Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

0
votes
0answers
16 views

Not able to forward traffic from `tun` interface to `lo` [on hold]

I am writing a small VPN server, in which for a certain ip address, I am passing the traffic through an http proxy. Current Setup TUN interface is up and running at 10.0.2.0/24 iptables ...
0
votes
0answers
12 views

How do I force SonicWall TZ300 X2 port to be a specific VLAN

I have a SonicWall VPN for my personal internet, however I have my jobs VPN connected to a VLAN25. I am trying to figure out how to connect another dedicated PC that is a work PC to the TZ300 on port ...
2
votes
2answers
16 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
1answer
22 views

Wireguard protocol understanding where the packet got sent

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
1
vote
2answers
23 views

AWS site-to-site VPN and multiple account VPC connections

I've configured a site-to-site VPN from our firewall (watchguard) to AWS. Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
0
votes
1answer
40 views

VPN MPLS L3 Routing

I have this vpn mpls l3 scenario: Let's say that the host (10.1.1.2) of customer 1 wants to communicate with host (10.1.2.2) of customer 2. My question is: how R2 knows that it has to forward ...
0
votes
0answers
13 views

Connecting remote sites with multiple hosts [on hold]

I want to connect equipment at around 15 remote locations back to a central server. Each remote site will have 2-4 hosts locally. I'm planning on using a VPN to connect back to the central server. ...
0
votes
0answers
13 views

Choosing the right Active Directory for my network [closed]

I currently manage my users "manually" on a network that began with 3 people and 3 computers. Now I have 4 users with their own computer, 4 computers used by parttime people and a second site in ...
2
votes
0answers
23 views

Cisco ASA Dial in VPN access Devices on Site-to-Site VPN

Questions 1) What do I need to run to get this to allow the on-site to talk to the dial-in network clients E.G ping from 10.101.1.7 to 10.101.2.1? 2) What do I need to run to get the dial-in network ...
3
votes
1answer
31 views

Group VPN between vMX as a member and a cisco router as a Group Controller

I am trying to set up a Group VPN between a cisco GC/KS and 3 vMX router (14.1R1.10) and another cisco router as a member. I've managed to get the Group VPN working between the two cisco router, but I ...
3
votes
2answers
83 views

IKE phase 1 and phase 2

Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere. Phase ...
0
votes
1answer
140 views

Port Forward for OpenVPN Server behind two routers [closed]

I am stuck how to establish port forwarding between the Internet and an OpenVPN server behind two routers. I need the first router as an Internet DSL modem and VoIP phone access (both services from ...
0
votes
1answer
33 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
1
vote
1answer
35 views

Shared secret key for Diffie-Hellman key exchange

From what i have learnt,in Asymmetric key there is public key and a private key. For instance: Step 1: Alice and Bob get public numbers P = 23, G = 9 Step 2: Alice selected a private key a = 4 and ...
2
votes
1answer
70 views

Why do we need MPLS when implementing L2/L3 VPNs?

Yes, I know that MPLS doesn't care about L3 and higher levels and it is one of its features. But I do not really understand its role in L2/L3 VPNs. L2VPN - we are building xconnects to PE's AC. Why ...
1
vote
1answer
30 views

Network Security Tunnel

In the Tunnel Interface, when I edit the tunnel information, it shows: Attributes Values Tunnel Source IF10 Tunnel Destination 1.0.0.1 Tunnel Mode GRE What does IF10 ...
2
votes
2answers
68 views

Noobie network question: connect routers across floors

I have a Cisco router and a Juniper SRX550 sitting next to each other. The Cisco router is on two networks, and the SRX550 is on 3 networks. Since they're close, I could connect them directly? If I ...
1
vote
1answer
25 views

Cisco anyconnect 4.6 client disable some security feature

Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
1
vote
0answers
27 views

Juniper SRX550 vpn question

First of all, I don't know much about VPNs, so please be patient. I have a Juniper SRX550, and I want users from home to be able to connect to the company network via VPN. The company I work for ...
1
vote
1answer
36 views

