Skip to main content

Questions tagged [strongswan]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
29 views

VPN Strongswan traffic forwarding from local machine

I have four VPS machines linked together with permanent IPs on eth1. This is private traffic and cannot be accessed publically. One VM is my public proxy for all public access on eth0. My objective is ...
digitalcreative.tech's user avatar
0 votes
0 answers
40 views

Swastrong IPSec with Password Authentication

I'm in the exact same situation as sashok_bg here : I'm trying to access my Freebox pro VPN through Swanstrong client vpn on Debian. So far, with what has been said in his converstation with ecdsa, ...
Alex's user avatar
  • 1
0 votes
0 answers
98 views

nftables config for ipsec (strongswan) vpn

If have got a working IPSec connection between a device (raspberry) on remote side (10.X.117.0/24 network) and the local network (10.Y.0.0/16 network). The raspberry has a static 10.X.117.1 IP on its ...
LeifSec's user avatar
  • 73
0 votes
0 answers
235 views

Change IPSec IKEV2 VPN Default Ports 500 & 4500 To Anothers

For some reason OpenVPN is working on my local machine very well, But IPSec IKEV2 VPN not & it only works when OpenVPN is connect. I have a domain for IPSec IKEV2 VPN & in local machine vpn is ...
helius.dev's user avatar
0 votes
0 answers
135 views

StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)

StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders) I followed the link below for setup IKEv2 VPN Using Strongswan and Let's ...
helius.dev's user avatar
0 votes
0 answers
107 views

Win10 "Connection properties" changes from "Certificate" to "Smart card" when I try to connect to IKEv2 VPN server

I try to connect to Debian Strong Swan VPN server from Windows 10. I create CA certificate on Debian server and import the root certificate to Windows "Trusted Root Certification Authorities&...
dokondr's user avatar
  • 101
0 votes
0 answers
153 views

set network interface for strongswan

I am using StrongSwan on Raspberry Pi with a LTE token which is handled as eth1. It works fine as long nothing is connected to the ethernet port (eth0). Then StrongSwan wants to use eth0 which fails. ...
LeifSec's user avatar
  • 73
0 votes
1 answer
219 views

IpSec StrongSwan HA config misses / no connection

I am using strongswan on rasberian 12 to connect to PFsense with /etc/ipsec.conf from an external network to an PfSense: config setup conn %default keyexchange=ikev1 conn peer-ipsec.xxx.de-...
LeifSec's user avatar
  • 73
0 votes
0 answers
144 views

IPSEC libreswan interface endpoint does not match left or right

I am using libreswan on raspberry Pi OS 12 to connect to PFsense with /etc/ipsec.conf from an external network config setup conn %default #keyexchange=ikev1 conn peer-ipsec.xxx.de-tunnel-1 ...
LeifSec's user avatar
  • 73
1 vote
0 answers
36 views

Routing specific subnet through a local peer

I have two (almost identical) Ubuntu machines with the local IP of 10.0.0.10 and 10.0.0.20, let's call them TEN and TWENTY respectively. Both have the default gateway of 10.0.0.1. On TEN I have a site-...
0s r Fun's user avatar
0 votes
0 answers
164 views

Bandwidth control using traffic control `tc` on Strongswan ipsec connection

I am in the need to use traffic control tc to regulate the bandwidth. From what I known is that I can manage the bandwidth using the following DEV=eth0 RATE="100kbps" tc qdisc del dev $DEV ...
Ole K's user avatar
  • 51
0 votes
0 answers
148 views

Cannot establish IPv6 connection with strongswan using IKEv2 and MSCHAPv2 Host-To-Host (Legacy configuration)

I am unable to get a connection with IPv6 host-to-host. Below is the log output (anonymized) Sep 27 14:25:18 vpn.xxxx.tld ipsec[13769]: 00[DMN] Starting IKE charon daemon (strongSwan 5.9.8, Linux 6.1....
Ole K's user avatar
  • 51
0 votes
0 answers
96 views

