through the ...
0
votes
0answers
592 views

l2tp vpn is disconnected after few minutes

I installed IPSec/L2TP on my vps server. I tried to connect from my mac to this VPN server. First time, connection is succeeded. But after a few minutes, connection was broken by itself. After ...
0
votes
0answers
72 views

VPN Server Doesn't Allow Internet Access

I recently set up a VPN on my local network to test and confirm that I could do it before sending it to my production server on Amazon AWS. It worked perfectly well, and I was satisfied with the ...
0
votes
0answers
82 views

OpenSwan issuing same IP

So I have finally got the authentication to work, and it will now connect, but when I go to use the connection I can't actually use the network. looking at the connections it seems to be issuing the ...
-1
votes
0answers
26 views

L2TP/IPSec - Windows can't connect to OpenSwan

I'm trying to connect a VPN (L2TP/IPSec) running Ubuntu with openswan/x2ltpd. It looks like the connection is estabilished but IPsec receives a disconnection right after. Probably is happening on ...