Questions tagged [site-to-site]
For questions about or in relation to Site-to-Site connections. For instance, you are setting up a Site-to-Site VPN between your local office and your main site and needs help with the configuration.
31
questions
0
votes
1
answer
41
views
How to configure IDr on Cisco ASA for AWS IPsec tunnels
I am currently facing an issue while attempting to establish IPsec tunnels between AWS and a Cisco ASA firewall. The AWS tunnel logs indicate that the Identity Resolution checks are failing, ...
2
votes
1
answer
350
views
Site-to-Site VPN with BOTH sites behind NAT (mobile data routers)
I have 2 sites (call them "A" and "B") which connect to the Internet using 4G mobile data routers - don't knock them, I'm getting 200Mbps downlink and 30Mbps uplink, faster than a ...
- 121
2
votes
2
answers
613
views
Site-to-Site VPN with Sophos XG using tunnel interface
So I have configured a Sophos XG site-to-site vpn according to this document:
https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/...
1
vote
1
answer
69
views
Site to site vpn setup
I am trying to set up a small network for my startup. We have 2 small servers at separate locations and would like to set up a vpn thorugh which the 2 servers can talk to each other and through which ...
- 113
0
votes
1
answer
289
views
what is significance of proxy id while configuring site to site vpn tunnel . why we should use proxy id and in which scenarios
i came know about proxy id configuration for first time. when iam troubleshooting site to site vpn tunnel configuration along with vendor . post configuring proxy id issue got resolved . But iam still ...
user74912
0
votes
3
answers
2k
views
Is site-to-site with Ubiquiti UDM Pro + USG + ERPro-8 behind ISP routers possible?
Evaluating the capabilities of the UniFi Dream Machine Pro all-in-one enterprise security gateway & network appliance (UDM Pro), I was wondering whether this site-to-site setup is possible:
Setup ...
- 101
1
vote
1
answer
115
views
Site to site ASA Routing question
I am doing a lab about DMVPN and Site to Site ASA integration. There is no problem in the DMVPN.
However I have problem in establishing route from Site to Site ASA to DMVPN.
The router on the left is ...
- 37
1
vote
0
answers
74
views
Windows L2TP VPN issues when accessing Site to Site VPN on Cisco 5506
We have two Site to Site VPNs and Remote Access VPN configured. Using the builtin IPsec client on OSX all subnets are accessible however when using L2TP built in client on Windows 10 ICMP traffic ...
- 11
0
votes
1
answer
2k
views
Why do hops before VPN server not reflect in traceroute?
I'm using a remote-site VPN (ProtoVPN).
When I tracert to the IP address of the VPN server, the hops through my ISP and other intermediate hops before the VPN sever are shown.
But when I tracert to ...
- 471
1
vote
1
answer
91
views
How to centrally manage customer site's and users that have access to customer site's
Background information:
We have customers spread over the whole continent. We deliver and install hardware at the customers site and completely set up and configure the network for them.
After the ...
- 219
2
votes
2
answers
4k
views
IKEv2 tunnel between ASA and Mikrotik
Trying to move from pfSense to Mikrotik for an office router, and the only stumbling block is maintaining a site-to-site IPSEC tunnel between it and our Cisco ASA. The settings all look correct to me, ...
- 259
0
votes
1
answer
1k
views
Cisco ASA IPSec Site-to-Site VPN Rx Bytes not increasing
I have IPsec Site-to-Site VPN from my ASA to customer. After customer complain about VPN down, I reset the tunnel now I can see Login time duration 12h:34m Byte TX is 543240 and Byte Rx is 0. What ...
- 3
2
votes
1
answer
111
views
How is traffic correctly routed in Site-to-Site VPNs where all sites are on the same subnet?
http://rockhoppervpn.sourceforge.net/ref_site2site_bridge_6.html
The diagram on this page shows all 3 sites using the same subnet, 192.168.0.0/24. Let's say on the hub site where 192.168.0.10 is the ...
- 305
1
vote
1
answer
37
views
Access List With Site To Site VPN
I have two juniper firewalls, an SSG-320M (screenos) and an SRX 340 (junos). I'm required to connect to a third party with an IPSEC VPN, however I'd like some additional protection from my firewall.
...
