Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

0
votes
0answers
4 views

VPN IPSEC through an internet box on one side and preserving the internet connection on the other side

I want to setup a VPN IPSec tunnel between two sites, let's say PARIS and Toulouse. The tunnel rose well and statues on VPN Gateway routers at both sides shows it's up and OK. The problem is that I ...
0
votes
1answer
5 views

Strongswan: “received NO_PROPOSAL_CHOSEN error notify” while connecting to Cisco Router

I'm trying to establish an ipsec connection from a raspberry pi with Strongswan (Linux strongSwan U5.5.1/K4.14.50+) to a Cisco Router. This is the Strongswan output: root@raspberrypi:~# ipsec up ...
0
votes
0answers
8 views

Oracle 11g RW Mirror [on hold]

I'm working on my end-of-degree project. Wich involves designing and simulating a corporate network. My current scenario involves 2 offices conected vía IPSec tunneling. In each of these offices ...
4
votes
0answers
55 views

FreeBSD major update broke vpnc connectivity, incoming ESP traffic doesn't appear unencrypted on interfaces

I updated a FreeBSD box from 10.4 to 11.2-RELEASE-p4 recently and it seems to have broken the vpnc VPN connectivity. Here's the vpnc.conf: IPSec gateway 10.1.0.1 IPSec ID vpnuser IPSec secret ...
2
votes
1answer
32 views

Can't connect to ipsec server running in docker behind firewall

I have a setup which I dont think is very difficult but cant get it to work. Working setup: An ipsec server running in a docker connected directly to internet. The clients can connect. Not ...
0
votes
1answer
48 views

Administration of multiple sites (tunneling) - MikroTik & NAT

I would like to ask you for your opinion. I need to find a secure way how to manage small remote sites where I have RBs. We have HQ, where is Kerio Control as a FW and a lot of small sites with ...
1
vote
1answer
46 views

AWS EC2 CentOS 7 with LibreSwan IPsec Tunnel UP (Established), No Traffic flow, cannot ping Peer encryption Domain Nodes

I have LibreSwan Setup on AWS EC2 CentOS7 instance, IPsec tunnel is established with the peer (Cisco ASA). The Tunnel is up, but I no traffic. I cannot ping the nodes at the side of the peer. Here is ...
0
votes
1answer
34 views

Ipsec nat-traversal on port 4500

What is the point of switching the traffic on port 4500 in Phase 1 of IPSec negotiatons From 5th packets onwards? Since the NAT Is already detected in packet 3 and 4 itself, can’t we simply continue ...
0
votes
1answer
41 views

Google Cloud VPN: multiple tunnels from behind NAT

I would like to connect multiple separate NATted networks to a VPC Network using IPSec VPN. I do not fully understand the Google's documentation and I'm asking for some clarification here :) The doc ...
0
votes
0answers
13 views

Packets not routed via IPSec tunnels

I'm running Brocade vRouter 5600 based on Vyatta. I've got 2 gateways running in high availability, and they've run in a couple of years working fine. I'm trying to setup a VPN/IPSec on one of my ...
-3
votes
1answer
26 views

How to veryify if VPN network encrypt data correctly in Windows 7?

I configured IPSec VPN network on my router and I successfully to this VPN in local Network. I have now 2 connections under control panel: Local connection My vpn I configured full data encryption, ...
0
votes
0answers
59 views

Can't configure routing with existing Linux VPN (Libreswan)

I have a working Libreswan VPN server (Ubuntu, Server 1 on the picture) with a configured site2site connection which is up and running. I also have another server within the same local network (Server ...
3
votes
1answer
116 views

Block an application from accessing the network, except for a single IP address

How would I go about preventing a specific .exe from accessing any network (TCP) resources, with the exception of 1 or 2 IP addresses? Can it be done with Windows Firewall (netsh or UI) and/or IPSec? ...
0
votes
0answers
27 views

IPSec Server Encryption algorithms under linux configuration

i need to configure IPsec server, protocol ESP to use the following encryption algorithms: AES-CBC-128 with a Secure Hash Algorithm (SHA)-based HMAC and AES-CBC-256 with a Secure Hash Algorithm (...
-5
votes
1answer
102 views

Debian 9 dummy network adapter - works on Local but not Remote?

I'm trying to set up an IPSEC tunnel between my remote external server and a locally situated machine. My remote has a naked public IP4 in a data-centre. My nearby server has a local NAT hidden 192....
0
votes
0answers
17 views

Windows firewall with advanced security connection rule not working with IPSec

We just setup a DMZ at a new client to host a RODC and SCCM server for internet client connectivity. We created a GPO with the needed WFAS connection rules to secure communication from the internal ...
0
votes
1answer
26 views

verbose output for ip xfrm command?

