Questions tagged [strongswan]
strongSwan is an open source, multi-platform IPsec-based VPN solution, with IKEv2 & IKEv1 support
439
questions
0
votes
0
answers
28
views
AWS StrongSwan IPSec Tunnel with Cisco fails during Phase 2 with TS_UNACCEPTABLE
I need to to setup a site-to-site IPSec tunnel with a vendor whom We need to access each other's API servers seating on the LANs using their respective Public IPs. We're using AWS, And I have ...
- 101
0
votes
0
answers
28
views
sometimes, vpn connection doesn't work on ipsec(strongswan) configuration
I'm using ipsec with strongswan between aws and on-premise
here is strongswan configuration
config setup
uniqueids = no
charondebug="ike 1, knl 1, cfg 0"
conn %default
ikelifetime=...
- 1
0
votes
1
answer
39
views
Android .sswan profile to ipsec.conf
I have a .sswan profile with an embedded cert and username/password from a server admin. It connects to a Watchguard VPN without any issues. I was told by the server admin I can connect with my ubuntu ...
- 121
0
votes
0
answers
49
views
Strongswan site to site with fortigate issue seems some thing about phase 2
Hello all, sorry to bother you guys, i already spend 3 days on it,
still can not make it work, Could you take a look? Thank you in
advance <3.
fortigate info:
Public ip: 41.223.XX.XX
Internal ...
- 1
0
votes
1
answer
46
views
Debian + Strongswan: does not pass traffic from the Internet to the tunnel
I'm trying to setup a remote VPN server to access the internet from my home PC. It is on a leased AWS VPS, with Debian and Strongswan. It is meant to receive my traffic via the tunnel, forward it to ...
- 1
1
vote
0
answers
96
views
Dynamic traffic routing via multiple GRE over IPsec tunnels
Initial data
I am learning networking based things and strongSwan proper configuration.
Using my own wildcard ssl certificate.
All tunnels are successfully lifted and authorized among themselves, ...
- 19
0
votes
0
answers
23
views
Strongwan S2S VPN to Fortinet
I want to hide my local hosted server behind a public VPS. So i established a VPN between my local firewall(fortinet) and my
vps(strongswan).
Diagram
The VPN is up but no traffic at all. Even in ...
- 1
0
votes
0
answers
206
views
How to set up StrongSwan (behind NAT) IKEv2/IPSec with PSK (pre-shared key)?
I set up my strongswan server on a virtual Ubuntu 22 behind a NAT. It works well for RCA using login password.
But I need to work using only PSK key. I tried a bunch of options, I can not connect from ...
0
votes
1
answer
168
views
Strongswan ike phase 1 failed: "IKE_SA being deleted"
I'm trying to build IPsec tunnel between my Strongswan cloud instance to the Cisco CSR 1000V which is from ISP.
According to the form given to me, I have to configure with the following factors in ...
- 1
0
votes
1
answer
188
views
ipsec/strongswan - tunnel is up, traffic is sent and received but replies are ignored
I need some help, I set up a strongswan IPsec tunnel with ESP and IKEv2, the tunnel is UP and remote sees packets coming and answers them, but my server is ignoring? answers.
The tunnel is between my ...
- 1
0
votes
1
answer
124
views
How to investigate not received TCP packets sent from VPN on the same LAN?
I'm setting up a VLAN on the cloud where many servers will connect to a remote host via VPN. The setup is as follows:
Their Host d.d.d.72
|
|
...
- 233
0
votes
0
answers
48
views
Strongswan IPSEC specific rightsubnet
I have strongswan ipsec setup installed in ubuntu OS. I have static public ip 103.x.x.x and vpn clients subnet 10.100.100.2/24. I have 2 clients with ubuntu OS. I was able to ping client 1 to client 2 ...
0
votes
0
answers
167
views
Ubuntu - IPSec VPN with Dual Stack / Strongswan
I'am trying to setup a IPSec VPN (ike1) for our Linux clients. But we need dual stack with ipv4 and ipv6.
The endpoint is a Fortigate firewall. With two phase2, one for IPv4 and one for IPv6. The ...
- 21
0
votes
1
answer
77
views
Howto get server host into strongswans virtual IP address subnet
I have configured a VPN server and VPN client with strongswan with the following ipsec.conf configuration settings
Server ipsec.conf
conn ikev2-vpn
also=rw-base
auto=add
compress=no
...
- 101
0
votes
1
answer
39
views
strongwan disable user access
Hwo can I disable access for a particular user with strongswan public key authentication?
So I have pub key authentication working. the SAN is the email and is the id. Is there a way to reject ...
- 113
0
votes
0
answers
113
views
Simple Strongswan installation caused server to be unreachable through (Open)SSH
While working on a remote machine (Debian 11.7 / Kernel 5.10.0-23-amd64) I have installed Strongswan to configure it as a VPN client.
apt install strongswan
after this, the service strongswan-starter....
