Questions tagged [ipsec]
Internet Protocol Security (IPsec)
101
questions
0
votes
0
answers
44
views
Connection to ipsec vpn on asus router
I have an asus router that has a vpn server based on ipsec
I have all the data I need except the certificate file. Asus provides downloads of the cert for Windows or android for the certificate but no ...
- 11
0
votes
0
answers
102
views
Ubuntu 22.04 VPN issues (L2TP/IPSec)
I have a couple of machines running Ubuntu 22.04.3 LTS. I'm observing the same issue on all machines:
I can establish a connection to my VPN server.
I can ping machines, access internal websites, ...
- 9
1
vote
1
answer
346
views
Connecting to IPSec IKEv2 VPN from CLI
I have set up an IPSec VPN on an AWS ec2 instance following this https://github.com/hwdsl2/setup-ipsec-vpn. The VPN works fine I am able to connect to it from my Phone and Laptops ( Android, Windows, ...
- 121
0
votes
0
answers
97
views
Strongswan ikev2 client 22.04
i need to do a site to site vpn, however have no luck using strongswan vpn client. researched online and read the manuals to no avail, any assistance would be appreciated. turned off UFW just to ...
1
vote
1
answer
2k
views
Problem with L2TP IPSec VPN from ubuntu 22.04 [duplicate]
I have to connect to a VPN L2TP/Ipsec
Under Ubuntu 18.04, I used:
IPsec Tunnel to L2TP Server - yes
Phase1 = 3des-sha1-modp1024!
Phase2 = 3des-sha1!
Force UDP encapsulation
I have installed Ubuntu 22....
- 21
0
votes
0
answers
138
views
How i can connect to IKEv2 vpn server on server Ubuntu?
Now I use the charon-cmd utility for these purposes like this:
sudo charon-cmd --host host.domain --identity host.domain --profile ikev2-eap --eap-identity my-identity
But maybe there are some other ...
- 101
0
votes
0
answers
184
views
Strongswan site-to-site VPN not working
I'm trying to run a site-to-site VPN with ipsec and Strongswan. The sites are Ubuntu VMs running on a shared host machine. Each host has a different public IP address and both are behind a router (One ...
- 1
1
vote
1
answer
305
views
l2tp vpn Ubuntu 22.04
I've gotten a new laptop and upgraded to 22.04, but I can no longer seem to get the l2tp/ip-sec VPN required for my job working anymore. I'm using the Gnome NetworkManager to configure this (just like ...
- 13
0
votes
0
answers
66
views
Ubuntu 20.04 IPsec VPN with Peer_ID
I am currently trying to establish a VPN on an Ubuntu 20.04 Operating System with the following characteristics:
Type: IPSec
Credentials: Username, Password, Pre-shared Key, Peer_Id
I have found that ...
0
votes
1
answer
350
views
Ipsec VPN connection with local id
In forticlient (using Windows) there is an Ipsec option and you can fill in local id, but linux doesn`t have Ipsec option in forticlient. Is there an alternative to use ipsec via linux and so I could ...
- 1
1
vote
0
answers
52
views
isakmp / ike not listening on port 500
I just updated to 20.04 LTS, and installed the strongswan things.
I copied a configuration that works on a Debian 10 system (and made some changes to reflect this system).
When I do "ipsec ...
- 11
2
votes
1
answer
59
views
apt source pulling old packages
I am trying to pull the source files from an apt repo
sudo apt source strongswan
This pulls down version 5.6.2. However on the ubuntu 20.04 focal page, it shows 5.8.2-1. Why is this version not being ...
- 183
1
vote
1
answer
3k
views
nmcli not showing connection
I imported L2TP/IPsec VPN connection configuration file from Ubuntu mate 20.04 /etc/NetworkManager/system-connections/ to Ubuntu server 20.04
Next, on the Ubuntu server 20.04 PC, I check the nmcli ...
- 31
1
vote
1
answer
1k
views
strongMan: /var/run/charon.vici doesn't exist
I was trying to use strongMan to configure strongswan vpn connection. However I encountered the following error:
/var/run/charon.vici doesn't exist
I have installed strongswan and strongswan-charon ...
- 11
0
votes
1
answer
4k
views
Install and Configure StrongSwan Client on Ubuntu
I am having trouble trying to setup StrongSwan Client on Ubuntu.
Here are the steps I follow:
Export user's certificate:
openssl pkcs12 -in cert_export_[email protected] -out username-cert.pem -...
- 103
0
votes
1
answer
776
views
l2tp/IPsec vpn: Cannot diable PFS
I am using Ubuntu 21.04 and I wanted to connect to a VPN. I have installed the network-manager network-manager-l2tp network-manager-gnome. I have another laptop using Fedora and installed the same ...
2
votes
1
answer
1k
views
Ordering of Interface Configuration with systemd-networkd
I'm using Ubuntu 20.04, with systemd-networkd and Netplan. I have two physical interfaces (ens3 and ens4) which are configured by DHCP (with reservations, so I always get the same addresses).
...
