Skip to main content

Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
0 votes
2 answers
54 views

RDP Dropping When TTL Changes From 127 to 63

Currently when connecting to our work server through VPN and RDP the RDP connection drops every once in a while and then comes back. I started a continuous ping to the server and noticed that it drops ...
Quinntessential's user avatar
0 votes
0 answers
30 views

Layer 3 IP VPNs (RFC 4364)

I have always read that Layer 3 IP VPNs (RFC 4364 Standard) is the most used VPN creation method of ISPs in the US. Is that still the case?
joevilella's user avatar
0 votes
1 answer
47 views

Connecting HMI to the web without vpn / DDNS

I have multiple systems deployed on many sites. each of these systems has an HMI device that runs a VNC server for remote maintenance. at this moment each of these systems is offline, and each device ...
almog bar-el's user avatar
0 votes
1 answer
46 views

Cisco ASA L2TP/IPsec split-tunnel not working for public Internet

I'm testing a setup using ASA to provide VPN over L2TP/IPSec PSK to support native IPSec clients such as iOS, Android, MacOS, Windows, etc. The issue I'm running into is that when connected, the split-...
640KB's user avatar
  • 101
0 votes
0 answers
69 views

Accessing external server through Azure VPN with NAT

I have three sites and an external server (10.13.16.5) that are connecting to Azure via IPsec tunnels. I do not control the network at the external service but they have given me an address block of ...
CoryL's user avatar
  • 1
1 vote
1 answer
49 views

Pinging packets greater than 1500 between two proper configured machines on proper configured networks, always possible?

Given the following 3 subnet topology, I will give names to them to simplify it, I am using planets, I see it as a perfect geographic enumeration. Sites Office on Earth 172.1.x FiOS, default MTU ...
Sam Washington's user avatar
1 vote
1 answer
43 views

IPSec Site to Site VPN Connected but Subnets not Routing [closed]

Re: Creating a site to site vpn from ubuntu 22 + strongswan to cisco meraki Issue: I've established a vpn tunnel but routing between clients on the network is not working. meraki config: Non-Meraki ...
Matt Campbell's user avatar
0 votes
1 answer
35 views

Public wifi router conflicts with company VPN IP address [closed]

I'm a digital nomad and I like to work in cafes and co-working spaces. The problem is that sometimes the network router IP address conflicts with my company's VPN-client IP address. Any and all ...
Nick Bonilla's user avatar
1 vote
0 answers
45 views

Issue with Cisco ASA IPSec VPN clients can't access DMZ network

I have one ASA that is configured for IPSec VPN Cisco client. The VPN allow access to inside network, but trying to get it to my DMZ is a problem. My VPN address pool is defined as 124.140.1.x /24. My ...
Steve's user avatar
  • 11
1 vote
1 answer
96 views

BGP: Are Virtual Internet Exchanges more efficient than normal internet transit?

There are a number of virtual internet exchanges that BGP peer over VPN links when local presence is not available. Given the IP encapsulation overhead, and the fact that these routes still cross the ...
KJ7LNW's user avatar
  • 167
0 votes
1 answer
192 views

Troubleshooting ipsec ikev2 site to site vpn

I assume, for peer IP we use, is the wan interface of the Cisco ASA and not the gateway of the ISP correct? Also, all routes should go to the same IP of the wan interface correct? So we have two Cisco ...
user1378803's user avatar
0 votes
1 answer
37 views

Unable to configure Site to Site VPN between Cisco Router & Cisco ASA and permit SSH

I am performing configuration on Cisco ASA and Cisco Router from the packet tracer. I am attempting to allow the external network (172.16.22.100 255.255.255.0) to access the internal server which is ...
iloveearth_12345's user avatar
0 votes
1 answer
66 views

How will you determine if the issue with VPN is on remote site or local site?

If a remote host connected to a server via VPN is not able to ping the server, how'd you determine if the issue is with VPN at "server side" or VPN at "client side"?
Team B.I's user avatar
  • 113
0 votes
1 answer
145 views

Is this the right way to expose VLANs through VPN (VPN server location)?

Starting from the following network topology: Internet --- ISP Cable Router --- Firewall --- Router --- rest of the network / multiple VLANs (port forwarding) | ...
Kraal's user avatar
  • 101
1 vote
1 answer
627 views

MTU for WireGuard over IPv6

What would be the optional MTU for a virtual WireGuard link transmitting over IPv6 to avoid unnecessary fragmentation? Here is how I approached the calculation: [IPv6 Header] - 40 bytes [Some IPv6 ...
Moss Richardson's user avatar
0 votes
1 answer
147 views

Site to Site VPN using GNS3

I'm sorry if this a really vague question - but I am trying to get my head around a problem and a possible solution. I'm not really a network guy (not to the depths of you guys) - I'm a PLC ...
Robt800's user avatar
0 votes
1 answer
127 views

What's the difference between RED and VPN?

