Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

StrongSwan Implementation on Lanner FW-7525 devices

I have two Lanner IP-Encryptor (FW-7525) devices with Installed Ubuntu 18.04 servers in both of them. Then I install and build StrongSwan in both of them. I connected one Lanner Device to one LAN ...
1
vote
0answers
42 views

How to switch from the default kernal module netkey to klips for Libreswan (IPsec)?

Seek your guidance on setting up Libreswan with klips other than netkey. Let us start from the beginning. I installed Libreswan v4.4 and it pops up with this: Linux Libreswan 4.4 (netkey) on 5.4.0-...
-2
votes
0answers
19 views

SSH fragments packets over wrong mtu

I have this configuration: HOST-A <---> GAT-A <---> MiTM <---> GAT-B <---> HOST-B I'm doing a security project on MTU-IPsec vulnerabilities and following this guide of Hal-...
-1
votes
0answers
15 views

Connect multiple sites with VPN and synchronize LDAP

I am working on a school lab assignment. I have to setup a complete open source office on five different locations for a virtual company. The company has branch offices in New York, Hong Kong, Paris, ...
-1
votes
0answers
33 views

IPSec - ip xfrm add policy for only one service like FTP?

I have 2 linux machines were I am configuring IPsec. I managed to apply the settings to encrypt and encapsulate the complete traffic with this type of policies: Machine 1: ip xfrm policy add src 172....
0
votes
1answer
71 views

StrongSwan Linux Client refuses to connect to StrongSwan server

I have a StrongSwan VPN server set up on an Ubuntu 18.04 server, and it is working well. I am able to connect to this VPN from Windows 10 and macOS, and everything works wonderfully. The problem is ...
0
votes
0answers
14 views

VTI, Linux and strongswan

Prior to this task I used to think I'm and experienced networking engineer with dozen of years in ipsec and tunneling. Long story short: I've setup a VTI Linux to FreeBSD tunnel, migrating from ipsec-...
0
votes
1answer
60 views

libreswan configure virtual interface for ipsec traffic

Description: I am learning how to configure ipsec with libreswan. I want to set up a host-to-host vpn between two hosts. I want each host to use a virtual interface for their ipsec tunnel. Problem: I ...
1
vote
1answer
28 views

Danger of leaked PSK (password) in IPsec tunnel

Let us say I have a IPSEC tunnel between a Pfsense firewall and a Cisco firewall. In the Pfsense panel, when configuring a Site-to-site VPN between them, there is a PSK which is common in both ends, ...
0
votes
1answer
27 views

How do I setup ipsec VPN between APIs on different servers?

There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
0
votes
1answer
22 views

Is it possible to have L2TP/IPsec VPN auto disconnect after x hours?

I couldn't find anything on Google, everything that I found was related to the opposite problem, VPN disconnecting when people don't want it to. A little backstory: one of our potential clients needs ...
0
votes
0answers
39 views

IPsec strongswan creates wrong packets on WAN interface

I have set up strongswan for IPsec connection (remote Win10 to my Linux router). IPsec does not have interface by default but I don't want to risk exposing VPN traffic on my WAN interface. So I setup ...
0
votes
0answers
35 views

Can't access VPN server on remote LAN through client subnet

I've got a VPN server running on M1 which is behind a NAT N1. I've got a client M2 which is also behind a NAT N2 (scroll right): M2 (192.168.125.6) -----> N2 (70.23.34.56) --------...---------> ...
1
vote
1answer
16 views

Strongswan central authentication for already exisint users in database

I have read a lot about authenticating Strongswan to SQL/PAM but can't find any idea/solution how to authenticate against a database where already there are a plenty of username and password ...
2
votes
1answer
69 views

Wrong IP address on VPN with StrongSwan

I have server with Ubuntu 20.04 and installed and working IKEv2 VPN with Strongswan. And i have one php system (installed on the same server with the VPN), that is locked by IP. So i'm using my VPN to ...
0
votes
0answers
31 views

Sporadic IPSec L2TP remote access VPN failures for some users

I have set up an IPSec L2TP remote access VPN server on an Ubiquiti edge router. Clients connect using the native MacOS client. Some users have problems. Their VPN occasionally disconnects. When they ...
0
votes
1answer
55 views

How to encode Pre-Shared Key (PSK) of and L2TP IPSEC connection managed by Network-Manager

If I create a VPN L2TP IPSEC connection using Network-Manager GUI, I introduce the PSK, but this one looks different on /etc/NetworkManager/system-connection/myvpn.nmconnection I am thinking the PSK ...
1
vote
0answers
127 views

Ubuntu Server 20.04 network-manager not starting VPN automatically

I am getting desperate here. I need to connect a Ubuntu Server Machine on a VPS to a network to monitor several machines. I can only connect to the network with L2TP over IPsec. I have tried ...
0
votes
0answers
32 views

IPSec Cisco VPN on macOS not hide my public IP, is it causes by macos vpn client?

