Stack Overflow
Stack Overflow

Questions tagged [ipsec]

Internet Protocol Security (IPsec) is a protocol suite for securing IP communications by authenticating and/or encrypting each IP packet of a communication session.

282 questions
1
vote
0 answers

trying to create a ipsec tunnel with ikev . :ubuntu machine: ip xfrm policy command executed but results shows no src and destination address

On Ubantu machine I'm tying to Create the IPSEC tunnel with below details: sudo ip xfrm policy src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 src 0.0.0.0/0 dst 0.0.0.0/0 socket in…
ADITHYA L BHAT
  • 11
  • 1
1
vote
1 answer

What is the difference between Hold and Restart of DPD action in strongswan IPsec?

Question When I tested IPsec DPD on Router, I found that both Hold and Restart reestablished VPN connection after dpdtimeout, so I didn't understand the difference between them I found the relevant explanation in strongswan's document, but I…
TommyTW_Lu
  • 13
  • 4
1
vote
0 answers

IPsec - Clients cannot ping each other

I'm having a hard time to finalize a first working configuration with IPsec. I want to have a IPsec server that creates a network with its clients, and I want the clients to be able to communicate each other through the server. I'm using Strongswan…
DBCL
  • 66
  • 1
  • 8
1
vote
0 answers

problem in connecting client to L2TP server

I've the MIKROTIK router on KVM. after transfer MIKROTIK to new server and change the router IP my client can not connect to the server. and in the server log file show me this error: phase1 negotiation failed due to time up…
abbas derafshi
  • 307
  • 1
  • 11
1
vote
0 answers

Send sniffed ESP packet with Scapy

I'm trying to pentest an IPSEC implementation with no Auth in Tunnel mode for a Uni Project. After sniffing an ESP packet (which contains an ICMP) with Wireshark, the attacker sends the same packet with Scapy to Host A. The problem is that the…
Kuze
  • 41
  • 1
  • 6
1
vote
1 answer

Site-to-site VPN on GCP using Strongswan

I have installed strongswan VPN on GCP Compute engine(Ubuntu 20.04) by referring https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-20-04 have 3 different projects and I set up a tunnel for…
Shashikumar KL
  • 1,007
  • 1
  • 10
  • 25
1
vote
1 answer

How to enable WCF net.tcp in IPSec?

I'm trying to connect from a web app to another web app using the WCF.NET NET-TCP protocol. This net.tcp protocol is enabled in IIS and is using the port TCP 808 in my case. I've configured IP Filter in the server, but it blocks the connection…
Diego Jancic
  • 7,280
  • 7
  • 52
  • 80
1
vote
1 answer

Google Cloud - OpenVPN & IPSec Tunnel

We have installed the OpenVPN software (from the marketplace) onto a VM. We also have an IPSec tunnel set-up within the platform on the same subnet range. How can I get the OpenVPN Virtual Machine and its VPN clients to be able to talk over the…
Ryan
  • 11
  • 1
1
vote
0 answers

local mysql replication to rds via ipsec vpn error writing communication packets

mysql replication to rds via ipsec vpn error writing communication packets but it worked for month until now | the had multiple connections erros but now its stable and other DB are replicating fine but still got errors on this one mysql log show…
Oussema Beya
  • 11
  • 2
1
vote
1 answer

How I can retrieve encryption keys for my IPsec/L2TP session?

I'm investigating IPsec protocols stack with wireshark. If I need to decrypt tunnel's traffic, I use ip xfrm state command, which returns all needed stuff. During ip source code investigation, I discovered that encryption keys are retrieved from…
Simon Raily
  • 29
  • 3
1
vote
1 answer

Cloudformation AWS: Assign an ip address to a CustomerGateway using parameters

I'm designing a cloudformation template, but I need to define the source IP as a Parameter I tried to define the parameter as a String but it produces the following error: Value (${MyCustomerGateway}) for parameter ipAddress is invalid. Invalid…
Raul Perez
  • 35
  • 6
1
vote
1 answer

Implemetation of AES_XCBC algorithm

I am trying include different IPSec algorithms in C++ based application program. In that I wanted to use AES-XCBC algorithm described here: http://www.faqs.org/rfcs/rfc3566.html I looked at OpenSSL's API's but did not find suitable ones for AES-XCBC…
Parimal
  • 11
  • 3
1
vote
1 answer

Is there support of hmac-md5-96 in setkey ipsec tools?

I want to use "hmac-md5-96" algorithm to create Security Associations at client side. I am using setkey ipsec tools. while adding spd entry, It is giving syntax error and unable to identify hmac-md5-96 I have tried keyed-md5 which is also not…
rizwan alam
  • 53
  • 5
1
vote
1 answer

AWS site-to-site VPN high availability

I have two FreeBSD servers working as firewalls configured with carp IP address which can float between the two servers to achieve high availability. Now I have setup ipsec tunnels to my VPC on AWS with racoon and ipsec-tools. I had to configure the…
laocius
  • 772
  • 1
  • 8
  • 21
1
vote
0 answers

VPN in Swift - loadFromPreferences not running handler

I am trying to connect programmatically to a VPN. I got the code below on this website: http://blog.moatazthenervous.com/create-a-vpn-connection-with-apple-swift/ I am trying to develop a command line application for macOS to connect programatically…
francisaugusto
  • 1,077
  • 1
  • 12
  • 29
1 2 3
…
18 19