Questions tagged [openswan]

129 questions
2
votes
0 answers

Is there an extension of host to host ipsec to a many-many configuration?

Having a typical host to host transport mode ipsec configuration, conn appserver01-to-swift01 leftid=@appserver01.server.com left=10.133.176.246 leftrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxx rightid=@swift01.server.com …
user22866
  • 131
  • 5
2
votes
2 answers

How to deny connections to xl2tp without ipsec encryption?

I try to setup l2tp+ipsec server for my mobile use and my home router use. So I made some setup and checked it works fine from android device. I see encryption on ipsec --status. My system is CentOS Linux release 7.0.1406 (Core) based on Digital…
Insspb
  • 33
  • 6
2
votes
0 answers

Creating redundant IPSec connections using OpenSwan

I have a linux (netkey) instance with openswan installed, the instance has two connection to the same IPSec peer that needs to act as redundant connections. both connections' properties are the same (except for the peer's IP addresses and the right…
Amir
  • 21
  • 1
  • 4
2
votes
0 answers

Openswan bad routing record after connect

I have a problem in openswan configuration. In the routing table create following lines on the client, after connect to server: Dest mask Gateway Conn Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.102 …
user218547
  • 21
  • 2
2
votes
0 answers

OpenSwan + AWS + Ubuntu 14.04 - Cannot reach server

i'm currently trying to set up a VPN in order to login into a private subnet hosted on AWS. The target host has Ubuntu 14.04 and installed OpenSwan. I've setup ipsec.conf, ipsec.secrets, xl2tpd.conf, options.xl2tpd and chap-secrets and currently…
nbriozzo
  • 21
  • 3
2
votes
0 answers

Is it possible to do IPSec Site to Site VPN without static & public IP on one end?

I am working on a project for my engineering degree that requires me to interface with some pre-existing equipment, so I am rather limited on my options. I'm rather new to VPN and ipsec for that matter. If I've got it completely wrong, please fill…
BobTuckerman
  • 448
  • 3
  • 8
2
votes
1 answer

How do I configure routing for an IPSEC tunnel between Openswan and RouterOS

I am trying to create a site-to-site VPN between a Linux router that runs openswan and shorewall (host A, serving subnet 10.10.0.0/16) and a MikroTek RouterBoard running RouterOS 6.3 (host B, serving 192.168.88.0/24). The IPSEC tunnel itself seems…
dorian
  • 397
  • 1
  • 7
  • 22
2
votes
0 answers

IPsec connection established but xl2tpd times out

This may or may not be related to my problem with passing ipsec verify. I have configured L2TP/IPsec VPN on Ubuntu 13.04 following Ubuntu's community documentation and while IPsec connection seems to be established correctly, connection to xl2tpd…
Damn Terminal
  • 517
  • 3
  • 7
2
votes
1 answer

Configure ipsec vpn tunnel (network to network with IKE with preshared key) on Centos 6 with openswan

I have Cisco Linksys router configured as VPN gateway (network to network) : Now I wanna configure ipsec VPN similarly on Centos 6 with openswan. I was looking in internet but have no luck (there are some tutorials but they are not similar to my…
B14D3
  • 5,110
  • 13
  • 58
  • 82
2
votes
1 answer

openswan and xl2tpd tunnel not working?

Since weeks i want to setup l2tp tunnel with xl2tpd and openswan in debian wheezy, the external interface is ppp0 with dynamic ip and the internal interface is eth0 with ip address 192.168.1.1. l2tp server give me the user_id, password and the…
shams
  • 21
  • 1
  • 1
  • 4
2
votes
1 answer

Openswan ipsec transport tunnel not going up

On ClusterA and B I have installed the "openswan" package on Debian Squeeze. ClusterA ip is 172.16.0.107, B is 172.16.0.108 When they ping one another, it does not reach the destination. /etc/ipsec.conf: version 2.0 # conforms to second version…
gparent
  • 3,561
  • 2
  • 23
  • 28
2
votes
0 answers

ipsec IKE phase 1 failure

I have a wireless gateway that supports site-to-site IPSec. I have configured openswan on Ubuntu Server 12.04 (left side of the tunnel) with the following /etc/ipsec.conf: version 2.0 config setup nat_traversal=yes …
Isaac Sutherland
  • 767
  • 2
  • 9
  • 16
2
votes
0 answers

Sending L2tp/IPsec PSK client packets to OpenSwan server

I'm trying (kind of) to create VPN client, I set my server on Ubuntu using OpenSwan (L2tp/IPsec PSK). What I'm doing right now is sending packets to my server and trying to exchange my keys with the server. And here is the thing I am confused about:…
Stigi
  • 121
  • 1
2
votes
1 answer

VPN iptables Forwarding: Net-to-net

I've tried to look elsewhere on this site but I couldn't find anything matching this problem. Right now I have an ipsec tunnel open between our local network and a remote network. Currently, the local box running Openswan ipsec with the tunnel open…
Mike Holler
  • 131
  • 1
  • 4
2
votes
2 answers

How do I configure a Linux VPN Client to get into a network through a Fortigate firewall?

In order to connect to my job's VPN, I have been given by the network admin: a username a password a PSK I run Ubuntu at home. I know Fortigate's VPN should be a vanilla IPSec, so OpenSwan should do the trick. Still, I can't get it to work. I have…
GomoX
  • 776
  • 3
  • 8
  • 21
1 2
3
8 9