Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
617
questions
1
vote
1answer
14 views
Can I set fragmented IPv4 packet's DF bit to '1'? [duplicate]
If make DF to 1, can I confirm that fragmented packet with DF=1 will go through routers to the dest IP without any reassembly and re-fragmentation?
0
votes
0answers
17 views
How to remotely access my home VPN internet connection [closed]
I'm living in a country where the internet is fast but highly censored. I've set up a VPN server based in the US, but I'm only able to receive a reasonably fast stream of data from it on my home ...
0
votes
0answers
14 views
Using a local DNS server while connected to a VPN on a windows PC [closed]
I have a home network with most devices running NordVPN.
I have a raspberry pi acting as a mini home server - and have just started using Pi-Hole a DNS program that points various tracking and ...
0
votes
0answers
27 views
openvpn-client in docker container port forward from openvpn-server not working [closed]
I have set-up a port forwarding at my VPN provider like:
VPN_EXT_IP:60000 --> VPN_INT_CLIENT_IP:60000
I have a docker-compose which looks something like:
version: "3.5"
networks:
ext:
...
1
vote
0answers
18 views
TACACS Through ASA L2L Tunnel
Hello see below network diagram.
I am trying to configure the Branch Router (10.1.1.1) to use TACACS AAA on the HQ-AAA-Server host (192.168.10.10). TACACS works fine for the Branch-FW1 ASA device ...
1
vote
2answers
65 views
Protecting RDP connections, full remote control
In my workplace people are connecting with their PCs (with Windows on them) through basic RDP when they work from home. The only precaution taken is changing default 3389 port to a diffrent one and ...
3
votes
0answers
59 views
SSH to ASA on Exit Side Of VPN Tunnel
I have a functioning L2L tunnel between two ASA devices (HQ-FW1 and Branch-FW1 on the diagram).
HQ-PC2 - 192.168.10.21
HQ-FW1 eth0 - 192.168.20.2 (outside)
HQ-FW1 eth1 - 192.168.10.2 (inside)
Branch-...
3
votes
2answers
131 views
TACACS+ AAA over L2L VPN
I have a practice network set up with the relevant topography shown in the below image:
I have TACACS+ running on HQ-AAA-Server (192.168.10.10) and AAA working using it on HQ (IOS) and HQ-FW1 (ASA). ...
2
votes
1answer
61 views
Cisco ASA Clientless SSL VPN Apply Tunnel Group
I'm trying to implement the answer from a previous question I've asked (Cisco ASA Clientless SSL VPN Restrict Network Access)
My ultimate aim is to set up an SSL VPN on a Cisco ASA device to allow ...
1
vote
1answer
56 views
Cisco ASA Clientless SSL VPN Restrict Network Access
I'm working on a Uni project to set up a secure network. One aspect is to have a VPN for clients of the imaginary company to access web based services.
I have set up a simple clientless SSL VPN which ...
3
votes
1answer
62 views
Wireshark Decrypting IKEv1 Text PSK to Hex
I'm trying to debug a Cisco VPN setup as part of a Uni Lab (so please don't worry about posting of keys etc. it's just a toy setup with no internet facing connection).
I want to decrypt the IKEv1 ...
0
votes
1answer
38 views
Can UDP traffic be transmitted over TCP ports on OpenVpn to avoid the TCP meltdown
I understand the TCP meltdown problem is associated with overcompensation from errors and incorrect sequencing when arriving the the receiver end. OpenVpn connections are recommended to use the UDP ...
0
votes
1answer
290 views
IPSec IKEv2 on pfSense: "parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]"
I am trying to setup an IPSec IKEv2 VPN Network on a pfSense. The pfsense is situated directly behind the modem. I connect to it by a static IP address. There is no double NAT. I followed this ...
1
vote
0answers
19 views
Personal VPN sub-network accessible through Work VPN? [closed]
I currently access my work network via Cisco VPN.
At work, I have my own three computers and NAS on a personal dedicated router using my own DHCP. For several reasons, I do not want these computers to ...
2
votes
2answers
209 views
Site-to-Site VPN with Sophos XG using tunnel interface
So I have configured a Sophos XG site-to-site vpn according to this document:
https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/...
0
votes
1answer
47 views
Why is the VPN throughput reduction different when using a cellular network and when using Ethernet? [closed]
I built a VPN server using openvpn as a protocol and measured the throughput between server and client.
There are significant throughput reduction at cellular network. Throughput decreased by more ...