I have 2 vpn, first one is on Cisco and second one is strongswan. In both case I have protocol IPsec. I configured connection to both vpn on my macbook - macOS Big Sur 11.0.1. I use default macOS ...
0
votes
1answer
173 views

Strongswan Error: no config named 'foo'

On Ubuntu 20.04, I am trying to establish a VPN tunnel to a IKEv2/Ipsec VPN site using Strongswan. However, even though I have the file /etc/ipsec.conf as shown # ipsec.conf - strongSwan IPsec ...
1
vote
1answer
160 views

StrongSwan VPN server not Connecting with Clients

Linux Server is Ubuntu 18.04 running in Google cloud. I followed the following excellent tutorial to configure StrongSwan server: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-...
0
votes
0answers
44 views

Specify outgoing network interface in ipsec.conf for one IPSec tunnel?

I'd like one of my tunnels to go out a particular interface. Is there a way to specify it? ipsec.conf conn remotehost.example.org keyexchange=ikev2 type=tunnel authby=psk rekey=yes keyingtries=%...
0
votes
0answers
24 views

VPN / NAT - Public Encrypted Domain Setup / issues

I currently have an issue at hand, i am not too experienced in the routing part of unix and would be great to have a helping hand. I currently am using Hetzner for cloud instances. I currently need to ...
0
votes
0answers
35 views

How to map palo alto firewall params to strongswan's ipsec.conf

I have these configs from a partner of mine How do I match them to ipsec.conf? This is what I have currently. conn %default ikelifetime=28800s keylife=3600s rekeymargin=3m keyingtries=...
1
vote
0answers
146 views

Can't route Strongswan VPN Traffic through AWS Internet Gateway

Cheers, I want to setup a VPN Server on an EC2 Instance in order to route all my private internet traffic, but I can't get it to work. Any help would be appreciated. I have the following Setup: ...
0
votes
1answer
251 views

Strongswan works on embedded device via ethernet but not with 4G modem

I have a Gateworks SBC with an installed Ubuntu 20.04. My SOC is connected with an USB to ethernet adapter (eth0) as DHCP Client (192.168.88.102) to my Mikrotik router (DHCP Server), which acts as my ...
1
vote
1answer
68 views

Route traffic between two IPsec tunnels

I run a backend on DO infrastructure, call it site Yvi, that connects to a third party site Prov via an IPsec tunnel, with this libreswan config: conn prov-client ... right=$YVI_IP rightsourceip=...
0
votes
1answer
472 views

Strongswan swanctl profile for native Android IKEv2 IPsec

Android 11 seems to support IKEv2/IPsec now, so I'm attempting to build a roadwarrior swanctl profile for it. So far I'm getting as far as having an SA established, but then immediately deleted. Any ...
0
votes
1answer
64 views

Does ikev1 or ikev2 support a no-authentication option? If so, how can I enable that in strongswan?

For testing purposes, I want to setup an ipsec tunnel using IKEv1 or v2 (preferably v2) that does not require any authentication - so just using the protocol to agree on the secret-keys of the ipsec ...
0
votes
0answers
84 views

Cipher names (ipsec)

I've got this in my syslog 470 Nov 22 11:32:23 mini31 ipsec[8820]: 13[IKE] 192.168.1.7 is initiating a Main Mode IKE_SA 471 Nov 22 11:32:23 mini31 ipsec[8820]: 13[CFG] received proposals: IKE:...
3
votes
1answer
535 views

Cant connect to VPN via L2TP/IPsec on mac, but connection on windows works

I've setup connection on one of our mac computers running MacOS 10.13.6 High Sierra. I've entered user, password, preshared key ect. but I Cant connect to VPN (getting VPN server did not respond error)...
0
votes
0answers
98 views

VPN disconnects often with L2TP/IPsec psk using android 7 tablet

Using vpn with L2TP/IPsec psk, unintentionally disconnection happened on android 7 tablet frequently. This issue not happen on android 6 tablet. Tablet is F04-H released by Fujitsu, and vpn settings ...
1
vote
0answers
63 views

SNAT iptables does not work when package is encapsulated in esp transport mode

I have the following setup, involving one host and a docker container. On the host, I am setting up an ipsec tunnel connection to a remote gateway. In the docker container running on the host, I ...
0
votes
0answers
224 views

