Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [libreswan]

18 questions
4
votes
1 answer

Configuring L2TP VPN to use with iOS 14 and macOS Big Sur

After Apple did this in Big Sur OS I can't connect to my own VPN on Libreswan 3.27 (netkey) on 3.10.0-1160.6.1.el7.x86_64 Starting with iOS 14 and macOS Big Sur (coming soon), IPsec supports HMAC-SHA-256 with L2TP VPN. To make sure that VPN client…
megamosk
  • 43
  • 1
  • 4
3
votes
0 answers

Libreswan Testbed in VirtualBox

I'm currently working to create a testbed in VirtualBox for two VMs with an isolated opportunistic IPSec network with LibreSwan. All services are coming up fine, but network traffic between the two VMs doesn't seem to actually be encrypted. If I…
schrodingersket
  • 31
  • 1
2
votes
1 answer

Issue IKEV1 for Libreswan 3.27 : no connection has been authorized with policy PSK+IKEV1_ALLOW

I'm trying to connect to a Cisco ASA 5520. I have been provided credentials : Phase1 VPN IP address (Public IP) | XXX.XXX.XXX.XXX Authentication Method | Pre-Shared Secret Encryption Schema | IKE Perfect Forward…
iMitwe
  • 123
  • 1
  • 6
2
votes
1 answer

AWS EC2 CentOS 7 with LibreSwan IPsec Tunnel UP (Established), No Traffic flow, cannot ping Peer encryption Domain Nodes

I have LibreSwan Setup on AWS EC2 CentOS7 instance, IPsec tunnel is established with the peer (Cisco ASA). The Tunnel is up, but I no traffic. I cannot ping the nodes at the side of the peer. Here is my setup. on AWS EC2 instance EC2 instance -…
sekayasin
  • 21
  • 1
  • 4
2
votes
0 answers

VPN traffic routing issue between two VPN connections - AWS and Generic IKEv2 / libreswan

Have several sites, one of them acts as intermediary router between two: AWS VPC (10.10.0.0/24) Libreswan VPN Server (10.20.0.0/24) Mikrotik VPN Router (10.30.0.0/24) host1 resides at AWS VPC, host2 is connected to Mikrotik VPN's are up, each…
GioMac
  • 4,444
  • 3
  • 24
  • 41
1
vote
1 answer

Libreswan IPSec IKEv2 unable to connect to multiple remote IPs

I have been beating my head against this for awhile, and I'm hoping that someone can point me in the right direction. I have a number of IPSec tunnels established, mostly from libreswan (v3.23) on CentOS to Cisco ASAs. Most are IKE v1, and in that…
Bob
  • 93
  • 1
  • 1
  • 8
1
vote
1 answer

LibreSwan IKEv1 XAUTH VPN server -- so close and yet so far

Here's an ASCII-art diagram of my situation 192.168.10.0/24 | +---+ .7 | | A |------+ _____ +---+ | ( ) | .254 +---+ Ext IP ( ) +----Ri|…
Ex Umbris
  • 804
  • 7
  • 24
1
vote
0 answers

Libreswan and Mac OS X Big Sur client issues

I'm resorting to asking for help after a brutal amount of time troubleshooting connection problems between client and server. Troubles Mac OS X Catalina, and Linux clients work fine connecting to the server, but Big Sur does not. I haven't yet…
Enoch Root
  • 166
  • 1
  • 7
1
vote
0 answers

libreswan with Ikev2 client and plain text password

I need to set up a connection to VPN server with Libreswan. I can't use strongswan, since they are not working well together when installed on the same OC. My system is Linux Debian 10 (Buster) Kernel version: 4.19.0-17 I already have a working…
Roustam Dzhafarov
  • 11
  • 2
1
vote
0 answers

How to switch from the default kernel module netkey to klips for Libreswan (IPsec)?

Seek your guidance on setting up Libreswan with klips other than netkey. Let us start from the beginning. I installed Libreswan v4.4 and it pops up with this: Linux Libreswan 4.4 (netkey) on 5.4.0-1047-aws. I begin to have issues with the AMI I…
Roma
  • 111
  • 1
1
vote
1 answer

libreswan configure virtual interface for ipsec traffic

Description: I am learning how to configure ipsec with libreswan. I want to set up a host-to-host vpn between two hosts. I want each host to use a virtual interface for their ipsec tunnel. Problem: I set up my ipsec configuration with RSA, and…
Dave
  • 160
  • 1
  • 7
1
vote
1 answer

Route traffic between two IPsec tunnels

I run a backend on DO infrastructure, call it site Yvi, that connects to a third party site Prov via an IPsec tunnel, with this libreswan config: conn prov-client ... right=$YVI_IP rightsourceip=10.31.3.1 rightsubnet=10.31.3.0/28 …
acib708
  • 111
  • 3
0
votes
0 answers

Options for rebuilding OpenSwan box to LibreSwan without downtime?

This is all in an AWS VPC environment. We have an old Ubuntu 12.04 machine running OpenSwan which is managing a pile of VPN connections. This has worked well for us thus far, but 12.04 is no longer supported and OpenSwan is EOL so we want to move to…
Nicolas Pottier
  • 1
0
votes
0 answers

libreswan "Failed to find our RSA Key"

Ubuntu 20.04 Followed all the steps (twice now). Created newhostkey on left and right. Create a .conf file Got the info from the left machine and put it in (see below) Got the info from the right machine and put it in (see below) service ipsec…
boatcoder
  • 548
  • 2
  • 4
  • 19
0
votes
0 answers

OpenSwan GW not routing VLAN traffic through tunnel

I do have a tunnel configured using OpenSwan on a side and libreswan on the other. The issue seems to be on the openswan side, where I do have 2 subnets, one for the main interface, the other is on a VLAN let's say: eth0 192.168.254.0/24 eth0.22…
MaxPer
  • 1
1
2