Questions tagged [strongswan]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
26 views

ikev2 vpn cant connect to own server via vpn connection win10

I just setup a strongswan ikev2 vpn server. On the same server I host a http software on port 8123. I am currently on a locked down network with only a few open ports. Using the vpn I can connect to ...
0
votes
0answers
19 views

Some VPN traffic blocked to secure endpoints

I have a VPN server (strongswan) used for testing that I connect to via IKEv2 on a variety of systems (here, I tried Windows, Ubuntu, & Android), normally without issues. This morning, I was on a ...
0
votes
0answers
56 views

Strongswan ipsec site-site configuration

I'm configuring site-to-site ipsec tunnel using strongswan, but i don`t know how is ipsec tunnel opened on remote side (definitely without using strongswan) When i try to connect - i get no response ...
0
votes
0answers
54 views

backup tunnels in strongswan with two wan links

I have a topology in my company H have a problem we have two builds and want to create two tunnels but one of them is a backup tunnel I have two wan links one of these is very stable and important ...
0
votes
0answers
137 views

Connecting Win 10 roadwarrior to AWS strongSwan VPN - not able to find a certificate usable with Extensible Authentication Protocol

I managed to connect two AWS subnets in different zones over strongSwan VPN using ike2 with the aes256 encryption. So, Master CA key is created, self-signed CA certificate, as well as private and ...
0
votes
0answers
32 views

Strongswan on vServer not routing correctly

I tried to replicate a strongswan setup I am using on an openWRT router at home on a vServer running strongswan 5.5.1-4+deb9u4. The client is an iPad. uname -a Linux t 2.6.32-042stab127.2 #1 SMP ...
0
votes
0answers
56 views

strongswan seems drop udp-encap esp packets

I have setup a strongswan ipsec tunnel between to sites. The tunnel is up and ipsec status shows: Status of IKE charon daemon (strongSwan 5.6.2, Linux 4.15.0-52-generic, x86_64): uptime: 17 ...
0
votes
0answers
200 views

StrongSwan site-site tunnel with multiple subnets on my side

Morning all, I am trying to set up multiple site-site VPNs with StrongSwan on google cloud server with different subnets on my side. I am able to set up the tunnels, but when I connect from my ...
0
votes
0answers
37 views

How to update network manager dns via resolvconf?

My network manager was configured to use systemd-resolved as dns backend. However, if I start strongswan vpn which uses resolvconf to update dns, the dns didn’t change at all. So, how to change dns ...
0
votes
0answers
32 views

Strongswan Established but no traffic

I'm starting with StrongSwan to use as client with fortigate as server. I have my conection established but I'm not able to get any traffic. Could I use docker network as subnet for strongswan? ...
0
votes
0answers
164 views

handling INTERNAL_IP4_NETMASK attribute failed (when configuring iekv2)

I am using openwrt as client to connect to nordvpn.IEKv2/ipsec Configuration and following procedure which is given by them on this link https://nordvpn.com/tutorials/linux/ikev2ipsec/ I downloaded ...
0
votes
0answers
174 views

IPv6 Strongswan IPSec + NAT

I have a VPS with an IPv4 (/32) and an IPv6 (/128). I've set up Strongswan and my IPv4 IPSec server works just fine - I'm using it all the time. I'm trying to get it to work with IPv6 and so far it'...
0
votes
1answer
340 views

Strongswan IPsec configuration

I'm configuring site-to-site ipsec tunnel, being given very few details about the remote host. On my server I'm using strongswan with the following ipsec.conf: conn %default ikelifetime=60m ...
0
votes
0answers
704 views

Connect Strongswan/VPN-Client (Debian) to IPSec/L2TP Server (Windows 2012) - AUTHENTIFICATION_FAILED

I am trying to connect my Debian Stretch box with a network running Windows-Only machines. There is a node there that acts as a VPN Server that runs Windows Server 2012R2. I am able to connect to it ...
0
votes
0answers
152 views

How to know and fix fails or errors in randomly down ipsec tunnel connection?