- 51
2
votes
1
answer
1k
views
Which interfaces do I need to configure to change MTU of Cisco Site-to-Site VPN
I have a number of Site-to-Site VPN tunnels in my network configurations. They are configured using Cisco ASA devices.
To resolve some performance issues I am trying to change the MTU for traffic ...
- 23
0
votes
1
answer
371
views
Why in OSI model, "secure RPC" and "RPC" located at different layer? [closed]
In one of the book I read, it told me that remote procedure call(RPC) is located at Session layer but Secure RPC is located on Application layer
That seems odd to me, since both of them should do ...
- 115
0
votes
1
answer
832
views
How can I accomplish VPN across Dual Wan connections?
How can I accomplish VPN across Dual Wan connections in a optimal way?
Idea is to make:
Site to site VPN.
Make single connection inside the VPN to use full bandwidth of both wan connections using (...
- 1
1
vote
1
answer
3k
views
Traceroute through IPSec tunnel
askk
Hi. When I do traceroute from host 192.168.11.0/24 to the server 10.0.0.0/24, which is site B. When the packets get into the public area it show Request timed out (as shown in this figure). I'm ...
- 11
0
votes
1
answer
375
views
Site-to-site IPsec and rerouting to another IPsec tunnel
We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
- 11
0
votes
1
answer
105
views
Whats the security difference between Policy Based IPSec VPN tunnel vs HTTPS + Basic auth
We have several customers with the same service installed within their DMZ. This service is a HTTPS server. The server does not have authentication, this is solved by configuring the NetScaler ...
- 3
5
votes
1
answer
523
views
Need to configure site to site SSL VPN between two Cisco routers
I would like to configure site-to-site SSL VPN between two sites.
I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
- 51
3
votes
1
answer
1k
views
Traffic not send in IPsec with a Cisco ASA
I try to set up a site to site IPsec between an Ericsson router and a Cisco ASA, as shown below:
My tunnel is UP and R1 seems to be working fine. However, my ASA does not forward traffic between ...
- 871
1
vote
2
answers
4k
views
Keep Cisco site-to-site tunnel up permanently
I have Cisco ASA site-to-site tunnel with remote and which i don't have control.
I have following config:
crypto ikev1 policy 10
authentication pre-share
encryption aes
hash sha
group 2
...
- 4,361
1
vote
2
answers
4k
views
Difference between WAN and VPN(tunnels)
I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
5
votes
1
answer
2k
views
ASA5515 - QM FSM error / failed to establish L2L SA when transferring large files
I was hoping someone could help me with a problem I’m having - a little clarification or advice would be much appreciated:
The Issue: I have set a new backup server and I want to back up data from ...
- 167
2
votes
1
answer
678
views
Cisco ASA Dial in VPN access Devices on Site-to-Site VPN
Questions
1) What do I need to run to get this to allow the on-site to talk to the dial-in network clients E.G ping from 10.101.1.7 to 10.101.2.1?
2) What do I need to run to get the dial-in network ...
- 123
1
vote
1
answer
972
views
Cisco ASA site to site with Forcepoint stonesoft NGFW
I am try to establish a site to site VPN between Cisco ASA and Forcepoint Stonesoft NGFW, i have support that assured everything is set up correct from Forcepoint NGFW side but i have trouble from ...
- 23
3
votes
1
answer
6k
views
Cisco ASA5516 9.8(2) IKEv2 negotiation aborted due unsupported failover version
I have a site to site connection from the ASA to an Azure subscription.
The site to site session starts up fine, but after a few minutes (from 3 to 25) the connection fails. If on ASDM I open ...
- 181
3
votes
1
answer
2k
views
ASA5516 9.8(2) IKEv2 (no BGP) site to site connection with Azure fails
I have a Azure subscription, with a virtual network where the gateway subnet is 172.26.0.0/27, and then I have a number of subnets, e.g. 172.26.1.0/24, 172.26.2.0/24, 172.26.3.0/24, ....
On the ...
- 181
1
vote
1
answer
632
views
With large file transfer packets are dropped with the error "IDP detection OOO Exceeded Max" on encryption/decryption engine subsystem
We have an in-house application for sending large files. Using TCP/IP this application uploads the files to a server on our main office network and then sends a link to the file as part of an email. ...
- 113
2
votes
1
answer
2k
views
Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX
Looking for possible solution.
I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
- 2,774