Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
0
votes
0answers
16 views
Not able to forward traffic from `tun` interface to `lo` [on hold]
I am writing a small VPN server, in which for a certain ip address, I am passing the traffic through an http proxy.
Current Setup
TUN interface is up and running at 10.0.2.0/24
iptables ...
0
votes
0answers
12 views
How do I force SonicWall TZ300 X2 port to be a specific VLAN
I have a SonicWall VPN for my personal internet, however I have my jobs VPN connected to a VLAN25. I am trying to figure out how to connect another dedicated PC that is a work PC to the TZ300 on port ...
2
votes
2answers
16 views
Wireguard protocol understanding source of the received packet
From the docs,
WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following:
This packet is meant for ...
2
votes
1answer
22 views
Wireguard protocol understanding where the packet got sent
From the docs,
WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following:
This packet is meant for ...
1
vote
2answers
23 views
AWS site-to-site VPN and multiple account VPC connections
I've configured a site-to-site VPN from our firewall (watchguard) to AWS.
Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
0
votes
1answer
40 views
VPN MPLS L3 Routing
I have this vpn mpls l3 scenario:
Let's say that the host (10.1.1.2) of customer 1 wants to communicate with host (10.1.2.2) of customer 2. My question is: how R2 knows that it has to forward ...
0
votes
0answers
13 views
Connecting remote sites with multiple hosts [on hold]
I want to connect equipment at around 15 remote locations back to a central server. Each remote site will have 2-4 hosts locally. I'm planning on using a VPN to connect back to the central server. ...
0
votes
0answers
13 views
Choosing the right Active Directory for my network [closed]
I currently manage my users "manually" on a network that began with 3 people and 3 computers. Now I have 4 users with their own computer, 4 computers used by parttime people and a second site in ...
2
votes
0answers
23 views
Cisco ASA Dial in VPN access Devices on Site-to-Site VPN
Questions
1) What do I need to run to get this to allow the on-site to talk to the dial-in network clients E.G ping from 10.101.1.7 to 10.101.2.1?
2) What do I need to run to get the dial-in network ...
3
votes
1answer
31 views
Group VPN between vMX as a member and a cisco router as a Group Controller
I am trying to set up a Group VPN between a cisco GC/KS and 3 vMX router (14.1R1.10) and another cisco router as a member. I've managed to get the Group VPN working between the two cisco router, but I ...
3
votes
2answers
83 views
IKE phase 1 and phase 2
Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere.
Phase ...
0
votes
1answer
140 views
Port Forward for OpenVPN Server behind two routers [closed]
I am stuck how to establish port forwarding between the Internet and an OpenVPN server behind two routers. I need the first router as an Internet DSL modem and VoIP phone access (both services from ...
0
votes
1answer
33 views
How to setup OpenVPN to PFsense? [closed]
How to setup OpenVPN to PFsense?
My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to
Advanced Configuration -> Custom options
tls-client
tls-version-min 1.2
tls-...
1
vote
1answer
35 views
Shared secret key for Diffie-Hellman key exchange
From what i have learnt,in Asymmetric key there is public key and a private key.
For instance:
Step 1: Alice and Bob get public numbers P = 23, G = 9
Step 2: Alice selected a private key a = 4 and
...
2
votes
1answer
70 views
Why do we need MPLS when implementing L2/L3 VPNs?
Yes, I know that MPLS doesn't care about L3 and higher levels and it is one of its features. But I do not really understand its role in L2/L3 VPNs.
L2VPN - we are building xconnects to PE's AC. Why ...
1
vote
1answer
30 views
Network Security Tunnel
In the Tunnel Interface, when I edit the tunnel information, it shows:
Attributes Values
Tunnel Source IF10
Tunnel Destination 1.0.0.1
Tunnel Mode GRE
What does IF10 ...
2
votes
2answers
68 views
Noobie network question: connect routers across floors
I have a Cisco router and a Juniper SRX550 sitting next to each other. The Cisco router is on two networks, and the SRX550 is on 3 networks. Since they're close, I could connect them directly?
