Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
6
votes
2answers
6k views

How to configure Cisco remote access IPSEC VPN between IOS Router and Android phone

I have a C891FW router with IOS 15.4 on which I'm trying to configure a remote access VPN for Android's native VPN client. I'm authenticating with RSA-Sig and XAUTH. The tunnel forms but I can't reach ...
0
votes
1answer
225 views

Remote access to the network without port forwarding (blocked by ISP) - VPN [closed]

I need to setup a following configuration: A router Mikrotik is connected to the internal Network1. The router has a USB 3G modem that is connected to it and enables internet access from the ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
0
votes
1answer
41 views

Whats the security difference between Policy Based IPSec VPN tunnel vs HTTPS + Basic auth

We have several customers with the same service installed within their DMZ. This service is a HTTPS server. The server does not have authentication, this is solved by configuring the NetScaler ...
0
votes
0answers
53 views

Anyconnect Cisco 5505 VPN Group cannot Access Inside Network

Below is the Configuration to my Cisco ASA. I can connect to VPN but then trapped and cannot enter the inside network. ASA Version 9.2(4)27 ! hostname AwBTech-ASA domain-name awbtech enable password ...
4
votes
0answers
337 views

Need to configure site to site SSL VPN between two Cisco routers

I would like to configure site-to-site SSL VPN between two sites. I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
6
votes
1answer
2k views

Having trouble setting up VPN on a Cisco RV180W

Trying to setup a VPN for our small business (more secure and useful than the WebDAV we currently use) - but I'm having trouble getting it to work. I've not had to setup any VPN before, so have read ...
0
votes
1answer
157 views

How to troubleshoot VPN packet issues? [closed]

I'm a web developer (10 yrs), and am tech savy, but don't know a lot about networking, so please forgive my ignorance. I work from home, so I'm always on my company VPN. Over the last several weeks I'...
2
votes
0answers
368 views

Ikev2 (flexvpn) AAA authentication via radius [closed]

My problem is I currently develop a new configuration on IKEV2 VPN connection. The main idea is the client VPN routers are authenticate trough a VPN concentrator where an AAA authenticion set to a ...
2
votes
1answer
484 views

Juniper SRX Destination NAT for L2TP server

I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks. I've had some success with this post: https://forums.juniper.net/t5/...
0
votes
1answer
812 views

qos inside vpn, possible or not ? I read yes and no

I am wondering if possible to do QOS (or similar action) inside vpn tunnel to a cloud server. the goal is to reserved bandwith for voip traffic. I read that you can with GRE and other people said, ...
2
votes
1answer
387 views

MAC Address not resolving when IPSec VPN in place

I've created an IPSec VPN connection between two Mikrotik routers. They are connecting via IKEv2. Inside our two networks, we have a printer spooler which needs the printer's MAC address to verify it'...
2
votes
3answers
53 views

Correct term for networks created for virtual machines and containers?

What is the correct term for the type of network created for virtual machines and for containers. For illustration a Linux virtual host might have devices docker0 as 02:42:a6:79:a6:bc with address 172....
1
vote
0answers
256 views

Cisco ASA: Windows DHCP doesn't bind IP address after failover change active [closed]

Equipment and soft: Two Cisco ASA 5540, ASA ver. 9.1(7)32, active/standby failover DHCP server: Windows server 2016 Anyconnect VPN clients get IP addresses from DHCP servers. Everything works ...
3
votes
1answer
523 views

High Availability for ISR 4431 IPSec VPNs

I have the following lab setup in GNS3. R1 & R2 are VPN endpoint at my datacenters and R3 is simulating a remote site. What i'm trying to accomplish is having one tunnel from R3 to the ...
1
vote
0answers
654 views

DNS not resolving through VPN [closed]

Looking for some help with our Office's VPN that I can't seem to solve... I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
1
vote
0answers
107 views

pfSense - VPN access to the printer only [closed]

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
1
vote
1answer
1k views

Firewall and VPN configuration?

I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
3
votes
2answers
107 views

Why is VPN not a protocol?

