For questions about Virtual Private Networks (VPNs).
2
votes
2answers
57 views
Noobie network question: connect routers across floors
I have a Cisco router and a Juniper SRX550 sitting next to each other. The Cisco router is on two networks, and the SRX550 is on 3 networks. Since they're close, I could connect them directly?
If I ...
0
votes
1answer
8 views
Cisco anyconnect 4.6 client disable some security feature
Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
1
vote
0answers
24 views
Juniper SRX550 vpn question
First of all, I don't know much about VPNs, so please be patient.
I have a Juniper SRX550, and I want users from home to be able to connect to the company network via VPN.
The company I work for ...
0
votes
0answers
12 views
Routing Network through OpenVPN: Network Lost [closed]
I am trying to route my traffic through OpenVPN server so that all traffic can go through the server and I access the internet through it. Here is my route table, looks like I lost my access to the ...
1
vote
1answer
20 views
Traffic of idle OpenVPN connection [closed]
I have a mobile gateway connected to my VPN via OpenVPN and a 2G connection. Now I observe some unexpected traffic (~20MB / day) and wonder where it comes from. While I'm connected to the gateway I ...
2
votes
0answers
14 views
VPN Configuration [closed]
Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
0
votes
1answer
48 views
Cisco ASA site to site with Forcepoint stonesoft NGFW
I am try to establish a site to site VPN between Cisco ASA and Forcepoint Stonesoft NGFW, i have support that assured everything is set up correct from Forcepoint NGFW side but i have trouble from ...
1
vote
1answer
35 views
Can VPN on router connected to the modem bypass a double NAT created by two routers unbridged and connected to each other?
I can't seem to get my head around this scenario. If I am right, a VPN configured on the client-side/workstation would definitely bypass double NAT but on this scenario:
Modem <-bridged-> Router ...
0
votes
0answers
22 views
Configuring Sonicwall using Multiple WAN IPs and multiple LANs
so I am attempting to configure a Sonicwall NSA 3600 in a fairly complex setup... I know this is long, I wanted to explain my full setup and goal. YOU CAN SKIP TO THE END FOR SOME GENERAL QUESTIONS. ...
0
votes
1answer
36 views
Newby setting up a small business with an IP Credit card machine [closed]
I have a small network with a shared internet connection. I have a router separating my network and everything into an unmanaged switch. The credit card machine security ran a check and said we are ...
0
votes
0answers
44 views
Make a tunnel from small business router to Amazon VPC
I have a Cisco router for small businesses, model RV320 and would like to connect it to Amazon Virtual Private Cloud via IPSec tunnel.
My current state is that both the router and AWS say that they ...
2
votes
1answer
209 views
Cisco ASA5516 9.8(2) IKEv2 negotiation aborted due unsupported failover version
I have a site to site connection from the ASA to an Azure subscription.
The site to site session starts up fine, but after a few minutes (from 3 to 25) the connection fails. If on ASDM I open ...
1
vote
1answer
67 views
how security association (SA) is established?
I'm a newbie in networking, still struggling to understand some concepts. I was reading a text describes security association (SA) in VPN.
Whenever router R1 needs to construct an IPsec datagram for ...
2
votes
1answer
180 views
ASA5516 9.8(2) IKEv2 (no BGP) site to site connection with Azure fails
I have a Azure subscription, with a virtual network where the gateway subnet is 172.26.0.0/27, and then I have a number of subnets, e.g. 172.26.1.0/24, 172.26.2.0/24, 172.26.3.0/24, ....
On the ...
1
vote
1answer
50 views
Pass traffic from remote access to site to site tunnel
I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
0
votes
1answer
62 views
Cisco RV325 VPN to Remote Site with Multiple VLANs
We've been running a VPN over two Cisco RV325's successfully using the following mapping:
Site1: IPS="NAME=g2gips0&WEBNAME=Site2&LSUBNET=10.10.0.0&LMASK=255.255.255.0&RG_IP=71.XXX.XXX....
0
votes
0answers
47 views
Openswan VPN tunnel to CISCO connected but no Traffic - No route to host
I have configured VPN tunnel using Openswan to connect with ASA 5555 and tunnel is UP but when i telnet remote host with public IP it says no route to host but the remote host can telenet my IP.
Any ...
