Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

0
votes
0answers
33 views

debian 9.5 strongswan IPSEC Routing

I'm a Linux-Noob but i'm trying to Setup a VPN-Connection between a Linux-machine and a Zyxel USG 210. The VPN-Connection Comes up (happy) but the traffic seems not to be routet correctly. the Linux-...
0
votes
0answers
12 views

IPSEC VPN Connections to my Server using SoftEther [on hold]

I am new to the wonderful world of softether but i need help on how to get it to use. I have a colleague who have asked to have a IPSEC VPN connection between his server and mine but does not wants to ...
0
votes
0answers
20 views

Strongswan site-to-site VPN connected/established but can't ping server

I need to create site-to-site VPN with one server (Not on "strong swan"). I did everything by this article https://blog.ruanbekker.com/blog/2018/02/11/setup-a-site-to-site-ipsec-vpn-with-strongswan-...
2
votes
1answer
55 views

How do I fix verify certificate error when connecting to an AWS Client VPN endpoint?

I have setup a Client VPN, using steps described in Create a Client VPN Endpoint. For the server certificate, I picked a public certificate that was newly created and verified by AWS Certificate ...
0
votes
0answers
9 views

Site to Site IPSEC with Debian and Zyxel USG210 - Server says connection established, Router doesn't

I'm trying to set up a StrongSwan IPSEC VPN on a Debian server and want to connect the Zyxel USG210 router to it. So far I've run into some issues and don't know the exact cause. Basically, the ...
0
votes
1answer
37 views

Intra-cloud VPN IPSec AWS - Google Cloud times out and re-connects intermittently

My AWS - Google Cloud IPSec VPN tunnel Dead Peer Detection (DPD) keeps timing out and forcing it to re-establis the connection at least once a day. This means production services on Google Cloud are ...
0
votes
1answer
43 views

Forward traffic from IPSec clients to internet

Here is what I want to do CLIENT1 --- FIREWALL --- IPSec-TUNNEL --- SERVER --- Internet I want CLIENT1 talk to internet through the IPSec Tunnel IPSec tunnel is up between FIREWALL and SERVER and ...
0
votes
0answers
16 views

How to set up IPSec VPN with Dynamic Peer in Zywall USG200?

I have USG200 at Office location and USG200 at home location, both running on Version 3.0. At office, I have dynamic WAN with DDNS of office.freedns.com (values changed). At home, I have dynamic PPPoE ...
0
votes
0answers
9 views

strongswan with only internal ip

I setup a strongswan site to site ipsec,between pfsense and the VPS (only with internal ip 10.214.22.215 on it's NIC, additional a float ip), got the error: no IKE config found for 10.214.22.215......
1
vote
1answer
45 views

Route traffic between two Azure site-to-site VPN locations

I have a single Azure virtual network gateway running the "Basic" VPN SKU (MainVGW) in "Route-based" mode in the Australia East region. MainVGW has two "Connections" (BR and MH) which are IPsec Site-...
-1
votes
0answers
24 views

022 “client-vpn”: We cannot identify ourselves with either end of this connection

I'm trying to make a connection from my laptop (ubuntu) to an AWS managed VPN with openswan My local ip: 192.168.1.10 My public ip: 146.158.169.131 AWS VPN ip: 34.192.108.19 My ipsec.conf file ...
0
votes
0answers
27 views

How do I route internet traffic through an established L2TP connection?

I am struggling to connect and, more importantly, route traffic from an Ubuntu server (this means that Network-Manager and any GUI tools are out of the question) to an L2TP-IPSec VPN server running on ...
2
votes
0answers
16 views

Libreswan Testbed in VirtualBox

I'm currently working to create a testbed in VirtualBox for two VMs with an isolated opportunistic IPSec network with LibreSwan. All services are coming up fine, but network traffic between the two ...
-1
votes
0answers
14 views

IPSEC (strongswan) 1 hour downtimes

I am struggling with one of my ipsec tunnels and since I am really out of ideas i decided to post a message here. I run a Strongswan IPSEC endpoint on my Amazon Linux EC2 instance. Here is my config (...
1
vote
0answers
20 views

Firewall IP whitelist vs IPSEC VPN (Azure specific)

We are about to move our company's internal web app and samba shares from a datacenter to Azure. All our locations have a VPN connection to that data center. Instead of creating all new connections ...
-1
votes
0answers
10 views

IpSec- Cyberoam UTM router <--> StrongSwan (Debian) - can't reach peer

I've got a problem with creating the IPSec connection between Cyberoam UTM router and a Debian server. On the Debian side I'm using StrongSwan packet to create the connection. So far, I've created ...
0
votes
0answers
28 views

strongSwan 5.0.0 does not load curl plugin

I've got strongSwan 5.0.0 installed in an embedded system. I would expect it to load the cURL plugin, but it's not happening, and I can't tell why. The config file at /etc/strongswan.conf is very ...
-1
votes
0answers
81 views

