Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
8
votes
3answers
3k views

Advice for network & device configuration using Comcast Modem?

Summary My ultimate goal is to run a VPN through my Cisco Router, which to me means getting the Comcast Gateway out of the way. To this end, I would like to place my Cisco Router (and/or Switch) ...
2
votes
0answers
40 views

CA certificate and Local certificate

There is something which is bothering me when i think about the CA cert and Local cert. Below are my queries which pertains to juniper but may be generic as well. 1) "request security pki ca-...
1
vote
1answer
518 views

How is user gaining Remote access via SonicWall without VPN [closed]

Hello and thanks in advance for your advice. I recently started supporting a small business and have a problem I can't figure out. The office has 6 remote employees who access the office network via ...
1
vote
1answer
1k views

Slow(er) network speed due to possible VPN configuration issue?

CONTEXT I have an VPN connection between 2 ASA-5515's set up between our main site and new back up site. This is to replace our old backup site we have which is currently connected between an ASA-...
1
vote
0answers
53 views

Network transfer speed slow, possible VPN configuration issue? [closed]

CONTEXT I have an VPN connection between 2 ASA-5515's set up between our main site and new back up site. This is to replace our old backup site we have which is currently connected between an ASA-...
0
votes
1answer
980 views

EIGRP to BGP to EIGRP

I would like to ask if it is possible to implement eigrp routing sent through bgp? I wanted to route from PC-1 to PC-2 using EIGRP. The connection between all of the three routers are through BGP ...
3
votes
2answers
4k views

Configuring Cisco ASA DAP policies from CLI! (Automating bulk task)

So I have given a task to add 1000s of DAP policies after main DAP file crashed and backup is not available due to unfortunate reasons. There is predefined way of doing it through ASDM which is very ...
-1
votes
1answer
79 views

What special reserved domain could I use for virtual organization private network? [closed]

Suppose we have a inner-facing network that spans several geographical jurisdiction - this network can only accessed from our offices with special HSM installed, and we want to enable domain-name-...
1
vote
2answers
2k views

Accessing Sonicwall VPN behind new modem

So we have a Dell Sonicwall unit that serves as our firewall and also runs the VPN functionality via the Sonicwall SSL-VPN and the accompanying client side application, Sonicwall NetExtender. We have ...
16
votes
5answers
208k views

How can I reset a VPN tunnel on a Cisco ASA?

On a site-to-site VPN using a ASA 5520 and 5540, respectively, I noticed that from time to time traffic doesn't pass any more, sometimes just there's even missing traffic just for one specific traffic ...
1
vote
1answer
320 views

Sonicwall: force all traffic from specific source through VPN

We have a main office (M) with a Sonicwall TZ215, and a branch office (B) with a TZ210. Computers in B access the server in M through a site-to-site VPN between the two Sonicwalls. Internet traffic ...
1
vote
2answers
57 views

What does a VPN Tunnel offers other than encryption?

A VPN tunnel is end to end encrypted. But does it gurantee to provide features other than encryption, such as low latency, low jitter etc?
2
votes
1answer
59 views

How is traffic correctly routed in Site-to-Site VPNs where all sites are on the same subnet?

http://rockhoppervpn.sourceforge.net/ref_site2site_bridge_6.html The diagram on this page shows all 3 sites using the same subnet, 192.168.0.0/24. Let's say on the hub site where 192.168.0.10 is the ...
2
votes
1answer
73 views

Is there a way to prioritize/manage WIFI traffic (in the WIFI realm)?

So I have a WIFI/client application which has some specific issues, in that several devices need to absolute priority. Fortunately, i'm able to prevent MOST devices from joining the network, but I ...
3
votes
2answers
4k views

hpe 5700 (comware 7) vlan routing

I want to divide my network into smaller segments. I want to use our HPE FF 5700-40XG-2QSFP+ switch as the router. It runs comware 7. VLAN 101 for servers, using 10.101.0.0/16, interface ip 10.101.1....
1
vote
0answers
36 views

VPN on ubiquiti [closed]

i created a VPN on a ubiquiti USG. When i connnect, i can't ping to a server on the remote network. The server is ip 192.168.13.15. I get ip 192.168.100.1. I tried to change the networks, but that ...
1
vote
0answers
4k views

Connection terminated for peer x.x.x.x. Reason: IPSec SA Idle Timeout

I have configured an IPsec Site - site VPN tunnel with Cisco ASA on both sides.there is no issue with the phase 1 of tunnel.but frequently connection towards some IPs become timedout only from some ...
3
votes
1answer
514 views

Pass traffic from remote access to site to site tunnel [closed]

I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
2
votes
1answer
82 views

Cisco 5505 ASA firewall Ipsec vpn- Can connect two outside different public ip to two different local subnets

I only get one IPSEC vpn connection up but not the other. Link to access configs on Google: https://drive.google.com/open?id=1yB_yIWvJ51A0UeNbkAEiTH9YMIEipqy_ profile1- outside interface - 66.x.x.x ...
2
votes
3answers
111 views

What is the purpose of a VPN?

A VPN connects a PC, smartphone, or tablet to another computer (called a server) somewhere on the internet. But, i could comunicate to another pc even without a VPN, so what is the purpose of using it ...
0
votes
1answer
131 views

PPTP encapsulation process

i am learning networking and vpn technologies now and i have some problems with understanding the whole PPTP encapsulation process. So i will write steps of PPTP encapsulation process (as i understand ...
0
votes
1answer
62 views

GRE Encapsulation

i am learning networks and tunneling and i have problems with understanding some things about GRE. The structure of tunneling below: [Transport Protocol][ensapsulationg protocol(GRE)][encapsulateed ...
0
votes
1answer
44 views

Device on VLAN is accessible from VPN but not from LAN

I have a Meraki MX84 with two VLANs, 192.168.213.0/24 (main subnet), and 10.4.213.0/24. I have an EdgeRouter 12P connected to the MX with static WAN IP 10.4.213.2. The issue is: when I VPN into the MX ...
0
votes
1answer
332 views

A VPN that could search, filter & block website [closed]

I want to block a large number of websites (like thousands to millions) from the MacBook and iPhones and my initial solution was using /etc/hosts file to block websites in the MacBook and using Mobile ...
2
votes
1answer
290 views

Can I set the AnyConnect group policy from users source IP?

Is it possible to configure a Group Policy to be used based on the source IP of the AnyConnect user? I want users connecting from a specific location (IP address) to get a specific Group policy. ...
0
votes
2answers
172 views

'flat' network design

Is it possible to have a Hub and spoke FlexVPN setup where every spoke has the same LAN subnet. I need to configure 6 spokes with the same subnet at each node., I was thinking NAT but I need to access ...
0
votes
2answers
38 views

'Flat' FlexVPN Network Design with multi gateways [duplicate]

The use case is a meshed ip radio network where the radio's move around alot. Multiple gateway's (FlexVPN Spokes) are statically located to re-bridge the meshed radio network when the radio's travel ...
0
votes
1answer
20 views

IP-Sec VPN Tunnel Established Between 2 Remote Machines. Why Can't Machines In Their Subnets Connect Across? [closed]

Have 2 Remote Ubuntu Machines in different subnets. one: 192.168.1.0/24 Two: 192.168.2.0/24 Established VPN tunnel between 2 machines, 1 in each subnet. Their IPs: Public IPs 1.1.1.1 2.2.2.2 ...
0
votes
2answers
878 views

Cisco ASA IKE Receiver: Runt ISAKMP packet discarded on Port 500

I have lots of ikev1 tunnel running on our production Cisco ASA5585 and today i have configured ikev2 tunnel for one of our new customer and i have started seeing following error, and not sure what is ...
0
votes
1answer
227 views

IPsec VPN route in Checkpoint

I have created a ipsec VPN from site A (Cisco) to Site B (checkpoint R77.20). At site B, i have a static 1-1 NAT applied: ipx --ipy Tunnel is live and connection up; I can telnet my site B system ...
3
votes
1answer
763 views

Ping unlocks ipsec vpn

I have a ipsec vpn with a foreign company, this connects my network with their network and they have a different ip subnet. Ipsec is made by a pfsense gateway/firewall. I'm sure it is well configured,...
0
votes
1answer
63 views

Cisco IOS RA VPN with internal NAT

We have a Cisco 871 setup with a remote access VPN which works fine. However we now need the RA-VPN to be able to access an IP on the LAN which only speaks with an authorised subnet. IP addresses as ...
1
vote
0answers
61 views

Chckpoint Remote Access VPN Multiple ISP external interface [closed]

I'm in a situation where I have to suggest the best solution when client has two ISP connected to a checkpoint firewall cluster. AFAIK, we cannot activate or make use of two external interfaces for ...
0
votes
3answers
362 views