4
votes
1answer
280 views
Cisco IOS -> ASA VTI tunnel not routing traffic
I have a VTI tunnel configured between two devices (ASR and ASAv). The tunnel comes up fine and is stable, however traffic appears to be unidirectional, from the ASR -> ASAv but not in the reverse ...
1
vote
1answer
56 views
Internal network inside an internal network
I have the task to integrate 4 PCs (1 server, 3 workers) into a local network (from a bigger organization). The admin of that network only allows me to integrate the server directly into the network (...
0
votes
1answer
63 views
VPN/IPsec router support in Packet Tracer
I would like to know, if a router doesn't support VPN (meaning it can't be used as a VPN server) can it still route an IPsec packet?
And which router I should use as a server for IPSec (AH tunnel mode)...
0
votes
0answers
40 views
Multiple Site-To-Site VPN
I'm trying to set a VPN that allows all site: site0-4 to communicate with each other. The site called otherSite should not be in the VPN.
Note that there's a NAT for site 0, 1 and 2 but site 3,4 only ...
1
vote
1answer
50 views
Site to site vpn setup
I am trying to set up a small network for my startup. We have 2 small servers at separate locations and would like to set up a vpn thorugh which the 2 servers can talk to each other and through which ...
1
vote
0answers
286 views
IKEv2 between Cisco router and Google cloud VPN
Hey I'm trying to create a tunnel between cisco router and google cloud vpn (client site) but the connection is stuck on stage 2 (UP-IDLE), need help where the problem may lie.
Some debug that I get ...
1
vote
1answer
105 views
WatchGuard Geo Location for restricting access to VPN and "Access Portal"
Problem
We want to use WatchGuard's Geo Location to restrict access to our "Access Portal" and "Mobile VPN" connections, but see no options and the corresponding "Firewall ...
1
vote
0answers
176 views
UNIFI USG GATEWAY IPSEC OVER L2TP VPN [closed]
At my office I have a Unifi USG Gateway that currently has 3 IPSEC VPN Tunnels (Lan-To-Lan VPN) configured. I also have a L2TP Remote VPN Network configured so that when I'm outside of my office I can ...
0
votes
1answer
28 views
what is significance of proxy id while configuring site to site vpn tunnel . why we should use proxy id and in which scenarios
i came know about proxy id configuration for first time. when iam troubleshooting site to site vpn tunnel configuration along with vendor . post configuring proxy id issue got resolved . But iam still ...
0
votes
2answers
93 views
Concurrent site-to-site VPN tunnels through dual ISPs (with 2 couples of Cisco ASA) between same devices
I currently have a simple site-to-site VPN setup, connecting machines from site 1 to site 2 through 1 ISP, using a set of ASA 5506X. All is good.
I'd like to "double" that setup for ...
0
votes
0answers
20 views
MPLS provider A L3VPN to MPLS provider B migration
i have a Datacenter infraestructure with a mpls of SP A, and i would like to migrate to another wan line of a different SP B. Mpls current circuit is providing L3 VPN service, one VPN per remote site. ...
1
vote
0answers
1k views
Cisco site-to-site VPN tunnel Failed to find a matching policy [closed]
I have PaloAlto (PA) and Cisco ASA 5585-X located on two different sites, trying to configure IPsec VPN tunnel.
[PA]-----------(internet)-----------[Cisco ASA]
If i ping from Cisco ASA side lan to PA ...
0
votes
1answer
378 views
How to connect to different VLANs through VPN
I have the following setup:
I have setup a Layer 3 Switch with multiple VLANs
Multiple devices are connected to it on different VLANs via untagged access ports
There is also a router connected to the ...
1
vote
1answer
165 views
VPN with Cisco virtual ASA on Azure not routing correctly
I've deployed a Cisco virtual ASA in Azure to use as a VPN server. For simplicity, I'm using just the management interface as the lan for the time being (10.2.0.4 is the interface). I want to use the ...
0
votes
1answer
18 views
VPN protected resource and accessible via authenicated API - design [closed]
let's imagine a simple system deployed on GCP. There is public, authenticated (token, IP whitelisting) API exposed by our system. There is a protected resource R (SQL database) that is accessible by ...
1
vote
0answers
26 views
Does modifying a ASA tunnel create a downtime?
I inherited a cisco ASA, I never really had to manage one before. But, I need to modify an existing tunnel to add IP addresses to both the local and remote traffic selector, specifically there are ...
