Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

Filter by
Sorted by
Tagged with
0
votes
0answers
16 views

IPSec VPN working for PING, but not for SSH

I have created an IPSec VPN between two "sites" using Virtual Machines and Openswan for the IPSec tunnel. My configuration: I created 3 host-only networks, one for each "site" and the third to ...
1
vote
1answer
35 views

Can you have two subnets on a network with the same IP block? [closed]

I have a bunch of routing boxes on a network 10.9.9.0/24. I'm testing out scenarios with IPSec and StrongSwan, and I'm scripting a way to efficiently run these scenarios. Right now, the script I run ...
0
votes
2answers
16 views

StrongSwan: manually expire security association

I am working on automating some software tests involving IPSec and StrongSwan. These tests basically apply a swanctl.conf file to two gateway machines, then establish a tunnel between them. It then ...
0
votes
0answers
14 views

freeradius and configure eap or pap with rest

free radius and configure eap or pap with rest i want use strongswan with free radius and rest module, i see sql and eap work together, how can configure eap with rest ? the important part is ...
1
vote
1answer
17 views

Can an Azure IPSEC gateway be used with a normal Azure web app?

We have a simple php website which needs to connect to a 3rd party API, and that third party requires a point to point IPSEC VPN. Azure has an ipsec gateway product for this, but how does one use it ...
0
votes
0answers
42 views

how setup stronswan with freeradius and rlm_rest rest module?

how setup stronswan with freeradius and rlm_rest rest module? https://wiki.strongswan.org/projects/strongswan/wiki/EAPRadius I use eap radius plugin of strongswan and connected to free radius v3 and ...
0
votes
0answers
23 views

Inbound ESP not received by Azure network virtual appliance

We have a FortiGate-VM network virtual appliance in Azure with a site-to-site IPSec VPN connection to a business partner's Cisco ISR 4400. This connection has been working flawlessly for about a year, ...
0
votes
2answers
28 views

Does an IPSEC tunnel establish new sessions for traffic?

Background AT&T business fiber is basically rebranded U-Verse home internet. The "modem" (it's actually a router, but lets call it that for simplicity) has a hard limit of about 8K sessions. Even ...
-2
votes
0answers
26 views

How do I debug connecting to VPN server from android?

I'm following tutorial here to create VPN server. I think server is up and running: service ipsec status ● ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec Loaded: loaded (/...
0
votes
1answer
42 views

Failure to connect to a L2TP VPN over IPSec on Ubuntu 16.04

I am having issues connecting to my company's L2TP VPN over IPSEC. This is a Pelink Balance 305 router which has been configured correctly. I have checked that other colleagues have been able to ...
0
votes
0answers
37 views

Can one use a MySQL backend for user authentication in a strongswan VPN server (new)?

We have installed and configured a strongswan VPN server with username / password authentication. Is it possible to store the users' credentials in a MySQL backend and configure strongswan to use the ...
0
votes
1answer
26 views

strongSwan client does not retry connecting to VPN server after the server has rebooted

Here’s my current ipsec.conf. What do I need to change to make sure the client retries connecting to server indefinitely. $ cat /etc/ipsec.conf conn %default ike=aes256gcm16-sha384-modp3072! ...
0
votes
1answer
42 views

strongSwan client can connect to the internet (through the VPN) but cannot SSH to VPN server or other clients on the VPN subnet

I wrote a strongSwan guide a while back which I followed. I then installed isc-dhcp-server and configured strongSwan for DHCP. Everything works fine except clients cannot SSH to the VPN server or ...
-2
votes
1answer
51 views

VPN disconnects after exactly 3 minutes and 30 seconds [closed]

I have set up a vpn server using the scripts in https://github.com/hwdsl2/setup-ipsec-vpn. I am connecting from my Mac to my personal vpn running on an Ubuntu server. It disconnects after 3 minutes ...
1
vote
0answers
35 views

Checking existence of IPSEC as a meta expression in nftables

Whilst recently setting up a router manually from scratch using Debian, I decided to use nftables along with strongSwan to provide an IKEv2 VPN access into this. After much frustration along with ...
0
votes
0answers
16 views

No ping on StrongSwan IPSec in HMAC-SHA256, ping works in HMAC-SHA1

I have the following situation: I set up an IPSec tunnel between Ubuntu and Embedded Linux system according to the configuration below. I start IPSec and a tunnel established successfully with HMAC-...
0
votes
0answers
26 views

Cannot ping remote host across GRE tunnel over IPSec

I need to setup a GRE tunnel over IPSec to support multicast and, at the same time, encrypt my communication. I managed to setup the IPSec tunnel (strongswan) in EC2. I can ping the remote host and I ...
0
votes
0answers
17 views

Firewalld equivalent of “DROP l2tp” “ACCEPT L2TP if policy is ipsec?”

