Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ipsec]

IPSec is a method to provide internet security over the layer 3 of the OSI model.

0
votes
1answer
23 views

Openconnect with IPsec protocol

I need to force openconnect to use IPsec protocol as first option. As long as I know, openconnect first try SSL connection (correct me if I am wrong). Problem is, that our company ASA deny my ...
0
votes
0answers
20 views

How to know and fix fails or errors in randomly down ipsec tunnel connection?

I have a server connected by VPN site to site with strongswan (first time with VPN), when I start the connection (sudo ipsec up my-conn) all work good but in some point the server lost the connection (...
0
votes
0answers
42 views

L2TP/IPSec using srongswan in ubuntu

I'm using strongswan on ubuntu 16.04 to connect to a thirdparty L2TP/IPSec VPN. They provided me a profile file like this: VPN connection IP : X.X.X.X IPSEC Authentication : --------------------- ...
0
votes
1answer
36 views

Docker: host grabs ICMP packets (Strongswan IPsec)

These machines are Docker containers with strongswan installed running IPsec tunnels. routeur1 and routeur2 have a site-to-site IPsec tunnel, while pc-nomad have a IPsec tunnel with routeur1. ...
0
votes
0answers
88 views

How to selectively route traffic for Cisco IPSec on macOS Mojave?

I am working from home and have to be connected to our Cisco VPN to access certain websites, such as self-hosted GitHub. Is there away to configure the VPN to only be used for self-hosted GitHub and ...
0
votes
0answers
29 views

ipsec generation of rsa 4096 keys taking a long time

I'm trying to make a strongswan VPN for a class project and I'm in the process of making the keys. However when making the root private key I run the command ipsec pki --gen --type rsa --size 4096 --...
0
votes
1answer
19 views

IPSec-tools packages

Are these two packages are different things? (1 and 2) apt-get install ipsec-tools vs apt-get install racoon I thought racoon is contained inside the ipsec-tools packages. Why need both of them?...
0
votes
1answer
24 views

IPSec database location

Internet Protocol Security (IPSec) has two database: Security Policy Database (SPD) and Security Association Database (SAD) I want to know where are these database located? Do they exist on both ...
0
votes
0answers
21 views

Windows firewall with advanced security connection rule not working with IPSec

We just setup a DMZ at a new client to host a RODC and SCCM server for internet client connectivity. We created a GPO with the needed WFAS connection rules to secure communication from the internal ...
0
votes
0answers
39 views

Configure a Linux client for a Windows VPN

I am trying to connect from my personal Arch Linux laptop to my office's windows server VPN. I have followed the instructions of the Arch wiki but I cannot get the IPSec tunnel to connect. The ...
0
votes
1answer
47 views

IPsec Tunnel Mode - ping won't work after 15 minutes of no traffic

I have an IPsec (tunnel mode) connection which after about 15 minutes of no traffic, the ping stops working and can be resumed only if ping is initiated from the other end. The setup is made out of ...
0
votes
1answer
28 views

Site to site VPN tunnel to external company

I would like to set up an IPSec site-to-site tunnel between my company and an external company. (The external company does not support a dial-in mechanism, so I have to use a site-to-site VPN...) I ...
0
votes
1answer
229 views

Can't connect to IPsec/L2TP on OpenSUSE Tumbleweed

I want to access VPN network from my laptop, which runs OpenSUSE Tumbleweed. The problem is that I can't connect with neither NetworkManager, neither configuring anything manually. Logs provided: ● ...
0
votes
0answers
12 views

Routing some specific nets from OpenVPN to VirtualBox VM

I have a desktop Linux machine (fairly recent Debian9.3, if it matters) connected to the Internet via Wireless and having a working IPSec (vpnc) connection to my office. Host net parameters are (...
0
votes
0answers
194 views

How to connect to IKEv2 VPN server using command line in Ubuntu?

How can I connect a Ubuntu 16.04 machine to a IKEv2 VPN server using just command line. Since this is a remote machine, I cannot use any GUI. I am given: The hostname of the server my username ...
2
votes
2answers
3k views

Connect FortiClient IPsec VPN via Ubuntu 18.04 KDE

I have just installed FortiClient 6.0.0.0029 in Ubuntu 18.04 - KDE. I'm not shure, but looks like Linux's FortiClient has only SSL connection but not IPsec (which I need)... Works ok in Windows 10, ...
0
votes
0answers
78 views

Configure L2TP/IPSec so the user identity is passed to iptables rule

Hi I'm pretty new to this so you'll have to be very explicit. I set up L2TP/IPSec on CentOS so that I can VPN. User identities are stored in the /etc/ppp/chap-secrets, mainly because that's how ...
0
votes
3answers
3k views

