Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
1
vote
2answers
1k views

Two Gateways on a single network - VPN into 1 gateway, but limited access

I have two gateway routers as I have two different internet providers, I have one for high speed/normal use (Gateway 1), and the other slower speed, but dedicated IP's (Gateway 2). It is all working ...
2
votes
1answer
65 views

MPLS-BGP - VPN isolation - RFC 4364

In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
0
votes
0answers
24 views

OSPF in DMVPN phase 1,2 and 3

What difference in DMVPN Phase 1, 2 and Phase 3 if we use OSPF?
0
votes
1answer
20 views

What is a child tunnel? [closed]

I only heard this term today, but it was explained to me as a point-to-point VPN (so, two routers with a VPN tunnel established between them) and a firewall configured to only allow certain hosts to ...
1
vote
2answers
3k views

Keep Cisco site-to-site tunnel up permanently

I have Cisco ASA site-to-site tunnel with remote and which i don't have control. I have following config: crypto ikev1 policy 10 authentication pre-share encryption aes hash sha group 2 ...
2
votes
2answers
2k views

How to keep an ASA tunnel up for lifetime?

We have a Cisco ASA and at the remote end I have no idea what the device is. This is what happening: When I send a packet or generate interesting traffic, it brings up the tunnel and everything ...
0
votes
0answers
49 views

Editing a crypto map with multiple entries

We're attempting to bring up an IPSEC tunnel with a Vendor. An engineer created the crypto map and wasnt able to establish a connection. I edited the entry to change the diffie-hillman group and the ...
2
votes
2answers
15k views

Check split tunnel

I am using Shrew Client 2.2.2 to use a VPN connection with split tunneling. How can I check or where can I see, that the split tunnel is working properly? Thanks in advance, Dirk
0
votes
1answer
45 views

Easiest setup to replace jumpbox forwarding [closed]

In order to connect to some of machines, what I currently do is: Connect to VPN (using AnyConnect) SSH to my jumpbox via VPN For every single machine that I want to access using ssh, I have to map ...
1
vote
1answer
54 views

Site to site ASA Routing question

I am doing a lab about DMVPN and Site to Site ASA integration. There is no problem in the DMVPN. However I have problem in establishing route from Site to Site ASA to DMVPN. The router on the left is ...
1
vote
1answer
53 views

Is a VPN just a proxy which encryts data to the vpn server?

I have trouble understanding the concept of a VPN in contrast to a proxy. Is it true, that the VPN just encrypts the data which is send from the client to the vpn server and "rest" behaves ...
1
vote
0answers
33 views

Windows L2TP VPN issues when accessing Site to Site VPN on Cisco 5506

We have two Site to Site VPNs and Remote Access VPN configured. Using the builtin IPsec client on OSX all subnets are accessible however when using L2TP built in client on Windows 10 ICMP traffic ...
0
votes
1answer
52 views

client <--> server <--> client VPN?

I have the following use case for which I need to figure out a VPN solution. 100+ remote locations Each remote location has several users that should be able to connect to only that remote location ...
0
votes
1answer
69 views

What is method to switch group-policy on a tunnel-group upon user login?

We have ASA units that have tunnel-groups that have a particular group-policy defined via default-group-policy statement. This initial group-policy ("NOACCESS") is one that prevents any ...
5
votes
3answers
3k views

Is VPN a layer 3 concept?

From Tanenbaum's Computer Network This demand soon led to the invention of VPNs (Virtual Private Networks), which are overlay networks on top of public networks but with most of the properties of ...
1
vote
1answer
71 views

what is significance and role and function lifetime in IPSEC Site to Site VPN . Please explain importance and role of lifetime in VPN

I Came across incident where i need to troubleshoot IPSEC Site to Site connectivity issue . The term "lifetime" confuses me . please anyone explain me importance of lifetime in VPN . Whats ...
0
votes
3answers
123 views

But confused about SSL VPN and IPsec Site -Site VPN

What might be difference between sslvpn and site-site vpn . Which one among two is secure and it's significance
1
vote
1answer
147 views

Confusion about Route based IPSEC site-site vpn and policy based IPSEC site-site VPN

I am confused about the major difference between a policy-based VPN and routed-based site-site Vpn
2
votes
2answers
23k views