What's the equivalent of something like this ? DROP udp -- anywhere anywhere udp dpt:l2tp policy match dir in pol none DROP all -- anywhere ...
0
votes
0answers
26 views

IPTABLES with IPSEC

I'm a little bit confused. I'm trying to establish 2 VPN using strongswan as shown below (Host1)IP1 == (NAT1)PublicIP1 ===Internet=== PublicIP2(Ubuntu)IP2 ==MPLS== IP3(Ubuntu)IP4 IP1/2/3/4 are ...
0
votes
0answers
76 views

IKEv2 Need a small help on Strongswan

I'm trying to create an IKEv2 Strongswan VPN server (U5.7.2/K5.3.0-42-generic) since two days on my personnal VPS (Ubuntu 19.10) to make some tests before implement it on the Unifi equipment of my ...
0
votes
3answers
105 views

Access from VM instance connected to Google Cloud VPN tunneled to peer VPN

I have an instance (Linux-based) connected to a Google VPC Network that itself has a route to a peer VPN via IpSec Tunnel (IKev2). The VPN Tunnel has Status Established in Google Cloud so everything ...
0
votes
0answers
28 views

IPSec + IKEv2 with Pre-Shared Key between Open vSwitch and pfSense

I have a simple network made of an Open vSwitch Ubuntu Server-based virtual machine connected to a pfSense firewall. I would like to connect this two with an IPSec + IKEv2 secure tunnel. {10.2.2.0/24}...
1
vote
2answers
81 views

Algo VPN strongSwan client “no issuer certificate found”

I set up an Algo VPN instance on AWS Lightsail using the official Ansible playbook. I can establish the VPN connection using Wireguard, however I cannot get it to work with strongSwan. I configured ...
0
votes
1answer
79 views

Setting up Strongswan site to site VPN on Google Cloud instance

I've installed Strongswan on 2 Google Debian instances in separate projects (actually separate accounts) so there's no route between them on the internal ip's. Ultimately I need to allow VPN ...
0
votes
0answers
79 views

ipsec strongswan UP but no routes

I have a server (Debian 10) behind a NAT router. In this server are running multiple VMs. I want to establish an IPSec connection to a server on the Internet. Here are my ipsec.conf files on both ...
0
votes
0answers
28 views

Strongswan username and password authentication

Guys I need to set up strongswan to use username and password for connecting instead of certificate! Anyone knows how this is done?
0
votes
0answers
74 views

Dealing with XFRM policies Using Strongswan VTI tunnel with Amazon VPC

I can't make Centos Strongswan VTI route-based connection to AWS VPC Connection to Work. I did successful BGP connection. But when i'm trying to ping the AWS instance from That Linux box i see that ...
1
vote
0answers
234 views

Unable to Connect L2TP IPSec VPN on Mac OSX

I'm struggling to debug an issue connecting a Mac to a L2TP IPsec VPN. Macbook Pro running Mojave 10.14.6, following instructions here https://forum.peplink.com/t/setting-up-l2tp-with-ipsec/8046 I ...
0
votes
2answers
122 views

Route traffic between OpenVPN network and IPSec

On the Server are two connection established (IPSec and from OpenVPN client). On the server I see subnet in IPSec, but not from OpenVPN client. On the server is firewalld active, here is public zone: ...
0
votes
0answers
31 views

Stongswan IPsec acceleration support for Intel Quick Assist Technology

I have been trying to accelerate the speed of IPsec connection between two VMS (using QAT VFs) on a DELL node with 3 QAT devices (C62xx). Is there any default support for QAT in Stongswan IPSec? Also, ...
0
votes
0answers
26 views

Strange client-side routes from IPSec L2TP split-tunnel VPN

I am puzzled by the routes that an IPSec/L2TP/PPP VPN sets up on the client side for a split-tunnel VPN. I am expecting a /24 route to be added on the client, but a /8 route is set up. The client ...
0
votes
0answers
27 views

Can't RDP or FTP to Azure VM via Site-to-Site VPN

I have a VM (Windows Server 2019) that's running in Azure and I want to be able to 'control' the VM via our on-premise network. I have a Fortinet firewall configured to make an IPSEC-tunnel to an ...
0
votes
0answers
37 views

convert esp-3des esp-sha-hmac for strongswan config

I am having problems with the correct config in strongswan for "esp-3des esp-sha-hmac". I have tried esp = 3des-sha esp = 3des-sha! can any assist with the correct esp config?
0
votes
0answers
60 views

How can StrongSwan server for IPSec VPN automatically advertise routes?