- 101
0
votes
0
answers
25
views
ipsec package after decrypted can not be recieved by tproxy
My centos6 machine ipaddress is 192.168.56.10 (eth0). I have installed strongswan and a tproxy like v2ray with iptables:
iptables:
*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [...
- 1
1
vote
0
answers
85
views
strongswan site to host example?
There are a million site-to-site and host-to-host examples. I can't seem to find a single site-to-host example. I am looking for the most basic possible example with no certificates at all, that just ...
- 113
0
votes
2
answers
383
views
Can I make strongSwan accept any certificate as long as it is only signed by a specific CA?
Using a swanctl config, is there a way to make strongSwan accept any certificate for an IKEv2 connection as long as it is signed by a specific CA? What I mean is, without having to install the public ...
- 889
0
votes
0
answers
415
views
Strongswan VPN with Checkpoint stuck on connecting
I am new to strongswan and linux so i'm trying to setup a vpn connection between a linux firewall cluster and a checkpoint gateway.
So this is my node list and resources:
root@Deb-FW-C1:/etc# crm ...
- 1
1
vote
1
answer
389
views
Not getting StrongSwan IPsec to run: received netlink error: Network is unreachable / unable to install source route for [...]. Getting nuts already
I am trying to set up an ipsec tunnel with strongswan, used some tutorials for that and all went so far but there is no actually communication going trough the tunnel. The tunnel is established, but ...
- 111
0
votes
0
answers
461
views
Using strongswan to connect a checkpoint vpn gateway using Ikev1 and xauth-hybrid
I try to connect to a r81.10 gateway using a linux distribution with strongswan.
Gateway accepts user:password only. Tested with Windows Version of Checkpoint Endpoint Software. Have to use ikev1.
The ...
1
vote
0
answers
286
views
Strongswan (IKEv2) connection established but unable access systems being the VPN server
My ipsec configuration
/etc/ipsec.conf
# ipsec.conf - strongSwan IPsec configuration file
conn myvpn
auto=add
keyexchange=ikev1
authby=secret
type=transport
left=%defaultroute
...
- 11
0
votes
0
answers
93
views
Cannot establish an IPsec site-to-site VPN between an EC2 instance and a SonicWALL firewall
I'm trying to establish a site-to-site IPsec VPN between an EC2 instance running StrongSwan and a SonicWALL firewall. I've tried a lot of different configurations, but currently I have this at the EC2 ...
0
votes
1
answer
698
views
Strongswan, Ubuntu 22.04: Can't start connection after reboot, although configuration is loaded
I am using two LXD-Containers (on both servers) for connecting between them.
Everything runs fine, using iptables for NATing ports.
But there is one problem:
When restarting one of the servers (just a ...
0
votes
1
answer
156
views
strongSwan VPN tunnel (IKEv2) established but traffic times out
I have a VPN server that tunnels traffic to a PostgreSQL database server which is otherwise unreachable from the internet. The VPN is only reachable by IPv4.
Problem
All clients can establish a VPN ...
- 111
0
votes
0
answers
287
views
LibreSwan IKEv2 multiple left subnet for vpn splitting
I have built an IKEv2 VPN server.
The current config in /etc/ipsec.d/ikev2.conf is like this:
conn ikev2-cp
left=%defaultroute
leftcert=58.xx.xx.xxx
leftsendcert=always
leftsubnet=192.168.1....
0
votes
0
answers
417
views
Strongswan IKEv2 VPN tunnel not establishing
I have searched for so many different solutions and I have not found anything, I am hoping that I can find the solution here.
We are configuring a new VPN, our old VPN is set up as an IKEv1 VPN, it ...
- 1
1
vote
0
answers
271
views
issue with connecting to IKEV2 VPN server from android devices
We are facing a problem with connecting android devices to our VPN server. iOS devices do not have any problems connecting.
Android devices trying to connect via StrongSwan official app from Google ...
0
votes
0
answers
465
views
IPSec VPN between StrongSwan and DrayTek Router fails on second rekeying
I want to establish an always-on IPSec VPN between a DrayTek Vigor2860 and an EdgeRouter X (which uses StrongSwan). The Draytek is behind a NAT and dials into the ER-X. The VPN connects and works, but ...
- 433
0
votes
0
answers
355
views
VPN IKEv2 connection problems on Android, IKE_SA failed
I have a big problem with connecting to my VPN server from 50% of Android devices.
Cannot resolve it 2 weeks with network and android developers
VPN server based on IKEv2 with Charon and Strongswan ...
0
votes
1
answer
527
views
No config named ... error when running ipsec up <conn name>
I am getting the 'no config named ...' error like others have posted. I have auto=add in my etc/ipsec.conf file as I read in one post. I have followed everything which I have read online to no avail. ...
- 1
-1
votes
1
answer
163
views
Windows 7 & 8.1 can't connect to strongSwan 5.9 VPN server on Ubuntu 22
I set up VPN server on Oracle's OCI using Ubuntu 22.04 and strongSwan 5.9.5. When I tried connect from different roadwarriors, Android works good, Win10 works good even ancient Blackberry10 works good,...
