Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
0
votes
1answer
37 views

IPSec IKEv2 on pfSense: "parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]"

I am trying to setup an IPSec IKEv2 VPN Network on a pfSense. The pfsense is situated directly behind the modem. I connect to it by a static IP address. There is no double NAT. I followed this ...
4
votes
1answer
104 views

Cisco IOS -> ASA VTI tunnel not routing traffic

I have a VTI tunnel configured between two devices (ASR and ASAv). The tunnel comes up fine and is stable, however traffic appears to be unidirectional, from the ASR -> ASAv but not in the reverse ...
0
votes
0answers
13 views

I connect to a remote server in another continent with sslvpn and ssh. Why it is very slow if I have a good internet connection? [closed]

I know this question is probably very basic, but I wanted to understand the theory behind that. Why is it, for instance, much faster to upload a file to the cloud and download it on the server than ...
0
votes
0answers
14 views

wireguard ipv6 between 2 (or more) sites [closed]

I want to connect our office to servers with VMs in DC using wireguard and ipv6 ULA addresses. The office ULA is FD58:1234:beef:cafe::/64. I want to use the same range for server + VMs in DC. ...
1
vote
0answers
13 views

Personal VPN sub-network accessible through Work VPN? [closed]

I currently access my work network via Cisco VPN. At work, I have my own three computers and NAS on a personal dedicated router using my own DHCP. For several reasons, I do not want these computers to ...
1
vote
1answer
3k views

Cisco ASA VPN disconnecting regularly random time

We have Cisco ASA VPN IPSec with Sonicwall but we are seeing randomly after 8 hours or sometime 10 hours. I am unable to trace issue so just wonder is there a simple setting to renegotiate tunnel ...
1
vote
1answer
60 views

Site-to-Site VPN with Sophos XG using tunnel interface

So I have configured a Sophos XG site-to-site vpn according to this document: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/...
0
votes
1answer
44 views

Why is the VPN throughput reduction different when using a cellular network and when using Ethernet? [closed]

I built a VPN server using openvpn as a protocol and measured the throughput between server and client. There are significant throughput reduction at cellular network. Throughput decreased by more ...
0
votes
1answer
117 views

Unifi Dream Machine Expose IPSec to L2TP

I'm trying to expose IPSec VPN connections to Remote L2TP VPN on a Unifi Dream Machine and Unifi Security Gateway, both running latest firmware and controller version (6.2.25). We have two offices. ...
3
votes
3answers
16k views

rec'd IPSEC packet has invalid spi

I have setup a lab to play with DMVPN and EIGRP. Everything works perfectly fine until I test things by shutting down redundant ports. Once I do that the DMVPNs never recover even after restoring all ...
1
vote
1answer
959 views

Cisco anyconnect VPN router specific public IP via tunnel

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over ...
1
vote
1answer
55 views

Internal network inside an internal network

I have the task to integrate 4 PCs (1 server, 3 workers) into a local network (from a bigger organization). The admin of that network only allows me to integrate the server directly into the network (...
1
vote
1answer
86 views

Site to Site VPN between Cisco C800 and Sonicwall

I would like to have Tunnel based (route based) vpn between Sonicwall with Public IP 1.2.3.4 and cisco c800 with dynamic IP. In case of dynamic VPN, i learnt that vpn mode would be aggressive mode ...
3
votes
1answer
135 views

Can a server on the other end of a site-to-site vpn be exposed (NATd) to a public IP on an ASA

AWS DataCenter ----------- site-to-site VPN ------------ http server <=======================> Cisco ASA public address 10.0.1.59:443 ...
4
votes
2answers
2k views

L3 core switch and VPN access

At work we have a cisco 3560 L3 core, in which we implement all our L3 VLANs and ACLs controlling inter-vlan routing. As far as client machines are concerned, the L3 switch is the default gateway, ...
1
vote
1answer
1k views

Traceroute through IPSec tunnel

askk Hi. When I do traceroute from host 192.168.11.0/24 to the server 10.0.0.0/24, which is site B. When the packets get into the public area it show Request timed out (as shown in this figure). I'm ...
3
votes
3answers
265 views

Understanding how VPNs work?

