Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
1 vote
1 answer
33 views

IPSec Site to Site VPN Connected but Subnets not Routing [closed]

Re: Creating a site to site vpn from ubuntu 22 + strongswan to cisco meraki Issue: I've established a vpn tunnel but routing between clients on the network is not working. meraki config: Non-Meraki ...
Matt Campbell's user avatar
0 votes
0 answers
6 views

Client Failure Connecting to Strongswan Server [closed]

I currently have an embedded VPN device that I have limited access to configure. I am unsure even what software it is using to create the connection. I can only (through the vender UI) change the hub ...
mystro79's user avatar
0 votes
0 answers
10 views

How do I setup a VPN in a hidden server, accessaed via a reverse ssh tunnel to a server in the wild? [closed]

I have my hover server 'TOM', which only has port 80 forwarded to it from the web. TOM has an active ssh tunnel to a server in the web 'ERIK', with remote tunneling to enable ssh from ERIK back to TOM....
Adeerlike's user avatar
  • 101
0 votes
0 answers
13 views

how to access the feed of an RTSP server that lives on a network with dynamic IP [closed]

I am creating a project that consists of two devices, the first is a Raspberry with an IP camera, and the second computer does some image processing. I wanted to know if there is a way to access the ...
carlosbravo1048's user avatar
0 votes
1 answer
26 views

Public wifi router conflicts with company VPN IP address [closed]

I'm a digital nomad and I like to work in cafes and co-working spaces. The problem is that sometimes the network router IP address conflicts with my company's VPN-client IP address. Any and all ...
Nick Bonilla's user avatar
1 vote
0 answers
19 views

Issue with Cisco ASA IPSec VPN clients can't access DMZ network

I have one ASA that is configured for IPSec VPN Cisco client. The VPN allow access to inside network, but trying to get it to my DMZ is a problem. My VPN address pool is defined as 124.140.1.x /24. My ...
Steve's user avatar
  • 11
1 vote
1 answer
64 views

BGP: Are Virtual Internet Exchanges more efficient than normal internet transit?

There are a number of virtual internet exchanges that BGP peer over VPN links when local presence is not available. Given the IP encapsulation overhead, and the fact that these routes still cross the ...
KJ7LNW's user avatar
  • 167
0 votes
1 answer
89 views

Troubleshooting ipsec ikev2 site to site vpn

I assume, for peer IP we use, is the wan interface of the Cisco ASA and not the gateway of the ISP correct? Also, all routes should go to the same IP of the wan interface correct? So we have two Cisco ...
user1378803's user avatar
0 votes
1 answer
34 views

Unable to configure Site to Site VPN between Cisco Router & Cisco ASA and permit SSH

I am performing configuration on Cisco ASA and Cisco Router from the packet tracer. I am attempting to allow the external network (172.16.22.100 255.255.255.0) to access the internal server which is ...
iloveearth_12345's user avatar
0 votes
1 answer
59 views

How will you determine if the issue with VPN is on remote site or local site?

If a remote host connected to a server via VPN is not able to ping the server, how'd you determine if the issue is with VPN at "server side" or VPN at "client side"?
barnyard9's user avatar
0 votes
1 answer
110 views

Is this the right way to expose VLANs through VPN (VPN server location)?

Starting from the following network topology: Internet --- ISP Cable Router --- Firewall --- Router --- rest of the network / multiple VLANs (port forwarding) | ...
Kraal's user avatar
  • 101
1 vote
1 answer
434 views

MTU for WireGuard over IPv6

What would be the optional MTU for a virtual WireGuard link transmitting over IPv6 to avoid unnecessary fragmentation? Here is how I approached the calculation: [IPv6 Header] - 40 bytes [Some IPv6 ...
Moss Richardson's user avatar
0 votes
1 answer
100 views

Site to Site VPN using GNS3

I'm sorry if this a really vague question - but I am trying to get my head around a problem and a possible solution. I'm not really a network guy (not to the depths of you guys) - I'm a PLC ...
Robt800's user avatar
0 votes
1 answer
103 views

What's the difference between RED and VPN?

I know that RED is Remote Ethernet Device and VPN is Virtual Private Network. But I think that they work as the same way. Someone can help me?
Jonas Lucas's user avatar
0 votes
1 answer
42 views

Connect site-to-site private networks [closed]

I used VPN to connect site-to-site private networks from A to B. It worked fine. Then I used NAT for (1) hiding private networks and (2) LAN of 2 sites could access the Internet. The problem is that ...
Gekko's user avatar
  • 27
0 votes
0 answers
387 views

Pfsense NAT with site-to-site VPN

For a client I am building a network solution that enables them expanding their available online presence. I am running into a problem with port forwarding to an IP which is routed over an OpenVPN L3 ...
Koen Vuurens's user avatar
0 votes
1 answer
141 views

Routing in Azure subnet to on-premise and out vpn-tunnel

We are trying to establish a connection from Azure VNET(10.10.0.0/16) over S2S VPN Tunnel (VpnGw1) to on-premise network (192.168.1.0/24) and then out through sonic wall to second VPN Tunnel to ...
Jayden's user avatar
  • 103
1 vote
1 answer
51 views

