Skip to main content

Questions tagged [openswan]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
119 views

How to get 2 tunnels UP between OpenSwan and AWS?

I have a VPC and network in eu-central-1 and one in eu-west-1 in AWS. The eu-central-1 fakes my on-prem environment. There I installed and configured OpenSwan on an EC2. In in eu-west-1 I configured a ...
DenCowboy's user avatar
  • 343
2 votes
1 answer
162 views

what is the proposal string for aes-gem256 deffie helman group 20, esp

As a developer tasked with connecting to a vpn without preconfigured profile scripts, i'm fumbling through setting up a strongswan ipsec.conf file. My current hurdle is an "invalid proposal ...
T3.0's user avatar
  • 121
0 votes
1 answer
146 views

How to clear Openswan logs?

I am a Java developer. I have been a Linux user for a few years, due to this fact, I was asked to clean up and analyze the disk space of one of our servers. I came across an 81Gb file called Openswan....
Douglas Eleuterio's user avatar
0 votes
1 answer
2k views

UDP-Packets seem to get lost in IPsec tunnel from Strongswan to AWS cloud - connection works with Openswan

Use case: IOT-device connected through AWS cloud The IOT-device is behind a router that sends all traffic through aws cloud. The IOT-server can not be configured and thus is not part of the AWS cloud ...
DoRe's user avatar
  • 41
0 votes
1 answer
793 views

Connecting strongswan to badly configured openswan

I'm a bit stuck with configuring strongswan to connect to my office network as it refuses to verifiy the right side in any way, i was wondering if anyone knows of a way to just tell strongswan to ...
Snipzwolf's user avatar
  • 101
1 vote
0 answers
173 views

Trouble with routing on VPN with Openswan IPSec

Good morning, I'm having trouble configuring access to the servers through a VPN. The client can connect to the VPN perfectly, but access to the servers does not work. The conf of my connection is ...
Alexssandro Gottschalk's user avatar
0 votes
0 answers
194 views

Options for rebuilding OpenSwan box to LibreSwan without downtime?

This is all in an AWS VPC environment. We have an old Ubuntu 12.04 machine running OpenSwan which is managing a pile of VPN connections. This has worked well for us thus far, but 12.04 is no longer ...
Nicolas Pottier's user avatar
1 vote
0 answers
812 views

Openswan l2tp vpn ppp wrong ip address

Using Openswan with xl2tp on archlinux (4.20) to connect to a vpn, I can create the tunnel and the ppp interface is created howerver it gets the wrong ip address: enp4s0: <BROADCAST,MULTICAST,...
2A-66-42's user avatar
  • 111
0 votes
1 answer
1k views

NAT rules for VPN routing to public IP in local network

I'm trying configure a test VPN setup to route pings to an instances public IP. A corporate vendor we are connecting to has reserved all private space on their side. I'm not sure what NAT rules I need ...
Gavin's user avatar
  • 101
0 votes
1 answer
439 views

StrongSwan IPsec PING only working once after ipsec restart

Diagram VPN site to site: And a GIF showing what is happening. I create an IP route like this: sudo ip route add 192.168.1.0/24 via 10.132.146.166 eth0 eth1 And I have this iptable rules sudo ...
Makarov's user avatar
  • 11
0 votes
0 answers
1k views

AWS Ubuntu Strongswan IPSec VPN and Iptables configuration tunnel routing

I've muddled up my configuration. I've setup a site-to-site VPN between an AWS Ubuntu VM running strongswan, and another site. The VPN tunnel is working, but anytime I try to route traffic through ...
Unpossible's user avatar
1 vote
1 answer
2k views

How to connect VPN Client Openswan

I have VPN server using Openswan with address 103.19.208.247 Then, i want connect my laptop (CENTOS) with IP 103.19.208.243 to VPN server. Here my configuration: /etc/ipsec.conf config setup ...
lala's user avatar
  • 13
2 votes
1 answer
2k views

OpenSwan IPsec tunnel to Azure Gateway is established but unable to connect

I am currently trying to set up a IPsec tunnel between my on-premise center and to the VPN in Azure. I am setting up OpenSwan 2.6.23 on an Ubuntu Lucid box, and my box is behind a NAT. ipsec.conf ...
leeeennyy's user avatar
0 votes
1 answer
1k views

Policy based routing in linux based on destination address.

