Questions tagged [ipsec]

IPSec is a method to provide internet security over the layer 3 of the OSI model.

Filter by
Sorted by
Tagged with
0 votes
1 answer
41 views

Internal DNS server ignored via VPN

I have the following home network setup: LAN: 172.16.0.0/24 Proprietary router of my ISP (IPv4, Bridge-Mode -> Bridged to my FRITZ!Box router) Router & DHCP (FRITZ!Box) -> 172.16.0.1 VPN, ...
user avatar
  • 103
0 votes
0 answers
21 views

How to block all connections to a IPSec VPN from a specific dns

I have a IPSec VPN set up on my Ubuntu-VPS, and I would like to block everyone using the VPN from communicating with all domains ending with .exampel.com. I will be the only one using the VPN so ...
user avatar
0 votes
0 answers
96 views

Strongswan Site-to-site VPN - single NIC behind NAT

Please bear with me. I have really tried to experiment, search for answers and read documentation. Site to site VPN, one side behind NAT. Symptom: VPN GW's can connect and ping each other internal IP. ...
user avatar
1 vote
1 answer
153 views

Strongswan VPN certificate authentication failed

I've installed strongswan vpn on my ubuntu server. Set up certificate authentication. I've set up my android-phone and it works fine. But connection didn't established on the windows machine. I copied ...
user avatar
0 votes
1 answer
110 views

Single IP left subnet and routing traffic through tunnel in strongswan

I must set up an ipsec tunnel to use an external service provided by another company (so I have no control on the other side and can't change anything there). Let's say that: 192.168.0.0/24 is my ...
user avatar
0 votes
0 answers
106 views

iptables to nftables for iKEv2 IPSEC VPN server

Can someone please help in converting the below iptable rules to equivalent nftables rules? I have already tried to use iptables-translate, but it is not translating all of my rules... # accept ports ...
user avatar
0 votes
0 answers
16 views

Connecting all vpn clients into a single network

I have a Ubuntu server with IKEv2 VPN configured. I have 2 (will be more) Windows clients, that can connect to VPN. I want them all to be "bridged", like they are all physically connected to ...
user avatar
  • 1
0 votes
0 answers
16 views

Printer not visible over site 2 site VPN connection

We have a IPSEC site 2 site VPN connection connecting 2 offices. A) 192.168.89.x <-> B) 192.168.100.x I can see and access every device in Subnet B) from A) and vica versa. However there's one ...
user avatar
  • 113
0 votes
0 answers
22 views

VPN 3rd party connectivity: IPsec or SSL VPN and why

I'm setting up a secure remote RDP connection for a 3rd party user to perform maintenance operations on their machine installed in our site. My frontend firewall is OPNSense and it gives me two built-...
user avatar
  • 231
0 votes
0 answers
58 views

IPsec conflicting new bare shunt error

While using Libreswan Version 4.3 on RHEL-8, I am getting the following logs while IPsec is blocking all traffics. How can i resolve these errors of existing connection instance and conflicting ...
user avatar
1 vote
0 answers
26 views

firewalld: Block non-ESP packets on interface in GNU/Linux similar to OpenBSD

I am trying to "enforce" IPSec (StrongSwan) traffic on openSUSE. On OpenBSD, with the IKE daemon iked and the packet filter pf, I employ a ruleset like the following, to ensure only ...
user avatar
  • 26
0 votes
0 answers
78 views

nslookup fails with timeout if ipsec and openvpn connected at same time win 10

I have strange behavior with dns resolving when being connected with two vpn clients at the same time. I have one openVPN Client (Endian Connect App) and one FortiClient with IPsec configured. With ...
user avatar
  • 1
0 votes
1 answer
74 views

How can RDP get secured using IPSec and IPv4, rather than IPv6 on Windows 10

I found this approach to secure RDP-connections on a post at the University of Rostock. On the Server (W10): netsh ipsec static set store location=local netsh ipsec static add policy name="...
user avatar
0 votes
0 answers
32 views

Windows ipsec vpn uses wrong DNS only on Network Sign-in

I'm using win10 (domain member) with an ipsec connection to a pfsense firewall: Add-VpnConnection -Name „vpn“ -ServerAddress „vpn.corp.local“ -TunnelType IKEv2 -EncryptionLevel Required -...
user avatar
0 votes
0 answers
156 views

Connecting ubuntu client to fortigate IPSEC vpn tunnel (PSK and auth)

Hello I have both custom dialup and forticlient vpn tunnels configured in my fortigate firewall. I want connect to this vpn tunnel through an ubuntu client. What is the best vpn client to connect to ...
user avatar
0 votes
1 answer
117 views

Reliability of UDP over IPsec

I've read about IPsec today. The article stated that IPsec provides security and integrity checks at layer 3. If information above is correct, does it mean that UDP used over IPsec can be considered ...
user avatar
0 votes
0 answers
13 views

