Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
648
questions
0
votes
0
answers
10
views
Options for building a layer 2 tunnel or VPN from a windows machine to a VMware network? [closed]
What options are there for building a layer 2 tunnel or VPN from a windows machine to a VMware network ("Virtual Machine port group for a Standard Switch")? I want to have a network ...
- 111
0
votes
1
answer
39
views
Is this the right way to expose VLANs through VPN (VPN server location)?
Starting from the following network topology:
Internet --- ISP Cable Router --- Firewall --- Router --- rest of the network / multiple VLANs
(port forwarding) |
...
- 101
1
vote
1
answer
81
views
MTU for WireGuard over IPv6
What would be the optional MTU for a virtual WireGuard link transmitting over IPv6 to avoid unnecessary fragmentation?
Here is how I approached the calculation:
[IPv6 Header] - 40 bytes
[Some IPv6 ...
0
votes
1
answer
47
views
Site to Site VPN using GNS3
I'm sorry if this a really vague question - but I am trying to get my head around a problem and a possible solution. I'm not really a network guy (not to the depths of you guys) - I'm a PLC ...
- 1
0
votes
1
answer
64
views
What's the difference between RED and VPN?
I know that RED is Remote Ethernet Device and VPN is Virtual Private Network.
But I think that they work as the same way.
Someone can help me?
- 53
0
votes
1
answer
41
views
Connect site-to-site private networks [closed]
I used VPN to connect site-to-site private networks from A to B. It worked fine. Then I used NAT for (1) hiding private networks and (2) LAN of 2 sites could access the Internet. The problem is that ...
- 27
0
votes
0
answers
232
views
Pfsense NAT with site-to-site VPN
For a client I am building a network solution that enables them expanding their available online presence.
I am running into a problem with port forwarding to an IP which is routed over an OpenVPN L3 ...
0
votes
1
answer
74
views
Routing in Azure subnet to on-premise and out vpn-tunnel
We are trying to establish a connection from Azure VNET(10.10.0.0/16) over S2S VPN Tunnel (VpnGw1) to on-premise network (192.168.1.0/24) and then out through sonic wall to second VPN Tunnel to ...
- 103
1
vote
1
answer
47
views
Maintenance access to customers over VPN with same network on each side
We are a small company that manufactures machines for the industry. What I need today is an access to the machines when they are in our workshop (construction and adjustment) but also, and this is ...
- 111
0
votes
2
answers
105
views
IPsec PFS Confusion
I'm reading conflicting things about how PFS works in IPsec. Some sources say it's simply a renegotiation of the Phase 1 IKE/ISAKMP SA that ignores the original IKE/ISAKMP SA lifetime value and that ...
- 1
1
vote
1
answer
94
views
VPN doesn't work
I'm trying to configure VPN between 2 routers:
R1: public IP is 200.0.0.6/30 on S0/0/1, private IP are 10.0.0.0/8 and 20.0.0.0/8
R3: public IP is 210.10.0.6/30 on S0/0/0, private IP is 192.168.3.0/24
...
- 27
1
vote
1
answer
136
views
Route traffic from firewall tunnel interface to server in Azure [closed]
On premise is a NAS that users access for file storage. Their AD server for authentication and GPO is in Azure.
For remote users, they have a Remote Access VPN client in which they connect to the ...
- 367
0
votes
0
answers
146
views
multi-site vpn with only one site reliably addressable from the web at large
i have a small network like so:
site-31:
wan public ip (dynamic) on isp fibre is reachable from the outside world. an automatically updated dns entry is maintained to keep the ip current whenever ...
- 101
1
vote
3
answers
121
views
UDP encrypted packets
I am analysing a Wireshark capture as part of understanding UDP/TCP, DNS and HTTP concepts and how packets are sent.
I found an interesting sequence of messages in the Wireshark file, but I am not ...
- 123
2
votes
4
answers
147
views
Difference between Zero Trust Architecture and VPN + MitM Access Rights Management at Gateway
I am currently evaluating Next-Generation Firewall concepts and features and remembered about the Zero Trust networking model. I do find the notion of "trust nothing" in the context of ...
- 157
0
votes
1
answer
124
views
Can you sniff network traffic through a VPN tunnel? [closed]
Background:
I am doing research for building an automated penetration testing application. All tests will be run from some server with a public IP ("testing server"). The objective is to ...
- 3
0
votes
1
answer
21
views
Detect the use of a VPN connection _to_ a box by traffic coming _from_ the box [closed]
Imagine that we have three boxes:
A <--(VPN)--> B <--(public internet)--> C
A and B are connected via a VPN. B and C are connected via the public internet.
