Questions tagged [ipsec]

IPSec is a method to provide internet security over the layer 3 of the OSI model.

Filter by
Sorted by
Tagged with
0
votes
0answers
58 views

VPN connection to Unifi USG Pro 4 using L2TP/IPSEC does not work behind my ISP's router

I have my ISP's router in my home which gives out 192.168.0.x addresses. I also have a USG with which i want to create a separate network, that i can reach using VPN with L2TP/IPSEC. This should be ...
1
vote
0answers
28 views

How to configure pfsense to use VPN as gateway for OPT port only?

Currently I have set up my PfSense SG-1100 to function as a site to site VPN. I have an unused OPT port on my router and I want to attach that to a switch and have it function as the gateway to the ...
0
votes
0answers
41 views

How to verify lets encrypt certs with server? - OSCP error linux Strongswan

Goal I am attempting to build an IKEv2 VPN using the strongswan IPSEC implementation with Let's Encrypt certificates and RSA authentication. I successfully built it in the legacy ipsec.conf format, ...
1
vote
0answers
81 views

Troubleshooting VPN connection with Wireshark by decrypting IPSec packets

I'm having troubling establishing a VPN connection to a specific network and I'm not the only one having issues. As per their instructions, I'm using the standard VPN client built in windows with pre-...
0
votes
1answer
40 views

Can multiple subnets reach each other connecting to a central IPsec VPN?

Say you have three networks, networks A, B, and C. -A is an ipsec VPN server -B is connected to A through ipsec -C is connected to A through ipsec Can network B access network C?
1
vote
2answers
147 views

How can I route only a particular subnet to the StrongSwan VPN but not my whole traffic on linux?

I'm have no particular competences on networking, so I'll do my best to explain my needs. On my Linux laptop I'm running StrongSwan (with NetworkManager) to connect to a particular VPN with IPsec. ...
0
votes
0answers
272 views

How to install Forticlient for IPsec VPN On ubuntu 18

While installing forticlient on my ubuntu system first time I accidantly didn't allow remote access and it get installed without that. Upon realizing my mistake i uninstalled and installed forticlient ...
0
votes
0answers
47 views

IPSec VPN Tunnel only works one-way

I have this network setup: SITE "A" <---------> [VPN ROUTER] <--------------> MODEM <-> PUBLIC IP "A" LAN: 192.168.1.0 LAN:192.168.1.2 192.168.10.1 | ...
0
votes
1answer
51 views

Can any IPSec client connect to any IPSec server?

I have been pondering setting up my own VPS with a VPN server running. Most often, OpenVPN is thrown around when users talk about setting up a VPN on Linux, but this tech seems to live a bit on the ...
0
votes
0answers
94 views

Strongswan IPsec configuration ( Linux - Cisco)

I'm configuring site-to-site ipsec tunnel. The error that I am getting shows that Quick Mode proposal (ESP) doesn't match Jan 27 09:23:42 raspberrypi charon: 10[ENC] generating QUICK_MODE request ...
0
votes
0answers
99 views

Troubleshooting L2TP/IPSec on Windows Server 2019 with PowerShell

The problem which I've got is that a Windows Server 2019 VM hosted in the cloud crashes exactly after it shows that a L2TP/IPSec connection is successfully established. According to the VPN server (...
0
votes
0answers
32 views

Strongswan ipsec A <-> B <-> C (indirect site-to-site VPN)

I have: Network A, 192.168.0.0/20 no external IP Network C, 192.168.100.0/20 no fixed external IP I need: make A and C be in same network. I use Edgerouter (on A and C sites) with ipsec vpn's ...
0
votes
1answer
1k views

IPsec on pfSense: Tunnel is up, but I can't connect to remote host

I have a strange problem with my IPsec VPN: I have 2 matched [hardware and software - 2.4.4 release p3] pfSense boxes at different locations. Each pfSense is a Firewall + DHCP server + Gateway for the ...
0
votes
0answers
281 views

VPN l2tp over IPSec: ppp - No auth is possible. Ubuntu 18.04 LTS

I setup IPSec over VPN using this tutorial https://20notes.net/linux/setup-l2tp-over-ipsec-client-on-ubuntu-18-04-using-gnome It is working using NetworkManager. However NetworkManager allow only one ...
0
votes
0answers
55 views

Linux ShrewSoft client connects but doesn't pass any traffic

A customer recently changed their VPN server and now recommends ShrewSoft as the appropriate client. On Windows, the provided config works. On Linux, it also appears to connect and sets up a tap0 ...
0
votes
0answers
46 views

Some VPN traffic blocked to secure endpoints

I have a VPN server (strongswan) used for testing that I connect to via IKEv2 on a variety of systems (here, I tried Windows, Ubuntu, & Android), normally without issues. This morning, I was on a ...
0
votes
0answers
344 views

Strongswan ipsec site-site configuration

I'm configuring site-to-site ipsec tunnel using strongswan, but i don`t know how is ipsec tunnel opened on remote side (definitely without using strongswan) When i try to connect - i get no response ...
0
votes
0answers
105 views

backup tunnels in strongswan with two wan links

I have a topology in my company H have a problem we have two builds and want to create two tunnels but one of them is a backup tunnel I have two wan links one of these is very stable and important ...
0
votes
0answers
22 views

Why do blogs say OpenVPN is faster than IPSEC/L2TP?

