Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

Filter by
Sorted by
Tagged with
0
votes
1answer
29 views

Is it possible to force a restart of a google cloud VPN without destroying it?

We have a GCP VPN to a partner and we are having some issues with the connection. Periodically the VPN goes down, and the only workaround that we've found so far is to force a renegotiation of both ...
0
votes
1answer
1k views

racoon Road Warrior VPN Client - Tunnel Established but no ping

I'm trying to configure a road warrior VPN client on a Linux distribution. Here my configuraiton : Client VPN LINUX - 1.1.1.1 - INTERNET - 2.2.2.2 - FireWall - 10.0.0.0/8 I wish to create a tunnel ...
1
vote
0answers
35 views

Strongswan high latency on LTE

Allow me to ask for help to solve the following problem with latency. I have a network which is on one side the Strongswan server and on the opposite side are terminals connected through DSL, cable or ...
0
votes
2answers
1k views

Locked out of RDP access to web server - how to stop IPsec Policy Agent?

An ipsec filter rule was deleted in error that has now locked me out of RDP access to the server - very big problem (this is a Windows Web Server 2008 R2 (64-bit) rented from 1&1). I can connect ...
2
votes
1answer
965 views

AWS EC2 CentOS 7 with LibreSwan IPsec Tunnel UP (Established), No Traffic flow, cannot ping Peer encryption Domain Nodes

I have LibreSwan Setup on AWS EC2 CentOS7 instance, IPsec tunnel is established with the peer (Cisco ASA). The Tunnel is up, but I no traffic. I cannot ping the nodes at the side of the peer. Here is ...
4
votes
1answer
2k views

Why is scp so slow on my network?

SCP is slow in our company network. For testing, I am copying a file from a remote server which is connected via IPsec between the routers. When using scp -vv I get lots of messages like this: ...
0
votes
0answers
15 views

VPN connection over Wireguard

I am having a friend who I am trying to help. He is working for a company from home connecting to an SSTP VPN in order to access his work-related resources. The problem is that due to some privacy ...
0
votes
0answers
12 views

L2TP/IPsec VPN connections do not work on Window s7/10

I am having issues recently with VPN connections on Windows 7 & 10. The connections that worked great do not connect at all any more. Didn't know about the issue, as I work on Mac. Is there a ...
0
votes
0answers
18 views

Site-To-Site VPN: Reachability of bridged devices in subnet

I have the following problem. I have established a site-to-site connection via IPSec between a virtual network in Azure and a Raspberry Pi at my home. The Raspberry Pi is connected via cable to my ...
0
votes
1answer
1k views

Linux 2.6 IPSEC does not forward packets from LAN to VPN

I have site to site VPN from 10.132.2.0/24 to 10.132.1.0/24. The problem I am facing is that the packets from VPN are forwarded to LAN, as I can see them on the LAN server, but packets from LAN are ...
1
vote
1answer
1k views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
2answers
966 views

Cisco IPSec Issue with Windows 10

How can I connect a Windows 10 laptop to a Cisco ASA via VPN using L2TP/IPSec rather than AnyConnect? Apparently, the Cisco client is no longer supported, and the Windows 10 built-in client gives me ...
0
votes
1answer
2k views

OPNsense routes traffic to its own IP into IPsec VPN

I have a OPNsense device with an IPsec VPN to a remote site, which works fine. All traffic from the LAN should go through the VPN, so I configured the Phase 2 like this: Local Subnet: LAN network ...
1
vote
2answers
1k views

How to deny connections to xl2tp without ipsec encryption?

I try to setup l2tp+ipsec server for my mobile use and my home router use. So I made some setup and checked it works fine from android device. I see encryption on ipsec --status. My system is CentOS ...
2
votes
4answers
12k views

Windows 10 built in VPN

I am trying to setup Windows built in VPN with an asa 5505 using IPsec/L2TP with IKEv1. Remote access vpn using a psk. I got a mismatch error during phase 1, and I cannot figure out what IPsec ...
1
vote
3answers
1k views

Allow only IPSEC outgoing traffic to a port (using IPTABLE?)

