Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
2
votes
1answer
77 views
Is it possible to build VPN remote access environment without VPN server?
Is it possible to build VPN remote access environment without VPN server?
In this case, only VPN router on top of LAN is sufficient?
If not, why is the server needed in general?
0
votes
0answers
10 views
Can I replace a generic router with NAS router [on hold]
At present for my local network I have a normal router without VPN support. For backup purpose I was planning for Network Attached Storage (NAS) device. What I see is that this NAS has VPN Server ...
0
votes
0answers
13 views
connections hang forever with VPN [on hold]
I access corporate resources through vpn (OpenVPN). The problem appears only when I am outside of the company (inside I am using wifi), when I am using my phone's network. The symptoms are following:
...
0
votes
0answers
19 views
What is exactly builtin VPN client? [on hold]
I'm wondering what differentiates built in VPN or third party VPN client.
For example, iPhone has excellent VPN support for client.
Is this a functionality provided by OS?
Or, is this just like ...
0
votes
0answers
12 views
Windows use LAN but also have access to SMB share on remote Server [on hold]
I have a Virtual Private Server hosting an SMB share that I would like to have permanent access to on my Windows 10 machine (via mounting it as a network drive in Windows Explorer).
The server is ...
0
votes
0answers
14 views
How should i modify this network diagram if i am planning to implement a Software Defined Perimeter? [on hold]
Usually there are employees that connect to the remote access server in the DMZ. However, the company is facing DoS attacks from one of those trusted connections. I am planning to opt for an SDP. What ...
0
votes
0answers
14 views
does ipsec phase1 renewal keep connections?
I have an IPSec tunnel UP and I open a TCP connection
when the phase1 expire and is renewed,
Is the TCP connection supposed to stay alive or drop ?
both in the theory and practical (cisco, ...
0
votes
0answers
18 views
openVPN client connects to VPN server from Android app but not from Ubuntu or iOS app [closed]
Disclaimer: I am posting with full knowledge that the school owns the network and has every right to restrict traffic as they wish.
My rpi3 is running an openVPN server configured using PiVPN and it'...
0
votes
0answers
15 views
Shadowsocks speed vs VPN speed [closed]
I've been looking at Outline and the underlying technology, ShadowSocks
From what I understand, ShadowSocks is a Socks5 proxy with encryption built in.
Usually VPNs tend to be slower than Socks ...
2
votes
0answers
34 views
Meraki in Passthrough mode behind ASA
I am having trouble getting bidirectional traffic through a Meraki box behind a ASA 5508-X. I can see requests from the client VPN going from a client device to a server on our LAN, the server ...
0
votes
1answer
24 views
Remote access to the network without port forwarding (blocked by ISP) - VPN [closed]
I need to setup a following configuration:
A router Mikrotik is connected to the internal Network1. The router has a USB 3G modem that is connected to it and enables internet access from the ...
0
votes
0answers
35 views
NAT setup for two LANs on same router
We have a moxa edr 810 series router , we have few devices connected to the router as below.
We are using IPsec tunnel for VPN.
From VPN we are able to connect Device 2 , but not able to connect to ...
0
votes
1answer
26 views
Whats the security difference between Policy Based IPSec VPN tunnel vs HTTPS + Basic auth
We have several customers with the same service installed within their DMZ. This service is a HTTPS server. The server does not have authentication, this is solved by configuring the NetScaler ...
0
votes
0answers
20 views
Anyconnect Cisco 5505 VPN Group cannot Access Inside Network
Below is the Configuration to my Cisco ASA. I can connect to VPN but then trapped and cannot enter the inside network.
ASA Version 9.2(4)27
!
hostname AwBTech-ASA
domain-name awbtech
enable password ...
3
votes
0answers
74 views
Need to configure site to site SSL VPN between two Cisco routers
I would like to configure site-to-site SSL VPN between two sites.
I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
0
votes
1answer
31 views
How to troubleshoot VPN packet issues? [closed]
I'm a web developer (10 yrs), and am tech savy, but don't know a lot about networking, so please forgive my ignorance. I work from home, so I'm always on my company VPN.
