Questions tagged [ipsec]

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

1031 questions
0
votes
2 answers

How to configure IPsec to limit RDP

I've seen plenty of people suggesting that you can limit RDP access to a range of IP addresses by using IPsec instead of using the built in Windows Firewall. This is exactly what I need to be able to do, but I have not been able to find any examples…
wham12
  • 43
  • 2
  • 6
0
votes
1 answer

Cisco ASA 5505 8.0(5): specifying IPSec mode in the tunnel-group or group-policy

Documentation states that you can (I'm assuming) globally disable aggressive mode with: isakmp am-disable Not exactly clear on the behavior when two peers are negotiating phase 1 in Cisco land, but in other firewalls, you usually can specific…
gravyface
  • 13,957
  • 19
  • 68
  • 100
0
votes
1 answer

How to make racoon generate security policies for all ports?

I am trying to establish an IPsec connection between two systems. I've got racoon setup on both sides. The client is going to have a dynamic IP address, so on the server, passive and generate_policy are on, and proposal_check is set to obey. With…
Shawn J. Goff
  • 415
  • 5
  • 13
0
votes
2 answers

RV082 Gateway-Gateway VPN Won't Connect

I have two RV082's (firmware 2.0.0.7) both with public static IPs. I'm attempting to setup a gateway-gateway vpn between them. My configuration: Router A: Local Security Gateway Type: IP Only IP Address: 12...* Local Security Group Type: Subnet IP…
Joel
  • 133
  • 1
  • 3
  • 8
0
votes
2 answers

Configure Cisco 871W to connect to VyperVPN

How can I configure my Cisco router to router certain traffic (IP or domain-based) through a VyperVPN connection? VyperVPN uses IPSec: http://www.giganews.com/vyprvpn/setup/mac/l2tp.html Sample configuration is greatly appreciated. Thanks in…
ensnare
  • 2,212
  • 7
  • 24
  • 40
0
votes
2 answers

Which VPN-Software for Road-Warriors

I am using Linux (Debian) as my server platform and want to configure the following: A remote user can connect to a secure VPN server and use its IP to access the Internet, mostly for browsing and e-mail. I read a lot about OpenS/WAN+L2PT and…
Phoibe
  • 43
  • 4
0
votes
2 answers

Can I hook a firewall inside a network and VPN connect to another network?

I'm wondering what I'd have to do to make the following scenario possible: _____________ __________________ | | | | | Network A | | Network B | | | | …
Niclas Lindqvist
  • 189
  • 1
  • 10
0
votes
1 answer

What's required to configure VPN (over IPsec) server with FreeBSD which can accept connections from iPhone?

What's required to configure VPN (over IPsec) server with FreeBSD which can accept connections from iPhone? As I guess, the server should have ability to manage incoming connections, but I don't know to do that. And how to integrate the management…
Eonil
  • 10,459
  • 16
  • 36
  • 54
0
votes
1 answer

Routing subnet over GRE tunnel

Im trying to configure a GRE over IPSec connection between two subnets. The IPSec tunnel is opened and now I want to add a GRE tunnel over it: ip tunnel add GRE01 mode gre remote 10.244.0.1 local 10.244.245.32 ttl 255 ip link set GRE01 up ip addr…
eMgz
  • 103
  • 1
  • 5
0
votes
1 answer

IPSEC VPN Router / Firewall

I'm not sure whether it's the right place to ask for a router / firewall recommendation. My requirements are as follows: supports IPSEC tunnels (at least two connections) has WAN/LAN throughput of almost 100Mbit/s and in VPN mode at least…
0
votes
1 answer

VPN from Windows XP to OpenSwan: correct setup?

Main question is what I am doing wrong in my OpenSwan or L2TP client setup? I am trying to create a Linux OpenSwan VPN connection from Windows XP machine, using preshared key and the builtin Windows XP L2TP IPsec option. I have followed the…
Gnudiff
  • 533
  • 6
  • 21
0
votes
3 answers

Is it possible to use Linux to route between my office (which uses IPSec) and home network?

First of all, apologies if this seems vague - I'm not an admin of anything more than a home network. I have a Ubuntu box sitting on my network which does various odd tasks for me - svn serving, some file serving, Apache/MySQL/PHP which is all raring…
Sam
  • 171
  • 2
  • 8
0
votes
2 answers

Public-to-Public IPSec tunnel: NAT confusion

I know this is possible -- and apparently fairly common with larger companies that don't/can't route private addresses for overlap reasons -- but I can't wrap my head around how to get this to work. I'm playing around with pfSense, Vyatta and a…
WuckaChucka
  • 375
  • 3
  • 8
  • 23
0
votes
1 answer

Scaling up to tens of hundreds of IPSec tunnels and alternative methods of secure transactions

I may have a need to add (to start) 10 IPSec tunnels in a hub-spoke design, whereas communication is one-way (spokes -> hub only) for the purpose of collecting data in a central database server. Each transaction is small, perhaps 10Kb in XML data,…
WuckaChucka
  • 375
  • 3
  • 8
  • 23
0
votes
1 answer

VMWARE Hosts - Seperate from rest of the network ip sec?

I have a situation with the following setup: ESX Host - ESX1 Vmware guest os : box1,box2,box3,box4. There is a special VPN connected to box1 and box3. All of the guest OS's have full access to the rest of the network. My aim is to have two…
Kip
  • 897
  • 1
  • 12
  • 22