If I ...
1
vote
1answer
25 views
Cisco anyconnect 4.6 client disable some security feature
Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
1
vote
0answers
27 views
Juniper SRX550 vpn question
First of all, I don't know much about VPNs, so please be patient.
I have a Juniper SRX550, and I want users from home to be able to connect to the company network via VPN.
The company I work for ...
1
vote
1answer
36 views
Traffic of idle OpenVPN connection [closed]
I have a mobile gateway connected to my VPN via OpenVPN and a 2G connection. Now I observe some unexpected traffic (~20MB / day) and wonder where it comes from. While I'm connected to the gateway I ...
2
votes
0answers
17 views
VPN Configuration [closed]
Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
1
vote
1answer
94 views
Cisco ASA site to site with Forcepoint stonesoft NGFW
I am try to establish a site to site VPN between Cisco ASA and Forcepoint Stonesoft NGFW, i have support that assured everything is set up correct from Forcepoint NGFW side but i have trouble from ...
2
votes
1answer
157 views
Can VPN on router connected to the modem bypass a double NAT created by two routers unbridged and connected to each other?
I can't seem to get my head around this scenario. If I am right, a VPN configured on the client-side/workstation would definitely bypass double NAT but on this scenario:
Modem <-bridged-> Router ...
0
votes
1answer
38 views
Newby setting up a small business with an IP Credit card machine [closed]
I have a small network with a shared internet connection. I have a router separating my network and everything into an unmanaged switch. The credit card machine security ran a check and said we are ...
3
votes
1answer
361 views
Cisco ASA5516 9.8(2) IKEv2 negotiation aborted due unsupported failover version
I have a site to site connection from the ASA to an Azure subscription.
The site to site session starts up fine, but after a few minutes (from 3 to 25) the connection fails. If on ASDM I open ...
2
votes
1answer
104 views
how security association (SA) is established?
I'm a newbie in networking, still struggling to understand some concepts. I was reading a text describes security association (SA) in VPN.
Whenever router R1 needs to construct an IPsec datagram for ...
3
votes
1answer
278 views
ASA5516 9.8(2) IKEv2 (no BGP) site to site connection with Azure fails
I have a Azure subscription, with a virtual network where the gateway subnet is 172.26.0.0/27, and then I have a number of subnets, e.g. 172.26.1.0/24, 172.26.2.0/24, 172.26.3.0/24, ....
On the ...
1
vote
1answer
61 views
Pass traffic from remote access to site to site tunnel
I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
1
vote
1answer
119 views
Cisco RV325 VPN to Remote Site with Multiple VLANs
We've been running a VPN over two Cisco RV325's successfully using the following mapping:
Site1: IPS="NAME=g2gips0&WEBNAME=Site2&LSUBNET=10.10.0.0&LMASK=255.255.255.0&RG_IP=71.XXX.XXX....
0
votes
2answers
27 views
One client VPN certificate for whole company, different passwords
What are the security concerns, when using OpenVPN and whole company has one client certificate, but for each client, it is exported with different password?
Should each client has its own ...
1
vote
1answer
76 views
With large file transfer packets are dropped with the error “IDP detection OOO Exceeded Max” on encryption/decryption engine subsystem
We have an in-house application for sending large files. Using TCP/IP this application uploads the files to a server on our main office network and then sends a link to the file as part of an email. ...
1
vote
1answer
71 views
Establishing connection between two 2 devices in 2 different subnets
I have a problem regarding routing between two subnets.
Here is how the structure of my company network looks like:
There's a subnet that has an IP: 172.16.218.0 (which is company's main network ...
1
vote
1answer
30 views
Connect office to multiple customer VPNs
First time post here so if this is off topic please let me know where to ask this question.
A company that provides outsource billing services to multiple client companies using VPNs to each remote ...
2
votes
1answer
185 views
L2TP IPSec Remote VPN - Many users connecting remotely from same access
Can someone explain to me, why isn't possible to connect 2 or more clients to a VPN server when the users are behind the same public IP (NAT/PAT).
What I mean is: if there is already a user connected ...
