Questions tagged [strongswan]

strongSwan is an open source, multi-platform IPsec-based VPN solution, with IKEv2 & IKEv1 support

Filter by
Sorted by
Tagged with
0
votes
0answers
22 views

l2tp/ipsec unable to connect on linux

I'm trying to connect to cisco l2tp/ipsec vpn with PSK and IKEv1 username/password. According to this article, I've found that server supports following authentification methods: SA=(Enc=3DES Hash=MD5 ...
0
votes
0answers
15 views

StrongSwan left/right Settings

I am trying to setup StrongSwan on Ubuntu 20.04 for a site-to-site VPN. In ipsec.conf, how can we configure left, leftsubnet, leftsourceip, right, rightsubnet, rightsourceip if Local VPN server's ...
0
votes
1answer
14 views

Specifying machine certificate issuer with Windows VPN

I am trying to create a Windows Always On VPN connection between an AD and AAD joined Windows 10 client and a StrongSwan VPN server. The Windows client has multiple "Client Authentication" ...
0
votes
0answers
40 views

Is it possible to setup site-to-stie VPN for cloud instance to on-premise VPN?

I have instance in cloud (alicloud - very similar to AWS) that need to establish IPVPN connection to a destination server. However, the dest VPN server limits the incoming IP to only 192.168.40.34. As ...
2
votes
1answer
82 views

How can I capture IPSEC packets on my VPN server?

I am running a strongSwan (U5.3.5/K4.4.0-62-generic) VPN server on Ubuntu 16.04. Ususally, when I want to examine traffic on a server, I simply run something like the following: tcpdump -ni eth0 "...
0
votes
0answers
18 views

Swanctl rw scenario: Better iperf3 performance running [rw --> gw --> client] than [rw <— gw <— client]

I'm testing out some StrongSwan scenarios, (specifically this one) and I've discovered something interesting, when running iperf3 -c (client) from the roadwarrior Carol and iperf3 -s (server) from the ...
1
vote
0answers
99 views

strongswan initiator takes forever to connect

Lately I have experienced rather strange problems with my VPN setup. Certain clients fail to connect for a long time. Then it works for a while, until it doesn't. All systems involved (initiators and ...
2
votes
1answer
32 views

StrongSwan/IPSec: Manually trigger a rekey

I'm trying to test the performance of my StrongSwan RoadWarrior setup (The standard one found here). As part of this testing, I need to make sure it re-keys properly. I'm not all that familiar with ...
1
vote
1answer
36 views

Can you have two subnets on a network with the same IP block? [closed]

I have a bunch of routing boxes on a network 10.9.9.0/24. I'm testing out scenarios with IPSec and StrongSwan, and I'm scripting a way to efficiently run these scenarios. Right now, the script I run ...
0
votes
2answers
21 views

StrongSwan: manually expire security association

I am working on automating some software tests involving IPSec and StrongSwan. These tests basically apply a swanctl.conf file to two gateway machines, then establish a tunnel between them. It then ...
0
votes
0answers
15 views

freeradius and configure eap or pap with rest

free radius and configure eap or pap with rest i want use strongswan with free radius and rest module, i see sql and eap work together, how can configure eap with rest ? the important part is ...
0
votes
2answers
26 views

How to implement a strongSwan killswitch on Linux?

I am using PF as the killswitch on macOS (see this). Using PF is possible because the ipsec connection has it’s own interface (ipsec0). How can I implement something similar on Linux given the ipsec ...
0
votes
0answers
52 views

how setup stronswan with freeradius and rlm_rest rest module?

how setup stronswan with freeradius and rlm_rest rest module? https://wiki.strongswan.org/projects/strongswan/wiki/EAPRadius I use eap radius plugin of strongswan and connected to free radius v3 and ...
0
votes
0answers
46 views

how conncet ibsng as redius server to strongswan

I want to use ibsng (on centos 6) as a Radius server and manage my strongswan accounts (on centos 7). https://wiki.strongswan.org/projects/strongswan/wiki/EapRadius I made these settings and set up ...
0
votes
0answers
18 views

AWS Strongswan Site to site : VPN UP but no traffic

I having a troubleshoot with amazon VPN site to site, i'm using strongswan Network diagram +----------------------------------+ +----------------------------------+ | VPC 1 ...
0
votes
0answers
25 views

StrongSwan Connection Issue on just Windows10

My VPN server works without a problem on my iPhone device. But i can not connect on Windows 10. I think issue related to certificate. That's what i did about: ipsec pki --gen --type rsa --size 4096 --...
0
votes
0answers
38 views

Can one use a MySQL backend for user authentication in a strongswan VPN server (new)?

