Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [strongswan]

strongSwan is an open source, multi-platform IPsec-based VPN solution, with IKEv2 & IKEv1 support

strongSwan is an open source, multi-platform -based solution, with IKEv2 & IKEv1 support.

More information can be found on strongswan.org.

435 questions
4
votes
2 answers

StrongSwan build and run at startup

I've been asked to deploy an IPSEC server for a project and after doing some research, StrongSwan looks like a good candidate. Since this project requires top security, I decided to install the latest version of StrongSwan (5.6.2) as it seems to fix…
Christian
  • 796
  • 3
  • 13
  • 31
4
votes
1 answer

Strongswan IKEv2 VPN on OS X 10.11 and iOS 10 Clients

After many days of searching on Google, through Serverfault, and even on the StrongSwan website, I have been unsuccessful in attempting to get StrongSwan IPSec/IKEv2 VPN working on OS X 10.11.5 and iOS 10. I have been very successful in getting it…
Olivia
  • 181
  • 1
  • 1
  • 5
4
votes
1 answer

How do i get Strongswan / IPTables to route data back to my road warrior client correctly?

I have a simple VPN. I have a client on 10.185.28.241 who gets a virtual IP of 10.42.42.0/24 from the VPN which is located at 10.112.18.105 and is providing access to machines in the 10.112.0.0/16 CIDR. I'm running StrongSwan…
Ryan Shillington
  • 131
  • 1
  • 9
4
votes
1 answer

Strongswan VPN: no matching peer config found

I'm trying to setup a Strongswan VPN but can't get it to work. It does not find a matching peer config and I don't know why: LOG: [ENC] <1> generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ] [NET] <1> sending…
cgross
  • 176
  • 1
  • 1
  • 4
4
votes
1 answer

Windows 7/8 Strongswan IKEv2 Wrong Gateway

I have setup Strongswan on Ubuntu 14.04 from the official package. I use IKEv2 with PKI authentication and a custom authorization plugin. This works great for Android and Ubuntu clients using strongswan but not when using the Native Windows 7/8…
MemCtrl
  • 118
  • 2
  • 10
4
votes
0 answers

strongSwan 4.5.2 with iOS and Mavericks, Connection Troubles

I am having trouble configuring strongSwan 4.5.2 to work with iOS 7 and OS X Mavericks. I have followed these two guides, but am still encountering problems.…
Peter Story
  • 41
  • 1
4
votes
1 answer

networkmanager-strongswan vpn - routing specific ip through VPN

I'm trying to setting a VPN on Linux Mint 19.2. I'm using the network-manager-strongswan so I added this file named VPN under /etc/NetworkManager/system-connections/…
Roberto Manfreda
  • 45
  • 9
3
votes
2 answers

Strongswan Domain and suffix DNS

I've configured a Strongswan server on CentOS 7 for roadwarrior situations and it works perfectly. But I want the Windows 10 clients get the domain with suffix DNS and I didn't find any way to do it. I've tried with the WINS server, but it doesn't…
DSX
  • 385
  • 1
  • 4
  • 18
3
votes
0 answers

L2TP ipsec using network-manager-l2tp and strongswan ubuntu 18.04

The VPN works flawlessly on OSX and Windows 10 but no luck with ubuntu VPN gets connected on ubuntu using Phase1 Algorithms : 3des-sha1-modp1024 Phase2 Algorithms : 3des-sha1 And in 10 seconds gets disconnected with the below msgs …
f4r4
  • 133
  • 6
3
votes
1 answer

strongSwan 5.6.2 and xl2tp 1.3.12 on Ubuntu 18.04 SA established but no traffic

Since updating strongSwan and xl2tpd to the latest versions available for Ubuntu I encounter a problem with ESP and AH in L2TP. Server config: Interface for generating traffic ens224: flags=4163 mtu 1500 inet…
Boris
  • 31
  • 5
3
votes
1 answer

Windows 10 connection to strongswan ipsec server fails with "IKE authentication credentials are unacceptable

I'm trying to get a simple IPSEC/IKEv2 server set up with username/password (for now) on Ubuntu 18.04. I'm using Windows 10 Pro built in client, and the connection fails complaining about the IKE authentication credentials. The event log shows error…
Kayson
  • 301
  • 2
  • 9
3
votes
0 answers

Strongswan stops working after a while

I'm trying hard to resolve one question with my strongswan IKEv2 VPN. I use Linux strongSwan U5.6.1/K3.10.0-862.el7.x86_64 installed on CentOS 7 and few clients: Windows Server 2012 R2, Windows 10, Android. The connection is being established…
Виталий Захаров
  • 31
  • 1
  • 3
3
votes
3 answers

strongswan IKEv2 VPN + RADIUS authentication with NPS in Active Directory domain

I've managed to get strongswan running with eap-mschapv2 authentication using a server certificate. Now I want to try and use the eap-radius plugin with NPS running on a Windows 2012 R2 server to authenticate against Active Directory. On the domain…
0B51D14N
  • 83
  • 2
  • 9
3
votes
2 answers

Client packets not forwarded over strongSwan IPsec site-to-site tunnel for client and gateway on the same server

I have a site-to-site IPsec tunnel set up with strongSwan between my CentOS 7 virtual private server (public IP x.x.x.233 for subnet 172.25.10.0/24) and a customer's network (public IP y.y.y.24 for subnet 10.9.200.0/24). The tunnel seems to be…
Ben
  • 33
  • 1
  • 3
3
votes
1 answer

No ping on IPSec tunnel with Strongswan

I have the following situation. The home network is on 192.168.1.0/24 and uses a Zyxel USG50 which is able to handle IPSec tunnels. The remote VPS runs Ubuntu 16.04 and hosts a PPTP server (10.0.0.1) which assigns addresses 10.0.0.100-200 to the…
Michele Scuttari
  • 61
  • 2
  • 10
1 2
3
…
28 29