I am struggling with a scenario. Suppose we have two systems in same subnet A:- 192.168.1.5 and B:-192.168.1.6 where B is further connected with C:-172.22.1.5 through Openswan. B can ping C but A cant ...
xs2rashid's user avatar
  • 204
0 votes
1 answer
833 views

Openswan server not routing traffic to LAN instances

I created an openswan instance which connected with AWS VPN and tunnel is up. I can ping from Openswan server to EC2 instance in VPC and EC2 instance can also ping Openswan private interface. But ...
xs2rashid's user avatar
  • 204
1 vote
1 answer
11k views

IPSec tunnel fails in phase 2

We are trying to establish a tunnel between our EC2 Instance and remote Cisco 3000 series device where it is failing for Phase2. Below is the scenario: FTP Server(ec2-ubuntu) <---->VPN Server(ec2-...
Shailesh Sutar's user avatar
1 vote
0 answers
127 views

Ubuntu site-to-site VPN with no LAN on one side

A customer requires us to connect to their system via a site-to-site VPN tunnel. ("Client-based VPN solutions are not accepted.") Once the tunnel is established we'll be consuming data over the ...
Roger's user avatar
  • 111
0 votes
1 answer
403 views

Openswan/IPtables: Faking a unique IP address over VPN tunnel

Context: I'm running a set of instances within the Google Compute environment. Each host has a single interface with single ip in the 10.0.0.0 private range. I have external customers who ...
John's user avatar
  • 1
0 votes
0 answers
1k views

IPsec VPN with subnet overlapping and NAT

I'm trying to configure, through OpenSwan on a Linux Ubuntu 14.04 the following scenario. It's an interesting configuration and it would be great to understand why I'm failing configuring correctly, ...
Echoes_86's user avatar
  • 173
3 votes
1 answer
8k views

Tunnel is up but I can't ping

I need to understand and resolve my issue. I know openswan works because when I connect from home network with an internal ip address of 10.0.0.97 to work's VPN, I'm able to ping but when I use the ...
BioRod's user avatar
  • 313
0 votes
1 answer
2k views

ipsec verify indicates ERRORS "No tunnels up"

I just installed openswan on Ubuntu14. I'm trying to connect to my work's VPN (I have access to the Firewall/VPN btw). When I do a /usr/sbin/ipsec verify I get the following: Checking your system ...
BioRod's user avatar
  • 313
1 vote
1 answer
3k views

OpenSwan - IPSec VPN - tunnel established but can't see a specific server there

I have to connect my server to a VPN tunnel thought Internet to see a local server that is on IP 192.168.20.100 Here are IPSec AND IKE settings from server (not mine , I do not own the VPN server) ...
user3781074's user avatar
2 votes
1 answer
4k views

Routing between OpenSWAN / IPSEC tunnels

I am trying to connect multiple Amazon VPCs (across regions) together using OpenSWAN and Amazon VGW's. The router instance can ping to hosts in both VPCs, and traffic is attempting to cross the router,...
Jason Martin's user avatar
  • 5,113
1 vote
0 answers
189 views

OpenSwan and L2TPd traversing secondary gateway

I need some help with a networking project using Linux (RHEL based) and open swan with L2TPd (xl2tpd). While the initial setup works great, I want my VPN traffic to traverse over the secondary ...
PsychoSquirrel's user avatar
1 vote
0 answers
356 views

Why would ping oscillate between receiving bytes and redirects over a VPN?

I have a VPN set up between an Ubuntu 14 VM under fusion on my side and a SonicWall on the other side. The Ubuntu VM is dedicated to the task. When I ping a remote address, the results are very ...
David Patterson's user avatar
5 votes
1 answer
3k views

Connecting to Meraki Client VPN from Ubuntu w strongswan and xl2tpd

I have a virtual appliance running Ubuntu 14 that I would like to connect to a remote network via Meraki Client VPN. I have found instructions for installing and configuring strongswan and xl2tpd on ...
user3794652's user avatar
3 votes
0 answers
644 views

OpenSwan IPSec log explanation

I am trying to understand the IPSec logs. Would be really great if someone can help me to understand the main things I look for and how to troubleshoot any ipsec issue. Would be really great of ...
rrene's user avatar
  • 131
1 vote
1 answer
3k views

Can't establish site to site vpn connection between Cisco 3900 and strongSwan client

I have website, which displays data, received from gsm modems. So i am trying to connect my website to GSM network provider using vpn. Provider side there is a Cisco 3900, configured as site to site ...
iss_628's user avatar
  • 21
27 votes
1 answer
60k views

IPsec for Linux - strongSwan vs Openswan vs Libreswan vs other(?) [closed]

Searching for IPSec and Linux one inevitably will be confronted with different solutions (see below) which all seem quite similar. The question is: where is the difference? I found these projects. All ...
masgo's user avatar
  • 433
5 votes
2 answers
8k views

Site to Site VPN error 'received hash payload does not match computed value'

We need to access a couple of Linux machines located at our client's end. Our Linux machine, from which we need to access client's machine is located on cloud. The connection to be established is ...
Tapo's user avatar
  • 63
4 votes
3 answers
17k views

Connecting to a FortiGate VPN from a remote Linux machine via OpenSwan

Here's the setup: I have a FortiGate unit on a business network, which has a FortiGate VPN set up. Machines on a remote network that can run FortiClient (Windows and Mac machines) have no problem ...
user2892724's user avatar
0 votes
1 answer
451 views

IPSEC VPN site-to-"alias"

I am trying to connect my CentOS (CentOS release 6.7) server to a 3rd party VPN so traffic can be routed between my Apache instance listening on an aliased private IP (192.168.253.1), through the ...
user5917373's user avatar
6 votes
2 answers
37k views

How to enable debug logs in OpenSwan?

