Tag Info

New answers tagged

0

I have had this problem before -- and if your tunnel is up correctly and the Cisco side is pinging through into the 192.168 network, it means your tunnel is up and passing traffic. If you can't ping back to the Cisco or the 10.10 segment, the problem is not the tunnel. The problem is -- most likely -- that you are usng the Ubuntu box as your firewall for ...


0

These packets are from different IKE versions. The packets marked as IKE_SA_INIT and IKE_AUTH are IKEv2 messages, according to RFC 7296. The others are IKEv1 messages (RFC 2409 and others). Also, Quick Mode is known as Phase 2, and in IKEv2 there are not really two distinct phases.


0

No, it is not enabled by default and it wasn't in the protocol until SMB3 and that's why HopelessN00b mentions 2012R2 encryption availability. However as Somescout mentioned you can force IPSec for any Windows to Windows connection you'd like. There's no need to feel uncomfortable recommending it, unless you're recommending it as a VPN substitute, which is ...


0

Windows does not use IPSec to encrypt SMB transfers. By default, SMB transfers are performed unencrypted. With Server 2012 R2, there is an option for native SMB transfer encryption, though it's disabled by default, and not available on Server 2008 R2. So, looks like it's time to get an upgraded version of Windows to serve those files from if you need to ...


3

Libreswan is the project the Openswan developers created after the company they had originally founded to develop Openswan sued them over the trademark. So Libreswan is what we will discuss here. The most obvious differences are: StrongSwan has much more comprehensive and developed documentation than Libreswan. StrongSwan has support for EAP ...


2

I cannot help you on the OpenSwan side, but I recently had to connect a Cyberoam to a Fortigate with multiple subnets as well. For each subnet, you can create another phase 2 (bound to the same phase 1 object): Here's an example of such a phase 2 object: In the quick mode selector section, specify the local address and subnet, that's what is different ...



Top 50 recent answers are included