Can't connect to L2TP IPsec VPN from Windows 10 but it works with macOS High Sierra

I am trying to connect from a Windows 10 client to an Ubiquiti EdgeRouter VPN, I went through the instructions on https://help.ubnt.com/hc/en-us/articles/204950294-EdgeRouter-L2TP-IPsec-VPN-Server but ...
0
votes
0answers
446 views

IPsec IKEv2 on OpenWrt fails to establish tunnel

Following these instructions in order to configure IPSec IKEv2 VPN server on OpenWRT (15.05 Chaos Calmer) Router: Linksys AC1900-WRT # uname -a Linux OpenWrt 3.18.23 #1 SMP Sun Jan 31 12:53:24 CET ...
0
votes
1answer
79 views

internet sharing over ipsec

I try to connect my Windows 7 workstation to the Internet over ipsec tunnel. I have: 192.168.88.251 - win7 workstation 192.168.88.1 - my mikrotik router VPN_IPSEC - my vpn with ipsec ...
0
votes
0answers
73 views

IPsec tunnel MTU too small

I am currently trying to set up an IPsec tunnel between a roadwarrior and a private network by using strongswan. I was able to establish the connection and I am able to ping between the roadwarrior ...
0
votes
0answers
330 views

How do you connect to VPN with IKEV2 with EAP-TLS authentication on Ubuntu 16.0.4?

I've recently received three files called: vpn-host-certificate.cer company-ca-certificate.cer me.p12 My work environment is Ubuntu 16.0.4. It has been requested that I connect to a VPN that is ...
1
vote
0answers
1k views

Strongswan, how to configure ipsec site-to-site using psk?

I'm setting up ipsec site-to-site VPN connection (with pre-shared key auth method). However I'm unsure of the correct values to put in ipsec.conf. vpn server ip - xx.45.40.46 encryption algorithm - ...
2
votes
2answers
13k views

L2TP/IPsec VPN fails to connect on Windows 10 - Works fine on iOS

I’ve configured an L2TP/ipsec server with a pre-shared key that works like a charm on my phone. I’ve tried several ways including disabling of firewall to connect on Windows 10 but it always fails. ...
1
vote
0answers
224 views

Getting Timeout when connecting to StrongSwan IPSec

I've tried to set up a Root Server in the public Internet with StrongSwan to use it as a VPN Server. Plan is to tunnel all Internet Traffic for some devices via this server. I've also set up an ...
1
vote
1answer
694 views

Force Windows IPSec/L2TP VPN to use AES in IPSec main mode

The RAS-based IPSec VPN client in Windows does not seem to respect the IPSec defaults in Windows Firewall (which hosts the IPSec driver), but insists on using 3DES encryption with SHA1 integrity for ...
1
vote
0answers
230 views

Strongswan ikev2: https stops working on client when connected to vpn server

I have set up strongswan 5.3.3-1 on OpenWRT 15.05 based router. Followed this tutorial The certificate for Server side authentication is issued by Let's Encrypt - I use it for my synology box and it ...
0
votes
0answers
228 views

Default route broken when connecting a Mac to a Azure Virtual Network (P2S connection)

I want to connect to my Azure Virtual Network through IPsec from a OSX machine. The desired configuration would be that all the "normal" traffic goes out through my local gateway and only the traffic ...
0
votes
0answers
403 views

Issues with IPSEC configuration using ip xfrm

I've been trying to manually add an SA into the Linux Kernel Security Association Database but I keep getting an error saying "No such file or directory". I want to create an SA that only uses ESP ...
0
votes
0answers
67 views

Windows connection sharing with IPSec?

My computer is connected to an IPSec VPN. When I share my computer's connection so my mobile phone can connect to it, I cannot access the Internet on my mobile phone if my computer is connected to the ...
1
vote
1answer
114 views

Cannot create Security Association in CentOS 7.4 using Setkey

I've been asked to migrate from CentOS 6.8 to 7.4 on all of our Linux devices. I'm running into an issue with loading Security Associations into the Linux kernel. I'm using ipsec-tools' ...
1
vote
0answers
426 views

Can't SSH into machine with ipsec VPN

I have an ubuntu virtual machine with bridged adapter which I've configured to use an ipsec VPN. I can SSH into the machine just fine, but when I turn on the VPN, I can't. The VPN tunnel also makes ...
1
vote
1answer
39 views

IPSec doesn't hide IAX2 informations

I am trying to setup a secure truncked IAX2 connexion with IPSec between routers: But when I make sniffing attack with wireshark, all call's informations are showen ! IPsec is well configured and ...
0
votes
0answers
305 views

Setup static routes with Libreswan

We are using Libreswan to connect On-Premise network to Azure and BGP to advertise routes. But Azure BGP it's eBGP with 2 hops. The use case it's: a. setup IPSec tunnel b. route Azure Peer IP via ...
0
votes
0answers
122 views

IPSec VPN Routed LANs

Recently I changed from a home-run OpenVPN to a home-run Cisco (XAuth) IPSec VPN for more compatibility. However, I haven't found documentation on "pushing" routes from the IPSec server to clients. In ...
0
votes
1answer
206 views

Why does VPN client connect with pfs=yes when server has pfs=no?

