Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
1
vote
0answers
22 views
Juniper SRX Destination NAT for L2TP server
I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks.
I've had some success with this post:
https://forums.juniper.net/t5/...
0
votes
0answers
26 views
pfSense - VPN access to the printer only
in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
2
votes
2answers
66 views
Why is VPN not a protocol?
Is VPN a layer 3 concept?
says "VPN is not a protocol".
Is VPN an application instead?
Why is VPN not a protocol?
How can I tell if something is a protocol or not?
Thanks.
2
votes
3answers
635 views
Is VPN a layer 3 concept?
From Tanenbaum's Computer Network
This demand soon led to the invention of VPNs (Virtual Private Networks),
which are overlay networks on top of public networks but with most of the properties of ...
1
vote
1answer
79 views
Keep Cisco site-to-site tunnel up permanently
I have Cisco ASA site-to-site tunnel with remote and which i don't have control.
I have following config:
crypto ikev1 policy 10
authentication pre-share
encryption aes
hash sha
group 2
...
0
votes
0answers
14 views
how do vpn apps work in order to bridge out of private telecom network to the internet [on hold]
Because recently there has been a trend in my country whereby people with telecom hosted sim-card android phones had vpn apps that allowed them to access internet without billing (i.e. without top-up-...
0
votes
0answers
12 views
VPNs and Virtual Machines [closed]
I am currently located in Indonesia and Poker is forbidden in my country. I registered an account on Pokerstars while I was in Austria (I am born and raised there). Then I moved to Indonesia.
I still ...
0
votes
0answers
13 views
How to drive traffic from a proxy server to the server using OpenVPN [closed]
There are two servers.OpenVPN and HTTP proxy with login,pass. I want to connect to the server OpenVPN, but receive traffic from the server proxy. Is it possible to configure such routing? What to use ...
1
vote
1answer
60 views
Firewall and VPN configuration?
I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
0
votes
0answers
5 views
vpn software for server can generate multi connection between server and client [closed]
I want to know which does VPN software for a server can generate multi-connection between server and client? like a download manager. a download manager can generate multi-connection and it's can get ...
2
votes
2answers
40 views
Are both VPN and NAT alternative ways to provide access to a private network?
https://en.wikipedia.org/wiki/Virtual_private_network
A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or ...
0
votes
1answer
28 views
OSPF and /30 for IPSEC VPN links on routes which support routing (as opposed to polices)
Traditionally i have always set IPSEC policies as /24 (/16 etc) on routers that had policies for encrypting IPSEC traffic (as opposed to routes).
I have since started using a router (Fortinet) that ...
1
vote
1answer
34 views
IPSec route-based vpn st0 interface
As i know, the st0 interface is used when the gateways are configured with route based VPN.
But my question is, say below is the topology
A<---->B<---->C<---->D
A and D are hosts, B and C ...
1
vote
0answers
83 views
DNS not resolving through VPN
Looking for some help with our Office's VPN that I can't seem to solve...
I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
2
votes
0answers
32 views
Question about creating Subnets for a large amount of sites that will make a site-site tunnel to our datacenter [closed]
Our data center network is:
10.20.44.X/24
I want to have our sites use 10.X.X.X/24 (Site Number, VLAN, host)
EG:
Site 30
10.30.10.X/24 10.30.20.X/24
10.X would be corporate network 20.X would be ...
0
votes
1answer
43 views
Difference between WAN and VPN(tunnels)
I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
0
votes
0answers
24 views
F5 Big IP Client VPN is disconnecting frequently!
Our VPN(F5 Big IP Client) Disconnects After Few Minutes. We are using Split tunnel as per our client requirement. I checked with our Firewall support(Sophos)they even created a unfiltered rule in case ...
