For questions about Virtual Private Networks (VPNs).
-1
votes
0answers
26 views
what is the life cycle of my Data in VPN? [closed]
what happened to my data, from the moment I send it from my laptop, through a VPN until it reaches its destination?
1
vote
1answer
55 views
how security association (SA) is established?
I'm a newbie in networking, still struggling to understand some concepts. I was reading a text describes security association (SA) in VPN.
Whenever router R1 needs to construct an IPsec datagram for ...
0
votes
0answers
20 views
How to debug a VPN (OpenVPN) outage? [closed]
At work we have a cluster with 30 OpenVPN machines and since the last software update sometimes lots of them go down at the same time.
I have almost 0 experience with OpenVPN. Are there good ways to ...
2
votes
1answer
48 views
ASA5516 9.8(2) IKEv2 (no BGP) site to site connection with Azure fails
I have a Azure subscription, with a virtual network where the gateway subnet is 172.26.0.0/27, and then I have a number of subnets, e.g. 172.26.1.0/24, 172.26.2.0/24, 172.26.3.0/24, ....
On the ...
0
votes
0answers
14 views
Route based vpn in strongswan - the same remote subnets [closed]
All companies has got the same subnet.
I want to run Route Based Ipsec.
ipsec.conf
conn company A
authby=secret
ike=3des-sha1-modp1024
esp=3des-sha1
left=X.X.X.X
leftsubnet=10.0.10.0/24
...
1
vote
1answer
32 views
Pass traffic from remote access to site to site tunnel
I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
0
votes
1answer
26 views
Cisco RV325 VPN to Remote Site with Multiple VLANs
We've been running a VPN over two Cisco RV325's successfully using the following mapping:
Site1: IPS="NAME=g2gips0&WEBNAME=Site2&LSUBNET=10.10.0.0&LMASK=255.255.255.0&RG_IP=71.XXX.XXX....
0
votes
0answers
23 views
Openswan VPN tunnel to CISCO connected but no Traffic - No route to host
I have configured VPN tunnel using Openswan to connect with ASA 5555 and tunnel is UP but when i telnet remote host with public IP it says no route to host but the remote host can telenet my IP.
Any ...
0
votes
2answers
21 views
One client VPN certificate for whole company, different passwords
What are the security concerns, when using OpenVPN and whole company has one client certificate, but for each client, it is exported with different password?
Should each client has its own ...
0
votes
1answer
26 views
With large file transfer packets are dropped with the error “IDP detection OOO Exceeded Max” on encryption/decryption engine subsystem
We have an in-house application for sending large files. Using TCP/IP this application uploads the files to a server on our main office network and then sends a link to the file as part of an email. ...
0
votes
1answer
41 views
Establishing connection between two 2 devices in 2 different subnets
I have a problem regarding routing between two subnets.
Here is how the structure of my company network looks like:
There's a subnet that has an IP: 172.16.218.0 (which is company's main network ...
0
votes
1answer
20 views
Connect office to multiple customer VPNs
First time post here so if this is off topic please let me know where to ask this question.
A company that provides outsource billing services to multiple client companies using VPNs to each remote ...
0
votes
0answers
22 views
Troubleshooting VPN
I have a site to site VPN from a Sonicwall TZ SOHO device to AWS VPC. It has been working for more than a year.
The Sonicall (the only side I control, the other AWS I don't have access to. It's a 3rd ...
1
vote
1answer
59 views
L2TP IPSec Remote VPN - Many users connecting remotely from same access
Can someone explain to me, why isn't possible to connect 2 or more clients to a VPN server when the users are behind the same public IP (NAT/PAT).
What I mean is: if there is already a user connected ...
0
votes
0answers
30 views
Poor VPN Performance
Initial configuraion
<internet provider WAN> -- router/modem -- switch ------ clients(s)
The "router/modem" DHCP handles 192.168.1.X.
New configuration
<internet provider WAN> -- ...
0
votes
0answers
32 views
Remote SSL VPN Overlapping
I've configured a remote SSL VPN on Cisco ASA (9.2).
The local network is 192.168.1.0/24. The server I want to reach, from remote, is 192.168.1.5. The VPN IP pools are on 192.168.40.0/24 network.
On ...
1
vote
1answer
42 views
What does 22/23 and 10.3/11.4 mean and why cannot access internet?
What does this specification mean? I asked the one who gave me this but I did not understand.
Vlan 22/23 192.168.10.3/11.4
a) Does 22/23 mean that 23 subnets have been allocated
b) The forward ...
