Questions tagged [tunnel]

For questions about network tunnels.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

SSH tunneling error [on hold]

I'm trying basic thing to do but I get error "Connection refused.". I don't where to go now. Where did I do a mistake? Depicted example: I have main Server master(My current PC) and want to do ...
0
votes
0answers
17 views

Tunneling and latency reduction [on hold]

The average latency between the place where i live to any united states based server is about 180ms and the average latency to a server in Paris is 80ms. Now the latency between the US Server and Fr ...
0
votes
1answer
10 views

IP-Sec VPN Tunnel Established Between 2 Remote Machines. Why Can't Machines In Their Subnets Connect Across? [on hold]

Have 2 Remote Ubuntu Machines in different subnets. one: 192.168.1.0/24 Two: 192.168.2.0/24 Established VPN tunnel between 2 machines, 1 in each subnet. Their IPs: Public IPs 1.1.1.1 2.2.2.2 ...
0
votes
1answer
21 views

Cisco qos, service-policy on output interface on 1100 ISR seems ignored

I am trying to configure QoS for a specialty purpose application, and it is the first time I have done QoS. This is on an 1100 ISR with IOS XE 16.09.03. The device is a set of 4 that establish a mesh ...
0
votes
1answer
31 views

VPN to a current subnet ID

I am sure this is a fairly basic question, but the standard google searches have not told me what I am looking for. I have a restaurant that uses an ipad point of sale on a dedicated subnet id: 192....
1
vote
1answer
55 views

Tacacs+ over VPN is not working

R3 is a Tacacs+ client and Server0 is configured as AAA server with Tacacs+ but R3 is not able to authenticate. R3 Configuration: ! version 15.4 no service timestamps log datetime msec no service ...
0
votes
1answer
38 views

What is the difference between VPN and Domain fronting?

What is Domain fronting? and how it is different from a VPN?
0
votes
1answer
110 views

How can I accomplish VPN across Dual Wan connections?

How can I accomplish VPN across Dual Wan connections in a optimal way? Idea is to make: Site to site VPN. Make single connection inside the VPN to use full bandwidth of both wan connections using (...
0
votes
1answer
75 views

How do you define interesting traffic using an IPSec Profile on a Cisco router?

I apologize if this is a duplicate, but I'm having difficulty figuring out how to define interesting traffic on a Cisco router using an IPSec Profile referenced by a tunnel interface. The old-school ...
1
vote
1answer
37 views

Assign a new public and static IP to a router behind my main router [closed]

What can you suggest to bring a second public and static IPv4 so I can configure my WAN-A interfase with my primary and an additional secondary IP settings so I can route all the traffic from the ...
1
vote
1answer
123 views

Dropping packets between router and firewall without firewall rule

I have a user that is trying to access his company network resources on his home network. He is able to access SMB shares and other resources, but he is unable to access their AS400 on any computer in ...
-1
votes
2answers
272 views

VPNs are working in which layer of the OSI model? [closed]

How many types of VPN is out there and in which layer of the OSI model are they working?
0
votes
1answer
34 views

Remote access to the network without port forwarding (blocked by ISP) - VPN [closed]

I need to setup a following configuration: A router Mikrotik is connected to the internal Network1. The router has a USB 3G modem that is connected to it and enables internet access from the ...
0
votes
1answer
44 views

qos inside vpn, possible or not ? I read yes and no

I am wondering if possible to do QOS (or similar action) inside vpn tunnel to a cloud server. the goal is to reserved bandwith for voip traffic. I read that you can with GRE and other people said, ...
5
votes
3answers
134 views

Why do all the intermediary routers need to run iBGP without tunneling?

I'm trying to understand the configuration behind iBGP - I understand you can run full mesh to prevent loops, run confederation or route reflectors, if you don't want full mesh, else run tunneling ...
3
votes
1answer
88 views

Traffic not send in IPsec with a Cisco ASA

I try to set up a site to site IPsec between an Ericsson router and a Cisco ASA, as shown below: My tunnel is UP and R1 seems to be working fine. However, my ASA does not forward traffic between ...
2
votes
2answers
186 views

What are the differences between tunneling and regular encapsulation?

