Questions tagged [ipsec]

Internet Protocol Security (IPsec)

Filter by
Sorted by
Tagged with
0
votes
1answer
124 views

Install and Configure StrongSwan Client on Ubuntu

I am having trouble trying to setup StrongSwan Client on Ubuntu. Here are the steps I follow: Export user's certificate: openssl pkcs12 -in cert_export_username@domain.com.p12 -out username-cert.pem -...
0
votes
1answer
55 views

l2tp/IPsec vpn: Cannot diable PFS

I am using Ubuntu 21.04 and I wanted to connect to a VPN. I have installed the network-manager network-manager-l2tp network-manager-gnome. I have another laptop using Fedora and installed the same ...
0
votes
0answers
18 views

Connecting linux throug ipsec to fortinet

I am trying to connect ipsec from ubutu 20.4 to fortinet firewall but with no luck, i am using strongswan.
2
votes
1answer
181 views

Ordering of Interface Configuration with systemd-networkd

I'm using Ubuntu 20.04, with systemd-networkd and Netplan. I have two physical interfaces (ens3 and ens4) which are configured by DHCP (with reservations, so I always get the same addresses). ...
0
votes
0answers
226 views

Running ipsec start failed on Ubuntu 20.04 in WSL2

I set up a VPN connection to my office's network using StrongSwan. This is on Ubuntu 20.04, running on WSL2 with Windows 10 host. The Steps The following is the complete steps that I did. Install: ...
1
vote
2answers
79 views

Netplan and Ipsec - tell netplan to leave interface alone?

I'm trying to use Strongswan to create an Ipsec tunnel on a server with Netplan. Netplan has currently no configuration for the tunnel1 and tunnel2 interfaces that Ipsec brings up when the tunnels are ...
2
votes
2answers
691 views

L2TP IPSEC VPN cannot connect Ubuntu 18.04 Strongswan - PAP authentication failed

I'm trying to connect to a VPN server and it's not working. Output from tail -f /var/log/syslog | grep -E "pppd|charon|NetworkManager|strongSwan|ipsec|l2tp" NetworkManager[22546]: <info&...
0
votes
0answers
32 views

IPsec strongswan implementation with same subnets on both sides

Aoa, Hello I am working on similar configuration just like mentioned in below link: https://www.strongswan.org/testing/testresults/ikev2/net2net-same-nets/ except I have no webserver(192.168.0.150) ...
0
votes
0answers
14 views

StrongSwan implementation on Two Lanner IP Encryptors FW-7525

I have two Lanner IP-Encryptor (FW-7525) devices with Installed Ubuntu 18.04 servers in both of them. Then I install and build StrongSwan in both of them. I connected one Lanner Device to one LAN ...
0
votes
0answers
183 views

Strongswan ipsec: invalid HASH_V1 payload length, decryption failed?

I wanted to connect my router to establish tunnel on all of its ACL on the strongswan server. However only one of the ip in ACL's always gets created and it always restart this tunnel every 4 mins( I ...
0
votes
0answers
113 views

How to forward all traffic between two ipsec tunnels?

I want to create vpn (IKEv2) tunnel with middle vpn server. Its should work like this schema - client -> middle (server A) -> output (server B). I'm using strongswan. This is my configs: ipsec....
1
vote
0answers
546 views

How to set up L2TP client on Ubuntu 20.04?

I did the basics dependencies sudo apt install network-manager sudo apt install network-manager-l2tp sudo apt install network-manager-strongswan But I have a lot of questions: Which IP I should put ...
0
votes
0answers
186 views

Permanent Connection to Windows L2TP over IPSEC Server with Auto-Reconnect on Ubuntu Server 20.04

I have a VPS running Ubuntu Server 20.04 that needs to monitor hundreds of machines on a remote network using Zabbix. This network can be remotely accessed via an L2TP over IPSEC VPN. This responder ...
0
votes
0answers
934 views

IPSEC/IKEv2 StrongSwan applies only the first route from split-include, the rest is ignored

I have an IPSEC/IKEv2 VPN server (on a MikroTik router) and I'm trying to connect to it from my Ubuntu 20.04.1 LTS system. The server uses x509 certificates and private/public key pairs for ...
0
votes
1answer
829 views

CHILD_SA not working since proposed PFS Group is not configured

Would be nice if someone could give me a hint. Intro So I want to connect with my Kubuntu 18.04.5 client (NetworkManager - Strongswan/Charon) to my IPsec-IKEv2 (pfsense) Server, which works but after ...
1
vote
1answer
215 views

Why is DH20 not correctly negotiated with remote host when establishing an IPSec tunnel?