Maintenance access to customers over VPN with same network on each side

We are a small company that manufactures machines for the industry. What I need today is an access to the machines when they are in our workshop (construction and adjustment) but also, and this is ...
Meloman's user avatar
  • 111
0 votes
2 answers
191 views

IPsec PFS Confusion

I'm reading conflicting things about how PFS works in IPsec. Some sources say it's simply a renegotiation of the Phase 1 IKE/ISAKMP SA that ignores the original IKE/ISAKMP SA lifetime value and that ...
Ceejus's user avatar
  • 1
1 vote
1 answer
109 views

VPN doesn't work

I'm trying to configure VPN between 2 routers: R1: public IP is 200.0.0.6/30 on S0/0/1, private IP are 10.0.0.0/8 and 20.0.0.0/8 R3: public IP is 210.10.0.6/30 on S0/0/0, private IP is 192.168.3.0/24 ...
Gekko's user avatar
  • 27
1 vote
1 answer
182 views

Route traffic from firewall tunnel interface to server in Azure [closed]

On premise is a NAS that users access for file storage. Their AD server for authentication and GPO is in Azure. For remote users, they have a Remote Access VPN client in which they connect to the ...
David Sain's user avatar
0 votes
0 answers
202 views

multi-site vpn with only one site reliably addressable from the web at large

i have a small network like so: site-31: wan public ip (dynamic) on isp fibre is reachable from the outside world. an automatically updated dns entry is maintained to keep the ip current whenever ...
grenade's user avatar
  • 101
1 vote
3 answers
238 views

UDP encrypted packets

I am analysing a Wireshark capture as part of understanding UDP/TCP, DNS and HTTP concepts and how packets are sent. I found an interesting sequence of messages in the Wireshark file, but I am not ...
Tita's user avatar
  • 123
2 votes
4 answers
274 views

Difference between Zero Trust Architecture and VPN + MitM Access Rights Management at Gateway

I am currently evaluating Next-Generation Firewall concepts and features and remembered about the Zero Trust networking model. I do find the notion of "trust nothing" in the context of ...
alex's user avatar
  • 157
0 votes
1 answer
217 views

Can you sniff network traffic through a VPN tunnel? [closed]

Background: I am doing research for building an automated penetration testing application. All tests will be run from some server with a public IP ("testing server"). The objective is to ...
11ty1's user avatar
  • 3
0 votes
1 answer
22 views

Detect the use of a VPN connection _to_ a box by traffic coming _from_ the box [closed]

Imagine that we have three boxes: A <--(VPN)--> B <--(public internet)--> C A and B are connected via a VPN. B and C are connected via the public internet. Let's assume that A and B run ...
9000's user avatar
  • 103
-1 votes
1 answer
35 views

Does a VPN encryption get stripped from data during cellular transmission?

These phones have all the generations of connectivity but “only use 5G.” On top of that the new GPS Satellite iPhone feature for people that get lost does a VPN protocol work for that, what about ...
SusieJones1977's user avatar
0 votes
2 answers
187 views

Possible for pfSense to act as VPN client and server at the same time?

Let's say I have a network where I run pfSense as a router. I want to be able to VPN in to my network when I'm away, but also want to make all outbound traffic from my network go through another VPN, ...
luisschwab's user avatar
1 vote
0 answers
22 views

VPN conflicts from using 2 VPNs [closed]

My QA has a problem. They need to test the app, and the database at the same time. To access our app (testing environment), they need to connect to the company VPN through GlobalProtect, and then they ...
sneedster's user avatar
0 votes
2 answers
534 views

Override tunnel-all VPN connection to print locally

We have a remote office with several users. The users connect to the cable modem there and individually VPN to our NSA2650 via Sonicwall Global VPN client. This client is set to tunnel-all mode ...
stack-exchange-is-ruined's user avatar
0 votes
2 answers
121 views

How can a hostname and ASN be different? [closed]

I've been doing some research to see who really 'powers' the most popular VPN companies which has involved a ton of reverse IP lookups and traceroutes. One thing I keep running in to though is that ...
skarz's user avatar
  • 101
0 votes
1 answer
19 views

Is this possible? Adding a local device of my home network in client network without firewall configuration at client side (VPN?) [closed]

Let me explain what I want to achieve, but keep in mind that my networking knowledge is limited. I want to login at a clients network to do some remote troubleshooting. And I want to use (for example) ...
Dimitri's user avatar
0 votes
2 answers
682 views

Cannot ping/access single host over VPN [closed]

I am running openVPN server on pfSense machine, which is also the router of the network. This network has several VLAN's, where only single one of them is of interest - 10.0.100.0/22. The openVPN ...
Veselin Manev's user avatar
0 votes
1 answer
123 views

Using an internal domain name across a site-to-site VPN [closed]