What are the difference between tunneling (https://en.wikipedia.org/wiki/Tunneling_protocol) and regular encapsulation (e.g. TCP/UDP over IP, HTTP/SSH over TCP)? Is TCP/UDP over IP considered ...
2
votes
0answers
36 views

Question about creating Subnets for a large amount of sites that will make a site-site tunnel to our datacenter [closed]

Our data center network is: 10.20.44.X/24 I want to have our sites use 10.X.X.X/24 (Site Number, VLAN, host) EG: Site 30 10.30.10.X/24 10.30.20.X/24 10.X would be corporate network 20.X would be ...
1
vote
1answer
100 views

Difference between WAN and VPN(tunnels)

I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
2
votes
1answer
47 views

VyOS: Failure to commit after L2TPv3 configuration

I am trying to get familiar with VyOS (using a VM) and while working on L2TPv3 I encountered something strange: after configuring the L2TPv3 interface and try to commit, an error occurs as if the ...
0
votes
2answers
75 views

Security implications of IPv6 tunneling over IPv4

I've read that IPv6 over IPv4 tunnels are a security risk because IPv6 traffic cannot be intercepted by Intrusion Detection Systems and Firewalls. This apparently deterred some networks to deploy IPv6....
0
votes
0answers
41 views

IPSec Tunnel is up but no Communication with End Systems?

I need help for IPSec tunnel. Currently, I am working on a small task to create remote access between my laptop and office router, in order to access the office LAN network. IPSec tunnel is working ...
1
vote
1answer
68 views

IPSec tunnel between 2 LANs using HSRP in each side

This is my first post here, so tell me if there's something I'm doing wrong. I'm currently working with another IT student on our end of degree project and we're building our network in PT. Our ...
4
votes
1answer
266 views

How IPsec tunnel mode work without GRE

IPsec tunnel mode encrypt a whole IP packet and sends it as the payload of another IP packet. I have always used GRE as the encapsulation layer when doing IPsec encryption. However, how could I have ...
1
vote
0answers
106 views

Why do the tunnel protocol on these two router show different values

Two routers R1 and R2 have a tunnel built between them in the 103.103.103.0/24 network. The end point of the tunnel are 75.75.75.2(on R1) and 76.76.76.2(on R2). Can anyone explain why does the Tunnel ...
0
votes
1answer
19 views

Does “tunnel” here mean the same as tunnelling as in SSH?

From book Data and Computer Communication Tunnel Unlike the proxy and the gateway, the tunnel performs no operations on HTTP requests and responses. Instead, a tunnel is simply a relay point ...
2
votes
2answers
77 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
1answer
88 views

Wireguard protocol understanding where the packet got sent

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
3
votes
1answer
222 views

Scaling VXLAN tunnels in openvswitch

As we're creating a cluster of tens of KVM host nodes we've chosen openvswitch as our virtual network infrastructure. So we need to make isolated virtual networks between VMs on demand. I've seen ...
1
vote
0answers
152 views

OSPF over IPIP tunnel doesn't work for CSR 1000v in AWS

I literally have the following topology shown in the figure below. I have 4 VPCs, each VPC has 3 subnets (1 for the VM instance and the other 2 for interfaces). Each VPC hosts a Cisco CSR 1000v in ...
1
vote
1answer
30 views

Is it possible to implement virtual network based on MAC in IP instead of MAC in UDP?

We know that flannel use MAC in UDP to create a overlay network. My question is: UDP header only provides an extra port number fields, let's suppose that one physical machine only run one flanneld ...
0
votes
1answer
254 views

How to create interfaces for CSR 1000v for GRE tunnels?