We have installed and configured a strongswan VPN server with username / password authentication. Is it possible to store the users' credentials in a MySQL backend and configure strongswan to use the ...
1
vote
0answers
38 views

NAT with strongswan - howto?

Network Topology I have the following setup where Office 1 and Office 2 have the same IP address range (192.168.0.0/16) and both are using strongSwan running on Ubuntu VM (with two NICs one connected ...
0
votes
1answer
43 views

strongSwan client does not retry connecting to VPN server after the server has rebooted

Here’s my current ipsec.conf. What do I need to change to make sure the client retries connecting to server indefinitely. $ cat /etc/ipsec.conf conn %default ike=aes256gcm16-sha384-modp3072! ...
0
votes
1answer
46 views

strongSwan client can connect to the internet (through the VPN) but cannot SSH to VPN server or other clients on the VPN subnet

I wrote a strongSwan guide a while back which I followed. I then installed isc-dhcp-server and configured strongSwan for DHCP. Everything works fine except clients cannot SSH to the VPN server or ...
0
votes
0answers
21 views

Site-to-Site VPN Ping fails

I'm trying to establish for my very first time a Site-to-Site VPN. I'm using StrongSwan to setup the tunnel. I have followed several post where explains step by step how to achieve that, but I reach ...
0
votes
0answers
16 views

How can decide no ping with site-to-site VPN on Strongswan?

I have 2 Linux routers in two different geographic location. And I want to create a site-to-site tunnel between these Linux-routers. I use Strongswan. The tunnel successfully up, but ping between ...
1
vote
0answers
39 views

Checking existence of IPSEC as a meta expression in nftables

Whilst recently setting up a router manually from scratch using Debian, I decided to use nftables along with strongSwan to provide an IKEv2 VPN access into this. After much frustration along with ...
0
votes
0answers
27 views

Strongswam VPN keep showing 1 ip established instead of all configured Security Associations (1 up, 0 connecting):

I have configured Strongswam Ipsec vpn tunnel in my Ubuntu server trying to connect to company xxx with ip 40.204.128.170, 40.204.152.238 port 10501 and 40.204.152.232 port 8001 Security Associations (...
0
votes
0answers
24 views

No ping on StrongSwan IPSec in HMAC-SHA256, ping works in HMAC-SHA1

I have the following situation: I set up an IPSec tunnel between Ubuntu and Embedded Linux system according to the configuration below. I start IPSec and a tunnel established successfully with HMAC-...
0
votes
1answer
40 views

Connection to server works fine but clients cannot access internet

I am trying to setup a stronSwan server on Debian buster following a guide I wrote for stretch. The connection to the server works fine but clients cannot access the internet. What am I missing? ...
0
votes
1answer
218 views

IKEv1 phase 2 fails with NO_PROPOSAL_CHOSEN but ESP proposal is correct. What else could cause this to fail?

Trying to troubleshoot an IPSec/IKEv1 VPN connection with Strongswan that is failing to complete phase 2 with NO_PROPOSAL_CHOSEN. I know the solution for this error is nearly always "double-check ...
0
votes
1answer
32 views

What could cause “Selected peer config inacceptable” errors bringing up VPN with strongswan?

Trying to use Strongswan to connect to a work VPN and getting "selected peer config inacceptable" errors in the logs which I haven't been able to find any info on in Google: ~$ sudo ipsec up VDI ...
0
votes
0answers
26 views

IPTABLES with IPSEC

I'm a little bit confused. I'm trying to establish 2 VPN using strongswan as shown below (Host1)IP1 == (NAT1)PublicIP1 ===Internet=== PublicIP2(Ubuntu)IP2 ==MPLS== IP3(Ubuntu)IP4 IP1/2/3/4 are ...
0
votes
0answers
96 views

IKEv2 Need a small help on Strongswan

I'm trying to create an IKEv2 Strongswan VPN server (U5.7.2/K5.3.0-42-generic) since two days on my personnal VPS (Ubuntu 19.10) to make some tests before implement it on the Unifi equipment of my ...
0
votes
0answers
41 views

How do I convert this connect FortiClient to Strongswan?

