Questions tagged [vpn]

For questions about Virtual Private Networks (VPNs).

Filter by
Sorted by
Tagged with
2
votes
1answer
496 views

Cisco ASA IP object vs TCP/UDP object wrt VPN Filters

When it comes to managing access rules in Cisco ASAs I always use ASDM because it's easier for me to visualize, troubleshoot and manage. I recently created a VPN filter for a S2S IPsec VPN and ...
1
vote
1answer
500 views

Tracert getting timeout on second packet consistenly

I'm on a vpn and tracing to virtualmachines that live in the VPN Server. I've been experiencing slow queries, when they should be fast. below is what the trace is returning. I'm curious as to why the ...
2
votes
1answer
2k views

SonicWall is dropping encrypted packets with error “sonicwall ipsec vpn decryption failed selector check error”

I have implemented a Site-to-Site IPsec tunnel between a Juniper SSG firewall and a SonicWall. However, any traffic that I send over the tunnel gets dropped on the SonicWall with an error saying ...
4
votes
2answers
948 views

L3 core switch and VPN access

At work we have a cisco 3560 L3 core, in which we implement all our L3 VLANs and ACLs controlling inter-vlan routing. As far as client machines are concerned, the L3 switch is the default gateway, ...
2
votes
1answer
411 views

In a site-to-site VPN, can a computer on site A use the gateway on site B?

I'm running a site-to-site VPN set up with 2 Ubiquity Edgemax routers. Hosts on both sites can see each other, etc. I'm looking for a way to set up site B in a way that all of its hosts use site A as ...
1
vote
2answers
5k views

Cisco ASA MTU vs TCP MSS

I am trying to set jumbo MTU for Cisco ASA 5585 and I did following: asa1/pri/act(config)# mtu inside 9000 INFO: Jumbo frames should be enabled to receive packets more than 1500 MTU Use '...
1
vote
2answers
987 views

Command “ip nhrp map multicast dynamic” is not being saved into the configuration

For some reason, my Cisco router is not saving the command "ip nhrp map multicast dynamic". The command is recognized but not being saved to the configuration. I am not receiving any errors. Any ...
2
votes
2answers
605 views

Cisco ASA - LDAP Authentication issue

I've configured the ASA for LDAP authentication and successfully tested with the "Test aaa-server" command. However when I attempt to connect via Clientless VPN, I am unable to log in. Local users are ...
1
vote
2answers
408 views

IPv6 in PPP - should be an Interface Identifier negotiated FOR both ends of a link? Clarification of RFC 5072 needed

I am trying to implement IPv6 in an existing VPN PPP software, but having hard time of understanding some of the RFC 5072 sections meaning. Namely, section 4.1. Assumption 1: PPP interfaces do not ...
1
vote
1answer
93 views

Can I run a VPN faster than internet using custom router + optimized protocol other than TCP/IP?

If I make a VPN using a custom, optimized hardware router, running a customized routing protocol much more efficient than TCP/IP, put it in place of the router my ISP gave me, then is it possible to ...
2
votes
1answer
459 views

VPN S2S/L2L between 2 ASA 5506-X

I have a problem to create a VPN L2L between 2 ASA 5506-X (see the pictures bellow). I configure my 2 firewall inspired by the majority of tutorials found on the NET. I correctly place client PCs in ...
1
vote
1answer
939 views

Cisco ASA DH group and Lifetime of Phase 2

Not very good with ASAs so please have that in mind. I need to replace an ASA but can't seem to get some info on Phase 1 and Phase 2. I can get everything from Phase 1 except the DH group (got PFS ...
1
vote
2answers
439 views

SIte-to-Site VPN between ASAv8 and ASAv9: NAT issue

I'm setting up a site-to-site via ASDM. Initially I configured both devices correctly, matching policies, crypto, etc and set both inside networks as "NAT exempt". Problem is, when I apply changes on ...
1
vote
1answer
441 views

SonicWall Site-to-site VPN with WAN IP endpoint

I'm not a real network engineer (just something I must dabble in from time to time), so hopefully I will provide enough detail and use the right terminology here. We have a site-to-site VPN ...
2
votes
2answers
761 views

public ip across ipsec vpn tunnel

two sites connected ip sec vpn tunnel. site A has 16 static ip addresses for outside to in access (NAT). can I route one of my public ip addresses from site A across vpn tunnel to a host on site B?
3
votes
1answer
3k views

IPSec site-to-site with/without NAT

I am connecting my office to a client's network via IPSec. The need is for me to connect directly to internal IPs on their network; there is no need for them to connect to any services on my internal ...
1
vote
1answer
795 views

Fortigate 90D SD-WAN: VPN and VoIP

i am contemplating the idea of switching our current FG 80D to a 90D and implement SD-WAN using our current 100Mbit fiber circuit (main) and the 4G LTE (cradlepoint) for internet backup. Our current ...
2
votes
1answer
1k views

How to keep an ASA tunnel up for lifetime?

