Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
520
questions
0
votes
1answer
34 views
Setup VPN to access company's internal network without NAT
Below is how the network looks like, the left is my home, and the right is my office.
Now I want to connect to office intranet(192.168.0.0/24, R3). We don't have any vpn device that directly connects ...
0
votes
0answers
12 views
why i can't access my remote access enabled using outside of my country ip? [on hold]
when i scanned it with an online port scanner it gave me
All 1000 scanned ports on host-xx.xx.xx.xx.ispname.net (xx.xx.xx.xx)
are closed (995) or filtered (5) Nmap done: 1 IP address (1 host up)
...
0
votes
0answers
7 views
Connect two networks via openvpn, but not at router level, both servers are linux VM's [closed]
I have two remote networks (windows computer mainly), call them network A and B.
I have a linux vm running on network A (windows 10 host) and i'm thinking on setting up an openVPN server (call it ...
0
votes
1answer
39 views
Traceroute through ipsec tunnel
askk
Hi
when i do traceroute from host 192.168.11.0/24 to the server 10.0.0.0/24 which is site B when the packets get into the public area it show 'request timed out' as shown in this figure im using ...
0
votes
0answers
18 views
pfsense in multi-WAN: OpenVPN route all traffic through VPN, how to set the gateway?
I have an OpenVPN running on pfSense in a CARP with multi-WAN. OpenVPN listens on all incomming (0.0.0.0) so that I can enter throu what ever WAN is active right now should one go down.
When I ...
0
votes
0answers
16 views
Sonicwall Site to Site VPN stops working when “Use this VPN Tunnel as default route for all Internet traffic”
I have two Sonicwall TZ300s that have a site-to-site VPN configuration successfully configured. I am trying to send all remote site VPN traffic to the WAN connection of the Central site.
I have ...
1
vote
0answers
39 views
Unable to Initiate a VPN tunnel using IKEv2
I'm having an issue with a VPN tuunel between my Firewall (ASA 5516-X) and a third party firewall so I can't check the config in the second firewall. So I decide to debug my firewall and I realized ...
1
vote
3answers
82 views
Understanding how VPNs work?
I am trying to understand how VPNs work. Most of the posts/blogs on the internet say that all your traffic is routed through a VPN server. This sounds like proxy to me??
Another point that is commonly ...
-1
votes
1answer
35 views
VPN server acting as a client for another VPN server [closed]
I was wondering if it's possible to have a VPN server that goes though another VPN server.
Here a scenario that might explain my idea better: I have 4 computers
'A' - My Windows machine
'B' - My VPN ...
3
votes
2answers
64 views
Configuring Cisco ASA DAP policies from CLI! (Automating bulk task)
So I have given a task to add 1000s of DAP policies after main DAP file crashed and backup is not available due to unfortunate reasons.
There is predefined way of doing it through ASDM which is very ...
1
vote
0answers
39 views
How can I disable TLS on my openvpn server? [closed]
I am using PiVPN and set up an openvpn server. Myself and a coworker can connect to the vpn remotely with the generated .ovpn files we imported into openvpn clients. I tried creating a .p12 ...
1
vote
1answer
45 views
AWS connectivity UDP works but TCP times out
I have some issues here I have built an L2l VPN from my location to AWS London, I can see that the tunnel is up but when I attempt to connect our local domain controller here in our office to AWS ...
-1
votes
2answers
84 views
VPNs are working in which layer of the OSI model? [closed]
How many types of VPN is out there and in which layer of the OSI model are they working?
4
votes
2answers
92 views
Is Cisco IPsec different from ordinary IPsec?
Is Cisco IPsec different from ordinary IPsec?
Although Windows 10 has built-in VPN support for L2TP/IPSec, it does not support IPSec provided by Cisco.
Thus, we generally need to install hand-made ...
2
votes
3answers
98 views
Is it possible to build VPN remote access environment without VPN server? [closed]
Is it possible to build VPN remote access environment without VPN server?
In this case, only VPN router on top of LAN is sufficient?
If not, why is the server needed in general?
0
votes
0answers
18 views
does ipsec phase1 renewal keep connections?