0
votes
2answers
22 views
One client VPN certificate for whole company, different passwords
What are the security concerns, when using OpenVPN and whole company has one client certificate, but for each client, it is exported with different password?
Should each client has its own ...
0
votes
1answer
57 views
With large file transfer packets are dropped with the error “IDP detection OOO Exceeded Max” on encryption/decryption engine subsystem
We have an in-house application for sending large files. Using TCP/IP this application uploads the files to a server on our main office network and then sends a link to the file as part of an email. ...
0
votes
1answer
51 views
Establishing connection between two 2 devices in 2 different subnets
I have a problem regarding routing between two subnets.
Here is how the structure of my company network looks like:
There's a subnet that has an IP: 172.16.218.0 (which is company's main network ...
0
votes
1answer
22 views
Connect office to multiple customer VPNs
First time post here so if this is off topic please let me know where to ask this question.
A company that provides outsource billing services to multiple client companies using VPNs to each remote ...
0
votes
0answers
24 views
Troubleshooting VPN
I have a site to site VPN from a Sonicwall TZ SOHO device to AWS VPC. It has been working for more than a year.
The Sonicall (the only side I control, the other AWS I don't have access to. It's a 3rd ...
1
vote
1answer
84 views
L2TP IPSec Remote VPN - Many users connecting remotely from same access
Can someone explain to me, why isn't possible to connect 2 or more clients to a VPN server when the users are behind the same public IP (NAT/PAT).
What I mean is: if there is already a user connected ...
0
votes
0answers
33 views
Poor VPN Performance
Initial configuraion
<internet provider WAN> -- router/modem -- switch ------ clients(s)
The "router/modem" DHCP handles 192.168.1.X.
New configuration
<internet provider WAN> -- ...
0
votes
0answers
35 views
Remote SSL VPN Overlapping
I've configured a remote SSL VPN on Cisco ASA (9.2).
The local network is 192.168.1.0/24. The server I want to reach, from remote, is 192.168.1.5. The VPN IP pools are on 192.168.40.0/24 network.
On ...
1
vote
1answer
47 views
What does 22/23 and 10.3/11.4 mean and why cannot access internet?
What does this specification mean? I asked the one who gave me this but I did not understand.
Vlan 22/23 192.168.10.3/11.4
a) Does 22/23 mean that 23 subnets have been allocated
b) The forward ...
1
vote
1answer
73 views
Latency-sensitive channel bonding
One of our satellite offices is connected by a Satellite connection with no other high bandwidth option. Reliability is good and bandwidth is acceptable (50/10 MB/s), but latency is making, ssh, VPN ...
1
vote
1answer
383 views
How should I connect two sites through the internet? [closed]
I have two sites which are 3km away from each other, both sites have internet access from the same ISP. I would like both sites to have access to each other throught the internet routers (TP-Link TD-...
1
vote
0answers
26 views
What do these commands mean in laymans terms? [closed]
I am working on a project in packet tracer and Currently am creating a VPN for my WAN-RTR to PRIVATEWANRTR to BRANCH-2 from HQ. I have successfully created the VPN and memorized the commands. However ...
2
votes
0answers
26 views
encryption gateway vs domain and source ip issues
(This is the same setup as a previous question.)
My VPN connection was no longer working (for ~4h), so I called the remote end's tech support. While we were talking, the link mysteriously started ...
0
votes
1answer
111 views
Configuring IPsec VPN and TTL
I have two sites, each using their own firewall. Once a Cisco Meraki, another a Cisco ASA. The two sites use IPsec to establish a VPN tunnel.
The Question: If each of the two sites have different ...
0
votes
0answers
19 views
IPsec VPN Setup
Below is the flow
10.1.0.0>Data Center Firewall>Internet Router> ----Internet----
So basically i am setting up new ipsec tunnel between two Cisco internet routers for branch office users to access ...
-1
votes
3answers
141 views
Connecting to subnets with IPSec VPN, how to route?
I set up a site-to-site VPN between two TP-Link routers, following the instructions here: https://www.tp-link.com/ae/faq-380.html . The VPN is based on IPSec. Now both routers say that the IPSec ...
0
votes
1answer
33 views
Will Virtual LANs slow down my network? [closed]
Will virtual LAN connections (peer to peer) like those made with https://www.freelan.org/ slow down my network?
