Questions tagged [strongswan]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
19 views

Define PFS Group in Strongswan IKEv2/IPsec Phase 2 Settings

I am trying to setup a VPN connection on Ubuntu 20.04 using Strongswan. One of the requirements for the tunnel is to use PFS group 20. Is the PFS group 20 being set when we have the following line in ...
0
votes
1answer
9 views

VPN IKev2 Connection

I am attempting to create a Home VPN connection using a raspberry pi 4. I followed directions on https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-...
0
votes
0answers
21 views

Unable to NAT IP with Iptables and Strongswan in AWS

I'v configured Strongswan and can successfully bring the VPN tunnel up on an AWS EC2 instance but I’m having issues with the traffic because we need to NAT the private IP address of my EC2 instance so ...
0
votes
1answer
280 views

Migrating from strongswan to libreswan

I have this working strongswan config for IKEv2 with PSK and USER_FQDNs connections { IKEv2PSK { remote_addrs = 81.81.81.81 vips = 0.0.0.0 version = 2 dpd_delay = ...
0
votes
1answer
293 views

IPSec nftables strongswan

How to configure nftables to allow inbound only ipsec traffic and process rules after decryption. I have nftable.conf: #!/sbin/nft -f flush ruleset # ----- IPv4 ----- table ip filter { chain ...
0
votes
0answers
158 views

StrongSwan configuration from Shrew VPN

I'm trying to configure the strongSwan linux client for my vpn connection. The starting configuration I am using is that of Shrew vpn. This is the shrew vpn config file: n:network-ike-port:500 n:...
0
votes
0answers
16 views

centos strongswan routing issue from other network systems

In attached architecture, I am connected from one of the server in network to other network using strongswan (centos). When I ping 10.0.31.6 from 172.29.0.14 after establishing ipsec connecting, it ...
0
votes
0answers
54 views

How to verify lets encrypt certs with server? - OSCP error linux Strongswan

Goal I am attempting to build an IKEv2 VPN using the strongswan IPSEC implementation with Let's Encrypt certificates and RSA authentication. I successfully built it in the legacy ipsec.conf format, ...
1
vote
2answers
1k views

How can I route only a particular subnet to the StrongSwan VPN but not my whole traffic on linux?

I'm have no particular competences on networking, so I'll do my best to explain my needs. On my Linux laptop I'm running StrongSwan (with NetworkManager) to connect to a particular VPN with IPsec. ...
0
votes
1answer
92 views

Can any IPSec client connect to any IPSec server?

I have been pondering setting up my own VPS with a VPN server running. Most often, OpenVPN is thrown around when users talk about setting up a VPN on Linux, but this tech seems to live a bit on the ...
0
votes
0answers
200 views

Strongswan IPsec configuration ( Linux - Cisco)

I'm configuring site-to-site ipsec tunnel. The error that I am getting shows that Quick Mode proposal (ESP) doesn't match Jan 27 09:23:42 raspberrypi charon: 10[ENC] generating QUICK_MODE request ...
0
votes
0answers
76 views

ikev2 vpn cant connect to own server via vpn connection win10

I just setup a strongswan ikev2 vpn server. On the same server I host a http software on port 8123. I am currently on a locked down network with only a few open ports. Using the vpn I can connect to ...
0
votes
0answers
58 views

Some VPN traffic blocked to secure endpoints

I have a VPN server (strongswan) used for testing that I connect to via IKEv2 on a variety of systems (here, I tried Windows, Ubuntu, & Android), normally without issues. This morning, I was on a ...
0
votes
0answers
588 views

Strongswan ipsec site-site configuration

I'm configuring site-to-site ipsec tunnel using strongswan, but i don`t know how is ipsec tunnel opened on remote side (definitely without using strongswan) When i try to connect - i get no response ...
0
votes
0answers
690 views

Connecting Win 10 roadwarrior to AWS strongSwan VPN - not able to find a certificate usable with Extensible Authentication Protocol

I managed to connect two AWS subnets in different zones over strongSwan VPN using ike2 with the aes256 encryption. So, Master CA key is created, self-signed CA certificate, as well as private and ...
0
votes
0answers
54 views

Strongswan on vServer not routing correctly

I tried to replicate a strongswan setup I am using on an openWRT router at home on a vServer running strongswan 5.5.1-4+deb9u4. The client is an iPad. uname -a Linux t 2.6.32-042stab127.2 #1 SMP ...
0
votes
0answers
851 views