I am trying to understand how VPNs work. Most of the posts/blogs on the internet say that all your traffic is routed through a VPN server. This sounds like proxy to me?? Another point that is commonly ...
1
vote
1answer
67 views

WatchGuard Geo Location for restricting access to VPN and "Access Portal"

Problem We want to use WatchGuard's Geo Location to restrict access to our "Access Portal" and "Mobile VPN" connections, but see no options and the corresponding "Firewall ...
0
votes
1answer
46 views

VPN/IPsec router support in Packet Tracer

I would like to know, if a router doesn't support VPN (meaning it can't be used as a VPN server) can it still route an IPsec packet? And which router I should use as a server for IPSec (AH tunnel mode)...
0
votes
0answers
40 views

Multiple Site-To-Site VPN

I'm trying to set a VPN that allows all site: site0-4 to communicate with each other. The site called otherSite should not be in the VPN. Note that there's a NAT for site 0, 1 and 2 but site 3,4 only ...
1
vote
1answer
48 views

Site to site vpn setup

I am trying to set up a small network for my startup. We have 2 small servers at separate locations and would like to set up a vpn thorugh which the 2 servers can talk to each other and through which ...
1
vote
0answers
157 views

IKEv2 between Cisco router and Google cloud VPN

Hey I'm trying to create a tunnel between cisco router and google cloud vpn (client site) but the connection is stuck on stage 2 (UP-IDLE), need help where the problem may lie. Some debug that I get ...
1
vote
0answers
277 views

Amazon AWS VPN Bidirectional Device Access

After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC. However, both the EC2 ...
0
votes
0answers
28 views

Why public VIF must be used in AWS Direct Connect + VPN setup?

I am unsure why public VIF must be used in AWS Direct Connect + VPN setup. Usually if you are connecting to Virtual Private Gateway you should use private VIF as shown in AWS Managed VPN Diagram on ...
1
vote
1answer
93 views

AWS connectivity UDP works but TCP times out

I have some issues here I have built an L2l VPN from my location to AWS London, I can see that the tunnel is up but when I attempt to connect our local domain controller here in our office to AWS ...
3
votes
1answer
632 views

AWS VPC and Cisco ASA

I am trying to setup a VPN connection using AWS VPC. I have generated the VPN configuration files and have sent to the client. However the client is asking for the Blue highlighted info in the ...
1
vote
0answers
64 views

UNIFI USG GATEWAY IPSEC OVER L2TP VPN [closed]

At my office I have a Unifi USG Gateway that currently has 3 IPSEC VPN Tunnels (Lan-To-Lan VPN) configured. I also have a L2TP Remote VPN Network configured so that when I'm outside of my office I can ...
5
votes
1answer
26 views

what is significance of proxy id while configuring site to site vpn tunnel . why we should use proxy id and in which scenarios

i came know about proxy id configuration for first time. when iam troubleshooting site to site vpn tunnel configuration along with vendor . post configuring proxy id issue got resolved . But iam still ...
0
votes
2answers
44 views

Concurrent site-to-site VPN tunnels through dual ISPs (with 2 couples of Cisco ASA) between same devices

I currently have a simple site-to-site VPN setup, connecting machines from site 1 to site 2 through 1 ISP, using a set of ASA 5506X. All is good. I'd like to "double" that setup for ...
0
votes
0answers
17 views

MPLS provider A L3VPN to MPLS provider B migration

i have a Datacenter infraestructure with a mpls of SP A, and i would like to migrate to another wan line of a different SP B. Mpls current circuit is providing L3 VPN service, one VPN per remote site. ...
1
vote
0answers
622 views

Cisco site-to-site VPN tunnel Failed to find a matching policy [closed]

I have PaloAlto (PA) and Cisco ASA 5585-X located on two different sites, trying to configure IPsec VPN tunnel. [PA]-----------(internet)-----------[Cisco ASA] If i ping from Cisco ASA side lan to PA ...
0
votes
1answer
107 views

How to connect to different VLANs through VPN

I have the following setup: I have setup a Layer 3 Switch with multiple VLANs Multiple devices are connected to it on different VLANs via untagged access ports There is also a router connected to the ...
1
vote
1answer
97 views

VPN with Cisco virtual ASA on Azure not routing correctly

I've deployed a Cisco virtual ASA in Azure to use as a VPN server. For simplicity, I'm using just the management interface as the lan for the time being (10.2.0.4 is the interface). I want to use the ...
0
votes
1answer
17 views