Cisco ASA: Unable to establish IPSec tunnel with IKEv2: Auth exchange failed

This is a Cisco ASA 5515-X with software 9.6(3)20. The remote side didn't tell me what they use, must be Strongswan or something. Using the following debug commands debug crypto ipsec 255 debug ...
1
vote
1answer
167 views

Juniper QFX Site to Site VPN

Im trying to setup a site to site vpn between two Juniper QFX5110's. Each end of the link is on the same subnet (so directly connected switches over dark fibre). I have configured each physical ...
1
vote
1answer
45 views

Routing between two sites using FTTC Broadband and E-Band Wireless

I have two sites, both with 80/20 FTTC broadband connections that terminate at the standard white box BT modem. The connections both have fixed IP. I’d like to connect these up to each other and form ...
79
votes
4answers
75k views

What's the difference between IKE and ISAKMP?

I've been building IPsec VPNs for years but to be honest I've never fully grasped the technical difference between IKE and ISAKMP. I often see the two terms used interchangeably (probably incorrectly)....
0
votes
1answer
30 views

VPN operating on layer 3, internal routes are accessible, but how to use it as a 'stepping stone' server for external servers? [closed]

I'm not really sure what my problem/request is called, but this is my situation: I run an OpenVPN Access Server server. It's configured to operate on layer 3. The private subnet it can operate on is ...
1
vote
1answer
3k views

Ping LAN via Anyconnect VPN

I'm trying to configure the VPN on a Cisco ASA 5510. I can connect to it without any problem and I can ping my switch (172.16.1.2/24) but I can't ping the gateway (172.16.1.1/24) nor the Google public ...
0
votes
1answer
32 views

routing a network with 2 interfaces and vpns [closed]

I'm pretty inexperienced in network but here is the idea of what i want to do: I have 2 interfaces: Interface #1 = fast internet Interface #2 = stable internet with static ip address this is the ...
1
vote
2answers
46 views

How to build secure access for cloud machine in small startup [closed]

We have 7 member team (3 dev + 2 qa + 2 Sales). We host our PROD + QA + DEMO server in GCP. As of now, all our PROD/QA/DEMO/DEV/QA-DB/DEV-DB machine are having public IP, so that we can ssh into them. ...
0
votes
1answer
756 views

Why do hops before VPN server not reflect in traceroute?

I'm using a remote-site VPN (ProtoVPN). When I tracert to the IP address of the VPN server, the hops through my ISP and other intermediate hops before the VPN sever are shown. But when I tracert to ...
1
vote
2answers
2k views

Difference between WAN and VPN(tunnels)

I got my CCENT and working on ICND2 to get my CCNA. I am stuck on this topic and am unable to grasp the context. WAN and VPN and how they differentiate. My understanding is we need WAN for "Physical" ...
0
votes
1answer
946 views

Is it possible to setup IPsec behind NAT without port forwarding?

We want to setup a IPsec connection between customer sites and our office so we can manage the hardware we place at customer sites (e.g. barriers). Its important that the VPN connection stays up all ...
0
votes
2answers
40 views

Is it possible to completely mask an IP address to a point where no IP address can be detected yet an active connection is live?

I’ll keep it short and sweet; We all know to connect to internet you’ll need an address like 2001:x** or 192.x**. Using a vpn, while it does encrypt things and mask your IP, it still returns an IP. ...
0
votes
1answer
38 views

VPN Traffic Routing on Ubiquiti/Vyatta

I'm using Ubiquiti to route certain outgoing ip-ranges through a VPN. I would however like to route all HTTP/HTTPS traffic via the VPN except large downloads. I realize that this is a tall order, but ...
4
votes
0answers
1k views

Cisco ASA IPsec tunnel QM FSM error

I am setting up Cisco 5585 ASA for IPsec tunnel with one of cloud company. we already have lots of tunnel for various cloud provider and life if good but recently this tunnel giving me hard time to ...
1
vote
0answers
16 views

Is it possible to gain VPN access through RDP [closed]

Scenario: I have been tasked to resolve an issue for a client's EmailReceiver program. I have the source code on my PC. I have been given RDP Access to a entry point machine, through which I can ...
10
votes
2answers
4k views

netstat -nr returning "0/1" -- what does that mean?

