The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
12 views

Racoon: inherit configurations

Starting to get acquainted with ipsec-tools and racoon, I'm wondering how stage 1 configuration inheritance works. With a sample configuration like this: remote "ParentConfig" { proposal { # ...
0
votes
0answers
24 views

Right way to set the MTU of an IPsec Client ( Linux/Racoon)

Here's the network topology : (PC1:IPsec Client)eth0---Internet CPE---((Internet))---Internet CPE---(PC2:IPsec Server) I've set up an IPsec Internet Gateway : PC1 sends all traffic, encrypted in an ...
-1
votes
0answers
24 views

Linux IPsec VPN w/ racoon: Routing traffic into the internet [migrated]

I'm currently setting up a VPN for my iPad to use when I'm traveling. Here's some basic info (if you need more details, just leave a comment, I will extend the question with the details): An OpenVZ ...
0
votes
0answers
132 views

IpSec/Racoon: Packets go to wrong tunnel

I use Debian and Racoon to connect to a Cisco VPN Gateway. We have got two tunnels between the same endpoints. Somehow and sometimes, packets go to the wrong tunnel. This is the log message from the ...
0
votes
0answers
212 views

racoon server (debian) with openswan client (ubuntu) l2tp-ipsec-vpn - ppp mess up routes

may somebody could help me, I've setup l2tp-ipsec-vpn, it works just with little problem, but PPP pushes new routes, when in config file it's disable (nodefaultroute), even it doesn't delete original ...
0
votes
0answers
232 views

IpSec: racoon-tool does not allow to specify key size (AES 256 bit required)

I try to use racoon-tool to configure a IPSec tunnel. The foreign gateway requires me to use AES 256 bit encryption. Unfortunately, racoon-tool only allows me to give "aes" as an option. The handshake ...
0
votes
0answers
113 views

Racoon IPSec tunnel VPN - can connect to everything, except VPN host

I've got an Android client connecting to a racoon IPSec VPN endpoint using Xauth and PSK. Everything pretty much works as expected - the client can ping the internet and can also connect to other ...
2
votes
0answers
158 views

Having trouble installing Racoon and Strongswan on the same system

I have two applications that I need to run, one uses Racoon for establishing IPSec tunnels and the other uses Strongswan. Therefore, I need both Racoon and Strongswan installed simultaneously on my ...
1
vote
0answers
300 views

racoon pure IPSEC VPN, best way to give vpn server an IP address on the VPN?

We are testing a VPN server for DR. We have a rackspace cloud instance, with a pure IPSEC VPN server running in racoon, serving "road warrior" clients. We have some NAT going on on the server to route ...
1
vote
1answer
497 views

VPN with xl2tpd and racoon - how to NAT traffic out of non-default IP address

I have a server running Debian which has networking like this: eth0 - has public IP address 1.2.3.4 eth1 - has public IP address 1.2.3.5 I'm trying to set up a VPN on the server which I can connect ...
2
votes
1answer
2k views

ipsec vpn with racoon drops traffic on phase 1 renegotiation

We are running racoon on Linux connecting to a Checkpoint firewall. The connection comes up fine, but we see an interruption to traffic every 24 hours, corresponding to Phase 1 regenogiation. Our ...
3
votes
4answers
4k views

pfsense 2.0.2 racoon(ipsec vpn) unreliable

I'm having issues with racoon (ipsec VPN) on pFSense 2.0.2 (and 2.0.1). According to racoon all my tunnels are up (I have about 130 of them), but over time more and more of them won't pass traffic ...
1
vote
0answers
564 views

iPhone doesn't save password for Cisco IPsec VPN using racoon daemon

On my Debian server I had set up racoon daemon (1:0.8.0-14) for Cisco IPSec VPN using certificates for authentication. My racoon.conf is like following: log info; path certificate ...
1
vote
1answer
351 views

Using a roadwarrior ipsec client as a gateway

Scenario: INTERNET --- VPN-Server <----> ROUTER <----> Roadwarrior <----> Subnet 132.1.1.1 192.168.2.1 192.168.2.50 176.168.10.0/24 ...
0
votes
1answer
2k views

Connecting debian and windows via IPsec VPN with Racoon and ipsec-tools

I've some trouble with the IPsec configuration on my debian server (6 squeeze). This server should connect via IPsec VPN to an windows server, which is protected by an firewall. I've used racoon and ...
6
votes
1answer
3k views

ASA site-to-site IPSec vpn to linux ipsec-tools endpoints stops working after a random period of time

We swapped to ASA's over the weekend, and we replaced our VPN infrastructure which was previously based on openvpn and are now using IPSec between our ASA 5520's and our other sites that have linux ...
0
votes
1answer
357 views

private subnet nat (openvpn / racoon)

I have a openvpn subnet 10.8.0.0/24 running one server and one client (laptop). openvpn works fine. Browsing the web over openvpn from the laptop works also fine. Now on the server there is a private ...
1
vote
2answers
338 views

Openvpn routing for a Racoon subnet

I'm able to connect successfully from a laptop to my server using Openvpn. I have ipv4 forwarding and NAT enabled on the server. I can access the web, etc. But the server also has a S2S VPN with ...
1
vote
0answers
1k views

IPSec VPN login failing with certificate authentication

I am working on an IPSec VPN solution allowing iPhones / iPads to connect to a Linux server running Gentoo. I have been able to get the VPN functioning as expected using PSK authentication (PSK + ...
2
votes
2answers
758 views

Racoon on Linux - Initial packet loss

I have configured two Linux boxes so they automatically use a transport-level IPSec connection whenever they need to communicate. The configuration is based on Racoon with X509 authentication and the ...
0
votes
1answer
2k views

How to make racoon generate security policies for all ports?

I am trying to establish an IPsec connection between two systems. I've got racoon setup on both sides. The client is going to have a dynamic IP address, so on the server, passive and generate_policy ...
4
votes
2answers
4k views

iOS/Mac-Compatible IPSec VPN Server on Ubuntu

I pay for a VPS from a Xen VPS host and the load on it is fairly light, so I'd like to run a VPN off of it. The configuration I'm shooting for is "roadwarrior"-style, as I'd like to use it to secure ...
1
vote
1answer
1k views

IPsec isakmp_natt problem on racoon.conf

I have this weird problem where racoon complains of the following error: WARNING: NAT-T is enabled in at least one remote{} section, but no 'isakmp_natt' address was specified! I've already ...
-1
votes
2answers
863 views

racoon-tool doesn't generate full racoon.conf file in /var/lib/racoon/racoon.conf

I am using ipsec-tools/racoon to create my VPN. I am using racoon-tool to configure racoon.conf but when I run racoon-tool reload it only generates the first section - Global items. When I run ...