Problem: I've a situation where IPSEC server and the target server (Say http server) happens to be the same machine and I need allow ONLY the traffic coming through IPSEC server to have access to a ...
0
votes
0answers
43 views

TP-LINK TL-MR6400 IPSEC L2TP VPN tunnel with GCP server

I have a TP-LINK TL-MR6400 router, connected to internet by means of an LTE sim. This is a very rough network diagram of my current situation.1 My IoT services sit behind the TL-MR6400. Unfortunately ...
0
votes
1answer
2k views

Strongswan IKEv2 for iOS devices

I want to connect a Strongswan IKEv2 VPN on iOS devices. It uses FreeRADIUS server for AAA of users. It's already working perfectly on Android and Windows devices. but when I try to connect using ...
3
votes
1answer
1k views

L2TP VPN Connection on Debian Squeeze

I need to make an L2TP VPN connection from a Debian Squeeze server. What I have is: The server IP address Shared Key My username and password Just using these 3 parameteres I can establish the VPN ...
4
votes
1answer
1k views

Find out which encryption and hash algorithm is used by strongswan ipsec

I have multiple productive IPSec VPNs on a Debian-based Linux Server using StrongSwan. Currently I am busy updating my documentation with details about each VPN. Unfortunately the IKE encryption ...
0
votes
1answer
1k views

ipsec verify indicates ERRORS “No tunnels up”

I just installed openswan on Ubuntu14. I'm trying to connect to my work's VPN (I have access to the Firewall/VPN btw). When I do a /usr/sbin/ipsec verify I get the following: Checking your system ...
0
votes
1answer
1k views

Openswan and OpenVPN

I have installed Openswan and have configured IPSec tunnels and they work perfect until i install OpenVPN. Now i can't find out way the ping wont work. When i execute the "service ipsec status" it ...
0
votes
0answers
16 views

libreswan ipsec with virtual interface

i am currently building up a vpn for my devices on CentOS8. I am using libreswan for this purpose. Mechanism is Ikev2 RSA and as far as i can see this works fine for the most part (clients can reach ...
0
votes
2answers
1k views

IPsec transport mode and MTU

[Similar to Right way to set the MTU of an IPsec Client (Linux/Racoon), but different in that there is no router on the responder side] I have a setup where machines in a local network need to talk ...
0
votes
0answers
15 views

Cisco ISR4431 IPv6IP Tunnel Failling

I'm having problems troubleshooting an IPv6IP Tunnel not starting, I enable debugging of ISAKMP, IPSEC and Crypto Engine and see this problems: *Oct 4 04:00:10.356: ISAKMP (0): received packet from ...
3
votes
3answers
9k views

Connecting to a FortiGate VPN from a remote Linux machine via OpenSwan

Here's the setup: I have a FortiGate unit on a business network, which has a FortiGate VPN set up. Machines on a remote network that can run FortiClient (Windows and Mac machines) have no problem ...
0
votes
0answers
30 views

ASA5506 VPN Client Blocked

I am setting a new CISCO ASA5506. I am testing a CISCO VPN Client, IPSec/UDP, and it is being blocked. I'm not even prompted for a credentials. The VPN Connection works just fine from another ...
0
votes
1answer
2k views

OpenSWAN KLIPS not working

I am trying to setup IPSec between 2 VM launched by OpenNebula. I'm using OpenSWAN for that. This is the ipsec.conf file config setup oe=off interfaces=%defaultroute protostack=...
1
vote
2answers
4k views

How to forward IPsec VPN with iptables

Hello I have some questions on how to use iptables to forward IPsec VPN data. Here is what I want to do: WAN Computer -- (eth1/WAN IP)Server1(eth0/10.81.1.2) -- (eth0/10.66.2.3)Server2(eth1/WAN IP) ...
0
votes
1answer
48 views

Strongswan IPSec tunnel cannot reestablish properly. Why does DPD continue?

I have a IPSec tunnel between two machines, one of which (the initiator) has two interfaces (data0 and data1). The data0 interfaces has a metric of 100 and the data1 has 70, so when initially creating ...
0
votes
0answers
40 views

Remote Desktop Sharing 2 Windows 10 Systems Via Debian VPN Server's Public IP Address?