Let's assume that A and B run ...
- 103
-1
votes
1
answer
33
views
Does a VPN encryption get stripped from data during cellular transmission?
These phones have all the generations of connectivity but “only use 5G.”
On top of that the new GPS Satellite iPhone feature for people that get lost does a VPN protocol work for that, what about ...
0
votes
2
answers
155
views
Possible for pfSense to act as VPN client and server at the same time?
Let's say I have a network where I run pfSense as a router. I want to be able to VPN in to my network when I'm away, but also want to make all outbound traffic from my network go through another VPN, ...
1
vote
0
answers
21
views
VPN conflicts from using 2 VPNs [closed]
My QA has a problem. They need to test the app, and the database at the same time. To access our app (testing environment), they need to connect to the company VPN through GlobalProtect, and then they ...
- 11
0
votes
2
answers
337
views
Override tunnel-all VPN connection to print locally
We have a remote office with several users. The users connect to the cable modem there and individually VPN to our NSA2650 via Sonicwall Global VPN client. This client is set to tunnel-all mode ...
- 111
0
votes
2
answers
59
views
How can a hostname and ASN be different? [closed]
I've been doing some research to see who really 'powers' the most popular VPN companies which has involved a ton of reverse IP lookups and traceroutes. One thing I keep running in to though is that ...
- 101
0
votes
1
answer
18
views
Is this possible? Adding a local device of my home network in client network without firewall configuration at client side (VPN?) [closed]
Let me explain what I want to achieve, but keep in mind that my networking knowledge is limited.
I want to login at a clients network to do some remote troubleshooting. And I want to use (for example) ...
- 1
0
votes
2
answers
550
views
Cannot ping/access single host over VPN [closed]
I am running openVPN server on pfSense machine, which is also the router of the network. This network has several VLAN's, where only single one of them is of interest - 10.0.100.0/22.
The openVPN ...
0
votes
1
answer
76
views
Using an internal domain name across a site-to-site VPN [closed]
I've searched around and can't quite find an answer to how I can share a domain name between a site-to-site VPN.
Here is a rough sketch of my network:
Is it possible to have mulquin.net as the local ...
- 101
1
vote
1
answer
40
views
IPS Registering to FMC over VPN
help please.
I have two sites linked by VPN with ASA 5525-X. In Site A we have management network (172.16.30.0/28) where we have management IP of ASA 5525-X IPS (172.16.30.14) and IPS (172.16.30.13). ...
- 11
2
votes
1
answer
348
views
Site-to-Site VPN with BOTH sites behind NAT (mobile data routers)
I have 2 sites (call them "A" and "B") which connect to the Internet using 4G mobile data routers - don't knock them, I'm getting 200Mbps downlink and 30Mbps uplink, faster than a ...
- 121
3
votes
1
answer
258
views
what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)
what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)
0
votes
1
answer
480
views
Cisco ASA VPN tunnel shows up (phase 1 and 2, MM_ACTIVE), but no traffic passes
My end of the tunnel is on an ASAv in AWS. (version 9.14)
show crypto isakmp sa
4 IKE Peer: 212.239.x.y
Type : L2L Role : responder
Rekey : no State : ...
- 213
0
votes
0
answers
48
views
Connecting 9 Remote Sites with VPN Tunnels
I am working in a Cisco ecosystem and need to be able to test a 9 tunnel IPSec network over the internet using 10 x Cisco 1941 routers. This is a "hub and spoke" type configuration; where ...
1
vote
0
answers
1k
views
VXLAN over Wireguard with VLAN-VNI mapping [closed]
I am currently attempting to setup a L2 bridge between two sites using VXLAN to provide the L2 connectivity and Wireguard as transport/L3, eventually with plans to expand it multiple sites.
I've ...
- 11
0
votes
2
answers
299
views
IPSEC ESP tunnel mode - Are the ip addresses in outer IP HDR same as addresses in inner encrypted IP HDR?
Am trying to understand how IPSEC in tunnel mode achieves the VPN functionality. I understand that the IP header and payload along with TCP/UDP headers are encrypted. But, if the src and dst addresses ...
- 1,124
1
vote
1
answer
726
views
Checkpoint Firewall using wrong Source IP when establishing a VPN
I have a checkpoint VSX environment running r81 and I have a DMZ firewall that has two external interfaces. One that goes to the Internet and one that goes to a 10.0.0.0/8 network that connects to ...
- 381
0
votes
1
answer
194
views
Same subnet on multiple VPN clients
I have an openVPN server, where multiple clients are connected.
These clients are usually routers, so they have a subnet behind these routers.