I have an IPSec tunnel UP and I open a TCP connection
when the phase1 expire and is renewed,
Is the TCP connection supposed to stay alive or drop ?
both in the theory and practical (cisco, ...
3
votes
1answer
54 views
Meraki in Passthrough mode behind ASA
I am having trouble getting bidirectional traffic through a Meraki box behind a ASA 5508-X. I can see requests from the client VPN going from a client device to a server on our LAN, the server ...
0
votes
1answer
30 views
Remote access to the network without port forwarding (blocked by ISP) - VPN [closed]
I need to setup a following configuration:
A router Mikrotik is connected to the internal Network1. The router has a USB 3G modem that is connected to it and enables internet access from the ...
0
votes
0answers
41 views
NAT setup for two LANs on same router
We have a moxa edr 810 series router , we have few devices connected to the router as below.
We are using IPsec tunnel for VPN.
From VPN we are able to connect Device 2 , but not able to connect to ...
0
votes
1answer
26 views
Whats the security difference between Policy Based IPSec VPN tunnel vs HTTPS + Basic auth
We have several customers with the same service installed within their DMZ. This service is a HTTPS server. The server does not have authentication, this is solved by configuring the NetScaler ...
0
votes
0answers
23 views
Anyconnect Cisco 5505 VPN Group cannot Access Inside Network
Below is the Configuration to my Cisco ASA. I can connect to VPN but then trapped and cannot enter the inside network.
ASA Version 9.2(4)27
!
hostname AwBTech-ASA
domain-name awbtech
enable password ...
3
votes
0answers
81 views
Need to configure site to site SSL VPN between two Cisco routers
I would like to configure site-to-site SSL VPN between two sites.
I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
0
votes
1answer
40 views
How to troubleshoot VPN packet issues? [closed]
I'm a web developer (10 yrs), and am tech savy, but don't know a lot about networking, so please forgive my ignorance. I work from home, so I'm always on my company VPN.
Over the last several weeks I'...
0
votes
0answers
22 views
How do I make a VPN connection between a fixed IP address Sonicwall and a Cisco with a dynamic IP address
I need to create a vpn between a sonicwall that has a fixed ip address and a cisco with a dynamic address. The problem I have is how can I identify the cisco device in the sonic
2
votes
0answers
72 views
Ikev2 (flexvpn) AAA authentication via radius
My problem is I currently develop a new configuration on IKEV2 VPN connection. The main idea is the client VPN routers are authenticate trough a VPN concentrator where an AAA authenticion set to a ...
0
votes
1answer
36 views
qos inside vpn, possible or not ? I read yes and no
I am wondering if possible to do QOS (or similar action) inside vpn tunnel to a cloud server. the goal is to reserved bandwith for voip traffic.
I read that you can with GRE and other people said, ...
1
vote
0answers
37 views
Cisco ASA: Windows DHCP doesn't bind IP address after failover change active [closed]
Equipment and soft:
Two Cisco ASA 5540, ASA ver. 9.1(7)32, active/standby failover
DHCP server: Windows server 2016
Anyconnect VPN clients get IP addresses from DHCP servers. Everything works ...
2
votes
3answers
44 views
Correct term for networks created for virtual machines and containers?
What is the correct term for the type of network created for virtual machines and for containers. For illustration a Linux virtual host might have devices docker0 as 02:42:a6:79:a6:bc with address 172....
2
votes
1answer
52 views
MAC Address not resolving when IPSec VPN in place
I've created an IPSec VPN connection between two Mikrotik routers. They are connecting via IKEv2.
Inside our two networks, we have a printer spooler which needs the printer's MAC address to verify it'...
2
votes
1answer
47 views
Juniper SRX Destination NAT for L2TP server
I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks.
I've had some success with this post:
https://forums.juniper.net/t5/...
1
vote
0answers
38 views
pfSense - VPN access to the printer only
in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
3
votes
2answers
91 views
Why is VPN not a protocol?
Is VPN a layer 3 concept?
says "VPN is not a protocol".
Is VPN an application instead?
Why is VPN not a protocol?
How can I tell if something is a protocol or not?
Thanks.
3
votes
3answers
678 views
Is VPN a layer 3 concept?