I've searched around and can't quite find an answer to how I can share a domain name between a site-to-site VPN. Here is a rough sketch of my network: Is it possible to have mulquin.net as the local ...
Jacob Mulquin's user avatar
1 vote
1 answer
47 views

IPS Registering to FMC over VPN

help please. I have two sites linked by VPN with ASA 5525-X. In Site A we have management network (172.16.30.0/28) where we have management IP of ASA 5525-X IPS (172.16.30.14) and IPS (172.16.30.13). ...
Papa Seck's user avatar
2 votes
1 answer
473 views

Site-to-Site VPN with BOTH sites behind NAT (mobile data routers)

I have 2 sites (call them "A" and "B") which connect to the Internet using 4G mobile data routers - don't knock them, I'm getting 200Mbps downlink and 30Mbps uplink, faster than a ...
kbro's user avatar
  • 121
3 votes
1 answer
285 views

what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)

what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)
Rupesha Kempanna's user avatar
0 votes
1 answer
606 views

Cisco ASA VPN tunnel shows up (phase 1 and 2, MM_ACTIVE), but no traffic passes

My end of the tunnel is on an ASAv in AWS. (version 9.14) show crypto isakmp sa 4 IKE Peer: 212.239.x.y Type : L2L Role : responder Rekey : no State : ...
Chris Holt's user avatar
0 votes
0 answers
52 views

Connecting 9 Remote Sites with VPN Tunnels

I am working in a Cisco ecosystem and need to be able to test a 9 tunnel IPSec network over the internet using 10 x Cisco 1941 routers. This is a "hub and spoke" type configuration; where ...
Tyler DeBoy's user avatar
1 vote
0 answers
2k views

VXLAN over Wireguard with VLAN-VNI mapping [closed]

I am currently attempting to setup a L2 bridge between two sites using VXLAN to provide the L2 connectivity and Wireguard as transport/L3, eventually with plans to expand it multiple sites. I've ...
ChownAlone's user avatar
0 votes
2 answers
451 views

IPSEC ESP tunnel mode - Are the ip addresses in outer IP HDR same as addresses in inner encrypted IP HDR?

Am trying to understand how IPSEC in tunnel mode achieves the VPN functionality. I understand that the IP header and payload along with TCP/UDP headers are encrypted. But, if the src and dst addresses ...
Hemanth's user avatar
  • 1,124
1 vote
1 answer
880 views

Checkpoint Firewall using wrong Source IP when establishing a VPN

I have a checkpoint VSX environment running r81 and I have a DMZ firewall that has two external interfaces. One that goes to the Internet and one that goes to a 10.0.0.0/8 network that connects to ...
The Footsie's user avatar
0 votes
1 answer
207 views

Same subnet on multiple VPN clients

I have an openVPN server, where multiple clients are connected. These clients are usually routers, so they have a subnet behind these routers. I want to access all clients on these subnets if I ...
Kristof Rado's user avatar
1 vote
0 answers
101 views

asa vlan subinterface over s2s ipsec tunnel to IOS router

I am trying to configure wireless traffic that is a separate vlan subinterface on an ASA to travel over a site-to-site vpn to an IOS router. i have the static NAT set up to go from the (wifimain,...
ptabs's user avatar
  • 11
0 votes
3 answers
1k views

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel?

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel? I know that MPLS is a type of WAN. and IPsec VPN tunnel is an encrypted connection (private) over the internet. But what is MPLS VPN?...
Errefae's user avatar
1 vote
1 answer
816 views

Can I set fragmented IPv4 packet's DF bit to '1'? [duplicate]

If make DF to 1, can I confirm that fragmented packet with DF=1 will go through routers to the dest IP without any reassembly and re-fragmentation?
lee yk's user avatar
  • 11
1 vote
0 answers
91 views

TACACS Through ASA L2L Tunnel

Hello see below network diagram. I am trying to configure the Branch Router (10.1.1.1) to use TACACS AAA on the HQ-AAA-Server host (192.168.10.10). TACACS works fine for the Branch-FW1 ASA device ...
DavidM's user avatar
  • 171
1 vote
2 answers
77 views

Protecting RDP connections, full remote control

In my workplace people are connecting with their PCs (with Windows on them) through basic RDP when they work from home. The only precaution taken is changing default 3389 port to a diffrent one and ...
Jorhanc's user avatar
  • 113
4 votes
0 answers
476 views

SSH to ASA on Exit Side Of VPN Tunnel

I have a functioning L2L tunnel between two ASA devices (HQ-FW1 and Branch-FW1 on the diagram). HQ-PC2 - 192.168.10.21 HQ-FW1 eth0 - 192.168.20.2 (outside) HQ-FW1 eth1 - 192.168.10.2 (inside) Branch-...
DavidM's user avatar
  • 171
4 votes
2 answers
331 views

TACACS+ AAA over L2L VPN

I have a practice network set up with the relevant topography shown in the below image: I have TACACS+ running on HQ-AAA-Server (192.168.10.10) and AAA working using it on HQ (IOS) and HQ-FW1 (ASA). ...
DavidM's user avatar
  • 171

1
2 3 4 5
14