Questions tagged [tunnel]

For questions about network tunnels.

Filter by
Sorted by
Tagged with
2
votes
2answers
354 views

In tunneling, how destination routers identify if a packet is encapsulated?

In tunneling, a packet gets encapsulated in the payload section of another packet. If the router at one end encapsulates the packet, then how the router at another end identifies whether the packet is ...
4
votes
1answer
174 views

Cisco IOS -> ASA VTI tunnel not routing traffic

I have a VTI tunnel configured between two devices (ASR and ASAv). The tunnel comes up fine and is stable, however traffic appears to be unidirectional, from the ASR -> ASAv but not in the reverse ...
1
vote
1answer
20 views

In PPTP, do encapsulated packets get further encapsulated in Ethernet frames?

I know that for PPP to travel in datalink layer 2 (ethernet) , the ppp frames need to get encapsulated in a ethernet frame , thus PPPoE. Is the same case for PPTP too?
1
vote
1answer
103 views

Site-to-Site VPN with Sophos XG using tunnel interface

So I have configured a Sophos XG site-to-site vpn according to this document: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/...
2
votes
1answer
41 views

Transporting TRILL over Juniper QFX5100

I've got 2 Brocade VDX switches setup using VCS and want to add another 2 switches to this group, but when connected to each other over a Juniper QFX5100, they won't see each other. The Brocade ...
0
votes
2answers
59 views

What are the benefits of using a transport label in L3VPN?

If not utilizing any form of TE (Traffic Engineering), are there any benefits of using a transport label in L3VPN - instead of just using a simple IPinIP tunnel? e.g. if traffic is egressing PE1 with ...
0
votes
1answer
32 views

Why does GRE tunnel has lesser TxBS/RxBS than its physical interface?

Given for instance, interface Tunnel200 tunnel destination 110.153.1.1 There's a static route for 110.153.1.1, pointing to physical interface Gi0/0. Gi0/0 is only used for tunnel200. Under show ...
0
votes
0answers
27 views

How to configure ZPF with Tunnel?

I am trying to configure ZPF in a Cisco 4331 router in Packet Tracer. I have a tunnel interface for GRE tunnel in this router. But I am not being able to assign this tunnel interface to any zone due ...
1
vote
1answer
349 views

MTU/MSS Oddness?

We have an IKEv2 IPSec tunnel between two Sophos XG Firewall appliances in a corporate system for a remote site. We don't have any specialized MSS or MTU settings other than what the IPSec tunnel ...
0
votes
1answer
1k views

How do you define interesting traffic using an IPSec Profile on a Cisco router?

I apologize if this is a duplicate, but I'm having difficulty figuring out how to define interesting traffic on a Cisco router using an IPSec Profile referenced by a tunnel interface. The old-school ...
0
votes
1answer
155 views

routing MTU size and encapsulation?

I did some research for my question beforehand such as this one:Cisco routers THROUGHPUT - MTU and packet size however, it seemed not precise to explain the doubts in my head. My primary goal is to ...
0
votes
1answer
19 views

What is a child tunnel? [closed]

I only heard this term today, but it was explained to me as a point-to-point VPN (so, two routers with a VPN tunnel established between them) and a firewall configured to only allow certain hosts to ...
1
vote
0answers
19 views

Segment Routing Encapsulation on Client Interface? [closed]

I wanted to test SRv6. Always between two clients (client 1 <-> client 2). If I do the encapsulation on the client everything works smooth as expected. Client 1 (encap SRv6 Tunnel) <- 2001::/...
1
vote
3answers
92 views

Combining NAT an tunneling

I was reading a text and a doubt came to mind. Suppose there is an interface in a router that implements NAT. That same interface is the extreme of a tunnel. If I was to send a message through said ...
2
votes
2answers
46 views

How to build secure access for cloud machine in small startup [closed]

We have 7 member team (3 dev + 2 qa + 2 Sales). We host our PROD + QA + DEMO server in GCP. As of now, all our PROD/QA/DEMO/DEV/QA-DB/DEV-DB machine are having public IP, so that we can ssh into them. ...
1
vote
2answers
2k views

Difference between WAN and VPN(tunnels)

I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
1
vote
1answer
791 views

What's the difference between L2TP and L2TPv3? [closed]

Is L2TPv3 an improvement of L2TP or a completely different technology? Other than "it scales better" and "the non-proprietary MPLS" I can't find much information about it that's ...
1
vote
0answers
16 views

Is it possible to gain VPN access through RDP [closed]

Scenario: I have been tasked to resolve an issue for a client's EmailReceiver program. I have the source code on my PC. I have been given RDP Access to a entry point machine, through which I can ...
6
votes
2answers
1k views

Encapsulation: can a higher protocol encapsulate a lower protocol?

