Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

Options for building a layer 2 tunnel or VPN from a windows machine to a VMware network? [closed]

What options are there for building a layer 2 tunnel or VPN from a windows machine to a VMware network ("Virtual Machine port group for a Standard Switch")? I want to have a network ...
Azendale's user avatar
  • 111
0 votes
1 answer
39 views

Is this the right way to expose VLANs through VPN (VPN server location)?

Starting from the following network topology: Internet --- ISP Cable Router --- Firewall --- Router --- rest of the network / multiple VLANs (port forwarding) | ...
Kraal's user avatar
  • 101
1 vote
1 answer
81 views

MTU for WireGuard over IPv6

What would be the optional MTU for a virtual WireGuard link transmitting over IPv6 to avoid unnecessary fragmentation? Here is how I approached the calculation: [IPv6 Header] - 40 bytes [Some IPv6 ...
Moss Richardson's user avatar
0 votes
1 answer
47 views

Site to Site VPN using GNS3

I'm sorry if this a really vague question - but I am trying to get my head around a problem and a possible solution. I'm not really a network guy (not to the depths of you guys) - I'm a PLC ...
Robt800's user avatar
0 votes
1 answer
64 views

What's the difference between RED and VPN?

I know that RED is Remote Ethernet Device and VPN is Virtual Private Network. But I think that they work as the same way. Someone can help me?
Jonas Lucas's user avatar
0 votes
1 answer
41 views

Connect site-to-site private networks [closed]

I used VPN to connect site-to-site private networks from A to B. It worked fine. Then I used NAT for (1) hiding private networks and (2) LAN of 2 sites could access the Internet. The problem is that ...
Gekko's user avatar
  • 27
0 votes
0 answers
232 views

Pfsense NAT with site-to-site VPN

For a client I am building a network solution that enables them expanding their available online presence. I am running into a problem with port forwarding to an IP which is routed over an OpenVPN L3 ...
Koen Vuurens's user avatar
0 votes
1 answer
74 views

Routing in Azure subnet to on-premise and out vpn-tunnel

We are trying to establish a connection from Azure VNET(10.10.0.0/16) over S2S VPN Tunnel (VpnGw1) to on-premise network (192.168.1.0/24) and then out through sonic wall to second VPN Tunnel to ...
Jayden's user avatar
  • 103
1 vote
1 answer
47 views

Maintenance access to customers over VPN with same network on each side

We are a small company that manufactures machines for the industry. What I need today is an access to the machines when they are in our workshop (construction and adjustment) but also, and this is ...
Meloman's user avatar
  • 111
0 votes
2 answers
105 views

IPsec PFS Confusion

I'm reading conflicting things about how PFS works in IPsec. Some sources say it's simply a renegotiation of the Phase 1 IKE/ISAKMP SA that ignores the original IKE/ISAKMP SA lifetime value and that ...
Ceejus's user avatar
  • 1
1 vote
1 answer
94 views

VPN doesn't work

I'm trying to configure VPN between 2 routers: R1: public IP is 200.0.0.6/30 on S0/0/1, private IP are 10.0.0.0/8 and 20.0.0.0/8 R3: public IP is 210.10.0.6/30 on S0/0/0, private IP is 192.168.3.0/24 ...
Gekko's user avatar
  • 27
1 vote
1 answer
136 views

Route traffic from firewall tunnel interface to server in Azure [closed]

On premise is a NAS that users access for file storage. Their AD server for authentication and GPO is in Azure. For remote users, they have a Remote Access VPN client in which they connect to the ...
Dacid Salin's user avatar
0 votes
0 answers
146 views

multi-site vpn with only one site reliably addressable from the web at large

i have a small network like so: site-31: wan public ip (dynamic) on isp fibre is reachable from the outside world. an automatically updated dns entry is maintained to keep the ip current whenever ...
grenade's user avatar
  • 101
1 vote
3 answers
121 views

UDP encrypted packets

I am analysing a Wireshark capture as part of understanding UDP/TCP, DNS and HTTP concepts and how packets are sent. I found an interesting sequence of messages in the Wireshark file, but I am not ...
Tita's user avatar
  • 123
2 votes
4 answers
147 views

Difference between Zero Trust Architecture and VPN + MitM Access Rights Management at Gateway

I am currently evaluating Next-Generation Firewall concepts and features and remembered about the Zero Trust networking model. I do find the notion of "trust nothing" in the context of ...
alex's user avatar
  • 157
0 votes
1 answer
124 views

Can you sniff network traffic through a VPN tunnel? [closed]

Background: I am doing research for building an automated penetration testing application. All tests will be run from some server with a public IP ("testing server"). The objective is to ...
11ty1's user avatar
  • 3
0 votes
1 answer
21 views

Detect the use of a VPN connection _to_ a box by traffic coming _from_ the box [closed]

Imagine that we have three boxes: A <--(VPN)--> B <--(public internet)--> C A and B are connected via a VPN. B and C are connected via the public internet. Let's assume that A and B run ...
9000's user avatar
  • 103
-1 votes
1 answer
33 views

Does a VPN encryption get stripped from data during cellular transmission?

