The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
1answer
3k views

strongswan VPN on OpenWrt

Hi I'm running Barrier Breaker version of OpenWRT and I have setup a VPN according to: http://wiki.openwrt.org/inbox/strongswan.howto I can connect to the VPN with my iPhone or Mac (to 10.10.1.0/24 ...
1
vote
1answer
239 views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways ...
1
vote
1answer
851 views

Windows 7/8 Strongswan IKEv2 Wrong Gateway

I have setup Strongswan on Ubuntu 14.04 from the official package. I use IKEv2 with PKI authentication and a custom authorization plugin. This works great for Android and Ubuntu clients using ...
0
votes
1answer
106 views

Can not connect into a subnet across a StrongSWAN VPN

This is a simplification of a bigger problem I'm experiencing, but I think it covers everything. The production issue is between a StrongSWAN VPN and a Juniper SSG550. The network setup is clearly not ...
0
votes
1answer
895 views

Route all traffic through StrongSwan VPN

I'm new to this - please excuse my ignorance. I have looked through many other similar questions to no avail. Trying to set up a StrongSwan VPN such that client C can connect to host H, be assigned ...
0
votes
1answer
2k views

Missing iptables rules for Strongswan routing for VPN for phone

I have a Centos 6.6 VPS out on the Internet that has a public IP. I have installed StrongSwan 5.1.3 to allow my BlackBerry10 phone to connect from hotspots and use the VPS' connection. The VPS' IP ...
0
votes
1answer
80 views

How to check the packets is actually coming thru the VPN Tunnel

I have setup up a VPN server with strongswan. My VPN is coming up, but I want to make sure packets are actually going through the tunnel. Are there some commands to check this on the VPN ...
4
votes
0answers
528 views

strongSwan 4.5.2 with iOS and Mavericks, Connection Troubles

I am having trouble configuring strongSwan 4.5.2 to work with iOS 7 and OS X Mavericks. I have followed these two guides, but am still encountering problems. ...
2
votes
0answers
13 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
2
votes
0answers
281 views

Having trouble installing Racoon and Strongswan on the same system

I have two applications that I need to run, one uses Racoon for establishing IPSec tunnels and the other uses Strongswan. Therefore, I need both Racoon and Strongswan installed simultaneously on my ...
1
vote
0answers
232 views

Connect Ubuntu 14.04 with Strongswan to Microsoft Azure

I want to connect my Ubuntu 14.04 server with Strongswan to Microsoft Azure Gateway. I only want to establish a connection between Azure and that Ubuntu server. In Azure I configured a dynamic ...
1
vote
0answers
222 views

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few ...
1
vote
0answers
434 views

Virtual IP Pool for NAT with StrongSwan VPN

I'm trying to wrap my head around a site-to-site VPN configuration using StrongSwan that will allow remote sites to connect to our AWS VPC. The catch is, the remote gateways will potentially be using ...
1
vote
0answers
273 views

Strongswan transport mode ipsec within subnet

Is there any way to configure strongswan to automatically start encryption to a given subnet rather than specific host? For example, if I know that my hosts at w.x.y.z/28 will be have the same PSK ...
1
vote
0answers
240 views

strongswan packet get natted when ufw is enabled

I'm using strongswan 4.6.4 to connect road warriors to my server (ubuntu 13.10), which is natted behind a firewall. left=%defaultroute leftsubnet=10.10.1.0/24 right=%any ...
0
votes
0answers
100 views

Strongswan VPN: no matching peer config found

I'm trying to setup a Strongswan VPN but can't get it to work. It does not find a matching peer config and I don't know why: LOG: [ENC] <1> generating IKE_SA_INIT response 0 [ SA KE No ...
0
votes
0answers
47 views

Setting Up StrongSwan on CentOS 6 to Connect to Amazon VPC VPN

NB: This questions pertains to connecting Strongswan to AWS hardware VPN, NOT between two servers running Strongswan I tried following the tutorial here: http://www.mynameistoby.com/ It won't work ...
0
votes
0answers
13 views

IPSec host2host transport-mode

I want to secure all traffic between our servers that are distrubuted through various datacenters. We don't have VLANs, just plain Debian 7 & Debian 8 based Virtual Private Servers (around 20), ...
0
votes
0answers
38 views

Is it possible to use certificate from public CA for IKEv2 without importing intermediate cert?