0
votes
0answers
49 views
ASA - communication between 2 tunnels
I have two IPSEC tunnels with an ASA in the middle
Site A - 10.20.4.0 /24 (65.176.80.84)
Site B - 192.168.142.0 /24
ASA - 10.99.206.0 /24 (95.12.22.33
Site A - 10.20.4.0 /24 can reach the ASA and ...
-2
votes
1answer
43 views
IPSec SA being Unidirectional
From what I’ve read, IKE SAs are Birectional and IPSec SAs are unidirectional.
But if the same proposals are to be agreed by both the ends, say protocol esp, Authentication algorithm as hmac-sha1-...
0
votes
1answer
39 views
Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]
Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
3
votes
1answer
86 views
Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource
Multiple VPNs setup with a Juniper SRX320.
The SRX320 has an irb interface as follows:
irb {
unit 0 {
family inet {
address 192.168.120.1/24;
}
}
}
I've setup ...
0
votes
1answer
30 views
SonicWall global vpn
I have a SonicWall device, and I am new to them.
I created the global vpn and, after installing the SonicWall at the customer's site, wanted to make some configuration changes. I am using the global ...
0
votes
1answer
35 views
High Availability for ISR 4431 VPNs
I have the following lab setup in GNS3. R1 & R2 are VPN endpoint at my datacenters and R3 is simulating a remote site. What i'm trying to accomplish is having one tunnel from R3 to the ...
1
vote
0answers
21 views
Why can I not see the default gateway when connecting to ASA through AnyConnect?
I've configured an ASA as an AnyConnect server. The IP address pool that'll be assigned to the connecting hosts is from 192.168.10.1-192.168.10.10. Now when I establish a remote access connection to ...
1
vote
0answers
43 views
Why do the tunnel protocol on these two router show different values
Two routers R1 and R2 have a tunnel built between them in the 103.103.103.0/24 network. The end point of the tunnel are 75.75.75.2(on R1) and 76.76.76.2(on R2).
Can anyone explain why does the Tunnel ...
1
vote
1answer
26 views
Can a VPN tunnel between routers be built with different tunnel protocol on both ends?
I have two routers and the tunnel between them is up and working well. Router1 has GRE/IP as the protocol on its tunnel interface, and as for Router2 the tunnel interface is working with IPSEC/IP. Can ...
3
votes
1answer
213 views
AWS - VPC/VPN - new non-redundant VPN connections notification
Apologies if this isn't the place.
I have an AWS VPC VPN issue whereby I am getting a notification in the site-to-site VPN tab under VPC stating that I have new non-redundant VPN connections (please ...
3
votes
1answer
96 views
Azure VPN vs. Cisco ASA
I have a Cisco 5516-x with v9.7(1)21 on my end and I am trying to create a working VPN to Azure. It looks to me like phase1 goes well but phase2 fails due to policy mismatch.
Any suggestions for how ...
0
votes
0answers
34 views
ShrewSoft VPN client not working over IPSEC VPN tunnel
I have a IPSEC VPN tunnel between 2 locations. From Site A we are allowing the VPN range of 192.168.2.0/24 over to Site B. When users use the AnyConnect client they are able to connect successfully ...
2
votes
2answers
30 views
Wireguard protocol understanding source of the received packet
From the docs,
WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following:
This packet is meant for ...
2
votes
1answer
48 views
Wireguard protocol understanding where the packet got sent
From the docs,
WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following:
This packet is meant for ...
1
vote
2answers
44 views
AWS site-to-site VPN and multiple account VPC connections
I've configured a site-to-site VPN from our firewall (watchguard) to AWS.
Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
0
votes
1answer
44 views
VPN MPLS L3 Routing
I have this vpn mpls l3 scenario:
Let's say that the host (10.1.1.2) of customer 1 wants to communicate with host (10.1.2.2) of customer 2. My question is: how R2 knows that it has to forward ...
2
votes
1answer
76 views
Cisco ASA Dial in VPN access Devices on Site-to-Site VPN
Questions
1) What do I need to run to get this to allow the on-site to talk to the dial-in network clients E.G ping from 10.101.1.7 to 10.101.2.1?
