All Questions
8
questions
0
votes
0
answers
145
views
Cannot establish IPv6 connection with strongswan using IKEv2 and MSCHAPv2 Host-To-Host (Legacy configuration)
I am unable to get a connection with IPv6 host-to-host.
Below is the log output (anonymized)
Sep 27 14:25:18 vpn.xxxx.tld ipsec[13769]: 00[DMN] Starting IKE charon daemon (strongSwan 5.9.8, Linux 6.1....
0
votes
1
answer
392
views
How can RDP get secured using IPSec and IPv4, rather than IPv6 on Windows 10
I found this approach to secure RDP-connections on a post at the University of Rostock.
On the Server (W10):
netsh ipsec static set store location=local
netsh ipsec static add policy name="...
0
votes
0
answers
608
views
IPv6 Strongswan IPSec + NAT
I have a VPS with an IPv4 (/32) and an IPv6 (/128).
I've set up Strongswan and my IPv4 IPSec server works just fine - I'm using it all the time.
I'm trying to get it to work with IPv6 and so far it'...
0
votes
0
answers
343
views
Slow SCP tranfers over IPv6 VPN IPSec which has IPv4 private subnets
I have 2 hosts connected with IPv6 VPN. I am using IPv4 internal addresses for machines connected internally and use subnets addressed for these in ipv4. When a host wants to scp a 1 Gig file pull ...
6
votes
0
answers
882
views
Forward IPsec tunnel from IPv4 endpoint to IPv6 endpoint
I have a new ISP and only have a Dual Stack - lite connection now. That means I can't access my router via IPv4 anymore, since the external IPv4 address is private. I have native IPv6 connectivity.
...
3
votes
1
answer
2k
views
Relation of IPSec and IPv6 to SSL/TLS
My understanding is that IPSec is a security layer added inside the IP protocol to make IP itself a secure transport.
My understanding of IPv6 is that it is the newest version of IP that will (for ...
4
votes
1
answer
8k
views
How to use IPsec?
IPsec is a protocol suite built on top of IP. Originally designed with IPv6, it also exists in IPv4.
IPsec enables encrypted communications between hosts at the IP level (that is, upper layers ...
2
votes
3
answers
1k
views
IPv6 and IPSec - why do I need an external daemon?
I read that IPSec is mandatory for IPv6 implementations. Does this mean that it should be handled by the OS and that IPSec configuration should be mandatory for IPv6 to work? If so, why is this not ...