IPSec is a method to provide internet security over the layer 3 of the OSI model.

learn more… | top users | synonyms

0
votes
0answers
10 views

IPsec on a LAN without a VPN

I'd like to set up layer 2 authentication and encryption for a LAN via IPsec, without having to run a VPN endpoint. Essentially the goal is a point-to-point setup where traffic between configured ...
1
vote
0answers
12 views

Zywall IPSEC config for remote shares using ipsecuritas

I have a Zywall USG 20 using IPsec. It works and connects fine however I can only access the zywall its self. Traffic does not route to other computers on the subnet. In my case I need to access linux ...
0
votes
1answer
39 views

Can't connect to IPSec VPN via D-Link DIR-100 router

I am trying to connect to VPN via Cisco Systems VPN Client with IPSec/UDP transport, but I am getting error: Secure VPN Connection terminated locally by the Client. Reason 412: The remote peer ...
0
votes
0answers
76 views

Issue with setting up IPSec VPN in host-to-network mode

I have set up IPSec VPN using OpenSwan on CentOS 6.5. But not able to get the tunnel up and running. When site B tries to ping my VPS (site A), they get following error: Feb 26 11:33:59 [IKEv1 ...
0
votes
0answers
43 views

Block web sites for VPN clients

I installed IPSEC L2TP VPN Server on Ubuntu 12 x86 vps machine. I want to block some web sites for clients connected to VPN Server. So, changed hosts file in Ubuntu to block accessing unwanted web ...
0
votes
0answers
29 views

Why (sometimes) I cannot access ubuntu server from IPSec client

My home network topology is: [My laptop] ipsec ip: one of 10.0.0.0/24, internet ip is dynamic from ISP | | <-- internet --> | [My router] running openwrt, LAN ip is: 192.168.1.1, ...
1
vote
0answers
25 views

Why doesn't Linux IPSec implementation support fragmentation before encryption? [closed]

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...
0
votes
1answer
109 views

How to block all but a specific list of IP addresses on a given port using IPSEC on Windows?

I have a list of IP addresses. L={x.x.x.x,y.y.y.y,...etc} I want to block all IP addresses except for the ones in the above list. How to do using IPSEC commands in windows machine? I tried to ...
0
votes
1answer
53 views

Do all hosts and nodes in a Broadcast domain have to have the same MTU value?

Some documents on the Internet say that all interfaces in a broadcast domain ( ie Router boundaries ) have to have the same MTU value. Is that an inflexible rule ? But what about my roaming laptop ...
0
votes
0answers
93 views

Linux IPsec VPN w/ racoon: Routing traffic into the internet

I'm currently setting up a VPN for my iPad to use when I'm traveling. Here's some basic info (if you need more details, just leave a comment, I will extend the question with the details): An OpenVZ ...
0
votes
1answer
40 views

Why IPSec ESP needs NAT-T

I understand why it is not possible to use IPSec AH over a NAT server, since the IP header is included in the MAC too. But I am confused about ESP with Authentication (I am talking about tunnel mode, ...
1
vote
0answers
202 views

Route all traffic through IPSEC tunnel

I'm using Strongswan on CentOS as IPSEC VPN server. Is possible to tell client (win7) to route all traffic through tunnel interface after tunnel is up? Here is my ipsec.conf config setup conn ...
0
votes
0answers
103 views

IP Tunnel / VPN / IPSec How to on CentOS/RHEL

I'm trying to connect two LANs that can't directly connect to each other through a bridge that can be accessed by both LANs. Here is the scenario: LAN #1 is on 192.168.0.x at location X and cannot ...
0
votes
0answers
67 views

Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN

I have two ubuntu 12.04 32 Bit PCs between which I want IPSec Tunnel to be setup. I have setup ipsec in both systems and ipsec verify runs fine on both. Since I have no prior experience of openswan, I ...
1
vote
0answers
895 views

Can someone help me understand ALG and VPN settings on my router?