In exploring how my local openVPN virtual interface utun0 works, I came across the following data, and I don't know how to make sense of it. (I'm on a Mac) $ netstat -nr Routing tables Internet: ...
0
votes
1answer
42 views

Whether PPTP Client need virtual interface to communicate with PPTP Server? [closed]

We know in PPTP VPN, the VPN Server is using a virtual Interface to provide encrypted data. Whether PPTP Client need virtual interface to communicate with PPTP Server? and more, if yes, whether ...
0
votes
3answers
74 views

Do i need VLAN per customer when i want to give users (secure) access to specific customer sites

This question is a follow up on this question. We are currently working on the network design, nothing is implemented yet. Our network will exist out of our own (internal) network and lot of customer ...
7
votes
6answers
2k views

Users want to work remotely, but need to use the same LAN IP addresses

I have users that need to be able to work remotely. In their current environment they use workstations with unique software that requires their IP address remain the same. Now that they are working ...
1
vote
1answer
53 views

How to centrally manage customer site's and users that have access to customer site's

Background information: We have customers spread over the whole continent. We deliver and install hardware at the customers site and completely set up and configure the network for them. After the ...
2
votes
2answers
11k views

VPNs are working in which layer of the OSI model? [closed]

As the following picture shows, it is possible to categorize VPNs in two general categories: Client-based VPNs Network-based VPNs When it is required to choose a VPN for implementation in a network, ...
0
votes
1answer
299 views

Problem with getting IKEv1 tunnel between Cisco and Palo Alto to establish a tunnel more quickly

I have a Cisco 2901 router that has an IKEv1 IPSec VPN with a Palo Alto firewall. We had a problem with our existing VPN setup where it takes a long time to get the tunnel to come back up when re-...
-1
votes
1answer
199 views

Able to ping Domain internal address on home network, why? [closed]

I have a strange issue, I am able to ping my company's internal address (ex: hq.mycomapny.com) when I am on my Home network (WI-FI or Enthernet) and NOT connected to the VPN. When I do a ping on the ...
0
votes
1answer
370 views

IKEV2 between ASA and Router problem

I am trying to configure a ikev2 vpn between asa and router using tunnel interface. I have encountered the problem of it not even establishing the connection. There is no problem in the connectivity ...
0
votes
1answer
249 views

Static port forward 1194 to VPN server behind Cisco router

I'm trying to setup a VPN server behind a Cisco router which is my main internet gateway. I've set it up as shown in the attached picture. The problem I'm observing is that zero packets with a ...
11
votes
3answers
5k views

What is the proper way to config a Site to Site IPSEC VPN and a Remote Access VLAN on the same external interface? Cisco 891 ISR

I'd be happy to post the config or logs for reference but I am having trouble getting my remote access VPN working on the same interface as my site to site IPSEC VPN. I am using a dynamic crypto map ...
9
votes
3answers
11k views

What is the use of a tunnel interface on a cisco router?

What is a tunnel interface used for on a cisco router? What is the difference between setting up a VPN connection and a tunnel interface; or does this serve the same purpose?
0
votes
1answer
169 views

Create IPSEC VPN between three Routers?

I'm attempt to build essentially an IPSEC tunnel mesh between three Cisco IOSv routers. I've been able to build an IPSEC tunnel between two directly connected routers but once I add the third router ...
0
votes
1answer
54 views

Differences between BGP(routing protocols) and vpn mpls?

I am new to networking, so bear with me, 1-I wanted to clear my query: why do we need BGP or any routing protocols if we have vpn or wan technologies like mpls ? 2-Can't we just run bgp between two ...
0
votes
1answer
4k views

IPSEC Phase 1 error

Was does the MM_NO_STATE usually mean when having errors bringing phase 1 up? IPv4 Crypto ISAKMP SA dst src state conn-id status X.X.X.122 X.X.X.107 MM_NO_STATE ...
0
votes
2answers
188 views

VPN routing issue with PulseSecure [closed]

I have a Windows PC (192.168.10.99) in the local network 192.168.10.0/24. Default gateway in this network (192.168.10.1) has a VPN connection to the remote network 10.8.0.0/16 (RN1) that can be ...
0
votes
0answers
80 views

Advanced split tunnel question

We are in a work from home state, and I am looking at optimizing VPN without sacrificing security. We are not using split tunnel. We have Direct Access on most clients - it is slow, and have moved ...

1
2
3 4 5
13