Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
518
questions
0
votes
0answers
6 views
Connect two networks via openvpn, but not at router level, both servers are linux VM's [closed]
I have two remote networks (windows computer mainly), call them network A and B.
I have a linux vm running on network A (windows 10 host) and i'm thinking on setting up an openVPN server (call it ...
0
votes
1answer
37 views
Traceroute through ipsec tunnel
askk
Hi
when i do traceroute from host 192.168.11.0/24 to the server 10.0.0.0/24 which is site B when the packets get into the public area it show 'request timed out' as shown in this figure im using ...
0
votes
0answers
17 views
pfsense in multi-WAN: OpenVPN route all traffic through VPN, how to set the gateway?
I have an OpenVPN running on pfSense in a CARP with multi-WAN. OpenVPN listens on all incomming (0.0.0.0) so that I can enter throu what ever WAN is active right now should one go down.
When I ...
0
votes
0answers
16 views
Sonicwall Site to Site VPN stops working when “Use this VPN Tunnel as default route for all Internet traffic”
I have two Sonicwall TZ300s that have a site-to-site VPN configuration successfully configured. I am trying to send all remote site VPN traffic to the WAN connection of the Central site.
I have ...
1
vote
0answers
39 views
Unable to Initiate a VPN tunnel using IKEv2
I'm having an issue with a VPN tuunel between my Firewall (ASA 5516-X) and a third party firewall so I can't check the config in the second firewall. So I decide to debug my firewall and I realized ...
1
vote
3answers
80 views
Understanding how VPNs work?
I am trying to understand how VPNs work. Most of the posts/blogs on the internet say that all your traffic is routed through a VPN server. This sounds like proxy to me??
Another point that is commonly ...
-1
votes
1answer
35 views
VPN server acting as a client for another VPN server [closed]
I was wondering if it's possible to have a VPN server that goes though another VPN server.
Here a scenario that might explain my idea better: I have 4 computers
'A' - My Windows machine
'B' - My VPN ...
3
votes
2answers
60 views
Configuring Cisco ASA DAP policies from CLI! (Automating bulk task)
So I have given a task to add 1000s of DAP policies after main DAP file crashed and backup is not available due to unfortunate reasons.
There is predefined way of doing it through ASDM which is very ...
1
vote
0answers
38 views
How can I disable TLS on my openvpn server? [closed]
I am using PiVPN and set up an openvpn server. Myself and a coworker can connect to the vpn remotely with the generated .ovpn files we imported into openvpn clients. I tried creating a .p12 ...
1
vote
1answer
45 views
AWS connectivity UDP works but TCP times out
I have some issues here I have built an L2l VPN from my location to AWS London, I can see that the tunnel is up but when I attempt to connect our local domain controller here in our office to AWS ...
-1
votes
2answers
82 views
VPNs are working in which layer of the OSI model? [closed]
How many types of VPN is out there and in which layer of the OSI model are they working?
4
votes
2answers
92 views
Is Cisco IPsec different from ordinary IPsec?
Is Cisco IPsec different from ordinary IPsec?
Although Windows 10 has built-in VPN support for L2TP/IPSec, it does not support IPSec provided by Cisco.
Thus, we generally need to install hand-made ...
2
votes
3answers
98 views
Is it possible to build VPN remote access environment without VPN server? [closed]
Is it possible to build VPN remote access environment without VPN server?
In this case, only VPN router on top of LAN is sufficient?
If not, why is the server needed in general?
0
votes
0answers
18 views
does ipsec phase1 renewal keep connections?
I have an IPSec tunnel UP and I open a TCP connection
when the phase1 expire and is renewed,
Is the TCP connection supposed to stay alive or drop ?
both in the theory and practical (cisco, ...
3
votes
1answer
54 views
Meraki in Passthrough mode behind ASA
I am having trouble getting bidirectional traffic through a Meraki box behind a ASA 5508-X. I can see requests from the client VPN going from a client device to a server on our LAN, the server ...
0
votes
1answer
29 views
Remote access to the network without port forwarding (blocked by ISP) - VPN [closed]
I need to setup a following configuration:
A router Mikrotik is connected to the internal Network1. The router has a USB 3G modem that is connected to it and enables internet access from the ...
