Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [strongswan]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
1 answer
60 views

What's the "new" way of checking the established connections in strongswan

Previously it was in ipsec statusall. Now with swanctl I can only see swanctl --list-conns but it only shows the configuration details, not the runtime statistics: eg bytes transferred, negotiated ...
zerkms's user avatar
  • 829
1 vote
0 answers
61 views

Change IPSec IKEV2 VPN Default Ports 500 & 4500 To Anothers

For some reason OpenVPN is working on my local machine very well, But IPSec IKEV2 VPN not & it only works when OpenVPN is connect. I have a domain for IPSec IKEV2 VPN & in local machine vpn is ...
helius.dev's user avatar
0 votes
0 answers
52 views

Gre over IPsec Throuput performance

I am testing FRR DMVPN using Strongswan IPSec + GRE. Tunnels work great and they are easily established between the branch offices. Tunnels work great and they are easily established between the ...
Isravel Raja's user avatar
0 votes
0 answers
14 views

Packets not going through vpn (in net2net-same network) scenario

I have followed the guide for an implementation having the same network on both sides ( https://www.strongswan.org/testing/testresults/ikev2/net2net-same-nets/) And below are my configuration, I think ...
Charm_quark's user avatar
0 votes
0 answers
75 views

Using Strongswan IPSEC in Nvidia Jetson Device causes kernel crash - BUG: scheduling while atomic: swapper

I have an Nvidia Jetson Orin Nano with Linux for Tegra kernel 5.12. I'm trying to use Strongswan which requires some modules to be set, which I did. However, it seems that it is missing other kernel ...
Spider's user avatar
  • 101
0 votes
0 answers
206 views

no files found matching '/etc/strongswan/swanctl/conf.d/*.conf' on CentOS 8 Stream

I have a very simple host-to-host connection setup with PSK authentication. I setup the same configuration on two centos vms and two ubuntu server vms and the configuration works perfectly on ubuntu ...
Emir Bosnak's user avatar
1 vote
1 answer
805 views

IPSec tunnel works until rekeying, then gets NO_PROPOSAL_CHOSEN

Context I have set up a site-to-site IPSec tunnel between a Raspberry Pi located in an office and a pfSense firewall in the cloud. I am using Strongswan for the Raspberry Pi side. Issue My tunnel ...
The Coding Penguin's user avatar
0 votes
0 answers
30 views

How to tell whether a given packet is subject to IPsec's SPD?

My IPsec configuration via strongSwan is non-device and uses XFRM policies / states. On the VPN gateway I'm trying to test whether a given IP packet (described as src IP, src dev, dst IP) will be ...
Kentzo's user avatar
  • 179
0 votes
0 answers
521 views

Debian 11: setting up L2TP + IPSec - IPSec fails?

I'm trying to configure a new VPN client (L2TP and IPSec) on a very small AWS EC2 system running Debian 11 without a desktop. I've got as far as getting NetworkManager to work, but the VPN connection ...
j4nd3r53n's user avatar
  • 715
1 vote
0 answers
402 views

Site to site VPN with Ubuntu and StrongSwan

I am trying to build a site-to-site IPSec VPN based on Ubuntu 20.04.1 and StrongSwan. My goal is to interconnect the two sites without using NAT on the gateways. In my lab I have: I could get IPSec ...
Moacir Ferreira's user avatar
0 votes
0 answers
203 views

change default route for VPN users

I have a linux (currently centos 8 but I can change it to anything) server running as l2tp VPN Server which has two network interfaces as below: NIC1: 192.168.1.4/24 NIC2: 192.168.3.2/24 Default ...
H So's user avatar
  • 1
0 votes
1 answer
555 views

ipsec pki error (plugin-openssl-failed-to-load-openssl-plugin-create-not found and no plugin file available)

Im trying to establish a vpn connection with a self signed certificate between 2 virtual machines in my M1 mac and it seems that its impossible to create the keys and the certificate due to the titles ...
Idomeneas's user avatar
0 votes
1 answer
34 views

Why didn't iptables apply the sames rules?