Over the last several weeks I'...
0
votes
0answers
21 views
How do I make a VPN connection between a fixed IP address Sonicwall and a Cisco with a dynamic IP address
I need to create a vpn between a sonicwall that has a fixed ip address and a cisco with a dynamic address. The problem I have is how can I identify the cisco device in the sonic
2
votes
0answers
68 views
Ikev2 (flexvpn) AAA authentication via radius
My problem is I currently develop a new configuration on IKEV2 VPN connection. The main idea is the client VPN routers are authenticate trough a VPN concentrator where an AAA authenticion set to a ...
0
votes
1answer
33 views
qos inside vpn, possible or not ? I read yes and no
I am wondering if possible to do QOS (or similar action) inside vpn tunnel to a cloud server. the goal is to reserved bandwith for voip traffic.
I read that you can with GRE and other people said, ...
1
vote
0answers
26 views
Cisco ASA: Windows DHCP doesn't bind IP address after failover change active [closed]
Equipment and soft:
Two Cisco ASA 5540, ASA ver. 9.1(7)32, active/standby failover
DHCP server: Windows server 2016
Anyconnect VPN clients get IP addresses from DHCP servers. Everything works ...
2
votes
3answers
44 views
Correct term for networks created for virtual machines and containers?
What is the correct term for the type of network created for virtual machines and for containers. For illustration a Linux virtual host might have devices docker0 as 02:42:a6:79:a6:bc with address 172....
2
votes
1answer
49 views
MAC Address not resolving when IPSec VPN in place
I've created an IPSec VPN connection between two Mikrotik routers. They are connecting via IKEv2.
Inside our two networks, we have a printer spooler which needs the printer's MAC address to verify it'...
2
votes
1answer
38 views
Juniper SRX Destination NAT for L2TP server
I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks.
I've had some success with this post:
https://forums.juniper.net/t5/...
1
vote
0answers
31 views
pfSense - VPN access to the printer only
in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
3
votes
2answers
91 views
Why is VPN not a protocol?
Is VPN a layer 3 concept?
says "VPN is not a protocol".
Is VPN an application instead?
Why is VPN not a protocol?
How can I tell if something is a protocol or not?
Thanks.
3
votes
3answers
668 views
Is VPN a layer 3 concept?
From Tanenbaum's Computer Network
This demand soon led to the invention of VPNs (Virtual Private Networks),
which are overlay networks on top of public networks but with most of the properties of ...
1
vote
1answer
109 views
Keep Cisco site-to-site tunnel up permanently
I have Cisco ASA site-to-site tunnel with remote and which i don't have control.
I have following config:
crypto ikev1 policy 10
authentication pre-share
encryption aes
hash sha
group 2
...
1
vote
1answer
68 views
Firewall and VPN configuration?
I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
2
votes
2answers
44 views
Are both VPN and NAT alternative ways to provide access to a private network?
https://en.wikipedia.org/wiki/Virtual_private_network
A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or ...
0
votes
1answer
42 views
OSPF and /30 for IPSEC VPN links on routes which support routing (as opposed to polices)
Traditionally i have always set IPSEC policies as /24 (/16 etc) on routers that had policies for encrypting IPSEC traffic (as opposed to routes).
I have since started using a router (Fortinet) that ...
1
vote
1answer
50 views
IPSec route-based vpn st0 interface
As i know, the st0 interface is used when the gateways are configured with route based VPN.
But my question is, say below is the topology
A<---->B<---->C<---->D
A and D are hosts, B and C ...
1
vote
0answers
99 views
DNS not resolving through VPN
Looking for some help with our Office's VPN that I can't seem to solve...
I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
2
votes
0answers
35 views
Question about creating Subnets for a large amount of sites that will make a site-site tunnel to our datacenter [closed]
Our data center network is:
10.20.44.X/24
I want to have our sites use 10.X.X.X/24 (Site Number, VLAN, host)
EG:
Site 30
10.30.10.X/24 10.30.20.X/24
10.X would be corporate network 20.X would be ...