IKEv2 VPN using Strongswan - cannot authenticate

I installed IKEv2 VPN Using Strongswan and Let's encrypt SSL, following this tutorial (step by step) https://www.howtoforge.com/tutorial/how-to-setup-ikev2-vpn-using-strongswan-and-letsencrypt-on-...
0
votes
0answers
25 views

Vyatta and VPN/IPSec with tunnel

I'm running Vyatta and are normally setting up VPN / IPSec connections with site-to-site configuration. Normally I would announce certain subnets from my side, and receive foreign subnets from my ...
0
votes
0answers
38 views

VPN IPSEC through an internet box on one side and preserving the internet connection on the other side

I want to setup a VPN IPSec tunnel between two sites, let's say PARIS and Toulouse. The tunnel rose well and statues on VPN Gateway routers at both sides shows it's up and OK. The problem is that I ...
0
votes
1answer
276 views

Strongswan: “received NO_PROPOSAL_CHOSEN error notify” while connecting to Cisco Router

I'm trying to establish an ipsec connection from a raspberry pi with Strongswan (Linux strongSwan U5.5.1/K4.14.50+) to a Cisco Router. This is the Strongswan output: root@raspberrypi:~# ipsec up ...
4
votes
0answers
99 views

FreeBSD major update broke vpnc connectivity, incoming ESP traffic doesn't appear unencrypted on interfaces

I updated a FreeBSD box from 10.4 to 11.2-RELEASE-p4 recently and it seems to have broken the vpnc VPN connectivity. Here's the vpnc.conf: IPSec gateway 10.1.0.1 IPSec ID vpnuser IPSec secret ...
2
votes
1answer
65 views

Can't connect to ipsec server running in docker behind firewall

I have a setup which I dont think is very difficult but cant get it to work. Working setup: An ipsec server running in a docker connected directly to internet. The clients can connect. Not ...
0
votes
1answer
92 views

Administration of multiple sites (tunneling) - MikroTik & NAT

I would like to ask you for your opinion. I need to find a secure way how to manage small remote sites where I have RBs. We have HQ, where is Kerio Control as a FW and a lot of small sites with ...
1
vote
1answer
107 views

AWS EC2 CentOS 7 with LibreSwan IPsec Tunnel UP (Established), No Traffic flow, cannot ping Peer encryption Domain Nodes

I have LibreSwan Setup on AWS EC2 CentOS7 instance, IPsec tunnel is established with the peer (Cisco ASA). The Tunnel is up, but I no traffic. I cannot ping the nodes at the side of the peer. Here is ...
0
votes
1answer
103 views

Ipsec nat-traversal on port 4500

What is the point of switching the traffic on port 4500 in Phase 1 of IPSec negotiatons From 5th packets onwards? Since the NAT Is already detected in packet 3 and 4 itself, can’t we simply continue ...
0
votes
1answer
82 views

Google Cloud VPN: multiple tunnels from behind NAT

I would like to connect multiple separate NATted networks to a VPC Network using IPSec VPN. I do not fully understand the Google's documentation and I'm asking for some clarification here :) The doc ...
0
votes
0answers
23 views

Packets not routed via IPSec tunnels

I'm running Brocade vRouter 5600 based on Vyatta. I've got 2 gateways running in high availability, and they've run in a couple of years working fine. I'm trying to setup a VPN/IPSec on one of my ...
-3
votes
1answer
28 views

How to veryify if VPN network encrypt data correctly in Windows 7?

I configured IPSec VPN network on my router and I successfully to this VPN in local Network. I have now 2 connections under control panel: Local connection My vpn I configured full data encryption, ...
-1
votes
0answers
61 views

Can't configure routing with existing Linux VPN (Libreswan)

I have a working Libreswan VPN server (Ubuntu, Server 1 on the picture) with a configured site2site connection which is up and running. I also have another server within the same local network (Server ...
3
votes
1answer
119 views

Block an application from accessing the network, except for a single IP address

How would I go about preventing a specific .exe from accessing any network (TCP) resources, with the exception of 1 or 2 IP addresses? Can it be done with Windows Firewall (netsh or UI) and/or IPSec? ...
-5
votes
1answer
126 views

Debian 9 dummy network adapter - works on Local but not Remote?

I'm trying to set up an IPSEC tunnel between my remote external server and a locally situated machine. My remote has a naked public IP4 in a data-centre. My nearby server has a local NAT hidden 192....
0
votes
0answers
41 views

Windows firewall with advanced security connection rule not working with IPSec

We just setup a DMZ at a new client to host a RODC and SCCM server for internet client connectivity. We created a GPO with the needed WFAS connection rules to secure communication from the internal ...
0
votes
1answer
30 views

verbose output for ip xfrm command?

