IPSec is a method to provide internet security over the layer 3 of the OSI model.

learn more… | top users | synonyms

0
votes
0answers
17 views

Routing Traffic to IPSec

I set up an IPSec/L2TP connection. It operates in transport mode and the server acts as a gateway to the network behind the server. You can see my configuration here. I think I have a routing problem ...
0
votes
0answers
54 views

IPSec Connection established but no IP-Traffic going through with OS X client

I've got a problem that's driving me nuts! I'm at my girlfriend's house here in California. She's got a Time-Warner-Cable internet connection with a Technicolor TC8715D cable modem/router. The ...
0
votes
0answers
17 views

How to connect to a iOS/OSX IPSec VPN from Windows 8.1?

So I have a VPN server that I can successfully connect with iOS and OS X. I am trying to figure out how to connect to it with Windows 8.1 (64bit). I have following info about the VPN server: Type ...
1
vote
1answer
23 views

Linux box as network gateway changes source address

I have a Ubuntu Server box(A) with an IPSec tunnel to another datacenter(AWS, through a VPC VPN). The tunnel is fine and I can ping the other side of the tunnel. The problem is when I try to ...
0
votes
0answers
97 views

racoon IPSec/L2TP Client

I try to configure a racoon IPSec/L2TP client to connect a Windows 2003 server. The server is originally intended to be used with Windows XP clients (successfully tested with Windows XP SP3 but ...
0
votes
0answers
13 views

Getting Error 800 Trying to Connect to VPN connection set up on Zyzel USG110

We're using Zyxel USG110 Firewall. I've setup VPN connection on the firewall using the following settings: VPN Gateway * L2TP_GW (for client l2tp connections) - My Address => Interface: wan1 - ...
0
votes
0answers
61 views

IPSec tunneling mode vs transport mode vs transport+L2TP

According to many docs, transport mode should be used in host-to-host IPSec, while tunneling is used to connect gateways and L2TP is used for remote access. But nothing prevents me from using ...
0
votes
1answer
15 views

Linux Server Virtual Networking

I have a Linux (CentOS 6) database test server which is often inaccessible so therefore a terrible way to test. I was wondering if anyone has any recommendations for remote access to the server ...
1
vote
1answer
344 views

Error 809 when trying to connect Windows 7 with IPsec

Using IPFire 2.17 Core 89 as the IPsec-server, Windows 7 shows the error message "Error 809: The network connection between your computer and the VPN could not be established because the remote server ...
0
votes
0answers
30 views

IPsec on a LAN without a VPN

I'd like to set up layer 2 authentication and encryption for a LAN via IPsec, without having to run a VPN endpoint. Essentially the goal is a point-to-point setup where traffic between configured ...
1
vote
0answers
82 views

Zywall IPSEC config for remote shares using ipsecuritas

I have a Zywall USG 20 using IPsec. It works and connects fine however I can only access the zywall its self. Traffic does not route to other computers on the subnet. In my case I need to access linux ...
0
votes
1answer
82 views

Can't connect to IPSec VPN via D-Link DIR-100 router

I am trying to connect to VPN via Cisco Systems VPN Client with IPSec/UDP transport, but I am getting error: Secure VPN Connection terminated locally by the Client. Reason 412: The remote peer ...
0
votes
0answers
160 views

Issue with setting up IPSec VPN in host-to-network mode

I have set up IPSec VPN using OpenSwan on CentOS 6.5. But not able to get the tunnel up and running. When site B tries to ping my VPS (site A), they get following error: Feb 26 11:33:59 [IKEv1 ...
0
votes
0answers
87 views

Block web sites for VPN clients

I installed IPSEC L2TP VPN Server on Ubuntu 12 x86 vps machine. I want to block some web sites for clients connected to VPN Server. So, changed hosts file in Ubuntu to block accessing unwanted web ...
0
votes
0answers
63 views

Why (sometimes) I cannot access ubuntu server from IPSec client

My home network topology is: [My laptop] ipsec ip: one of 10.0.0.0/24, internet ip is dynamic from ISP | | <-- internet --> | [My router] running openwrt, LAN ip is: 192.168.1.1, ...
1
vote
0answers
41 views

Why doesn't Linux IPSec implementation support fragmentation before encryption? [closed]

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...
0
votes
1answer
237 views

How to block all but a specific list of IP addresses on a given port using IPSEC on Windows?

