2022 Developer Survey is open! Take survey.

Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

Issues configuring strongSwan client on AWS instance for site-to-site VPN

I am trying to setup a IPSec VPN client on a debian-10 AWS instance. Unfortunately, I do not have access to the VPN server as it is configured by another party, so all I know is they told me it is ...
user avatar
  • 101
0 votes
0 answers
4 views

OpenSwan GW not routing VLAN traffic through tunnel

I do have a tunnel configured using OpenSwan on a side and libreswan on the other. The issue seems to be on the openswan side, where I do have 2 subnets, one for the main interface, the other is on a ...
user avatar
  • 1
0 votes
0 answers
44 views

I can't get my WIreguard tunnel to complete a handshake

I'm trying to setup a point-to-site wireguard tunnel between two different points on two seperate networks, but have setup similar tunnels setup in similar situations so I don't believe it has ...
user avatar
0 votes
0 answers
12 views

Failure connecting Mikrotik to Strongswan using IPSec

hope you are doing well. I am trying to connect a Mikrotik RB2011RM to Strongswan running on a cloud server. I cannot get past Phase 1. I have searched through google and found some great examples ...
user avatar
0 votes
1 answer
16 views

IPSec Netgear BS200 and Linksys LRT214 - Can't reach devices

I have set up the first time an IPSec site to site tunnel. The tunnel is up and running from a Netgear BR200 and the Linksys LRT214 Router. Network 1 has 192.168.100.x and the Network 2 has 192.168.1....
user avatar
0 votes
0 answers
78 views

Strongswan: {parsed IKE_SA_INIT response 0 [ N(NO_PROP) ]} and {recieved NO_PROPOSAL_CHOSEN notify error}

I am getting the feeling that I have just done somethign very silly on my end but I have no idea what is going on. For context, I have been using wireguard for a bit and am much more knowledgable than ...
user avatar
0 votes
0 answers
18 views

GCP Route in IPSec VPN between AWS TGW and GCP

I am setting up IPSec VPN with BGP between AWS and GCP. On the AWS side, I am using TGW. It is a HA VPN with two Site-to-Site-VPN on AWS side. There 4 tunnels in total. As confirmed from both the AWS ...
user avatar
  • 101
0 votes
0 answers
51 views

Strongswan VPN certificate authentication failed

I've installed strongswan vpn on my ubuntu server. Set up certificate authentication. I've set up my android-phone and it works fine. But connection didn't established on the windows machine. I copied ...
user avatar
0 votes
0 answers
17 views

IPSec established but cannot ping remote LAN

I have successfully established IPSec in my OpenWrt router but I am unable to ping the remote subnet. Below are the related files cat ipsec.conf conn vpn3 keyexchange=ikev2 left=10.129.170.132 ...
user avatar
0 votes
0 answers
13 views

Traffic not tunneled/forwarded using StrongSwan

Description I am new to strongswan and I like to set strongswan in a road warrior configuration. My moon network is an AWS VPC with CIDR block 172.31.0.0/16 Inside that network, my VPN gateway is an ...
user avatar
  • 1
0 votes
0 answers
40 views

Site-to-Site VPN and Remote Access VPN with Strongswan

I've recently deployed a Strongswan IKEv2 Remote Access VPN in two different sited with two different ubuntu servers. It all works great, but now i want to "merge" the two sites with a site-...
user avatar
0 votes
2 answers
46 views

How to link ipsec clients with different connections in StrongSwan?

I use strongswan ipsec as VPN gateway for mobile devices (Android). In StrongSwan config I've setup 2 connections (two different subnets 10.10.10.0/24, 10.10.20.0/24 with different routing policies) ...
user avatar
  • 101
1 vote
3 answers
131 views

Strongswan / Ipsec multiple roadwarrior connections different subnets

I'm trying to setup a StrongSwan VPN Server which should host multiple (Windows 10 - internal vpn client) roadwarrior connections, but different subnets, depending on the clients certificate. root@VPN:...
user avatar
  • 11
0 votes
0 answers
11 views

Connecting all vpn clients into a single network

I have a Ubuntu server with IKEv2 VPN configured. I have 2 (will be more) Windows clients, that can connect to VPN. I want them all to be "bridged", like they are all physically connected to ...
user avatar
  • 1
0 votes
2 answers
112 views

How is IPsec (strongswan) working without opening ports in UFW?

