an open source, multi-platform IPSec stack, with IKEv2 & 1 support

learn more… | top users | synonyms

4
votes
1answer
150 views

How do i get Strongswan / IPTables to route data back to my road warrior client correctly?

I have a simple VPN. I have a client on 10.185.28.241 who gets a virtual IP of 10.42.42.0/24 from the VPN which is located at 10.112.18.105 and is providing access to machines in the 10.112.0.0/16 ...
2
votes
1answer
81 views

Strongswan RA and Strongswan site-2-site with ASA

Task: Establish communication between remote clients (192.168.79.0/24) that are connecting to VPN server (on Ubuntu) and corporate network (10.1.2.0/24) connected to Cisco ASA. Schema: 192.168.79.0/...
2
votes
1answer
1k views

Windows 7/8 Strongswan IKEv2 Wrong Gateway

I have setup Strongswan on Ubuntu 14.04 from the official package. I use IKEv2 with PKI authentication and a custom authorization plugin. This works great for Android and Ubuntu clients using ...
2
votes
1answer
4k views

strongswan VPN on OpenWrt

Hi I'm running Barrier Breaker version of OpenWRT and I have setup a VPN according to: http://wiki.openwrt.org/inbox/strongswan.howto I can connect to the VPN with my iPhone or Mac (to 10.10.1.0/24 ...
1
vote
1answer
52 views

How to redirect traffic through IPv6 IPSec (strongswan) gateway?

I'm trying to set up IPSec secured connection to the gateway. Have three hosts: A: eth1 - fec0:1::1/64 B: eth1 - fec0:1::2/64 eth2 - fec0:2::2/64 which is gateway between A and C; forwarding is set ...
1
vote
1answer
573 views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways ...
1
vote
1answer
3k views

Missing iptables rules for Strongswan routing for VPN for phone

I have a Centos 6.6 VPS out on the Internet that has a public IP. I have installed StrongSwan 5.1.3 to allow my BlackBerry10 phone to connect from hotspots and use the VPS' connection. The VPS' IP ...
0
votes
1answer
185 views

Enable IKE tracing on windows 10 VPN

I have an IKEV2 VPN setup (including certs) that worked fine on windows 7. On Windows 10, the same config fails with 'IKE authentication credentials are unacceptable'. Server is StrongSwan. The last ...
0
votes
1answer
127 views

Can not connect into a subnet across a StrongSWAN VPN

This is a simplification of a bigger problem I'm experiencing, but I think it covers everything. The production issue is between a StrongSWAN VPN and a Juniper SSG550. The network setup is clearly not ...
0
votes
1answer
2k views

Route all traffic through StrongSwan VPN

I'm new to this - please excuse my ignorance. I have looked through many other similar questions to no avail. Trying to set up a StrongSwan VPN such that client C can connect to host H, be assigned ...
0
votes
1answer
98 views

How to check the packets is actually coming thru the VPN Tunnel

I have setup up a VPN server with strongswan. My VPN is coming up, but I want to make sure packets are actually going through the tunnel. Are there some commands to check this on the VPN server/...
4
votes
0answers
555 views

strongSwan 4.5.2 with iOS and Mavericks, Connection Troubles

I am having trouble configuring strongSwan 4.5.2 to work with iOS 7 and OS X Mavericks. I have followed these two guides, but am still encountering problems. http://teebeenator.blogspot.com/2013/06/...
2
votes
0answers
181 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
2
votes
0answers
295 views

Having trouble installing Racoon and Strongswan on the same system

I have two applications that I need to run, one uses Racoon for establishing IPSec tunnels and the other uses Strongswan. Therefore, I need both Racoon and Strongswan installed simultaneously on my ...
1
vote
0answers
23 views

Two users behind same NAT (PSK or EAP) - strongswan

I have a strongswan implementation and am running into an issue where when there are two users behind the same NAT, the second one "kicks off" the first one. I was able to resolve the issue using: ...
1
vote
0answers
81 views

Is it possible to use certificate from public CA for IKEv2 without importing intermediate cert?

