IPSec is a method to provide internet security over the layer 3 of the OSI model.

learn more… | top users | synonyms

0
votes
1answer
40 views

How to block all but a specific list of IP addresses on a given port using IPSEC on Windows?

I have a list of IP addresses. L={x.x.x.x,y.y.y.y,...etc} I want to block all IP addresses except for the ones in the above list. How to do using IPSEC commands in windows machine? I tried to ...
0
votes
1answer
38 views

Do all hosts and nodes in a Broadcast domain have to have the same MTU value?

Some documents on the Internet say that all interfaces in a broadcast domain ( ie Router boundaries ) have to have the same MTU value. Is that an inflexible rule ? But what about my roaming laptop ...
0
votes
0answers
14 views

Linux IPsec VPN w/ racoon: Routing traffic into the internet

I'm currently setting up a VPN for my iPad to use when I'm traveling. Here's some basic info (if you need more details, just leave a comment, I will extend the question with the details): An OpenVZ ...
0
votes
1answer
19 views

Why IPSec ESP needs NAT-T

I understand why it is not possible to use IPSec AH over a NAT server, since the IP header is included in the MAC too. But I am confused about ESP with Authentication (I am talking about tunnel mode, ...
1
vote
0answers
42 views

Route all traffic through IPSEC tunnel

I'm using Strongswan on CentOS as IPSEC VPN server. Is possible to tell client (win7) to route all traffic through tunnel interface after tunnel is up? Here is my ipsec.conf config setup conn ...
0
votes
0answers
42 views

IP Tunnel / VPN / IPSec How to on CentOS/RHEL

I'm trying to connect two LANs that can't directly connect to each other through a bridge that can be accessed by both LANs. Here is the scenario: LAN #1 is on 192.168.0.x at location X and cannot ...
0
votes
0answers
36 views

Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN

I have two ubuntu 12.04 32 Bit PCs between which I want IPSec Tunnel to be setup. I have setup ipsec in both systems and ipsec verify runs fine on both. Since I have no prior experience of openswan, I ...
1
vote
0answers
144 views

Can someone help me understand ALG and VPN settings on my router?

I'm looking at the settings in my TP-LINK WDR4300 router and noticed settings for VPN passthrough and ALG. Every single option is enabled but I am hoping someone can help me understand these settings ...
2
votes
1answer
141 views

Remote Access VPN on Cisco IOS doesn't complete phase 1

I have successfully configured my Cisco router to create a VPN tunnel to Azure. This is working fine. Now I am trying to add a remote access VPN for clients. I want to use IPsec and not PPTP. I'm not ...
0
votes
0answers
49 views

Encrypted connection in LAN

I want to established secure (encrypted) connection between four machines in local area network. I'm training on my notebook and virtual machine under VMWare Workstation control, both are with Windows ...
0
votes
0answers
23 views

IPSec on Windows 8 - filter IP range to go through VPN

I've found how to wither make all routes go through the VPN tunnel (default) or none (by unticking the 'Use default gateway on remote network'). But how do I specify that only a certain range should ...
1
vote
2answers
2k views

ipsec configuration problems on Ubuntu. Errors on IP forwarding" connection authorization from Android client

I'm trying to create a L2TP/IPSec PSK VPN from my Android phone to my Ubuntu server on my home network. I am receiving two errors. the first one is a failure checking IP forwarding when I run ipsec ...
2
votes
1answer
326 views

IPsec in the Linux Kernel

I have some issues (questions) related tot the Linux Kernel implementation of IPsec and it's user-space interface. The biggest question is which is the actual official project for the Linux Kernel ...
0
votes
0answers
37 views

SCEP trustpoint equivalent for ipsec scepclient

I can't seem to wrap my mind around what exactly the cisco reference to a trustpoint is, as pertains to a scep request. I am trying to perform this request on a ubiquiti edgerouter which has ...
0
votes
0answers
417 views

IPSec VPN between Astaro Sophos and SonicWALL

I'm trying to connect an Astaro Sophos ASG220 appliance v8 with a SonicWALL TZ 215 For some reason that escapes me the tunnel, named "Dev-VPN", fails to establish. Perhaps someone here can make ...
0
votes
0answers
36 views

2 simultaneous VPNs to 2 different nodes

I am planning to setup Ipsec tunnels between a single server (server1) and two security gateways (seg1 and seg2).The setup should be like this: server1 -----ipsec tunnel1-------->seg1 server1 ...
0
votes
0answers
326 views

cisco ipsec vpn of maverick does not work

I want to connect to my company network through my macbook pro which runs osx 10.9. And I have the right configuration which runs perfectly well in windows. I use the osx's built in cisco IPSec vpn ...
0
votes
0answers
108 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
121 views

Is there any way of extracting a shared secret from a PBK file or a similar artefact from a Windows 7 installation?