StrongSwan connected to Cisco ASA 5550 but no traffic

I have a StrongSwan Client running on a system that doubles as a webserver successfully connected to a Cisco ASA. The problem is I cannot ping anything on the other end. I had the same issue ...
T3.0's user avatar
  • 51
0 votes
0 answers
262 views

Strongswan to WatchGuard connected but no traffic

I'm connecting to a client's Watchguard VPN with StrongSwan on my AWS hosted Ubuntu 22 machine. I have a connection established but there is zero traffic flowing. I can't ping the destination and the ...
T3.0's user avatar
  • 51
0 votes
1 answer
385 views

How to configure group attributes for strongswan EAP-radius with freeradius mysql

so I am trying to figure out how to link up the usage of Groups in Strongswan with Freeradius using SQL (plus daloradius) Currently the authentication between Strongswan and Freeradius is working fine....
Nozumi's user avatar
  • 1
0 votes
1 answer
617 views

Strongswan ipsec tunnel not establishing connection with AAA server

I have two VM VM-1 : I have installed Strongswan 5.9. VM-2 : Installed Strongswan 5.9, Installed freeradius (radius server) I have started Strongswan on both VM by systemctl start strongswan. When I ...
ppb's user avatar
  • 103
0 votes
1 answer
4k views

NO_PROPOSAL_CHOSEN strongswan ipsec tunnel

Hi I am trying to setup site-to-site vpn tunneling on AWS VMs. Below are my ipsec.conf files for both VMs. VM-1 (assume IP address : 1.2.3.4) conn %default lifetime=60m mobike=no ...
ppb's user avatar
  • 103
0 votes
1 answer
692 views

Strongswan ipsec tunneling between two VMs

I am very new to VPN and IPsec tunneling. I have two VMs between them I need to establish IPsec tunnel by using pre-defined PSK key or provided certificate .pem. I have installed strongswan-5.9.6-1....
ppb's user avatar
  • 103
1 vote
0 answers
394 views

StrongSwan 5.9.1 (Debian Bullseye): Traffic from IPsec tunnel gets forwarded via Ethernet, but not via bridge

The following problem: I have a server that is, in addition to other tasks not relevant for the problem at hand, supposed to act as an IPsec gateway. When I'm using the Ethernet interface pointing to ...
Robidu's user avatar
  • 265
1 vote
0 answers
298 views

Configuring proxy Squid under Strongswan private network

I cannot connect to Proxy Server (Squid) from my computer (Windows 10) via VPN (StrongSwan, IKev2) on my VPS (CentOS 8) I have no idea what I'm doing, so please bare with me! Port in firewall-cmd is ...
Nickers's user avatar
  • 11
1 vote
1 answer
2k views

How to configure strongSwan eap-radius with FreeRadius for EAP-MSCHAPv2 authentication?

I am trying to configure a strongSwan IPsec VPN with RADIUS authentication. The actual EAP-MSCHAPv2 authentication to FreeRadius with OpenLDAP for username/passwords is successful, but then I am stuck ...
apohl's user avatar
  • 13
0 votes
1 answer
5k views

Strongswan IKEv2 VPN server Ubuntu 22.04 LTS - network connection between your computer & VPN svr could not be established..remote svr not responding

Followed this tutorial: Create an IKEv2 server Ref documentation for that tutorial: Guide: How to Set Up and Use IKEv2 VPN On Win 10, from powershell (Admin), I ran: certutil -f -importpfx "C:\...
Adrian's user avatar
  • 141
1 vote
1 answer
1k views

Strongswan VPN certificate authentication failed

I've installed strongswan vpn on my ubuntu server. Set up certificate authentication. I've set up my android-phone and it works fine. But connection didn't established on the windows machine. I copied ...
user18848352's user avatar
0 votes
1 answer
1k views

DNS issue with strongSwan on Pop_OS 21.10

I have installed strongswan-starter on Pop!_OS to connect to my workplace. I have first installed it on Ubuntu (where everything worked perfectly fine) but decided to switch to Pop!_OS 21.10. When I ...
codezalot's user avatar
  • 101
0 votes
1 answer
2k views

