2
votes
Routing with ipsec tunnel
Each router needs to have a route to all required subnets.
From what I can make out from the routing table from the Office1 router(?) you posted, it's missing a route to 192.168.1.0/24 through the ...
- 11.7k
1
vote
Resolve failing for %any in strongswan ipsec
I used %any for right. Since then, I am not able to up my ipsec transport mode connection. But when i give specific ip, ipsec is properly established.
IPsec, just like TLS or SSH, needs active ...
- 11.4k
1
vote
Accepted
Strongswan IPsec site-to-site on Gcloud
I found the problem, in addition to opening UDP ports 500 and 4500 on Google Cloud Firewall it is necessary to add the ESP protocol
Protocols and ports
udp:500
udp:4500
esp
- 161
1
vote
IPsec tunnel gets connected, Phase 2 is successful but no IP adapter is created thus tunnel does not work
leftsubnet=10.13.255.0/0 is probably not what you intended as that results in 0.0.0.0/0. So the peer can narrow it to anything, but the narrowed subnet 10.13.255.0/24 is also not ideal if you want to ...
- 4,102
1
vote
Accepted
Draytek VPN stuck on Authentica IKEv2 EAP
It's a broken router, this config works on other Draytek routers.
- 11
1
vote
Android .sswan profile to ipsec.conf
There are several issues I can see:
leftcert is your own certificate, not the server's, which would be in rightcert, but...
...since that seems to be a CA certificate, you don't have to configure it ...
- 4,102
1
vote
1
vote
IPsec connection established but client not able to reach host until host pings the client
Two things I don't see in your config.
Add a default route for the network you want to reach on your VPN device.
Without a route for the specific subnet of the host the VPN device will forward all ...
- 309
1
vote
Accepted
strongwan disable user access
While there is currently no plugin to blacklist single identities (or certificates/keys), the whitelist plugin provides a way to whitelist all allowed identities. It comes with a command to manage the ...
- 4,102
1
vote
Accepted
Windows 11 L2TP and IPSEC: Where to set the IpSec group
The only IPsec related Windows built-in VPN clients are:
IPsec IKEv2
L2TP/IPsec
Windows has no built-in IPsec IKEv1 Xauth (Cisco-style) VPN client.
Some people recommend the Shrew Soft VPN Client ...
1
vote
How can I route traffic over IPSec tunnel?
I up this intersting post. I have a similar problem. Normaly ipsec manage the main route via the file ipsec.conf and the directive leftsubnet=10.0.0.0/8 and rightsubnet=192.168.0.0/16. So for he main ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible