Stack Overflow
Stack Overflow

Questions tagged [strongswan]

Strongswan is an openSource IPsec-based VPN solution

More information: https://www.strongswan.org/

64 questions
1
vote
1 answer

What is the difference between Hold and Restart of DPD action in strongswan IPsec?

Question When I tested IPsec DPD on Router, I found that both Hold and Restart reestablished VPN connection after dpdtimeout, so I didn't understand the difference between them I found the relevant explanation in strongswan's document, but I…
TommyTW_Lu
  • 13
  • 4
1
vote
0 answers

IPsec - Clients cannot ping each other

I'm having a hard time to finalize a first working configuration with IPsec. I want to have a IPsec server that creates a network with its clients, and I want the clients to be able to communicate each other through the server. I'm using Strongswan…
DBCL
  • 66
  • 1
  • 8
1
vote
0 answers

Strongswan Cipher Settings for iOS 14

So I had a Strongswan VPN set up for an internal business iOS app. The VPN was handled programatically. With the iOS 14 betas it's stopped working. This was my ipsec.conf: # ipsec.conf - strongSwan IPsec configuration file # basic…
RogerTheShrubber
  • 986
  • 8
  • 19
1
vote
1 answer

Site-to-site VPN on GCP using Strongswan

I have installed strongswan VPN on GCP Compute engine(Ubuntu 20.04) by referring https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-20-04 have 3 different projects and I set up a tunnel for…
Shashikumar KL
  • 1,007
  • 1
  • 10
  • 25
1
vote
1 answer

connectivity issue using strongswan

Below is the setup at my end: VPN1 Machine (AMS3 region) VPN2 Machine (Singapore1 Region) I have configured strongswan using 2 machine in different region and after starting the ipsec on both machine then both machine are reachable to each other…
Tekchand Dagar
  • 317
  • 1
  • 7
  • 18
1
vote
1 answer

strongswan: 07[IKE] no IKE config found for , sending NO_PROPOSAL_CHOSEN

I have configured a VPN gateway and a tunnel, but its not coming up getting below error. charon: 13[IKE] no IKE config found for 10.0.1.211...125.17.97.4, sending NO_PROPOSAL_CHOSEN
GihanS
  • 445
  • 2
  • 5
  • 15
0
votes
0 answers

Strongswan log file can not be created

I am on Debian 10 (buster). I installed StrongSwan 5.7.2. Then I try to create a file log by configuring the /etc/strongswan.d/charon-logging.conf charon { filelog { charon { path = /var/log/charon.log …
Bin Chen
  • 1
  • 1
0
votes
0 answers

Set up VPN client on linux for ipsec ikev2-eap firewall

--edit-- Could set it up with help of the comment from ecdsa: Ended up using strongswan network manager disabling eap-peap in the strongswan.conf following these instructions. --edit-- Connecting to the VPN of our company works fine for windows…
caldetas
  • 46
  • 2
0
votes
0 answers

Ip xfrm state command displays key information, which may cause information leakage. Is there any way to prevent users from viewing key information?

Ip xfrm state command displays key information, which may cause information leakage.In the following, the auth-trunc hmac and enc cbc will cause key information leakage. Is there any way to prevent users from viewing key information in any…
rock ju
  • 1
  • 1
0
votes
1 answer

strongswan in aws EC2 in VPC1 to AWS site to site vpn in VPC2 - tunnel working but can't ping

I have been trying to get strongswan tunnel working from one AWS VPC to another VPC where site-to-site(s2s) VPN is configured for the last two days and the ping doesn't work. No connectivity at all between the instances in two VPC's. The runnel is…
Manoj
  • 93
  • 1
  • 9
0
votes
0 answers

Cannot establish a connection using StrongSwan: "no config named"

I am trying to set up a VPN connection on an Ubuntu server using StrongSwan. I have followed several guides, but when I attempt to establish the connection, I receive the error "no config named 'cockvpn'". I have tried multiple solutions, but none…
Nikita Zakoryuchkin
  • 41
  • 3
  • 7
0
votes
0 answers

vpn connection with strongswan between a vpc aws and a virtualbox lan

Allow me to ask for your help. I would like to mount a vpn connection with strongswan between a vpc aws and a virtualbox lan. The installation of strongswan is going well and I manage to ping my local strongswan and my ftp machine from my…
jomenir
  • 1
  • 1
0
votes
0 answers

How to switch from strongswan to openswan

Having installed strongswan on my raspberry pi I want to switch to openswan but it is not working built openswan and tried sudo make install but it is failing
Mark Z. Kumler
  • 231
  • 2
  • 4
0
votes
1 answer

Ipsec connection with PSK asks for private key

I try to connect with strongswan client to a IPsec server with IKEv2 but I receive the following error: charon[1423]: 09[ENC] parsed IKE_SA_INIT response 0 [ SA KE No ] charon[1423]: 09[CFG] selected proposal:…
HeScm
  • 15
  • 5
0
votes
0 answers

VPN IKEv2 connection problems on Android, IKE_SA failed

I have big problem with connecting to my VPN server from 50% of Android devices. Cannot resolve it 2 weeks with network and android developers VPN server based on IKEv2 with Charon and Strongswan libs, and it works stable with iPhone devices But on…
Maksim Zakharenka
  • 1
1
2
3 4 5