For some reason, my network encountered "Destination unreachable no route" error, this error happened periodicly, later I found that was a bug of my program. But during that time, I found a ...
Jianbo Yan's user avatar
0 votes
1 answer
105 views

Accessing an external webservice via VPN through NAT reflection times out

I have a Raspberry Pi 4B with Raspbian arm64 on it running a Strongswan VPN server alongside multiple services that I can access frow WAN via my external IP/my domain name. I use NAT reflection on my ...
Opisek's user avatar
  • 1
1 vote
0 answers
72 views

Weird Ipsec behavior

I am running into something interesting which I am not able to explain well. I brought up a simple Ubuntu 20.04 box and attempting to protect all traffic via an IPSec tunnel. I am not using VTI or ...
vtewari's user avatar
  • 41
0 votes
0 answers
1k views

Strongswan creating client to server connection VPN

I'm having problems with my client-to-server config. I only edited this file /etc/ipsec.conf I can only edit this file on Client side, but not server side. On server I have an interface program where ...
genius's user avatar
  • 1
0 votes
0 answers
722 views

libgcrypt.so.11 installed but needed by strongswan

I'm trying to get StrongSwan package in Red Hat Enterprise Linux release 8.5 (Ootpa). But it shows an issue, even with libgcrypt-1.8.5-6.el8.x86_64 installed. I tried to install StrongSwan and ...
Mauricio Reyes's user avatar
2 votes
1 answer
3k views

IPsec PSK VPN with strongSwan to FortiGate with one-time-password(Fortitoken)

So I am using Strongswan to connect to remote Fortigate since native Fortinet VPN client does not support IPsec. I also have hardware FortiToken 200 that provides a OTP. My current config is the ...
fteox's user avatar
  • 21
1 vote
1 answer
562 views

Subnets not ping eachother on strongswa vpn tunnel

AOA, I have two clients one remote and other is local but both on same LAN i.e (192.168.137.0/24), while the UBuntu servers in which strongswan is implemented are connected to each other with ethernet ...
MUHAMMAD KASHIF's user avatar
0 votes
1 answer
1k views

StrongSwan IPsec VPN slow connection speed on Manjaro Linux(Arch)

On Manjaro Linux (arch), the speed of connecting to corporate resources under vpn (ipsec) dropped to almost 0, but everything was fine before I have already tried different configurations, but nothing ...
HouseInTheForest's user avatar
0 votes
1 answer
240 views

How to allow VPN client to use their local internet for browsing

I have configured Ikev2 VPN server road warrior using strongswan package on centos 8 and it works fine. when clients connect they use remote site internet for browsing how to allow client to use their ...
Rizwan Saleem's user avatar
1 vote
1 answer
4k views

strongswan: received NO_PROPOSAL_CHOSEN notify error

I have two private network. network A router: TL-WVR3200L public IP: 223.71.239.218 subnet: 192.168.1.0/24 IPSec config: network B router: TL-WDR5620 public IP: 119.90.63.105 subnet: 192.168.100.0/...
Ren's user avatar
  • 273
1 vote
1 answer
1k views

strongswan: What is the difference between left and leftid?

This tutorial use left parameter when setup strongswan, while this tutorial also use leftid parameter. What is the difference between left and leftid? Update I setup strongswan on aws ec2 with the ...
Ren's user avatar
  • 273
0 votes
1 answer
407 views

Strongswan tunnel is up but not pinging to each others

im facing weird problem i have configured site to site VPN tunnel on Centos 8 on the same network and its connected but unable to ping each others here is below my configuration and status. Site A [...
Rizwan Saleem's user avatar
1 vote
1 answer
1k views

networkmanager-strongswan vpn - IKEv2 routing issue

Until today, my VPN connection to my company was working out of the box using networkmanager-strongswan. But today (on linux mint 20.1 with kernel 5.8.0-38), I can establish connection to the VPN host,...
Kallys's user avatar
  • 21
1 vote
2 answers
1k views

ipsec binary on Centos 8

I've set up an ubuntu VM which connects to a Microsoft IKEv2 VPN, with the strongswan package (which depends on strongswan-charon and strongswan-starter). I control the vpn with the ipsec command, ...
frankster's user avatar
  • 111
0 votes
1 answer
1k views

