<p>For me it looks to be tunnel misconfigured -  "there is a message about protocol mismatch"</p>

<p>Regarding the limitations quick google took me here: <a href="https://lists.strongswan.org/pipermail/users/2010-December/001179.html" rel="nofollow noreferrer">[strongSwan] strongswan limits</a></p>

CC BY-SA 4.0
2020-02-07T13:04:05.570Z
2020-02-07T13:04:05.570Z
patrykk
<p>Consider the following situation (for test purposes):</p>

<ul>
<li>there is a public IPSec VPN endpoint (StrongSwan);</li>
<li>a machine with either Ubuntu (Strong Swan client) or Windows OS (native client) running in the cloud should be the VPN guest.</li>
</ul>

<p>Result:</p>

<ul>
<li>Windows Server 2019 machine establishes VPN connection successfully but can't send any packet</li>
<li>Ubuntu 18 machine establishes connection to some degree but does not create PPP0 interface.</li>
<li>Ubuntu 16 machine makes a handshake but then there is a message about protocol mismatch (maybe in this specific case there is an incompatibility between both endpoints).</li>
</ul>

<p>Are there any AWS limitations to IPSec VPN?</p>

<amazon-web-services><devsecops><vpn>
Is there a limitation in AWS to open an IPSec VPN connection?
Ta Mu
# Is there a limitation in AWS to open an IPSec VPN connection?

(Asked by: username_0 on 2020-02-06)

Consider the following situation (for test purposes):

* there is a public IPSec VPN endpoint (StrongSwan);
* a machine with either Ubuntu (Strong Swan client) or Windows OS (native client) running in the cloud should be the VPN guest.

Result:

* Windows Server 2019 machine establishes VPN connection successfully but can't send any packet
* Ubuntu 18 machine establishes connection to some degree but does not create PPP0 interface.
* Ubuntu 16 machine makes a handshake but then there is a message about protocol mismatch (maybe in this specific case there is an incompatibility between both endpoints).

Are there any AWS limitations to IPSec VPN?

**Tags:** amazon-web-services, devsecops, vpn


---

## 1 answers

### Answer by username_1 on 2020-02-07. Score: 1

For me it looks to be tunnel misconfigured - "there is a message about protocol mismatch"

Regarding the limitations quick google took me here: [[strongSwan] strongswan limits](https://lists.strongswan.org/pipermail/users/2010-December/001179.html)


---