I've read on lots of websites that OpenVPN is faster better, more secure and with 20% less calories than IPSEC/L2TP. But that doesn't seem right. Sure, OVPN is L3 so has lower packet overhead, and ...
0
votes
0answers
39 views

GKE 1.12 Upgrade breaks in-pod access to Cloud VPN IPs

I recently preformed an upgrade on one of my Kubernetes clusters. The topology BEFORE this upgrade is as follows: 1x GKE v1.11.10-gke.5 cluster (legacy networking) 1x GKE v1.11.10-gke.5 cluster (VPC-...
0
votes
0answers
139 views

strongswan seems drop udp-encap esp packets

I have setup a strongswan ipsec tunnel between to sites. The tunnel is up and ipsec status shows: Status of IKE charon daemon (strongSwan 5.6.2, Linux 4.15.0-52-generic, x86_64): uptime: 17 ...
0
votes
0answers
45 views

Is that possible to create site to site VPN between 2 sites by using a pfsense virtual machine installed in Vmware workstation?

I need to connect 3 sites (Site A,B and C)+ AWS Cloud together over a site to site VPN. Each site should have a VPN tunnel to the cloud Each site should have a VPN tunnel to the other sites ...
1
vote
0answers
24 views

IPSEC connection between SIP Client and PCSCF. ESP header does not appear. IPsec does not apply to the header

I wanted to create SIPP script to create scenario to establish IPSEC connection between UE and PCSCF using below; For example:- setkey -c << EOF spdadd $pcscf/32[$port_pc] $ue/32[$port_us] tcp ...
0
votes
0answers
87 views

Problems with Connecting to Fritz!Box VPN

To connect my Home with my Internet Server I wanted to establish a VPN connection between them, as the Fritz!Box my Router is a VPN Server I was able to connect to it via vpnc, only problem, the whole ...
0
votes
0answers
22 views

IPSec Tunnel in a tunnel? A soon to be travelling remote worker

Ok. I generally work remotely, which is nice. I soon plan to do some overseas travelling, and I would prefer to hide my real srcIP if possible (potential audits/geo-restrictions, etc.). I'm ...
2
votes
1answer
964 views

L2TP/IPSec On Mac Failed to connect

I am connecting to a VPN Server set up following instructions in https://github.com/hwdsl2/setup-ipsec-vpn And I setup the clients following https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/...
0
votes
1answer
314 views

RTNETLINK answers: Operation not supported for ip xfrm command on debian os

I am trying to configure ipsec through ip xfrm commands in debian image. I am facing operation not supported error. Kindly help me on where am going wrong. Logs: NE145:2-10*:/tmp # ip xfrm policy ...
0
votes
0answers
47 views

No ping to Remote LAN gateway IPSEC connection

This issue seems normal but i need a solution which i haven't found since a long time. I have IPSEC connection in one of my branch ( 10.100.0.7/24 ) from the head office (10.100.0.1/24 ). LAN network ...
0
votes
0answers
59 views

Connect to my server from outside my network securely

I have a LAN with computers connected to server, what I need to do is connecting PC to this server securely from another location. My network structure is described in the image attached and needs ...
1
vote
0answers
21 views

Is it possible to skip main mode for IPSec communication on Windows?

On Linux, after registered several SAs (Security Associations) between a pair of Linux host, I can create communication between those two Linux hosts, i.e, communicate with ESP packets. But on ...
0
votes
0answers
270 views

IPv6 Strongswan IPSec + NAT

I have a VPS with an IPv4 (/32) and an IPv6 (/128). I've set up Strongswan and my IPv4 IPSec server works just fine - I'm using it all the time. I'm trying to get it to work with IPv6 and so far it'...
0
votes
2answers
160 views

Edit Windows Defender Firewall defaults IPSEC settings through CLI

I am looking for a commandlet to modify the defaults IPSEC settings of the Windows Defender Firewall through CLI. Specifically the defaults authentication settings. Here is a screenshot of the GUI ...
0
votes
1answer
42 views

SQL Server encapsulating packets into IPsec?