I have a server connected by VPN site to site with strongswan (first time with VPN), when I start the connection (sudo ipsec up my-conn) all work good but in some point the server lost the connection (...
0
votes
1answer
190 views

Docker: host grabs ICMP packets (Strongswan IPsec)

These machines are Docker containers with strongswan installed running IPsec tunnels. routeur1 and routeur2 have a site-to-site IPsec tunnel, while pc-nomad have a IPsec tunnel with routeur1. ...
0
votes
1answer
668 views

Using local unbound DNS server for Strongswan VPN connections

Idea: I would like to use unbound DNS installed on the same server as VPN solution, to block ads and similar unwanted sites with DNS for all VPN connections. Currently unbound is set up for local ...
0
votes
1answer
1k views

Strongswan Packets are not routed

I'm trying to configure strongswan as a IKEv2 VPN server behind my NAT. The network topology looks the following: The VPN server (10.0.0.1) is behind a NAT (Default Gateway 10.0.0.138) which forwards ...
2
votes
3answers
2k views

Windows client cannot connect to StrongSwan: “EAP-Identity request configured, but not supported”

I've followed this tutorial to set up a StrongSwan VPN server, with the exceptions that I was using Debian 9, and that I used certs I already had from Let's Encrypt instead of standing up a CA. ...
0
votes
0answers
922 views

Ubuntu 18.04 with dnsmasq causing dns leaks

This problem is making me tear out my hair, as I simply cannot believe dnsmasq can work in this fashion by default. It is absolutely preposterous ok so dnsmasq is installed 2.79-1 And server is ...
0
votes
1answer
118 views

internet sharing over ipsec

I try to connect my Windows 7 workstation to the Internet over ipsec tunnel. I have: 192.168.88.251 - win7 workstation 192.168.88.1 - my mikrotik router VPN_IPSEC - my vpn with ipsec ...
0
votes
0answers
259 views

Strongswan not working with wifi in ubuntu

Working on Ubuntu Linux. I have build the latest version of strongSwan from scratch. But somehow I can't connect to a VPN using my hotspot. What I want to know is, how do I tunnel the wifi through ...
1
vote
0answers
2k views

Strongswan, how to configure ipsec site-to-site using psk?

I'm setting up ipsec site-to-site VPN connection (with pre-shared key auth method). However I'm unsure of the correct values to put in ipsec.conf. vpn server ip - xx.45.40.46 encryption algorithm - ...
1
vote
0answers
417 views

Getting Timeout when connecting to StrongSwan IPSec

I've tried to set up a Root Server in the public Internet with StrongSwan to use it as a VPN Server. Plan is to tunnel all Internet Traffic for some devices via this server. I've also set up an ...
1
vote
0answers
321 views

Strongswan ikev2: https stops working on client when connected to vpn server

I have set up strongswan 5.3.3-1 on OpenWRT 15.05 based router. Followed this tutorial The certificate for Server side authentication is issued by Let's Encrypt - I use it for my synology box and it ...
2
votes
0answers
475 views

IKEv2 VPN connected but no Internet

There are a lot of questions on SE regarding this and I tried nearly all of them. Unfortunately none solved my problem. I followed the instruction on DigitalOcean, but adapted it a little to fit my ...
0
votes
1answer
2k views

How do I use network manager to connect to IPSec VPN?

I have set up a VPN connection with strongswan throught the command line, which works fine. I would like to use network manager instead, but I am having a hard time configuring it correctly. I am ...
0
votes
1answer
804 views

How can I make swanctl update resolv.conf?

I'm connecting to an IPSec VPN with strongswan and swanctl. I had some trouble getting it to work with the ipsec command, but after changing to swanctl instead, initiating the connection works fine. ...
0
votes
1answer
291 views

Why does VPN client connect with pfs=yes when server has pfs=no?