I have a list of IP addresses. L={x.x.x.x,y.y.y.y,...etc} I want to block all IP addresses except for the ones in the above list. How to do using IPSEC commands in windows machine? I tried to ...
0
votes
1answer
72 views

Do all hosts and nodes in a Broadcast domain have to have the same MTU value?

Some documents on the Internet say that all interfaces in a broadcast domain ( ie Router boundaries ) have to have the same MTU value. Is that an inflexible rule ? But what about my roaming laptop ...
0
votes
0answers
132 views

Linux IPsec VPN w/ racoon: Routing traffic into the internet

I'm currently setting up a VPN for my iPad to use when I'm traveling. Here's some basic info (if you need more details, just leave a comment, I will extend the question with the details): An OpenVZ ...
0
votes
1answer
61 views

Why IPSec ESP needs NAT-T

I understand why it is not possible to use IPSec AH over a NAT server, since the IP header is included in the MAC too. But I am confused about ESP with Authentication (I am talking about tunnel mode, ...
1
vote
0answers
423 views

Route all traffic through IPSEC tunnel

I'm using Strongswan on CentOS as IPSEC VPN server. Is possible to tell client (win7) to route all traffic through tunnel interface after tunnel is up? Here is my ipsec.conf config setup conn ...
0
votes
0answers
173 views

IP Tunnel / VPN / IPSec How to on CentOS/RHEL

I'm trying to connect two LANs that can't directly connect to each other through a bridge that can be accessed by both LANs. Here is the scenario: LAN #1 is on 192.168.0.x at location X and cannot ...
0
votes
0answers
135 views

Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN

I have two ubuntu 12.04 32 Bit PCs between which I want IPSec Tunnel to be setup. I have setup ipsec in both systems and ipsec verify runs fine on both. Since I have no prior experience of openswan, I ...
1
vote
0answers
2k views

Can someone help me understand ALG and VPN settings on my router?

I'm looking at the settings in my TP-LINK WDR4300 router and noticed settings for VPN passthrough and ALG. Every single option is enabled but I am hoping someone can help me understand these settings ...
2
votes
1answer
1k views

Remote Access VPN on Cisco IOS doesn't complete phase 1

I have successfully configured my Cisco router to create a VPN tunnel to Azure. This is working fine. Now I am trying to add a remote access VPN for clients. I want to use IPsec and not PPTP. I'm not ...
0
votes
0answers
82 views

Encrypted connection in LAN

I want to established secure (encrypted) connection between four machines in local area network. I'm training on my notebook and virtual machine under VMWare Workstation control, both are with Windows ...
2
votes
2answers
6k views

ipsec configuration problems on Ubuntu. Errors on IP forwarding" connection authorization from Android client

I'm trying to create a L2TP/IPSec PSK VPN from my Android phone to my Ubuntu server on my home network. I am receiving two errors. the first one is a failure checking IP forwarding when I run ipsec ...
5
votes
1answer
2k views

IPsec in the Linux Kernel

I have some issues (questions) related tot the Linux Kernel implementation of IPsec and it's user-space interface. The biggest question is which is the actual official project for the Linux Kernel ...
0
votes
0answers
871 views

IPSec VPN between Astaro Sophos and SonicWALL

I'm trying to connect an Astaro Sophos ASG220 appliance v8 with a SonicWALL TZ 215 For some reason that escapes me the tunnel, named "Dev-VPN", fails to establish. Perhaps someone here can make ...
0
votes
0answers
38 views

2 simultaneous VPNs to 2 different nodes

I am planning to setup Ipsec tunnels between a single server (server1) and two security gateways (seg1 and seg2).The setup should be like this: server1 -----ipsec tunnel1-------->seg1 server1 ...
0
votes
0answers
190 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
241 views

Is there any way of extracting a shared secret from a PBK file or a similar artefact from a Windows 7 installation?

My company's laptop comes with preconfigured VPN connections to access the company's network. The default setup of the laptop is a bit outdated to say the least and I was wondering if in some cases I ...
4
votes
1answer
4k views

L2TP/IPSec stopped working after openssl upgrade

VPN connections from my MacBook / iOS devices to a Debian server having openswan / xl2tp were working just fine until I used apt-get to upgrade everything due to openssl heartbleed announcement. Now ...
1
vote
2answers
2k views

IPSec with or without L2TP?