I found this with Wireshark while troubleshooting a SQL Server AlwaysOn cluster for that damned ASYNC_NETWORK_IO problem: a few packets originating from SQL Server's data port (manually configured as ...
1
vote
1answer
831 views

L2TP / IPSec couldn't look up L2TP VPN gateway IP address (CentOS 7)

I'm trying to connect to VPN from CentOS 7. I have network-manager-l2tp installed (1.2.10). The output I'm getting: Mar 18 23:46:43 localhost NetworkManager[4790]: <info> [1552949203.6892] vpn-...
0
votes
1answer
547 views

Strongswan IPsec configuration

I'm configuring site-to-site ipsec tunnel, being given very few details about the remote host. On my server I'm using strongswan with the following ipsec.conf: conn %default ikelifetime=60m ...
2
votes
1answer
387 views

How to enable Perfect forward secrecy in WIndows IPsec client?

Windows IPsec has options to configure several parameters i.e. authentication , encryption algorithm etc. but there doesn't seem to be any option to configure PFS(Perfect forward secrecy).
0
votes
1answer
434 views

IKEV2 tunnel not getting created

Getting bellow error message while trying to ping. Feb 12 17:51:11.383 IST: IKEv2-INTERNAL:Processing an item off the pak queue Feb 12 17:51:11.384 IST: IKEv2-INTERNAL:Couldn't find matching ...
1
vote
1answer
175 views

Is there any way in which i can configure Windows IPSEC policy to use just AH mode and not ESP

I have done windows machine authentication with Linux running free swan server. With default configuration i could see ping encrypted with ESP. But i want to test it with AH also. Is there any way in ...
0
votes
0answers
72 views

IPSec VPN between DO Droplet and other (trusted) provider

I have a requirement to set up IPsec VPN between my company's droplet and a network owned by partner company that uses another provider. Tooling: Debian (my droplet) with IP e.g 169.22.231.13 and ...
0
votes
2answers
134 views

whitelist 127.0.0.1 on IPSEC Windows

How do we whitelist the localhost 0r 127.0.0.1 on IPSec? Currently I have two policy. 1. Block All IPs. 2. Permit some IP. Rule number 1 has blocked localhost IP also.
0
votes
1answer
1k views

Openconnect with IPsec protocol

I need to force openconnect to use IPsec protocol as first option. As long as I know, openconnect first try SSL connection (correct me if I am wrong). Problem is, that our company ASA deny my ...
0
votes
0answers
207 views

How to know and fix fails or errors in randomly down ipsec tunnel connection?

I have a server connected by VPN site to site with strongswan (first time with VPN), when I start the connection (sudo ipsec up my-conn) all work good but in some point the server lost the connection (...
2
votes
1answer
490 views

L2TP/IPSec using srongswan in ubuntu

I'm using strongswan on ubuntu 16.04 to connect to a thirdparty L2TP/IPSec VPN. They provided me a profile file like this: VPN connection IP : X.X.X.X IPSEC Authentication : --------------------- ...
0
votes
1answer
232 views

Docker: host grabs ICMP packets (Strongswan IPsec)

These machines are Docker containers with strongswan installed running IPsec tunnels. routeur1 and routeur2 have a site-to-site IPsec tunnel, while pc-nomad have a IPsec tunnel with routeur1. ...
1
vote
0answers
443 views

How to selectively route traffic for Cisco IPSec on macOS Mojave?

I am working from home and have to be connected to our Cisco VPN to access certain websites, such as self-hosted GitHub. Is there away to configure the VPN to only be used for self-hosted GitHub and ...
0
votes
1answer
46 views

IPSec-tools packages

Are these two packages are different things? (1 and 2) apt-get install ipsec-tools vs apt-get install racoon I thought racoon is contained inside the ipsec-tools packages. Why need both of them?...
0
votes
1answer
80 views

IPSec database location

Internet Protocol Security (IPSec) has two database: Security Policy Database (SPD) and Security Association Database (SAD) I want to know where are these database located? Do they exist on both ...
1
vote
0answers
635 views

Configure a Linux client for a Windows VPN

I am trying to connect from my personal Arch Linux laptop to my office's windows server VPN. I have followed the instructions of the Arch wiki but I cannot get the IPSec tunnel to connect. The ...
0
votes
1answer
97 views

IPsec Tunnel Mode - ping won't work after 15 minutes of no traffic

I have an IPsec (tunnel mode) connection which after about 15 minutes of no traffic, the ping stops working and can be resumed only if ping is initiated from the other end. The setup is made out of ...
0
votes
1answer
83 views

Site to site VPN tunnel to external company

I would like to set up an IPSec site-to-site tunnel between my company and an external company. (The external company does not support a dial-in mechanism, so I have to use a site-to-site VPN...) I ...