IPSec is a method to provide internet security over the layer 3 of the OSI model.

learn more… | top users | synonyms

-1
votes
0answers
7 views

Looking for reliable VPS hosting with managed L2TP/IPSEC vpn

I'm looking for a reliable/known host that can provide VPS with possibility to connect to my local onsite VPN over L2TP/IPSEC without the need to install anything for it, the VPN tunnel needs to be ...
0
votes
0answers
10 views

Secure settings for a personal OpenVPN IPSEC/L2TP server?

I'm trying to harden my personal server as much as possible. This is the first server I have managed, so I'm also using this as a learning experience. My setup so far: 4096 bit SSH keys SSH is on a ...
1
vote
0answers
40 views

Amazon VPC one way communication issue [closed]

I have 2 sites. 1 - Amazon China: 10.50.0.0/23 with a few instances and one which is assigned with both a public and a private address (let's call it China-GW). This instance has been installed with ...
0
votes
0answers
58 views

Ubuntu Openswan VPN L2TP over IPSEC Local Network Traffic not encrypted

i use L2TP over Ipsec with the openswan implementation on Ubuntu 14.04. My VPN configuration works well. The traffic to external sites is encrypted by the ipsec tunnel as expected. But my problem is ...
0
votes
0answers
36 views

L2TP over IPsec VPN on Red Hat 6.5

I need to connect a Red Hat 6.5 desktop to a L2TP over IPsec VPN.  (I know the IP address of the VPN server, a user name and the corresponding password.) I can make a successful connection from ...
1
vote
1answer
24 views

Windows Firewall with secure connection - ipsec

I am trying to set up host based firewall rules with machine authentication to ensure that only certain machines (regardless of IP...in DHCP environment) can access the target machine. That is, I am ...
0
votes
0answers
61 views

Connect to L2TP/IPsec (username/password/PSK) on cmd.exe

How may I connect to VPN using the username, password and PSK combo in the command line? Google has been of no help; any guidance will be most welcome. I want a command to the effect of vpnclient ...
0
votes
0answers
27 views

IPSec transport encryption on Windows Advanced Firewall

On Windows Server 2012, what is the way of enabling IPSec encryption (transport mode) between two hosts, while still honoring the firewall allow/deny rules? There appear to be two IPSec configuration ...
0
votes
1answer
37 views

Strongswan IPSec to Amazon VPC going down randomly

I got established connection between Amazon VPC and my site using strongswan. I followed documentation from Amazon. Tunnel can be established and is running but is going down randomly if I can say. ...
0
votes
0answers
32 views

Routing Traffic to IPSec

I set up an IPSec/L2TP connection. It operates in transport mode and the server acts as a gateway to the network behind the server. You can see my configuration here. I think I have a routing problem ...
0
votes
0answers
392 views

IPSec Connection established but no IP-Traffic going through with OS X client

I've got a problem that's driving me nuts! I'm at my girlfriend's house here in California. She's got a Time-Warner-Cable internet connection with a Technicolor TC8715D cable modem/router. The ...
0
votes
0answers
40 views

How to connect to a iOS/OSX IPSec VPN from Windows 8.1?

So I have a VPN server that I can successfully connect with iOS and OS X. I am trying to figure out how to connect to it with Windows 8.1 (64bit). I have following info about the VPN server: Type ...
1
vote
1answer
31 views

Linux box as network gateway changes source address

I have a Ubuntu Server box(A) with an IPSec tunnel to another datacenter(AWS, through a VPC VPN). The tunnel is fine and I can ping the other side of the tunnel. The problem is when I try to ...
0
votes
0answers
226 views

racoon IPSec/L2TP Client

I try to configure a racoon IPSec/L2TP client to connect a Windows 2003 server. The server is originally intended to be used with Windows XP clients (successfully tested with Windows XP SP3 but ...
0
votes
0answers
24 views

Getting Error 800 Trying to Connect to VPN connection set up on Zyzel USG110

We're using Zyxel USG110 Firewall. I've setup VPN connection on the firewall using the following settings: VPN Gateway * L2TP_GW (for client l2tp connections) - My Address => Interface: wan1 - ...
0
votes
1answer
82 views

IPSec tunneling mode vs transport mode vs transport+L2TP

According to many docs, transport mode should be used in host-to-host IPSec, while tunneling is used to connect gateways and L2TP is used for remote access. But nothing prevents me from using ...
0
votes
1answer
15 views