StrongSwan site-site tunnel with multiple subnets on my side

Morning all, I am trying to set up multiple site-site VPNs with StrongSwan on google cloud server with different subnets on my side. I am able to set up the tunnels, but when I connect from my ...
0
votes
0answers
331 views

IPv6 Strongswan IPSec + NAT

I have a VPS with an IPv4 (/32) and an IPv6 (/128). I've set up Strongswan and my IPv4 IPSec server works just fine - I'm using it all the time. I'm trying to get it to work with IPv6 and so far it'...
0
votes
1answer
758 views

Strongswan IPsec configuration

I'm configuring site-to-site ipsec tunnel, being given very few details about the remote host. On my server I'm using strongswan with the following ipsec.conf: conn %default ikelifetime=60m ...
0
votes
0answers
1k views

Connect Strongswan/VPN-Client (Debian) to IPSec/L2TP Server (Windows 2012) - AUTHENTIFICATION_FAILED

I am trying to connect my Debian Stretch box with a network running Windows-Only machines. There is a node there that acts as a VPN Server that runs Windows Server 2012R2. I am able to connect to it ...
0
votes
0answers
223 views

How to know and fix fails or errors in randomly down ipsec tunnel connection?

I have a server connected by VPN site to site with strongswan (first time with VPN), when I start the connection (sudo ipsec up my-conn) all work good but in some point the server lost the connection (...
0
votes
1answer
259 views

Docker: host grabs ICMP packets (Strongswan IPsec)

These machines are Docker containers with strongswan installed running IPsec tunnels. routeur1 and routeur2 have a site-to-site IPsec tunnel, while pc-nomad have a IPsec tunnel with routeur1. ...
0
votes
1answer
1k views

Using local unbound DNS server for Strongswan VPN connections

Idea: I would like to use unbound DNS installed on the same server as VPN solution, to block ads and similar unwanted sites with DNS for all VPN connections. Currently unbound is set up for local ...
0
votes
1answer
2k views

Strongswan Packets are not routed

I'm trying to configure strongswan as a IKEv2 VPN server behind my NAT. The network topology looks the following: The VPN server (10.0.0.1) is behind a NAT (Default Gateway 10.0.0.138) which forwards ...
2
votes
3answers
3k views

Windows client cannot connect to StrongSwan: “EAP-Identity request configured, but not supported”

I've followed this tutorial to set up a StrongSwan VPN server, with the exceptions that I was using Debian 9, and that I used certs I already had from Let's Encrypt instead of standing up a CA. ...
0
votes
0answers
1k views

Ubuntu 18.04 with dnsmasq causing dns leaks

This problem is making me tear out my hair, as I simply cannot believe dnsmasq can work in this fashion by default. It is absolutely preposterous ok so dnsmasq is installed 2.79-1 And server is ...
0
votes
1answer
176 views

internet sharing over ipsec

I try to connect my Windows 7 workstation to the Internet over ipsec tunnel. I have: 192.168.88.251 - win7 workstation 192.168.88.1 - my mikrotik router VPN_IPSEC - my vpn with ipsec ...
0
votes
0answers
317 views

Strongswan not working with wifi in ubuntu

Working on Ubuntu Linux. I have build the latest version of strongSwan from scratch. But somehow I can't connect to a VPN using my hotspot. What I want to know is, how do I tunnel the wifi through ...
1
vote
0answers
2k views

Strongswan, how to configure ipsec site-to-site using psk?

I'm setting up ipsec site-to-site VPN connection (with pre-shared key auth method). However I'm unsure of the correct values to put in ipsec.conf. vpn server ip - xx.45.40.46 encryption algorithm - ...
1
vote
0answers
522 views

Getting Timeout when connecting to StrongSwan IPSec

I've tried to set up a Root Server in the public Internet with StrongSwan to use it as a VPN Server. Plan is to tunnel all Internet Traffic for some devices via this server. I've also set up an ...
1
vote
0answers
351 views

Strongswan ikev2: https stops working on client when connected to vpn server

I have set up strongswan 5.3.3-1 on OpenWRT 15.05 based router. Followed this tutorial The certificate for Server side authentication is issued by Let's Encrypt - I use it for my synology box and it ...
2
votes
0answers
561 views

IKEv2 VPN connected but no Internet

There are a lot of questions on SE regarding this and I tried nearly all of them. Unfortunately none solved my problem. I followed the instruction on DigitalOcean, but adapted it a little to fit my ...
0
votes
1answer
2k views

How do I use network manager to connect to IPSec VPN?