We have a Cisco ASA and at the remote end I have no idea what the device is. This is what happening: When I send a packet or generate interesting traffic, it brings up the tunnel and everything ...
0
votes
2answers
223 views

Ping traverses openvpn tunnel only 1 of 2 times [closed]

I can barely put into words the problem I'm having, but I'll give it a go. I have a pfsense router on which I've set up openvpn to act as a client to connect into another network. This has worked ...
1
vote
1answer
106 views

Secure communication between multiple sites over Internet

Does anyone know what would be the best practice to securely connect 2 or more branches with HQ over the Internet, and to allow communication between all of them (so anyone can contact anyone) if I ...
1
vote
1answer
347 views

Route Specific Traffic To Another Firewall

I'm looking for a way to setup a route from my internal LAN to another router. Here's the current situation: I have an ASA5512-X where all servers are connected and all the employees are connected to,...
1
vote
1answer
377 views

Trouble routing SSH traffic from internet to private server via VPN - Sonicwall to Draytek

Our small business uses a Sonciwall TZ210 on a fixed IP line in our office, subnet for this location is 192.168.3.0. This is connected to a Draytek 2850 router at my home address using an IPSec VPN ...
0
votes
1answer
1k views

Ping from ASA over Site to Site VPN

There are two things I'm trying to solve which are essentially the same problem. Cannot ping from the ASA to remote devices over a site to site VPN terminated on the ASA. ASA AnyConnect LDAP lookups ...
2
votes
1answer
47 views

How to access to virtual interface with static IP thanks to VPN?

Question : Is it possible to use a VPN solution to access to a remote PC in the following context ? Context : Objective : We need to connect a specific software (that uses a particular port) to a ...
0
votes
2answers
224 views

VPN from azure to internal ASA

My company has created a network topology where we have 2 firewalls. The external one is a DrayTek and the internal one is a Cisco ASA. We also have a dmz connected to the ASA. The DrayTek public IP ...
2
votes
1answer
732 views

Firewall and VPN functionalities for a Cisco ISR4321 V/K9

I would like to know if I can setup ACLs with the access-list command with a Cisco ISR4321 V/K9. Are there restrictions (in comparison with a Cisco ISR4321 VSEC/K9)? Note the SEC part in the reference....
0
votes
2answers
397 views

Internal NAT before establishing a VPN Host-to-Host

We are establishing a host-to-host VPN with our business partner. After we exchanged our IP information they said that our LAN IP range will overlap their LAN IP range and we had to do an internal NAT....
3
votes
4answers
4k views

VLANS vs. subnets for network security and segmentation

What are the security implications when using subnets as opposed to VLANs for segmenting an enterprise network? We have strict security requirements surrounding the data we handle and need to ensure ...
2
votes
2answers
9k views

How are VPN Clients given IP addresses when they connect to VPN Routers such as VyOS? (How do Virtual IP Address Pools fit in?)

I'd like to know the nitty gritty details of how VPN Remote Clients are given Private IP Addresses on a Remote Network when they connect to the StrongSWAN or OpenVPN VPN Server that's embedded in VyOS ...
1
vote
5answers
915 views

Access non-public IP computer

I am looking into methods how to access my PC from internet. I do not have a public IP (neither for my router nor local PC). I know I can do 2 things: ask for public IP and simply port forward ...
2
votes
1answer
3k views

Site-to-Site IPsec VPN tunnel with an additional remote network/subnet

We have following scenario, my side we have Cisco ASA and we have IPsec tunnel to Customer US-Datacenter and i can ping 172.16.0.0 subnet from my ASA (local LAN 10.0.0.0/8) but now i want to ping EU-...
1
vote
1answer
3k views

What is the need for Reverse Route Injection?

From the definition of Reverse Route Injection, I have understood that it creates static route entries for remote vpn destinations in VPN gateway, so that it can redistribute the routes into into it's ...
2
votes
1answer
1k views

IPsec vpn missing crypto keyring

We have VPN tunnel with our customer and they sent their side VPN config and i am trying to put that config in my Cisco ASA 5585 (9.x) version and it has missing crypto keyring command Customer ...
2
votes
1answer
1k views

How to configure site to site VPN between Cisco ASA and Cisco router? [closed]

I have CISCO ASA on one site and CISCO ROUTER on other side, both have outside interface facing public IP and doing NAT for internal VLAN's. How to connect different VLAN's on one site to VLAN's on ...
0
votes
1answer
221 views

What is OpenVPN?

