Questions tagged [racoon]
The racoon tag has no usage guidance.
24
questions
0
votes
1
answer
289
views
Require or use in setkey.conf of Freebsd racoon config?
What is the reason to using "require" instead of "use" for the setkey configuration that is used for racoon in Freebsd?
For example:
spdadd 169.254.1.2/30 169.254.1.1/30 any -P out ipsec esp/...
- 1
2
votes
0
answers
310
views
What could cause racoonctl to show a Phase2 count higher than the number of ports racoon is listening on?
In my setup I have some EC2 instances in different regions linked by GRE tunnels, using ISAKMP via racoon. This setup is inherited, so bear with me if I fumble with terminology.
Sometimes I get weird ...
- 325
1
vote
0
answers
34
views
Network outage when machine on internal ipsec secured net crashes
We have 3 machines (Debian Jessie), each having 2 network interfaces.
One interface is connected to the internet, the other to an internal net which is encrypted via ipsec/racoon.
One of the machines ...
- 11
3
votes
1
answer
371
views
Poor IPsec over GRE performances
I have set up an IPsec over GRE connection with a remote host, both are NetBSD 6.1 based. The "client" is connected to the Internet through a 400Mbps fiber
connection. The "server" is located on a ...
- 251
0
votes
1
answer
1k
views
racoon Road Warrior VPN Client - Tunnel Established but no ping
I'm trying to configure a road warrior VPN client on a Linux distribution.
Here my configuraiton :
Client VPN LINUX - 1.1.1.1 - INTERNET - 2.2.2.2 - FireWall - 10.0.0.0/8
I wish to create a tunnel ...
- 1
2
votes
0
answers
1k
views
FreeBSD L2TP/IPsec not routing traffic to vpn server
I have configured a VPN server on my FreeBSD server, it all seems to be running, but the VPN traffic is not routing through to the local VPN server and I cannot figure out as to why. So my question is,...
- 121
1
vote
1
answer
983
views
IpSec/Racoon: Packets go to wrong tunnel
I use Debian and Racoon to connect to a Cisco VPN Gateway. We have got two tunnels between the same endpoints. Somehow and sometimes, packets go to the wrong tunnel.
This is the log message from the ...
- 123
3
votes
0
answers
563
views
Having trouble installing Racoon and Strongswan on the same system
I have two applications that I need to run, one uses Racoon for establishing IPSec tunnels and the other uses Strongswan. Therefore, I need both Racoon and Strongswan installed simultaneously on my ...
- 95
1
vote
0
answers
1k
views
racoon pure IPSEC VPN, best way to give vpn server an IP address on the VPN?
We are testing a VPN server for DR. We have a rackspace cloud instance, with a pure IPSEC VPN server running in racoon, serving "road warrior" clients. We have some NAT going on on the server to route ...
- 714
2
votes
1
answer
2k
views
VPN with xl2tpd and racoon - how to NAT traffic out of non-default IP address
I have a server running Debian which has networking like this:
eth0 - has public IP address 1.2.3.4
eth1 - has public IP address 1.2.3.5
I'm trying to set up a VPN on the server which I can connect ...
- 770
3
votes
2
answers
6k
views
ipsec vpn with racoon drops traffic on phase 1 renegotiation
We are running racoon on Linux connecting to a Checkpoint firewall. The connection comes up fine, but we see an interruption to traffic every 24 hours, corresponding to Phase 1 regenogiation.
Our ...
- 29
4
votes
4
answers
7k
views
pfsense 2.0.2 racoon(ipsec vpn) unreliable
I'm having issues with racoon (ipsec VPN) on pFSense 2.0.2 (and 2.0.1).
According to racoon all my tunnels are up (I have about 130 of them), but over time more and more of them won't pass traffic ...
- 202
1
vote
0
answers
1k
views
iPhone doesn't save password for Cisco IPsec VPN using racoon daemon
On my Debian server I had set up racoon daemon (1:0.8.0-14) for Cisco IPSec VPN using certificates for authentication. My racoon.conf is like following:
log info;
path certificate "/etc/racoon/certs";...
- 11
2
votes
1
answer
833
views
Using a roadwarrior ipsec client as a gateway
Scenario:
INTERNET --- VPN-Server <----> ROUTER <----> Roadwarrior <----> Subnet
132.1.1.1 192.168.2.1 192.168.2.50 176.168.10.0/24
...
- 21
0
votes
1
answer
5k
views
Connecting debian and windows via IPsec VPN with Racoon and ipsec-tools
I've some trouble with the IPsec configuration on my debian server (6 squeeze). This server should connect via IPsec VPN to an windows server, which is protected by an firewall.
I've used racoon and ...
6
votes
1
answer
5k
views
ASA site-to-site IPSec vpn to linux ipsec-tools endpoints stops working after a random period of time
We swapped to ASA's over the weekend, and we replaced our VPN infrastructure which was previously based on openvpn and are now using IPSec between our ASA 5520's and our other sites that have linux (...
- 3,486
0
votes
1
answer
623
views
private subnet nat (openvpn / racoon)
I have a openvpn subnet 10.8.0.0/24 running one server and one client (laptop).
openvpn works fine. Browsing the web over openvpn from the laptop works also fine.
Now on the server there is a private ...
- 113
1
vote
2
answers
796
views
Openvpn routing for a Racoon subnet
I'm able to connect successfully from a laptop to my server using Openvpn.
I have ipv4 forwarding and NAT enabled on the server.
I can access the web, etc.
But the server also has a S2S VPN with ...
- 113
2
votes
0
answers
2k
views
IPSec VPN login failing with certificate authentication
I am working on an IPSec VPN solution allowing iPhones / iPads to connect to a Linux server running Gentoo. I have been able to get the VPN functioning as expected using PSK authentication (PSK + ...
3
votes
2
answers
1k
views
Racoon on Linux - Initial packet loss
I have configured two Linux boxes so they automatically use a transport-level IPSec connection whenever they need to communicate. The configuration is based on Racoon with X509 authentication and the ...
- 135
0
votes
1
answer
3k
views
How to make racoon generate security policies for all ports?
I am trying to establish an IPsec connection between two systems. I've got racoon setup on both sides. The client is going to have a dynamic IP address, so on the server, passive and generate_policy ...
- 415
4
votes
2
answers
5k
views
iOS/Mac-Compatible IPSec VPN Server on Ubuntu
I pay for a VPS from a Xen VPS host and the load on it is fairly light, so I'd like to run a VPN off of it. The configuration I'm shooting for is "roadwarrior"-style, as I'd like to use it to secure ...
- 93
1
vote
1
answer
2k
views
IPsec isakmp_natt problem on racoon.conf
I have this weird problem where racoon complains of the following error:
WARNING: NAT-T is enabled in at least one remote{} section, but no 'isakmp_natt' address was specified!
I've already ...
- 123
-1
votes
2
answers
2k
views
racoon-tool doesn't generate full racoon.conf file in /var/lib/racoon/racoon.conf
I am using ipsec-tools/racoon to create my VPN. I am using racoon-tool to configure racoon.conf but when I run racoon-tool reload it only generates the first section - Global items.
When I run ...
- 151