I have an up script for strongswan that adds policies like this: ip xfrm policy add dir in src $PLUTO_PEER_CLIENT dst 0.0.0.0/0 proto any varl src $PLUTO_PEER dst $PLUTO_ME proto esp mode tunnel ...
0
votes
0answers
49 views

Multiple IpSec VPNs in failover config - pfSense to Draytek

I am looking to create redundant IpSec VPN Tunnels between two sites. I already have one VPN operational but due to overlapping LAN IP ranges I cannot have more VPNs active at the same time for ...
3
votes
1answer
104 views

strongSwan 5.6.2 and xl2tp 1.3.12 on Ubuntu 18.04 SA established but no traffic

Since updating strongSwan and xl2tpd to the latest versions available for Ubuntu I encounter a problem with ESP and AH in L2TP. Server config: Interface for generating traffic ens224: flags=4163<...
0
votes
0answers
20 views

Switch this setup to use charon instead of pluto?

I using this wiki but using a newer version of strongswan: https://docs.openvpn.net/configuration/extending-vpn-connectivity-to-amazon-aws-vpc-using-aws-vpc-vpn-gateway-service/ My version uses ...
0
votes
0answers
13 views

How do I stop a single connection?

ipsec version Linux Libreswan 3.23 (netkey) on 3.10.0-862.11.6.el7.x86_64 ipsec status show 1 connection active: Total IPsec connections: loaded 2, active 1 ipsec stop stops everything. But how ...
0
votes
0answers
28 views

How to create an IPSec Connection in Docker on a VM

I have an established IPSec connection using strongSwan between two Ubuntu Virtual Machines and can successfully transfer data between them. I am using two AWS EC2 instances (VM's) in different ...
1
vote
0answers
38 views

Strongswan - traffic from servers in the same IP block are not going through VPN tunnel

Site A: Device: CentOS Server eth0: public IP address eth1: 10.0.0.1/24 (dedicated vlan) Site B: Device: Juniper SRX ge-0/0/0: public IP address ge-0/0/5: 192.168.1.1/24 I've configured a site to ...
0
votes
0answers
82 views

Router (TP-Link MR200) with dynamic IP behind NAT failing to create IPSEC VPN to Ubuntu Strongswan

I've been trying to get this up and running and I got it further than I expected but am getting stuck at an error received INVALID_ID_INFORMATION error notify and there's a very peculiar local IP ...
0
votes
1answer
86 views

Google VPN not supporting claimed ciphers

Trying to make an IPSec IKEv2 connection with Google Cloud VPN services. According to them, they support AES-CBC ciphers for Encyprtion at phase 1, but at the moment of negotiation with the on-...
0
votes
1answer
115 views

Fixing 70% transfer speed slowdown over VPN compared as compared to SSH? (Tested OpenVPN, IPSec/L2TP, OpenSSH, SoftEther)

I'm currently configuring a site-to-site VPN between two VPSes that requires both outgoing and incoming connections. It will be used by a high bandwidth application so I require the maximum amount of ...
0
votes
0answers
30 views

Sophos-Azure Ipsec Random Drops

been dealing with a weird issue lately. Using a sophos xg125 I have a s2s ipsec up to azure. Data subnet onprem 10.1.50.0/24 and ssl vpn subnet of 10.281.135.0/24. Azure subnet 10.0.0.0/24. ...
0
votes
0answers
82 views

pfSense IPSec tunnel to AWS VPN fails to connect

I'm trying to set up a IPSec tunnel between an AWS VPC (using their VPN Gateway) and a pfSense. I have set up the IPSec config in pfSense according to the config I'm given from AWS. However, there ...
1
vote
1answer
142 views

ipsec tunnel blocks google services

I set up a strongswan responder on debian in GCE. I can connect to it via the strongswan app on android. No problems. I can also connect using the native vpn client in Windows 10. And when I do, the ...
1
vote
1answer
87 views

Route traffic over forwarded ipsec tunnel

Perhaps somebody can enlighten me... I think I have a problem in IPTables but no idea anymore... I have an IPSEC site-2-site tunnel between a pfSense server and a virtual machine with strongswan. I'm ...
0
votes
1answer
86 views

Getting error trying to connect across VPN using IPSEC IKEv2 PSK unsupport

This is the error I'm getting on the traffic monitor on my firewall. I have Watchguard X510 and I can't seem to get ipsec to work at all. 2018-07-12 10:46:19 iked (12.*.*.*<->10.30.30.146)drop ...
0
votes
0answers
18 views

check L2tp/ipsec connected username in linux

Is there any way to get connected l2tp/ipsec username in linux? Like in pptp vpn we can use "last |grep ppp" this command to get connected username. I have tried so many command but could not find any ...
1
vote
1answer
59 views

Setting up IPSec/Firewall for printer with ipv4 address, allowing ipv6

I have an HP P4014dn printer with a publicly accessible static IPv4 address. It's also enabled with a link-local FE80 IPv6 address. I've setup the IPSec/Firewall settings to allow traffic from only ...
0
votes
1answer
61 views