- 143
3
votes
1
answer
2k
views
Running ipsec start failed on Ubuntu 20.04 in WSL2
I set up a VPN connection to my office's network using StrongSwan. This is on Ubuntu 20.04, running on WSL2 with Windows 10 host.
The Steps
The following is the complete steps that I did.
Install:
...
- 31
1
vote
2
answers
860
views
Netplan and Ipsec - tell netplan to leave interface alone?
I'm trying to use Strongswan to create an Ipsec tunnel on a server with Netplan. Netplan has currently no configuration for the tunnel1 and tunnel2 interfaces that Ipsec brings up when the tunnels are ...
- 143
2
votes
2
answers
3k
views
L2TP IPSEC VPN cannot connect Ubuntu 18.04 Strongswan - PAP authentication failed
I'm trying to connect to a VPN server and it's not working.
Output from tail -f /var/log/syslog | grep -E "pppd|charon|NetworkManager|strongSwan|ipsec|l2tp"
NetworkManager[22546]: <info&...
- 656
1
vote
0
answers
2k
views
How to set up L2TP client on Ubuntu 20.04?
I did the basics dependencies
sudo apt install network-manager
sudo apt install network-manager-l2tp
sudo apt install network-manager-strongswan
But I have a lot of questions:
Which IP I should put ...
- 11
0
votes
1
answer
3k
views
IPSEC/IKEv2 StrongSwan applies only the first route from split-include, the rest is ignored
I have an IPSEC/IKEv2 VPN server (on a MikroTik router) and I'm trying to connect to it from my Ubuntu 20.04.1 LTS system. The server uses x509 certificates and private/public key pairs for ...
- 131
0
votes
1
answer
3k
views
CHILD_SA not working since proposed PFS Group is not configured
Would be nice if someone could give me a hint.
Intro
So I want to connect with my Kubuntu 18.04.5 client (NetworkManager - Strongswan/Charon) to my IPsec-IKEv2 (pfsense) Server, which works but after ...
- 1
1
vote
1
answer
595
views
Why is DH20 not correctly negotiated with remote host when establishing an IPSec tunnel?
Trying to connect a computer to a VPN server configured this way :
Router# show isakmp policy
ISAKMP policy: L2TP_VPN
IKD_ID: 8
negotiation mode: main
proposal: 1
encryption: aes256
...
- 263
1
vote
0
answers
1k
views
L2TP/IPSEC Client configuration Ubuntu 18.04 LTS
I am trying to setup an IPSEC/L2TP client VPN configuration on a Ubuntu 18.04 using Strongswan and xl2tpd. I have no control over the server side configuration.
UPDATE & Partial Resolution
The ...
- 11
1
vote
0
answers
341
views
Route traffic outside L2TP IPSEC VPN on Ubuntu 18.04 client
When connecting to websites like Netflix and Stadia I would like to route the traffic outside the VPN I have setup to connect to my office. It is a L2TP IPSEC VPN setup through NetworkManager on ...
- 486
4
votes
2
answers
3k
views
How to setup Strongswan to auth to LDAP?
I'm trying to create an L2TP/IPSEC VPN server in 20.04 that uses LDAP for user authentication.
I'm assuming Strongswan does this.
Where, in Strongswan or other configs would I add the LDAP server info?...
- 153
0
votes
1
answer
2k
views
L2TP/IPsec internet access problem
When I try to connect to a VPN (L2TP/IPsec) and don't check the option "use this connection only for resources on its network" i'm not being able to access the Internet, if i use this option i'm not ...
- 1
7
votes
1
answer
6k
views
VPN to office without routing all internet traffic
I'm using the Gnome Network manager to connect to my office VPN. It's using StrongSwan IPSec.
It connects fine, but all my internet traffic is routed through the office. I don't want this, I only ...
- 928
0
votes
1
answer
449
views
IPSEC site-to-site overlaping networks
we have two sides connected over ipsec using strongswan. both machines ubuntu 16.04 servers. the issue is both end subnets are overlapping. we have tried all possible iptables scenarios to map ...
- 49
0
votes
2
answers
9k
views
How to connect to a VPN site using console only?
What I've found so far, there are tutorials to use Network Manager to connect to VPN.
Is it possible to create a VPN connection only from the console (Ubuntu 18.04.3 LTS, either Ubuntu 16.x)?
...
- 575
0
votes
2
answers
2k
views
What could make ike-scan see an IP that is an L2TP/IPSEC VPN show up like a non-IPSEC VPN?
Before today, I connected to my work VPN fine (using libreswan and NetworkManager-l2tp). After upgrading my system, my VPN connections ceased functioning. After a lot of troubleshooting, I noticed ...
- 582
0
votes
1
answer
3k
views
how to config l2tp ip sec for multiple connection from each ip
I installed the l2tp ipsec server on Ubuntu 18.4
Now I can connect to the server and enjoy it. :)
But I can only make a connection!
I don't know why?
When using two mobile phones on the same wifi ...