I have a small VPN set-up. The client in question is a Raspberry Pi running strongswan and xl2tpd to run as IPsec/L2TP. I made a configuration mistake on the client where I set pfs=yes (for perfect ...
0
votes
1answer
1k views

strongswan roadwarrior doesn't route properly

I want to have a Linux client connect to a Linux gateway so it can access the hosts from that network (typical road warrior setup). I have this config on the server side: conn vpnserver-ikev2 ...
3
votes
1answer
4k views

strongSwan - no matching peer config found

I am trying to setup strongSwan to configure an iPhone to it but I am getting an error that I have trouble overcoming. no matching peer config found The complete debug log is as follows: root@vpn-...
0
votes
0answers
278 views

StrongSwan Roadwarrior not usable

I have a config on my lede router for a strongswan rw. The connection is up and pings are working. But for some reason I am not able to browse anything. [root@WOLVERINE tmp]# ipsec statusall Status ...
1
vote
1answer
782 views

Routing IPsec VPN for VM subnet

My physical computer is able to establish an IPsec tunnel (with Strongswan) to my internet-accessible VPS, so that my physical computer's internet traffic goes through my VPS. I also tried and was ...
0
votes
0answers
713 views

Strongswan persistent connection

I want to setup a persistent connection between a linux strongswan client and cisco router, which means ipsec tunnel will up forever? Is it possible? In my current configuration, tunnel will down ...
0
votes
1answer
661 views

Strongswan not all traffic is encrypted

I have set up strongswan with Cisco router with following configuration: config setup uniqueids=never ca default_ca auto=add conn %default keyexchange=ikev1 type=tunnel left=%...
2
votes
0answers
704 views

Strongswan enable ESP packets hardware acceleration

My Linux kernel already support CESA hardware acceleration, and openssl can use this feature: # openssl speed -evp des3 -elapsed # cat /proc/interrupts | grep cesa 51: 464810 GIC cesa0 ...
2
votes
1answer
191 views

Strongswan 5.5.0 RSA sigkeys

I'm setting up an IPSec connection between two Strongswan clients using RSA "sigkeys." The documentation says that leftsigkey and rightsigkey are used to provide the public RSA keys for the two ...
0
votes
0answers
367 views

VPN some websites do not load on a specific WiFi

I have a RaspberryPi 2 with strongswan installed on it, using suite B crypto, IKev2 and fragmentation on. When I Connect to this VPN with my MacBook on a Hotspot which routes the traffic over the UK, ...
1
vote
0answers
16 views

Required VPN Type

So I want to setup a VPN on my Debian server at home using Strongswan w/IPSec using IKEv2 pre-issued certificates using my my own CA. The way I plan to work it out single tunnel so all traffic is ...
0
votes
1answer
1k views

Strongswan ipv6 tunnel routing

I'm trying to solve a weird problem in routing. I've got my router set up (Turris, running customized OpenWRT), with Strongswan tunneling ipv6 connection. This works fine for the router itself, as it'...
0
votes
1answer
407 views

Strongswan IPSec to Amazon VPC going down randomly

I got established connection between Amazon VPC and my site using strongswan. I followed documentation from Amazon. Tunnel can be established and is running but is going down randomly if I can say. ...
0
votes
2answers
4k views

How to redirect LAN traffic to a L2TP/IPsec client connection on a gateway?

I established a L2TP/IPsec client connection on the gateway, and I'm trying to redirect my host on LAN to use this connection when accessing the Internet. Here is the network topology. This is my ...
0
votes
1answer
906 views

How to access the service on the server which act as the VPN Gateway as well?

I am currently running a VPN Gateway by Strongswan on a CentOS 6.5 VPS. The CentOS server has one eth port. The VPN is using IKEv2 and the connections between clients and server are established. The ...
1
vote
1answer
591 views

Routing 192.168.XX.XX address through local 192.168.1.1 instead of VPN

The problem lays on my side. The ip address im trying to resolve is 192.168.4.201 which routes through 192.168.1.1 (my local area network) instead of routing through VPN (10.10.X.X). How do i force ...
2
votes
1answer
5k views

How to configure strongSwan to trust a raw RSA key

I need to use raw RSA keys for IKEv2 authentication (for testing purposes), but am not able to configure strongSwan (5.1.2) to "trust" them for remote authentication. ipsec.conf: conn %default ...