I use OpenSwan IPSec tunnel on CentOS 6.7. I have added the following configuration in /etc/ipsec.secrets according to this link: http://linux.die.net/man/5/ipsec.conf config setup plutodebug=all ...
Michael's user avatar
  • 597
2 votes
3 answers
11k views

ipsec: Can't authenticate: no preshared key found for

I'm using Openswan with ipsec and ipsec keeps complaining about the shared-key not being present. I'm running Ubuntu 14.04 . I'm just experimenting on a couple of internal systems since I'm new to ...
Dustin Oprea's user avatar
1 vote
0 answers
2k views

Docker + VPN LAN to LAN

We just migrated our applications to a Docker environment. I have many containers running my Python Application in my VM. (4 containers per VM). This is a multi-tenant application. This application ...
gogasca's user avatar
  • 343
0 votes
0 answers
120 views

Can't connect Cisco 2621 to AWS EC2 Openswan site to site vpn

I am configuring Site-to-Site vpn between my home Cisco 2621 router and Amazon EC2 instance running openswan. I keep on getting the following message on the openswan server: " NO_PROPOSAL_CHOSEN " My ...
user1896576's user avatar
1 vote
0 answers
420 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
Adam's user avatar
  • 11
1 vote
0 answers
121 views

IPsec and pinging rightsubnets

I have been racking my brain about this. I have openswan running and I have been able to get tunnels up. Unfortunately, when I try to ping computers on my right subnet, I am not able to get any ...
confused's user avatar
0 votes
0 answers
2k views

OpenSwan VPN IPSEC Tunnel Connection

I was hoping this website would be able to help with solving this issue since I've been running in circles on my end! I am using OpenSwan to setup an IPSec tunnel between a VPN server on Rackspace ...
Nare's user avatar
  • 55
0 votes
1 answer
2k views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...
packet's user avatar
  • 3
0 votes
1 answer
1k views

openSwan VPN is up can't ping remote subnet

When I run the command ipsec auto status i get the following output: ...... 172.16.255.1/32===104.131.13.155<104.131.13.155>:17/1701...41.203.65.124<41.203. 65.124>===10.100....
Oladipo Olasemo's user avatar
1 vote
1 answer
903 views

IPSec Tunnel goes down during long periods of inactivity

I have 2 AWS regions I have connected using an OpenSWAN IPSec tunnel. This works great in our production environment but in our test environment where 1 of the regions has long periods of inactivity, ...
Uberzen1's user avatar
  • 189
0 votes
1 answer
1k views

OpenSwan on Amazon EC2 - max number of retransmissions reached STATE_MAIN_I3. Possible authentication failure:

We are communicating with one of our clients over a VPN Tunnel. Openswan tunnel was working perfectly fine before. Today we attached an Elastic IP to the server and rebooted. Since then the tunnel ...
Gaurav Srivastava's user avatar
1 vote
1 answer
6k views

How to start and stop a libreswan connection

I have a connection configured on my libreswan instance on two machines. The connection start automatically when I start the pluto daemon, I have try other settings, but the connection also starts if ...
Colanta's user avatar
  • 11
0 votes
1 answer
715 views

Can't ping public endpoints when IPSec tunnel is up

I'm using openswan to link two machines via IPSec. The tunnel comes online fine and I have connectivity to each endpoint via the VPN. However, when the tunnel is up, I lose connectivity to the ...
user98651's user avatar
2 votes
0 answers
1k views

Openswan IPSec VPN on AWS tunnel established but no traffic

I am setting up a tunnel with a telco using AWS/VPC/EC2/Centos7/Libreswan and have been stuck for weeks. Appreciate any help! I have 192.168.16.73 (VPN GW, EIP 52.76.x.x) and 192.168.16.116 (...
Tai Shih Chau's user avatar
2 votes
1 answer
5k views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways and ...
lambshaanxy's user avatar
3 votes
0 answers
657 views

Is there an extension of host to host ipsec to a many-many configuration?

Having a typical host to host transport mode ipsec configuration, conn appserver01-to-swift01 [email protected] left=10.133.176.246 leftrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxx ...
user22866's user avatar
  • 151
0 votes
1 answer
208 views

Openswan L2TP setup to allow admin user access to AWS VPC

I've got an ssh bastion host, but managing the ssh whitelist is annoying, opening ssh to the world is suboptimal. I'd like to tuck a vpn server in front. Can't get openvpn to stay connected for more ...
jorfus's user avatar
  • 795
0 votes
1 answer
1k views

IPsec VPN between Fortigate 60C and openswan up, but no traffic

I get visual confirmation that the tunnel is working from the fortigate GUI but, it also says i don't have 1 byte of traffic, the linux server also confirms the tunnel is open but i can't ping nowhere,...
Julio Villalba's user avatar