Stack Overflow
Stack Overflow

Questions tagged [ipsec]

Internet Protocol Security (IPsec) is a protocol suite for securing IP communications by authenticating and/or encrypting each IP packet of a communication session.

282 questions
1
vote
2 answers

simple explanations for macsec and ipsec

I need to implement IPSEC and MACSEC transformations on ethernet packets (i.e. I don't need to deal with setting up parameters, security associations, or key exchange issues, just do the transformations on the packets when that is already known.…
John Lawrence Aspden
  • 17,124
  • 11
  • 67
  • 110
1
vote
0 answers

xfrm state encap espinudp: caputure espinudp package but xfrm not work

I try to setup ipsec nat-t by hand topology like that ----------------------------------------------(Pub net) | +-|---------------------+ | |eth0 192.168.100.123/24| (iptables -A…
Shawn Lu
  • 121
  • 1
  • 1
  • 7
1
vote
0 answers

IPSec encryption fails to happen for IP traffic triggered using Scapy

With IPSEC SP/SA configured using ipxfrm/strongswan ,SCAPY IP packets are not getting IPSec encrypted. With same configuration (on same setup) ICMP packets sent via ping are getting IPSec encrypted Note: Non-IPSec IP traffic is sent from scapy and i…
Yogesh Dabas
  • 11
  • 1
1
vote
0 answers

Libreswan invalid peer id while connecting to ikev1 tunnel

I want to connect to a watchguard remote access vpn server. I got the following shrewsoft configuration file for…
Anfaenger
  • 11
  • 1
1
vote
0 answers

Cannot connect to Azure VPN due to TLS Connection Error

I am trying to connect to the azure-vpn using Ubuntu 22.04.1. I am able to connect to the VPN gateway using my Windows system and the Azure VPN Client provided. However, with Ubuntu I am not able to connect. The output from the log appears as…
Michael Wade
  • 202
  • 2
  • 12
1
vote
0 answers

Strongswan connection without PSK

Is it possible to set up strongswan without pre shared secret and without a certificate for iOS/macOS? Only login and password. My current method for iOS/macOS: leftauth=psk
FedorIT
  • 43
  • 5
1
vote
0 answers

Can't connect to L2TP VPN from Docker

I'm just starting out in docker and have absolutely no experience in server setup, I want to ask one thing I want to hit a endpoint IP, let's call that 1.2.3.4 but when i want to hit that, first of all i must connect to some L2TP/IPSec VPN, let's…
Misdan
  • 149
  • 1
  • 5
  • 15
1
vote
1 answer

AWS Site to Site VPN Openswan Issue

I am doing a pretty straightforward exercise by setting up an IPSec VPN with AWS. I am using AWS Linux 2 Image and Openswan 3.25. Error: Failed to add connection "Tunnel1", esp="aes128-sha1;modp1024" is invalid: ESP encryption algorithm 'aes' is…
JMC
  • 393
  • 1
  • 12
1
vote
0 answers

Android create a L2TP/IPSEC connection

Hello Android Community! How can I setup a L2TP/IPSEC connection on android using this IPSEC/IKEV2 library ? I didn't found any documentation about it. Also I am only able to setup a VPN connection using Open VPN but I want a solution for IPSEC…
MayankChoudhary
  • 41
  • 6
1
vote
0 answers

Different MAC generation by snow3g and aesni_mb for AUTH_SNOW3G_UIA2

I am using DPDK 20.11.3 and IPSec 1.2. Based on the link https://github.com/intel/intel-ipsec-mb/wiki/ZUC%2C-SNOW3G-and-KASUMI-Integration: From intel-ipsec-mb version 1.1 and DPDK version 21.11, using the DPDK AESNI MB PMD is recommended to get…
nmurshed
  • 77
  • 6
1
vote
1 answer

Azure virtual gateway with ipsec strongswan in Linux ubuntu need proposal matching for child sa

I configured ipsec.conf, restarted ipsec and made example-gateway up. I am presented with below message received proposals: ESP:AES_GCM_16_256/NO_EXT_SEQ configured proposals:…
Prakashsinha Bayas
  • 512
  • 8
  • 18
1
vote
0 answers

How to get IKEv2 server strength with Swift?

How to get IKEv2 server strength with Swift? Like in other VPN apps I want to give user information about signal strength. How can I do it with IKEv2 server?
SmilingKnight
  • 91
  • 8
1
vote
0 answers

What is the maximum possible priority value of an xfrm policy in linux?

ip xfrm policy { deleteall | list } [ dir DIR ] [ SELECTOR ] [ index INDEX ] [ action ACTION ] [ priority PRIORITY ] The man page talks about the default value, but not about the minimum and maximum values. priority…
Fractal
  • 816
  • 5
  • 15
1
vote
0 answers

Stream lib returns null for tests

When strong swan runs the tests. It fails only with the following tests in the tests suite: I am getting error Running suite 'stream': Running case 'sync': -++ Failure in 'test_sync': service != NULL (suites/test_stream.c:64, i = 0) Running case…
hariszaman
  • 8,202
  • 2
  • 40
  • 59
1
vote
1 answer

strongswan: What is the difference between left and leftid?

This tutorial use left parameter when setup strongswan, while this tutorial also use leftid parameter. What is the difference between left and leftid?
Ren
  • 2,852
  • 2
  • 23
  • 45
1 2 3
…
18 19