Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

1031 questions
12
votes
2 answers

What's the protocol-level difference between IPSec and "Cisco IPSec"?

Most VPN clients distinguish between IPSec and "Cisco IPSec." For example, (Apple's) iOS treats them as essentially separate things. But I can't find any explanation of what the protocol-level differences are. They may be minor, but there definitely…
Dave Peck
  • 223
  • 2
  • 6
11
votes
5 answers

Security of PPTP vs IPSec

Is PPTP or IPSEC VPN more secure than the other for 'dial in' VPN, if so, why?
Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448
11
votes
2 answers

20Mbps WAN limited to 10Mbps over IPSec Tunnel

We recently upgraded a remote site from a 10/10Mbps fibre to a 20/20Mbps fibre link (it is fibre to the basement, then VDSL from the basement to the office, roughly 30 meters). There are regular large (multi-gig) file copies between this site and a…
Mark Henderson
  • 68,823
  • 31
  • 180
  • 259
10
votes
2 answers

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use the built-in vpn subsystem, and the Cisco VPN…
Peter Grace
  • 3,456
  • 1
  • 27
  • 43
9
votes
1 answer

Strongswan: "received NO_PROPOSAL_CHOSEN error notify" while connecting to Cisco ASA

I am trying to connect to Cisco ASA IKEv1 VPN with StrongSwan (5.5.1-4+deb9u1) on Debian Linux with 4.9.0-5-amd64 kernel. This is kind of classical question and I'have found lot of discussions on this topic and tried many config tweaking, but…
patok
  • 692
  • 1
  • 5
  • 15
9
votes
2 answers

Strongswan (IKEv2) connection established, but no traffic routing

I've seen this sort of question posted a few times before, but so far, none of them have solved my issue. I'm trying to set up an IKEv2 VPN on my Ubuntu Server to use with my Windows Phone using Strongswan. The connection seems to be set up…
Jinhai
  • 93
  • 1
  • 1
  • 4
9
votes
1 answer

strongSwan setup where both sides are behind NAT

I'm trying to setup a strongSwan server in my home and connect to it from another network. Let's say sun is the VPN server and venus is the client. Both sun and venus are behind NAT networks. sun is not the gateway of my home networks. However,…
reish
  • 384
  • 1
  • 4
  • 13
9
votes
3 answers

IPSec VPN between Amazon VPC and Linux Server

I'm trying to set up an IPSec VPN connection between our corporate network and Amazon's Virtual Private Cloud, using their VPN system and a Linux server. Unfortunately, the only guide I've found discusses how to set up the tunnel using a host Linux…
Dan Udey
  • 1,468
  • 12
  • 17
8
votes
1 answer

What is the difference between “Main” mode and “Quick” mode when using IPsec in Windows Server?

What is the difference between “Main” mode and “Quick” mode when using IPsec in Windows Server? When does each one come into play?
Corey
  • 2,031
  • 12
  • 39
  • 54
8
votes
3 answers

strongSwan IKEv2 + Windows 7 Agile VPN: What is causing Error 13801

I have an AWS instance that I want to be a VPN server. It will connect Windows 7 clients to a private network in the Amazon cloud. I have installed Ubuntu 12.04 and the strongswan-ikev2 package. ipsec version reports Linux strongSwan…
Micah R Ledbetter
  • 513
  • 1
  • 5
  • 19
8
votes
1 answer

If IPSec has its own IP tunnel support why do some add LT2P to the stack?

I understand that you can use IPSec to tunnel data securely. According to the Wikipedia page and a few other sources it can also tunnel IP packets and then route them through an interface. That would create a VPN where one subnet would be able to…
Silverfire
  • 790
  • 4
  • 14
7
votes
6 answers

How do I fix verify certificate error when connecting to an AWS Client VPN endpoint?

I have setup a Client VPN, using steps described in Create a Client VPN Endpoint. For the server certificate, I picked a public certificate that was newly created and verified by AWS Certificate Manager. I configured the authentication method to be…
Jim Geurts
  • 667
  • 2
  • 9
  • 13
7
votes
1 answer

IPSec strongswan "established successfully", but no ppp0

I'm trying to connect an Ubuntu Server 16.04 to an IPSec L2TP VPN using the strongswan client. Aparently the connection is established successfully, but the interface ppp0 isn't created. This is the result of sudo ipsec up myconnection: initiating…
leonardorame
  • 327
  • 3
  • 14
7
votes
0 answers

How to limit bandwidth per VPN connection?

I have a StrongSwan (IKEv2) server setup and would like to limit each VPN connection to 512kb/s. After researching I came across tc in Ubuntu. I don't quite understand it and am fighting through the manual pages. DEV=eth0 tc qdisc del dev $DEV…
Houman
  • 1,545
  • 4
  • 22
  • 36
7
votes
1 answer

Why is scp so slow on my network?

SCP is slow in our company network. For testing, I am copying a file from a remote server which is connected via IPsec between the routers. When using scp -vv I get lots of messages like this: debug2: channel 0: window 1966080 sent adjust…
fqxp
  • 411
  • 4
  • 7
1
2
3
…
68 69