Is VPN a layer 3 concept? says "VPN is not a protocol". Is VPN an application instead? Why is VPN not a protocol? How can I tell if something is a protocol or not? Thanks.
2
votes
2answers
251 views

Are both VPN and NAT alternative ways to provide access to a private network?

https://en.wikipedia.org/wiki/Virtual_private_network A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or ...
0
votes
1answer
112 views

OSPF and /30 for IPSEC VPN links on routes which support routing (as opposed to polices)

Traditionally i have always set IPSEC policies as /24 (/16 etc) on routers that had policies for encrypting IPSEC traffic (as opposed to routes). I have since started using a router (Fortinet) that ...
1
vote
1answer
552 views

IPSec route-based vpn st0 interface

As i know, the st0 interface is used when the gateways are configured with route based VPN. But my question is, say below is the topology A<---->B<---->C<---->D A and D are hosts, B and C ...
0
votes
0answers
119 views

ASA - communication between 2 tunnels

I have two IPSEC tunnels with an ASA in the middle Site A - 10.20.4.0 /24 (65.176.80.84) Site B - 192.168.142.0 /24 ASA - 10.99.206.0 /24 (95.12.22.33 Site A - 10.20.4.0 /24 can reach the ASA and ...
2
votes
1answer
469 views

Cisco ASA Dial in VPN access Devices on Site-to-Site VPN

Questions 1) What do I need to run to get this to allow the on-site to talk to the dial-in network clients E.G ping from 10.101.1.7 to 10.101.2.1? 2) What do I need to run to get the dial-in network ...
-2
votes
1answer
545 views

IPSec SA being Unidirectional

From what I’ve read, IKE SAs are Birectional and IPSec SAs are unidirectional. But if the same proposals are to be agreed by both the ends, say protocol esp, Authentication algorithm as hmac-sha1-...
3
votes
1answer
651 views

Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource

Multiple VPNs setup with a Juniper SRX320. The SRX320 has an irb interface as follows: irb { unit 0 { family inet { address 192.168.120.1/24; } } } I've setup ...
0
votes
1answer
329 views

Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]

Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
0
votes
1answer
47 views

SonicWall global vpn

I have a SonicWall device, and I am new to them. I created the global vpn and, after installing the SonicWall at the customer's site, wanted to make some configuration changes. I am using the global ...
1
vote
0answers
141 views

Why can I not see the default gateway when connecting to ASA through AnyConnect?

I've configured an ASA as an AnyConnect server. The IP address pool that'll be assigned to the connecting hosts is from 192.168.10.1-192.168.10.10. Now when I establish a remote access connection to ...
1
vote
0answers
573 views

Why do the tunnel protocol on these two router show different values

Two routers R1 and R2 have a tunnel built between them in the 103.103.103.0/24 network. The end point of the tunnel are 75.75.75.2(on R1) and 76.76.76.2(on R2). Can anyone explain why does the Tunnel ...
1
vote
1answer
800 views

VPN: IPsec tunnel between Private IP ASA & Public IP ASA

We have a user that moved recently to an incubator, in order to secure his traffic between his computer and the office we purchased an ASA 5505 to connect to his desktop, and hoped we could configure ...
1
vote
1answer
34 views

Can a VPN tunnel between routers be built with different tunnel protocol on both ends?

I have two routers and the tunnel between them is up and working well. Router1 has GRE/IP as the protocol on its tunnel interface, and as for Router2 the tunnel interface is working with IPSEC/IP. Can ...
3
votes
1answer
562 views

Azure VPN vs. Cisco ASA

I have a Cisco 5516-x with v9.7(1)21 on my end and I am trying to create a working VPN to Azure. It looks to me like phase1 goes well but phase2 fails due to policy mismatch. Any suggestions for how ...
4
votes
1answer
2k views

AWS - VPC/VPN - new non-redundant VPN connections notification [closed]

Apologies if this isn't the place. I have an AWS VPC VPN issue whereby I am getting a notification in the site-to-site VPN tab under VPC stating that I have new non-redundant VPN connections (please ...
2
votes
1answer
3k views

Can't ping between 2 CE routers even though routes exist in vrf routing table

I checked the vrf routing tables and the CE's network is present but I cannot ping it from anywhere. I will provide the PEs' configuration files and the CEs'. Any ideas? PE1 configuration file(R2) ...
6
votes
2answers
2k views

In MPLS VPN, Which one become first? MPLS Label tag or VPN encapsulation?

