Questions tagged [ipsec]

Internet Protocol Security (IPsec)

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

Ipsec VPN connection with local id

In forticlient (using Windows) there is an Ipsec option and you can fill in local id, but linux doesn`t have Ipsec option in forticlient. Is there an alternative to use ipsec via linux and so I could ...
0 votes
0 answers
18 views

Issue converting from StrongSwan ipsec to swan-ctl

I'm trying to migrate my configuration from ipsec/stroke to swanctl/vici. I installed the stronswan-swanctl plugin on my server, which was previously set up with ipsec. After creating/migrating the ...
  • 13
1 vote
0 answers
22 views

isakmp / ike not listening on port 500

I just updated to 20.04 LTS, and installed the strongswan things. I copied a configuration that works on a Debian 10 system (and made some changes to reflect this system). When I do "ipsec ...
  • 11
2 votes
1 answer
35 views

apt source pulling old packages

I am trying to pull the source files from an apt repo sudo apt source strongswan This pulls down version 5.6.2. However on the ubuntu 20.04 focal page, it shows 5.8.2-1. Why is this version not being ...
  • 176
0 votes
0 answers
41 views

Problems with IPv6 on loopback and other local interfaces on IPSEC host

I have strange problems an no clue what to do. All searches lead to other problems that I don't have, so I would like to ask you if you can direct me into the right direction. My setup: I have a host ...
1 vote
1 answer
862 views

nmcli not showing connection

I imported L2TP/IPsec VPN connection configuration file from Ubuntu mate 20.04 /etc/NetworkManager/system-connections/ to Ubuntu server 20.04 Next, on the Ubuntu server 20.04 PC, I check the nmcli ...
  • 31
0 votes
1 answer
529 views

strongMan: /var/run/charon.vici doesn't exist

I was trying to use strongMan to configure strongswan vpn connection. However I encountered the following error: /var/run/charon.vici doesn't exist I have installed strongswan and strongswan-charon ...
  • 1
0 votes
1 answer
2k views

Install and Configure StrongSwan Client on Ubuntu

I am having trouble trying to setup StrongSwan Client on Ubuntu. Here are the steps I follow: Export user's certificate: openssl pkcs12 -in cert_export_username@domain.com.p12 -out username-cert.pem -...
0 votes
1 answer
424 views

l2tp/IPsec vpn: Cannot diable PFS

I am using Ubuntu 21.04 and I wanted to connect to a VPN. I have installed the network-manager network-manager-l2tp network-manager-gnome. I have another laptop using Fedora and installed the same ...
2 votes
1 answer
734 views

Ordering of Interface Configuration with systemd-networkd

I'm using Ubuntu 20.04, with systemd-networkd and Netplan. I have two physical interfaces (ens3 and ens4) which are configured by DHCP (with reservations, so I always get the same addresses). ...
3 votes
1 answer
1k views

Running ipsec start failed on Ubuntu 20.04 in WSL2

I set up a VPN connection to my office's network using StrongSwan. This is on Ubuntu 20.04, running on WSL2 with Windows 10 host. The Steps The following is the complete steps that I did. Install: ...
1 vote
2 answers
509 views

Netplan and Ipsec - tell netplan to leave interface alone?

I'm trying to use Strongswan to create an Ipsec tunnel on a server with Netplan. Netplan has currently no configuration for the tunnel1 and tunnel2 interfaces that Ipsec brings up when the tunnels are ...
2 votes
2 answers
2k views

L2TP IPSEC VPN cannot connect Ubuntu 18.04 Strongswan - PAP authentication failed

I'm trying to connect to a VPN server and it's not working. Output from tail -f /var/log/syslog | grep -E "pppd|charon|NetworkManager|strongSwan|ipsec|l2tp" NetworkManager[22546]: <info&...
  • 656
1 vote
0 answers
1k views

How to set up L2TP client on Ubuntu 20.04?

I did the basics dependencies sudo apt install network-manager sudo apt install network-manager-l2tp sudo apt install network-manager-strongswan But I have a lot of questions: Which IP I should put ...
0 votes
1 answer
2k views

IPSEC/IKEv2 StrongSwan applies only the first route from split-include, the rest is ignored

I have an IPSEC/IKEv2 VPN server (on a MikroTik router) and I'm trying to connect to it from my Ubuntu 20.04.1 LTS system. The server uses x509 certificates and private/public key pairs for ...
  • 121
0 votes
1 answer
2k views

CHILD_SA not working since proposed PFS Group is not configured

Would be nice if someone could give me a hint. Intro So I want to connect with my Kubuntu 18.04.5 client (NetworkManager - Strongswan/Charon) to my IPsec-IKEv2 (pfsense) Server, which works but after ...
1 vote
1 answer
462 views

Why is DH20 not correctly negotiated with remote host when establishing an IPSec tunnel?