I have configured ikev2 vpn on a strongswan server and a Windows 10 client, and it works fine. The authorization method is leftauth=pubkey and rightauth=eap-mschapv2. Because the leftcert to ...
1
vote
0answers
557 views

Connect Ubuntu 14.04 with Strongswan to Microsoft Azure

I want to connect my Ubuntu 14.04 server with Strongswan to Microsoft Azure Gateway. I only want to establish a connection between Azure and that Ubuntu server. In Azure I configured a dynamic gateway....
1
vote
0answers
321 views

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few moments....
1
vote
0answers
535 views

Virtual IP Pool for NAT with StrongSwan VPN

I'm trying to wrap my head around a site-to-site VPN configuration using StrongSwan that will allow remote sites to connect to our AWS VPC. The catch is, the remote gateways will potentially be using ...
1
vote
0answers
371 views

Strongswan transport mode ipsec within subnet

Is there any way to configure strongswan to automatically start encryption to a given subnet rather than specific host? For example, if I know that my hosts at w.x.y.z/28 will be have the same PSK ...
1
vote
0answers
294 views

strongswan packet get natted when ufw is enabled

I'm using strongswan 4.6.4 to connect road warriors to my server (ubuntu 13.10), which is natted behind a firewall. left=%defaultroute leftsubnet=10.10.1.0/24 right=%any rightsubnet=...
0
votes
0answers
7 views

Configuring multiple ipsec tunnels on vlan

I am trying to create a vlan between two machines, they are located on separate physical boards. And then create separate ipsec tunnels on each vlan link. Such that: eth2 10.0.1.1 ------------------...
0
votes
0answers
42 views

How to fix failing connection to VPN(ipsec+ikev2)?

Auth made with certificates ubuntu 16.04 + strongswan. Client connecting from win7, certificate was added like said in strongswan Wiki. Config made also like in strongswan wiki, but i got error: '...
0
votes
0answers
32 views

IPSec - Is it possible to have remote access clients (road warriors) all behind the same NAT device?

This is a topic that I find mixed information on. Is it possible to have two IPSec road warriors that are behind the same NAT, even with an ASA as the VPN endpoint? I have been trying with Libreswan ...
0
votes
0answers
84 views

Forwarding UPnP, DLNA traffic via computer to server

I'm about to tear out what is left of my hair with this. I was able to finally see traffic coming through, but not working in full, when using socat but this setup is not ideal. The idea: I have a ...
0
votes
0answers
68 views

Two road warrior clients behind the same NAT device (IKEv2, StrongSwan, LibreSwan)

I have an IKEv2 VPN that is set up and works properly, however I run into issues when I have two road warriors behind the same NAT device. Both devices connect however the second device seems to kick ...
0
votes
0answers
16 views

IPsec tunnel, receiving data with wrong destination address

I've managed to stablish an IPsec tunnel using strongswan to a Cisco router. My server is an Azure VM, so it is behind NAT. I do not have control over the Cisco router. This is my /etc/ipsec.conf: ...
0
votes
0answers
49 views

IPSEC help using Strongswan on CENTOS 6.6

I have been tasked with setting up an IPSEC tunnel to our remote data provider. They require my Phase 2 traffic to be PAT'd behind a public address. I am using strongswan 5.3.2 on CentOS 6.6 on a ...
0
votes
0answers
30 views

IOS + StrongSwan + Windows RADIUS (NAP)

We've got Windows NAP, Windows Certification Services and many kind of clients wich uses Windows, android, OS X and iOS. All clients have certificates issued Windows CA, and I need that they connect ...
0
votes
0answers
68 views

StrongSwan IPsec and NAT

I have an IPSec tunnel to the network of our customer running on a Linux box with StrongSwan. On there I have to do source NAT to translate our network addresses to the subnet they assigned us. This ...
0
votes
0answers
108 views

strongSwan site2site to a docker subnet

The problem I'm running docker on a public server and want to connect the subnet of the docker containers to a private subnet on a remote site and use strongSwan with a modified IKEv1 net2net PSK ...
0
votes
0answers
77 views

migrate from openswan to strongswan (linux - windows ipsec)

i have working openswan ipsec on linux router in our office, which is connected to few remote windows 2008/2012 servers using psk. i need to migrate it to strongswan ipsec (4.5.2). this is my ...
0
votes
0answers
27 views

Strongswan using FQDN

I currently have a VPN server with Stongswan running. We use this to make sure that you can reach some of our internal tools, only when connected to the VPN. Let's assume we have the following URLs, ...
0
votes
0answers
63 views

How to troubleshoot strongswan error: “unable to allocate SPIs from kernel”?

