Questions tagged [strongswan]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

Routing connection to Azure DB through StrongSwan IPSec site-to-site tunnel

I have a Linux Strongswan IPSec site-to-site connection up and stable to an Azure Cloud Network, I'm trying to route an sql connection with a python script through the tunnel to an Azure database in ...
0 votes
1 answer
91 views

How to configure group attributes for strongswan EAP-radius with freeradius mysql

so I am trying to figure out how to link up the usage of Groups in Strongswan with Freeradius using SQL (plus daloradius) Currently the authentication between Strongswan and Freeradius is working fine....
  • 1
0 votes
1 answer
137 views

Strongswan ipsec tunnel not establishing connection with AAA server

I have two VM VM-1 : I have installed Strongswan 5.9. VM-2 : Installed Strongswan 5.9, Installed freeradius (radius server) I have started Strongswan on both VM by systemctl start strongswan. When I ...
  • 103
0 votes
0 answers
381 views

establishing IKE_SA failed, peer not responding Strongswan

Hi I am trying to setup a IPsec tunneling by strongswan on Almalinux 8. Below are my swanctl.conf file. When I trying to run swanctl --initiate --child net-net from VM-1 I am getting below error. What ...
  • 103
0 votes
1 answer
427 views

NO_PROPOSAL_CHOSEN strongswan ipsec tunnel

Hi I am trying to setup site-to-site vpn tunneling on AWS VMs. Below are my ipsec.conf files for both VMs. VM-1 (assume IP address : 1.2.3.4) conn %default lifetime=60m mobike=no ...
  • 103
0 votes
1 answer
183 views

Strongswan ipsec tunneling between two VMs

I am very new to VPN and IPsec tunneling. I have two VMs between them I need to establish IPsec tunnel by using pre-defined PSK key or provided certificate .pem. I have installed strongswan-5.9.6-1....
  • 103
1 vote
0 answers
241 views

StrongSwan 5.9.1 (Debian Bullseye): Traffic from IPsec tunnel gets forwarded via Ethernet, but not via bridge

The following problem: I have a server that is, in addition to other tasks not relevant for the problem at hand, supposed to act as an IPsec gateway. When I'm using the Ethernet interface pointing to ...
  • 211
1 vote
0 answers
103 views

Configuring proxy Squid under Strongswan private network

I cannot connect to Proxy Server (Squid) from my computer (Windows 10) via VPN (StrongSwan, IKev2) on my VPS (CentOS 8) I have no idea what I'm doing, so please bare with me! Port in firewall-cmd is ...
  • 11
1 vote
1 answer
644 views

How to configure strongSwan eap-radius with FreeRadius for EAP-MSCHAPv2 authentication?

I am trying to configure a strongSwan IPsec VPN with RADIUS authentication. The actual EAP-MSCHAPv2 authentication to FreeRadius with OpenLDAP for username/passwords is successful, but then I am stuck ...
  • 13
0 votes
0 answers
128 views

Strongswan VPN works on Digital Ocean but doesn't in GGL cloud

I've set up 2 Strongswan VPNs in Digital Ocean. Both work. 2 of my attempts have failed in GGL cloud. Documenting process here. Only noticeable difference is eth0 on DO vs. ens4 on GGL. I updated /...
  • 141
0 votes
0 answers
50 views

What is my VPN endpoint vs public ip? StrongSwan ikelifetime not working

I have spent the last week researching and building a StrongSwan IKEv2 VPN server. This VPN is to connect to another organization's data server and will likely also host software to read the data ...
  • 141
0 votes
1 answer
3k views

Strongswan IKEv2 VPN server Ubuntu 22.04 LTS - network connection between your computer & VPN svr could not be established..remote svr not responding

Followed this tutorial: Create an IKEv2 server Ref documentation for that tutorial: Guide: How to Set Up and Use IKEv2 VPN On Win 10, from powershell (Admin), I ran: certutil -f -importpfx "C:\...
  • 141
0 votes
0 answers
489 views

Strongswan Site-to-site VPN - single NIC behind NAT

Please bear with me. I have really tried to experiment, search for answers and read documentation. Site to site VPN, one side behind NAT. Symptom: VPN GW's can connect and ping each other internal IP. ...
1 vote
1 answer
722 views

Strongswan VPN certificate authentication failed

I've installed strongswan vpn on my ubuntu server. Set up certificate authentication. I've set up my android-phone and it works fine. But connection didn't established on the windows machine. I copied ...
0 votes
1 answer
569 views

DNS issue with strongSwan on Pop_OS 21.10

I have installed strongswan-starter on Pop!_OS to connect to my workplace. I have first installed it on Ubuntu (where everything worked perfectly fine) but decided to switch to Pop!_OS 21.10. When I ...
  • 101
0 votes
1 answer
811 views

