Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
11
votes
2answers
14k views

In IPsec VPN, how is the pre-shared key encrypted?

I was doing IPsec VPN on ASA 8.0, and I understand a little about that. The initiator starts by sending its ISAKMP policy to the responder, and the responder sends back the matched policy. After that, ...
4
votes
2answers
4k views

Why do multi-line crypto ACL's create instability in VPN tunnels?

Why does using multiple sets of specific ip's to specific ip's in a crypto ACL - cause instability in VPN tunnels, please relate this to phase 2 SA's (IPSEC). Ex. 172.16.0.0 -> 10.0.0.0 172.17.0....
2
votes
3answers
111 views

What is the purpose of a VPN?

A VPN connects a PC, smartphone, or tablet to another computer (called a server) somewhere on the internet. But, i could comunicate to another pc even without a VPN, so what is the purpose of using it ...
3
votes
2answers
5k views

Should I increase the timeout value for UDP on our VPN router-device?

We have a SonicWALL NSA 2400. We have numerous (100+) personnel in different offices in different physical locations that establish VPN sessions successfully every day. Some of these client computers ...
5
votes
3answers
3k views

Is VPN a layer 3 concept?

From Tanenbaum's Computer Network This demand soon led to the invention of VPNs (Virtual Private Networks), which are overlay networks on top of public networks but with most of the properties of ...
4
votes
2answers
1k views

IKE phase 1 and phase 2

Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere. Phase ...
4
votes
4answers
6k views

VLANS vs. subnets for network security and segmentation

What are the security implications when using subnets as opposed to VLANs for segmenting an enterprise network? We have strict security requirements surrounding the data we handle and need to ensure ...
2
votes
2answers
2k views

Site-to-site VPN, do I need source NAT?

Please forgive my ignorance, but I need to set up an IPSEC site-to-site VPN between our 192.168.x.* network and a 10.y.z.* network somewhere else. I guess I need some appliance that can masquerade the ...
7
votes
1answer
13k views

Ipsec vpn, phase 2 unable to come up

I'm pretty sure I know the answer to this but I don't know how to implement it. Trying to setup an ipsec vpn from a Cisco 2811 to a linux box running openswan. So far I can get phase 1 up but ...
7
votes
1answer
3k views

Problem with VPN tunel from remote location through ISP (PPTP)

I have network situation like this: ISP Router (modem) - device given to us by our ISP - modem & router in one but it is set into transparent mode - ISP say so ;D we have to find it that it is ...
7
votes
2answers
3k views

VPN routing for hosts with multiple ip addresses [closed]

I use Mikrotik RouterOS as the NAT router. Some hosts behind the router also have a direct connection to the Internet and these hosts have a default route to the ISP's gateway instead of RouterOS. I ...
4
votes
3answers
1k views

Cisco ASA Site-to-Site VPN, remote LANs have no Internet

I have a site-to-site VPN from a Cisco ASA 5512 and a Cisco 891. I want all traffic, even Internet access, to come through our ASA. The VPN is established and working. The LANs have connectivity to ...
3
votes
2answers
578 views

Site-to-Site VPN tunnel configuration

I remember in uni that we implemented VPN tunnels always on the border routers and then use GRE tunnels to connect between two remote subnets. I was always told that VPN tunnels need to know the ...
3
votes
1answer
3k views

IPSec site-to-site with/without NAT

I am connecting my office to a client's network via IPSec. The need is for me to connect directly to internal IPs on their network; there is no need for them to connect to any services on my internal ...
2
votes
2answers
220 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
1answer
306 views

ipsec vpn with preshared key p

I understood that three session keys are generated by diffi-helmen and nonces, in phase 1 msg 3 and msg 4 both exchanged diffi-helmen public key and generate shared secret key ,and shared secret key ...
2
votes
1answer
46 views

Cisco ASA Clientless SSL VPN Apply Tunnel Group

I'm trying to implement the answer from a previous question I've asked (Cisco ASA Clientless SSL VPN Restrict Network Access) My ultimate aim is to set up an SSL VPN on a Cisco ASA device to allow ...
2
votes
2answers
2k views

How to keep an ASA tunnel up for lifetime?

We have a Cisco ASA and at the remote end I have no idea what the device is. This is what happening: When I send a packet or generate interesting traffic, it brings up the tunnel and everything ...
1
vote
1answer
40 views

Cisco ASA Clientless SSL VPN Restrict Network Access

I'm working on a Uni project to set up a secure network. One aspect is to have a VPN for clients of the imaginary company to access web based services. I have set up a simple clientless SSL VPN which ...
1
vote
1answer
53 views

How to centrally manage customer site's and users that have access to customer site's

Background information: We have customers spread over the whole continent. We deliver and install hardware at the customers site and completely set up and configure the network for them. After the ...
1
vote
1answer
52 views

How to configure a distributed network for the replication? [closed]

I want to replicate data (music, video, photos, user's data) across different geographical networks. How to connect several networks into a single network to let nodes comunicate to each other? ...
0
votes
0answers
123 views

ASA - communication between 2 tunnels

I have two IPSEC tunnels with an ASA in the middle Site A - 10.20.4.0 /24 (65.176.80.84) Site B - 192.168.142.0 /24 ASA - 10.99.206.0 /24 (95.12.22.33 Site A - 10.20.4.0 /24 can reach the ASA and ...
0
votes
2answers
172 views

'flat' network design

Is it possible to have a Hub and spoke FlexVPN setup where every spoke has the same LAN subnet. I need to configure 6 spokes with the same subnet at each node., I was thinking NAT but I need to access ...
0
votes
1answer
151 views

Is it possible to append custom data to every packet of a request? [closed]

For an end-to-site VPN, i.e. where a device (VPN client) is responsible for encapsulating the GRE packet, is it possible to send some custom data along with the GRE packet beyond just the standard ...
-1
votes
1answer
79 views

What special reserved domain could I use for virtual organization private network? [closed]

Suppose we have a inner-facing network that spans several geographical jurisdiction - this network can only accessed from our offices with special HSM installed, and we want to enable domain-name-...