I needed to setup a site-to-site VPN between servers A and B, where server A is being managed by me and server B is being managed by a client. Server A is running Ubuntu 20.04 and I am using ...
user avatar
  • 165
0 votes
0 answers
35 views

Strongswan clear traffic issue

I have 2 raw Debian 11 VMs connected with an internal network on VirtualBox (see the diagram below). Both VMs have 2 network interfaces (the tunnel-side interface and the private network one). I ...
user avatar
1 vote
0 answers
75 views

NFS insists to send packets over MTU, nftables might be the solution

I have an NFS mount over a Strongswan IPSec tunnel, which is encapsulated in a 6to4 tunnel. The IPSec is because I need encryption for NFS traffic, the 6to4 is because the VPS provider won't assign a ...
user avatar
0 votes
1 answer
109 views

Ping across IPSec tunnel sends both ICMP and ESP packets

I've been using Strongswan to setup an IPSec tunnel between two units. The tunnels SAs get setup without any issues and traffic can pass across the connection. Whenever I ping across the tunnel, the ...
user avatar
  • 11
1 vote
1 answer
44 views

AWS/Strongswan-Ubuntu Site to Site Tunnel Cannot Ping Remote

Ubuntu (Linode) Strongswan 5.6.2 Connecting to AWS (site to site). I can ping from AWS endpoint to Ubuntu VPN. I cannot ping from AWS endpoint to Ubuntu endpoint. I cannot ping from Ubuntu VPN to AWS ...
user avatar
0 votes
0 answers
29 views

Azure VPN <> Head Office <> OpenVPN - No Communication

To give some idea of the network architecture and the issue; Head Office has a Pfsense firewall with a site-to-site IPSec VPN connection to some virtual machines in Azure. When on site (192.168.1.1/22)...
user avatar
0 votes
0 answers
18 views

Firewall device running IPSec VPN cannot traverse VPN, but other hosts behind it can

I have a hardware device (netgate brand) that acts as the firewall/router for my LAN. It has an IPSec VPN connection to AWS VPC. All hosts in the LAN can traverse the IPSec VPN successfully. Traffic ...
user avatar
  • 180
0 votes
0 answers
30 views

VPN IPsec site connection sporadically lost data between Openstack VPN and a Checkpoint firewall

We have established an IPsec VPN site connection from our Openstack to a Check Point firewall device. The tunnel is UP but sporadically the connection has "breaks". We already checked ...
user avatar
  • 1
0 votes
0 answers
346 views

Unable to authenticate with IPsec tunnel on FortiGate via Windows native client

I have setup an IPsec tunnel on our FortiGate 51E (FortiOS v6.2.10 build1263 (GA)) and I am able to connect via my Windows native client, however when I am asked for a username and password, I am ...
user avatar
  • 285
0 votes
0 answers
25 views

Make traffic between IPSec end-points and Internet via Cisco CSR1000v

I made an IPsec tunnel between our CSR 1000v (AWS) and the LTE service provider router (ASR) and I can ping both sides of Tunnel with the following architecture: |<---> internet <--...
user avatar
0 votes
1 answer
36 views

No internet IP routing on Windows 10 client connected to LT2P/IPsec VPN on Windows 2019 server

I have set up a VPN from a Windows 10 client to a Windows 2019 server. After connecting using rasdial <VPN NAME> <USER NAME> <PASSWORD> I sucessfully issue a net use <DriveLetter&...
user avatar
  • 163
0 votes
0 answers
54 views

Routing traffic from Server A via VPN Server B

I have IPSec (Libreswan) Server B (10.0.0.2) and a Server A (10.0.0.1) within the same network. Both servers have only one external network interface. I want to route the packets from Server A with ...
user avatar
0 votes
1 answer
135 views

Connect to en /ext host of Fortinet VPN with Ubuntu

I have used openfrotivpn many times but I have never been able to properly configure such a vpn in the network manager. Unfortunately, now I have to connect to host [some ip]/ext (e.x. 192.168.10.10/...
user avatar
0 votes
0 answers
135 views

IPSec iptables rules for local service

I have a StrongSwan IPSec remote access server running on RHEL and a client all on the same local network. I have a Samba server running on the same RHEL host that I want to be available through the ...
user avatar
0 votes
0 answers
40 views

Routing IPsec VPN traffic through NAT

We are using UFW and are trying to wrap our head around IPtable rules. We are trying to have a NAT rule on both VPN 1 and VPN 2 that contains arbitrary IP addresses to therefore route traffic to 10.0....
user avatar
0 votes
0 answers
34 views

does google cloud support ipsec encapsulated gre tunnels

I can't seem to get a pim set up on google cloud where multicast traffic is sent over a ipsec encapsulated gre tunnel. Does google cloud ec2 instances and network block this type of traffic?
user avatar
  • 1
0 votes
2 answers
168 views

Strongswan IPSec Configuration on a VPS

Please assist. I'm trying to set up a site to Site IPSec tunnel with strongswan on my VPS but sadly my provider cannot enable the following kernel modules for me: ah4 ah6 esp4 esp6 xfrm4_tunnel ...
user avatar
0 votes
0 answers
39 views

Is it possible to create IPsec VPN tunnel between 2 Azure subscriptions

I have 2 different azure subscriptions for which I want to create a VPN tunnel. The obvious choice would be to create a VNet-to-VNet tunnel but as I understand this would cost extra resources. So I ...
user avatar
  • 123
0 votes
0 answers
77 views

how to allow ipsec connection only with pre shared key authentication and rest of connections should be rejected

l2tpd configuration file : remote access vpn configuration conn L2TP-PSK authby=psk pfs=no rekey=no keyingtries=3 keyexchange=ikev1 forceencaps=yes leftfirewall=yes leftnexthop=%defaultroute type=...
user avatar
0 votes
0 answers
44 views

