Questions tagged [ipsec]

Internet Protocol Security (IPsec) is a protocol suite for securing IP communications by authenticating and/or encrypting each IP packet of a communication session.

282 questions
0
votes
1 answer

Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN

I have two ubuntu 12.04 32 Bit PCs between which I want IPSec Tunnel to be setup. I have setup ipsec in both systems and ipsec verify runs fine on both. Since I have no prior experience of openswan, I am finding it hard to set config files. Here is…
Harsh Vardhan
  • 675
  • 1
  • 11
  • 24
0
votes
1 answer

Cant SSH over IPSEC

I am in AWS and i have two VPCS between virgina and oregon and I am trying to SSH from either region. My rules allow everything needed and I can ping Virgina IPSEC-Machine 10.10.1.47 Host-Machine-V 10.10.4.125 Oregon IPSEC-Machine …
user3830714
  • 91
  • 2
  • 12
0
votes
1 answer

Site to Site Ipsec Openswan and Azure disconnecting every hour

I have some issue with my Openswan. I'm using an openswan (ubuntu) on aws as hub vpn to connect my offices to azure. Connections with offices works without issues. Connection with Azure works but disconnect every hour, i have to restart ipsec…
user3633235
  • 1
  • 1
  • 1
0
votes
1 answer

How do I provide some security without HTTPS?

FIRST: I know HTTPS is HTTP + SSL. I am aware that SSL is the only true option for securely sending information on a connection over the Internet. My question pertains to a situation in which SSL is not the choice and encryption isn't necessary -…
user3063836
0
votes
1 answer

IPsec tunnel on CentOs

I have set up an ipsec tunnel on centos 6 to a VPN which seems to be connecting correctly according to the VPN provider. There is an SMPP service on their server within their network i need to access on (icmp port 4000) but i cannot ping or telnet…
Will
  • 27
  • 2
0
votes
1 answer

xfrm to implement IPsec

In my project it is required to implement IPsec to packets programatically. Currently my system captures packets utilizing netfilter queue and readies the packet to be mangled. From this point on I am clueless on how to implement IPsec to these…
Hasitha Shan
  • 2,900
  • 6
  • 42
  • 83
0
votes
2 answers

OpenSwan L2TP/IPSec sshd bind address

Okay so I have been on Google for about an hour or so trying to figure this one out. I have a L2TP/IPSec vpn setup. When clients connect a new interface is created for that client the issue is durning boot and most of the time these interfaces do…
HcgRandon
  • 705
  • 2
  • 10
  • 18
0
votes
1 answer

Why is the AES-key in gcm-mode 4 bytes longer?

I'm using ip xfrm under Linux to add an IPsec SA with AES in GCM mode to the system. The command I'm using is like this: ip xfrm state add src 10.66.21.164 dst 10.66.21.166 proto esp spi 0x201 mode transport aead "rfc4106(gcm(aes))"…
Marste
  • 627
  • 7
  • 22
0
votes
1 answer

ipsec tunnel disconnects for 10 minutes every x hours, where x varies depending on the lifetime - cisco asa

has anyone faced an issue, where the ipsec tunnel disconnects for 10 minutes every x hours, where x varies depending on the lifetime, specifically when dealing with a cisco asa? what could be the problem?
0
votes
1 answer

Openswan IPSec connection (to a cisco asa) disconnects every 18 hours

We have a CentOS 5.5 (vm) with Linux Openswan U2.6.32 installed. On it, we have an IPSec tunnel with a peer that is a cisco asa. The tunnel disconnects every 18 hours (we need the tunnel to stay up all the time). We have tested many setups at the…
0
votes
2 answers

Site to Site VPN connection between TMG and AWS keeps dropping

AWS VPC <==> TMG I have an amazon VPC with a VPN IPsec VPN connection connected to a Microsoft Forefront TMG server as a customer gateway hosted on Server 2008 r2 SP1, the TMG application is also patched upto SP2 build 7.0.9193.500. The VPN tunnel…
user3025680
  • 1
  • 1
  • 2
0
votes
1 answer

Disable All VPN Tunnel Timeouts on Cisco 1841

A customer of ours has a Cisco 1841 router that is connected to another network via a IPSec VPN tunnel. Everything is working good, but occasionally the VPN tunnel will drop and come back up at a later time (sometimes in a few minutes or a few…
Tom Claydon
  • 19
  • 1
  • 4
0
votes
1 answer

Can port forwarding be done with IPsec?

If i understand correctly, SSH tunnelling allows for the binding of a local port to a remote port through a SSH server. If I'm right, could something similar be done with IPsec?
Kar
  • 6,063
  • 7
  • 53
  • 82
0
votes
1 answer

DMVPN dual tunnel interface on one physical interface + crypto map

Please help me to resolve the following issue. I've got a router which is used for ipsec tunnels (crypto maps). It has public ip address. Now I need to make from it DMVPN HUB. Also I need to create two tunnel intefaces for DMVPN clouds on one…
HFFreeway
  • 19
  • 1
  • 2
  • 9
0
votes
1 answer

OpenSWAN does not start Phase2 at all

I want to connect my Ubuntu 12.04 developer box to corporate network. They have OpenBSD 5.1 on their router with isakmpd. The auth is being done by using RSA keys only. On my side I'd installed openswan (apt-get install openswan) and did the set…
Andrey Zentavr
  • 312
  • 1
  • 5
  • 13