Tagged Questions

0
votes
0answers
20 views

IPSec configuration between a (Cisco) routed network and a (Racoon) NATed network?

I am trying to set up the following WAN configuration: Both interfaces on the router at the datacenter connect to public networks. However, our office is behind a standard cable modem and is ...
0
votes
2answers
66 views

How does VPN software 'hijack' packets for tunneling?

My current mental model An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation Somewhere along the line before the ...
0
votes
1answer
47 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
0answers
139 views

Tricky IPSEC routing ALL traffic to another host

I have an IPSEC tunnel between two sites. Something like this: SrvHOME with IPSEC (10.0.0.2) <===> (10.0.0.1) Mikrotik Router (IP pub) <===> INTERNET <===> (IP pub) Remote Srv with IPSEC ...
3
votes
1answer
311 views

selective routing through a VPN tunnel

The problem: after establishing an IPsec VPN tunnel all traffic is routed to the remote endpoint, while I only need to route the packets destined to that internal network and still be able to access ...
2
votes
1answer
806 views

VPN iptables Forwarding: Net-to-net

I've tried to look elsewhere on this site but I couldn't find anything matching this problem. Right now I have an ipsec tunnel open between our local network and a remote network. Currently, the ...
0
votes
0answers
386 views

NETKEY IPsec and ARP

I'm wondering if I have the correct routing setup for an IPsec tunnel. I have control over the IPsec endpoints and the hosts connected to one side. These hosts are connecting to the tunnel so that ...
0
votes
1answer
410 views

Windows 7 + IPSec: Force all remote traffic through VPN

I have set up a VPN connection to an remote L2TP/IPSec VPN server, which works fine. Now i like to ensure that all remote traffic is being routed through this VPN, so if the VPN connection drops, no ...
1
vote
1answer
92 views

Linux networking and routing

I have 3 networks: 192.168.1.0/24 192.168.11.0/24 192.168.50.0/24 192.168.1.0/24 and 192.168.11.0/24 are connected to each other through an IPSec tunnel, and 192.168.11.0/24 and 192.168.50.0/24 are ...
0
votes
0answers
2k views

Zywall USG 300 ipsec config issue

We have a Zywall USG 300 which dials ipsec to a Server 2008 R2 server. This was working until recently when any attempt to communicate with the server sees the following in the logs. error IPSec ...
0
votes
1answer
160 views

Scaling up to tens of hundreds of IPSec tunnels and alternative methods of secure transactions

I may have a need to add (to start) 10 IPSec tunnels in a hub-spoke design, whereas communication is one-way (spokes -> hub only) for the purpose of collecting data in a central database server. Each ...
0
votes
3answers
1k views

Routing specific traffic through vpn

I have a router-router IPSEC VPN and am struggling to get a specific ip to go through the vpn instead of out to the internet. How does my router know whether to send traffic via the internet ...
0
votes
1answer
567 views

GRE over IPSec behind FW

I have a checkpoint S-Box which is a gateway for network 192.168.0.0/24. Internal IP is 192.168.0.1. On the S-Box configured static VPN tunnel with local IP 10.x.x.x and remote 10.y.y.y. I need to ...
0
votes
1answer
752 views

IPSEC tunnel Fortinet Transparent Mode to inside Fortinet firewall in NAT Mode does not respond to incomming traffic

I have 2 fortinet firewalls (fully patched); fw1 is providing an IPSEC tunnel in transparent mode. beneath this firewall is a fw2, a NAT firewall with a VIP address that has been confirmed to work. ...
0
votes
1answer
163 views

really dumb routing, ipsec, rdp question

We have persistent IPSec tunnels on my firewall to two remote offices. When users from those offices visit, what exactly would I need in order to get their RDP shortcuts to resolve over the tunnels? ...
1
vote
1answer
477 views

RRAS together with IPSec possible?

I have a server which basically acts as a router, but also offers some other services. The server has 3 interfaces, one leading to the main LAN and one to a server segment. Both these interfaces have ...