I've got a Debian system set with a public IP address serving Cisco IPSec for a VPN from my desktop to access the Internet via that server's IP address. What I'd like to do is access that same server ...
8
votes
2answers
27k views

Connect to a Fortinet VPN with Ubuntu

I don't know a lot about VPNs but I'd like to connect to a Fortinet VPN with Ubuntu. I can connect on Windows using Forticlient just by entering the policy server (vpn.theserver.com) and then it asks ...
0
votes
0answers
19 views

IPSec responder doesn't create a route when connection is established

I have a Strongswan IPSec configuration which used to work and I do not know what changed, but my Gateway machine (responder) doesn't create a route to the initiator (the initiator gets ip 172.13.14.2)...
0
votes
1answer
2k views

pfsense ipsec vpn to amazon aws not connecting

I'm trying to set up an ipsec vpn from our DC networks to our amazon vpc, so a site2site aka network to network connection. For this I've set up pfsense 2.2.6 and gave it a public IP on a WAN ...
0
votes
1answer
1k views

How can I run a site-site ipsec vpn behind a livebox?

I've got a livebox at a site that needs to have an IPSec site-to-site vpn back into the head office. I can't figure out how to forward / bridge all ipsec (ESP, UDP 500) traffic to the vpn router that ...
4
votes
2answers
853 views

How do I fix verify certificate error when connecting to an AWS Client VPN endpoint?

I have setup a Client VPN, using steps described in Create a Client VPN Endpoint. For the server certificate, I picked a public certificate that was newly created and verified by AWS Certificate ...
0
votes
1answer
108 views

Setup l2tp using Strongswan

I setup ikev2 using Strongswan, Now I need to add l2tp support to that What is the best and easy method to add l2tp support to Strongswan? Appreciate for any help
0
votes
0answers
104 views

Some VPN traffic blocked to secure endpoints

I have a VPN server (strongswan) used for testing that I connect to via IKEv2 on a variety of systems (here, I tried Windows, Ubuntu, & Android), normally without issues. This morning, I was on a ...
5
votes
1answer
2k views

IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat

I have recently configured a VPN server hosted in AWS EC2. Details: Centos 6.4, openswan, xl2tpd, NAT-traversal. The configuration works great for a scenario when only one user connects form a given ...
0
votes
0answers
26 views

Azure Firewall Network Security Rules

I'm using Windows Firewall's Connection Security Rules to force specific ports to use IPSec as a way of adding security to a handful of services. Those ports will only connect if the other side of the ...
0
votes
1answer
2k views

Use Openswan / IPSec on Ubuntu server to connect to existing Openswan VPN - NAT broken

I have an existing Openswan VPN, all working fairly well with Windows, Mac and Phones. [Office 192.168.0.0/24]---[VPN A.B.C.D]----[Internet]---[Home Routers (NAT), Dynamic IPs]----[Workstations] Now ...
0
votes
0answers
26 views

pfSense multi site-to-site vpn with ipsec pointing same local network

I've an ipsec working on my pfsense with this configuration. Sites and subnets: Site A: 10.1.0.0/16 Linking sites: Site A (Server) < 10.0.2.150/32 > (Client) Site b (Server) < 10.0.15.130/32 ...
0
votes
1answer
30 views

VPN connection IPsec with AES, SHA authentication and Preshared Key

I am trying to get a vpn connection set up to connect to my router but very unsuccessfully. I am on Ubuntu and am very lost. The server is set up to use Ipsec, IKEv2, AES256 and SHA2 256 with ...
0
votes
1answer
63 views

IPsec - internet traffic forwarding from clients

I have an IPsec tunnel up and running (pure IPsec, without L2TP/GRE using strongswan 5.5.1) on Debian 9 VPS instance. Currently it is IPv4 only so net.ipv4.ip_forward is set to 1 in sysctl. Clients ...
9
votes
2answers
7k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
1
vote
1answer
2k views

xl2tp + strongswan ipsec — xl2tp timeout

I'm trying to connect to a ipsec/l2tp vpn from a private network behind a nat-router. It works from different windows clients, but from my linux machine (openSuSE 12.3, stronswan 5.1.3, xl2tp 1.3.0) I ...
0
votes
1answer
23k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In the ...
0
votes
0answers
88 views

Mikrotik IPSec Multi Site VPN

We have a multi-site network with a "Central" facility and multiple "Sites". On each site, we installed a router with capabilities for VPN but always connect to internet through an ISP router. Also, ...
3
votes
1answer
3k views

IKE Phase 1 Aggressive Mode exchange does not complete

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04. I've configured openswan as follows: /etc/...
2
votes
1answer
35 views

IPSec in IPSec with strongswan

I have server connected with remote LAN1 over IPSec tunnel. Now I want to setup second tunnel to LAN2 which is connected to router in LAN1, so I need to create Ipsec tunnel inside existing ipsec ...