Trying to connect a computer to a VPN server configured this way : Router# show isakmp policy ISAKMP policy: L2TP_VPN IKD_ID: 8 negotiation mode: main proposal: 1 encryption: aes256 ...
  • 263
1 vote
0 answers
1k views

L2TP/IPSEC Client configuration Ubuntu 18.04 LTS

I am trying to setup an IPSEC/L2TP client VPN configuration on a Ubuntu 18.04 using Strongswan and xl2tpd. I have no control over the server side configuration. UPDATE & Partial Resolution The ...
  • 11
1 vote
0 answers
317 views

Route traffic outside L2TP IPSEC VPN on Ubuntu 18.04 client

When connecting to websites like Netflix and Stadia I would like to route the traffic outside the VPN I have setup to connect to my office. It is a L2TP IPSEC VPN setup through NetworkManager on ...
  • 436
4 votes
2 answers
2k views

How to setup Strongswan to auth to LDAP?

I'm trying to create an L2TP/IPSEC VPN server in 20.04 that uses LDAP for user authentication. I'm assuming Strongswan does this. Where, in Strongswan or other configs would I add the LDAP server info?...
  • 143
0 votes
1 answer
2k views

L2TP/IPsec internet access problem

When I try to connect to a VPN (L2TP/IPsec) and don't check the option "use this connection only for resources on its network" i'm not being able to access the Internet, if i use this option i'm not ...
  • 1
5 votes
1 answer
4k views

VPN to office without routing all internet traffic

I'm using the Gnome Network manager to connect to my office VPN. It's using StrongSwan IPSec. It connects fine, but all my internet traffic is routed through the office. I don't want this, I only ...
  • 868
0 votes
1 answer
328 views

IPSEC site-to-site overlaping networks

we have two sides connected over ipsec using strongswan. both machines ubuntu 16.04 servers. the issue is both end subnets are overlapping. we have tried all possible iptables scenarios to map ...
0 votes
2 answers
7k views

How to connect to a VPN site using console only?

What I've found so far, there are tutorials to use Network Manager to connect to VPN. Is it possible to create a VPN connection only from the console (Ubuntu 18.04.3 LTS, either Ubuntu 16.x)? ...
  • 545
0 votes
2 answers
2k views

What could make ike-scan see an IP that is an L2TP/IPSEC VPN show up like a non-IPSEC VPN?

Before today, I connected to my work VPN fine (using libreswan and NetworkManager-l2tp). After upgrading my system, my VPN connections ceased functioning. After a lot of troubleshooting, I noticed ...
0 votes
1 answer
3k views

how to config l2tp ip sec for multiple connection from each ip

I installed the l2tp ipsec server on Ubuntu 18.4 Now I can connect to the server and enjoy it. :) But I can only make a connection! I don't know why? When using two mobile phones on the same wifi ...
1 vote
1 answer
7k views

L2TP / IPSec failing to connect (Ubuntu 19.10)

On ubuntu 18.04 LTE VPN connection works properly, but on 19.10 I got: hidden@hidden:~$ tail -f /var/log/syslog hidden NetworkManager[862]: <info> [1574066091.0450] audit: op="connection-...
  • 21
0 votes
0 answers
333 views

How to share IPSec VPN connection to eth1 or wlan0?

I have an Ubuntu pc with a working connection to my VPN server via Strongswan. The connection is IKEv2 with EAP MSCHAPv2 auth. On my Ubuntu pc I have second Ethernet port. I want to share my VPN ...
  • 1
1 vote
1 answer
2k views

Manage configured ipsec VPN with NetworkManager

I configured a strongswan VPN natively by editing /etc/ipsec.conf and /etc/secrets.conf under Ubuntu 18.04. I can now successfully establish the connections with: sudo ipsec up profile However, that ...
2 votes
2 answers
12k views

How to set up L2TP client on Ubuntu 18.04?

I set up my system according to a tutorial I found on the Internet. I basically installed the necessary dependencies: sudo apt install network-manager sudo apt install network-manager-l2tp sudo apt ...
  • 121
1 vote
1 answer
2k views

18.04 L2TP VPN Config - what am I missing?

I've been trying to get an Ubuntu laptop to connect to our L2TP VPN server, I have tried using both 18.04 and 19.04, following a couple of tutorials which basically amounted to installing network-...
  • 11
1 vote
0 answers
258 views

How to use an IP address to connect multiple clients to the L2TP/IPSec Linux server?

At home, I use a modem to connect to the Internet. All mobile phones on the Internet are viewed with an ip address.(NAT) I have a VPS Server. I installed L2TP/IPsec service on it. It works well. But ...
  • 11
0 votes
0 answers
140 views

Wrong IP when Connecting to strongSwan Server

I set up a strongSwan server and I want to test connectivity. I added my username and password, the ca-cert.pem and re-started strongswan on the client. service strongswan status shows lots of ...
  • 121
0 votes
2 answers
1k views

IPSEC/L2TP VPN causes resolving name server problem with the latest systemd version on 18.04

After upgrading libnss-sysytemd library to the latest version 237-3ubuntu10.12, IPSEC/L2TP VPN connection is established but I cannot connect to outside of LAN. I found out the route table was not the ...
  • 257
0 votes
0 answers
429 views

Allowing VPN traffic trough Ubuntu firewall to connect on Sophos firewall

I need advice to achieve something and I can't find the answer anywhere. I'm setting up a network in a test lab. I have an Ubuntu machine that runs SNORT as an IDS and it's the only machine that as ...
0 votes
1 answer
2k views

What Rules Need To Be Setup To Allow NAT on Softether VPN?