2) What do I need to run to get the dial-in network ...
3
votes
1answer
53 views
Group VPN between vMX as a member and a cisco router as a Group Controller
I am trying to set up a Group VPN between a cisco GC/KS and 3 vMX router (14.1R1.10) and another cisco router as a member. I've managed to get the Group VPN working between the two cisco router, but I ...
3
votes
2answers
223 views
IKE phase 1 and phase 2
Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere.
Phase ...
0
votes
1answer
296 views
Port Forward for OpenVPN Server behind two routers [closed]
I am stuck how to establish port forwarding between the Internet and an OpenVPN server behind two routers. I need the first router as an Internet DSL modem and VoIP phone access (both services from ...
0
votes
1answer
47 views
How to setup OpenVPN to PFsense? [closed]
How to setup OpenVPN to PFsense?
My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to
Advanced Configuration -> Custom options
tls-client
tls-version-min 1.2
tls-...
1
vote
1answer
40 views
Shared secret key for Diffie-Hellman key exchange
From what i have learnt,in Asymmetric key there is public key and a private key.
For instance:
Step 1: Alice and Bob get public numbers P = 23, G = 9
Step 2: Alice selected a private key a = 4 and
...
2
votes
1answer
89 views
Why do we need MPLS when implementing L2/L3 VPNs?
Yes, I know that MPLS doesn't care about L3 and higher levels and it is one of its features. But I do not really understand its role in L2/L3 VPNs.
L2VPN - we are building xconnects to PE's AC. Why ...
1
vote
1answer
31 views
Network Security Tunnel
In the Tunnel Interface, when I edit the tunnel information, it shows:
Attributes Values
Tunnel Source IF10
Tunnel Destination 1.0.0.1
Tunnel Mode GRE
What does IF10 ...
2
votes
2answers
70 views
Noobie network question: connect routers across floors
I have a Cisco router and a Juniper SRX550 sitting next to each other. The Cisco router is on two networks, and the SRX550 is on 3 networks. Since they're close, I could connect them directly?
If I ...
1
vote
1answer
45 views
Cisco anyconnect 4.6 client disable some security feature
Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
1
vote
0answers
39 views
Juniper SRX550 vpn question
First of all, I don't know much about VPNs, so please be patient.
I have a Juniper SRX550, and I want users from home to be able to connect to the company network via VPN.
The company I work for ...
1
vote
1answer
62 views
Traffic of idle OpenVPN connection [closed]
I have a mobile gateway connected to my VPN via OpenVPN and a 2G connection. Now I observe some unexpected traffic (~20MB / day) and wonder where it comes from. While I'm connected to the gateway I ...
2
votes
0answers
19 views
VPN Configuration [closed]
Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
1
vote
1answer
155 views
Cisco ASA site to site with Forcepoint stonesoft NGFW
I am try to establish a site to site VPN between Cisco ASA and Forcepoint Stonesoft NGFW, i have support that assured everything is set up correct from Forcepoint NGFW side but i have trouble from ...
2
votes
1answer
313 views
Can VPN on router connected to the modem bypass a double NAT created by two routers unbridged and connected to each other?
I can't seem to get my head around this scenario. If I am right, a VPN configured on the client-side/workstation would definitely bypass double NAT but on this scenario:
Modem <-bridged-> Router ...
0
votes
1answer
39 views
Newby setting up a small business with an IP Credit card machine [closed]
I have a small network with a shared internet connection. I have a router separating my network and everything into an unmanaged switch. The credit card machine security ran a check and said we are ...
3
votes
1answer
551 views
Cisco ASA5516 9.8(2) IKEv2 negotiation aborted due unsupported failover version
I have a site to site connection from the ASA to an Azure subscription.
The site to site session starts up fine, but after a few minutes (from 3 to 25) the connection fails. If on ASDM I open ...