Single IP left subnet and routing traffic through tunnel in strongswan

I must set up an ipsec tunnel to use an external service provided by another company (so I have no control on the other side and can't change anything there). Let's say that: 192.168.0.0/24 is my ...
didrocks66's user avatar
1 vote
1 answer
240 views

Strongswan & Windows client: connection freezes in a few minutes

On an AWS VPS, I installed Strongswan to use it as a VPN. It works fine with iPhone client. However, when I try to connect from a Windows client, the SA connection gets established successfully and ...
m. vokhm's user avatar
  • 186
1 vote
0 answers
205 views

routing to virtual ip address

I have a Linux box that establishes a StrongSwan VPN connection. As I understand it, this creates a virtual IP address where packets are routed to so they get into the tunnel. I have other Linux ...
Stephen Burke's user avatar
0 votes
1 answer
50 views

strongswan vpn printing on client

I am connecting with strongswan (IKEv2) from my Debian 11 Computer ("client", 192.168.0.217) to a network behind a bintec Router (Digitalisierungsbox standard by German Telecom 192.168.0.254)...
Bernd's user avatar
  • 1
1 vote
0 answers
90 views

Strongswan: Two cert-based ike2 connections in parallel: Conflict?

any help on the following issue is highly appreciated: I cannot use the two cert-based connections below (conn one and conn two) in parallel. Individually (so commenting out one of them), they work ...
user1330841's user avatar
1 vote
1 answer
5k views

Define PFS Group in Strongswan IKEv2/IPsec Phase 2 Settings

I am trying to setup a VPN connection on Ubuntu 20.04 using Strongswan. One of the requirements for the tunnel is to use PFS group 20. Is the PFS group 20 being set when we have the following line in ...
Athena Wisdom's user avatar
0 votes
1 answer
583 views

VPN IKev2 Connection

I am attempting to create a Home VPN connection using a raspberry pi 4. I followed directions on https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-...
user avatar
0 votes
1 answer
3k views

Migrating from strongswan to libreswan

I have this working strongswan config for IKEv2 with PSK and USER_FQDNs connections { IKEv2PSK { remote_addrs = 81.81.81.81 vips = 0.0.0.0 version = 2 dpd_delay = ...
Marc Wittke's user avatar
0 votes
1 answer
4k views

IPSec nftables strongswan

How to configure nftables to allow inbound only ipsec traffic and process rules after decryption. I have nftable.conf: #!/sbin/nft -f flush ruleset # ----- IPv4 ----- table ip filter { chain ...
Helngard's user avatar
0 votes
0 answers
216 views

How to verify lets encrypt certs with server? - OSCP error linux Strongswan

Goal I am attempting to build an IKEv2 VPN using the strongswan IPSEC implementation with Let's Encrypt certificates and RSA authentication. I successfully built it in the legacy ipsec.conf format, ...
yen936's user avatar
  • 1
4 votes
2 answers
12k views

How can I route only a particular subnet to the StrongSwan VPN but not my whole traffic on linux?

I have no particular competences on networking, so I'll do my best to explain my needs. On my Linux laptop I'm running StrongSwan (with NetworkManager) to connect to a particular VPN with IPsec. This ...
Codemix's user avatar
  • 53
0 votes
1 answer
845 views

Can any IPSec client connect to any IPSec server?

I have been pondering setting up my own VPS with a VPN server running. Most often, OpenVPN is thrown around when users talk about setting up a VPN on Linux, but this tech seems to live a bit on the ...
oligofren's user avatar
  • 1,369
0 votes
0 answers
772 views

Strongswan IPsec configuration ( Linux - Cisco)

I'm configuring site-to-site ipsec tunnel. The error that I am getting shows that Quick Mode proposal (ESP) doesn't match Jan 27 09:23:42 raspberrypi charon: 10[ENC] generating QUICK_MODE request ...
Max Dotsenko's user avatar
0 votes
0 answers
290 views

ikev2 vpn cant connect to own server via vpn connection win10

I just setup a strongswan ikev2 vpn server. On the same server I host a http software on port 8123. I am currently on a locked down network with only a few open ports. Using the vpn I can connect to ...
BestimmungGefördert's user avatar
0 votes
0 answers
116 views