How to connect Strongswan to palo alto firewall

I'm trying to create a tunnel between StrongSwan and palo alto. StrongSwan is running on a digital ocean droplet, Ubuntu. In my ipsec.conf, I have: conn %default ikelifetime=28800s keyexchange=...
0
votes
0answers
97 views

IPSec client ubuntu 18.04 cannot establish connection

I installed all necessary packages but still cannot establish tunnel using IPSec protocol, what I am doing wrong? According to logs I can see that connection passes authentication, but cannot create ...
0
votes
0answers
29 views

Strongswan - Is it possible to “include” other ipsec.conf files that have their own “conn %default” settings

I'm looking for some help or suggestions with strongswan I work with an obscene amount of VPNs with different types and configurations, ikev1( I know, I know, above my paygrade and not my decision),...
0
votes
1answer
134 views

Site-To-Site IPSec between StrongSwan and Zyxel NSG200

I'm trying to initiate an IPSec connection (Site-to-Site) between a Debian 10 server with StrongSwan and a Nebula NSG200. Let's assume: Debian server: Public IP : 50.50.50.45 Private Network: 10.1.0....
1
vote
1answer
165 views

Configure linux to route traffic from internal network through ipsec tunnel (policy based)

My company hosts cloud services. We have a partner that also hosts cloud services. We want to connect our network with theirs using ipsec / strongswan. Our clients should be able to reach the target ...
0
votes
0answers
91 views

Windows IPSec Xauth PSK with Shrew VPN not working

I've set up a VPN on a friend's home router (It's a FritzBox). I followed some tutorials on doing so, which included changing the default subnet (from 192.168.178.0/24 to something custom) and ...
0
votes
0answers
45 views

IPSec Phase 2 Configuration For Translated Subnets?

I have two networks with the 10.0.0.0/8 subnet I'm trying to connect via IPSec tunnels. I have the phase 1 configurations working but am a bit stuck on the phase 2 configurations. Each firewall used ...
0
votes
0answers
38 views

IKE and IPSEC - which algorithms in use - MacOS

I am connecting a MacOS Mojave to two different VPNs. One is over IKEv2, and the other over L2TP/IPSEC. After connecting the VPN, a new interface is created named ppp0. I can see come basic ...
0
votes
0answers
21 views

IPsec client access to LAN of other client

Since my home network is behing double NAT I want to set up a "reverse VPN" from a VPS that gives me access to local LAN from other VPN clients. I have set up a Strongswan IPsec server on ...
1
vote
0answers
43 views

Is it possible to send traffic through the VPN tunnel to the VPN gateway itself?

I have a WAN interface X and a web server Y behind NAT, that is traffic to X:443 is being forwarded to Y:443. Web server is accessible from the internet without any problems. Then I have a site-to-...
0
votes
0answers
26 views

Is it possible to connect hardware VoIP phone to the PBX behind IPSec VPN?

I have a hardware VoIP phone, a PC with VPN Client, a PBX (FreePBX) over that VPN connection. I have a softphone that works pretty well through that IPSec connection. Can I use named PC as some kind ...
0
votes
0answers
39 views

StrongSwan site to site no HTTPS traffic but HTTP works

I'm trying to connect to CISCO ASA from StrongSwan from a digital ocean droplet. Below are the configs I have: ipsec.conf conn %default ikelifetime=86400s keylife=60m rekeymargin=3m ...
1
vote
0answers
84 views

GlobalProtect VPN over VPN on MacOS

I am using GlobalProtect VPN client to access my company's network. I also have a personal IPSec VPN server. I would like to access to my company's network after my personal VPN, I mean I want to ...
0
votes
0answers
16 views

How to connect 2 IPSec sites with each other via the “main site”

First of all, i'm originally a software engineer with some network knowledge so no network specialist. At my current job i'm also responsable for the network. I say this because it may be a bit stupid ...
0
votes
1answer
306 views

Check if Remote Server Port is Blocking my IKEv2/IPSec VPN Connections

I am using StrongSwan on Ubuntu to try to establish a site-to-site VPN connection to a remote IKEv2 IPSec VPN server, but it appears that my connection requests are not reaching the remote server. Is ...
1
vote
1answer
65 views

Attacker using “single use IPs” to generate large volumes of robotic traffic that is hard to block

Currently there is some wierd traffic on a HTTP server from lots of different IPs. I tried checking against known TOR exit nodes, but there were no matches. They tend to be from countries in South ...
0
votes
1answer
127 views

What is an authentication method for L2TP or IKEv2 VPN that sends the username and password?

Google's GSuite Secure LDAP does not expose userPassword. CHAP, MSCHAP and other authentication do not send the password. They assume the server knows the password and can use a challenge. Because ...

1
2 3 4 5
19