I know that RED is Remote Ethernet Device and VPN is Virtual Private Network. But I think that they work as the same way. Someone can help me?
Jonas Lucas's user avatar
0 votes
1 answer
42 views

Connect site-to-site private networks [closed]

I used VPN to connect site-to-site private networks from A to B. It worked fine. Then I used NAT for (1) hiding private networks and (2) LAN of 2 sites could access the Internet. The problem is that ...
Penguin's user avatar
  • 27
0 votes
0 answers
540 views

Pfsense NAT with site-to-site VPN

For a client I am building a network solution that enables them expanding their available online presence. I am running into a problem with port forwarding to an IP which is routed over an OpenVPN L3 ...
Koen Vuurens's user avatar
0 votes
1 answer
254 views

Routing in Azure subnet to on-premise and out vpn-tunnel

We are trying to establish a connection from Azure VNET(10.10.0.0/16) over S2S VPN Tunnel (VpnGw1) to on-premise network (192.168.1.0/24) and then out through sonic wall to second VPN Tunnel to ...
Jayden's user avatar
  • 103
1 vote
1 answer
54 views

Maintenance access to customers over VPN with same network on each side

We are a small company that manufactures machines for the industry. What I need today is an access to the machines when they are in our workshop (construction and adjustment) but also, and this is ...
Meloman's user avatar
  • 111
0 votes
2 answers
293 views

IPsec PFS Confusion

I'm reading conflicting things about how PFS works in IPsec. Some sources say it's simply a renegotiation of the Phase 1 IKE/ISAKMP SA that ignores the original IKE/ISAKMP SA lifetime value and that ...
Ceejus's user avatar
  • 1
1 vote
1 answer
120 views

VPN doesn't work

I'm trying to configure VPN between 2 routers: R1: public IP is 200.0.0.6/30 on S0/0/1, private IP are 10.0.0.0/8 and 20.0.0.0/8 R3: public IP is 210.10.0.6/30 on S0/0/0, private IP is 192.168.3.0/24 ...
Penguin's user avatar
  • 27
1 vote
1 answer
239 views

Route traffic from firewall tunnel interface to server in Azure [closed]

Situation: On premise is a NAS that users access for file storage. Their AD server for authentication and GPO resides in Azure and is connected with a LAN to LAN VPN. For remote workers, they have a ...
David Sain's user avatar
1 vote
3 answers
326 views

UDP encrypted packets

I am analysing a Wireshark capture as part of understanding UDP/TCP, DNS and HTTP concepts and how packets are sent. I found an interesting sequence of messages in the Wireshark file, but I am not ...
Tita's user avatar
  • 123
2 votes
4 answers
404 views

Difference between Zero Trust Architecture and VPN + MitM Access Rights Management at Gateway

I am currently evaluating Next-Generation Firewall concepts and features and remembered about the Zero Trust networking model. I do find the notion of "trust nothing" in the context of ...
alex's user avatar
  • 157
0 votes
1 answer
307 views

Can you sniff network traffic through a VPN tunnel? [closed]

Background: I am doing research for building an automated penetration testing application. All tests will be run from some server with a public IP ("testing server"). The objective is to ...
11ty1's user avatar
  • 3
0 votes
1 answer
22 views

Detect the use of a VPN connection _to_ a box by traffic coming _from_ the box [closed]

Imagine that we have three boxes: A <--(VPN)--> B <--(public internet)--> C A and B are connected via a VPN. B and C are connected via the public internet. Let's assume that A and B run ...
9000's user avatar
  • 103
-1 votes
1 answer
35 views

Does a VPN encryption get stripped from data during cellular transmission?

These phones have all the generations of connectivity but “only use 5G.” On top of that the new GPS Satellite iPhone feature for people that get lost does a VPN protocol work for that, what about ...
SusieJones1977's user avatar
0 votes
2 answers
217 views

Possible for pfSense to act as VPN client and server at the same time?

Let's say I have a network where I run pfSense as a router. I want to be able to VPN in to my network when I'm away, but also want to make all outbound traffic from my network go through another VPN, ...
luisschwab's user avatar
1 vote
0 answers
22 views

VPN conflicts from using 2 VPNs [closed]

My QA has a problem. They need to test the app, and the database at the same time. To access our app (testing environment), they need to connect to the company VPN through GlobalProtect, and then they ...
sneedster's user avatar
0 votes
2 answers
648 views

Override tunnel-all VPN connection to print locally

We have a remote office with several users. The users connect to the cable modem there and individually VPN to our NSA2650 via Sonicwall Global VPN client. This client is set to tunnel-all mode ...
stack-exchange-is-ruined's user avatar
0 votes
2 answers
153 views

How can a hostname and ASN be different? [closed]

I've been doing some research to see who really 'powers' the most popular VPN companies which has involved a ton of reverse IP lookups and traceroutes. One thing I keep running in to though is that ...
skarz's user avatar
  • 101
0 votes
1 answer
19 views

Is this possible? Adding a local device of my home network in client network without firewall configuration at client side (VPN?) [closed]

