Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
0 votes
0 answers
6 views

How to get WSL to connect to the Internet when VPN is on? [closed]

I was using both a VPN (Private Internet Access) and Ubuntu WSL1 on Windows 10 with no problem. Then I upgraded to WSL2 Ubuntu 20.04. I found that WSL 2 broke my file reloading, so I downgraded the ...
user avatar
  • 101
0 votes
1 answer
23 views

Cisco ASA VPN tunnel shows up (phase 1 and 2, MM_ACTIVE), but no traffic passes

My end of the tunnel is on an ASAv in AWS. (version 9.14) show crypto isakmp sa 4 IKE Peer: 212.239.x.y Type : L2L Role : responder Rekey : no State : ...
user avatar
0 votes
0 answers
24 views

Connecting 9 Remote Sites with VPN Tunnels

I am working in a Cisco ecosystem and need to be able to test a 9 tunnel IPSec network over the internet using 10 x Cisco 1941 routers. This is a "hub and spoke" type configuration; where ...
user avatar
1 vote
0 answers
135 views

VXLAN over Wireguard with VLAN-VNI mapping [closed]

I am currently attempting to setup a L2 bridge between two sites using VXLAN to provide the L2 connectivity and Wireguard as transport/L3, eventually with plans to expand it multiple sites. I've ...
user avatar
0 votes
2 answers
30 views

IPSEC ESP tunnel mode - Are the ip addresses in outer IP HDR same as addresses in inner encrypted IP HDR?

Am trying to understand how IPSEC in tunnel mode achieves the VPN functionality. I understand that the IP header and payload along with TCP/UDP headers are encrypted. But, if the src and dst addresses ...
user avatar
  • 1,095
1 vote
1 answer
50 views

Checkpoint Firewall using wrong Source IP when establishing a VPN

I have a checkpoint VSX environment running r81 and I have a DMZ firewall that has two external interfaces. One that goes to the Internet and one that goes to a 10.0.0.0/8 network that connects to ...
user avatar
0 votes
1 answer
69 views

Same subnet on multiple VPN clients

I have an openVPN server, where multiple clients are connected. These clients are usually routers, so they have a subnet behind these routers. I want to access all clients on these subnets if I ...
user avatar
1 vote
0 answers
30 views

asa vlan subinterface over s2s ipsec tunnel to IOS router

I am trying to configure wireless traffic that is a separate vlan subinterface on an ASA to travel over a site-to-site vpn to an IOS router. i have the static NAT set up to go from the (wifimain,...
user avatar
  • 11
0 votes
0 answers
4 views

Source Port NAT with VPN [duplicate]

I understand that a router (like an home router) does source port NAT (as the public IP for a LAN is normally one). If I run a VPN Client (like Open VPN) on a computer in the LAN and if the VPN packet ...
user avatar
  • 101
0 votes
3 answers
93 views

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel?

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel? I know that MPLS is a type of WAN. and IPsec VPN tunnel is an encrypted connection (private) over the internet. But what is MPLS VPN?...
user avatar
1 vote
1 answer
72 views

Can I set fragmented IPv4 packet's DF bit to '1'? [duplicate]

If make DF to 1, can I confirm that fragmented packet with DF=1 will go through routers to the dest IP without any reassembly and re-fragmentation?
user avatar
  • 11
1 vote
0 answers
38 views

TACACS Through ASA L2L Tunnel

Hello see below network diagram. I am trying to configure the Branch Router (10.1.1.1) to use TACACS AAA on the HQ-AAA-Server host (192.168.10.10). TACACS works fine for the Branch-FW1 ASA device ...
user avatar
  • 121
1 vote
2 answers
67 views

Protecting RDP connections, full remote control

In my workplace people are connecting with their PCs (with Windows on them) through basic RDP when they work from home. The only precaution taken is changing default 3389 port to a diffrent one and ...
user avatar
  • 13
3 votes
0 answers
130 views

SSH to ASA on Exit Side Of VPN Tunnel

I have a functioning L2L tunnel between two ASA devices (HQ-FW1 and Branch-FW1 on the diagram). HQ-PC2 - 192.168.10.21 HQ-FW1 eth0 - 192.168.20.2 (outside) HQ-FW1 eth1 - 192.168.10.2 (inside) Branch-...
user avatar
  • 121
3 votes
2 answers
171 views

TACACS+ AAA over L2L VPN

I have a practice network set up with the relevant topography shown in the below image: I have TACACS+ running on HQ-AAA-Server (192.168.10.10) and AAA working using it on HQ (IOS) and HQ-FW1 (ASA). ...
user avatar
  • 121
2 votes
1 answer
101 views

Cisco ASA Clientless SSL VPN Apply Tunnel Group

I'm trying to implement the answer from a previous question I've asked (Cisco ASA Clientless SSL VPN Restrict Network Access) My ultimate aim is to set up an SSL VPN on a Cisco ASA device to allow ...
user avatar
  • 121
1 vote
1 answer
104 views