I am trying to setup an IPsec tunnel to a Juniper security gateway using a strongswan client on a Linux machine and preshared keys. This is what I get when trying to bring the connection up: root@...
0
votes
0answers
1k views

Strongswan VPN: no matching peer config found

I'm trying to setup a Strongswan VPN but can't get it to work. It does not find a matching peer config and I don't know why: LOG: [ENC] <1> generating IKE_SA_INIT response 0 [ SA KE No N(...
0
votes
0answers
219 views

Setting Up StrongSwan on CentOS 6 to Connect to Amazon VPC VPN

NB: This questions pertains to connecting Strongswan to AWS hardware VPN, NOT between two servers running Strongswan I tried following the tutorial here: http://www.mynameistoby.com/ It won't work ...
0
votes
0answers
41 views

IPSec host2host transport-mode

I want to secure all traffic between our servers that are distrubuted through various datacenters. We don't have VLANs, just plain Debian 7 & Debian 8 based Virtual Private Servers (around 20), ...
0
votes
0answers
81 views

How to copy TOS/QoS field from IPsec payload to outside tunnel packet?

Using e.g. strongswan to build an IPsec tunnel (i.e. tunnel mode, ESP), how do I copy the TOS/QoS/DSCP field from the unencrypted original packet to the outer wrapping packet? There is this ...
0
votes
0answers
94 views

Strongswan inside Amazon EC2 Classic

This is my first question, so please be gentle ;) I've got a Strongswan vpn tunnel set up to connect to a Check point server. The checkpoint sysadmin told that I'm already connected to the tunnel but ...
0
votes
0answers
381 views

Strongswan IPsec: routing arbitrary subnets over /32 IPsec endpoints

I have a basic setup between two sites A (FreeBSD, 10.0.0.1/24 nat'd to 1.1.1.1), B (Linux, 2.2.2.2), with only A behind NAT. I've only been able to get it working in tunnel mode. Here's my ipsec.conf:...
0
votes
0answers
413 views

Missing /etc/init.d/ipsec script after installing strongswan 5.3.2 from source

Ubuntu 14.04 (Amazon's Ubuntu AMI). Installed strongswan 5.3.2 from source (latest version in repo is too old and doesn't work). 1 question: 1) Noticed that the /init.d/ipsec (or /init/) script is ...
0
votes
0answers
276 views

Strongswan IPSec + XL2TP connection not working

I am trying to set up a VPN (Strongswan + xl2tpd) between my desktop and a server in AWS both running Linux (Ubuntu) but I really am getting lost. I believe I have the IPSec part working but I am not ...
0
votes
0answers
197 views

Strongswan: Connection established but one way data transfer

Posting Updated: 26.06 11:22 I'm trying to use a rasperry pi on arch linux as strongswan ikev2 server for my windows phone 8.1 smartphone. I would like to use a client certificate for authentication. ...
0
votes
0answers
174 views

strongSwan IKEv2 external authentication

I use Linux IPSec VPN-server based on strongSwan 5.2.1 with eap-mschapv2 authentication using passwords in ipsec.secrets file. Now I need to add one more VPN-server for the same users and I want to ...
0
votes
0answers
408 views

Centos and Strongswan

I'm trying to implement a strongswan solution for a site to site tunnel between me and a third party vendor. My tunnel establishes fine between myself and the vendor however I am wondering if this is ...
0
votes
0answers
474 views

How to debug IPsec L2TP authentication failure (Ubuntu StrongSwan client to Windows Server 2012)

I'm trying to connect via IPsec L2TP to a Windows Server 2012 server. Both the clients and the host are behind a NAT. I can connect from a Windows 7 machine without any problems, but when trying to ...
0
votes
0answers
190 views

vServer: Configuring single (/128) assigned IPv6 addresses for use as IP address pool for IPSEC (Strongswan) road warriors

I've a new (dev) vServer up and running. Unfortunately the provider only hands out single IPv6 addresses (not even /64 subnets). Now I am a bit confused how to achieve the following: I want to use ...
0
votes
0answers
1k views

IPSec tunnel not working when set up asynchronously

I'm trying to create a tunnel using StrongSwan. In order to do this, I'm creating two sh files, one for each gateway router. All I'm doing in the sh files is creating the tunnel, configuring it, and ...
0
votes
0answers
1k views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...