IPSec is a method to provide internet security over the layer 3 of the OSI model.

learn more… | top users | synonyms

0
votes
0answers
23 views

What is the TIME overhead for IPsec?

WHAT I NEED I am trying to determine the 1) TIME overhead and 2) stability of an IPsec connection. Assume tunnel mode with 128-bit AES encryption and 256-bit SHA1 HMAC verification/authentication. ...
0
votes
1answer
17 views

How do I configure ipsec and xl2tpd to not use compression when connecting to VPN?

I have two config files: ./etc/ppp/options.xl2tpd.myvpn_name ./etc/ipsec.d/myvpn_name.conf and somewhere in one of them I need to say "no compression" because I error I get is: Unsupported ...
0
votes
0answers
33 views

VPN Connection: Draytek Vigor 2820 Cannot Initiate IPSEC Tunnel

I have been asked to setup a site-to-site IPSEC VPN Tunnel from a Vigor 2820 (at the client's premises) to a Cisco ASA 5505 (hosted at Rackspace). I have input all of the details that Rackspace had ...
0
votes
1answer
33 views

How to safely open ports on home networks for testing purposes

I am trying to simulate a client/server scenario on my home network. To setup the socket connections, i require unused ports. For safety reasons these ports are closed. What criteria should be ...
-1
votes
1answer
18 views

leased line broadband speedup problems

i recently upgrade my broadband speed,i was using 1mbps connection that time i get only 125kbps file download speed from everywhere.now i'm using 1mbps leased line. which means i should get 1:1 ...
0
votes
1answer
10 views

How does IPsec operate in NAT environment?

I know that if you mess with IPsec header it will drop the packet and NAT is build exactly for that. How do they deploy IPsec where NAT is also needed.
0
votes
0answers
32 views

How do I configure an ESP SA for wireshark 2.0.2 to decrypt ? It doesn't seem to let me set up the SAs

I read detailed directions which do not correspond to what I see in ESP (Edit->Preferences->Protocols->ESP) I see ESP SAs [Edit..] but, clicking edit, I cannot edit. What is the trick ?
0
votes
0answers
74 views

Using tcpdump to check if IPsec is working

I'm using two virtual machines to test a IPsec connection between them using Openswan. I already installed and configured IPsec in both machines. But now I'm trying to test if the encrypted ...
0
votes
0answers
42 views

How to configure strongSwan to ignore certain domains using IKEv2?

I've set up a VPN using strongSwan that uses IKEv2. Now, I'd like to have the connection exclude certain IPs that I am trying to access (a.k.a. a split-exclude tunnel). Is there a simple way to do ...
0
votes
1answer
355 views

Have Site-To-Site (IPSEC) connected but cannot ping anything other than router

Just setup a new Azure subscription, and i'm stumped trying to troubleshoot why I can't ping any local VMWare machines from a Azure VM. After successfully setting up an IPSec Site-To-Site VPN. I am ...
0
votes
1answer
114 views

Does the traffic go through my company network when I browse when connected through SSL-VPN

I work for a company which is not in my country. The enterprise intranet is in a different country. We do not have many employees in my country - so everyone works from home. When we need intranet ...
0
votes
0answers
62 views

Secure settings for a personal OpenVPN IPSEC/L2TP server?

I'm trying to harden my personal server as much as possible. This is the first server I have managed, so I'm also using this as a learning experience. My setup so far: 4096 bit SSH keys SSH is on a ...
1
vote
0answers
49 views

Amazon VPC one way communication issue [closed]

I have 2 sites. 1 - Amazon China: 10.50.0.0/23 with a few instances and one which is assigned with both a public and a private address (let's call it China-GW). This instance has been installed with ...
0
votes
0answers
100 views

Ubuntu Openswan VPN L2TP over IPSEC Local Network Traffic not encrypted

i use L2TP over Ipsec with the openswan implementation on Ubuntu 14.04. My VPN configuration works well. The traffic to external sites is encrypted by the ipsec tunnel as expected. But my problem is ...
0
votes
0answers
101 views

L2TP over IPsec VPN on Red Hat 6.5

I need to connect a Red Hat 6.5 desktop to a L2TP over IPsec VPN.  (I know the IP address of the VPN server, a user name and the corresponding password.) I can make a successful connection from ...
1
vote
1answer
39 views

Windows Firewall with secure connection - ipsec

I am trying to set up host based firewall rules with machine authentication to ensure that only certain machines (regardless of IP...in DHCP environment) can access the target machine. That is, I am ...
0
votes
0answers
154 views