Cisco ASA Clientless SSL VPN Restrict Network Access

I'm working on a Uni project to set up a secure network. One aspect is to have a VPN for clients of the imaginary company to access web based services. I have set up a simple clientless SSL VPN which ...
user avatar
  • 121
3 votes
1 answer
100 views

Wireshark Decrypting IKEv1 Text PSK to Hex

I'm trying to debug a Cisco VPN setup as part of a Uni Lab (so please don't worry about posting of keys etc. it's just a toy setup with no internet facing connection). I want to decrypt the IKEv1 ...
user avatar
  • 121
0 votes
1 answer
131 views

Can UDP traffic be transmitted over TCP ports on OpenVpn to avoid the TCP meltdown

I understand the TCP meltdown problem is associated with overcompensation from errors and incorrect sequencing when arriving the the receiver end. OpenVpn connections are recommended to use the UDP ...
user avatar
1 vote
1 answer
681 views

IPSec IKEv2 on pfSense: "parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]"

I am trying to setup an IPSec IKEv2 VPN Network on a pfSense. The pfsense is situated directly behind the modem. I connect to it by a static IP address. There is no double NAT. I followed this ...
user avatar
1 vote
0 answers
20 views

Personal VPN sub-network accessible through Work VPN? [closed]

I currently access my work network via Cisco VPN. At work, I have my own three computers and NAS on a personal dedicated router using my own DHCP. For several reasons, I do not want these computers to ...
user avatar
  • 111
2 votes
2 answers
324 views

Site-to-Site VPN with Sophos XG using tunnel interface

So I have configured a Sophos XG site-to-site vpn according to this document: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/...
user avatar
0 votes
1 answer
49 views

Why is the VPN throughput reduction different when using a cellular network and when using Ethernet? [closed]

I built a VPN server using openvpn as a protocol and measured the throughput between server and client. There are significant throughput reduction at cellular network. Throughput decreased by more ...
user avatar
4 votes
1 answer
435 views

Cisco IOS -> ASA VTI tunnel not routing traffic

I have a VTI tunnel configured between two devices (ASR and ASAv). The tunnel comes up fine and is stable, however traffic appears to be unidirectional, from the ASR -> ASAv but not in the reverse ...
user avatar
1 vote
1 answer
59 views

Internal network inside an internal network

I have the task to integrate 4 PCs (1 server, 3 workers) into a local network (from a bigger organization). The admin of that network only allows me to integrate the server directly into the network (...
user avatar
0 votes
1 answer
76 views

VPN/IPsec router support in Packet Tracer

I would like to know, if a router doesn't support VPN (meaning it can't be used as a VPN server) can it still route an IPsec packet? And which router I should use as a server for IPSec (AH tunnel mode)...
user avatar
0 votes
0 answers
40 views

Multiple Site-To-Site VPN

I'm trying to set a VPN that allows all site: site0-4 to communicate with each other. The site called otherSite should not be in the VPN. Note that there's a NAT for site 0, 1 and 2 but site 3,4 only ...
user avatar
1 vote
1 answer
57 views

Site to site vpn setup

I am trying to set up a small network for my startup. We have 2 small servers at separate locations and would like to set up a vpn thorugh which the 2 servers can talk to each other and through which ...
user avatar
  • 113
1 vote
0 answers
472 views

IKEv2 between Cisco router and Google cloud VPN

Hey I'm trying to create a tunnel between cisco router and google cloud vpn (client site) but the connection is stuck on stage 2 (UP-IDLE), need help where the problem may lie. Some debug that I get ...
user avatar
1 vote
1 answer
182 views

WatchGuard Geo Location for restricting access to VPN and "Access Portal"

Problem We want to use WatchGuard's Geo Location to restrict access to our "Access Portal" and "Mobile VPN" connections, but see no options and the corresponding "Firewall ...
user avatar
  • 121
1 vote
0 answers
234 views

UNIFI USG GATEWAY IPSEC OVER L2TP VPN [closed]

At my office I have a Unifi USG Gateway that currently has 3 IPSEC VPN Tunnels (Lan-To-Lan VPN) configured. I also have a L2TP Remote VPN Network configured so that when I'm outside of my office I can ...
user avatar
0 votes
1 answer
32 views

what is significance of proxy id while configuring site to site vpn tunnel . why we should use proxy id and in which scenarios

i came know about proxy id configuration for first time. when iam troubleshooting site to site vpn tunnel configuration along with vendor . post configuring proxy id issue got resolved . But iam still ...
user avatar
0 votes
2 answers
131 views

Concurrent site-to-site VPN tunnels through dual ISPs (with 2 couples of Cisco ASA) between same devices