0
votes
1
answer
318
views
Can't configure VPN on tp-link router using PSK
I've bought a VPS server and configured stronswan VPN. I was able to configure VPN on my Windows laptop(usinf certificate provided by Strongswan Web UI) and my android smartphon(configuration is ...
- 101
0
votes
0
answers
200
views
ike-scan 0 returned handshake 0 returned notify
I need to establish vpn connection to a specific site, I used strongswan and configure my side according to the provided parameters from another side, but when I try to connect I get 'peer not ...
1
vote
0
answers
219
views
How to configure a site-to-site vpn through strongswan
I want to configure a site-to-site vpn using strongswan, my partner gaves me a domain encryption ip (kindly tell me what is this), and the parameters for ike and esp. They told me after finish configs ...
0
votes
0
answers
38
views
Strongswan remote_ts as 0.0.0.0/0, now I can't access my vps
I have a vps, and I tried to install a site-to-site vpn using stronswan and swanctl, I accidentally put remote_ts to 0.0.0.0/0 and now I can't access my vps through ssh.
How can I regain access ?
1
vote
0
answers
96
views
strongswan site2site connection alive, but no traffic flow
i followed a couple of tutorials to set up a strongswan site-2-site vpn, and i got stuck ... .
that's the situation:
SITE A <-------> SITE B
AWS VPN GATEWAY ...
- 203
0
votes
0
answers
51
views
DO to Azure, site to site VPN, can my client private IP send the traffic?
Using Strongswan IPSEC
eth0 IP is xx.xx.129.177 (which is our public IP and the one currently sending requests)
the gate way to eth0 is xx.xx.128.1
eth0:1 IP is 10.16.0.24/16 - Client expects this ...
0
votes
0
answers
350
views
VPN client creation on Ubuntu with strongswan fails
I've set up a L2TP VPN server on my home router and the connection between Windows 10 clients works properly. Now I want to set up a VPN client on a Ubuntu 18.04 machine. I've used this configuration (...
0
votes
0
answers
86
views
Routing connection to Azure DB through StrongSwan IPSec site-to-site tunnel
I have a Linux Strongswan IPSec site-to-site connection up and stable to an Azure Cloud Network, I'm trying to route an sql connection with a python script through the tunnel to an Azure database in ...
0
votes
0
answers
601
views
No Route To Host With StrongSwan Tunnel Interface
I'm using Ubuntu 20.04 with Strongswan 5.8.2. Configured using the Route-Based VPN instructions.
The site-to-site tunnel establishes and is stable, however, I can't route traffic over it. When I try ...
- 101
0
votes
0
answers
83
views
Centos7, Strongswan IKEv2 rout client traffic to specified gateway
in my Centos7 (static ip=192.168.0.1) I set a pptp connection client to mikrtik server (static ip=172.20.20.1)
ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1450 qdisc pfifo_fast state ...
1
vote
0
answers
169
views
Azure site to site proposals with Strongswan IPSec
Noob here trying to finish a project, I think I have it bar these damn proposals, this is for an Linux Ubuntu VPC Machine to Azure Cloud network interface, only thing I can't suss out is how to config ...
1
vote
0
answers
2k
views
Cannot connect with Android native IKEv2 VPN client with Radius backend?
I can see that Android native VPN client supports IKEv2/MSCHAPv2, so in theory it should be possible to connect to Strongswan VPN server from Android without installing additional software (like the ...
2
votes
1
answer
888
views
When using `xfrm` and strongswan for an ipsec tunnel, where are the routes stored?
I am using strongswan to establish an ipsec connection in tunnel mode. When the client connects to the gateway, strongswan receives a new ipv6 address assigned to the client from the server. All ...
- 25
0
votes
1
answer
297
views
Strongswan + Openvpn. Strongwan is catching all traffic, including less specific subnets
Hi on the same server I use openVPN with Strongswan to interconnect 2 networks
Routes populated via strongswan are less specific (10.0.0.0/8)
Routes populated via openvpn are more specific (10.1.1.0/...
- 115
1
vote
2
answers
85
views
VPN integration with a 3rd party Cisco device
Apologies if this set-up makes no sense. It makes no sense to me, but any assistance is greatly appreciated.
Background
I have a Payment provider who requires me to provide 2 IP addresses, and ...
- 123
0
votes
1
answer
308
views
How do I install dhcp plugin for Strongswan on Ubuntu focal
I've installed strongswan, libstrongswan-standard-plugins and libstrongswan-extra-plugins packages and it seems that dhcp plugin is still not there.
How do I install it? Is my only option to build ...
- 103
0
votes
0
answers
979
views
Issues configuring strongSwan client on AWS instance for site-to-site VPN
I am trying to setup a IPSec VPN client on a debian-10 AWS instance.
Unfortunately, I do not have access to the VPN server as it is configured by another party, so all I know is they told me it is ...
- 101