Some VPN traffic blocked to secure endpoints

I have a VPN server (strongswan) used for testing that I connect to via IKEv2 on a variety of systems (here, I tried Windows, Ubuntu, & Android), normally without issues. This morning, I was on a ...
user avatar
0 votes
0 answers
2k views

Strongswan ipsec site-site configuration

I'm configuring site-to-site ipsec tunnel using strongswan, but i don`t know how is ipsec tunnel opened on remote side (definitely without using strongswan) When i try to connect - i get no response ...
ThreeB's user avatar
  • 1
0 votes
0 answers
1k views

Connecting Win 10 roadwarrior to AWS strongSwan VPN - not able to find a certificate usable with Extensible Authentication Protocol

I managed to connect two AWS subnets in different zones over strongSwan VPN using ike2 with the aes256 encryption. So, Master CA key is created, self-signed CA certificate, as well as private and ...
klaus's user avatar
  • 1
0 votes
0 answers
187 views

Strongswan on vServer not routing correctly

I tried to replicate a strongswan setup I am using on an openWRT router at home on a vServer running strongswan 5.5.1-4+deb9u4. The client is an iPad. uname -a Linux t 2.6.32-042stab127.2 #1 SMP ...
SevenD's user avatar
  • 31
0 votes
0 answers
610 views

IPv6 Strongswan IPSec + NAT

I have a VPS with an IPv4 (/32) and an IPv6 (/128). I've set up Strongswan and my IPv4 IPSec server works just fine - I'm using it all the time. I'm trying to get it to work with IPv6 and so far it'...
pHeoz's user avatar
  • 237
0 votes
1 answer
2k views

Strongswan IPsec configuration

I'm configuring site-to-site ipsec tunnel, being given very few details about the remote host. On my server I'm using strongswan with the following ipsec.conf: conn %default ikelifetime=60m ...
excessive's user avatar
0 votes
0 answers
1k views

Connect Strongswan/VPN-Client (Debian) to IPSec/L2TP Server (Windows 2012) - AUTHENTIFICATION_FAILED

I am trying to connect my Debian Stretch box with a network running Windows-Only machines. There is a node there that acts as a VPN Server that runs Windows Server 2012R2. I am able to connect to it ...
Programmierus's user avatar
0 votes
0 answers
322 views

How to know and fix fails or errors in randomly down ipsec tunnel connection?

I have a server connected by VPN site to site with strongswan (first time with VPN), when I start the connection (sudo ipsec up my-conn) all work good but in some point the server lost the connection (...
inye's user avatar
  • 101
0 votes
1 answer
342 views

Docker: host grabs ICMP packets (Strongswan IPsec)

These machines are Docker containers with strongswan installed running IPsec tunnels. routeur1 and routeur2 have a site-to-site IPsec tunnel, while pc-nomad have a IPsec tunnel with routeur1. ...
Kazh's user avatar
  • 3
0 votes
1 answer
3k views

Using local unbound DNS server for Strongswan VPN connections

Idea: I would like to use unbound DNS installed on the same server as VPN solution, to block ads and similar unwanted sites with DNS for all VPN connections. Currently unbound is set up for local ...
b4d's user avatar
  • 113
0 votes
1 answer
3k views

Strongswan Packets are not routed

I'm trying to configure strongswan as a IKEv2 VPN server behind my NAT. The network topology looks the following: The VPN server (10.0.0.1) is behind a NAT (Default Gateway 10.0.0.138) which forwards ...
Ka0o0's user avatar
  • 3
4 votes
3 answers
8k views

Windows client cannot connect to StrongSwan: "EAP-Identity request configured, but not supported"

I've followed this tutorial to set up a StrongSwan VPN server, with the exceptions that I was using Debian 9, and that I used certs I already had from Let's Encrypt instead of standing up a CA. ...
dddddddd207's user avatar