Connecting Windows 10 to IPSec/L2TP on Debian 10

Trying to get Windows 10 (192.168.1.11) to connect to IPSec/L2TP on Debian 10 (192.168.1.31). Windows firewall is off and I have added AssumeUDPEncapsulationContextOnSendRule (value 2) to the registry ...
Richard Barraclough's user avatar
2 votes
2 answers
2k views

L2TP over IPSec on Debian 10

My Debian 10 box has a Wifi interface, wlx08beac0a6c1d running a WEP AP for old hardware that doens't wupport WPA. My main network is 192.168.1.0/24 and this interface is configured to be 192.168.2.1. ...
Richard Barraclough's user avatar
0 votes
0 answers
824 views

Building strongSwan from source

I'm having huge trouble with getting strongswan to work. I'd like to try the newest version and customize it with plugins. I'm following the instruction available here: https://wiki.strongswan.org/...
dywan666's user avatar
  • 111
1 vote
0 answers
2k views

Ubuntu IKEv1 IPSec alternative to strongSwan

I'm trying to connect to my work VPN which uses IKEv1/IPSec and authenticates with a preshared key however it appears strongSwan has a PSK limitation restricting PSKs to 20 characters or longer (even ...
Eric's user avatar
  • 11
0 votes
1 answer
473 views

How do I route traffic back over a VPN to other servers

I am currently setting up an environment in 2 sites. all servers are linux/ubuntu. First site is my office and second site is AWS. I have 2 servers in AWS within a VPC with site to site VPN Web01 - ...
LinuxVirgin's user avatar
1 vote
1 answer
2k views

networkmanager-strongswan vpn - routing specific ip through VPN

I'm trying to setting a VPN on Linux Mint 19.2. I'm using the network-manager-strongswan so I added this file named VPN under /etc/NetworkManager/system-connections/ [connection] id=VPN uuid=...
Roberto Manfreda's user avatar
0 votes
1 answer
166 views

Strongswan only last person connected routed through tunnel

I have site2site VPN tunnel using StrongSwan. Everything seems to work - except only last connected person gets the access. I.e. I connect from PC1, can ping server on the other side, connect from PC2,...
Luga's user avatar
  • 3
2 votes
0 answers
518 views

Strongswan AUTH_FAILED

I am trying to configure VPN server Strongswan and have a problem: the server always sends to the clients the following response: IKE_AUTH [ N(AUTH_FAILED) ] I've tried to change log level editing ...
mblw's user avatar
  • 121
1 vote
1 answer
1k views

Network Manager plugin for Strongswan won't show pre shred key authentication option

this was originally the second part of my question here How to start a swanctl.conf configured tunnel automatically Environment: Debian 10, KDE, Full desktop # ipsec --version Linux strongSwan U5.7....
Marc Wittke's user avatar
1 vote
2 answers
13k views

How to start a swanctl.conf configured tunnel automatically

Environment: Debian 10, KDE, Full desktop # ipsec --version Linux strongSwan U5.7.2/K4.19.0-6-amd64 # swanctl --version strongSwan swanctl 5.7.2 # systemctl status strongswan ● strongswan.service - ...
Marc Wittke's user avatar
0 votes
1 answer
1k views

Replace racoon with strongswan

I should switch from the racoon daemon (discarded) to the new demove charon strongswan. In practice I have about a dozen suppliers with which to change all the vpn in a "single" shot. I recreated all ...
manstt's user avatar
  • 21
2 votes
1 answer
599 views

