The tag has no usage guidance, but it has a tag wiki.

learn more… | top users | synonyms

1
vote
1answer
15 views

Cannot connect to VPN with ipsec after upgrade

I'm using Debian Stretch, which is current testing release. Some time ago I set up a VPN connection using IPsec and it worked correctly. It suddenly stopped. It is possible that in the meantime some ...
3
votes
1answer
91 views

ipsec rightsubnet to wide, cannot override routing table | IPSec route some packets 'locally', not via tunnel; ip xfrm change?

I'd like to override part of the (IPSec) routing table (routing to 10.108.0.0/16 locally via eth0, not via IPSec tunnel) my IPSEC config conn vpc type=tunnel authby=secret ...
2
votes
0answers
58 views

IPSec VPN problem with tunnel. [closed]

My connection IPSec have problem. This is my Diagram. Connect VPN is not OK must be restart IPsec ==> OK and after that not OK root@vungtau:~# telnet 10.225.198.3 3900 Trying 10.225.198.3... ...
1
vote
1answer
43 views

unable to add IPSec IKEv2 profile on Fedora 22/23

it should be something really simple, but I cannot add IPSec IKEv2 profile in Network Manager settings, Add button is greyed out. Does anyone know?
1
vote
0answers
82 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

I originally asked this on ServerFault, but got nothing. Hoping there are some OpenBSD experts here Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). ...
0
votes
0answers
52 views

How to start and stop a libreswan connection

I have a connection configured on my libreswan instance on two machines. The connection start automatically when I start the pluto daemon, I have try other settings, but the connection also starts if ...
0
votes
1answer
151 views

Strong Swan IPSEC under Debian (Raspbian)

I am trying to get IPSEC (strong swan) to work under raspbian linux (distro of Debian) Ihave been able to install all packages for IPSEC. However as soon as I run the command to bring up IPSEC, I get ...
0
votes
0answers
40 views

RHEL 6 IPTables filtering of IPSEC protected Traffic

looking for some guidance to make sure I'm going in the right direction and maybe get some hints or gotcha's I need to be thinking about. I'm working on RHEL 6.4. I have a cluster of computers that ...
0
votes
0answers
85 views

Routing Traffic to IPSec

I set up an IPSec/L2TP connection. It operates in transport mode and the server acts as a gateway to the network behind the server. You can see my configuration here. I think I have a routing problem ...
2
votes
0answers
296 views

racoon IPSec/L2TP Client

I am trying to configure a racoon IPSec/L2TP client to connect a Windows 2003 server. The server is originally intended to be used with Windows XP clients (successfully tested with Windows XP SP3 but ...
0
votes
0answers
696 views

strongSwan routing issue with roadwarrior behind NAT

Using the following ipsec.conf configuration: conn %default ikelifetime=60m keylife=20m keyingtries=3 rekeymargin=3m keyexchange=ikev2 ...
1
vote
1answer
52 views

XFRM_SUB_POLICY config in kerne

When testing strongswan performance, we saw that the performance differed by a lot between an ubuntu server and a centos server, with everything else being the same. We noticed that the ...
1
vote
0answers
130 views

It is possible to make an IPSEC VPN Bonding?

I wanted to know if It is possible to bound two IPSEC tunnels ? I've already done a VPN bonding of SSH tunnels, but It will be better if I use IPSEC.
0
votes
1answer
93 views

ipsec.conf file with dynamic ipv6 address

I have been able to get strongswan ipsec tunnel between 2 linux machines with static ipv6 address. For example, a segment of my ipsec.conf file looks like left=2000::1 ...
15
votes
3answers
2k views

What is the IPsec bottleneck in Linux?

I am trying to compare the performance of several network security protocols between two hosts connected in Gigabit Ethernet. My goal here is to see if I can saturate my bandwidth, and if not, what ...
1
vote
0answers
140 views

Why doesn't Linux IPSec implementation support fragmentation before encryption?

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...
0
votes
0answers
106 views

ipsec-tools can't encrypt packets after changing destination ip address?

I established a tunnel IPsec connection between two networks like the following scenario IPsec-tools and racoon and it works fine (see image) But in gateway1 I run a simple program that listen to ...
2
votes
0answers
169 views

How to set the remote host to a domain name with dynamic IP in *swan client?