I have an up script for strongswan that adds policies like this: ip xfrm policy add dir in src $PLUTO_PEER_CLIENT dst 0.0.0.0/0 proto any varl src $PLUTO_PEER dst $PLUTO_ME proto esp mode tunnel ...
0
votes
0answers
159 views

Multiple IpSec VPNs in failover config - pfSense to Draytek

I am looking to create redundant IpSec VPN Tunnels between two sites. I already have one VPN operational but due to overlapping LAN IP ranges I cannot have more VPNs active at the same time for ...
3
votes
1answer
213 views

strongSwan 5.6.2 and xl2tp 1.3.12 on Ubuntu 18.04 SA established but no traffic

Since updating strongSwan and xl2tpd to the latest versions available for Ubuntu I encounter a problem with ESP and AH in L2TP. Server config: Interface for generating traffic ens224: flags=4163<...
0
votes
0answers
22 views

Switch this setup to use charon instead of pluto?

I using this wiki but using a newer version of strongswan: https://docs.openvpn.net/configuration/extending-vpn-connectivity-to-amazon-aws-vpc-using-aws-vpc-vpn-gateway-service/ My version uses ...
0
votes
0answers
16 views

How do I stop a single connection?

ipsec version Linux Libreswan 3.23 (netkey) on 3.10.0-862.11.6.el7.x86_64 ipsec status show 1 connection active: Total IPsec connections: loaded 2, active 1 ipsec stop stops everything. But how ...
-1
votes
0answers
36 views

How to create an IPSec Connection in Docker on a VM

I have an established IPSec connection using strongSwan between two Ubuntu Virtual Machines and can successfully transfer data between them. I am using two AWS EC2 instances (VM's) in different ...
1
vote
0answers
73 views

Strongswan - traffic from servers in the same IP block are not going through VPN tunnel

Site A: Device: CentOS Server eth0: public IP address eth1: 10.0.0.1/24 (dedicated vlan) Site B: Device: Juniper SRX ge-0/0/0: public IP address ge-0/0/5: 192.168.1.1/24 I've configured a site to ...
0
votes
0answers
229 views

Router (TP-Link MR200) with dynamic IP behind NAT failing to create IPSEC VPN to Ubuntu Strongswan

I've been trying to get this up and running and I got it further than I expected but am getting stuck at an error received INVALID_ID_INFORMATION error notify and there's a very peculiar local IP ...
0
votes
1answer
108 views

Google VPN not supporting claimed ciphers

Trying to make an IPSec IKEv2 connection with Google Cloud VPN services. According to them, they support AES-CBC ciphers for Encyprtion at phase 1, but at the moment of negotiation with the on-...
0
votes
1answer
288 views

Fixing 70% transfer speed slowdown over VPN compared as compared to SSH? (Tested OpenVPN, IPSec/L2TP, OpenSSH, SoftEther)

I'm currently configuring a site-to-site VPN between two VPSes that requires both outgoing and incoming connections. It will be used by a high bandwidth application so I require the maximum amount of ...
0
votes
0answers
32 views

Sophos-Azure Ipsec Random Drops

been dealing with a weird issue lately. Using a sophos xg125 I have a s2s ipsec up to azure. Data subnet onprem 10.1.50.0/24 and ssl vpn subnet of 10.281.135.0/24. Azure subnet 10.0.0.0/24. ...
0
votes
0answers
118 views

pfSense IPSec tunnel to AWS VPN fails to connect

I'm trying to set up a IPSec tunnel between an AWS VPC (using their VPN Gateway) and a pfSense. I have set up the IPSec config in pfSense according to the config I'm given from AWS. However, there ...
1
vote
1answer
165 views

ipsec tunnel blocks google services

I set up a strongswan responder on debian in GCE. I can connect to it via the strongswan app on android. No problems. I can also connect using the native vpn client in Windows 10. And when I do, the ...
1
vote
1answer
171 views

Route traffic over forwarded ipsec tunnel

Perhaps somebody can enlighten me... I think I have a problem in IPTables but no idea anymore... I have an IPSEC site-2-site tunnel between a pfSense server and a virtual machine with strongswan. I'm ...
0
votes
1answer
142 views

Getting error trying to connect across VPN using IPSEC IKEv2 PSK unsupport

This is the error I'm getting on the traffic monitor on my firewall. I have Watchguard X510 and I can't seem to get ipsec to work at all. 2018-07-12 10:46:19 iked (12.*.*.*<->10.30.30.146)drop ...
0
votes
0answers
29 views

check L2tp/ipsec connected username in linux

Is there any way to get connected l2tp/ipsec username in linux? Like in pptp vpn we can use "last |grep ppp" this command to get connected username. I have tried so many command but could not find any ...
1
vote
1answer
76 views

Setting up IPSec/Firewall for printer with ipv4 address, allowing ipv6

I have an HP P4014dn printer with a publicly accessible static IPv4 address. It's also enabled with a link-local FE80 IPv6 address. I've setup the IPSec/Firewall settings to allow traffic from only ...