Traffic of idle OpenVPN connection [closed]

I have a mobile gateway connected to my VPN via OpenVPN and a 2G connection. Now I observe some unexpected traffic (~20MB / day) and wonder where it comes from. While I'm connected to the gateway I ...
2
votes
0answers
17 views

VPN Configuration [closed]

Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
1
vote
1answer
94 views

Cisco ASA site to site with Forcepoint stonesoft NGFW

I am try to establish a site to site VPN between Cisco ASA and Forcepoint Stonesoft NGFW, i have support that assured everything is set up correct from Forcepoint NGFW side but i have trouble from ...
2
votes
1answer
157 views

Can VPN on router connected to the modem bypass a double NAT created by two routers unbridged and connected to each other?

I can't seem to get my head around this scenario. If I am right, a VPN configured on the client-side/workstation would definitely bypass double NAT but on this scenario: Modem <-bridged-> Router ...
0
votes
1answer
38 views

Newby setting up a small business with an IP Credit card machine [closed]

I have a small network with a shared internet connection. I have a router separating my network and everything into an unmanaged switch. The credit card machine security ran a check and said we are ...
3
votes
1answer
361 views

Cisco ASA5516 9.8(2) IKEv2 negotiation aborted due unsupported failover version

I have a site to site connection from the ASA to an Azure subscription. The site to site session starts up fine, but after a few minutes (from 3 to 25) the connection fails. If on ASDM I open ...
2
votes
1answer
104 views

how security association (SA) is established?

I'm a newbie in networking, still struggling to understand some concepts. I was reading a text describes security association (SA) in VPN. Whenever router R1 needs to construct an IPsec datagram for ...
3
votes
1answer
278 views

ASA5516 9.8(2) IKEv2 (no BGP) site to site connection with Azure fails

I have a Azure subscription, with a virtual network where the gateway subnet is 172.26.0.0/27, and then I have a number of subnets, e.g. 172.26.1.0/24, 172.26.2.0/24, 172.26.3.0/24, .... On the ...
1
vote
1answer
61 views

Pass traffic from remote access to site to site tunnel

I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
1
vote
1answer
119 views

Cisco RV325 VPN to Remote Site with Multiple VLANs

We've been running a VPN over two Cisco RV325's successfully using the following mapping: Site1: IPS="NAME=g2gips0&WEBNAME=Site2&LSUBNET=10.10.0.0&LMASK=255.255.255.0&RG_IP=71.XXX.XXX....
0
votes
2answers
27 views

One client VPN certificate for whole company, different passwords

What are the security concerns, when using OpenVPN and whole company has one client certificate, but for each client, it is exported with different password? Should each client has its own ...
1
vote
1answer
76 views

With large file transfer packets are dropped with the error “IDP detection OOO Exceeded Max” on encryption/decryption engine subsystem

We have an in-house application for sending large files. Using TCP/IP this application uploads the files to a server on our main office network and then sends a link to the file as part of an email. ...
1
vote
1answer
71 views

Establishing connection between two 2 devices in 2 different subnets

I have a problem regarding routing between two subnets. Here is how the structure of my company network looks like: There's a subnet that has an IP: 172.16.218.0 (which is company's main network ...
1
vote
1answer
30 views

Connect office to multiple customer VPNs

First time post here so if this is off topic please let me know where to ask this question. A company that provides outsource billing services to multiple client companies using VPNs to each remote ...
2
votes
1answer
185 views

L2TP IPSec Remote VPN - Many users connecting remotely from same access

Can someone explain to me, why isn't possible to connect 2 or more clients to a VPN server when the users are behind the same public IP (NAT/PAT). What I mean is: if there is already a user connected ...
2
votes
1answer
51 views

What does 22/23 and 10.3/11.4 mean and why cannot access internet?