My company's laptop comes with preconfigured VPN connections to access the company's network. The default setup of the laptop is a bit outdated to say the least and I was wondering if in some cases I ...
3
votes
1answer
3k views

L2TP/IPSec stopped working after openssl upgrade

VPN connections from my MacBook / iOS devices to a Debian server having openswan / xl2tp were working just fine until I used apt-get to upgrade everything due to openssl heartbleed announcement. Now ...
1
vote
1answer
753 views

IPSec with or without L2TP?

I'm referring to this question. And to be clear: This is really not about the old PPTP vs L2TP debate. ;-) I successfully set up racoon as an IKE server without any L2TP implementation running and it ...
0
votes
1answer
174 views

Make ICMP exempt from IPSec protection

I'm reading a reference book on Microsoft DirectAccess. It contains the quote: To use Ping as a troubleshooting tool, ensure that Internet Control Message Protocol (ICMP) is exempt from IPSec ...
0
votes
0answers
128 views

IPSec Policy Is Blocking 127.0.0.1

I created an IPSec policy on Windows 8.1, it's purpose was to allow only traffic that goes via the VPN, everything else should be blocked (except LAN and 127.0.0.1). LAN is working fine, but 127.0.0.1 ...
0
votes
1answer
34 views

Can I run a VPN server with certificates only, and no password/pre-shared keys?

I've seen several writeups around discussing VPN server configuration. In all of them, there are 2 or 3 pre-shared keys / passwords used at various levels of the tunnel -- one for IPSec, one for ...
0
votes
0answers
98 views

Shrew VPN with Cyberoam security gateway

it is possible to establish a VPN tunnel with Shrew VPN to a security gateway Cyberoam ? (Ipsec / SSL) I can not establish the tunnel.
2
votes
0answers
566 views

How can I set an IPsec ID using the Windows 8 built-in VPN client?

I'm trying to connect to a VPN using the built in Windows 8 VPN client. The VPN uses L2TP/IPsec and a pre-shared key. I can see it's connecting to the VPN but not making it through authentication. I ...
0
votes
1answer
412 views

In Windows, Is there any way to connect to IKEv1 IPSec server, without using L2TP tunnel?

My server uses StrongSwan to host an IPSec server using IKEv1. Platforms such as Android, iOS, MacOS natively support IPSec connection without using external client application. Windows 7 and 8 seem ...
0
votes
1answer
107 views

Logging VPN Traffic (L2TP/IPSec on Ubuntu)

I'm running a small, private VPN server for me and 2-3 other people. For bandwidth monitoring, and to comply with any possible DMCA or other government (re: new Canadian law) requests, I want to have ...
0
votes
0answers
349 views

Automatically reconnect Openswan/IPSec VPN and disallow intermittent traffic?

I am trying to connect two Debian machines running an Openswan/IPSec tunnel. Also, I want to disallow any traffic when the tunnel goes down. For that purpose I wrote a script the fiddles with routes ...
0
votes
0answers
137 views

Slow SCP tranfers over IPv6 VPN IPSec which has IPv4 private subnets

I have 2 hosts connected with IPv6 VPN. I am using IPv4 internal addresses for machines connected internally and use subnets addressed for these in ipv4. When a host wants to scp a 1 Gig file pull ...
0
votes
1answer
682 views

How is it possible that I can't login to various websites when using a VPN at a public Wi-Fi? That same VPN is just fine when connected from home

This is a full IPSec tunnel provided by my university. I use this VPN at home and at public Wi-Fi cafés. For some reason, I am not able to login to most websites while using the VPN at this specific ...
0
votes
1answer
261 views

VPN ipsec tunnel from router to single windows server computer (gateway-to-host)

Firstly, is this possible? The situation: 2 different ISP's. One has several servers and a firewall running. The other is limited to only one virtual server with one network card running windows ...
0
votes
1answer
2k views

Strongswan IPSEC VPN for Windows 7 road warrior config

Following the Strongswan wiki link for configuring Strongswan for Windows 7 clients: http://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig I used the sample files as-is with no ...
0
votes
0answers
2k views

Openswan l2tp ipsec vpn on Ubuntu 13.04 for remote access (Android road warrior). Does not work

I followed the directions from here: http://samsclass.info/ipv6/proj/proj-L5-VPN-Server.html I used the same exact files as posted at that site. On my router, I have port-forwarded 500 UDP and 4500 ...
0
votes
1answer
774 views

Mikrotik IPSec VPN routing

I seem to be clueless at the routing with VPN. I am trying to setup an IPSec VPN tunnel so as to secure communication between my private LAN and a destination host. Any device within my private LAN ...
-1
votes
1answer
724 views

Is my VPN tunnel connected? Is my traffic going via the VPN tunnel? How do i verify this?