Connect to L2TP/IPsec (username/password/PSK) on cmd.exe

How may I connect to VPN using the username, password and PSK combo in the command line? Google has been of no help; any guidance will be most welcome. I want a command to the effect of vpnclient /...
0
votes
0answers
65 views

IPSec transport encryption on Windows Advanced Firewall

On Windows Server 2012, what is the way of enabling IPSec encryption (transport mode) between two hosts, while still honoring the firewall allow/deny rules? There appear to be two IPSec configuration ...
0
votes
1answer
74 views

Strongswan IPSec to Amazon VPC going down randomly

I got established connection between Amazon VPC and my site using strongswan. I followed documentation from Amazon. Tunnel can be established and is running but is going down randomly if I can say. ...
0
votes
0answers
50 views

Routing Traffic to IPSec

I set up an IPSec/L2TP connection. It operates in transport mode and the server acts as a gateway to the network behind the server. You can see my configuration here. I think I have a routing problem ...
0
votes
0answers
470 views

IPSec Connection established but no IP-Traffic going through with OS X client

I've got a problem that's driving me nuts! I'm at my girlfriend's house here in California. She's got a Time-Warner-Cable internet connection with a Technicolor TC8715D cable modem/router. The built-...
0
votes
0answers
49 views

How to connect to a iOS/OSX IPSec VPN from Windows 8.1?

So I have a VPN server that I can successfully connect with iOS and OS X. I am trying to figure out how to connect to it with Windows 8.1 (64bit). I have following info about the VPN server: Type ...
1
vote
1answer
37 views

Linux box as network gateway changes source address

I have a Ubuntu Server box(A) with an IPSec tunnel to another datacenter(AWS, through a VPC VPN). The tunnel is fine and I can ping the other side of the tunnel. The problem is when I try to ...
0
votes
1answer
104 views

IPSec tunneling mode vs transport mode vs transport+L2TP

According to many docs, transport mode should be used in host-to-host IPSec, while tunneling is used to connect gateways and L2TP is used for remote access. But nothing prevents me from using ...
0
votes
1answer
15 views

Linux Server Virtual Networking

I have a Linux (CentOS 6) database test server which is often inaccessible so therefore a terrible way to test. I was wondering if anyone has any recommendations for remote access to the server ...
1
vote
1answer
2k views

Error 809 when trying to connect Windows 7 with IPsec

Using IPFire 2.17 Core 89 as the IPsec-server, Windows 7 shows the error message "Error 809: The network connection between your computer and the VPN could not be established because the remote server ...
1
vote
0answers
180 views

Zywall IPSEC config for remote shares using ipsecuritas

I have a Zywall USG 20 using IPsec. It works and connects fine however I can only access the zywall its self. Traffic does not route to other computers on the subnet. In my case I need to access linux ...
0
votes
1answer
140 views

Can't connect to IPSec VPN via D-Link DIR-100 router

I am trying to connect to VPN via Cisco Systems VPN Client with IPSec/UDP transport, but I am getting error: Secure VPN Connection terminated locally by the Client. Reason 412: The remote peer ...
2
votes
0answers
528 views

Issue with setting up IPSec VPN in host-to-network mode

I have set up IPSec VPN using OpenSwan on CentOS 6.5. But not able to get the tunnel up and running. When site B tries to ping my VPS (site A), they get following error: Feb 26 11:33:59 [IKEv1 DEBUG]...
0
votes
0answers
200 views

Block web sites for VPN clients

I installed IPSEC L2TP VPN Server on Ubuntu 12 x86 vps machine. I want to block some web sites for clients connected to VPN Server. So, changed hosts file in Ubuntu to block accessing unwanted web ...
1
vote
0answers
120 views

Why doesn't Linux IPSec implementation support fragmentation before encryption? [closed]

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...
0
votes
1answer
534 views

How to block all but a specific list of IP addresses on a given port using IPSEC on Windows?

I have a list of IP addresses. L={x.x.x.x,y.y.y.y,...etc} I want to block all IP addresses except for the ones in the above list. How to do using IPSEC commands in windows machine? I tried to ...
0
votes
1answer
90 views

Do all hosts and nodes in a Broadcast domain have to have the same MTU value?