I currently have a simple site-to-site VPN setup, connecting machines from site 1 to site 2 through 1 ISP, using a set of ASA 5506X. All is good. I'd like to "double" that setup for ...
user avatar
  • 103
1 vote
0 answers
2k views

Cisco site-to-site VPN tunnel Failed to find a matching policy [closed]

I have PaloAlto (PA) and Cisco ASA 5585-X located on two different sites, trying to configure IPsec VPN tunnel. [PA]-----------(internet)-----------[Cisco ASA] If i ping from Cisco ASA side lan to PA ...
user avatar
  • 4,237
0 votes
1 answer
876 views

How to connect to different VLANs through VPN

I have the following setup: I have setup a Layer 3 Switch with multiple VLANs Multiple devices are connected to it on different VLANs via untagged access ports There is also a router connected to the ...
user avatar
1 vote
1 answer
284 views

VPN with Cisco virtual ASA on Azure not routing correctly

I've deployed a Cisco virtual ASA in Azure to use as a VPN server. For simplicity, I'm using just the management interface as the lan for the time being (10.2.0.4 is the interface). I want to use the ...
user avatar
0 votes
1 answer
19 views

VPN protected resource and accessible via authenicated API - design [closed]

let's imagine a simple system deployed on GCP. There is public, authenticated (token, IP whitelisting) API exposed by our system. There is a protected resource R (SQL database) that is accessible by ...
user avatar
  • 101
1 vote
0 answers
28 views

Does modifying a ASA tunnel create a downtime?

I inherited a cisco ASA, I never really had to manage one before. But, I need to modify an existing tunnel to add IP addresses to both the local and remote traffic selector, specifically there are ...
user avatar
  • 111
3 votes
1 answer
152 views

Can a server on the other end of a site-to-site vpn be exposed (NATd) to a public IP on an ASA

AWS DataCenter ----------- site-to-site VPN ------------ http server <=======================> Cisco ASA public address 10.0.1.59:443 ...
user avatar
2 votes
0 answers
68 views

Router on one side of a GRE tunnel not adding OSPF route through the tunnel whilst the router on the other side is

I have configured GRE tunnel between the Dublin and Carlow routers with the following commands: //Carlow int tunnel 0 ip address 172.16.12.1 255.255.255.252 tunnel source s0/0/0 tunnel destination 87....
user avatar
  • 21
0 votes
2 answers
36 views

Is connecting via 2 VPNs secure

I know there are VPN services like Speedify that you can connect to with 2 internet connections wired and wifi to combine them on their servers to get a faster connection and then connect to what you'...
user avatar
  • 101
0 votes
1 answer
106 views

Cisco IPsec VPN tunnel problem

I have a problem with VPN configuration. This is the topology I created: First updated licenses to make the VPN available: license boot module c1900 technology-package securityk9 IPsec Router ...
user avatar
  • 3
2 votes
1 answer
75 views

MPLS-BGP - VPN isolation - RFC 4364

In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
user avatar
0 votes
1 answer
21 views

What is a child tunnel? [closed]

I only heard this term today, but it was explained to me as a point-to-point VPN (so, two routers with a VPN tunnel established between them) and a firewall configured to only allow certain hosts to ...
user avatar
  • 321
0 votes
0 answers
74 views

Editing a crypto map with multiple entries

We're attempting to bring up an IPSEC tunnel with a Vendor. An engineer created the crypto map and wasnt able to establish a connection. I edited the entry to change the diffie-hillman group and the ...
user avatar
  • 11
0 votes
1 answer
52 views

Easiest setup to replace jumpbox forwarding [closed]

In order to connect to some of machines, what I currently do is: Connect to VPN (using AnyConnect) SSH to my jumpbox via VPN For every single machine that I want to access using ssh, I have to map ...
user avatar
1 vote
1 answer
65 views

Is a VPN just a proxy which encryts data to the vpn server?

I have trouble understanding the concept of a VPN in contrast to a proxy. Is it true, that the VPN just encrypts the data which is send from the client to the vpn server and "rest" behaves ...
user avatar
  • 111
1 vote
1 answer
67 views

Site to site ASA Routing question

I am doing a lab about DMVPN and Site to Site ASA integration. There is no problem in the DMVPN. However I have problem in establishing route from Site to Site ASA to DMVPN. The router on the left is ...
user avatar
  • 37
1 vote
0 answers
42 views

Windows L2TP VPN issues when accessing Site to Site VPN on Cisco 5506

We have two Site to Site VPNs and Remote Access VPN configured. Using the builtin IPsec client on OSX all subnets are accessible however when using L2TP built in client on Windows 10 ICMP traffic ...
user avatar
0 votes
1 answer
55 views

client <--> server <--> client VPN?

I have the following use case for which I need to figure out a VPN solution. 100+ remote locations Each remote location has several users that should be able to connect to only that remote location ...
user avatar
  • 101

1
2 3 4 5
13