From RHEL i have to connect VPN server and reach that target PC1. Till now it was possible to make the VPN interconnect but 10.0.0.108 cant ping 10.109.0.200. Variables: ME WAN IP: 8.8.8.8 (Amazon ...
2
votes
1answer
3k views

Find the IPsec ID and Secret id for my vpn connection

Hi i'm using ubuntu and new to cisco vpn anyconnect client. I have installed it successfully and establish the connection by giving the user name and password. But it is showing the timeout error. So ...
2
votes
0answers
146 views

Forward IPsec tunnel from IPv4 endpoint to IPv6 endpoint

I have a new ISP and only have a Dual Stack - lite connection now. That means I can't access my router via IPv4 anymore, since the external IPv4 address is private. I have native IPv6 connectivity. ...
3
votes
1answer
212 views

VPN for Home to watch TV on the go

My ISP offers TV on tablets, phones, etc. where I have to use an app, but I still have to have that traffic flow through my modem. What would be the best solution to setting up a VPN for probably just ...
2
votes
1answer
3k views

Finally get my win 7 connected to strongSwan VPN, but there's no Internet

I believe I've followed all the instructions, and my win 7 did get connected, but there's no Internet. Background: Server OS: ubuntu 12.04 on linode xen VPS strongSwan Version: 4.6.4 ...
0
votes
1answer
721 views

How to set up NAT in windows server 2008 r2 for IPSec tunnel use

I am having troubles setting up the whole IPSec tunnel thing. What i have: 1. Router that only has a VPN/IPsec passthrough functionality (IP 192.168.0.1) 2. Windows Server 2008 R2 which has group ...
1
vote
3answers
3k views

IPsec VPN connection drops automatically every 47 mins

I'm using Cisco Systems VPN Client Version 5.0.07.0440 on Windows 7 Ultimate 64-bit to connect to a VPN server through IPSec/UDP. The problem is each time when it connects, I always get warnings in ...
2
votes
0answers
528 views

Cisco RV180 ipsec vpn to mac os x 10.8.2 default client Configuration

I would like to configure an IPSec VPN tunnel between my RV180 (server, last firmware) and my Mac OSX 10.8.2 laptop. I have little knowledge about VPN, and a bit more about network in general. I have ...
0
votes
2answers
2k views

Can't connect to pc using Remote Desktop over VPN with Domain user account only

Craziest thing. I can't seem to login to my pc at work using my domain credentials. I am using Remote Desktop with a Cisco VPN and have tried both Mac and Win 7 remote machines. It appears that I can ...
3
votes
0answers
2k views

How do I configure DD-WRT to forward IPSec traffic to an internal server to support a road warrior configuration?

I use dd-wrt as my home router setup and that's been working fine. Now I wanted to figure out a way to be able to use my iPad to set up a IPSec tunnel to my home network while I'm on the road. PPTP ...
2
votes
1answer
555 views

Is it possible to set up IPSec on a linux virtual machine host to connect to an Azure virtual network

We run some virtual machines in an onsite Ubuntu based server with guests being a mixture of Windows Server and Ubuntu. We're also setting up some Windows Azure virtual machines and ideally would like ...
1
vote
0answers
103 views

Netgear NAT over LAN TO LAN

I have the following question: I need to connect through a vpn IPsec lan 2 lan tunnel with a partner but they want that I connect through a specific ip subnet which is not mine. Here's the situation: ...
0
votes
2answers
54 views

Find out what routers are crossed when accessing a server!

I am new to this forum and not really sure if I this belongs here, but I give it a shot anyway. What routers/switches/networks does a packet from my computer need to cross in order to access a lets ...
1
vote
0answers
212 views

M0n0wall IPsec tunnel fails after switch to PPPoE

I have had a M0n0wall site-to-site IPsec VPN working for several months on a static IP via an ADSL router. We've just switched to a fibre (FTTC) connection, and M0n0wall has now been configured to ...
0
votes
1answer
2k views

Allow all websites for administrator account and block all websites (but a few) for limited accounts

At my work we have a PC which runs Windows XP and is used by all employees. This PC is mainly used for our company website: a trailer booking website. At the moment there is one account: an ...