VPN protected resource and accessible via authenicated API - design [closed]

let's imagine a simple system deployed on GCP. There is public, authenticated (token, IP whitelisting) API exposed by our system. There is a protected resource R (SQL database) that is accessible by ...
5
votes
3answers
16k views

Site-to-site VPN between Cisco ASA and Juniper SRX

I'm trying to create route-based VPN connection between Cisco ASA and Juniper SRX, but I have a problem with ACL and Proxy IDs. Cisco ASA log states that [IKEv1]Group = A.A.A.A, IP = A.A.A.A, ...
1
vote
0answers
26 views

Does modifying a ASA tunnel create a downtime?

I inherited a cisco ASA, I never really had to manage one before. But, I need to modify an existing tunnel to add IP addresses to both the local and remote traffic selector, specifically there are ...
2
votes
2answers
30k views

The VPN connection failed due to unsuccessful domain name resolution

We are having trouble when test the VPN remote-access with the above error. It returned domain name successfully when we run nslookup "router_IP" in window CMD but it keeps prompting the error window ...
0
votes
1answer
57 views

What can I use to display VPN instance instead of stelnet?

How can ı connect VPN service with use ssh in Huawei Atn980c ? Which command? I researched but i didnt different command. I found only this command; stelnet x.x.x.x (VPN instance) (service name) (port ...
2
votes
0answers
38 views

Router on one side of a GRE tunnel not adding OSPF route through the tunnel whilst the router on the other side is

I have configured GRE tunnel between the Dublin and Carlow routers with the following commands: //Carlow int tunnel 0 ip address 172.16.12.1 255.255.255.252 tunnel source s0/0/0 tunnel destination 87....
1
vote
2answers
12k views

IPSec site to site VPN Fortigate

We have a site to site VPN connection to a branch office. Once in a while the connection drops for some reason and then we receive an error like this on the Fortigate 310b ike Negotiate ISAKMP SA ...
0
votes
2answers
32 views

Is connecting via 2 VPNs secure

I know there are VPN services like Speedify that you can connect to with 2 internet connections wired and wifi to combine them on their servers to get a faster connection and then connect to what you'...
0
votes
1answer
75 views

Cisco IPsec VPN tunnel problem

I have a problem with VPN configuration. This is the topology I created: First updated licenses to make the VPN available: license boot module c1900 technology-package securityk9 IPsec Router ...
2
votes
2answers
1k views

Two Gateways on a single network - VPN into 1 gateway, but limited access

I have two gateway routers as I have two different internet providers, I have one for high speed/normal use (Gateway 1), and the other slower speed, but dedicated IP's (Gateway 2). It is all working ...
2
votes
1answer
60 views

MPLS-BGP - VPN isolation - RFC 4364

In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
0
votes
0answers
24 views

OSPF in DMVPN phase 1,2 and 3

What difference in DMVPN Phase 1, 2 and Phase 3 if we use OSPF?
0
votes
1answer
19 views

What is a child tunnel? [closed]

I only heard this term today, but it was explained to me as a point-to-point VPN (so, two routers with a VPN tunnel established between them) and a firewall configured to only allow certain hosts to ...
1
vote
2answers
3k views

Keep Cisco site-to-site tunnel up permanently

I have Cisco ASA site-to-site tunnel with remote and which i don't have control. I have following config: crypto ikev1 policy 10 authentication pre-share encryption aes hash sha group 2 ...
2
votes
2answers
2k views

How to keep an ASA tunnel up for lifetime?

We have a Cisco ASA and at the remote end I have no idea what the device is. This is what happening: When I send a packet or generate interesting traffic, it brings up the tunnel and everything ...
0
votes
0answers
103 views

Users after login are redirected to the ASA AnyConnect download page rather than connecting to the VPN

Several users after logging in are redirected to the ASA AnyConnect download section instead of connecting to the VPN. We try to log in via Web or AnyConnect application by using SAML Identity ...
0
votes
0answers
37 views

Editing a crypto map with multiple entries

We're attempting to bring up an IPSEC tunnel with a Vendor. An engineer created the crypto map and wasnt able to establish a connection. I edited the entry to change the diffie-hillman group and the ...

1
2 3 4 5
13