I'm looking at the settings in my TP-LINK WDR4300 router and noticed settings for VPN passthrough and ALG. Every single option is enabled but I am hoping someone can help me understand these settings ...
2
votes
1answer
524 views

Remote Access VPN on Cisco IOS doesn't complete phase 1

I have successfully configured my Cisco router to create a VPN tunnel to Azure. This is working fine. Now I am trying to add a remote access VPN for clients. I want to use IPsec and not PPTP. I'm not ...
0
votes
0answers
70 views

Encrypted connection in LAN

I want to established secure (encrypted) connection between four machines in local area network. I'm training on my notebook and virtual machine under VMWare Workstation control, both are with Windows ...
0
votes
0answers
33 views

IPSec on Windows 8 - filter IP range to go through VPN

I've found how to wither make all routes go through the VPN tunnel (default) or none (by unticking the 'Use default gateway on remote network'). But how do I specify that only a certain range should ...
2
votes
2answers
4k views

ipsec configuration problems on Ubuntu. Errors on IP forwarding" connection authorization from Android client

I'm trying to create a L2TP/IPSec PSK VPN from my Android phone to my Ubuntu server on my home network. I am receiving two errors. the first one is a failure checking IP forwarding when I run ipsec ...
2
votes
1answer
827 views

IPsec in the Linux Kernel

I have some issues (questions) related tot the Linux Kernel implementation of IPsec and it's user-space interface. The biggest question is which is the actual official project for the Linux Kernel ...
0
votes
0answers
56 views

SCEP trustpoint equivalent for ipsec scepclient

I can't seem to wrap my mind around what exactly the cisco reference to a trustpoint is, as pertains to a scep request. I am trying to perform this request on a ubiquiti edgerouter which has ...
0
votes
0answers
666 views

IPSec VPN between Astaro Sophos and SonicWALL

I'm trying to connect an Astaro Sophos ASG220 appliance v8 with a SonicWALL TZ 215 For some reason that escapes me the tunnel, named "Dev-VPN", fails to establish. Perhaps someone here can make ...
0
votes
0answers
37 views

2 simultaneous VPNs to 2 different nodes

I am planning to setup Ipsec tunnels between a single server (server1) and two security gateways (seg1 and seg2).The setup should be like this: server1 -----ipsec tunnel1-------->seg1 server1 ...
0
votes
0answers
380 views

cisco ipsec vpn of maverick does not work

I want to connect to my company network through my macbook pro which runs osx 10.9. And I have the right configuration which runs perfectly well in windows. I use the osx's built in cisco IPSec vpn ...
0
votes
0answers
144 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
147 views

Is there any way of extracting a shared secret from a PBK file or a similar artefact from a Windows 7 installation?

My company's laptop comes with preconfigured VPN connections to access the company's network. The default setup of the laptop is a bit outdated to say the least and I was wondering if in some cases I ...
4
votes
1answer
4k views

L2TP/IPSec stopped working after openssl upgrade

VPN connections from my MacBook / iOS devices to a Debian server having openswan / xl2tp were working just fine until I used apt-get to upgrade everything due to openssl heartbleed announcement. Now ...
1
vote
2answers
1k views

IPSec with or without L2TP?

I'm referring to this question. And to be clear: This is really not about the old PPTP vs L2TP debate. ;-) I successfully set up racoon as an IKE server without any L2TP implementation running and it ...
0
votes
1answer
264 views

Make ICMP exempt from IPSec protection

I'm reading a reference book on Microsoft DirectAccess. It contains the quote: To use Ping as a troubleshooting tool, ensure that Internet Control Message Protocol (ICMP) is exempt from IPSec ...
0
votes
0answers
155 views

IPSec Policy Is Blocking 127.0.0.1

I created an IPSec policy on Windows 8.1, it's purpose was to allow only traffic that goes via the VPN, everything else should be blocked (except LAN and 127.0.0.1). LAN is working fine, but 127.0.0.1 ...
0
votes
1answer
39 views

Can I run a VPN server with certificates only, and no password/pre-shared keys?

I've seen several writeups around discussing VPN server configuration. In all of them, there are 2 or 3 pre-shared keys / passwords used at various levels of the tunnel -- one for IPSec, one for ...
2
votes
0answers
582 views

How can I set an IPsec ID using the Windows 8 built-in VPN client?

I'm trying to connect to a VPN using the built in Windows 8 VPN client. The VPN uses L2TP/IPsec and a pre-shared key. I can see it's connecting to the VPN but not making it through authentication. I ...
0
votes
1answer
595 views

In Windows, Is there any way to connect to IKEv1 IPSec server, without using L2TP tunnel?

My server uses StrongSwan to host an IPSec server using IKEv1. Platforms such as Android, iOS, MacOS natively support IPSec connection without using external client application. Windows 7 and 8 seem ...
0
votes
1answer
128 views

Logging VPN Traffic (L2TP/IPSec on Ubuntu)

I'm running a small, private VPN server for me and 2-3 other people. For bandwidth monitoring, and to comply with any possible DMCA or other government (re: new Canadian law) requests, I want to have ...
0
votes
0answers
449 views

Automatically reconnect Openswan/IPSec VPN and disallow intermittent traffic?