0
votes
0answers
41 views
NAT setup for two LANs on same router
We have a moxa edr 810 series router , we have few devices connected to the router as below.
We are using IPsec tunnel for VPN.
From VPN we are able to connect Device 2 , but not able to connect to ...
0
votes
1answer
26 views
Whats the security difference between Policy Based IPSec VPN tunnel vs HTTPS + Basic auth
We have several customers with the same service installed within their DMZ. This service is a HTTPS server. The server does not have authentication, this is solved by configuring the NetScaler ...
0
votes
0answers
23 views
Anyconnect Cisco 5505 VPN Group cannot Access Inside Network
Below is the Configuration to my Cisco ASA. I can connect to VPN but then trapped and cannot enter the inside network.
ASA Version 9.2(4)27
!
hostname AwBTech-ASA
domain-name awbtech
enable password ...
3
votes
0answers
81 views
Need to configure site to site SSL VPN between two Cisco routers
I would like to configure site-to-site SSL VPN between two sites.
I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
0
votes
1answer
40 views
How to troubleshoot VPN packet issues? [closed]
I'm a web developer (10 yrs), and am tech savy, but don't know a lot about networking, so please forgive my ignorance. I work from home, so I'm always on my company VPN.
Over the last several weeks I'...
0
votes
0answers
22 views
How do I make a VPN connection between a fixed IP address Sonicwall and a Cisco with a dynamic IP address
I need to create a vpn between a sonicwall that has a fixed ip address and a cisco with a dynamic address. The problem I have is how can I identify the cisco device in the sonic
2
votes
0answers
72 views
Ikev2 (flexvpn) AAA authentication via radius
My problem is I currently develop a new configuration on IKEV2 VPN connection. The main idea is the client VPN routers are authenticate trough a VPN concentrator where an AAA authenticion set to a ...
0
votes
1answer
36 views
qos inside vpn, possible or not ? I read yes and no
I am wondering if possible to do QOS (or similar action) inside vpn tunnel to a cloud server. the goal is to reserved bandwith for voip traffic.
I read that you can with GRE and other people said, ...
1
vote
0answers
36 views
Cisco ASA: Windows DHCP doesn't bind IP address after failover change active [closed]
Equipment and soft:
Two Cisco ASA 5540, ASA ver. 9.1(7)32, active/standby failover
DHCP server: Windows server 2016
Anyconnect VPN clients get IP addresses from DHCP servers. Everything works ...
2
votes
3answers
44 views
Correct term for networks created for virtual machines and containers?
What is the correct term for the type of network created for virtual machines and for containers. For illustration a Linux virtual host might have devices docker0 as 02:42:a6:79:a6:bc with address 172....
2
votes
1answer
52 views
MAC Address not resolving when IPSec VPN in place
I've created an IPSec VPN connection between two Mikrotik routers. They are connecting via IKEv2.
Inside our two networks, we have a printer spooler which needs the printer's MAC address to verify it'...
2
votes
1answer
45 views
Juniper SRX Destination NAT for L2TP server
I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks.
I've had some success with this post:
https://forums.juniper.net/t5/...
1
vote
0answers
38 views
pfSense - VPN access to the printer only
in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
3
votes
2answers
91 views
Why is VPN not a protocol?
Is VPN a layer 3 concept?
says "VPN is not a protocol".
Is VPN an application instead?
Why is VPN not a protocol?
How can I tell if something is a protocol or not?
Thanks.
3
votes
3answers
678 views
Is VPN a layer 3 concept?
From Tanenbaum's Computer Network
This demand soon led to the invention of VPNs (Virtual Private Networks),
which are overlay networks on top of public networks but with most of the properties of ...
1
vote
1answer
154 views
Keep Cisco site-to-site tunnel up permanently
I have Cisco ASA site-to-site tunnel with remote and which i don't have control.
I have following config:
crypto ikev1 policy 10
authentication pre-share
encryption aes
hash sha
group 2
...
1
vote
1answer
89 views
Firewall and VPN configuration?