Linux Server Virtual Networking

I have a Linux (CentOS 6) database test server which is often inaccessible so therefore a terrible way to test. I was wondering if anyone has any recommendations for remote access to the server ...
1
vote
1answer
987 views

Error 809 when trying to connect Windows 7 with IPsec

Using IPFire 2.17 Core 89 as the IPsec-server, Windows 7 shows the error message "Error 809: The network connection between your computer and the VPN could not be established because the remote server ...
0
votes
0answers
45 views

IPsec on a LAN without a VPN

I'd like to set up layer 2 authentication and encryption for a LAN via IPsec, without having to run a VPN endpoint. Essentially the goal is a point-to-point setup where traffic between configured ...
1
vote
0answers
133 views

Zywall IPSEC config for remote shares using ipsecuritas

I have a Zywall USG 20 using IPsec. It works and connects fine however I can only access the zywall its self. Traffic does not route to other computers on the subnet. In my case I need to access linux ...
0
votes
1answer
113 views

Can't connect to IPSec VPN via D-Link DIR-100 router

I am trying to connect to VPN via Cisco Systems VPN Client with IPSec/UDP transport, but I am getting error: Secure VPN Connection terminated locally by the Client. Reason 412: The remote peer ...
2
votes
0answers
288 views

Issue with setting up IPSec VPN in host-to-network mode

I have set up IPSec VPN using OpenSwan on CentOS 6.5. But not able to get the tunnel up and running. When site B tries to ping my VPS (site A), they get following error: Feb 26 11:33:59 [IKEv1 ...
0
votes
0answers
145 views

Block web sites for VPN clients

I installed IPSEC L2TP VPN Server on Ubuntu 12 x86 vps machine. I want to block some web sites for clients connected to VPN Server. So, changed hosts file in Ubuntu to block accessing unwanted web ...
0
votes
0answers
76 views

Why (sometimes) I cannot access ubuntu server from IPSec client

My home network topology is: [My laptop] ipsec ip: one of 10.0.0.0/24, internet ip is dynamic from ISP | | <-- internet --> | [My router] running openwrt, LAN ip is: 192.168.1.1, ...
1
vote
0answers
76 views

Why doesn't Linux IPSec implementation support fragmentation before encryption? [closed]

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...
0
votes
1answer
375 views

How to block all but a specific list of IP addresses on a given port using IPSEC on Windows?

I have a list of IP addresses. L={x.x.x.x,y.y.y.y,...etc} I want to block all IP addresses except for the ones in the above list. How to do using IPSEC commands in windows machine? I tried to ...
0
votes
1answer
86 views

Do all hosts and nodes in a Broadcast domain have to have the same MTU value?

Some documents on the Internet say that all interfaces in a broadcast domain ( ie Router boundaries ) have to have the same MTU value. Is that an inflexible rule ? But what about my roaming laptop ...
0
votes
1answer
86 views

Why IPSec ESP needs NAT-T

I understand why it is not possible to use IPSec AH over a NAT server, since the IP header is included in the MAC too. But I am confused about ESP with Authentication (I am talking about tunnel mode, ...
1
vote
0answers
775 views

Route all traffic through IPSEC tunnel

I'm using Strongswan on CentOS as IPSEC VPN server. Is possible to tell client (win7) to route all traffic through tunnel interface after tunnel is up? Here is my ipsec.conf config setup conn ...
1
vote
0answers
4k views

Can someone help me understand ALG and VPN settings on my router?

I'm looking at the settings in my TP-LINK WDR4300 router and noticed settings for VPN passthrough and ALG. Every single option is enabled but I am hoping someone can help me understand these settings ...
2
votes
1answer
2k views

Remote Access VPN on Cisco IOS doesn't complete phase 1

I have successfully configured my Cisco router to create a VPN tunnel to Azure. This is working fine. Now I am trying to add a remote access VPN for clients. I want to use IPsec and not PPTP. I'm not ...
3
votes
2answers
9k views

ipsec configuration problems on Ubuntu. Errors on IP forwarding" connection authorization from Android client

I'm trying to create a L2TP/IPSec PSK VPN from my Android phone to my Ubuntu server on my home network. I am receiving two errors. the first one is a failure checking IP forwarding when I run ipsec ...
5
votes
1answer
3k views

IPsec in the Linux Kernel

I have some issues (questions) related tot the Linux Kernel implementation of IPsec and it's user-space interface. The biggest question is which is the actual official project for the Linux Kernel ...
0
votes
0answers
38 views

2 simultaneous VPNs to 2 different nodes

I am planning to setup Ipsec tunnels between a single server (server1) and two security gateways (seg1 and seg2).The setup should be like this: server1 -----ipsec tunnel1-------->seg1 server1 ...
0
votes
0answers
221 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
323 views

Is there any way of extracting a shared secret from a PBK file or a similar artefact from a Windows 7 installation?