I have set up a VPN connection with strongswan throught the command line, which works fine. I would like to use network manager instead, but I am having a hard time configuring it correctly. I am ...
0
votes
1answer
1k views

How can I make swanctl update resolv.conf?

I'm connecting to an IPSec VPN with strongswan and swanctl. I had some trouble getting it to work with the ipsec command, but after changing to swanctl instead, initiating the connection works fine. ...
0
votes
1answer
333 views

Why does VPN client connect with pfs=yes when server has pfs=no?

I have a small VPN set-up. The client in question is a Raspberry Pi running strongswan and xl2tpd to run as IPsec/L2TP. I made a configuration mistake on the client where I set pfs=yes (for perfect ...
0
votes
1answer
2k views

strongswan roadwarrior doesn't route properly

I want to have a Linux client connect to a Linux gateway so it can access the hosts from that network (typical road warrior setup). I have this config on the server side: conn vpnserver-ikev2 ...
3
votes
1answer
5k views

strongSwan - no matching peer config found

I am trying to setup strongSwan to configure an iPhone to it but I am getting an error that I have trouble overcoming. no matching peer config found The complete debug log is as follows: root@vpn-...
0
votes
0answers
306 views

StrongSwan Roadwarrior not usable

I have a config on my lede router for a strongswan rw. The connection is up and pings are working. But for some reason I am not able to browse anything. [root@WOLVERINE tmp]# ipsec statusall Status ...
1
vote
1answer
916 views

Routing IPsec VPN for VM subnet

My physical computer is able to establish an IPsec tunnel (with Strongswan) to my internet-accessible VPS, so that my physical computer's internet traffic goes through my VPS. I also tried and was ...
0
votes
0answers
796 views

Strongswan persistent connection

I want to setup a persistent connection between a linux strongswan client and cisco router, which means ipsec tunnel will up forever? Is it possible? In my current configuration, tunnel will down ...
0
votes
1answer
809 views

Strongswan not all traffic is encrypted

I have set up strongswan with Cisco router with following configuration: config setup uniqueids=never ca default_ca auto=add conn %default keyexchange=ikev1 type=tunnel left=%...
2
votes
0answers
861 views

Strongswan enable ESP packets hardware acceleration

My Linux kernel already support CESA hardware acceleration, and openssl can use this feature: # openssl speed -evp des3 -elapsed # cat /proc/interrupts | grep cesa 51: 464810 GIC cesa0 ...
2
votes
1answer
287 views

Strongswan 5.5.0 RSA sigkeys

I'm setting up an IPSec connection between two Strongswan clients using RSA "sigkeys." The documentation says that leftsigkey and rightsigkey are used to provide the public RSA keys for the two ...
0
votes
0answers
384 views

VPN some websites do not load on a specific WiFi

I have a RaspberryPi 2 with strongswan installed on it, using suite B crypto, IKev2 and fragmentation on. When I Connect to this VPN with my MacBook on a Hotspot which routes the traffic over the UK, ...
1
vote
0answers
16 views

Required VPN Type

So I want to setup a VPN on my Debian server at home using Strongswan w/IPSec using IKEv2 pre-issued certificates using my my own CA. The way I plan to work it out single tunnel so all traffic is ...
0
votes
1answer
2k views

Strongswan ipv6 tunnel routing

I'm trying to solve a weird problem in routing. I've got my router set up (Turris, running customized OpenWRT), with Strongswan tunneling ipv6 connection. This works fine for the router itself, as it'...
0
votes
1answer
447 views

Strongswan IPSec to Amazon VPC going down randomly

I got established connection between Amazon VPC and my site using strongswan. I followed documentation from Amazon. Tunnel can be established and is running but is going down randomly if I can say. ...
0
votes
2answers
5k views

How to redirect LAN traffic to a L2TP/IPsec client connection on a gateway?

I established a L2TP/IPsec client connection on the gateway, and I'm trying to redirect my host on LAN to use this connection when accessing the Internet. Here is the network topology. This is my ...
0
votes
1answer
1k views

How to access the service on the server which act as the VPN Gateway as well?

I am currently running a VPN Gateway by Strongswan on a CentOS 6.5 VPS. The CentOS server has one eth port. The VPN is using IKEv2 and the connections between clients and server are established. The ...
1
vote
1answer
697 views

Routing 192.168.XX.XX address through local 192.168.1.1 instead of VPN

The problem lays on my side. The ip address im trying to resolve is 192.168.4.201 which routes through 192.168.1.1 (my local area network) instead of routing through VPN (10.10.X.X). How do i force ...