Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [openswan]

Openswan is an IPsec implementation for Linux. It has support for most of the extensions (RFC + IETF drafts) related to IPsec, including IKEv2, X.509 Digital Certificates, NAT Traversal, and many others.

Openswan is an IPsec implementation for Linux. It has support for most of the extensions (RFC + IETF drafts) related to IPsec, including IKEv2, X.509 Digital Certificates, NAT Traversal, and many others.

https://www.openswan.org/

12 questions
5
votes
2 answers

IPSec over L2TP: received NO_PROPOSAL_CHOSEN error notify

Environment: # uname -a Linux shrimpwagon 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u1 (2017-02-22) x86_64 GNU/Linux I have already installed: # apt-get install strongswan xl2tpd I'm trying to connect to a Meraki VPN. I spoke to a Meraki tech and…
shrimpwagon
  • 427
  • 3
  • 6
  • 11
4
votes
1 answer

ipsec rightsubnet to wide, cannot override routing table | IPSec route some packets 'locally', not via tunnel; ip xfrm change?

I'd like to override part of the (IPSec) routing table (routing to 10.108.0.0/16 locally via eth0, not via IPSec tunnel) my IPSEC config conn vpc type=tunnel authby=secret left=172.16.0.200 leftid=x.x.x.x …
sirkubax
  • 141
  • 2
  • 6
2
votes
1 answer

What does "virtual_private" Openswan configuration option do under the hood?

As I understand, virtual_private configuration option declares which subnets should be allowed through the tunnel and which should be excluded. For example if I have following…
Martin
  • 7,284
  • 40
  • 125
  • 208
2
votes
0 answers

Configuring IPSec with PSK

I'm struggling with IPSec while trying to configure to a Windows server. I need to use IPSec only in the 172.30.1.0/24 network. Linux Settings Running in AWS EB 4.4.15-25.57.amzn1.x86_64 GNU/Linux, I did sudo yum install openswan and put the 2…
Diego Jancic
  • 121
  • 3
2
votes
0 answers

CentOS IPsec: We cannot identify ourselves with either end of this connection

I have problem with IPsec on centOS. While adding a connection using ipsec auto --add cx It gives multiple ip addresses, using 127.0.0.1 on venet0 On using ipsec auto --up cx I get We cannot identify ourselves with either end of this…
Akshit
  • 21
  • 1
  • 4
2
votes
1 answer

VPN server into systemd-nspawn machine

I am trying to deploy a VPN server (I choose Openswan flavor) into a systemd-nspawn container on a raspberry pi running Arch Linux. For now I can login into the container, ping, goes outside from within the container (I managed to bring Internet in…
Lion.24
  • 21
  • 3
2
votes
0 answers

How to set the remote host to a domain name with dynamic IP in *swan client?

I am now setting a vpn client for my university's own L2TP/IPSec VPN network, using both openswan, libreswan and strongswan (for different distros). Here is the problem: The remote site (VPN server) is a domain name (say xxx.com) with multiple IP…
nnkken
  • 21
  • 1
1
vote
1 answer

Ubuntu & OpenSwan Issue

I am trying to bring up VPN using Openswan (version 5.6.2) on an Ubuntu machine. But when I initiate the following command, it says "missing configuration name": sudo swanctl --initiate vpn-name initiate failed: missing configuration name This is…
sach2000
  • 11
  • 1
1
vote
0 answers

how to forward traffic to ipsec vpn tunnel created using openswan?

I want to forward traffic to ipsec vpn tunnel created by openswan. I searched the internet but i couldn't find the solution. check below :- 1- VPN tunnel is created and it's name is demo-connection-vpn. 2- I need to forward all traffic that…
Abdallah Al Barmawi
  • 11
  • 1
1
vote
0 answers

No Traffic via established IKEv2 StrongSWAN Tunnel

I've got a problem I wasn't able to solve in the last days. I've installed StrongSWAN on a Raspberry Pi with Rasbian (Debian GNU/Linux 7.11 (wheezy) / Linux 4.1.19-v7+ armv7l). There is also openVPN running on this Pi. The Subnets are seperated by…
Skjall
  • 11
  • 3
1
vote
1 answer

IPsec tunnel blocks after a while without error. Where to find details?

There is an IPsec Tunnel created with OpenSwan that works perfectly well packets going through answers received etc until at some point in time traffic stops. I can regenerate the tunnel doing ipsec auto --down tunnelName ipsec auto --up…
Björn
  • 158
  • 2
  • 12
1
vote
0 answers

Connect to IPsec VPN using OpenSwan

I'm connected to Internet with a simple ADSL router with NAT. I have a smartphone and a laptop running linux. I need to connect to a IPsec server using OpenSwan. First I tested that it is possible to connect to. I entered connection info into the…
Anthony Ananich
  • 7,234
  • 5
  • 31
  • 45