Collaborate Disseminate
There are 2 sets of API each hosted in 2 different organisations: my client’s organisation and her partner’s organisation. The servers from the 2 organisations communicate between each other through the APIs hosted in each organisations. M… Continue reading How do I setup ipsec VPN between APIs on different servers?
Let’s suppose I build an IPSec tunnel between myself and my cloud provider. Assume my firewall’s IPSec configuration allows both IKEv1 and IKEv2, but IKEv2 is established with my peer by default.
Assume there is a bad actor in the middle … Continue reading Feasibility of IKE downgrade attack
I have this configuration
|Subnet-1|<–>|GatewayA|<–>|Router|<–>|GatewayB|<–>|Subnet 2|
Following this study from inria,for a Uni project, I’m trying to implement a DOS attack on a Ipsec Gateway that, using the … Continue reading Ipsec fragmentation needed attack
I have two gateways, I start IPSec in both via ipsec start –nofork in gw2 first (but the same problem happens if I start IPSec on gw1 first)
However, about 10 seconds after the ike SA is done, the reverse (from gw2 to gw1) ike happens and… Continue reading Why does ipsec create a new connection?
I open wireshark to inspect the ikev2 handhsake and noticed it is 8 packets instead of 4. Two groups of 4 packets, one originating from the first peer and the other from the second peer. Is it normal ? Shouldn’t it be one 4-packet exchange… Continue reading ikev2 handshake : 4 or 8 packets?
Why does have IKE have two phases, two levels of security associations, two sets of authentication and encryption algorithms, two sets of options around lifetimes and renogiations?
It seems duplicative.
AFAIK OpenVPN doesn’t have two diffe… Continue reading Why does IKE have two phases?
Why does have IKE have two phases, two levels of security associations, two sets of authentication and encryption algorithms, two sets of options around lifetimes and renogiations?
It seems duplicative.
AFAIK OpenVPN doesn’t have two diffe… Continue reading Why does IKE have two phases?
Part of the Snowden revelations was that the NSA had targeted IPSec.
But I’m having trouble separating FUD from legitimate issues.
How credible is this? Are there ways to use IPSec to be confident against it being broken?
I like IPSec beca… Continue reading How credible are the rumors that the NSA has compromised IPSec? [closed]
Does it mean that the source IP is replaced with something else (like if in IP spoofing) so intermediate routers don’t know who is sending the packet?
Continue reading What does it mean that Ikev1 (IPSec) protects peer identities in main mode?
During recent investigation of the router’s log file, I’ve spotted unusual behavior when one of the clients was trying connect using port 1030 and 1032 instead of 4500 for NAT Traversal.
VPN is set up with IKEv2 keys exchange on port 500 a… Continue reading NAT-T invalid port number client VPN connection