Let me explain what I want to achieve, but keep in mind that my networking knowledge is limited. I want to login at a clients network to do some remote troubleshooting. And I want to use (for example) ...
Dimitri's user avatar
0 votes
2 answers
763 views

Cannot ping/access single host over VPN [closed]

I am running openVPN server on pfSense machine, which is also the router of the network. This network has several VLAN's, where only single one of them is of interest - 10.0.100.0/22. The openVPN ...
Veselin Manev's user avatar
0 votes
1 answer
160 views

Using an internal domain name across a site-to-site VPN [closed]

I've searched around and can't quite find an answer to how I can share a domain name between a site-to-site VPN. Here is a rough sketch of my network: Is it possible to have mulquin.net as the local ...
Jacob Mulquin's user avatar
1 vote
1 answer
50 views

IPS Registering to FMC over VPN

help please. I have two sites linked by VPN with ASA 5525-X. In Site A we have management network (172.16.30.0/28) where we have management IP of ASA 5525-X IPS (172.16.30.14) and IPS (172.16.30.13). ...
Papa Seck's user avatar
2 votes
1 answer
575 views

Site-to-Site VPN with BOTH sites behind NAT (mobile data routers)

I have 2 sites (call them "A" and "B") which connect to the Internet using 4G mobile data routers - don't knock them, I'm getting 200Mbps downlink and 30Mbps uplink, faster than a ...
kbro's user avatar
  • 121
3 votes
1 answer
303 views

what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)

what are the deployment scenarios for L2TP tunnel, GRE tunnel and MPLS Tunnel (l2vpn vpws)
Rupesha Kempanna's user avatar
0 votes
1 answer
744 views

Cisco ASA VPN tunnel shows up (phase 1 and 2, MM_ACTIVE), but no traffic passes

My end of the tunnel is on an ASAv in AWS. (version 9.14) show crypto isakmp sa 4 IKE Peer: 212.239.x.y Type : L2L Role : responder Rekey : no State : ...
Chris Holt's user avatar
0 votes
0 answers
53 views

Connecting 9 Remote Sites with VPN Tunnels

I am working in a Cisco ecosystem and need to be able to test a 9 tunnel IPSec network over the internet using 10 x Cisco 1941 routers. This is a "hub and spoke" type configuration; where ...
Tyler DeBoy's user avatar
1 vote
0 answers
2k views

VXLAN over Wireguard with VLAN-VNI mapping [closed]

I am currently attempting to setup a L2 bridge between two sites using VXLAN to provide the L2 connectivity and Wireguard as transport/L3, eventually with plans to expand it multiple sites. I've ...
ChownAlone's user avatar
0 votes
2 answers
632 views

IPSEC ESP tunnel mode - Are the ip addresses in outer IP HDR same as addresses in inner encrypted IP HDR?

Am trying to understand how IPSEC in tunnel mode achieves the VPN functionality. I understand that the IP header and payload along with TCP/UDP headers are encrypted. But, if the src and dst addresses ...
Hemanth's user avatar
  • 1,124
1 vote
1 answer
1k views

Checkpoint Firewall using wrong Source IP when establishing a VPN

I have a checkpoint VSX environment running r81 and I have a DMZ firewall that has two external interfaces. One that goes to the Internet and one that goes to a 10.0.0.0/8 network that connects to ...
The Footsie's user avatar
0 votes
1 answer
214 views

Same subnet on multiple VPN clients

I have an openVPN server, where multiple clients are connected. These clients are usually routers, so they have a subnet behind these routers. I want to access all clients on these subnets if I ...
Kristof Rado's user avatar
1 vote
0 answers
117 views

asa vlan subinterface over s2s ipsec tunnel to IOS router

I am trying to configure wireless traffic that is a separate vlan subinterface on an ASA to travel over a site-to-site vpn to an IOS router. i have the static NAT set up to go from the (wifimain,...
ptabs's user avatar
  • 11
0 votes
3 answers
1k views

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel?

What is the difference between MPLS, MPLS VPN and IPsec VPN tunnel? I know that MPLS is a type of WAN. and IPsec VPN tunnel is an encrypted connection (private) over the internet. But what is MPLS VPN?...
Errefae's user avatar
1 vote
1 answer
938 views

Can I set fragmented IPv4 packet's DF bit to '1'? [duplicate]

If make DF to 1, can I confirm that fragmented packet with DF=1 will go through routers to the dest IP without any reassembly and re-fragmentation?
lee yk's user avatar
  • 11
1 vote
0 answers
95 views

TACACS Through ASA L2L Tunnel

Hello see below network diagram. I am trying to configure the Branch Router (10.1.1.1) to use TACACS AAA on the HQ-AAA-Server host (192.168.10.10). TACACS works fine for the Branch-FW1 ASA device ...
DavidM's user avatar
  • 171
1 vote
2 answers
77 views

Protecting RDP connections, full remote control

In my workplace people are connecting with their PCs (with Windows on them) through basic RDP when they work from home. The only precaution taken is changing default 3389 port to a diffrent one and ...
Jorhanc's user avatar
  • 113

1
2 3 4 5
14