From Tanenbaum's Computer Network
This demand soon led to the invention of VPNs (Virtual Private Networks),
which are overlay networks on top of public networks but with most of the properties of ...
1
vote
1answer
157 views
Keep Cisco site-to-site tunnel up permanently
I have Cisco ASA site-to-site tunnel with remote and which i don't have control.
I have following config:
crypto ikev1 policy 10
authentication pre-share
encryption aes
hash sha
group 2
...
1
vote
1answer
90 views
Firewall and VPN configuration?
I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
2
votes
2answers
46 views
Are both VPN and NAT alternative ways to provide access to a private network?
https://en.wikipedia.org/wiki/Virtual_private_network
A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or ...
0
votes
1answer
44 views
OSPF and /30 for IPSEC VPN links on routes which support routing (as opposed to polices)
Traditionally i have always set IPSEC policies as /24 (/16 etc) on routers that had policies for encrypting IPSEC traffic (as opposed to routes).
I have since started using a router (Fortinet) that ...
1
vote
1answer
82 views
IPSec route-based vpn st0 interface
As i know, the st0 interface is used when the gateways are configured with route based VPN.
But my question is, say below is the topology
A<---->B<---->C<---->D
A and D are hosts, B and C ...
1
vote
0answers
118 views
DNS not resolving through VPN
Looking for some help with our Office's VPN that I can't seem to solve...
I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
2
votes
0answers
36 views
Question about creating Subnets for a large amount of sites that will make a site-site tunnel to our datacenter [closed]
Our data center network is:
10.20.44.X/24
I want to have our sites use 10.X.X.X/24 (Site Number, VLAN, host)
EG:
Site 30
10.30.10.X/24 10.30.20.X/24
10.X would be corporate network 20.X would be ...
1
vote
1answer
65 views
Difference between WAN and VPN(tunnels)
I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
0
votes
0answers
134 views
F5 Big IP Client VPN is disconnecting frequently!
Our VPN(F5 Big IP Client) Disconnects After Few Minutes. We are using Split tunnel as per our client requirement. I checked with our Firewall support(Sophos)they even created a unfiltered rule in case ...
0
votes
0answers
55 views
ASA - communication between 2 tunnels
I have two IPSEC tunnels with an ASA in the middle
Site A - 10.20.4.0 /24 (65.176.80.84)
Site B - 192.168.142.0 /24
ASA - 10.99.206.0 /24 (95.12.22.33
Site A - 10.20.4.0 /24 can reach the ASA and ...
-2
votes
1answer
80 views
IPSec SA being Unidirectional
From what I’ve read, IKE SAs are Birectional and IPSec SAs are unidirectional.
But if the same proposals are to be agreed by both the ends, say protocol esp, Authentication algorithm as hmac-sha1-...
0
votes
1answer
53 views
Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]
Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
3
votes
1answer
161 views
Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource
Multiple VPNs setup with a Juniper SRX320.
The SRX320 has an irb interface as follows:
irb {
unit 0 {
family inet {
address 192.168.120.1/24;
}
}
}
I've setup ...
0
votes
1answer
31 views
SonicWall global vpn
I have a SonicWall device, and I am new to them.
I created the global vpn and, after installing the SonicWall at the customer's site, wanted to make some configuration changes. I am using the global ...
3
votes
1answer
70 views
High Availability for ISR 4431 IPSec VPNs
I have the following lab setup in GNS3. R1 & R2 are VPN endpoint at my datacenters and R3 is simulating a remote site. What i'm trying to accomplish is having one tunnel from R3 to the ...
1
vote
0answers
24 views
Why can I not see the default gateway when connecting to ASA through AnyConnect?
I've configured an ASA as an AnyConnect server. The IP address pool that'll be assigned to the connecting hosts is from 192.168.10.1-192.168.10.10. Now when I establish a remote access connection to ...
1
vote
0answers
80 views
Why do the tunnel protocol on these two router show different values
Two routers R1 and R2 have a tunnel built between them in the 103.103.103.0/24 network. The end point of the tunnel are 75.75.75.2(on R1) and 76.76.76.2(on R2).
Can anyone explain why does the Tunnel ...