In MPLS VPN network, which one is the first thing to do? I mean label tagging is first or VPN encapsulation is first? If you can, please explain about this case.
2
votes
1answer
133 views

Wireguard protocol understanding where the packet got sent

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
2answers
216 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
1
vote
2answers
473 views

AWS site-to-site VPN and multiple account VPC connections [closed]

I've configured a site-to-site VPN from our firewall (watchguard) to AWS. Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
0
votes
1answer
71 views

VPN MPLS L3 Routing

I have this vpn mpls l3 scenario: Let's say that the host (10.1.1.2) of customer 1 wants to communicate with host (10.1.2.2) of customer 2. My question is: how R2 knows that it has to forward ...
2
votes
2answers
2k views

VyOS / Cisco ASA 5520 site-to-site VPN traffic drops after ~10 minutes

I am trying to setup a site-to-site VPN to a large telco. We are running VyOS 1.1.7 in AWS; they are using a Cisco ASA 5520. Since the telco is large, and we are small, they have dictated all the ...
0
votes
1answer
783 views

WatchGuard Mobile VPN with IPSec - "The VPN server did not respond"

I have been following official WatchGuard guide (mvpn_ipsec_ios_vpn_c.html) to set up Mobile VPN with IPSec on WatchGuard Firebox x750e v10.2.12. Inside the Policy manager, I can see this has been ...
3
votes
2answers
1k views

Quagga (Zebra) multiprotocol BGP configuration for IP multicast routing

Host A: Eth1 = Multicast incoming from upstream provider OpenVPN_interface_point_A = point to point interface with point B ASN = 100 Host B: OpenVPN_interface_point_B = point to point interface ...
3
votes
1answer
195 views

Group VPN between vMX as a member and a cisco router as a Group Controller

I am trying to set up a Group VPN between a cisco GC/KS and 3 vMX router (14.1R1.10) and another cisco router as a member. I've managed to get the Group VPN working between the two cisco router, but I ...
8
votes
4answers
5k views

Does IPv6 remove the need for a VPN?

I know that a VPN may be used in lots of different ways for lots of different things, so I'm not suggesting that IPv6 removes the need for a VPN completely. I'm interested in one particular use-case: ...
1
vote
1answer
552 views

Configuring traffic from certain VLANs to pass through DMVPN [GNS3]

I have the following setup in GNS3: There are other devices to the right, but they are not needed right now. I have a DMVPN configured with Router1 as hub an Routers 2, 3 and 4 as spokes. On the ...
0
votes
1answer
355 views

can ping hosts but not gateways (no NAT)

I have 4 networks: A: 10.10.1.0/24 --\ B: 10.10.2.0/24 ---\ Juniper SSG-350M C: 10.10.3.0/24 ---/ D: 10.10.4.0/24 --/ I have a FreeBSD host in network D with an OpenVPN server working in ...
2
votes
1answer
2k views

Cannot ping LAN via VPN

I'm configuring a Cisco ASA 5505. I try to configure a AnyConnect VPN. It works for the outside GAN. I have access to that, I can ping it also, but I cannot ping/access anything that is in my LAN. Can ...
1
vote
1answer
46 views

Network Security Tunnel

In the Tunnel Interface, when I edit the tunnel information, it shows: Attributes Values Tunnel Source IF10 Tunnel Destination 1.0.0.1 Tunnel Mode GRE What does IF10 ...
0
votes
2answers
676 views

Routing Branch Site Internet Traffic Through Headquarters

I have a VPN between 2 sites connected by a private link point to point. Now I need to find a way how to allow the Internet Traffic from branch Through the main Firewall. I am using Sonicwall tz ...

1 2 3
4
5
13