Questions tagged [openswan]
129 questions
0
votes
1 answer
IPSEC VPN site-to-"alias"
I am trying to connect my CentOS (CentOS release 6.7) server to a 3rd party VPN so traffic can be routed between my Apache instance listening on an aliased private IP (192.168.253.1), through the tunnel. My server's physical NIC is connected to the…
0
votes
0 answers
Can't connect Cisco 2621 to AWS EC2 Openswan site to site vpn
I am configuring Site-to-Site vpn between my home Cisco 2621 router and Amazon EC2 instance running openswan.
I keep on getting the following message on the openswan server: " NO_PROPOSAL_CHOSEN "
My Cisco 2621 router config and Openswan config are…

user1896576
- 21
- 2
0
votes
0 answers
OpenSwan VPN IPSEC Tunnel Connection
I was hoping this website would be able to help with solving this issue since I've been running in circles on my end!
I am using OpenSwan to setup an IPSec tunnel between a VPN server on Rackspace and a VPN server on AWS. I've gone through several…

Nare
- 55
- 2
- 10
0
votes
1 answer
Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel
I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings on the remote server are done via firewall. I have…

packet
- 3
- 3
0
votes
1 answer
openSwan VPN is up can't ping remote subnet
When I run the command ipsec auto status i get the following output:
......
172.16.255.1/32===104.131.13.155<104.131.13.155>:17/1701...41.203.65.124<41.203. 65.124>===10.100.108.51/32; erouted; eroute owner: #13
.......
000 #13:…

Oladipo Olasemo
- 111
- 6
0
votes
1 answer
OpenSwan on Amazon EC2 - max number of retransmissions reached STATE_MAIN_I3. Possible authentication failure:
We are communicating with one of our clients over a VPN Tunnel.
Openswan tunnel was working perfectly fine before. Today we attached an Elastic IP to the server and rebooted. Since then the tunnel is not starting up.
These are the steps we have…

Gaurav Srivastava
- 101
- 2
0
votes
1 answer
Can't ping public endpoints when IPSec tunnel is up
I'm using openswan to link two machines via IPSec. The tunnel comes online fine and I have connectivity to each endpoint via the VPN.
However, when the tunnel is up, I lose connectivity to the public endpoint IP addresses. For example, pinging site…

user98651
- 95
- 1
- 2
- 11
0
votes
1 answer
Openswan L2TP setup to allow admin user access to AWS VPC
I've got an ssh bastion host, but managing the ssh whitelist is annoying, opening ssh to the world is suboptimal. I'd like to tuck a vpn server in front.
Can't get openvpn to stay connected for more than an hour (I'm using 2fa and either openvpn or…

jorfus
- 745
- 7
- 14
0
votes
1 answer
IPsec VPN between Fortigate 60C and openswan up, but no traffic
I get visual confirmation that the tunnel is working from the fortigate GUI but, it also says i don't have 1 byte of traffic, the linux server also confirms the tunnel is open but i can't ping nowhere,
my conn
conn office
#left side is home
…

Julio Villalba
- 41
- 1
- 5
0
votes
1 answer
CentOS 7 ipsec hardware rngd erorr
ipsec verify
Hardware RNG detected, testing if used properly
[FAILED]
Hardware RNG is present but 'rngd' is not running. No harware
random used!
Someone suggest to edit /etc/sysconfig/rngd, add following line
EXTRAOPTIONS="-r…

Jichao
- 3,037
- 4
- 18
- 14
0
votes
1 answer
OpenSwan Dead Peer Detection for Mac WIFI clients
I am running an OpenSwan server to facilitate client-server connections into a secure data centre.
I have a problem with the standard L2TP over IPSEC client in MacOS, specifically when using WIFI.
When I connect for the first time, it works fine.…

Garreth McDaid
- 3,449
- 1
- 27
- 42
0
votes
0 answers
Site-to site Configuration between OpenSwan and Cisco ASA
I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.)
CISCO ASA CONFIGURATION :
Palisades Peer: xx.xx.xxx.xxx
…

Himanshu Singhal
- 1
- 1
- 1
0
votes
0 answers
iptables DNAT packets into an openswan IPSEC tunnel
I have the following network setup:
+-----------------------------------+
| |
+------------------------+ | …

Christian Anton
- 1
- 1
0
votes
0 answers
Openswan malfunction since update
For security reasons i performed and update from a previous version of openswan to U2.6.32/K2.6.18-194.el5 (netkey)
Since that moment i've been experiencing constant tunnel drops, i've checked the /var/log/secure log but failed to id the…

Alonimus
- 36
- 5
0
votes
1 answer
IP Addresses over IPSec
I've got four hosts setup as follows:
I've got an IPSec tunnel via OpenSwan over the internet between Servers B and C. Servers A and D are configured to route traffic to the other via B and C respectively. Servers A and B are on one private…

Alex
- 29
- 2