Well, my idea is to connect to 4 CSR 1000v routers in different VPC (without VPC peering). I've basically finished with everything with the pre-configuration creating VPCs, subnets IGW, modifying ...
1
vote
1answer
34 views

Network Security Tunnel

In the Tunnel Interface, when I edit the tunnel information, it shows: Attributes Values Tunnel Source IF10 Tunnel Destination 1.0.0.1 Tunnel Mode GRE What does IF10 ...
3
votes
0answers
75 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
1
vote
0answers
52 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
1
vote
0answers
20 views

VPN Configuration [closed]

Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
0
votes
1answer
105 views

Can't connect between an IPV6 network and an added IPV4 router

I have a very simple topology, where 4 routers use IPV6 and RIP, there aren't problems and all devices have connectivity. The issue is if I add another router this time using IPV4 for clients. I ...
1
vote
1answer
498 views

Load-balancing one VPN-connection over multiple WANs

My internet connection will be provided by 4 different WANs (each 250 Mbit down, 100 Mbit up), which should be load-balanced to one 1 Gbit connection (full duplex, most likely ethernet (should be ...
0
votes
1answer
450 views

Configuring IPsec VPN and TTL

I have two sites, each using their own firewall. Once a Cisco Meraki, another a Cisco ASA. The two sites use IPsec to establish a VPN tunnel. The Question: If each of the two sites have different ...
0
votes
1answer
76 views

Is it possible to append custom data to every packet of a request? [closed]

For an end-to-site VPN, i.e. where a device (VPN client) is responsible for encapsulating the GRE packet, is it possible to send some custom data along with the GRE packet beyond just the standard ...
1
vote
1answer
68 views

ISATAP configuration not working when adding hosts

I am trying to make an ISATAP configuration where two ipv6 hosts connected to dual stacked routers can communicate to each other. I have the following configuration: I have configured RIP across ...
1
vote
1answer
300 views

How to use ACL to deny sending packages to the GRE tunnel?

I need to do a small lab. The topology is shown on the image below: What I need to do, is make static routing so all routers can ping each neighbour's physical interface, configure a GRE tunnel ...
3
votes
1answer
97 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
3
votes
2answers
528 views

OSPF on tunnel interfaces

Can I keep different tunnel interfaces in different OSPF areas. Keep in mind that the physical interface is going to be the same
3
votes
3answers
337 views

Layer 3 tunnel with Dynamic IP address

I want to ask whether it is possible to configure Layer 3 Tunnel with the two end points/interfaces have dynamic IP address? If the interface IP change, the tunnel will have to be re-negotiated, is ...
1
vote
2answers
829 views

Command “ip nhrp map multicast dynamic” is not being saved into the configuration

For some reason, my Cisco router is not saving the command "ip nhrp map multicast dynamic". The command is recognized but not being saved to the configuration. I am not receiving any errors. Any ...
1
vote
1answer
2k views

“Gateway of last resort is not set” even though I have a default route to a tunnel interface

I work with Cisco CSRs. On all of my previous CSRs in AWS, I have the following: AWS-ENV-CSR-R1#sh run | in ip route ip route 0.0.0.0 0.0.0.0 Tunnel1 ip route 0.0.0.0 0.0.0.0 Tunnel2 2 AWS-ENV-CSR-...
6
votes
2answers
186 views

What are the correct protocol versions (v4 vs v6) for packets inside DS-Lite tunnels?

I work for a company that develops Deep Packet Inspection tools. One of our customers, big ISP who has a large number of DS-Lite connected subscribers, was using our DPI engine to collect statistics ...
1
vote
1answer
598 views

Cisco 5506-x dynamic site to site tunnel doesn't works

I am followed ASA-to-ASA Dynamic-to-Static IKEv1/IPsec Configuration Example step by step, currently I am using IP address 10.0.0.1 for the static peer and 10.0.0.2 for the dynamic peer, but seems ...
2
votes
2answers
645 views

public ip across ipsec vpn tunnel

two sites connected ip sec vpn tunnel. site A has 16 static ip addresses for outside to in access (NAT). can I route one of my public ip addresses from site A across vpn tunnel to a host on site B?