I am now setting a vpn client for my university's own L2TP/IPSec VPN network, using both openswan, libreswan and strongswan (for different distros). Here is the problem: The remote site (VPN server) ...
1
vote
0answers
301 views

Connect to IPsec VPN using OpenSwan

I'm connected to Internet with a simple ADSL router with NAT. I have a smartphone and a laptop running linux. I need to connect to a IPsec server using OpenSwan. First I tested that it is possible to ...
1
vote
0answers
183 views

Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN

I have two ubuntu 12.04 32 Bit PCs between which I want IPSec Tunnel to be setup. I have setup ipsec in both systems and ipsec verify runs fine on both. Since I have no prior experience of openswan, I ...
2
votes
2answers
4k views

Pluto not finding interface on a ipsec VPN

I'm trying to setup ipsec however pluto appears not to bind to a public IP and IPsec Kernel requires updating. This is what I've come up with so far: -IPSec Verify states my kernel is not supporting ...
2
votes
2answers
817 views

Restart specific racoon tunnel

I have several gif* interfaces on my FreeBSD box. They are representing tunnels, encrypted using racoon+ipsec. If, at some moment, one of the tunnels hangs up, I am forced to reset racoon this way: ...
2
votes
0answers
607 views

Is it possible to implement IPSec with failover between one pfSense firewall and Amazon VPC (no BGP)

I'm trying to create a VPN connexion between my firewall (a pfsense 2.0.1) and my Amazon Virtual Private Cloud (VPC). Amazon provides two peers endpoints to mount two IPsec tunnels on the same VPC. ...
1
vote
0answers
774 views

IPsec Tunnel mode - RoadWarriors configuration

I've the need to configure IPsec tunnel mode between a gateway with static NAT (let's say its public IP is 172.31.0.105) and a number of clients that are behind dynamic NAT. Reading through some ...
0
votes
0answers
454 views

How to set up two ipsec tunnels between 2 linux machines

conn %default left=128.247.19.210 leftcert=/home/alphaCert.der leftid="C=US, O=Test, CN=alpha.test.org" right=128.247.19.33 # IP address of Host rightid="C=US, O=Test, CN=beta.test.org" ...
1
vote
1answer
2k views

FreeBSD and StrongSwan routing issue

Good day, gentlemen. I have recently faced a problem when a device connected to the FreeBSD server via StrongSwan can't route outside its subnet. Let me explain in details: FreeBSD 10.0-RELEASE, ...
4
votes
1answer
519 views

IPsec doesn't read configuration when the tunnel is deleted

I've created a tunnel between two sites using IPsec. I've made an error in the configuration, the address of the destination was false, so I deleted this tunnel. But after deleting, ipsec tries to ...
0
votes
0answers
634 views

death_handler: Fatal signal 15 received

I have problem with my Linux when I try to shut it down. init 0 I get the following error: death_handler: Fatal signal 15 received setsockopt recvref[30]: Protocol not available The sytem will ...
1
vote
1answer
290 views

How to start ipsec on Gentoo after migrated to systemd?

My system is Gentoo 64bit, and is using systemd as the initialization system. After I migrated to systemd, I found there's not service to start ipsec. I tried to run /etc/init.d/ipsec, but it says it ...
1
vote
0answers
156 views

Kernel IPsec SA database: FIFO instead of LIFO

When processing an IP packet, the kernel looks into the security policy (SP) database to determine whether it is to be protected with IPsec. If the identifiers of the packet (e.g. IP addresses, etc.) ...
7
votes
1answer
2k views

What do I need to add a virtual IPsec adapter?

I'm trying to set up an IPsec connection manually from the console with iproute2. What I need is a virtual interface (at best, a virtual IP address could also be sufficient) that IPsec-transforms ...
0
votes
1answer
285 views

FreeBSD 8.2 setkey null encryption

Anyone got progress on setting null encryption in FreeBSD 8 ipsec? # ./setkey -c add 10.10.19.50 10.10.19.100 esp 1680464666 -m transport -E null -A hmac-md5 "authentication!!" ; The result of line ...
1
vote
0answers
179 views

Assigning an identity to an IPsec policy in Linux

Page 36 of RFC2367 (PF_KEYv2 Key Management API) states that when the kernel needs an IPsec security association for an outbound packet, but does not have one, it will ask the key management daemon ...
4
votes
1answer
1k views

How to fix this eth0 and eth1, where traffic going out via eth0 is failing?