From our team's experience so far, we have found out that if you want to connect to an IPSec VPN it does not automatically advertise the route to the client and it has to be done manually in the ...
0
votes
1answer
100 views

What Does This L2TP/IPSec Error Mean?

I am trying to connect to a Cisco Meraki VPN that uses L2TP/IPsec. On my side I am using Libreswan/NetworkManager to configure my connection. When I try to connect, I get logs as follows: Mar 02 11:...
0
votes
0answers
26 views

IPSec Phase 2 Error

Below is my IPSec config, I am trying to establish a site to site VPN connection, I seam to be missing something in the configuration. conn 111conn auto=start type=tunnel Ikelifetime=24h salifetime=...
0
votes
0answers
14 views

Server to server connection with wf.msc

I have a box with 2019 Windows Datacenter in one domain, and I have Windows Datacenter 2019 in a completely different domain - I am looking for the best way to connect the two and keep the data secure....
0
votes
0answers
44 views

IPSEC+NAT issue (attempted with pfsense)

I've been trying to join two networks (A) 172.17.0.0/22 and (B) 10.80.0.0/14 with IPSEC and pfsense. So that computers on the (A) network can connect to computers on the (B) network. No big deal, ...
0
votes
0answers
10 views

Access local vLAN from Azure over IPSec VPN (USG20)

i've an Azure subscrition, i've created a Site2Site VPN and i can ping averithing in both sites. Now i created a new VLAN on my USG20 (Home LAN) and i've added on Azure VPN Gateway as remote network ...
0
votes
1answer
120 views

Strongswan IPSEC Tunnel block traffic one way

I've set up a working Site to Site IPSEC Tunnel with strongswan on a debian 9 machine. However I have a requirement about how the traffic should work : The network on Site A can send packets to Site B ...
0
votes
0answers
24 views

IPsec Tunnel : Multiple ipsec tunnel routing (Lynksys LRT214)

I have a problem to crate a comunication between two ipsec tunnel, both client can't ping each other. it seem to be a routing or policy issues. I dont know how to solve it. I hope that someone can ...
0
votes
0answers
26 views

Draytek Vigor 2860 IPSec NAT

I am trying to connect a LAN to LAN with another company. The other end will not change any of the settings and I must connect using the provided details. My Draytek Vigor 2860 network is on 192.168....
0
votes
1answer
203 views

How to add plugin strongswan on yocto ( embedder linux )

i know i missing some strongswan plugin, depending on your configuration. especially plugin eap-... but with this file .bb i don't know how to add plugin on strongswan. if you have ideal. Thank you ...
1
vote
1answer
78 views

How can I suppress the Old Runlevel warning while installing Strongswan

When I install strongswan and dependent packages using apt install, I get the following warning prompt: This inhibits me from installing strongswan through an automated unattended install script. ...
0
votes
2answers
223 views

VPN between on prem and GCP: routes shared but ping doesn't go through

I have been struggling with the VPN setup between on-prem and GCP for more than a week. I am completely out of ideas at this point, and would love to get some help of network specialists. Goal The ...
1
vote
0answers
39 views

Route trafic from one wAP to VPN

i have two mikrotik routers. One router - 2011 (main) has public static IP address and has L2TP over ipsec vpn server running on it. I can connect to it from laptops and mobiles. When i connected, my ...
0
votes
1answer
345 views

IKEV2 IPSEC Autostart, restart, daemon

I use strongswan for IKEV2 and IPSEC. And i don't know how to keep it updated, and running on change restart etc. For starting service i use: systemctl status strongswan Afer that i need to type ...
0
votes
1answer
93 views

Strongswan AWS and overlapping subnets

I have this scenario, I need to connect two sites over a site to site ipsec tunnel. One of the peers (I don't have access to the other side) is an EC2 instance with Strongswan (Ubuntu 16.04). I could ...
1
vote
1answer
49 views

How do I set up a VPN to access specific subnets?

I would like to set up a point-to-site VPN that is only used to access a specific set of subnets so that I can access services via the VPN but without routing all traffic through it. In my test setup,...
0
votes
1answer
108 views

IPsec tunnel between 2 remote host

I'm using mininet, I have created a ESP tunnel between two machine such that if I ping from one machine to other then I am seeing ESP packets, and everything works fine. Here below the commands used: ...

1
2 3 4 5
19