3
votes
1answer
139 views
Can a server on the other end of a site-to-site vpn be exposed (NATd) to a public IP on an ASA
AWS DataCenter
----------- site-to-site VPN ------------
http server <=======================> Cisco ASA public address
10.0.1.59:443 ...
2
votes
0answers
41 views
Router on one side of a GRE tunnel not adding OSPF route through the tunnel whilst the router on the other side is
I have configured GRE tunnel between the Dublin and Carlow routers with the following commands:
//Carlow
int tunnel 0
ip address 172.16.12.1 255.255.255.252
tunnel source s0/0/0
tunnel destination 87....
0
votes
0answers
38 views
Why public VIF must be used in AWS Direct Connect + VPN setup?
I am unsure why public VIF must be used in AWS Direct Connect + VPN setup. Usually if you are connecting to Virtual Private Gateway you should use private VIF as shown in AWS Managed VPN
Diagram on ...
0
votes
2answers
36 views
Is connecting via 2 VPNs secure
I know there are VPN services like Speedify that you can connect to with 2 internet connections wired and wifi to combine them on their servers to get a faster connection and then connect to what you'...
0
votes
1answer
78 views
Cisco IPsec VPN tunnel problem
I have a problem with VPN configuration. This is the topology I created:
First updated licenses to make the VPN available:
license boot module c1900 technology-package securityk9
IPsec Router ...
2
votes
1answer
67 views
MPLS-BGP - VPN isolation - RFC 4364
In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
0
votes
1answer
21 views
What is a child tunnel? [closed]
I only heard this term today, but it was explained to me as a point-to-point VPN (so, two routers with a VPN tunnel established between them) and a firewall configured to only allow certain hosts to ...
0
votes
0answers
52 views
Editing a crypto map with multiple entries
We're attempting to bring up an IPSEC tunnel with a Vendor. An engineer created the crypto map and wasnt able to establish a connection. I edited the entry to change the diffie-hillman group and the ...
0
votes
1answer
48 views
Easiest setup to replace jumpbox forwarding [closed]
In order to connect to some of machines, what I currently do is:
Connect to VPN (using AnyConnect)
SSH to my jumpbox via VPN
For every single machine that I want to access using ssh, I have to map ...
1
vote
1answer
55 views
Is a VPN just a proxy which encryts data to the vpn server?
I have trouble understanding the concept of a VPN in contrast to a proxy.
Is it true, that the VPN just encrypts the data which is send from the client to the vpn server and "rest" behaves ...
1
vote
1answer
58 views
Site to site ASA Routing question
I am doing a lab about DMVPN and Site to Site ASA integration. There is no problem in the DMVPN.
However I have problem in establishing route from Site to Site ASA to DMVPN.
The router on the left is ...
1
vote
0answers
37 views
Windows L2TP VPN issues when accessing Site to Site VPN on Cisco 5506
We have two Site to Site VPNs and Remote Access VPN configured. Using the builtin IPsec client on OSX all subnets are accessible however when using L2TP built in client on Windows 10 ICMP traffic ...
0
votes
1answer
53 views
client <--> server <--> client VPN?
I have the following use case for which I need to figure out a VPN solution.
100+ remote locations
Each remote location has several users that should be able to connect to only that remote location
...
0
votes
1answer
73 views
What is method to switch group-policy on a tunnel-group upon user login?
We have ASA units that have tunnel-groups that have a particular group-policy defined via default-group-policy statement. This initial group-policy ("NOACCESS") is one that prevents any ...
1
vote
1answer
79 views
what is significance and role and function lifetime in IPSEC Site to Site VPN . Please explain importance and role of lifetime in VPN
I Came across incident where i need to troubleshoot IPSEC Site to Site connectivity issue . The term "lifetime" confuses me . please anyone explain me importance of lifetime in VPN . Whats ...
0
votes
1answer
61 views
What can I use to display VPN instance instead of stelnet?
How can ı connect VPN service with use ssh in Huawei Atn980c ? Which command? I researched but i didnt different command. I found only this command; stelnet x.x.x.x (VPN instance) (service name) (port ...
1
vote
1answer
153 views
Confusion about Route based IPSEC site-site vpn and policy based IPSEC site-site VPN
I am confused about the major difference between a policy-based VPN and routed-based site-site Vpn
1
vote
1answer
182 views
Juniper QFX Site to Site VPN
Im trying to setup a site to site vpn between two Juniper QFX5110's. Each end of the link is on the same subnet (so directly connected switches over dark fibre). I have configured each physical ...