I have configured ikev2 vpn on a strongswan server and a Windows 10 client, and it works fine. The authorization method is leftauth=pubkey and rightauth=eap-mschapv2. Because the leftcert to ...
0
votes
0answers
36 views

How to copy TOS/QoS field from IPsec payload to outside tunnel packet?

Using e.g. strongswan to build an IPsec tunnel (i.e. tunnel mode, ESP), how do I copy the TOS/QoS/DSCP field from the unencrypted original packet to the outer wrapping packet? There is this ...
0
votes
0answers
53 views

Strongswan inside Amazon EC2 Classic

This is my first question, so please be gentle ;) I've got a Strongswan vpn tunnel set up to connect to a Check point server. The checkpoint sysadmin told that I'm already connected to the tunnel but ...
0
votes
0answers
177 views

Strongswan IPsec: routing arbitrary subnets over /32 IPsec endpoints

I have a basic setup between two sites A (FreeBSD, 10.0.0.1/24 nat'd to 1.1.1.1), B (Linux, 2.2.2.2), with only A behind NAT. I've only been able to get it working in tunnel mode. Here's my ...
0
votes
0answers
288 views

Missing /etc/init.d/ipsec script after installing strongswan 5.3.2 from source

Ubuntu 14.04 (Amazon's Ubuntu AMI). Installed strongswan 5.3.2 from source (latest version in repo is too old and doesn't work). 1 question: 1) Noticed that the /init.d/ipsec (or /init/) script is ...
0
votes
0answers
206 views

Strongswan IPSec + XL2TP connection not working

I am trying to set up a VPN (Strongswan + xl2tpd) between my desktop and a server in AWS both running Linux (Ubuntu) but I really am getting lost. I believe I have the IPSec part working but I am not ...
0
votes
0answers
149 views

Strongswan ipsec linux not passing traffic after established

I currently have two PFsense routers that connect over the WAN using a similar configuration and traffic is passed with no issue. I'm trying to set up a 2nd path over 4G WWAN and have to use linux ...
0
votes
0answers
133 views

Strongswan: Connection established but one way data transfer

Posting Updated: 26.06 11:22 I'm trying to use a rasperry pi on arch linux as strongswan ikev2 server for my windows phone 8.1 smartphone. I would like to use a client certificate for authentication. ...
0
votes
0answers
26 views

How does IPSec right=%any setup the SA?

I've seen lots of examples where each gateway in an IPSec is configured with right=%any. I'm perplexed how these gateways find the IP to connect to (assuming both gateways are set up that way). The ...
0
votes
0answers
179 views

strongswan/centos7: Don't get answer from other side (but IPSEC connection seems OK…)

My question: I can't access the other side server to get service, no ping, no telnet working. Is there something wrong on my side? I have problem with Strongswan on centos 7 (compiled version 5.3.2). ...
0
votes
0answers
129 views

strongSwan on Angstrom

My problem is to establish a VPN tunnel between cRIO 9068 and a Cisco router. To accomplish this task I was planning to install strongswan on cRIO (opkg install strongswan). I have installed it on ...
0
votes
0answers
132 views

strongSwan IKEv2 external authentication

I use Linux IPSec VPN-server based on strongSwan 5.2.1 with eap-mschapv2 authentication using passwords in ipsec.secrets file. Now I need to add one more VPN-server for the same users and I want to ...
0
votes
0answers
362 views

Centos and Strongswan

I'm trying to implement a strongswan solution for a site to site tunnel between me and a third party vendor. My tunnel establishes fine between myself and the vendor however I am wondering if this is ...
0
votes
0answers
423 views

How to debug IPsec L2TP authentication failure (Ubuntu StrongSwan client to Windows Server 2012)

I'm trying to connect via IPsec L2TP to a Windows Server 2012 server. Both the clients and the host are behind a NAT. I can connect from a Windows 7 machine without any problems, but when trying to ...
0
votes
0answers
170 views

vServer: Configuring single (/128) assigned IPv6 addresses for use as IP address pool for IPSEC (Strongswan) road warriors

I've a new (dev) vServer up and running. Unfortunately the provider only hands out single IPv6 addresses (not even /64 subnets). Now I am a bit confused how to achieve the following: I want to use ...
0
votes
0answers
865 views

IPSec tunnel not working when set up asynchronously

I'm trying to create a tunnel using StrongSwan. In order to do this, I'm creating two sh files, one for each gateway router. All I'm doing in the sh files is creating the tunnel, configuring it, and ...
0
votes
0answers
1k views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...