I've heard someone say that a protocol higher up the osi model can encapsulate a lower protocol. As far as I know, personally, a protocol can only encapsulate a same-level protocol or one at a ...
2
votes
2answers
11k views

VPNs are working in which layer of the OSI model? [closed]

As the following picture shows, it is possible to categorize VPNs in two general categories: Client-based VPNs Network-based VPNs When it is required to choose a VPN for implementation in a network, ...
0
votes
0answers
442 views

Q-IN-Q Tunnel between cisco and mikrotik not work

i have try to make A Q-IN-Q tennel between two router (cisco and Microik) through cisco switch in mikrotik VLAN ID = 10 IN interface ether1 VLAN ID = 20 in interaface Vlan10 ip address in interface ...
9
votes
3answers
11k views

What is the use of a tunnel interface on a cisco router?

What is a tunnel interface used for on a cisco router? What is the difference between setting up a VPN connection and a tunnel interface; or does this serve the same purpose?
2
votes
2answers
777 views

What are the differences between tunneling and regular encapsulation?

What are the difference between tunneling (https://en.wikipedia.org/wiki/Tunneling_protocol) and regular encapsulation (e.g. TCP/UDP over IP, HTTP/SSH over TCP)? Is TCP/UDP over IP considered ...
1
vote
2answers
57 views

What does a VPN Tunnel offers other than encryption?

A VPN tunnel is end to end encrypted. But does it gurantee to provide features other than encryption, such as low latency, low jitter etc?
1
vote
1answer
74 views

Finding MSS for a remote connection that uses tunnelling

I'm working on a codebase where we're trying to test network health by verifying if we can ping the remote site having payload = MSS without any packet fragmentation (using -df flag). Typically, for ...
2
votes
1answer
990 views

Load-balancing one VPN-connection over multiple WANs

My internet connection will be provided by 4 different WANs (each 250 Mbit down, 100 Mbit up), which should be load-balanced to one 1 Gbit connection (full duplex, most likely ethernet (should be ...
1
vote
0answers
4k views

Connection terminated for peer x.x.x.x. Reason: IPSec SA Idle Timeout

I have configured an IPsec Site - site VPN tunnel with Cisco ASA on both sides.there is no issue with the phase 1 of tunnel.but frequently connection towards some IPs become timedout only from some ...
2
votes
1answer
109 views

Confusion about IANA "Protocol Numbers" registery

In the IANA registery for "Protocol Numbers", there listed 2 IP protocol versions: IPv4 at #4 and IPv6 at #41. Their "protocol" column says IPv[46] Encapsulation, and "...
0
votes
1answer
122 views

PPTP encapsulation process

i am learning networking and vpn technologies now and i have some problems with understanding the whole PPTP encapsulation process. So i will write steps of PPTP encapsulation process (as i understand ...
0
votes
1answer
62 views

GRE Encapsulation

i am learning networks and tunneling and i have problems with understanding some things about GRE. The structure of tunneling below: [Transport Protocol][ensapsulationg protocol(GRE)][encapsulateed ...
2
votes
2answers
2k views

Why source and destination addresses should match in GRE tunnel?

In a GRE tunnel, when R1 (public IP 172.16.0.1, tunnel address 10.0.0.1) sends a packet to R3 (public IP 172.16.0.6, tunnel address 10.0.0.2) and R3 receives it, the following happens: A packet is ...
0
votes
1answer
20 views

IP-Sec VPN Tunnel Established Between 2 Remote Machines. Why Can't Machines In Their Subnets Connect Across? [closed]

Have 2 Remote Ubuntu Machines in different subnets. one: 192.168.1.0/24 Two: 192.168.2.0/24 Established VPN tunnel between 2 machines, 1 in each subnet. Their IPs: Public IPs 1.1.1.1 2.2.2.2 ...
3
votes
2answers
307 views