These phones have all the generations of connectivity but “only use 5G.” On top of that the new GPS Satellite iPhone feature for people that get lost does a VPN protocol work for that, what about ...
SusieJones1977's user avatar
0 votes
2 answers
155 views

Possible for pfSense to act as VPN client and server at the same time?

Let's say I have a network where I run pfSense as a router. I want to be able to VPN in to my network when I'm away, but also want to make all outbound traffic from my network go through another VPN, ...
luisschwab's user avatar
1 vote
0 answers
21 views

VPN conflicts from using 2 VPNs [closed]

My QA has a problem. They need to test the app, and the database at the same time. To access our app (testing environment), they need to connect to the company VPN through GlobalProtect, and then they ...
sneedster's user avatar
0 votes
2 answers
337 views

Override tunnel-all VPN connection to print locally

We have a remote office with several users. The users connect to the cable modem there and individually VPN to our NSA2650 via Sonicwall Global VPN client. This client is set to tunnel-all mode ...
stormdrain's user avatar
0 votes
2 answers
59 views

How can a hostname and ASN be different? [closed]

I've been doing some research to see who really 'powers' the most popular VPN companies which has involved a ton of reverse IP lookups and traceroutes. One thing I keep running in to though is that ...
skarz's user avatar
  • 101
0 votes
1 answer
18 views

Is this possible? Adding a local device of my home network in client network without firewall configuration at client side (VPN?) [closed]

Let me explain what I want to achieve, but keep in mind that my networking knowledge is limited. I want to login at a clients network to do some remote troubleshooting. And I want to use (for example) ...
Dimitri's user avatar
0 votes
2 answers
550 views

Cannot ping/access single host over VPN [closed]

I am running openVPN server on pfSense machine, which is also the router of the network. This network has several VLAN's, where only single one of them is of interest - 10.0.100.0/22. The openVPN ...
Veselin Manev's user avatar
0 votes
1 answer
76 views

Using an internal domain name across a site-to-site VPN [closed]

I've searched around and can't quite find an answer to how I can share a domain name between a site-to-site VPN. Here is a rough sketch of my network: Is it possible to have mulquin.net as the local ...
Jacob Mulquin's user avatar
1 vote
1 answer
40 views

IPS Registering to FMC over VPN

help please. I have two sites linked by VPN with ASA 5525-X. In Site A we have management network (172.16.30.0/28) where we have management IP of ASA 5525-X IPS (172.16.30.14) and IPS (172.16.30.13). ...
Papa Seck's user avatar
2 votes
1 answer
348 views

Site-to-Site VPN with BOTH sites behind NAT (mobile data routers)

I have 2 sites (call them "A" and "B") which connect to the Internet using 4G mobile data routers - don't knock them, I'm getting 200Mbps downlink and 30Mbps uplink, faster than a ...
kbro's user avatar
  • 121
3 votes
1 answer
258 views

what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)

what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)
Rupesha Kempanna's user avatar
0 votes
1 answer
480 views

Cisco ASA VPN tunnel shows up (phase 1 and 2, MM_ACTIVE), but no traffic passes

My end of the tunnel is on an ASAv in AWS. (version 9.14) show crypto isakmp sa 4 IKE Peer: 212.239.x.y Type : L2L Role : responder Rekey : no State : ...
Chris Holt's user avatar
0 votes
0 answers
48 views

Connecting 9 Remote Sites with VPN Tunnels

I am working in a Cisco ecosystem and need to be able to test a 9 tunnel IPSec network over the internet using 10 x Cisco 1941 routers. This is a "hub and spoke" type configuration; where ...
Tyler DeBoy's user avatar
1 vote
0 answers
1k views

VXLAN over Wireguard with VLAN-VNI mapping [closed]

I am currently attempting to setup a L2 bridge between two sites using VXLAN to provide the L2 connectivity and Wireguard as transport/L3, eventually with plans to expand it multiple sites. I've ...
ChownAlone's user avatar
0 votes
2 answers
299 views

IPSEC ESP tunnel mode - Are the ip addresses in outer IP HDR same as addresses in inner encrypted IP HDR?

Am trying to understand how IPSEC in tunnel mode achieves the VPN functionality. I understand that the IP header and payload along with TCP/UDP headers are encrypted. But, if the src and dst addresses ...
Hemanth's user avatar
  • 1,124
1 vote
1 answer
726 views

Checkpoint Firewall using wrong Source IP when establishing a VPN

I have a checkpoint VSX environment running r81 and I have a DMZ firewall that has two external interfaces. One that goes to the Internet and one that goes to a 10.0.0.0/8 network that connects to ...
The Footsie's user avatar
0 votes
1 answer
194 views

Same subnet on multiple VPN clients

I have an openVPN server, where multiple clients are connected. These clients are usually routers, so they have a subnet behind these routers. I want to access all clients on these subnets if I ...
Kristof Rado's user avatar
1 vote
0 answers
85 views

asa vlan subinterface over s2s ipsec tunnel to IOS router

I am trying to configure wireless traffic that is a separate vlan subinterface on an ASA to travel over a site-to-site vpn to an IOS router. i have the static NAT set up to go from the (wifimain,...
ptabs's user avatar
  • 11
0 votes
3 answers
672 views

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel?