Strongswan several subnet problem with vpn racoon

I should migrate the current racoon daemon to strongswan on some routers. To do this in operation I have to be able to install strongswan a little at a time, which will have to run a vpn with the ...
manstt's user avatar
  • 21
0 votes
2 answers
3k views

Route (docker) container traffic through IPSec

I have a ipsec (strongswan) connection to work, which in itself works fine, however traffic from containers doesn't seem to go through the ipsec tunnel. This is not expected from an end-user ...
hbogert's user avatar
  • 739
0 votes
1 answer
731 views

Roadwarrior scenario strongswan- Iphone setup

I'm working on trying to set up a roadwarrior client scenarion VPN with Stringswan on a raspberry pi. The server config looks like this: pi@raspberrypi:~ $ sudo cat /etc/ipsec.conf # ipsec.conf - ...
user374135's user avatar
1 vote
0 answers
305 views

Connecting Win 10 roadwarrior to AWS strongSwan VPN - not able to find a certificate usable with Extensible Authentication Protocol

I managed to connect two AWS subnets in different zones over strongSwan VPN using ike2 with the aes256 encryption. So, Master CA key is created, self-signed CA certificate, as well as private and ...
klaus's user avatar
  • 41
2 votes
0 answers
789 views

strongSwan lan to lan / PKI RSA self CA - tunnel (0 up, 1 connecting), just the RSA tunnel without using of the self CA works fine

I am trying to create an x.509 based tunnel by using a self-signed CA certificate. I am creating the solution at the AWS, and VPN gateways are Debian Stretch machines version Linux ip-10-0-0-208 4....
klaus's user avatar
  • 41
3 votes
1 answer
2k views

IPsec IKEv2 succesful but Linux VTI does not work with SNAT

If you think troubleshooting IPsec is tedious, please forget about my logs and just let me know the implementation process, I'm still confused and any information is helpful. I removed SPIs and here ...
user avatar
1 vote
1 answer
929 views

Install Linux Kernel modules

I'm setting up IPSec VPN and I have met an error which upon searching I found the error actually means required kernel modules are missing. That prompted me to check that with lsmod and kmod list but ...
Stefano Mtangoo's user avatar
2 votes
0 answers
718 views

Fedora 30 - VPN L2TP IPSEC disconnects short after connection successfully

I am having some problems when configuring VPN in my envrionment. For Mac and Windows users works normally but for me it connects and disconnects shortly after. The Router alghoritm: My IPSEC ...
Bruno's user avatar
  • 21
0 votes
1 answer
796 views

fedora strongswan resolvconf: Interface can't be the loopback interface

I am getting this error when trying to use sudo strongswan up CONNECTION_NAME on Fedora 29 installing DNS server ###.##.#.## via resolvconf resolvconf: Interface can't be the loopback interface (lo). ...
Ben's user avatar
  • 101
0 votes
1 answer
611 views

FreeBSD 11.2: how to add the aesni plugin to strongswan?

I installed strongswan using pkg install strongswan But now I've realized I need to have the aesni plugin enabled to optimize my IPsec tunnel. I've already enabled aesni at the OS level. The ...
StackShin's user avatar
0 votes
0 answers
1k views

how to optimize performance of nfs running inside Strongswan ipsec transport on 10Gb network

Host1: Ubuntu 18.04 Host2: Freebsd 11.2 Here is my situation... I have 2 hosts on a 10G lan that have Strongswan IPsec transport configured between them to secure nfsv3. (Yes, I know nfsv3 is old ...
StackShin's user avatar
0 votes
1 answer
5k views

Logs starting "ipsec start" command

I am trying to take the Mobile IPv6 HOWTO (https://wiki.strongswan.org/projects/strongswan/wiki/HomeAgentSetup) as an example of configuration but when I run the "ipsec start" command I have just one ...
melmansuri's user avatar
2 votes
1 answer
576 views

StrongSwan - ipsec pki command

I would like to know why the first time I run the "ipsec pki" command to get a private key this key is generated quickly, but the next time you try to run the same command to get this key because you ...
melmansuri's user avatar