IPv6 tunneling over IPv4

I am willing to build a program that simulates the routing process of IPv6 packets over an IPv4 overlay network (tunnel). From what I have read so far I have understood that the IPv4 tunnel packets ...
0
votes
1answer
823 views

Cisco qos, service-policy on output interface on 1100 ISR seems ignored

I am trying to configure QoS for a specialty purpose application, and it is the first time I have done QoS. This is on an 1100 ISR with IOS XE 16.09.03. The device is a set of 4 that establish a mesh ...
0
votes
1answer
50 views

VPN to a current subnet ID

I am sure this is a fairly basic question, but the standard google searches have not told me what I am looking for. I have a restaurant that uses an ipad point of sale on a dedicated subnet id: 192....
1
vote
1answer
194 views

Tacacs+ over VPN is not working

R3 is a Tacacs+ client and Server0 is configured as AAA server with Tacacs+ but R3 is not able to authenticate. R3 Configuration: ! version 15.4 no service timestamps log datetime msec no service ...
0
votes
1answer
366 views

What is the difference between VPN and Domain fronting?

What is Domain fronting? and how it is different from a VPN?
0
votes
1answer
333 views

How can I accomplish VPN across Dual Wan connections?

How can I accomplish VPN across Dual Wan connections in a optimal way? Idea is to make: Site to site VPN. Make single connection inside the VPN to use full bandwidth of both wan connections using (...
1
vote
1answer
85 views

Assign a new public and static IP to a router behind my main router [closed]

What can you suggest to bring a second public and static IPv4 so I can configure my WAN-A interfase with my primary and an additional secondary IP settings so I can route all the traffic from the ...
1
vote
1answer
1k views

Dropping packets between router and firewall without firewall rule

I have a user that is trying to access his company network resources on his home network. He is able to access SMB shares and other resources, but he is unable to access their AS400 on any computer in ...
0
votes
1answer
229 views

Remote access to the network without port forwarding (blocked by ISP) - VPN [closed]

I need to setup a following configuration: A router Mikrotik is connected to the internal Network1. The router has a USB 3G modem that is connected to it and enables internet access from the ...
3
votes
0answers
189 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
0
votes
1answer
821 views

qos inside vpn, possible or not ? I read yes and no

I am wondering if possible to do QOS (or similar action) inside vpn tunnel to a cloud server. the goal is to reserved bandwith for voip traffic. I read that you can with GRE and other people said, ...
5
votes
3answers
364 views

Why do all the intermediary routers need to run iBGP without tunneling?

I'm trying to understand the configuration behind iBGP - I understand you can run full mesh to prevent loops, run confederation or route reflectors, if you don't want full mesh, else run tunneling ...
3
votes
1answer
602 views

Traffic not send in IPsec with a Cisco ASA

I try to set up a site to site IPsec between an Ericsson router and a Cisco ASA, as shown below: My tunnel is UP and R1 seems to be working fine. However, my ASA does not forward traffic between ...
2
votes
1answer
134 views

VyOS: Failure to commit after L2TPv3 configuration

I am trying to get familiar with VyOS (using a VM) and while working on L2TPv3 I encountered something strange: after configuring the L2TPv3 interface and try to commit, an error occurs as if the ...
0
votes
2answers
174 views

Security implications of IPv6 tunneling over IPv4

I've read that IPv6 over IPv4 tunnels are a security risk because IPv6 traffic cannot be intercepted by Intrusion Detection Systems and Firewalls. This apparently deterred some networks to deploy IPv6....
0
votes
0answers
50 views

IPSec Tunnel is up but no Communication with End Systems?

I need help for IPSec tunnel. Currently, I am working on a small task to create remote access between my laptop and office router, in order to access the office LAN network. IPSec tunnel is working ...
1
vote
1answer
135 views

IPSec tunnel between 2 LANs using HSRP in each side

This is my first post here, so tell me if there's something I'm doing wrong. I'm currently working with another IT student on our end of degree project and we're building our network in PT. Our ...
4
votes
1answer
632 views

How IPsec tunnel mode work without GRE

IPsec tunnel mode encrypt a whole IP packet and sends it as the payload of another IP packet. I have always used GRE as the encapsulation layer when doing IPsec encryption. However, how could I have ...