I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
2
votes
2answers
46 views
Are both VPN and NAT alternative ways to provide access to a private network?
https://en.wikipedia.org/wiki/Virtual_private_network
A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or ...
0
votes
1answer
44 views
OSPF and /30 for IPSEC VPN links on routes which support routing (as opposed to polices)
Traditionally i have always set IPSEC policies as /24 (/16 etc) on routers that had policies for encrypting IPSEC traffic (as opposed to routes).
I have since started using a router (Fortinet) that ...
1
vote
1answer
80 views
IPSec route-based vpn st0 interface
As i know, the st0 interface is used when the gateways are configured with route based VPN.
But my question is, say below is the topology
A<---->B<---->C<---->D
A and D are hosts, B and C ...
1
vote
0answers
118 views
DNS not resolving through VPN
Looking for some help with our Office's VPN that I can't seem to solve...
I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
2
votes
0answers
36 views
Question about creating Subnets for a large amount of sites that will make a site-site tunnel to our datacenter [closed]
Our data center network is:
10.20.44.X/24
I want to have our sites use 10.X.X.X/24 (Site Number, VLAN, host)
EG:
Site 30
10.30.10.X/24 10.30.20.X/24
10.X would be corporate network 20.X would be ...
1
vote
1answer
65 views
Difference between WAN and VPN(tunnels)
I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
0
votes
0answers
131 views
F5 Big IP Client VPN is disconnecting frequently!
Our VPN(F5 Big IP Client) Disconnects After Few Minutes. We are using Split tunnel as per our client requirement. I checked with our Firewall support(Sophos)they even created a unfiltered rule in case ...
0
votes
0answers
55 views
ASA - communication between 2 tunnels
I have two IPSEC tunnels with an ASA in the middle
Site A - 10.20.4.0 /24 (65.176.80.84)
Site B - 192.168.142.0 /24
ASA - 10.99.206.0 /24 (95.12.22.33
Site A - 10.20.4.0 /24 can reach the ASA and ...
-2
votes
1answer
76 views
IPSec SA being Unidirectional
From what I’ve read, IKE SAs are Birectional and IPSec SAs are unidirectional.
But if the same proposals are to be agreed by both the ends, say protocol esp, Authentication algorithm as hmac-sha1-...
0
votes
1answer
53 views
Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]
Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
3
votes
1answer
161 views
Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource
Multiple VPNs setup with a Juniper SRX320.
The SRX320 has an irb interface as follows:
irb {
unit 0 {
family inet {
address 192.168.120.1/24;
}
}
}
I've setup ...
0
votes
1answer
31 views
SonicWall global vpn
I have a SonicWall device, and I am new to them.
I created the global vpn and, after installing the SonicWall at the customer's site, wanted to make some configuration changes. I am using the global ...
3
votes
1answer
69 views
High Availability for ISR 4431 IPSec VPNs
I have the following lab setup in GNS3. R1 & R2 are VPN endpoint at my datacenters and R3 is simulating a remote site. What i'm trying to accomplish is having one tunnel from R3 to the ...
1
vote
0answers
24 views
Why can I not see the default gateway when connecting to ASA through AnyConnect?
I've configured an ASA as an AnyConnect server. The IP address pool that'll be assigned to the connecting hosts is from 192.168.10.1-192.168.10.10. Now when I establish a remote access connection to ...
1
vote
0answers
80 views
Why do the tunnel protocol on these two router show different values
Two routers R1 and R2 have a tunnel built between them in the 103.103.103.0/24 network. The end point of the tunnel are 75.75.75.2(on R1) and 76.76.76.2(on R2).
Can anyone explain why does the Tunnel ...
1
vote
1answer
28 views
Can a VPN tunnel between routers be built with different tunnel protocol on both ends?
I have two routers and the tunnel between them is up and working well. Router1 has GRE/IP as the protocol on its tunnel interface, and as for Router2 the tunnel interface is working with IPSEC/IP. Can ...
3
votes
1answer
588 views
AWS - VPC/VPN - new non-redundant VPN connections notification
Apologies if this isn't the place.
I have an AWS VPC VPN issue whereby I am getting a notification in the site-to-site VPN tab under VPC stating that I have new non-redundant VPN connections (please ...