0
votes
1answer
60 views
Is it possible to append custom data to every packet of a request? [closed]
For an end-to-site VPN, i.e. where a device (VPN client) is responsible for encapsulating the GRE packet, is it possible to send some custom data along with the GRE packet beyond just the standard ...
8
votes
3answers
1k views
How do VPN's forward network traffic? (Layer 3)
I am looking for some info on how VPN's (Virtual Private Network) forward network traffic through its VPS (Virtual Private Server).
Take an example where you are connected to a VPN. You make a ...
1
vote
1answer
75 views
How do protocols like PPTP, L2TP work below IP level
I have been using these protocols without deep understand how everything works under the hood.
I understand a process of tunneling as follows
When we are using protocols like OpenVPN, IPSec, SSH ...
4
votes
1answer
64 views
Confused on perfect forward secrecy, someone kindly help me
i just read following article In IPsec VPN, how is the pre-shared key encrypted?
got knowledge about phase 1
also basic line over PFS: for every new negotiation of Phase 2 SA the 2 gateways must ...
2
votes
1answer
65 views
Cisco ASA 5525 VPN authentication with gmail account
I'm wondering if it's possible to setup a VPN authentication to Cisco asa firewall by using gmail account?
Each time me or any of my users want to use VPN we could use our gmail credentials and it ...
1
vote
0answers
89 views
Amazon AWS VPN Bidirectional Device Access
After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC.
However, both the EC2 ...
1
vote
1answer
69 views
ASA packet routing problem after upgrade, wrong output next-hop due to vpn route?
We just replaced an ASA5510 with a new ASA5516x. Everything worked smoothly except for traffic between our network and traffic on the customer end of a site-to-site VPN tunnel.
Old system: ASA5510 ...
2
votes
2answers
171 views
redundant vpn to remote location with redundant links
I have this situation:
Remote location with 6 devices collecting data and each connected to two VPN routers. Bonding is set up for those computers and data is sent to multicast address. Each VPN ...
1
vote
1answer
59 views
IPv6 VPNs source address selection
Say I have the following IPv6 prefix assigned to me by my ISP :
2a01:1000:1000::/48 with 2a01:1000:1000::1/48 assigned to my VPN server.
I set up a VPN with a /64 from that block to assign to my ...
0
votes
2answers
309 views
IPSec VTI on Cisco ISR reporting up/up and decapsulating packets, but not encapsulating
I'm configuring a VPN connection between two sites. Site A has an ASA (9.8.2) and the other site an ISR 2911 (15.4 I think - I'll have to double check). I'm using VTIs for a routed VPN. The tunnel is ...
0
votes
0answers
95 views
Problem configuring AnyConnect on V1000 on AWS
I am trying to set up AnyConnect on a Cisco 1000V that is running in AWS. I have followed the instructions from https://supportforums.cisco.com/t5/security-documents/configure-sslvpn-on-cisco-cloud-...
0
votes
0answers
55 views
How To: SonicWall - New Subnet, Synology Fileserver connected X2, Accessable from LAN(X0) and SSL VPN
I have some specific Questions, because I cant figure out how the SonicWall works. To excuse me beforehand: I am not a SysAdmin but I need to configure the SonicWall properly. (Like thrown into the ...
1
vote
1answer
275 views
Cisco ASA IP object vs TCP/UDP object wrt VPN Filters
When it comes to managing access rules in Cisco ASAs I always use ASDM because it's easier for me to visualize, troubleshoot and manage.
I recently created a VPN filter for a S2S IPsec VPN and ...
0
votes
1answer
107 views
Tracert getting timeout on second packet consistenly
I'm on a vpn and tracing to virtualmachines that live in the VPN Server.
I've been experiencing slow queries, when they should be fast.
below is what the trace is returning.
I'm curious as to why the ...
1
vote
1answer
559 views
SonicWall is dropping encrypted packets with error “sonicwall ipsec vpn decryption failed selector check error”
I have implemented a Site-to-Site IPsec tunnel between a Juniper SSG firewall and a SonicWall.
However, any traffic that I send over the tunnel gets dropped on the SonicWall with an error saying ...
3
votes
1answer
333 views
L3 core switch and VPN access
At work we have a cisco 3560 L3 core, in which we implement all our L3 VLANs and ACLs controlling inter-vlan routing. As far as client machines are concerned, the L3 switch is the default gateway, ...