Trying to connect a computer to a VPN server configured this way : Router# show isakmp policy ISAKMP policy: L2TP_VPN IKD_ID: 8 negotiation mode: main proposal: 1 encryption: aes256 ...
1
vote
0answers
867 views

L2TP/IPSEC Client configuration Ubuntu 18.04 LTS

I am trying to setup an IPSEC/L2TP client VPN configuration on a Ubuntu 18.04 using Strongswan and xl2tpd. I have no control over the server side configuration. UPDATE & Partial Resolution The ...
1
vote
0answers
124 views

Route traffic outside L2TP IPSEC VPN on Ubuntu 18.04 client

When connecting to websites like Netflix and Stadia I would like to route the traffic outside the VPN I have setup to connect to my office. It is a L2TP IPSEC VPN setup through NetworkManager on ...
4
votes
2answers
1k views

How to setup Strongswan to auth to LDAP?

I'm trying to create an L2TP/IPSEC VPN server in 20.04 that uses LDAP for user authentication. I'm assuming Strongswan does this. Where, in Strongswan or other configs would I add the LDAP server info?...
0
votes
1answer
1k views

L2TP/IPsec internet access problem

When I try to connect to a VPN (L2TP/IPsec) and don't check the option "use this connection only for resources on its network" i'm not being able to access the Internet, if i use this option i'm not ...
2
votes
1answer
2k views

VPN to office without routing all internet traffic

I'm using the Gnome Network manager to connect to my office VPN. It's using StrongSwan IPSec. It connects fine, but all my internet traffic is routed through the office. I don't want this, I only ...
0
votes
1answer
160 views

IPSEC site-to-site overlaping networks

we have two sides connected over ipsec using strongswan. both machines ubuntu 16.04 servers. the issue is both end subnets are overlapping. we have tried all possible iptables scenarios to map ...
0
votes
2answers
4k views

How to connect to a VPN site using console only?

What I've found so far, there are tutorials to use Network Manager to connect to VPN. Is it possible to create a VPN connection only from the console (Ubuntu 18.04.3 LTS, either Ubuntu 16.x)? ...
0
votes
2answers
1k views

What could make ike-scan see an IP that is an L2TP/IPSEC VPN show up like a non-IPSEC VPN?

Before today, I connected to my work VPN fine (using libreswan and NetworkManager-l2tp). After upgrading my system, my VPN connections ceased functioning. After a lot of troubleshooting, I noticed ...
0
votes
1answer
2k views

how to config l2tp ip sec for multiple connection from each ip

I installed the l2tp ipsec server on Ubuntu 18.4 Now I can connect to the server and enjoy it. :) But I can only make a connection! I don't know why? When using two mobile phones on the same wifi ...
1
vote
1answer
5k views

L2TP / IPSec failing to connect (Ubuntu 19.10)

On ubuntu 18.04 LTE VPN connection works properly, but on 19.10 I got: hidden@hidden:~$ tail -f /var/log/syslog hidden NetworkManager[862]: <info> [1574066091.0450] audit: op="connection-...
0
votes
0answers
251 views

How to share IPSec VPN connection to eth1 or wlan0?

I have an Ubuntu pc with a working connection to my VPN server via Strongswan. The connection is IKEv2 with EAP MSCHAPv2 auth. On my Ubuntu pc I have second Ethernet port. I want to share my VPN ...
1
vote
1answer
1k views

Manage configured ipsec VPN with NetworkManager

I configured a strongswan VPN natively by editing /etc/ipsec.conf and /etc/secrets.conf under Ubuntu 18.04. I can now successfully establish the connections with: sudo ipsec up profile However, that ...
2
votes
2answers
8k views

How to set up L2TP client on Ubuntu 18.04?

I set up my system according to a tutorial I found on the Internet. I basically installed the necessary dependencies: sudo apt install network-manager sudo apt install network-manager-l2tp sudo apt ...
1
vote
1answer
2k views

18.04 L2TP VPN Config - what am I missing?

I've been trying to get an Ubuntu laptop to connect to our L2TP VPN server, I have tried using both 18.04 and 19.04, following a couple of tutorials which basically amounted to installing network-...
1
vote
0answers
218 views

How to use an IP address to connect multiple clients to the L2TP/IPSec Linux server?

At home, I use a modem to connect to the Internet. All mobile phones on the Internet are viewed with an ip address.(NAT) I have a VPS Server. I installed L2TP/IPsec service on it. It works well. But ...
0
votes
0answers
118 views

Wrong IP when Connecting to strongSwan Server

I set up a strongSwan server and I want to test connectivity. I added my username and password, the ca-cert.pem and re-started strongswan on the client. service strongswan status shows lots of ...
0
votes
2answers
797 views

IPSEC/L2TP VPN causes resolving name server problem with the latest systemd version on 18.04

After upgrading libnss-sysytemd library to the latest version 237-3ubuntu10.12, IPSEC/L2TP VPN connection is established but I cannot connect to outside of LAN. I found out the route table was not the ...
0
votes
0answers
276 views

Allowing VPN traffic trough Ubuntu firewall to connect on Sophos firewall

I need advice to achieve something and I can't find the answer anywhere. I'm setting up a network in a test lab. I have an Ubuntu machine that runs SNORT as an IDS and it's the only machine that as ...
0
votes
1answer
1k views

What Rules Need To Be Setup To Allow NAT on Softether VPN?