- 1
1
vote
1
answer
8k
views
L2TP / IPSec failing to connect (Ubuntu 19.10)
On ubuntu 18.04 LTE VPN connection works properly, but on 19.10 I got:
hidden@hidden:~$ tail -f /var/log/syslog
hidden NetworkManager[862]: <info> [1574066091.0450] audit: op="connection-...
- 21
0
votes
0
answers
419
views
How to share IPSec VPN connection to eth1 or wlan0?
I have an Ubuntu pc with a working connection to my VPN server via Strongswan. The connection is IKEv2 with EAP MSCHAPv2 auth. On my Ubuntu pc I have second Ethernet port. I want to share my VPN ...
- 1
1
vote
1
answer
3k
views
Manage configured ipsec VPN with NetworkManager
I configured a strongswan VPN natively by editing /etc/ipsec.conf and /etc/secrets.conf under Ubuntu 18.04. I can now successfully establish the connections with:
sudo ipsec up profile
However, that ...
- 829
2
votes
2
answers
17k
views
How to set up L2TP client on Ubuntu 18.04?
I set up my system according to a tutorial I found on the Internet.
I basically installed the necessary dependencies:
sudo apt install network-manager
sudo apt install network-manager-l2tp
sudo apt ...
- 121
1
vote
1
answer
3k
views
18.04 L2TP VPN Config - what am I missing?
I've been trying to get an Ubuntu laptop to connect to our L2TP VPN server, I have tried using both 18.04 and 19.04, following a couple of tutorials which basically amounted to installing network-...
- 11
1
vote
0
answers
301
views
How to use an IP address to connect multiple clients to the L2TP/IPSec Linux server?
At home, I use a modem to connect to the Internet.
All mobile phones on the Internet are viewed with an ip address.(NAT)
I have a VPS Server.
I installed L2TP/IPsec service on it.
It works well. But ...
- 11
0
votes
0
answers
164
views
Wrong IP when Connecting to strongSwan Server
I set up a strongSwan server and I want to test connectivity. I added my username and password, the ca-cert.pem and re-started strongswan on the client. service strongswan status shows lots of ...
- 121
0
votes
2
answers
1k
views
IPSEC/L2TP VPN causes resolving name server problem with the latest systemd version on 18.04
After upgrading libnss-sysytemd library to the latest version 237-3ubuntu10.12, IPSEC/L2TP VPN connection is established but I cannot connect to outside of LAN. I found out the route table was not the ...
- 277
0
votes
0
answers
486
views
Allowing VPN traffic trough Ubuntu firewall to connect on Sophos firewall
I need advice to achieve something and I can't find the answer anywhere.
I'm setting up a network in a test lab. I have an Ubuntu machine that runs SNORT as an IDS and it's the only machine that as ...
0
votes
1
answer
2k
views
What Rules Need To Be Setup To Allow NAT on Softether VPN?
I would like some assistance setting up Softether on a locally bridged network with NAT, as well help getting the ip tables rules setup. I have 2 network interfaces with Ubuntu 18.04 LTS. I would like ...
- 161
1
vote
1
answer
402
views
Latest strongswan update broken in 18.10 [closed]
A lot of strongswan files got updated this morning. It breaks strongswan because it can't find /etc/ipsec.conf. Sure enough, it's missing. The package file indicates that it's there, but it doesn't ...
- 69.7k
0
votes
2
answers
182
views
SSH'ing to server failes after setting ipv4 rules in sysctl.conf
Good morning guys,
i have been trying to establish a secure connection through IPsec vpn between our server and my machine to test the VPN. i have been following this tutorial
Site So Site Ipsec VPN
...
- 3
0
votes
0
answers
781
views
I cannot get VPNC & NetworkManager running (IPSec Ubuntu 18.04 VPN to FritzBox) -
I cannot get VPNC working on Ubuntu 18.04 running on a Intel NUC.
I installed network-manager-vpnc and network-manager-vpnc-gnome and I entered all the credentials as required. The connection starts ...
- 21
1
vote
1
answer
7k
views
Starting IPSec Command Hangs
I am attempting to establish a VPN connection between two regions in AWS EC2 (two virtual machines) using StrongSwan within Docker. However, I am getting a ton of errors when trying to start the ...
- 11
1
vote
0
answers
2k
views
Strange problem with l2tp / ipsec vpn
fresh install with ubuntu 18.04.1 here.
I followed this link in order to setup a vpn connection at my workplace
https://blog.bvzzdesign.com/2018/06/18/easily-connect-to-l2p-ipsec-vpn-in-ubunutu-18-04/...
- 11
1
vote
3
answers
5k
views
IPSec with strongswan doesn't connect
I'm trying to set up and IPSEC server with strong swan on 18.04
My ipsec.conf is:
# ipsec.conf - strongSwan IPsec configuration file
config setup
charondebug="cfg 2"
conn ikev2-vpn
auto=add
...
- 111
3
votes
2
answers
3k
views
18.04 VPN l2tp issue - connects but no access to resources
My network setup is somewhat complex, so let's explain it.
But first keep in mind that everything works perfectly with ubuntu 16.04, nixOs, several flavours of Arch based distribs, and windows 10.
...
- 425