Some documents on the Internet say that all interfaces in a broadcast domain ( ie Router boundaries ) have to have the same MTU value. Is that an inflexible rule ? But what about my roaming laptop ...
0
votes
1answer
96 views

Why IPSec ESP needs NAT-T

I understand why it is not possible to use IPSec AH over a NAT server, since the IP header is included in the MAC too. But I am confused about ESP with Authentication (I am talking about tunnel mode, ...
1
vote
0answers
1k views

Route all traffic through IPSEC tunnel

I'm using Strongswan on CentOS as IPSEC VPN server. Is possible to tell client (win7) to route all traffic through tunnel interface after tunnel is up? Here is my ipsec.conf config setup conn %...
1
vote
0answers
5k views

Can someone help me understand ALG and VPN settings on my router?

I'm looking at the settings in my TP-LINK WDR4300 router and noticed settings for VPN passthrough and ALG. Every single option is enabled but I am hoping someone can help me understand these settings ...
2
votes
1answer
2k views

Remote Access VPN on Cisco IOS doesn't complete phase 1

I have successfully configured my Cisco router to create a VPN tunnel to Azure. This is working fine. Now I am trying to add a remote access VPN for clients. I want to use IPsec and not PPTP. I'm not ...
3
votes
2answers
11k views

ipsec configuration problems on Ubuntu. Errors on IP forwarding" connection authorization from Android client

I'm trying to create a L2TP/IPSec PSK VPN from my Android phone to my Ubuntu server on my home network. I am receiving two errors. the first one is a failure checking IP forwarding when I run ipsec ...
5
votes
1answer
4k views

IPsec in the Linux Kernel

I have some issues (questions) related tot the Linux Kernel implementation of IPsec and it's user-space interface. The biggest question is which is the actual official project for the Linux Kernel ...
0
votes
0answers
41 views

2 simultaneous VPNs to 2 different nodes

I am planning to setup Ipsec tunnels between a single server (server1) and two security gateways (seg1 and seg2).The setup should be like this: server1 -----ipsec tunnel1-------->seg1 server1 ----...
0
votes
0answers
245 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
377 views

Is there any way of extracting a shared secret from a PBK file or a similar artefact from a Windows 7 installation?

My company's laptop comes with preconfigured VPN connections to access the company's network. The default setup of the laptop is a bit outdated to say the least and I was wondering if in some cases I ...
5
votes
1answer
5k views

L2TP/IPSec stopped working after openssl upgrade

VPN connections from my MacBook / iOS devices to a Debian server having openswan / xl2tp were working just fine until I used apt-get to upgrade everything due to openssl heartbleed announcement. Now ...
2
votes
2answers
3k views

IPSec with or without L2TP?

I'm referring to this question. And to be clear: This is really not about the old PPTP vs L2TP debate. ;-) I successfully set up racoon as an IKE server without any L2TP implementation running and it ...
0
votes
1answer
649 views

Make ICMP exempt from IPSec protection

I'm reading a reference book on Microsoft DirectAccess. It contains the quote: To use Ping as a troubleshooting tool, ensure that Internet Control Message Protocol (ICMP) is exempt from IPSec ...
0
votes
0answers
245 views

IPSec Policy Is Blocking 127.0.0.1

I created an IPSec policy on Windows 8.1, it's purpose was to allow only traffic that goes via the VPN, everything else should be blocked (except LAN and 127.0.0.1). LAN is working fine, but 127.0.0.1 ...
0
votes
1answer
49 views

Can I run a VPN server with certificates only, and no password/pre-shared keys?

I've seen several writeups around discussing VPN server configuration. In all of them, there are 2 or 3 pre-shared keys / passwords used at various levels of the tunnel -- one for IPSec, one for L2TP,...
3
votes
0answers
830 views

How can I set an IPsec ID using the Windows 8 built-in VPN client?

I'm trying to connect to a VPN using the built in Windows 8 VPN client. The VPN uses L2TP/IPsec and a pre-shared key. I can see it's connecting to the VPN but not making it through authentication. I ...
0
votes
1answer
226 views

Logging VPN Traffic (L2TP/IPSec on Ubuntu)

I'm running a small, private VPN server for me and 2-3 other people. For bandwidth monitoring, and to comply with any possible DMCA or other government (re: new Canadian law) requests, I want to have ...
0
votes
0answers
1k views

Automatically reconnect Openswan/IPSec VPN and disallow intermittent traffic?

I am trying to connect two Debian machines running an Openswan/IPSec tunnel. Also, I want to disallow any traffic when the tunnel goes down. For that purpose I wrote a script the fiddles with routes ...