Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

Ippower without Internet access over Linux PC with IP forward [closed]

I explain the assumption: I have a local network, in which the router functions is done by an industrial Linux PC connected to the internet and a VPN; these are the PC data: # sysctl -p net.ipv4....
1
vote
0answers
14 views

UNIFI USG GATEWAY IPSEC OVER L2TP VPN [closed]

At my office I have a Unifi USG Gateway that currently has 3 IPSEC VPN Tunnels (Lan-To-Lan VPN) configured. I also have a L2TP Remote VPN Network configured so that when I'm outside of my office I can ...
0
votes
1answer
16 views

GlobalProtect: Okta user cannot log in to VPN though successfully authenticated, stuck in saml-pre-login loop [closed]

I have an Okta user configured to connect to a VPN server using GlobalProtect, and I keep failing to log in. I am utterly flummoxed because other users on the same Okta IDP can connect using my ...
0
votes
0answers
37 views

Is it possible to access the networking device without the transit device? [closed]

I have a networking topology below: I use Control PC to manage the networking devices. now in my case I will ssh login into Transit device then control the network devices. however I am looking for a ...
2
votes
1answer
20 views

what is significance of proxy id while configuring site to site vpn tunnel . why we should use proxy id and in which scenarios

i came know about proxy id configuration for first time. when iam troubleshooting site to site vpn tunnel configuration along with vendor . post configuring proxy id issue got resolved . But iam still ...
0
votes
2answers
15 views

Concurrent site-to-site VPN tunnels through dual ISPs (with 2 couples of Cisco ASA) between same devices

I currently have a simple site-to-site VPN setup, connecting machines from site 1 to site 2 through 1 ISP, using a set of ASA 5506X. All is good. I'd like to "double" that setup for ...
0
votes
0answers
15 views

MPLS provider A L3VPN to MPLS provider B migration

i have a Datacenter infraestructure with a mpls of SP A, and i would like to migrate to another wan line of a different SP B. Mpls current circuit is providing L3 VPN service, one VPN per remote site. ...
1
vote
0answers
36 views

Cisco site-to-site VPN tunnel Failed to find a matching policy [closed]

I have PaloAlto (PA) and Cisco ASA 5585-X located on two different sites, trying to configure IPsec VPN tunnel. [PA]-----------(internet)-----------[Cisco ASA] If i ping from Cisco ASA side lan to PA ...
0
votes
1answer
41 views

How to connect to different VLANs through VPN

I have the following setup: I have setup a Layer 3 Switch with multiple VLANs Multiple devices are connected to it on different VLANs via untagged access ports There is also a router connected to the ...
1
vote
1answer
49 views

VPN with Cisco virtual ASA on Azure not routing correctly

I've deployed a Cisco virtual ASA in Azure to use as a VPN server. For simplicity, I'm using just the management interface as the lan for the time being (10.2.0.4 is the interface). I want to use the ...
0
votes
1answer
17 views

VPN protected resource and accessible via authenicated API - design [closed]

let's imagine a simple system deployed on GCP. There is public, authenticated (token, IP whitelisting) API exposed by our system. There is a protected resource R (SQL database) that is accessible by ...
1
vote
0answers
25 views

Does modifying a ASA tunnel create a downtime?

I inherited a cisco ASA, I never really had to manage one before. But, I need to modify an existing tunnel to add IP addresses to both the local and remote traffic selector, specifically there are ...
2
votes
1answer
103 views

Can a server on the other end of a site-to-site vpn be exposed (NATd) to a public IP on an ASA

AWS DataCenter ----------- site-to-site VPN ------------ http server <=======================> Cisco ASA public address 10.0.1.59:443 ...
2
votes
0answers
32 views

Router on one side of a GRE tunnel not adding OSPF route through the tunnel whilst the router on the other side is

I have configured GRE tunnel between the Dublin and Carlow routers with the following commands: //Carlow int tunnel 0 ip address 172.16.12.1 255.255.255.252 tunnel source s0/0/0 tunnel destination 87....
0
votes
0answers
12 views

Why public VIF must be used in AWS Direct Connect + VPN setup?