Low bandwidth when Iperfing data thorugh IPSEC tunnel

We have two server connected next to each other. When we're iperfing each other through 'simple' physical interaces - we're getting ~5GB/S of bandwidth. But when im sending traffic through tunneled (...
0
votes
0answers
14 views

Is it Possible to Connect Digital Cloud Server as Middle Ware between Heroku and Server

I need help to solve a particular problem. I have an application on Heroku that needs to access an API that is not live, but behind a firewall. The owner of the API instructed that I should connect ...
0
votes
1answer
441 views

Windows 10 connection to strongswan ipsec server fails with "IKE authentication credentials are unacceptable

I'm trying to get a simple IPSEC/IKEv2 server set up with username/password (for now) on Ubuntu 18.04. I'm using Windows 10 Pro built in client, and the connection fails complaining about the IKE ...
0
votes
0answers
191 views

IPsec with NAT between pfSense and Fortigate - no ping or access from both sides

We have an IPsec VPN tunnel with NAT between pfSense 2.3.4 and Fortigate up and running. The local networks are the same (overlapping), so we use NAT. pfSense is managed by us and Fortigate by a ...
0
votes
1answer
453 views

RouterOS push static route for IPSec IKEv2 VPN

Can't find a solution how actually I can push a static routes to VPN clients, when they connect via VPN. Configuration from here RouterOS, IPSec, IKEv2. Clients mainly macOS users via standard soft. ...
0
votes
2answers
47 views

Policy-based IPsec routing in linux

In linux, when it comes to route-based IPsec tunnels, it's pretty straight forward. Install one of the mainly ipsec implementations. Establish your security associations, add a VTI interface on each ...
1
vote
1answer
701 views

How to forward IPsec VPN with iptables

Hello I have some questions on how to use iptables to forward IPsec VPN data. Here is what I want to do: WAN Computer -- (eth1/WAN IP)Server1(eth0/10.81.1.2) -- (eth0/10.66.2.3)Server2(eth1/WAN IP) ...
0
votes
0answers
158 views

IPSec strongswan “established successfully”, but no ppp0

I'm trying to connect an Ubuntu Server 16.04 to an IPSec L2TP VPN using the strongswan client. Aparently the connection is established successfully, but the interface ppp0 isn't created. This is the ...
1
vote
0answers
104 views

pfSense : How to do 1:1 NAT to server hosted at remote location linked through IPSec tunnel

We have 2 data centers at 2 different locations and are moving our services from location A to B without interruption. Both location have a PFSense Firewall configured with IPSec tunnel between each ...
1
vote
1answer
260 views

strongSwan VPN Intermediate Certificate Authority

I have been testing out strongSwan VPN on a Linux server in a Windows Active Directory domain. I have managed to get a single-tier PKI with EAP authentication to work, but when I attempt to add a ...
0
votes
0answers
398 views

Porting a Cisco AnyConnect profile from Windows to Mac OSX

I have a client using a VisualStudio solution to manage their website. In order to make edits, they had to set up a Windows 7 laptop for me, which I have to use to connect to their VPN before being ...
0
votes
0answers
22 views

ESP not encapsulating in UDP for public address hosts

I have a couple of IPSEC server-to-server policies authenticated by Kerberos in our AD environment. They work as I would expect them to work, except for one thing: the ESP packets are not encapsulated ...
0
votes
1answer
279 views

How can I set the source IP in strongswan's routing table

I have a site-to-site VPN where there's one subnet on the remote side and two on the local one: conn site-to-site leftsubnet = 10.10.0.0/16,10.11.0.0/16 rightsubnet = 10.50.0.0/16 Everything ...
0
votes
0answers
335 views

UniFi and pfSense IPSec VPN not passing traffic

I have a IPSec VPN running between two sites. Site A is pfSense and site B is a UniFi Security Gateway. I have got the VPN established but I cant ping anything in either direction on the network. Any ...
0
votes
1answer
39 views

StrongSwan IPsec PING only working once after ipsec restart

Diagram VPN site to site: And a GIF showing what is happening. I create an IP route like this: sudo ip route add 192.168.1.0/24 via 10.132.146.166 eth0 eth1 And I have this iptable rules sudo ...
0
votes
0answers
22 views

Issues with AWS IPSec when accessing from UAE

I set up a pfSense device in EC2 instance in AWSand configured to support IPsec from ios devices. While the connection is working properly, and also the internet access from USA and Europe, some of ...
0
votes
0answers
169 views

AWS Ubuntu Strongswan IPSec VPN and Iptables configuration tunnel routing

I've muddled up my configuration. I've setup a site-to-site VPN between an AWS Ubuntu VM running strongswan, and another site. The VPN tunnel is working, but anytime I try to route traffic through ...