IPSec VPN timers query

I have a couple of queries related to the IPSec VPN and I believe someone would clarify my doubts. Why IKE Lifetime and IPSec Lifetime is used? Can't we just run the VPN without re-negotiating? Why ...
0
votes
1answer
52 views

VPN to a current subnet ID

I am sure this is a fairly basic question, but the standard google searches have not told me what I am looking for. I have a restaurant that uses an ipad point of sale on a dedicated subnet id: 192....
1
vote
1answer
209 views

Tacacs+ over VPN is not working

R3 is a Tacacs+ client and Server0 is configured as AAA server with Tacacs+ but R3 is not able to authenticate. R3 Configuration: ! version 15.4 no service timestamps log datetime msec no service ...
1
vote
1answer
32 views

Access List With Site To Site VPN

I have two juniper firewalls, an SSG-320M (screenos) and an SRX 340 (junos). I'm required to connect to a third party with an IPSEC VPN, however I'd like some additional protection from my firewall. ...
0
votes
1answer
22 views

Connect VPN with same Private Network [closed]

i have my Private Network on my Apartment that is 192.168.1.x/24 and in the Office we have Private Network 192.168.1.x/16. Is it possible to connect them through VPN, but i will not change my private ...
1
vote
0answers
75 views

IPsec tunnel with multiple networks NATed [closed]

I'm trying to set up an IPsec connection between two sites: our Azure network and our client's local network. To be flexible and avoid any current or potential future IP range overlappings I wand to "...
0
votes
1answer
376 views

What is the difference between VPN and Domain fronting?

What is Domain fronting? and how it is different from a VPN?
0
votes
1answer
96 views

Multiple virtual UTP cables over one physical?

Say there is a physical UTP cable running from point A to point B. At A there are two physically isolated devices, a1 and a2, each running their own network and unaware of each other's existence. So ...
0
votes
1answer
153 views

Dynamic DNS and VPN [closed]

I have a few PCs/services that I want to access remotely, which are inside a VPN and gets assigned local IP addresses using DHCP. How can I setup dynamic DNS to access the PCs on their internal VPN ...
0
votes
1answer
353 views

How can I accomplish VPN across Dual Wan connections?

How can I accomplish VPN across Dual Wan connections in a optimal way? Idea is to make: Site to site VPN. Make single connection inside the VPN to use full bandwidth of both wan connections using (...
1
vote
0answers
248 views

Why is bgp used for AWS and gcp VPNs and not another routing protocol? [closed]

I use AWS and gcp. Both of these cloud platforms have the ability to establish a VPN connection from a VPC in the cloud to an on-premise router or another cloud VPN endpoint. They both use bgp ( and ...
0
votes
1answer
324 views

Setup VPN to access company's internal network without NAT [closed]

Below is how the network looks like, the left is my home, and the right is my office. Now I want to connect to office intranet(192.168.0.0/24, R3). We don't have any vpn device that directly connects ...
4
votes
1answer
893 views

IOS to ASA dynamic and static VPNs - sharing same crypto ACL?

Is it possible to have a dynamic and static VPN between the same IOS router and ASA, sharing same interesting traffic/crypto ACL on the ASA end? The two devices in question: ASA 9.1 - hub/termination ...
1
vote
0answers
546 views

Unable to Initiate a VPN tunnel using IKEv2 [closed]

I'm having an issue with a VPN tuunel between my Firewall (ASA 5516-X) and a third party firewall so I can't check the config in the second firewall. So I decide to debug my firewall and I realized ...
4
votes
2answers
187 views

Is Cisco IPsec different from ordinary IPsec?

Is Cisco IPsec different from ordinary IPsec? Although Windows 10 has built-in VPN support for L2TP/IPSec, it does not support IPSec provided by Cisco. Thus, we generally need to install hand-made ...
-1
votes
1answer
40 views

VPN server acting as a client for another VPN server [closed]

I was wondering if it's possible to have a VPN server that goes though another VPN server. Here a scenario that might explain my idea better: I have 4 computers 'A' - My Windows machine 'B' - My VPN ...
5
votes
3answers
2k views

Unable to connect via VPN to remote network

PROBLEM: I'm unable to connect via VPN to our production network while connected to my home wireless network. SETUP: Internet | ISP router at home | Cisco ASA 5505 firewall | Buffalo wireless ...

1 2
3
4 5
13