This question can appear trivial, but a lot of sites define OpenVPN like a protocol, other sites define it just like a software. Is it possibile define it as both (i.e. because it uses a custom ...
2
votes
1answer
4k views

ASA anyconnect VPN not able to access remote LAN (inside) network

I have setup ASA5506 for cisco anyconnect VPN and i am able to connect VPN but not able to ping or ssh or anything to any device on remote lan (inside) network 10.0.10.x/24 Here is the network ...
2
votes
2answers
13k views

Cisco ASA: Unable to establish IPSec tunnel with IKEv2: Auth exchange failed

This is a Cisco ASA 5515-X with software 9.6(3)20. The remote side didn't tell me what they use, must be Strongswan or something. Using the following debug commands debug crypto ipsec 255 debug ...
2
votes
1answer
9k views

ASA IPsec Removing peer from correlator table failed, no match

We have two ASA 5585 and ASA 5506 and we're trying to setup an IPsec VPN tunnel between both ASA but getting this error [SITE-1]--------Internet------------[SITE-2] I'm getting this error in debug ...
4
votes
1answer
339 views

Cisco ASA Site to Site VPN

Hoping someone can be of assistance. I am attempting to setup a site to site vpn with two cisco asas. Site A. 192.168.1.0, Static external IP, Cisco ASA 5520 Site B. 10.0.0.0 Dynamic External IP, ...
1
vote
2answers
925 views

Connecting multiple remote networks to one main network through VPN

In a project I'm working on I need to connect several small networks to one main network, providing full visibility through hosts. In few words, I need to setup a bridging through several remote ...
1
vote
2answers
1k views

Accessing Sonicwall VPN behind new modem

So we have a Dell Sonicwall unit that serves as our firewall and also runs the VPN functionality via the Sonicwall SSL-VPN and the accompanying client side application, Sonicwall NetExtender. We have ...
1
vote
1answer
2k views

Cisco AnyConnect VPN - how to use port 443?

We have a Cisco Anyconnect VPN SSL configured on Outside interface and port 7443. I'd like to change this port to 443 (already used with the current public IP) but with a new public IP pool. What ...
1
vote
1answer
837 views

Error in VPN site-to-site connection between Cisco Router C3925 and Firewall Sophos XG210

We could not setup the VPN connection between Router C3925 and Firewall Sophos XG210. Attached files are the logs on both 2 devices. Please revise and suggest, many thanks! Public IP address of ...
1
vote
1answer
786 views

Cisco IPSec Pass-through on ASA 5505 not working

I have been busting my brain for a few days not and I have so far not been able to figure out what the issue here is. The Problem: I am unable to establish a Client-to-ASA IPSec tunnel from behind ...
2
votes
1answer
165 views

Juniper SSG Split DNS not working over tunnel

I am trying to get the DNS Proxy feature working in an SSG5 (Side B). The other side of the VPN is an SSG140 (Side A). The DNS server is on Side A. foo.com should send DNS queries to 192.168.1.2 (...
1
vote
2answers
6k views

Cisco site-to-site vpn multiple subnet route over tunnel

We have a site-to-site VPN tunnel to AWS which was working great until I added another subnet to the ACL list for interesting traffic which was causing a strange issue. It is only allowing me to add a ...
1
vote
2answers
972 views

ASA anyconnect VPN restriction base on group

We have implemented Remote access VPN on ASA and integrate with onelogin cloud base OTP service, where we have LDAP server and onelogin provide RADIUS service to provide LDAP+OTP base authentication. ...
4
votes
3answers
1k views

Cisco ASA Site-to-Site VPN, remote LANs have no Internet

I have a site-to-site VPN from a Cisco ASA 5512 and a Cisco 891. I want all traffic, even Internet access, to come through our ASA. The VPN is established and working. The LANs have connectivity to ...
0
votes
2answers
51 views

Does a vpn software operate on a level where it encrypts data before it leaves your computer?

If someone decided to exploit your wifi network, but you have a vpn, do they see data before the vpn software encrypts or after?
1
vote
1answer
4k views

How to Cisco Anyconnect increase subscription base license user count

We have Cisco ASA5500 and we purchased L-AC-PLS-LIC= for 25 users for 3 year now if i want to increase users count then how can i increase it to 50? Can i just buy 25 users license and add into or i ...

1 2 3
4
5
12