I am unsure why public VIF must be used in AWS Direct Connect + VPN setup. Usually if you are connecting to Virtual Private Gateway you should use private VIF as shown in AWS Managed VPN Diagram on ...
0
votes
2answers
30 views

Is connecting via 2 VPNs secure

I know there are VPN services like Speedify that you can connect to with 2 internet connections wired and wifi to combine them on their servers to get a faster connection and then connect to what you'...
0
votes
1answer
70 views

Cisco IPsec VPN tunnel problem

I have a problem with VPN configuration. This is the topology I created: First updated licenses to make the VPN available: license boot module c1900 technology-package securityk9 IPsec Router ...
2
votes
1answer
48 views

MPLS-BGP - VPN isolation - RFC 4364

In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
0
votes
0answers
16 views

OSPF in DMVPN phase 1,2 and 3

What difference in DMVPN Phase 1, 2 and Phase 3 if we use OSPF?
0
votes
1answer
18 views

What is a child tunnel? [closed]

I only heard this term today, but it was explained to me as a point-to-point VPN (so, two routers with a VPN tunnel established between them) and a firewall configured to only allow certain hosts to ...
0
votes
0answers
59 views

Users after login are redirected to the ASA AnyConnect download page rather than connecting to the VPN

Several users after logging in are redirected to the ASA AnyConnect download section instead of connecting to the VPN. We try to log in via Web or AnyConnect application by using SAML Identity ...
0
votes
0answers
22 views

Editing a crypto map with multiple entries

We're attempting to bring up an IPSEC tunnel with a Vendor. An engineer created the crypto map and wasnt able to establish a connection. I edited the entry to change the diffie-hillman group and the ...
0
votes
0answers
26 views

L2TP/IPSec on Cisco ISR G2 issues

I am using several ISR G2 routers (819, 2901, etc) configured as L2TP/IPSec VPN concentrators. With current configuration it works good, but there are two odd things about it. I used standard ...
0
votes
1answer
34 views

Easiest setup to replace jumpbox forwarding [closed]

In order to connect to some of machines, what I currently do is: Connect to VPN (using AnyConnect) SSH to my jumpbox via VPN For every single machine that I want to access using ssh, I have to map ...
1
vote
1answer
47 views

Is a VPN just a proxy which encryts data to the vpn server?

I have trouble understanding the concept of a VPN in contrast to a proxy. Is it true, that the VPN just encrypts the data which is send from the client to the vpn server and "rest" behaves ...
1
vote
1answer
39 views

Site to site ASA Routing question

I am doing a lab about DMVPN and Site to Site ASA integration. There is no problem in the DMVPN. However I have problem in establishing route from Site to Site ASA to DMVPN. The router on the left is ...
1
vote
0answers
24 views

Windows L2TP VPN issues when accessing Site to Site VPN on Cisco 5506

We have two Site to Site VPNs and Remote Access VPN configured. Using the builtin IPsec client on OSX all subnets are accessible however when using L2TP built in client on Windows 10 ICMP traffic ...
0
votes
1answer
43 views

client <--> server <--> client VPN?

I have the following use case for which I need to figure out a VPN solution. 100+ remote locations Each remote location has several users that should be able to connect to only that remote location ...
0
votes
1answer
38 views

What is method to switch group-policy on a tunnel-group upon user login?

We have ASA units that have tunnel-groups that have a particular group-policy defined via default-group-policy statement. This initial group-policy ("NOACCESS") is one that prevents any ...
0
votes
0answers
29 views

Site to Site VPN between Cisco ASA and Aruba Virtual Gateway

We have hosted an Aruba Virtual Gateway on AWS. All the configurations are done as per the documentation of Aruba VPNC. Through AWS security policies, UDP 4500 is open on AWS side. We want to ...
2
votes
1answer
48 views

what is significance and role and function lifetime in IPSEC Site to Site VPN . Please explain importance and role of lifetime in VPN

I Came across incident where i need to troubleshoot IPSEC Site to Site connectivity issue . The term "lifetime" confuses me . please anyone explain me importance of lifetime in VPN . Whats ...
0
votes
1answer
49 views

What can I use to display VPN instance instead of stelnet?