How do I convert this connect FortiClient to strongswan? Hello, I am trying to set the following Forticlient data that I have on Windows to Linux with Strongswan. --FortiClient VPN IPsec Remote ...
0
votes
0answers
46 views

IPSec + IKEv2 with Pre-Shared Key between Open vSwitch and pfSense

I have a simple network made of an Open vSwitch Ubuntu Server-based virtual machine connected to a pfSense firewall. I would like to connect this two with an IPSec + IKEv2 secure tunnel. {10.2.2.0/24}...
1
vote
2answers
103 views

Algo VPN strongSwan client “no issuer certificate found”

I set up an Algo VPN instance on AWS Lightsail using the official Ansible playbook. I can establish the VPN connection using Wireguard, however I cannot get it to work with strongSwan. I configured ...
0
votes
1answer
100 views

Setting up Strongswan site to site VPN on Google Cloud instance

I've installed Strongswan on 2 Google Debian instances in separate projects (actually separate accounts) so there's no route between them on the internal ip's. Ultimately I need to allow VPN ...
0
votes
0answers
49 views

Strongswan Centos 7 Config Issue

I have a problem with configuring Strongswan on Centos 7 ! First please notice that I want to connect with only username and password and I don't want to import any profiles on my phone ! My server ip ...
0
votes
0answers
26 views

User can't connect to Strongswan IKEv2 VPN server Firewall issue

Guys I have installed Strongswan on my ubuntu 16 server with help of this tutorial : https://molchanoff.me/administration/ikev2-vpn-server-with-strongswan-and-lets-encrypt/ But when a user wants to ...
0
votes
0answers
34 views

Strongswan username and password authentication

Guys I need to set up strongswan to use username and password for connecting instead of certificate! Anyone knows how this is done?
4
votes
1answer
439 views

networkmanager-strongswan vpn - routing specific ip through VPN

I'm trying to setting a VPN on Linux Mint 19.2. I'm using the network-manager-strongswan so I added this file named VPN under /etc/NetworkManager/system-connections/ [connection] id=VPN uuid=...
0
votes
0answers
44 views

Stongswan IPsec acceleration support for Intel Quick Assist Technology

I have been trying to accelerate the speed of IPsec connection between two VMS (using QAT VFs) on a DELL node with 3 QAT devices (C62xx). Is there any default support for QAT in Stongswan IPSec? Also, ...
0
votes
0answers
41 views

convert esp-3des esp-sha-hmac for strongswan config

I am having problems with the correct config in strongswan for "esp-3des esp-sha-hmac". I have tried esp = 3des-sha esp = 3des-sha! can any assist with the correct esp config?
0
votes
0answers
97 views

Is this a server, config, or user issue?

I'm having some trouble with my VPN connection. First off, I'm on a Nokia 3.1 running Android 9 and using strongswan for a IKEv2/EAP connection. I've searched the strongswan site front and back and ...
0
votes
0answers
543 views

Clients unable to connect to StrongSwan IKEv2 VPN Server using modems

I have a StrongSwan vpn server running on an ubuntu 18 machine. Everything is fine as long as clients connect using their mobile data. But when they try to connect from a modem (Either using a cable ...
0
votes
1answer
22 views

strongswan ikev2 connect to the same server

I have a strongswan ikev2 vpn installed on my server. With my win10 laptop I can connect to the vpn and and connect to everything via vpn. But how can I connect to my server? I have a service on a ...
0
votes
0answers
43 views

IPSec connection between AWS VPC and Strongswan

I'm trying to implement a connection between Amazon VPC and Strongswan. The first problem i got into is error while i'm bringing up the linux VTI interface up. I want to make a route-based Ipsec VPN. ...
0
votes
0answers
347 views

How do I send the responder identity correctly in an IKEv2 site-to-site PSK vpn setup with Strongswan?

I'm trying to set up an IKEv2 site-to-site PSK vpn setup with legacy Strongswan /etc/ipsec.conf config setup charondebug="all" uniqueids=no strictcrlpolicy=no conn ikev2-vpn auto=add ...
0
votes
1answer
149 views

Strongswan IPSEC Tunnel block traffic one way

I've set up a working Site to Site IPSEC Tunnel with strongswan on a debian 9 machine. However I have a requirement about how the traffic should work : The network on Site A can send packets to Site B ...
0
votes
1answer
230 views

How to add plugin strongswan on yocto ( embedder linux )

i know i missing some strongswan plugin, depending on your configuration. especially plugin eap-... but with this file .bb i don't know how to add plugin on strongswan. if you have ideal. Thank you ...
1
vote
1answer
81 views

How can I suppress the Old Runlevel warning while installing Strongswan

When I install strongswan and dependent packages using apt install, I get the following warning prompt: This inhibits me from installing strongswan through an automated unattended install script. ...
0
votes
0answers
179 views

Why Windows 10 doesn't connect to VPN IKEv2?

I created Strongswan, on my Centos system, with IPsec and ikev2. I want to connect to this VPN my Windows 10 clients. But when I'm connecting to the VPN my Windows 10 clients only send packets, do ...
0
votes
1answer
412 views

IKEV2 IPSEC Autostart, restart, daemon

I use strongswan for IKEV2 and IPSEC. And i don't know how to keep it updated, and running on change restart etc. For starting service i use: systemctl status strongswan Afer that i need to type ...

1
2 3 4 5
7