"Site can't be reached" when trying to query database from webapp page in IPSEC infrastructure

things are like this: VM with Windows Server 2012 for asp.net webapp - APPServer VM with Windows Server 2012 for sql server database(different from 1 - but same network) - DBServer CLient1 - Another ...
user avatar
  • 99
0 votes
1 answer
73 views

NordVPN on Draytek 2862 stops working after some time for no apparent reason

So i have a NordVPN account, which i configured on my draytek, it works for the most part but it will suddenly stop working. the connect does NOT drop, it shows as connected and fine, but no devices ...
user avatar
  • 1
0 votes
1 answer
493 views

Unable to connect to L2TP/IPsec vpn from Windows 10

When I try to connect to my L2TP/IPsec vpn with pre-shared key, I get the following error: The L2TP connection attempt failed because the security layer encountered a processing error during initial ...
user avatar
1 vote
0 answers
68 views

IPsec and private IP

I'm creating an IPsec / L2TP network and I want to have one server and multiple clients. On each client, the only way I got IPsec to work properly was to set the IP of the interface that will host the ...
user avatar
  • 33
0 votes
1 answer
1k views

Define PFS Group in Strongswan IKEv2/IPsec Phase 2 Settings

I am trying to setup a VPN connection on Ubuntu 20.04 using Strongswan. One of the requirements for the tunnel is to use PFS group 20. Is the PFS group 20 being set when we have the following line in ...
user avatar
1 vote
1 answer
635 views

macos ipsec vpn not using proper dns servers

I've read several articles on DNS resolution over IPSEC using the native VPN client for macos but I can't seem to resolve the issue. The ISPEC server is pfSense. I have added the proper DNS servers ...
user avatar
0 votes
1 answer
173 views

VPN from Windows 10 to Windows Server 2019

I'm trying to establish a connection between a Windows 10 machine and a Windows Server 2019. On the server side I set up the VPN by these instructions https://www.snel.com/support/how-to-set-up-an-...
user avatar
  • 21
1 vote
0 answers
55 views

IPSec Phase 2 Configuration For Translated Subnets?

I have two networks with the 10.0.0.0/8 subnet I'm trying to connect via IPSec tunnels. I have the phase 1 configurations working but am a bit stuck on the phase 2 configurations. Each firewall used ...
user avatar
  • 314
1 vote
1 answer
2k views

Use Own VPN Server on Google Chrome Browser

I'm looking a way to connect Internet through my VPN server while browsing from Google Chrome Browser. I though best way is use an extension but I couldn't find any extension that let me enter my own ...
user avatar
  • 431
0 votes
1 answer
1k views

How can I create an IPsec tunnel between a FritzBox and a pfsense, without using Aggressive Mode?

I've successfully created an IPSEC Tunnel between my local FritzBox 7590 and my office, which is running a pfsense hardware firewall (APU2) with pfsense 2.4.5-RELEASE-p1 and coreboot firmware v4.11.0....
user avatar
  • 131
0 votes
2 answers
2k views

IPSec nftables strongswan

How to configure nftables to allow inbound only ipsec traffic and process rules after decryption. I have nftable.conf: #!/sbin/nft -f flush ruleset # ----- IPv4 ----- table ip filter { chain ...
user avatar
0 votes
1 answer
273 views

VPN redirect user to specific IP and port

Hope you can point me in the right direction. I have this idea but need some advice and suggestions where to look at and how to do it (if it's possible) I want my family members to connect to a VPN (...
user avatar
  • 5
1 vote
0 answers
2k views

How to setup IPSec VPN between PFSense and Edgerouter X

We have 2 routers/firewalls, 1x pfSense and 1x UBNT Edgerouter X. I tried to setup an IPsec site-to-site connection between these 2 but i cannot get it done. I followed multiple "tutorials"/...
user avatar
  • 123
0 votes
0 answers
1k views

VPN connection to Unifi USG Pro 4 using L2TP/IPSEC does not work behind my ISP's router

I have my ISP's router in my home which gives out 192.168.0.x addresses. I also have a USG with which i want to create a separate network, that i can reach using VPN with L2TP/IPSEC. This should be ...
user avatar
1 vote
0 answers
69 views

How to configure pfsense to use VPN as gateway for OPT port only?

Currently I have set up my PfSense SG-1100 to function as a site to site VPN. I have an unused OPT port on my router and I want to attach that to a switch and have it function as the gateway to the ...
user avatar
  • 11
0 votes
0 answers
93 views

How to verify lets encrypt certs with server? - OSCP error linux Strongswan

Goal I am attempting to build an IKEv2 VPN using the strongswan IPSEC implementation with Let's Encrypt certificates and RSA authentication. I successfully built it in the legacy ipsec.conf format, ...
user avatar
  • 1
2 votes
0 answers
1k views

Troubleshooting VPN connection with Wireshark by decrypting IPSec packets

I'm having troubling establishing a VPN connection to a specific network and I'm not the only one having issues. As per their instructions, I'm using the standard VPN client built in windows with pre-...
user avatar
0 votes
1 answer
54 views

Can multiple subnets reach each other connecting to a central IPsec VPN?