2
votes
1answer
51 views
What does 22/23 and 10.3/11.4 mean and why cannot access internet?
What does this specification mean? I asked the one who gave me this but I did not understand.
Vlan 22/23 192.168.10.3/11.4
a) Does 22/23 mean that 23 subnets have been allocated
b) The forward ...
2
votes
1answer
91 views
Latency-sensitive channel bonding
One of our satellite offices is connected by a Satellite connection with no other high bandwidth option. Reliability is good and bandwidth is acceptable (50/10 MB/s), but latency is making, ssh, VPN ...
1
vote
1answer
384 views
How should I connect two sites through the internet? [closed]
I have two sites which are 3km away from each other, both sites have internet access from the same ISP. I would like both sites to have access to each other throught the internet routers (TP-Link TD-...
1
vote
0answers
27 views
What do these commands mean in laymans terms? [closed]
I am working on a project in packet tracer and Currently am creating a VPN for my WAN-RTR to PRIVATEWANRTR to BRANCH-2 from HQ. I have successfully created the VPN and memorized the commands. However ...
2
votes
0answers
29 views
encryption gateway vs domain and source ip issues [closed]
(This is the same setup as a previous question.)
My VPN connection was no longer working (for ~4h), so I called the remote end's tech support. While we were talking, the link mysteriously started ...
0
votes
1answer
188 views
Configuring IPsec VPN and TTL
I have two sites, each using their own firewall. Once a Cisco Meraki, another a Cisco ASA. The two sites use IPsec to establish a VPN tunnel.
The Question: If each of the two sites have different ...
0
votes
0answers
19 views
IPsec VPN Setup
Below is the flow
10.1.0.0>Data Center Firewall>Internet Router> ----Internet----
So basically i am setting up new ipsec tunnel between two Cisco internet routers for branch office users to access ...
-1
votes
3answers
247 views
Connecting to subnets with IPSec VPN, how to route?
I set up a site-to-site VPN between two TP-Link routers, following the instructions here: https://www.tp-link.com/ae/faq-380.html . The VPN is based on IPSec. Now both routers say that the IPSec ...
0
votes
1answer
37 views
Will Virtual LANs slow down my network? [closed]
Will virtual LAN connections (peer to peer) like those made with https://www.freelan.org/ slow down my network?
0
votes
1answer
63 views
Is it possible to append custom data to every packet of a request? [closed]
For an end-to-site VPN, i.e. where a device (VPN client) is responsible for encapsulating the GRE packet, is it possible to send some custom data along with the GRE packet beyond just the standard ...
8
votes
3answers
1k views
How do VPN's forward network traffic? (Layer 3)
I am looking for some info on how VPN's (Virtual Private Network) forward network traffic through its VPS (Virtual Private Server).
Take an example where you are connected to a VPN. You make a ...
2
votes
1answer
122 views
How do protocols like PPTP, L2TP work below IP level
I have been using these protocols without deep understand how everything works under the hood.
I understand a process of tunneling as follows
When we are using protocols like OpenVPN, IPSec, SSH ...
4
votes
1answer
69 views
Confused on perfect forward secrecy, someone kindly help me
i just read following article In IPsec VPN, how is the pre-shared key encrypted?
got knowledge about phase 1
also basic line over PFS: for every new negotiation of Phase 2 SA the 2 gateways must ...
2
votes
1answer
73 views
Cisco ASA 5525 VPN authentication with gmail account
I'm wondering if it's possible to setup a VPN authentication to Cisco asa firewall by using gmail account?
Each time me or any of my users want to use VPN we could use our gmail credentials and it ...
1
vote
0answers
117 views
Amazon AWS VPN Bidirectional Device Access
After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC.
However, both the EC2 ...
1
vote
1answer
93 views
ASA packet routing problem after upgrade, wrong output next-hop due to vpn route?
We just replaced an ASA5510 with a new ASA5516x. Everything worked smoothly except for traffic between our network and traffic on the customer end of a site-to-site VPN tunnel.
Old system: ASA5510 ...