What does this specification mean? I asked the one who gave me this but I did not understand. Vlan 22/23 192.168.10.3/11.4 a) Does 22/23 mean that 23 subnets have been allocated b) The forward ...
2
votes
1answer
91 views

Latency-sensitive channel bonding

One of our satellite offices is connected by a Satellite connection with no other high bandwidth option. Reliability is good and bandwidth is acceptable (50/10 MB/s), but latency is making, ssh, VPN ...
1
vote
1answer
384 views

How should I connect two sites through the internet? [closed]

I have two sites which are 3km away from each other, both sites have internet access from the same ISP. I would like both sites to have access to each other throught the internet routers (TP-Link TD-...
1
vote
0answers
27 views

What do these commands mean in laymans terms? [closed]

I am working on a project in packet tracer and Currently am creating a VPN for my WAN-RTR to PRIVATEWANRTR to BRANCH-2 from HQ. I have successfully created the VPN and memorized the commands. However ...
2
votes
0answers
29 views

encryption gateway vs domain and source ip issues [closed]

(This is the same setup as a previous question.) My VPN connection was no longer working (for ~4h), so I called the remote end's tech support. While we were talking, the link mysteriously started ...
0
votes
1answer
188 views

Configuring IPsec VPN and TTL

I have two sites, each using their own firewall. Once a Cisco Meraki, another a Cisco ASA. The two sites use IPsec to establish a VPN tunnel. The Question: If each of the two sites have different ...
0
votes
0answers
19 views

IPsec VPN Setup

Below is the flow 10.1.0.0>Data Center Firewall>Internet Router> ----Internet---- So basically i am setting up new ipsec tunnel between two Cisco internet routers for branch office users to access ...
-1
votes
3answers
247 views

Connecting to subnets with IPSec VPN, how to route?

I set up a site-to-site VPN between two TP-Link routers, following the instructions here: https://www.tp-link.com/ae/faq-380.html . The VPN is based on IPSec. Now both routers say that the IPSec ...
0
votes
1answer
37 views

Will Virtual LANs slow down my network? [closed]

Will virtual LAN connections (peer to peer) like those made with https://www.freelan.org/ slow down my network?
0
votes
1answer
63 views

Is it possible to append custom data to every packet of a request? [closed]

For an end-to-site VPN, i.e. where a device (VPN client) is responsible for encapsulating the GRE packet, is it possible to send some custom data along with the GRE packet beyond just the standard ...
8
votes
3answers
1k views

How do VPN's forward network traffic? (Layer 3)

I am looking for some info on how VPN's (Virtual Private Network) forward network traffic through its VPS (Virtual Private Server). Take an example where you are connected to a VPN. You make a ...
2
votes
1answer
122 views

How do protocols like PPTP, L2TP work below IP level

I have been using these protocols without deep understand how everything works under the hood. I understand a process of tunneling as follows When we are using protocols like OpenVPN, IPSec, SSH ...
4
votes
1answer
69 views

Confused on perfect forward secrecy, someone kindly help me

i just read following article In IPsec VPN, how is the pre-shared key encrypted? got knowledge about phase 1 also basic line over PFS: for every new negotiation of Phase 2 SA the 2 gateways must ...
2
votes
1answer
73 views

Cisco ASA 5525 VPN authentication with gmail account

I'm wondering if it's possible to setup a VPN authentication to Cisco asa firewall by using gmail account? Each time me or any of my users want to use VPN we could use our gmail credentials and it ...
1
vote
0answers
117 views

Amazon AWS VPN Bidirectional Device Access

After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC. However, both the EC2 ...
1
vote
1answer
93 views

ASA packet routing problem after upgrade, wrong output next-hop due to vpn route?

We just replaced an ASA5510 with a new ASA5516x. Everything worked smoothly except for traffic between our network and traffic on the customer end of a site-to-site VPN tunnel. Old system: ASA5510 ...