1
vote
2answers
37 views

Allow only IPSEC outgoing traffic to a port (using IPTABLE?)

Problem: I've a situation where IPSEC server and the target server (Say http server) happens to be the same machine and I need allow ONLY the traffic coming through IPSEC server to have access to a ...
0
votes
0answers
48 views

Linux IPSec, association established but no traffic

We are attempting to setup an IPSec tunnel from a Debian firewall/router to a Netasq hardware firewall. On the Debian side the tools used are IPSec-tools and Racoon. The IPSec SA is established ...
1
vote
0answers
57 views

Route between two branch offices via IPsec VPN to head office?

I have TMG 2010 running on Server 2008 R2 in our head office with 2 branch offices connecting in using Dray Tek 2930 routers with IPsec site to site VPNS. The remote sites can route between the head ...
0
votes
0answers
131 views

Windows 2008 R2 site-to-site IPSEC tunnel with Juniper: tunnel up but packets are lost

I am stuck on this task almost for 2 days. Organized a site-to-site IPSEC tunnel between Juniper and Windows2008R2 machine (let's call it W2008R2 for reference). W2008R2 is a multihomed machine (2 ...
0
votes
1answer
85 views

How is my GRE-Tunneled packet being routed? [closed]

I'm trying to figure out exactly what is happening when I create a GRE tunnel. My network looks like this (-> means directly connected): Computer A (eth0: 10.0.1.1) -> (eth0: 10.0.1.2) Router B ...
2
votes
1answer
43 views

Should we accomodate a customer asking us to NAT servers behind new PUBLIC IPs within a VPN?

We're a SaaS provider, setting up a IPSec VPN between our data center and a customer's site so they can directly access their hosted database server from their LAN. Instead of exposing our internal ...
0
votes
0answers
420 views

Fortigate VPN can't reach site

I've two Fortigate's here and I use one of them for each site. Site A Site B 192.168.2.0/24 <---------- VPN ...
0
votes
0answers
66 views

No such device error when trying to create IPSec tunnels

I'm trying to establish parallel tunnels between the same two routers, each of which route traffic from slightly different subnets. I can always set up the first tunnel without a problem, however when ...
0
votes
0answers
36 views

simple subnetting, regarding vpn

i am using 2 cisco rv180 to build up a ipsec tunnel. thats working. but i cant get any packets trough the tunnel. first i was using: local: 10.0.0.X 255.0.0.0 remote 10.0.1.x 255.0.0.0 but 0 ...
2
votes
1answer
1k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
1
vote
0answers
202 views

Complicated OpenVPN/IPSec passthrough setup to solve

I currently have some sort of complicated setup to do. I have a dedicated server, installed with OpenVPN server. There is one OpenWRT router connected to the dedicated server via OpenVPN. On the other ...
0
votes
0answers
205 views

Connecting a Linux client to an IPSec VPN (Vyatta)

I have just setup an IPSec on a Vyatta server and now I am trying to connect a Linux client to this router. What I basically am trying to do is to be able to make that Vyatta machine a physically ...
0
votes
1answer
124 views

ipsec routing / strange routing behavior

I have following network configuration: Office1 <-- openvpn --> office2 <-- ipsec tunnel --> branch office Office1 and office2 are on Debian, Branch office: juniper srx100 Office1 ...
0
votes
2answers
173 views

How does VPN software 'hijack' packets for tunneling?

My current mental model An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation Somewhere along the line before the ...
0
votes
1answer
104 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
3
votes
1answer
554 views

selective routing through a VPN tunnel

The problem: after establishing an IPsec VPN tunnel all traffic is routed to the remote endpoint, while I only need to route the packets destined to that internal network and still be able to access ...
2
votes
1answer
1k views

VPN iptables Forwarding: Net-to-net

I've tried to look elsewhere on this site but I couldn't find anything matching this problem. Right now I have an ipsec tunnel open between our local network and a remote network. Currently, the ...
0
votes
0answers
660 views

NETKEY IPsec and ARP

I'm wondering if I have the correct routing setup for an IPsec tunnel. I have control over the IPsec endpoints and the hosts connected to one side. These hosts are connecting to the tunnel so that ...
0
votes
1answer
729 views

Windows 7 + IPSec: Force all remote traffic through VPN

I have set up a VPN connection to an remote L2TP/IPSec VPN server, which works fine. Now i like to ensure that all remote traffic is being routed through this VPN, so if the VPN connection drops, no ...
1
vote
1answer
105 views

Linux networking and routing

I have 3 networks: 192.168.1.0/24 192.168.11.0/24 192.168.50.0/24 192.168.1.0/24 and 192.168.11.0/24 are connected to each other through an IPSec tunnel, and 192.168.11.0/24 and 192.168.50.0/24 are ...
0
votes
1answer
200 views

Scaling up to tens of hundreds of IPSec tunnels and alternative methods of secure transactions

I may have a need to add (to start) 10 IPSec tunnels in a hub-spoke design, whereas communication is one-way (spokes -> hub only) for the purpose of collecting data in a central database server. