Internet Protocol Security (IPsec) is a protocol suite for securing IP communications by authenticating and/or encrypting each IP packet of a communication session.
Questions tagged [ipsec]
282 questions
2
votes
0 answers
android - How to connect to a VPN programmatically that has been manually configured?
INTRODUCTION
Many questions have been asked about the configuration of the VPN connections.
Probably the most famous with its important answer is this one.
The closest question to my needs is the following one.
But I have not found the answer I am…
Link 88
- 553
- 8
- 27
2
votes
1 answer
Why doesn't Linux IPSec implementation support fragmentation before encryption?
I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution (which is what everybody does) is to do the fragmentation before doing the ESP encryption.
My question is…
Nikhil Utane
- 1,141
- 2
- 12
- 29
2
votes
0 answers
Adding custom Single-Block symmetric Cipher in 3.9.11 kernel's crypto API
I have developed a Single-Block symmetric Cipher [CIPHER] Algorithm for IPsec in kernel[3.9.11]'s crypto API. After loading the .ko module into the kernel I can see my algorithm's information provided in /proc/crypto.
Now the problem comes when I…
Mahdi
- 21
- 1
2
votes
0 answers
Azure - IPSec VPN Network Speed
We have a Microsoft DC R2 server running only an Interbase database application, all works fine and we can access this application via both Point to Site and Site to Site VPN.
Our transfer speeds for files is coming in at about 5Mbps which is…
P0ttre11
- 21
- 2
2
votes
1 answer
Using IPsec to secure traffic
I have a client server environment and would like to secure the network traffic using IPsec. What is involved to get this implemented? The application is working fine, I just need to secure the traffic between computers.
What do I need -…
ritu
- 185
- 2
- 5
2
votes
2 answers
L2TP/IPSec NAT issue
I am a little confusing.
A(L2TP/IPSec VPN server ) ---- B(router) ------ (internet) ------- C(router) ------ D(client)
Can a L2TP/IPSec VPN server(A) behind NAT,serve clients(D) behind other different NATS?
Can the IKE message corrected be routed to…
sinopec
- 851
- 1
- 9
- 16
2
votes
1 answer
IPSec VPN Client Linux
I have a SonicWall router with an IP address @public_A. Behind this router is a LAN 192.168.2.0/24.
On an other hand, I have a Linux Ubuntu machine with IP address @public_B
My aim is to realise a VPN IPSec client for Linux so I am able to send…
Mamaxz
- 37
- 1
- 2
2
votes
0 answers
Is it possible to do IPSec tunneling in app level in iOS
I am trying to create app level IPsec tunnel in iOS. I have seen in this link that SystemConfiguration framework has capability to do VPN tunneling but it is for OS X only. Is it possible to do IPSec tunneling in app level in iOS?.
user12345678
- 61
- 2
2
votes
3 answers
Methods of programatically altering ipsec rules with C#?
The only method I know how to execute IPsec changes involves calling netsh to do the changes. Is there a method using System.Management and WMI objects directly? If so, what is it? I am having a hard time finding relevant WMI information with…
asteroid
- 755
- 3
- 9
- 20
2
votes
1 answer
Amazon VPC to VPC connection
I have created an Amazon EC2 Linux instance running Racoon and this one is trying to connect other Amazon VPC IPSec interface. I use my Elastic IP address as a customer gateway but I'm getting these failures.
Does anyone have an idea regarding…
user1988980
- 21
- 2
2
votes
0 answers
Using IPsec to ensure traffic between the peers is always encrypted
I have implemented a IPsec connection between two pairs using openswan (opens/wan) in CentOS 6. This is running fine and i can see the traffic is encrypted. However if for whatever reason the IPsec tunnel no longer exists (maybe someone turned it…
Luke
- 884
- 8
- 21
2
votes
2 answers
Openswan on EC2 VPC
I am working on establishing a VPN tunnel between our VPC on Amazon and a client network , the client uses public IP addresses behind their firewall and requested that our servers in the VPC to use public IPs also.
The purpose of the connection is…
Khaled Abu AlKheir
- 301
- 2
- 3
- 11
1
vote
2 answers
Add Blocked IPs using .NET Framework
We have a lot of machines, and it can be a pretty big pain in the ass when a customer on one of them requests that we block some IPs. We run Game Servers, so generally IPs that need to be blocked can be any IP, any port, etc.
I would like to write a…
user470760
1
vote
4 answers
should you authenticate the initialization vector in ipsec?
I'm trying to implement IPSEC in the form of ESP in transport mode with using aes in galois/counter mode, according to RFC4106.
I'm supposed to put the initialization vector just before the ciphertext in the transformed packet.
Should it be part of…
John Lawrence Aspden
- 17,124
- 11
- 67
- 110
1
vote
1 answer
Cisco/AWS IKEv2/IPSEC Site-to-Site VPN: Received an IKE msg id outside supported window
I'm encountering an issue with an IKEv2 setup where the authentication exchange fails and I receive the error message: "Response is outside of window received 0x1, expect 0x2 <= mess_id < 0x2 : Received an IKE msg id outside supported window".
I am…