1
vote
1answer
63 views
Latency-sensitive channel bonding
One of our satellite offices is connected by a Satellite connection with no other high bandwidth option. Reliability is good and bandwidth is acceptable (50/10 MB/s), but latency is making, ssh, VPN ...
1
vote
1answer
383 views
How should I connect two sites through the internet? [closed]
I have two sites which are 3km away from each other, both sites have internet access from the same ISP. I would like both sites to have access to each other throught the internet routers (TP-Link TD-...
1
vote
0answers
26 views
What do these commands mean in laymans terms? [closed]
I am working on a project in packet tracer and Currently am creating a VPN for my WAN-RTR to PRIVATEWANRTR to BRANCH-2 from HQ. I have successfully created the VPN and memorized the commands. However ...
2
votes
0answers
24 views
encryption gateway vs domain and source ip issues
(This is the same setup as a previous question.)
My VPN connection was no longer working (for ~4h), so I called the remote end's tech support. While we were talking, the link mysteriously started ...
0
votes
1answer
65 views
Configuring IPsec VPN and TTL
I have two sites, each using their own firewall. Once a Cisco Meraki, another a Cisco ASA. The two sites use IPsec to establish a VPN tunnel.
The Question: If each of the two sites have different ...
0
votes
0answers
15 views
IPsec VPN Setup
Below is the flow
10.1.0.0>Data Center Firewall>Internet Router> ----Internet----
So basically i am setting up new ipsec tunnel between two Cisco internet routers for branch office users to access ...
-1
votes
3answers
56 views
Connecting to subnets with IPSec VPN, how to route?
I set up a site-to-site VPN between two TP-Link routers, following the instructions here: https://www.tp-link.com/ae/faq-380.html . The VPN is based on IPSec. Now both routers say that the IPSec ...
0
votes
1answer
32 views
Will Virtual LANs slow down my network? [closed]
Will virtual LAN connections (peer to peer) like those made with https://www.freelan.org/ slow down my network?
0
votes
1answer
49 views
Is it possible to append custom data to every packet of a request? [closed]
For an end-to-site VPN, i.e. where a device (VPN client) is responsible for encapsulating the GRE packet, is it possible to send some custom data along with the GRE packet beyond just the standard ...
8
votes
3answers
1k views
How do VPN's forward network traffic? (Layer 3)
I am looking for some info on how VPN's (Virtual Private Network) forward network traffic through its VPS (Virtual Private Server).
Take an example where you are connected to a VPN. You make a ...
1
vote
1answer
49 views
How do protocols like PPTP, L2TP work below IP level
I have been using these protocols without deep understand how everything works under the hood.
I understand a process of tunneling as follows
When we are using protocols like OpenVPN, IPSec, SSH ...
4
votes
1answer
62 views
Confused on perfect forward secrecy, someone kindly help me
i just read following article In IPsec VPN, how is the pre-shared key encrypted?
got knowledge about phase 1
also basic line over PFS: for every new negotiation of Phase 2 SA the 2 gateways must ...
2
votes
1answer
52 views
Cisco ASA 5525 VPN authentication with gmail account
I'm wondering if it's possible to setup a VPN authentication to Cisco asa firewall by using gmail account?
Each time me or any of my users want to use VPN we could use our gmail credentials and it ...
1
vote
0answers
62 views
Amazon AWS VPN Bidirectional Device Access
After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC.
However, both the EC2 ...
1
vote
1answer
50 views
ASA packet routing problem after upgrade, wrong output next-hop due to vpn route?
We just replaced an ASA5510 with a new ASA5516x. Everything worked smoothly except for traffic between our network and traffic on the customer end of a site-to-site VPN tunnel.
Old system: ASA5510 ...
2
votes
2answers
162 views
redundant vpn to remote location with redundant links
I have this situation:
Remote location with 6 devices collecting data and each connected to two VPN routers. Bonding is set up for those computers and data is sent to multicast address. Each VPN ...
1
vote
1answer
48 views
IPv6 VPNs source address selection
Say I have the following IPv6 prefix assigned to me by my ISP :
2a01:1000:1000::/48 with 2a01:1000:1000::1/48 assigned to my VPN server.
I set up a VPN with a /64 from that block to assign to my ...
0
votes
2answers
219 views
IPSec VTI on Cisco ISR reporting up/up and decapsulating packets, but not encapsulating
I'm configuring a VPN connection between two sites. Site A has an ASA (9.8.2) and the other site an ISR 2911 (15.4 I think - I'll have to double check). I'm using VTIs for a routed VPN. The tunnel is ...