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel? I know that MPLS is a type of WAN. and IPsec VPN tunnel is an encrypted connection (private) over the internet. But what is MPLS VPN?...
Errefae's user avatar
1 vote
1 answer
625 views

Can I set fragmented IPv4 packet's DF bit to '1'? [duplicate]

If make DF to 1, can I confirm that fragmented packet with DF=1 will go through routers to the dest IP without any reassembly and re-fragmentation?
lee yk's user avatar
  • 11
1 vote
0 answers
78 views

TACACS Through ASA L2L Tunnel

Hello see below network diagram. I am trying to configure the Branch Router (10.1.1.1) to use TACACS AAA on the HQ-AAA-Server host (192.168.10.10). TACACS works fine for the Branch-FW1 ASA device ...
DavidM's user avatar
  • 171
1 vote
2 answers
73 views

Protecting RDP connections, full remote control

In my workplace people are connecting with their PCs (with Windows on them) through basic RDP when they work from home. The only precaution taken is changing default 3389 port to a diffrent one and ...
Jorhanc's user avatar
  • 113
4 votes
0 answers
402 views

SSH to ASA on Exit Side Of VPN Tunnel

I have a functioning L2L tunnel between two ASA devices (HQ-FW1 and Branch-FW1 on the diagram). HQ-PC2 - 192.168.10.21 HQ-FW1 eth0 - 192.168.20.2 (outside) HQ-FW1 eth1 - 192.168.10.2 (inside) Branch-...
DavidM's user avatar
  • 171
4 votes
2 answers
273 views

TACACS+ AAA over L2L VPN

I have a practice network set up with the relevant topography shown in the below image: I have TACACS+ running on HQ-AAA-Server (192.168.10.10) and AAA working using it on HQ (IOS) and HQ-FW1 (ASA). ...
DavidM's user avatar
  • 171
3 votes
1 answer
363 views

Cisco ASA Clientless SSL VPN Apply Tunnel Group

I'm trying to implement the answer from a previous question I've asked (Cisco ASA Clientless SSL VPN Restrict Network Access) My ultimate aim is to set up an SSL VPN on a Cisco ASA device to allow ...
DavidM's user avatar
  • 171
2 votes
1 answer
389 views

Cisco ASA Clientless SSL VPN Restrict Network Access

I'm working on a Uni project to set up a secure network. One aspect is to have a VPN for clients of the imaginary company to access web based services. I have set up a simple clientless SSL VPN which ...
DavidM's user avatar
  • 171
3 votes
1 answer
218 views

Wireshark Decrypting IKEv1 Text PSK to Hex

I'm trying to debug a Cisco VPN setup as part of a Uni Lab (so please don't worry about posting of keys etc. it's just a toy setup with no internet facing connection). I want to decrypt the IKEv1 ...
DavidM's user avatar
  • 171
0 votes
1 answer
487 views

Can UDP traffic be transmitted over TCP ports on OpenVpn to avoid the TCP meltdown

I understand the TCP meltdown problem is associated with overcompensation from errors and incorrect sequencing when arriving the the receiver end. OpenVpn connections are recommended to use the UDP ...
Mervyn Heng's user avatar
1 vote
1 answer
2k views

IPSec IKEv2 on pfSense: "parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]"

I am trying to setup an IPSec IKEv2 VPN Network on a pfSense. The pfsense is situated directly behind the modem. I connect to it by a static IP address. There is no double NAT. I followed this ...
neNutzer89's user avatar
1 vote
0 answers
26 views

Personal VPN sub-network accessible through Work VPN? [closed]

I currently access my work network via Cisco VPN. At work, I have my own three computers and NAS on a personal dedicated router using my own DHCP. For several reasons, I do not want these computers to ...
Tom Foutz's user avatar
  • 111
2 votes
2 answers
611 views

Site-to-Site VPN with Sophos XG using tunnel interface

So I have configured a Sophos XG site-to-site vpn according to this document: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/...
FloatingPointOperation's user avatar
0 votes
1 answer
64 views

Why is the VPN throughput reduction different when using a cellular network and when using Ethernet? [closed]

I built a VPN server using openvpn as a protocol and measured the throughput between server and client. There are significant throughput reduction at cellular network. Throughput decreased by more ...
박준용's user avatar
4 votes
1 answer
867 views

Cisco IOS -> ASA VTI tunnel not routing traffic

I have a VTI tunnel configured between two devices (ASR and ASAv). The tunnel comes up fine and is stable, however traffic appears to be unidirectional, from the ASR -> ASAv but not in the reverse ...
btongeorge's user avatar

1
2 3 4 5
13