Single IP left subnet and routing traffic through tunnel in strongswan

I must set up an ipsec tunnel to use an external service provided by another company (so I have no control on the other side and can't change anything there). Let's say that: 192.168.0.0/24 is my ...
1 vote
1 answer
121 views

Strongswan & Windows client: connection freezes in a few minutes

On an AWS VPS, I installed Strongswan to use it as a VPN. It works fine with iPhone client. However, when I try to connect from a Windows client, the SA connection gets established successfully and ...
  • 176
0 votes
0 answers
49 views

Connecting all vpn clients into a single network

I have a Ubuntu server with IKEv2 VPN configured. I have 2 (will be more) Windows clients, that can connect to VPN. I want them all to be "bridged", like they are all physically connected to ...
  • 1
1 vote
0 answers
60 views

routing to virtual ip address

I have a Linux box that establishes a StrongSwan VPN connection. As I understand it, this creates a virtual IP address where packets are routed to so they get into the tunnel. I have other Linux ...
0 votes
1 answer
33 views

strongswan vpn printing on client

I am connecting with strongswan (IKEv2) from my Debian 11 Computer ("client", 192.168.0.217) to a network behind a bintec Router (Digitalisierungsbox standard by German Telecom 192.168.0.254)...
  • 1
1 vote
0 answers
40 views

Strongswan: Two cert-based ike2 connections in parallel: Conflict?

any help on the following issue is highly appreciated: I cannot use the two cert-based connections below (conn one and conn two) in parallel. Individually (so commenting out one of them), they work ...
1 vote
1 answer
2k views

Define PFS Group in Strongswan IKEv2/IPsec Phase 2 Settings

I am trying to setup a VPN connection on Ubuntu 20.04 using Strongswan. One of the requirements for the tunnel is to use PFS group 20. Is the PFS group 20 being set when we have the following line in ...
0 votes
1 answer
187 views

VPN IKev2 Connection

I am attempting to create a Home VPN connection using a raspberry pi 4. I followed directions on https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-...
user avatar
0 votes
1 answer
2k views

Migrating from strongswan to libreswan

I have this working strongswan config for IKEv2 with PSK and USER_FQDNs connections { IKEv2PSK { remote_addrs = 81.81.81.81 vips = 0.0.0.0 version = 2 dpd_delay = ...
0 votes
1 answer
3k views

IPSec nftables strongswan

How to configure nftables to allow inbound only ipsec traffic and process rules after decryption. I have nftable.conf: #!/sbin/nft -f flush ruleset # ----- IPv4 ----- table ip filter { chain ...
0 votes
0 answers
175 views

How to verify lets encrypt certs with server? - OSCP error linux Strongswan

Goal I am attempting to build an IKEv2 VPN using the strongswan IPSEC implementation with Let's Encrypt certificates and RSA authentication. I successfully built it in the legacy ipsec.conf format, ...
  • 1
4 votes
2 answers
7k views

How can I route only a particular subnet to the StrongSwan VPN but not my whole traffic on linux?

I have no particular competences on networking, so I'll do my best to explain my needs. On my Linux laptop I'm running StrongSwan (with NetworkManager) to connect to a particular VPN with IPsec. This ...
  • 53
0 votes
1 answer
454 views

Can any IPSec client connect to any IPSec server?

I have been pondering setting up my own VPS with a VPN server running. Most often, OpenVPN is thrown around when users talk about setting up a VPN on Linux, but this tech seems to live a bit on the ...
  • 1,114
0 votes
0 answers
606 views

Strongswan IPsec configuration ( Linux - Cisco)

I'm configuring site-to-site ipsec tunnel. The error that I am getting shows that Quick Mode proposal (ESP) doesn't match Jan 27 09:23:42 raspberrypi charon: 10[ENC] generating QUICK_MODE request ...
0 votes
0 answers
180 views

ikev2 vpn cant connect to own server via vpn connection win10

I just setup a strongswan ikev2 vpn server. On the same server I host a http software on port 8123. I am currently on a locked down network with only a few open ports. Using the vpn I can connect to ...
0 votes
0 answers
95 views

Some VPN traffic blocked to secure endpoints

I have a VPN server (strongswan) used for testing that I connect to via IKEv2 on a variety of systems (here, I tried Windows, Ubuntu, & Android), normally without issues. This morning, I was on a ...
user avatar
0 votes
0 answers
1k views

Strongswan ipsec site-site configuration

I'm configuring site-to-site ipsec tunnel using strongswan, but i don`t know how is ipsec tunnel opened on remote side (definitely without using strongswan) When i try to connect - i get no response ...
  • 1
0 votes
0 answers
1k views

Connecting Win 10 roadwarrior to AWS strongSwan VPN - not able to find a certificate usable with Extensible Authentication Protocol

I managed to connect two AWS subnets in different zones over strongSwan VPN using ike2 with the aes256 encryption. So, Master CA key is created, self-signed CA certificate, as well as private and ...
  • 1
0 votes
0 answers
117 views