I would like some assistance setting up Softether on a locally bridged network with NAT, as well help getting the ip tables rules setup. I have 2 network interfaces with Ubuntu 18.04 LTS. I would like ...
1 vote
1 answer
373 views

Latest strongswan update broken in 18.10 [closed]

A lot of strongswan files got updated this morning. It breaks strongswan because it can't find /etc/ipsec.conf. Sure enough, it's missing. The package file indicates that it's there, but it doesn't ...
  • 64.9k
0 votes
2 answers
120 views

SSH'ing to server failes after setting ipv4 rules in sysctl.conf

Good morning guys, i have been trying to establish a secure connection through IPsec vpn between our server and my machine to test the VPN. i have been following this tutorial Site So Site Ipsec VPN ...
  • 3
0 votes
0 answers
743 views

I cannot get VPNC & NetworkManager running (IPSec Ubuntu 18.04 VPN to FritzBox) -

I cannot get VPNC working on Ubuntu 18.04 running on a Intel NUC. I installed network-manager-vpnc and network-manager-vpnc-gnome and I entered all the credentials as required. The connection starts ...
  • 21
1 vote
1 answer
5k views

Starting IPSec Command Hangs

I am attempting to establish a VPN connection between two regions in AWS EC2 (two virtual machines) using StrongSwan within Docker. However, I am getting a ton of errors when trying to start the ...
  • 11
1 vote
0 answers
2k views

Strange problem with l2tp / ipsec vpn

fresh install with ubuntu 18.04.1 here. I followed this link in order to setup a vpn connection at my workplace https://blog.bvzzdesign.com/2018/06/18/easily-connect-to-l2p-ipsec-vpn-in-ubunutu-18-04/...
1 vote
3 answers
5k views

IPSec with strongswan doesn't connect

I'm trying to set up and IPSEC server with strong swan on 18.04 My ipsec.conf is: # ipsec.conf - strongSwan IPsec configuration file config setup charondebug="cfg 2" conn ikev2-vpn auto=add ...
  • 111
3 votes
2 answers
3k views

18.04 VPN l2tp issue - connects but no access to resources

My network setup is somewhat complex, so let's explain it. But first keep in mind that everything works perfectly with ubuntu 16.04, nixOs, several flavours of Arch based distribs, and windows 10. ...
  • 375
2 votes
0 answers
2k views

How do you connect to VPN with IKEV2 with EAP-TLS authentication on Ubuntu 16.0.4?

I've recently received three files called: vpn-host-certificate.cer company-ca-certificate.cer me.p12 My work environment is Ubuntu 16.0.4. It has been requested that I connect to a VPN that is ...
1 vote
1 answer
3k views

IPSEC VPN client inside Docker container (Ubuntu)

I want to run IPSEC VPN client inside a Ubuntu docker container, I have install strongswan and all the neccessary packages required for an ipsec client, but the problem arises when i start the ...
  • 123
9 votes
4 answers
43k views

L2TP / IPSec failing to connect (Kubuntu 17.10)

I'm trying to connect to the corporate VPN from Kubuntu 17.10. I have network-manager-l2tp installed (version 1.2.8). The output I'm getting: Nov 28 17:20:48 T460 NetworkManager[667]: initiating Main ...
1 vote
1 answer
1k views

Accidentally deleted the ipsec.conf file - what to do now?

While trying to setup my L2TP/IPSec VPN with strongswan and the network-manager-l2tp on Ubuntu 17.10 I accidentally deleted the ipsec.conf file from /etc. Reinstalling strongswan didn't help to ...
  • 342
0 votes
1 answer
764 views

Implementation of IPSec and IKEv3

I need help. I want to compare the Internet Key Exchange protocol performances version 2 with version 3 (IKEv2 vs IKEv3). I established a VPN connexion with IPSec and IKEv2, but i dont have any idea ...
  • 31
13 votes
2 answers
21k views

VPN L2TP/IPSec client on Ubuntu 16.04 VPN service failed to start

On Ubuntu 16.04, I've already followed a couple of tutorials to rebuild network-manager, also installed via apt-get install network-manager-l2tp network-manager-l2tp-gnome. It was working until ...
  • 243
1 vote
0 answers
777 views

strongSwan 5, IKEv2 and L2TP server over IPSEC

I have followed this tutorial and managed to configure IKEv2 with strongSwan on my Ubuntu server. However I am not able to configure L2TP and IKEv2 simultaneously on it. Previously, L2TP/IPSEC was ...