0
votes
0answers
55 views
Problem configuring AnyConnect on V1000 on AWS
I am trying to set up AnyConnect on a Cisco 1000V that is running in AWS. I have followed the instructions from https://supportforums.cisco.com/t5/security-documents/configure-sslvpn-on-cisco-cloud-...
0
votes
0answers
46 views
How To: SonicWall - New Subnet, Synology Fileserver connected X2, Accessable from LAN(X0) and SSL VPN
I have some specific Questions, because I cant figure out how the SonicWall works. To excuse me beforehand: I am not a SysAdmin but I need to configure the SonicWall properly. (Like thrown into the ...
1
vote
1answer
209 views
Cisco ASA IP object vs TCP/UDP object wrt VPN Filters
When it comes to managing access rules in Cisco ASAs I always use ASDM because it's easier for me to visualize, troubleshoot and manage.
I recently created a VPN filter for a S2S IPsec VPN and ...
0
votes
1answer
57 views
Tracert getting timeout on second packet consistenly
I'm on a vpn and tracing to virtualmachines that live in the VPN Server.
I've been experiencing slow queries, when they should be fast.
below is what the trace is returning.
I'm curious as to why the ...
1
vote
1answer
453 views
SonicWall is dropping encrypted packets with error “sonicwall ipsec vpn decryption failed selector check error”
I have implemented a Site-to-Site IPsec tunnel between a Juniper SSG firewall and a SonicWall.
However, any traffic that I send over the tunnel gets dropped on the SonicWall with an error saying ...
3
votes
1answer
215 views
L3 core switch and VPN access
At work we have a cisco 3560 L3 core, in which we implement all our L3 VLANs and ACLs controlling inter-vlan routing. As far as client machines are concerned, the L3 switch is the default gateway, ...
2
votes
1answer
76 views
In a site-to-site VPN, can a computer on site A use the gateway on site B?
I'm running a site-to-site VPN set up with 2 Ubiquity Edgemax routers. Hosts on both sites can see each other, etc. I'm looking for a way to set up site B in a way that all of its hosts use site A as ...
1
vote
2answers
768 views
Cisco ASA MTU vs TCP MSS
I am trying to set jumbo MTU for Cisco ASA 5585 and I did following:
asa1/pri/act(config)# mtu inside 9000
INFO: Jumbo frames should be enabled to receive packets more than 1500 MTU
Use '...
0
votes
2answers
201 views
Command “ip nhrp map multicast dynamic” is not being saved into the configuration
For some reason, my Cisco router is not saving the command "ip nhrp map multicast dynamic". The command is recognized but not being saved to the configuration. I am not receiving any errors. Any ...
2
votes
2answers
250 views
Cisco ASA - LDAP Authentication issue
I've configured the ASA for LDAP authentication and successfully tested with the "Test aaa-server" command. However when I attempt to connect via Clientless VPN, I am unable to log in. Local users are ...
0
votes
2answers
125 views
IPv6 in PPP - should be an Interface Identifier negotiated FOR both ends of a link? Clarification of RFC 5072 needed
I am trying to implement IPv6 in an existing VPN PPP software, but having hard time of understanding some of the RFC 5072 sections meaning. Namely, section 4.1.
Assumption 1: PPP interfaces do not ...
0
votes
1answer
47 views
Can I run a VPN faster than internet using custom router + optimized protocol other than TCP/IP?
If I make a VPN using a custom, optimized hardware router, running a customized routing protocol much more efficient than TCP/IP, put it in place of the router my ISP gave me, then is it possible to ...
2
votes
1answer
118 views
VPN S2S/L2L between 2 ASA 5506-X
I have a problem to create a VPN L2L between 2 ASA 5506-X (see the pictures bellow).
I configure my 2 firewall inspired by the majority of tutorials found on the NET.
I correctly place client PCs in ...
1
vote
1answer
371 views
Cisco ASA DH group and Lifetime of Phase 2
Not very good with ASAs so please have that in mind.
I need to replace an ASA but can't seem to get some info on Phase 1 and Phase 2. I can get everything from Phase 1 except the DH group (got PFS ...
1
vote
2answers
213 views
SIte-to-Site VPN between ASAv8 and ASAv9: NAT issue
I'm setting up a site-to-site via ASDM. Initially I configured both devices correctly, matching policies, crypto, etc and set both inside networks as "NAT exempt". Problem is, when I apply changes on ...