I would like some assistance setting up Softether on a locally bridged network with NAT, as well help getting the ip tables rules setup. I have 2 network interfaces with Ubuntu 18.04 LTS. I would like ...
1
vote
1answer
296 views

Latest strongswan update broken in 18.10 [closed]

A lot of strongswan files got updated this morning. It breaks strongswan because it can't find /etc/ipsec.conf. Sure enough, it's missing. The package file indicates that it's there, but it doesn't ...
1
vote
0answers
685 views

IPsec Uses OpenSwan instead of StrongSwan

Good morning guyz. I have been trying to establish a secure connection via IPsec(StrongSwan) between my PC and my server with help of this tutorial, i installed StrongSwan both on the server and the ...
0
votes
2answers
67 views

SSH'ing to server failes after setting ipv4 rules in sysctl.conf

Good morning guys, i have been trying to establish a secure connection through IPsec vpn between our server and my machine to test the VPN. i have been following this tutorial Site So Site Ipsec VPN ...
0
votes
0answers
629 views

I cannot get VPNC & NetworkManager running (IPSec Ubuntu 18.04 VPN to FritzBox) -

I cannot get VPNC working on Ubuntu 18.04 running on a Intel NUC. I installed network-manager-vpnc and network-manager-vpnc-gnome and I entered all the credentials as required. The connection starts ...
1
vote
1answer
4k views

Starting IPSec Command Hangs

I am attempting to establish a VPN connection between two regions in AWS EC2 (two virtual machines) using StrongSwan within Docker. However, I am getting a ton of errors when trying to start the ...
1
vote
0answers
2k views

Strange problem with l2tp / ipsec vpn

fresh install with ubuntu 18.04.1 here. I followed this link in order to setup a vpn connection at my workplace https://blog.bvzzdesign.com/2018/06/18/easily-connect-to-l2p-ipsec-vpn-in-ubunutu-18-04/...
1
vote
3answers
4k views

IPSec with strongswan doesn't connect

I'm trying to set up and IPSEC server with strong swan on 18.04 My ipsec.conf is: # ipsec.conf - strongSwan IPsec configuration file config setup charondebug="cfg 2" conn ikev2-vpn auto=add ...
3
votes
2answers
3k views

18.04 VPN l2tp issue - connects but no access to resources

My network setup is somewhat complex, so let's explain it. But first keep in mind that everything works perfectly with ubuntu 16.04, nixOs, several flavours of Arch based distribs, and windows 10. ...
2
votes
0answers
2k views

How do you connect to VPN with IKEV2 with EAP-TLS authentication on Ubuntu 16.0.4?

I've recently received three files called: vpn-host-certificate.cer company-ca-certificate.cer me.p12 My work environment is Ubuntu 16.0.4. It has been requested that I connect to a VPN that is ...
1
vote
1answer
3k views

IPSEC VPN client inside Docker container (Ubuntu)

I want to run IPSEC VPN client inside a Ubuntu docker container, I have install strongswan and all the neccessary packages required for an ipsec client, but the problem arises when i start the ...
7
votes
4answers
38k views

L2TP / IPSec failing to connect (Kubuntu 17.10)

I'm trying to connect to the corporate VPN from Kubuntu 17.10. I have network-manager-l2tp installed (version 1.2.8). The output I'm getting: Nov 28 17:20:48 T460 NetworkManager[667]: initiating Main ...
1
vote
1answer
1k views

Accidentally deleted the ipsec.conf file - what to do now?

While trying to setup my L2TP/IPSec VPN with strongswan and the network-manager-l2tp on Ubuntu 17.10 I accidentally deleted the ipsec.conf file from /etc. Reinstalling strongswan didn't help to ...
0
votes
1answer
560 views

Implementation of IPSec and IKEv3

I need help. I want to compare the Internet Key Exchange protocol performances version 2 with version 3 (IKEv2 vs IKEv3). I established a VPN connexion with IPSec and IKEv2, but i dont have any idea ...
13
votes
2answers
20k views

VPN L2TP/IPSec client on Ubuntu 16.04 VPN service failed to start

On Ubuntu 16.04, I've already followed a couple of tutorials to rebuild network-manager, also installed via apt-get install network-manager-l2tp network-manager-l2tp-gnome. It was working until ...
1
vote
0answers
744 views

strongSwan 5, IKEv2 and L2TP server over IPSEC

I have followed this tutorial and managed to configure IKEv2 with strongSwan on my Ubuntu server. However I am not able to configure L2TP and IKEv2 simultaneously on it. Previously, L2TP/IPSEC was ...