1
vote
1answer
52 views
Difference between WAN and VPN(tunnels)
I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
0
votes
0answers
58 views
F5 Big IP Client VPN is disconnecting frequently!
Our VPN(F5 Big IP Client) Disconnects After Few Minutes. We are using Split tunnel as per our client requirement. I checked with our Firewall support(Sophos)they even created a unfiltered rule in case ...
0
votes
0answers
53 views
ASA - communication between 2 tunnels
I have two IPSEC tunnels with an ASA in the middle
Site A - 10.20.4.0 /24 (65.176.80.84)
Site B - 192.168.142.0 /24
ASA - 10.99.206.0 /24 (95.12.22.33
Site A - 10.20.4.0 /24 can reach the ASA and ...
-2
votes
1answer
50 views
IPSec SA being Unidirectional
From what I’ve read, IKE SAs are Birectional and IPSec SAs are unidirectional.
But if the same proposals are to be agreed by both the ends, say protocol esp, Authentication algorithm as hmac-sha1-...
0
votes
1answer
46 views
Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]
Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
3
votes
1answer
132 views
Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource
Multiple VPNs setup with a Juniper SRX320.
The SRX320 has an irb interface as follows:
irb {
unit 0 {
family inet {
address 192.168.120.1/24;
}
}
}
I've setup ...
0
votes
1answer
30 views
SonicWall global vpn
I have a SonicWall device, and I am new to them.
I created the global vpn and, after installing the SonicWall at the customer's site, wanted to make some configuration changes. I am using the global ...
2
votes
1answer
53 views
High Availability for ISR 4431 IPSec VPNs
I have the following lab setup in GNS3. R1 & R2 are VPN endpoint at my datacenters and R3 is simulating a remote site. What i'm trying to accomplish is having one tunnel from R3 to the ...
1
vote
0answers
23 views
Why can I not see the default gateway when connecting to ASA through AnyConnect?
I've configured an ASA as an AnyConnect server. The IP address pool that'll be assigned to the connecting hosts is from 192.168.10.1-192.168.10.10. Now when I establish a remote access connection to ...
1
vote
0answers
64 views
Why do the tunnel protocol on these two router show different values
Two routers R1 and R2 have a tunnel built between them in the 103.103.103.0/24 network. The end point of the tunnel are 75.75.75.2(on R1) and 76.76.76.2(on R2).
Can anyone explain why does the Tunnel ...
1
vote
1answer
28 views
Can a VPN tunnel between routers be built with different tunnel protocol on both ends?
I have two routers and the tunnel between them is up and working well. Router1 has GRE/IP as the protocol on its tunnel interface, and as for Router2 the tunnel interface is working with IPSEC/IP. Can ...
3
votes
1answer
421 views
AWS - VPC/VPN - new non-redundant VPN connections notification
Apologies if this isn't the place.
I have an AWS VPC VPN issue whereby I am getting a notification in the site-to-site VPN tab under VPC stating that I have new non-redundant VPN connections (please ...
3
votes
1answer
162 views
Azure VPN vs. Cisco ASA
I have a Cisco 5516-x with v9.7(1)21 on my end and I am trying to create a working VPN to Azure. It looks to me like phase1 goes well but phase2 fails due to policy mismatch.
Any suggestions for how ...
2
votes
2answers
48 views
Wireguard protocol understanding source of the received packet
From the docs,
WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following:
This packet is meant for ...
2
votes
1answer
63 views
Wireguard protocol understanding where the packet got sent
From the docs,
WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following:
This packet is meant for ...
1
vote
2answers
64 views
AWS site-to-site VPN and multiple account VPC connections
I've configured a site-to-site VPN from our firewall (watchguard) to AWS.
Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
0
votes
1answer
51 views
VPN MPLS L3 Routing
I have this vpn mpls l3 scenario:
Let's say that the host (10.1.1.2) of customer 1 wants to communicate with host (10.1.2.2) of customer 2. My question is: how R2 knows that it has to forward ...
