Questions tagged [site-to-site]

For questions about or in relation to Site-to-Site connections. For instance, you are setting up a Site-to-Site VPN between your local office and your main site and needs help with the configuration.

Filter by
Sorted by
Tagged with
0
votes
1answer
21 views

Why do hops before VPN server not reflect in traceroute?

I'm using a remote-site VPN (ProtoVPN). When I tracert to the IP address of the VPN server, the hops through my ISP and other intermediate hops before the VPN sever are shown. But when I tracert to ...
1
vote
1answer
33 views

How to centrally manage customer site's and users that have access to customer site's

Background information: We have customers spread over the whole continent. We deliver and install hardware at the customers site and completely set up and configure the network for them. After the ...
2
votes
2answers
311 views

IKEv2 tunnel between ASA and Mikrotik

Trying to move from pfSense to Mikrotik for an office router, and the only stumbling block is maintaining a site-to-site IPSEC tunnel between it and our Cisco ASA. The settings all look correct to me, ...
0
votes
1answer
127 views

Cisco ASA IPSec Site-to-Site VPN Rx Bytes not increasing

I have IPsec Site-to-Site VPN from my ASA to customer. After customer complain about VPN down, I reset the tunnel now I can see Login time duration 12h:34m Byte TX is 543240 and Byte Rx is 0. What ...
2
votes
1answer
57 views

How is traffic correctly routed in Site-to-Site VPNs where all sites are on the same subnet?

http://rockhoppervpn.sourceforge.net/ref_site2site_bridge_6.html The diagram on this page shows all 3 sites using the same subnet, 192.168.0.0/24. Let's say on the hub site where 192.168.0.10 is the ...
1
vote
1answer
29 views

Access List With Site To Site VPN

I have two juniper firewalls, an SSG-320M (screenos) and an SRX 340 (junos). I'm required to connect to a third party with an IPSEC VPN, however I'd like some additional protection from my firewall. ...
2
votes
1answer
256 views

Which interfaces do I need to configure to change MTU of Cisco Site-to-Site VPN

I have a number of Site-to-Site VPN tunnels in my network configurations. They are configured using Cisco ASA devices. To resolve some performance issues I am trying to change the MTU for traffic ...
0
votes
1answer
54 views

Why in OSI model, “secure RPC” and “RPC” located at different layer? [closed]

In one of the book I read, it told me that remote procedure call(RPC) is located at Session layer but Secure RPC is located on Application layer That seems odd to me, since both of them should do ...
0
votes
1answer
178 views

How can I accomplish VPN across Dual Wan connections?

How can I accomplish VPN across Dual Wan connections in a optimal way? Idea is to make: Site to site VPN. Make single connection inside the VPN to use full bandwidth of both wan connections using (...
1
vote
1answer
593 views

Traceroute through IPSec tunnel

askk Hi. When I do traceroute from host 192.168.11.0/24 to the server 10.0.0.0/24, which is site B. When the packets get into the public area it show Request timed out (as shown in this figure). I'm ...
-1
votes
1answer
121 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
0
votes
1answer
31 views

Whats the security difference between Policy Based IPSec VPN tunnel vs HTTPS + Basic auth

We have several customers with the same service installed within their DMZ. This service is a HTTPS server. The server does not have authentication, this is solved by configuring the NetScaler ...
4
votes
0answers
213 views

Need to configure site to site SSL VPN between two Cisco routers

I would like to configure site-to-site SSL VPN between two sites. I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
3
votes
1answer
279 views

Traffic not send in IPsec with a Cisco ASA

I try to set up a site to site IPsec between an Ericsson router and a Cisco ASA, as shown below: My tunnel is UP and R1 seems to be working fine. However, my ASA does not forward traffic between ...
1
vote
1answer
1k views

Keep Cisco site-to-site tunnel up permanently

I have Cisco ASA site-to-site tunnel with remote and which i don't have control. I have following config: crypto ikev1 policy 10 authentication pre-share encryption aes hash sha group 2 ...
1
vote
2answers
589 views

Difference between WAN and VPN(tunnels)

I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
5
votes
1answer
1k views

ASA5515 - QM FSM error / failed to establish L2L SA when transferring large files

I was hoping someone could help me with a problem I’m having - a little clarification or advice would be much appreciated: The Issue: I have set a new backup server and I want to back up data from ...
2
votes
1answer
344 views

Cisco ASA Dial in VPN access Devices on Site-to-Site VPN

Questions 1) What do I need to run to get this to allow the on-site to talk to the dial-in network clients E.G ping from 10.101.1.7 to 10.101.2.1? 2) What do I need to run to get the dial-in network ...
1
vote
1answer
564 views

Cisco ASA site to site with Forcepoint stonesoft NGFW

I am try to establish a site to site VPN between Cisco ASA and Forcepoint Stonesoft NGFW, i have support that assured everything is set up correct from Forcepoint NGFW side but i have trouble from ...
3
votes
1answer
2k views

Cisco ASA5516 9.8(2) IKEv2 negotiation aborted due unsupported failover version

I have a site to site connection from the ASA to an Azure subscription. The site to site session starts up fine, but after a few minutes (from 3 to 25) the connection fails. If on ASDM I open ...
3
votes
1answer
656 views

ASA5516 9.8(2) IKEv2 (no BGP) site to site connection with Azure fails

I have a Azure subscription, with a virtual network where the gateway subnet is 172.26.0.0/27, and then I have a number of subnets, e.g. 172.26.1.0/24, 172.26.2.0/24, 172.26.3.0/24, .... On the ...
1
vote
1answer
262 views

With large file transfer packets are dropped with the error “IDP detection OOO Exceeded Max” on encryption/decryption engine subsystem

We have an in-house application for sending large files. Using TCP/IP this application uploads the files to a server on our main office network and then sends a link to the file as part of an email. ...
2
votes
1answer
1k views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....