Strongswan VPN packet not hitting the interface (eth0) when tunnel is up

VPN tunnel is getting established with Cisco router successfully and when we try to ping the remote host tcpdump doesnt see the packets but if I bring the tunnel down and ping the remote host tcpdump ...
user avatar
0 votes
1 answer
217 views

Route traffic through IPSec tunnel with gateway host

Considering the strongswan wiki, this appears to be a standard problem, but I can't get it working quite right. Network layout The local site (client and gateway) is under my control, the remote site ...
user avatar
  • 105
0 votes
1 answer
121 views

OpenBSD, mtu=0 on enc0 device, ping packets don't pass

On OpenBSD 6.9 I tried to install an IPSec (IPv4, IKEv2, ESP, tunnel) network-to-network gateway to communicate with a Palo Alto gateway (which I do not control). ikectl show sa leads me to believe ...
user avatar
0 votes
0 answers
35 views

Subscribe to a multicast broadcast after connecting to GRE tunnel

I created a gre tunnel to a ip that's doing multicast broadcasting. I look at tcpdump and I see that there are two messages that keep repeating PIMv2 98 bytes long Info Hello IGMPv2 72 bytes long Info ...
user avatar
0 votes
0 answers
239 views

setting up gre tunnel on debian with tunnel source and tunnel destination

I am trying to setup a gre tunnel on debian to receive broadcast packets. I have the information for an interface ip address [10.16.2.4 255.255.255.192] tunnel source [10.16.0.2] tunnel destination [...
user avatar
0 votes
1 answer
168 views

pfSense as IPSec remote access client

I have a pfSense router in a residential environment and need to use IPSec/IKEv2 as a remote access client to a commercial VPN provider. I know the pfSense web UI doesn't support the router being the ...
user avatar
0 votes
0 answers
33 views

Adding tunnels inside a current libreswan connection

I've created an ipsec tunnel with these settings conn rsubnet auto=start authby=secret ...
user avatar
1 vote
1 answer
399 views

Ipsec VPN to AWS: Can't ping AWS end inside tunnel

Summary: I think I'm missing some routes on my Ubuntu server connecting to an AWS VPN with Strongswan Ipsec. Any idea what routes I need on my server? I'm trying to setup a BGP routed VPN from a ...
user avatar
0 votes
0 answers
31 views

IPSec site2site tunnel + vpn

In our research project, we needed to deploy a server "Molly" at another company. They made us set up a IPSec tunnel to their firewall/gateway and from there, the comms are forwarded to our ...
user avatar
  • 1
1 vote
1 answer
94 views

IPsec site-to-site VPN issues after recent Linux kernel update

Last weekend we had an automatic security upgrade on one of our VPN gateways that connect sites to our cloud environment. After performing troubleshooting (via basic network troubleshooting e.g. via ...
user avatar
  • 11
0 votes
0 answers
225 views

NAT source IP in Strongswan IPSEC VPN on Amazon EC2

Ok so first of all, networking is really not my strong suit... I have an Amazon Linux EC2 instance, ip 172.31.46.176, connected to a IPSEC VPN using strongswan : conn aws-to-other type=tunnel ...
user avatar
0 votes
0 answers
16 views

configuring ipsec with gre

I am setting up gre over isec and I have a cisco configuration. I am trying to move this cisco configuration to ubuntu and do not understand how the tunnel is setup interface local ip address x1 ...
user avatar
  • 1
0 votes
0 answers
58 views

Racoon establish tunnel even both devices uses different aes encryption bit size

i am using racoon in my linux pc to enable ipsecurity. when i configure PC1 with "aes256" phase1 encryption and PC2 configured with "aes128".when i ping PC2 to PC1 tunnel ...
user avatar
1 vote
0 answers
255 views

Libreswan and Mac OS X Big Sur client issues

I'm resorting to asking for help after a brutal amount of time troubleshooting connection problems between client and server. Troubles Mac OS X Catalina, and Linux clients work fine connecting to the ...
user avatar
0 votes
1 answer
168 views

Packets from xfrm interface won't route, but opposite works

I'm working on a site-to-site vpn, where one end us a UDM and the other is Strongswan. The goal is to provide bi-directional routing into a cloud environment. I'm completely baffled why this isn't ...
user avatar
0 votes
0 answers
234 views

Strongswan tunnel connected but the traffic is not going through it

I have 3 Virtual Machine cluster (platform1, platform2 and platform3) and I have enabled ipsec tunnel communication between them using strongswan (5.6.2). The tunnel looks fine and connected, but ...
user avatar
0 votes
0 answers
120 views

IPsec port forwarding Teltonika RUT955

I am using two Teltonika RUT955 routers with IPsec (Strongswan) built in. For testing I have a cable running from WAN to WAN with static IPs in both routers at 172.16.1.1 and 172.16.1.2. I have the ...
user avatar
  • 1

1
2 3 4 5
20