Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [openswan]

129 questions
1
vote
1 answer

Centos 6.3 OpenSWAN doesn't find my connection

I've been tearing my hair off in frustration for too long and decided Serverfault might be able to help. Could anyone somehow explain this? I've reinstalled openswan/ipsec with purge multiple times, I've regenerated the keys and I've tried as far as…
Lars
  • 578
  • 2
  • 8
  • 18
1
vote
2 answers

xl2tpd[845]: parse_config: line 13: data 'ipsec sared=yes' occurs with no context

When I executed xl2tpd I amhaving following error. # xl2tpd -D xl2tpd[845]: parse_config: line 13: data 'ipsec sared=yes' occurs with no context xl2tpd[845]: init: Unable to load config file When I remove the "line 13" I having same error with…
Ahmet Karakaya
  • 243
  • 6
  • 18
1
vote
1 answer

Can't get the L2TP IPSEC up and running

i have an Ubuntu 11.10 (oneiric) server running on a ReadyNAS. Im planning to use this to accept ipsec+l2tp connections through a router. However, the connection is failing somewhere half through. Using Openswan IPsec U2.6.28/K3.0.0-12-generic and…
Maciej Swic
  • 290
  • 5
  • 19
1
vote
1 answer

How can I create a host to host IPsec VPN if my server has direct Internet access and no LAN?

I have a Linux server (CentOS 5.5) that has direct access to the Internet with a fixed IP address. That is, the IP address is 200.29.X.Y. The gateway was given by the datacenter (200.29.X.Z) and the connection works perfect. I need to connect to a…
juakonn
  • 11
  • 2
1
vote
1 answer

iPhone VPN with OpenSwan fails to reconnect

I have managed to configure VPN with iPhone and OpenSWAN on Linux 2.6. Though, when disconnecting the iphone and reconnecting, it times out. I have found that: 1) no packets are being sent when you disconnect iPhone from VPN. 2) when reconnecting,…
gilm
  • 143
  • 6
0
votes
1 answer

Connecting strongswan to badly configured openswan

I'm a bit stuck with configuring strongswan to connect to my office network as it refuses to verifiy the right side in any way, i was wondering if anyone knows of a way to just tell strongswan to ignore the server certificate and finish connecting?…
Snipzwolf
  • 101
  • 2
0
votes
0 answers

Options for rebuilding OpenSwan box to LibreSwan without downtime?

This is all in an AWS VPC environment. We have an old Ubuntu 12.04 machine running OpenSwan which is managing a pile of VPN connections. This has worked well for us thus far, but 12.04 is no longer supported and OpenSwan is EOL so we want to move to…
Nicolas Pottier
  • 1
0
votes
1 answer

NAT rules for VPN routing to public IP in local network

I'm trying configure a test VPN setup to route pings to an instances public IP. A corporate vendor we are connecting to has reserved all private space on their side. I'm not sure what NAT rules I need to get traffic from VPN router instance our side…
Gavin
  • 101
  • 3
0
votes
1 answer

StrongSwan IPsec PING only working once after ipsec restart

Diagram VPN site to site: And a GIF showing what is happening. I create an IP route like this: sudo ip route add 192.168.1.0/24 via 10.132.146.166 eth0 eth1 And I have this iptable rules sudo iptables -t nat -A POSTROUTING -o eth0 -j…
Makarov
  • 11
0
votes
0 answers

AWS Ubuntu Strongswan IPSec VPN and Iptables configuration tunnel routing

I've muddled up my configuration. I've setup a site-to-site VPN between an AWS Ubuntu VM running strongswan, and another site. The VPN tunnel is working, but anytime I try to route traffic through the tunnel from the other site, there is no response…
Unpossible
  • 249
  • 1
  • 7
  • 20
0
votes
1 answer

Policy based routing in linux based on destination address.

I am struggling with a scenario. Suppose we have two systems in same subnet A:- 192.168.1.5 and B:-192.168.1.6 where B is further connected with C:-172.22.1.5 through Openswan. B can ping C but A cant ping C. I want to add a route in A that it…
xs2rashid
  • 204
  • 1
  • 7
0
votes
1 answer

Openswan server not routing traffic to LAN instances

I created an openswan instance which connected with AWS VPN and tunnel is up. I can ping from Openswan server to EC2 instance in VPC and EC2 instance can also ping Openswan private interface. But servers behind Openswan server cant reach EC2…
xs2rashid
  • 204
  • 1
  • 7
0
votes
1 answer

Openswan/IPtables: Faking a unique IP address over VPN tunnel

Context: I'm running a set of instances within the Google Compute environment. Each host has a single interface with single ip in the 10.0.0.0 private range. I have external customers who require connectivity to these instances over a VPN…
John
  • 1
0
votes
0 answers

IPsec VPN with subnet overlapping and NAT

I'm trying to configure, through OpenSwan on a Linux Ubuntu 14.04 the following scenario. It's an interesting configuration and it would be great to understand why I'm failing configuring correctly, even because it can help many people resolving…
Echoes_86
  • 173
  • 10
0
votes
1 answer

ipsec verify indicates ERRORS "No tunnels up"

I just installed openswan on Ubuntu14. I'm trying to connect to my work's VPN (I have access to the Firewall/VPN btw). When I do a /usr/sbin/ipsec verify I get the following: Checking your system to see if IPsec got installed and started…
BioRod
  • 303
  • 4
  • 13
1 2 3
…
8 9