I want to access all clients on these subnets if I ...
- 103
1
vote
0
answers
85
views
asa vlan subinterface over s2s ipsec tunnel to IOS router
I am trying to configure wireless traffic that is a separate vlan subinterface on an ASA to travel over a site-to-site vpn to an IOS router.
i have the static NAT set up to go from the (wifimain,...
- 11
0
votes
3
answers
672
views
What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel?
What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel?
I know that MPLS is a type of WAN. and IPsec VPN tunnel is an encrypted connection (private) over the internet.
But what is MPLS VPN?...
- 1
1
vote
1
answer
625
views
Can I set fragmented IPv4 packet's DF bit to '1'? [duplicate]
If make DF to 1, can I confirm that fragmented packet with DF=1 will go through routers to the dest IP without any reassembly and re-fragmentation?
- 11
1
vote
0
answers
78
views
TACACS Through ASA L2L Tunnel
Hello see below network diagram.
I am trying to configure the Branch Router (10.1.1.1) to use TACACS AAA on the HQ-AAA-Server host (192.168.10.10). TACACS works fine for the Branch-FW1 ASA device ...
- 171
1
vote
2
answers
73
views
Protecting RDP connections, full remote control
In my workplace people are connecting with their PCs (with Windows on them) through basic RDP when they work from home. The only precaution taken is changing default 3389 port to a diffrent one and ...
- 113
4
votes
0
answers
402
views
SSH to ASA on Exit Side Of VPN Tunnel
I have a functioning L2L tunnel between two ASA devices (HQ-FW1 and Branch-FW1 on the diagram).
HQ-PC2 - 192.168.10.21
HQ-FW1 eth0 - 192.168.20.2 (outside)
HQ-FW1 eth1 - 192.168.10.2 (inside)
Branch-...
- 171
4
votes
2
answers
273
views
TACACS+ AAA over L2L VPN
I have a practice network set up with the relevant topography shown in the below image:
I have TACACS+ running on HQ-AAA-Server (192.168.10.10) and AAA working using it on HQ (IOS) and HQ-FW1 (ASA). ...
- 171
3
votes
1
answer
363
views
Cisco ASA Clientless SSL VPN Apply Tunnel Group
I'm trying to implement the answer from a previous question I've asked (Cisco ASA Clientless SSL VPN Restrict Network Access)
My ultimate aim is to set up an SSL VPN on a Cisco ASA device to allow ...
- 171
2
votes
1
answer
389
views
Cisco ASA Clientless SSL VPN Restrict Network Access
I'm working on a Uni project to set up a secure network. One aspect is to have a VPN for clients of the imaginary company to access web based services.
I have set up a simple clientless SSL VPN which ...
- 171
3
votes
1
answer
218
views
Wireshark Decrypting IKEv1 Text PSK to Hex
I'm trying to debug a Cisco VPN setup as part of a Uni Lab (so please don't worry about posting of keys etc. it's just a toy setup with no internet facing connection).
I want to decrypt the IKEv1 ...
- 171
0
votes
1
answer
487
views
Can UDP traffic be transmitted over TCP ports on OpenVpn to avoid the TCP meltdown
I understand the TCP meltdown problem is associated with overcompensation from errors and incorrect sequencing when arriving the the receiver end. OpenVpn connections are recommended to use the UDP ...
1
vote
1
answer
2k
views
IPSec IKEv2 on pfSense: "parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]"
I am trying to setup an IPSec IKEv2 VPN Network on a pfSense. The pfsense is situated directly behind the modem. I connect to it by a static IP address. There is no double NAT. I followed this ...
- 11
1
vote
0
answers
26
views
Personal VPN sub-network accessible through Work VPN? [closed]
I currently access my work network via Cisco VPN.
At work, I have my own three computers and NAS on a personal dedicated router using my own DHCP. For several reasons, I do not want these computers to ...
- 111
2
votes
2
answers
611
views
Site-to-Site VPN with Sophos XG using tunnel interface
So I have configured a Sophos XG site-to-site vpn according to this document:
https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/...
0
votes
1
answer
64
views
Why is the VPN throughput reduction different when using a cellular network and when using Ethernet? [closed]
I built a VPN server using openvpn as a protocol and measured the throughput between server and client.
There are significant throughput reduction at cellular network. Throughput decreased by more ...
- 1
4
votes
1
answer
867
views
Cisco IOS -> ASA VTI tunnel not routing traffic
I have a VTI tunnel configured between two devices (ASR and ASAv). The tunnel comes up fine and is stable, however traffic appears to be unidirectional, from the ASR -> ASAv but not in the reverse ...
- 193