Stack Overflow
Stack Overflow

Questions tagged [strongswan]

Strongswan is an openSource IPsec-based VPN solution

More information: https://www.strongswan.org/

64 questions
0
votes
1 answer

Vpn connect between iOS NEVPNManager and StrongSwan on Ubuntu 16.04

I am trying to create vpn connection in my app. On the sever side use IKEv2 VPN Server with StrongSwan on Ubuntu 16.04. Build by this guid…
Dmitry K
  • 16
  • 2
0
votes
1 answer

Site-to-Site VPN with Strongswan, DNS server, overlapping subnets)

I need to create a site-to-site VPN with a remote VPC (IKEv2 + IPSec). Both sides use some web resources of the other, those services hostnames are mapped to IPs using a DNS server (one on each side). Side A uses Fortigate, Side B uses…
Bagbyte
  • 845
  • 2
  • 18
  • 34
0
votes
1 answer

setting up kubernetes vpn to on premise network

I have a basic network setup with k8s cluster containing worker pods that have to read from meters contained within another network: My question is, how to set up policy based ipsec tunnel from k8s network to on premise one in such a way that all…
bartek
  • 1
0
votes
1 answer

Ikev2 vpn connection

I am on Fedora 31, I am trying to connect to a VPN that uses IKEv2 via strongswan. But I get [IKE] received NO_PROPOSAL_CHOSEN notify the error. I used the following tutorial…
Babas
  • 377
  • 3
  • 16
0
votes
1 answer

Why macOS IKEv2 client get no reply through tunnel?

server: Debian buster (4.19); Strongswan 5.7.2 ipsec.conf conn %default keyexchange=ikev2 ike=aes256-aes128-sha256-sha1-modp3072-modp2048-modp1024 esp=aes256-sha1-ecp256 fragmentation=yes rekey=no compress=yes dpdaction=clear …
Alexander Lanin
  • 375
  • 5
  • 15
0
votes
2 answers

Openstack how to properly activate vpnaas log?

We have an openstack cluster build with openstack ansible, we are very happy with it. Actually i am trying to set an VPN. We have activate all necessary thing and tried successfully between our openstack and a sonicwall. We are trying now with a…
Eagle2725
  • 11
  • 2
0
votes
1 answer

Getting error while configuration IKE/Ipsec connection between windows10 and SUSE Sles 12

I am new to Ipsec/Ikev2 concept. I am trying to create a Ipsec/IKEv2 connection between Windows 10 and SUSE SELES 12 box using strong swan. Right now i don't have ipsec configuration information of SUSE box. but i can tell you my observation and…
Rohit
  • 406
  • 1
  • 5
  • 21
0
votes
1 answer

strongswan ipsec can't ping subnets

I have 2 strongswan connected, each can ping the other. My problem comes when either of the subnets want to ping an ip on the other side, it doesn't happen. I know i need to add some masquerading but i can't figure out how (i have added the routes…
David Villasmil
  • 395
  • 2
  • 19
0
votes
1 answer

How does IKEv2 work on Android without raw sockets

I was exploring the IKEv2 StrongSwan client implementation for Android. What I fail to understand is that Android and Java do not support raw sockets, whilst the IKEv2 / IPSec works below Transport layer, which seems counter-intuitive. How exactly…
Siddharth Kamaria
  • 2,448
  • 2
  • 17
  • 37
0
votes
0 answers

Connect vici socket to a particular network namespace

I am able to use python3-vici in the global namespace, suppose I want to route it through a particular namespace say, /var/run/x/x/vpn, how do I do that? I have charon.ctl, charon.pid, ipsec.conf, ipsec.d, starter.charon.pid, …
KungFuPanda
  • 55
  • 1
  • 6
0
votes
0 answers

Site to Site VPN on AWS using Strongswan

I have a VPC and subnets in it. I have an EC2 instance that works as VPC Gateway and routed all traffic inside VPC using Route Table. So the requests from subnets to partners' network are reaching to the Gateway instance. There on Gateway instance…
hongdeshuai
  • 49
  • 1
  • 4
0
votes
0 answers

library and application package name conflict issue - Android

Trying to import open source StrongswanVPN project as library in my project (StrongSwanVPN is also an application on playstore), my application working fine with this library, but I can only install one application, either my application or…
Asad
  • 71
  • 3
0
votes
1 answer

How to load a strongswan plugin at runtime

We've authored a plugin for libcharon that makes calls to our code. This is creating some unwanted coupling between our application and strongswan, since we're compiling strongswan with this plugin. Let's call this plugin MyPlugin. It is configured…
shfnet
  • 141
  • 2
  • 9
0
votes
1 answer

FreeRadius can't set custom variable

We want to setup StrongSwan VPN with FreeRadius for authentication. In addition to that we want to assign different subnets to users based on AD-Groups. StrongSwan uses the class attribute in a access-accept reply for that…
SuperHero
  • 1
  • 3
0
votes
1 answer

proposing traffic selectors for us strongswan issue

with the new stongswan module we get the following log message every second. Is there a possibility to turn off these messages in the strongswan log ? What does this message mean? 2017-12-12 08:20:29 12[CFG] proposing traffic selectors for…
viswa ram
  • 461
  • 2
  • 4
  • 9
1 2 3
4
5