I have two public IPs. One's connected to eth0 and one to eth1, from 2 separate routers as complete DMZ towards the LAN IP. I added this following: ip rule add from 10.0.0.108/32 table 1 # outbound ...
2
votes
0answers
1k views

Openswan ipsec hub and spoke setup is not working

I have configured Hub and Spoke using openswan ipsec. Tunnel is immediately getting UP but the problem is: Spoke1 can ping/access HUB's LAN and vice-versa (S1 -- HUB && HUB -- S1) Spoke2 can ...
1
vote
0answers
430 views

Multiple remote gateways for one ipsec phase 1 entry with pfsense

On a Sonicwall I've to replace it is possible to configure multiple remote gateways for one phase 1 ipsec entry. Can I do this on a pfsense 2.0 installation too? I haven't found a way so far and ...
1
vote
1answer
115 views

Which packages contain IPsec implementations and algorithms that use it for encryption?

Which package contains the implementation of IPsec and which package contains the implementation of encryption algorithms that IPsec uses for encryption? I need to use custom crytographic algorithms ...
1
vote
0answers
3k views

Openswan established NATed tunnel but, I can't ping remote end's lan PC

I am establishing site to site tunnel. 192.168.2.0/24===10.103.6.40<10.103.6.40>---10.103.6.1...10.103.6.29<10.103.6.29>===192.168.1.0/24; Local ip: 10.103.6.40 Local lan: ...
11
votes
5answers
11k views

Openswan connecting to multiple right subnets not working

I'm trying to use Openswan (version 2.6.37) to connect an IPsec VPN from my local network to a remote site. Everything works fine when I just want to connect to a single subnet on the remote site. ...
2
votes
1answer
189 views

what is internal 1 and internal 2 ip in freebsd , what is external 1 and external 2 ip in freebsd

# ifconfig gif0 create # ifconfig gif0 internal1 internal2 # ifconfig gif0 tunnel external1 external2 what is internal 1 and internal 2 IP? in freebsd what is external 1 and external 2 IP? in ...
1
vote
0answers
173 views

Installing IPSEC on FreeBSD

how to install IPSEC on two FreeBSD 9.0 machines to can send an encrypted packets between them , and let them read the encrypted packets .
2
votes
0answers
406 views

How to start racoon VPN IKE negotiation automatically?

I have configured racoon at two ends (with pre-shared keys) and trying to establish tunnel. But I have to initiate traffic to start IKE negotiation. Is there any alternative to establishing the ...
1
vote
0answers
991 views

Which of VPN or IPSec or xxx can I use here?

I'm renting a dedicated server which has a fixed / static IP and I'm using this server / IP for my business. I'm hosting a webapp / webappserver on it (Apache + Tomcat) and I've also set it up as a ...
2
votes
0answers
2k views

IPSec VPN Debian Squeeze Server for Mac OS X

I'm trying to get an IPSec VPN set up on my Debian home server, so that I can access my home network and browse without having my internet filtered by my college network, and so that I can perform ...
3
votes
1answer
377 views

ipsec auto --status fails in cronjob

I have a server monitoring script which, among other things, checks the state of an IPSec tunnel using ipsec auto --status It works like a charm when run from the console (as root) but as soon as I ...
2
votes
0answers
560 views

Route VPN gateway traffic via tun0 instead of normal gateway

On my Linux box, I have a tun0 interface by IPIP tunnel like: tun0 Link encap:IPIP Tunnel HWaddr inet addr:10.10.10.2 P-t-P:10.10.10.1 Mask:255.255.255.255 and I running an ...
2
votes
0answers
314 views

virtual network interface for ShrewSoft VPN Client

I use ShrewSoft VPN Client 2.1.7 under Arch Linux (i686) to connect to the company network using IPSec. It is configured by a .vpn file. How can I make it create a virtual network interface?
0
votes
2answers
5k views

Can't access internet after connecting to L2TP IPsec VPN

I have configured a L2TP VPN on Ubuntu server 11.04, and I can connect to it with a Mac client. But after connecting successfully to this L2TP VPN, my Mac cannot access the internet. To access the ...
2
votes
1answer
493 views

Fail to tunnel between two Solaris 10

I running 2 Solaris 10 box and trying to tunnel them up through Internet. 1 at the hosting site while the other sitting in my office. ifconfig ip.tun0 plumb ifconfig ip.tun0 192.168.1.207 ...
0
votes
1answer
186 views

Missing IPsec package in Solaris 10

I'm running Solaris 10 v5/08. Running svcs -a | grep ipsec returns nothing, so I have reason to believe IPsec isn't installed (or isn't showing up for some other reason). How can I make sure it is ...