Say you have three networks, networks A, B, and C. -A is an ipsec VPN server -B is connected to A through ipsec -C is connected to A through ipsec Can network B access network C?
user avatar
4 votes
2 answers
5k views

How can I route only a particular subnet to the StrongSwan VPN but not my whole traffic on linux?

I have no particular competences on networking, so I'll do my best to explain my needs. On my Linux laptop I'm running StrongSwan (with NetworkManager) to connect to a particular VPN with IPsec. This ...
user avatar
  • 53
0 votes
1 answer
289 views

Can any IPSec client connect to any IPSec server?

I have been pondering setting up my own VPS with a VPN server running. Most often, OpenVPN is thrown around when users talk about setting up a VPN on Linux, but this tech seems to live a bit on the ...
user avatar
  • 1,062
0 votes
0 answers
437 views

Strongswan IPsec configuration ( Linux - Cisco)

I'm configuring site-to-site ipsec tunnel. The error that I am getting shows that Quick Mode proposal (ESP) doesn't match Jan 27 09:23:42 raspberrypi charon: 10[ENC] generating QUICK_MODE request ...
user avatar
0 votes
0 answers
252 views

Troubleshooting L2TP/IPSec on Windows Server 2019 with PowerShell

The problem which I've got is that a Windows Server 2019 VM hosted in the cloud crashes exactly after it shows that a L2TP/IPSec connection is successfully established. According to the VPN server (...
user avatar
  • 451
0 votes
1 answer
6k views

IPsec on pfSense: Tunnel is up, but I can't connect to remote host

I have a strange problem with my IPsec VPN: I have 2 matched [hardware and software - 2.4.4 release p3] pfSense boxes at different locations. Each pfSense is a Firewall + DHCP server + Gateway for the ...
user avatar
0 votes
0 answers
769 views

VPN l2tp over IPSec: ppp - No auth is possible. Ubuntu 18.04 LTS

I setup IPSec over VPN using this tutorial https://20notes.net/linux/setup-l2tp-over-ipsec-client-on-ubuntu-18-04-using-gnome It is working using NetworkManager. However NetworkManager allow only one ...
user avatar
1 vote
0 answers
177 views

Linux ShrewSoft client connects but doesn't pass any traffic

A customer recently changed their VPN server and now recommends ShrewSoft as the appropriate client. On Windows, the provided config works. On Linux, it also appears to connect and sets up a tap0 ...
user avatar
0 votes
0 answers
88 views

Some VPN traffic blocked to secure endpoints

I have a VPN server (strongswan) used for testing that I connect to via IKEv2 on a variety of systems (here, I tried Windows, Ubuntu, & Android), normally without issues. This morning, I was on a ...
user avatar
0 votes
0 answers
958 views

Strongswan ipsec site-site configuration

I'm configuring site-to-site ipsec tunnel using strongswan, but i don`t know how is ipsec tunnel opened on remote side (definitely without using strongswan) When i try to connect - i get no response ...
user avatar
  • 1
1 vote
0 answers
44 views

IPSEC connection between SIP Client and PCSCF. ESP header does not appear. IPsec does not apply to the header

I wanted to create SIPP script to create scenario to establish IPSEC connection between UE and PCSCF using below; For example:- setkey -c << EOF spdadd $pcscf/32[$port_pc] $ue/32[$port_us] tcp ...
user avatar
0 votes
0 answers
26 views

IPSec Tunnel in a tunnel? A soon to be travelling remote worker

Ok. I generally work remotely, which is nice. I soon plan to do some overseas travelling, and I would prefer to hide my real srcIP if possible (potential audits/geo-restrictions, etc.). I'm ...
user avatar
4 votes
1 answer
2k views

L2TP/IPSec On Mac Failed to connect

I am connecting to a VPN Server set up following instructions in https://github.com/hwdsl2/setup-ipsec-vpn And I setup the clients following https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/...
user avatar
  • 141
0 votes
1 answer
718 views

RTNETLINK answers: Operation not supported for ip xfrm command on debian os

I am trying to configure ipsec through ip xfrm commands in debian image. I am facing operation not supported error. Kindly help me on where am going wrong. Logs: NE145:2-10*:/tmp # ip xfrm policy ...
user avatar
0 votes
0 answers
244 views

Connect to my server from outside my network securely

I have a LAN with computers connected to server, what I need to do is connecting PC to this server securely from another location. My network structure is described in the image attached and needs ...
user avatar
  • 1
1 vote
0 answers
26 views

Is it possible to skip main mode for IPSec communication on Windows?

On Linux, after registered several SAs (Security Associations) between a pair of Linux host, I can create communication between those two Linux hosts, i.e, communicate with ESP packets. But on ...
user avatar
  • 111
0 votes
0 answers
479 views

IPv6 Strongswan IPSec + NAT

I have a VPS with an IPv4 (/32) and an IPv6 (/128). I've set up Strongswan and my IPv4 IPSec server works just fine - I'm using it all the time. I'm trying to get it to work with IPv6 and so far it'...
user avatar
  • 226