My company's laptop comes with preconfigured VPN connections to access the company's network. The default setup of the laptop is a bit outdated to say the least and I was wondering if in some cases I ...
5
votes
1answer
5k views

L2TP/IPSec stopped working after openssl upgrade

VPN connections from my MacBook / iOS devices to a Debian server having openswan / xl2tp were working just fine until I used apt-get to upgrade everything due to openssl heartbleed announcement. Now ...
2
votes
2answers
2k views

IPSec with or without L2TP?

I'm referring to this question. And to be clear: This is really not about the old PPTP vs L2TP debate. ;-) I successfully set up racoon as an IKE server without any L2TP implementation running and it ...
0
votes
1answer
529 views

Make ICMP exempt from IPSec protection

I'm reading a reference book on Microsoft DirectAccess. It contains the quote: To use Ping as a troubleshooting tool, ensure that Internet Control Message Protocol (ICMP) is exempt from IPSec ...
0
votes
0answers
210 views

IPSec Policy Is Blocking 127.0.0.1

I created an IPSec policy on Windows 8.1, it's purpose was to allow only traffic that goes via the VPN, everything else should be blocked (except LAN and 127.0.0.1). LAN is working fine, but 127.0.0.1 ...
0
votes
1answer
48 views

Can I run a VPN server with certificates only, and no password/pre-shared keys?

I've seen several writeups around discussing VPN server configuration. In all of them, there are 2 or 3 pre-shared keys / passwords used at various levels of the tunnel -- one for IPSec, one for ...
3
votes
0answers
779 views

How can I set an IPsec ID using the Windows 8 built-in VPN client?

I'm trying to connect to a VPN using the built in Windows 8 VPN client. The VPN uses L2TP/IPsec and a pre-shared key. I can see it's connecting to the VPN but not making it through authentication. I ...
0
votes
1answer
189 views

Logging VPN Traffic (L2TP/IPSec on Ubuntu)

I'm running a small, private VPN server for me and 2-3 other people. For bandwidth monitoring, and to comply with any possible DMCA or other government (re: new Canadian law) requests, I want to have ...
0
votes
0answers
803 views

Automatically reconnect Openswan/IPSec VPN and disallow intermittent traffic?

I am trying to connect two Debian machines running an Openswan/IPSec tunnel. Also, I want to disallow any traffic when the tunnel goes down. For that purpose I wrote a script the fiddles with routes ...
0
votes
0answers
200 views

Slow SCP tranfers over IPv6 VPN IPSec which has IPv4 private subnets

I have 2 hosts connected with IPv6 VPN. I am using IPv4 internal addresses for machines connected internally and use subnets addressed for these in ipv4. When a host wants to scp a 1 Gig file pull ...
0
votes
1answer
1k views

How is it possible that I can't login to various websites when using a VPN at a public Wi-Fi? That same VPN is just fine when connected from home

This is a full IPSec tunnel provided by my university. I use this VPN at home and at public Wi-Fi cafés. For some reason, I am not able to login to most websites while using the VPN at this specific ...
0
votes
1answer
352 views

VPN ipsec tunnel from router to single windows server computer (gateway-to-host)

Firstly, is this possible? The situation: 2 different ISP's. One has several servers and a firewall running. The other is limited to only one virtual server with one network card running windows ...
0
votes
1answer
3k views

Strongswan IPSEC VPN for Windows 7 road warrior config

Following the Strongswan wiki link for configuring Strongswan for Windows 7 clients: http://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig I used the sample files as-is with no ...
0
votes
0answers
3k views

Openswan l2tp ipsec vpn on Ubuntu 13.04 for remote access (Android road warrior). Does not work

I followed the directions from here: http://samsclass.info/ipv6/proj/proj-L5-VPN-Server.html I used the same exact files as posted at that site. On my router, I have port-forwarded 500 UDP and 4500 ...
0
votes
1answer
1k views

Mikrotik IPSec VPN routing

I seem to be clueless at the routing with VPN. I am trying to setup an IPSec VPN tunnel so as to secure communication between my private LAN and a destination host. Any device within my private LAN ...