How can ı connect VPN service with use ssh in Huawei Atn980c ? Which command? I researched but i didnt different command. I found only this command; stelnet x.x.x.x (VPN instance) (service name) (port ...
0
votes
0answers
33 views

What are difference between SSL VPN and IPSEC Site to Site VPN [duplicate]

I am little confused between SSL VPN and ipsec site to site VPN packet flow and authentication methods and moreover what are significant difference between two VPNs . As per my understanding IPSEC ...
2
votes
0answers
23 views

Please Explain me traffic flow between two peers for ipse site-site vpn traffic , detailed traffic flow please [closed]

please explain me the exact traffic flow between two peers or gateways for IPSEC Site-Site VPN .Like phase 1 ,phase 2 , actual data processing traffic flow .
2
votes
1answer
118 views

Confusion about Route based IPSEC site-site vpn and policy based IPSEC site-site VPN

I am confused about the major difference between a policy-based VPN and routed-based site-site Vpn
1
vote
1answer
90 views

Juniper QFX Site to Site VPN

Im trying to setup a site to site vpn between two Juniper QFX5110's. Each end of the link is on the same subnet (so directly connected switches over dark fibre). I have configured each physical ...
0
votes
0answers
12 views

How to select CIDR blocks when subdividing a network? [duplicate]

I saw these two questions, but they are still too over my head and start too far along the path: How to divide network into subnets? How do you calculate the prefix, network, subnet, and host numbers?...
1
vote
3answers
117 views

But confused about SSL VPN and IPsec Site -Site VPN

What might be difference between sslvpn and site-site vpn . Which one among two is secure and it's significance
0
votes
1answer
25 views

VPN operating on layer 3, internal routes are accessible, but how to use it as a 'stepping stone' server for external servers? [closed]

I'm not really sure what my problem/request is called, but this is my situation: I run an OpenVPN Access Server server. It's configured to operate on layer 3. The private subnet it can operate on is ...
0
votes
1answer
30 views

routing a network with 2 interfaces and vpns [closed]

I'm pretty inexperienced in network but here is the idea of what i want to do: I have 2 interfaces: Interface #1 = fast internet Interface #2 = stable internet with static ip address this is the ...
2
votes
2answers
45 views

How to build secure access for cloud machine in small startup [closed]

We have 7 member team (3 dev + 2 qa + 2 Sales). We host our PROD + QA + DEMO server in GCP. As of now, all our PROD/QA/DEMO/DEV/QA-DB/DEV-DB machine are having public IP, so that we can ssh into them. ...
0
votes
1answer
167 views

Why do hops before VPN server not reflect in traceroute?

I'm using a remote-site VPN (ProtoVPN). When I tracert to the IP address of the VPN server, the hops through my ISP and other intermediate hops before the VPN sever are shown. But when I tracert to ...
1
vote
1answer
45 views

Routing between two sites using FTTC Broadband and E-Band Wireless

I have two sites, both with 80/20 FTTC broadband connections that terminate at the standard white box BT modem. The connections both have fixed IP. I’d like to connect these up to each other and form ...
0
votes
2answers
36 views

Is it possible to completely mask an IP address to a point where no IP address can be detected yet an active connection is live?

I’ll keep it short and sweet; We all know to connect to internet you’ll need an address like 2001:x** or 192.x**. Using a vpn, while it does encrypt things and mask your IP, it still returns an IP. ...
0
votes
1answer
33 views

VPN Traffic Routing on Ubiquiti/Vyatta

I'm using Ubiquiti to route certain outgoing ip-ranges through a VPN. I would however like to route all HTTP/HTTPS traffic via the VPN except large downloads. I realize that this is a tall order, but ...
0
votes
1answer
424 views

Is it possible to setup IPsec behind NAT without port forwarding?

We want to setup a IPsec connection between customer sites and our office so we can manage the hardware we place at customer sites (e.g. barriers). Its important that the VPN connection stays up all ...
1
vote
0answers
15 views

Is it possible to gain VPN access through RDP [closed]

Scenario: I have been tasked to resolve an issue for a client's EmailReceiver program. I have the source code on my PC. I have been given RDP Access to a entry point machine, through which I can ...
0
votes
1answer
25 views

Whether PPTP Client need virtual interface to communicate with PPTP Server? [closed]

We know in PPTP VPN, the VPN Server is using a virtual Interface to provide encrypted data. Whether PPTP Client need virtual interface to communicate with PPTP Server? and more, if yes, whether ...
1
vote
1answer
637 views

Cisco anyconnect VPN router specific public IP via tunnel

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over ...
0
votes
3answers
56 views

Do i need VLAN per customer when i want to give users (secure) access to specific customer sites

This question is a follow up on this question. We are currently working on the network design, nothing is implemented yet. Our network will exist out of our own (internal) network and lot of customer ...

1
2 3 4 5
13