Problem on IPSec Post: 302537632

Sponsored Content

Operating Systems BSD Problem on IPSec Post 302537632 by aulia on Friday 8th of July 2011 08:31:07 PM

07-08-2011

Registered User

Problem on IPSec

Hi, this is my first post... Smilie

Hello Admin Smilie

Can I have an ask for something with my configuration ?

I have finished some kind of the tutorial to build ipsec site to site, and the "step" has finished completely.
I have a simulation with a local design topology with two PC's (FreeBSD 7.0) and the replace for public network (internet media) with a single switch device in the middle, it's look like this :

(PC-A)
Local Network A : 192.168.0.1/24
Network (Gateway) A : 202.10.10.1/24
SWITCH
(PC-B)
Network (Gateway) B : 202.10.10.2/24
Local Network B : 172.168.0.1/24

I got connect all this host by used a static routing, at first the communication between two site is completely connect eg. (Ping to Local Network B to Local Network A).
but when I've finished config the tunnel (GIF interface), started the racoon and ipsec daemon with those all configuration, I can't any longer ping the outside local network (Request Time out).

and sure there's no ESP protokol packet in the output of tcpdump on the traffic, I've tried Racoon-F command too, but the output is stack and look's not running.
Please, any suggest from this problem Smilie

I'm really appreciated with the respons, Thank's in advance Smilie

Aulia.

aulia

View Public Profile for aulia

Find all posts by aulia

9 More Discussions You Might Find Interesting

1. Solaris

Solaris 10 IPSec peformance

Hi, does anyone have an experience how many IPSec tunnels Solaris 10 is able manage. A rough estimation would be great. I know it's hardly dependent on the hardware used, so if anyone says on a 490 with 2 CPUs and 4GB RAM a maximum of 1000 IPSec tunnels is possible, that would be great. I...

2. Cybersecurity

Problem while establishing ISAKMP in ipsec

Hi, I am facing problem while setting up ISAKMP between two hosts. I can see only the Initiator messages but no responder messages in tcpdump. Does anyone know the cause of this behaviour? FYI, here is the extracted information from tcpdump : 14:47:08.699113 IP 10.118.231.143.isakmp >...

3. IP Networking

IPSec VPN Routing

Hello, I'm trying to setup a gateway VPN between two routers across an unsecured network between two local networks. The routers are both linux and I'm using the ipsec tools, racoon and setkey. So far hosts from either local net can successfully ping hosts on the other local net without issue. ...

4. Red Hat

ipsec policy not working

Hi, I am trying to set a policy between 2 machines for all the ports except for 22 i.e. for tcp - basically I want to bypass ssh. But my policy doesn't seem to work. Here are the entries spdadd 1.2.3.4 4.3.2.1 any -P out prio 100 ipsec esp/transport//require ah/transport//require; spdadd...

5. UNIX for Advanced & Expert Users

Ipsec implementation

How can i implement Ipsec between two machines in linux_ ubuntu? any link?? suggestion??

6. Cybersecurity

IPSEC

hello, after configuration ipsec in ip4 I can not ping between client and server whereas I had success ping before configuration! I also generate different key for AH and ESP as i have shown below. what is my problem and what should i do to have ping and test the configuration? code: ...

7. AIX

Allow port range using IPsec?

Hi Guys, Please could you tell me if it is possible to have a single rule/filter to allow a certain port range instead of a separate rule for each port? I'm sure it must be possible but I am unable to find the syntax. Thanks Chris

8. IP Networking

VPN IPSec Openswan

Hi all, I have installed Openswan and configured IPSec and works perfect, but for some unknown reasons it stop working. I see that the tunnels are up and established. The route to the destination are added. Everything by the book seems to be ok. But somehow when i start to ping the other side (...

9. Solaris

What's wrong with my ipsec configuration?

I want a lan encrypted with ipsec. This is my /etc/inet/ike/config p1_xform { auth_method preshared oakley_group 5 auth_alg sha256 encr_alg aes } p2_pfs 2 this is my /etc/inet/secret/ike.preshared # ike.preshared on hostA, 192.168.0.21 #... { localidtype IP localid...

LEARN ABOUT CENTOS

ipsec_look

LOOK(8) 							Executable programs							   LOOK(8)

NAME

       ipsec_look - get a quick summary of Libreswan status

SYNOPSIS

       ipsec look

DESCRIPTION

       Look is used to get a quick overview of what the status of Libreswan is. It is the equivalent to running the commands ipsec eroute, ipsec
       spigrp, ipsec tncfg, ipsec spi and netstat -rn. However a bit of processing is done to combine the outputs.

       Some of the above commands, and there for ipsec look, are only supported with the KLIPS or MAST stack, and will give errors when used on
       BSD, Windows or Linux with NETKEY.

SEE ALSO

       ipsec(8), ipsec_tncfg(8), ipsec_spi(8), ipsec_spigrp(8), ipsec_eroute(5), netstat(8).

HISTORY

       Man page written for the Linux FreeS/WAN project <http://www.freeswan.org/> by Michael Richardson. Original program written by Henry
       Spencer.

AUTHOR

       Paul Wouters
	   placeholder to suppress warning

libreswan							    12/16/2012								   LOOK(8)