People who code: we want your input. Take the Survey

Questions tagged [ipsec]

Questions relating to IPSEC VPN configuration, operation and troubleshooting specifically.

Filter by
Sorted by
Tagged with
4
votes
1answer
657 views

Have Cisco ASA 5505 and want it to maintain site-to-site VPN connections

Background: A client has been hitting the host limit for his license on a Cisco ASA 5505. The license has a max of 50 clients that can access the internet, the 51st connection gets dropped. He has ...
2
votes
1answer
4k views

ASA logging IPSec

Can someone gave some hints on how to enable logging on IPSec tunnel on ASA ? I have typical scenario S2S IPSec and i like to monitor when it goes down and other information. But can't find a way to ...
2
votes
1answer
175 views

How many IPSEC P2 SA's can exist before tunnel performance is impacted, and why?

How many IPSEC Phase 2 SA's can exist for a given VPN tunnel before performance becomes an issue, and at this point what causes the performance issue? This is posed because I've always asked about ...
1
vote
1answer
76 views

Under what conditions are IPSEC P2 SA's built, broken down, and/or re-created?

Under what conditions are IPSEC P2 SA's built, broken down, and/or re-created? I'm trying to root out the science under the phase 2 SA creation and mechanics so I can answer for myself what is the ...
5
votes
1answer
1k views

Juniper SRX to SRX site-to-site VPN over existing WAN in trust zone

I have a client with 5 sites, each using their own private LAN subnet. They are currently using a service provider to link their branches and for Internet breakout centrally. I need to break them out ...
1
vote
3answers
286 views

Putting a middle host between two firewall devices

Here is the network topology that I have: Private network 1 --> IPFire Firewall 1 <---> IPFire Firewall 2 <-- Private network 2 I can ping from private network 1 to private network 2, that is ...
5
votes
2answers
15k views

Openswan Site-to-site VPN — cannot respond to IPsec SA request because no connection is known

I am setting up a ISPEC tunnel between a Linux System running Openswan and a Cisco ASA 5505. The strange thing is, the tunnel comes up I believe (based on the screenshots below), but I can't get ...
4
votes
1answer
8k views

Can we change peer IP of IPSec VPN tunnel in one line?

If I have a crypto map with a line as follows: crypto map Outside_map 10 set peer 1.2.3.4 5.6.7.8 Can I change that simply by typing the following in conf t: # crypto map Outside_map 10 set peer 0....
8
votes
2answers
7k views

NAT with VPN Site to Site and Remote LANs with same IP address

I have a ASA5510 to connect clients to my company. I use a site-to-site IPSec VPN with a variety of vendors on the other side (Cisco, Sonicwall, Zyxel, Checkpoint, etc...). For every remote LAN, I ...
3
votes
1answer
2k views

Ports in IPSec tunnel

I'm trying to draw the packets in a network that uses an IPSec tunnel for security. More specifically: a laptop user using a public access point wants to query Google through an IPSec tunnel to a home ...
3
votes
2answers
2k views

A way to monitor IPsec tunnels? [closed]

Can anyone recommend a good way of setting up monitoring of IPsec tunnels via SNMP for example? VTI-tunnels are very easy to monitor since there are no difference from any other virtual interface, but ...
6
votes
1answer
22k views

Cisco IPSEC VPN fail Stage 2

The HUB is managed at a data center with external IP 200.200.200.200. There are 10 remote offices. Office 9 HUB 10.1.9.0 - 100.100.100.100 ->> VPN <<-...
9
votes
2answers
1k views

Cisco IPSec Site-to-site VPN. Permit traffic if VPN is down

Bit of 'belt and braces' configuration planning. Background: We have a successful site-to-site VPN link to our remote datacenter. The remote 'protected' network is also the IP network range that is ...
2
votes
0answers
32 views

IPSEC over VRF lite? [duplicate]

I wanted to bounce an idea off of the community regarding the security of VRFs. I am looking to deploy 3 routers with switches modules built into them at three different physical locations. These ...
7
votes
1answer
11k views

Using a Cisco router as an L2TP client?

I have a customer that for various reasons has a Cisco router sitting behind a NATed ADSL connection. They want to create a VPN to one of our points of presence and the only options we offer are site ...
7
votes
1answer
13k views

Ipsec vpn, phase 2 unable to come up

I'm pretty sure I know the answer to this but I don't know how to implement it. Trying to setup an ipsec vpn from a Cisco 2811 to a linux box running openswan. So far I can get phase 1 up but ...
3
votes
1answer
299 views

IPSec/GRE over Metro-E traffic question

I am trying to run IPSec GRE over a MetroE circuit: ROUTER---------metroe----------ROUTER The routers are set up to route all traffic over the ipsec tunnel; however, when I check the routers I see ...
8
votes
1answer
6k views

How to failover static ipsec vpn tunnels?

I have a network with resilient gateways whereby Customer sites use a default gateway to reach the internet edge routers and the primary route for traffic uses a lower metric. ipsec tunnels are ...
0
votes
2answers
818 views

VPNs and NetBIOS

NetBIOS can't be passed through VPNs at all correct? And you have to run a DNS or WINS server for name lookups and network discovery to work correct? Or does it depend on the VPN type. I've been ...
3
votes
2answers
427 views

IPsec VPN Tunnel Through an Uncontrolled Network

I'm trying to figure out how to setup multiple IPsec VPN tunnels, and before I spend any money on hardware, I want to make sure I'm understanding this correctly. My plan is to setup a Vyatta Core ...
7
votes
1answer
14k views

Timeouts for ASA VPN peers

I have configured a remote site with two IP addresses for data centre VPN peers - one primary (1.1.1.1), one backup (2.2.2.2). When the primary peer fails, the remote site detects the failure using ...
9
votes
2answers
2k views

VPN's in cloud hosting/dedicated server environments, IPSec tunnels vs tinc

I am in the process of designing a virtual private network setup for a cloud hosting environment. Given our requirements I don't really see this as different from a dedicated server environment. The ...

1 2 3 4 5
6