I have a small VPN set-up. The client in question is a Raspberry Pi running strongswan and xl2tpd to run as IPsec/L2TP. I made a configuration mistake on the client where I set pfs=yes (for perfect ...
0
votes
1answer
809 views

strongswan roadwarrior doesn't route properly

I want to have a Linux client connect to a Linux gateway so it can access the hosts from that network (typical road warrior setup). I have this config on the server side: conn vpnserver-ikev2 ...
0
votes
1answer
389 views

Required ICMP types for IPSec tunnel?

I have IPSec tunnel set up between 2 routers. It used to work fine, however recently I hardened policy in IDS and I started getting alerts about ICMP type 11 code 1 being sent from one router to ...
3
votes
1answer
3k views

strongSwan - no matching peer config found

I am trying to setup strongSwan to configure an iPhone to it but I am getting an error that I have trouble overcoming. no matching peer config found The complete debug log is as follows: root@vpn-...
0
votes
1answer
84 views

Can not access internal web server over IPsec vpn

I have configured my Cisco router(which is my gateway) to handle remote access IPsec VPN connections from Android clients and I have configured my Android phone to connect to the router over the VPN ...
0
votes
0answers
222 views

StrongSwan Roadwarrior not usable

I have a config on my lede router for a strongswan rw. The connection is up and pings are working. But for some reason I am not able to browse anything. [root@WOLVERINE tmp]# ipsec statusall Status ...
1
vote
0answers
284 views

Racoon IPsec-SA expired: ESP/Tunnel

Hello my vpn link vpn does not connect anymore and gives me the following logs thank you to help me please: Jun 19 08:06:25 FwME racoon: INFO: IPsec-SA established: ESP/Tunnel 89.30.97.2[500]->57....
0
votes
0answers
136 views

VPN, NAT - an out of the box solution

I am looking for an out of the box VPN solution for homeuser build with cheap hardware. The szenario is as easy as everywhere: Office: Server (private IPv4 LAN 192.168.10.x) <-> router and ...
0
votes
1answer
243 views

IPSec vpn fails with encryption transform rejected on CentOS 7 Libreswan

How should I fix this error from pluto when connecting to IPSec VPN in CentOS 7? --> May 27 22:33:22 localhost pluto[19657]: "f3a020a3-0d8d-48ff-a70a-9b9a72e9581f" #34: XAUTH: Successfully ...
0
votes
1answer
368 views

Connection through VPN and another subnet

I'm a Java Developer and for a few weeks I'll be in charge of the network as well. A client of ours wants a VPN connection to his network which I already mounted (Using a TP-link router to stablish ...
3
votes
1answer
2k views

Error 800 connecting to VPN on certain networks on Windows 10

I have an interesting issue trying to connect to a client's VPN on Windows 10 Pro. I can connect to the client's VPN while connecting through my phone (4G) but not the office network however other ...
0
votes
1answer
103 views

HMAC GCM failure

I am trying to configure for IPSEC GCM- this is the error I keep getting: Error(s): 'encryption-algorithm aes-256-gcm' 1) HMAC Authentication is not compatible with AES-GCM 2) commit failed: (...
2
votes
0answers
303 views

xl2tpd-control command not working

I have an cisco vpn server which which i am trying to connect an endpoint through VPN(IPsec/L2TP). I have strongswan, xl2tpd and pppd running on my machine. IPsec conection is established successfully ...
2
votes
1answer
774 views

MAC OS El Capitan - VPN Cisco IPSec shared secret not being saved

Summary: I can't connect to a VPN with Cisco IPSec apparently because the Shared Secret is not being saved after entering it (it always remains blank). Detailed explanation: I created a VPN ...
3
votes
1answer
100 views

How can I automatically connect to a VPN if I connect to a specific Wi-Fi network on Windows 10?

I have set up an IKEv2 VPN connection with Windows 10. How can I automatically connect to this VPN if my laptop connects to a specific Wi-Fi network?