Strongswan on vServer not routing correctly

I tried to replicate a strongswan setup I am using on an openWRT router at home on a vServer running strongswan 5.5.1-4+deb9u4. The client is an iPad. uname -a Linux t 2.6.32-042stab127.2 #1 SMP ...
  • 31
0 votes
0 answers
514 views

IPv6 Strongswan IPSec + NAT

I have a VPS with an IPv4 (/32) and an IPv6 (/128). I've set up Strongswan and my IPv4 IPSec server works just fine - I'm using it all the time. I'm trying to get it to work with IPv6 and so far it'...
  • 237
0 votes
1 answer
1k views

Strongswan IPsec configuration

I'm configuring site-to-site ipsec tunnel, being given very few details about the remote host. On my server I'm using strongswan with the following ipsec.conf: conn %default ikelifetime=60m ...
0 votes
0 answers
1k views

Connect Strongswan/VPN-Client (Debian) to IPSec/L2TP Server (Windows 2012) - AUTHENTIFICATION_FAILED

I am trying to connect my Debian Stretch box with a network running Windows-Only machines. There is a node there that acts as a VPN Server that runs Windows Server 2012R2. I am able to connect to it ...
0 votes
0 answers
286 views

How to know and fix fails or errors in randomly down ipsec tunnel connection?

I have a server connected by VPN site to site with strongswan (first time with VPN), when I start the connection (sudo ipsec up my-conn) all work good but in some point the server lost the connection (...
  • 101
0 votes
1 answer
295 views

Docker: host grabs ICMP packets (Strongswan IPsec)

These machines are Docker containers with strongswan installed running IPsec tunnels. routeur1 and routeur2 have a site-to-site IPsec tunnel, while pc-nomad have a IPsec tunnel with routeur1. ...
  • 3
0 votes
1 answer
2k views

Using local unbound DNS server for Strongswan VPN connections

Idea: I would like to use unbound DNS installed on the same server as VPN solution, to block ads and similar unwanted sites with DNS for all VPN connections. Currently unbound is set up for local ...
  • 113
0 votes
1 answer
3k views

Strongswan Packets are not routed

I'm trying to configure strongswan as a IKEv2 VPN server behind my NAT. The network topology looks the following: The VPN server (10.0.0.1) is behind a NAT (Default Gateway 10.0.0.138) which forwards ...
  • 3
3 votes
3 answers
6k views

Windows client cannot connect to StrongSwan: "EAP-Identity request configured, but not supported"

I've followed this tutorial to set up a StrongSwan VPN server, with the exceptions that I was using Debian 9, and that I used certs I already had from Let's Encrypt instead of standing up a CA. ...
0 votes
0 answers
1k views

Ubuntu 18.04 with dnsmasq causing dns leaks

This problem is making me tear out my hair, as I simply cannot believe dnsmasq can work in this fashion by default. It is absolutely preposterous ok so dnsmasq is installed 2.79-1 And server is ...
  • 121
0 votes
1 answer
296 views

internet sharing over ipsec

I try to connect my Windows 7 workstation to the Internet over ipsec tunnel. I have: 192.168.88.251 - win7 workstation 192.168.88.1 - my mikrotik router VPN_IPSEC - my vpn with ipsec ...
0 votes
0 answers
481 views

Strongswan not working with wifi in ubuntu

Working on Ubuntu Linux. I have build the latest version of strongSwan from scratch. But somehow I can't connect to a VPN using my hotspot. What I want to know is, how do I tunnel the wifi through ...
1 vote
0 answers
3k views

Strongswan, how to configure ipsec site-to-site using psk?

I'm setting up ipsec site-to-site VPN connection (with pre-shared key auth method). However I'm unsure of the correct values to put in ipsec.conf. vpn server ip - xx.45.40.46 encryption algorithm - ...
1 vote
0 answers
854 views

Getting Timeout when connecting to StrongSwan IPSec

I've tried to set up a Root Server in the public Internet with StrongSwan to use it as a VPN Server. Plan is to tunnel all Internet Traffic for some devices via this server. I've also set up an ...
1 vote
0 answers
452 views

Strongswan ikev2: https stops working on client when connected to vpn server

I have set up strongswan 5.3.3-1 on OpenWRT 15.05 based router. Followed this tutorial The certificate for Server side authentication is issued by Let's Encrypt - I use it for my synology box and it ...
  • 2,038
2 votes
0 answers
840 views

IKEv2 VPN connected but no Internet

There are a lot of questions on SE regarding this and I tried nearly all of them. Unfortunately none solved my problem. I followed the instruction on DigitalOcean, but adapted it a little to fit my ...
  • 131
0 votes
1 answer
3k views

How do I use network manager to connect to IPSec VPN?

I have set up a VPN connection with strongswan throught the command line, which works fine. I would like to use network manager instead, but I am having a hard time configuring it correctly. I am ...
  • 105