I'm referring to this question. And to be clear: This is really not about the old PPTP vs L2TP debate. ;-) I successfully set up racoon as an IKE server without any L2TP implementation running and it ...
0
votes
1answer
395 views

Make ICMP exempt from IPSec protection

I'm reading a reference book on Microsoft DirectAccess. It contains the quote: To use Ping as a troubleshooting tool, ensure that Internet Control Message Protocol (ICMP) is exempt from IPSec ...
0
votes
0answers
177 views

IPSec Policy Is Blocking 127.0.0.1

I created an IPSec policy on Windows 8.1, it's purpose was to allow only traffic that goes via the VPN, everything else should be blocked (except LAN and 127.0.0.1). LAN is working fine, but 127.0.0.1 ...
0
votes
1answer
43 views

Can I run a VPN server with certificates only, and no password/pre-shared keys?

I've seen several writeups around discussing VPN server configuration. In all of them, there are 2 or 3 pre-shared keys / passwords used at various levels of the tunnel -- one for IPSec, one for ...
3
votes
0answers
705 views

How can I set an IPsec ID using the Windows 8 built-in VPN client?

I'm trying to connect to a VPN using the built in Windows 8 VPN client. The VPN uses L2TP/IPsec and a pre-shared key. I can see it's connecting to the VPN but not making it through authentication. I ...
0
votes
1answer
156 views

Logging VPN Traffic (L2TP/IPSec on Ubuntu)

I'm running a small, private VPN server for me and 2-3 other people. For bandwidth monitoring, and to comply with any possible DMCA or other government (re: new Canadian law) requests, I want to have ...
0
votes
0answers
617 views

Automatically reconnect Openswan/IPSec VPN and disallow intermittent traffic?

I am trying to connect two Debian machines running an Openswan/IPSec tunnel. Also, I want to disallow any traffic when the tunnel goes down. For that purpose I wrote a script the fiddles with routes ...
0
votes
0answers
175 views

Slow SCP tranfers over IPv6 VPN IPSec which has IPv4 private subnets

I have 2 hosts connected with IPv6 VPN. I am using IPv4 internal addresses for machines connected internally and use subnets addressed for these in ipv4. When a host wants to scp a 1 Gig file pull ...
0
votes
1answer
1k views

How is it possible that I can't login to various websites when using a VPN at a public Wi-Fi? That same VPN is just fine when connected from home

This is a full IPSec tunnel provided by my university. I use this VPN at home and at public Wi-Fi cafés. For some reason, I am not able to login to most websites while using the VPN at this specific ...
0
votes
1answer
304 views

VPN ipsec tunnel from router to single windows server computer (gateway-to-host)

Firstly, is this possible? The situation: 2 different ISP's. One has several servers and a firewall running. The other is limited to only one virtual server with one network card running windows ...
0
votes
1answer
2k views

Strongswan IPSEC VPN for Windows 7 road warrior config

Following the Strongswan wiki link for configuring Strongswan for Windows 7 clients: http://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig I used the sample files as-is with no ...
0
votes
0answers
3k views

Openswan l2tp ipsec vpn on Ubuntu 13.04 for remote access (Android road warrior). Does not work

I followed the directions from here: http://samsclass.info/ipv6/proj/proj-L5-VPN-Server.html I used the same exact files as posted at that site. On my router, I have port-forwarded 500 UDP and 4500 ...
0
votes
1answer
1k views

Mikrotik IPSec VPN routing

I seem to be clueless at the routing with VPN. I am trying to setup an IPSec VPN tunnel so as to secure communication between my private LAN and a destination host. Any device within my private LAN ...
-1
votes
1answer
915 views

Is my VPN tunnel connected? Is my traffic going via the VPN tunnel? How do i verify this?

From RHEL i have to connect VPN server and reach that target PC1. Till now it was possible to make the VPN interconnect but 10.0.0.108 cant ping 10.109.0.200. Variables: ME WAN IP: 8.8.8.8 (Amazon ...
2
votes
1answer
5k views

Find the IPsec ID and Secret id for my vpn connection

Hi i'm using ubuntu and new to cisco vpn anyconnect client. I have installed it successfully and establish the connection by giving the user name and password. But it is showing the timeout error. So ...
2
votes
0answers
261 views

Forward IPsec tunnel from IPv4 endpoint to IPv6 endpoint

I have a new ISP and only have a Dual Stack - lite connection now. That means I can't access my router via IPv4 anymore, since the external IPv4 address is private. I have native IPv6 connectivity. ...
3
votes
1answer
255 views

VPN for Home to watch TV on the go

My ISP offers TV on tablets, phones, etc. where I have to use an app, but I still have to have that traffic flow through my modem. What would be the best solution to setting up a VPN for probably just ...