I am trying to connect two Debian machines running an Openswan/IPSec tunnel. Also, I want to disallow any traffic when the tunnel goes down. For that purpose I wrote a script the fiddles with routes ...
0
votes
0answers
152 views

Slow SCP tranfers over IPv6 VPN IPSec which has IPv4 private subnets

I have 2 hosts connected with IPv6 VPN. I am using IPv4 internal addresses for machines connected internally and use subnets addressed for these in ipv4. When a host wants to scp a 1 Gig file pull ...
0
votes
1answer
831 views

How is it possible that I can't login to various websites when using a VPN at a public Wi-Fi? That same VPN is just fine when connected from home

This is a full IPSec tunnel provided by my university. I use this VPN at home and at public Wi-Fi cafés. For some reason, I am not able to login to most websites while using the VPN at this specific ...
0
votes
1answer
278 views

VPN ipsec tunnel from router to single windows server computer (gateway-to-host)

Firstly, is this possible? The situation: 2 different ISP's. One has several servers and a firewall running. The other is limited to only one virtual server with one network card running windows ...
0
votes
1answer
2k views

Strongswan IPSEC VPN for Windows 7 road warrior config

Following the Strongswan wiki link for configuring Strongswan for Windows 7 clients: http://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig I used the sample files as-is with no ...
0
votes
0answers
3k views

Openswan l2tp ipsec vpn on Ubuntu 13.04 for remote access (Android road warrior). Does not work

I followed the directions from here: http://samsclass.info/ipv6/proj/proj-L5-VPN-Server.html I used the same exact files as posted at that site. On my router, I have port-forwarded 500 UDP and 4500 ...
0
votes
1answer
931 views

Mikrotik IPSec VPN routing

I seem to be clueless at the routing with VPN. I am trying to setup an IPSec VPN tunnel so as to secure communication between my private LAN and a destination host. Any device within my private LAN ...
-1
votes
1answer
796 views

Is my VPN tunnel connected? Is my traffic going via the VPN tunnel? How do i verify this?

From RHEL i have to connect VPN server and reach that target PC1. Till now it was possible to make the VPN interconnect but 10.0.0.108 cant ping 10.109.0.200. Variables: ME WAN IP: 8.8.8.8 (Amazon ...
2
votes
1answer
4k views

Find the IPsec ID and Secret id for my vpn connection

Hi i'm using ubuntu and new to cisco vpn anyconnect client. I have installed it successfully and establish the connection by giving the user name and password. But it is showing the timeout error. So ...
2
votes
0answers
208 views

Forward IPsec tunnel from IPv4 endpoint to IPv6 endpoint

I have a new ISP and only have a Dual Stack - lite connection now. That means I can't access my router via IPv4 anymore, since the external IPv4 address is private. I have native IPv6 connectivity. ...
3
votes
1answer
236 views

VPN for Home to watch TV on the go

My ISP offers TV on tablets, phones, etc. where I have to use an app, but I still have to have that traffic flow through my modem. What would be the best solution to setting up a VPN for probably just ...
2
votes
1answer
3k views

Finally get my win 7 connected to strongSwan VPN, but there's no Internet

I believe I've followed all the instructions, and my win 7 did get connected, but there's no Internet. Background: Server OS: ubuntu 12.04 on linode xen VPS strongSwan Version: 4.6.4 ...
0
votes
1answer
813 views

How to set up NAT in windows server 2008 r2 for IPSec tunnel use

I am having troubles setting up the whole IPSec tunnel thing. What i have: 1. Router that only has a VPN/IPsec passthrough functionality (IP 192.168.0.1) 2. Windows Server 2008 R2 which has group ...
1
vote
3answers
4k views

IPsec VPN connection drops automatically every 47 mins

I'm using Cisco Systems VPN Client Version 5.0.07.0440 on Windows 7 Ultimate 64-bit to connect to a VPN server through IPSec/UDP. The problem is each time when it connects, I always get warnings in ...
2
votes
0answers
562 views

Cisco RV180 ipsec vpn to mac os x 10.8.2 default client Configuration

I would like to configure an IPSec VPN tunnel between my RV180 (server, last firmware) and my Mac OSX 10.8.2 laptop. I have little knowledge about VPN, and a bit more about network in general. I have ...
0
votes
2answers
3k views

Can't connect to pc using Remote Desktop over VPN with Domain user account only

Craziest thing. I can't seem to login to my pc at work using my domain credentials. I am using Remote Desktop with a Cisco VPN and have tried both Mac and Win 7 remote machines. It appears that I can ...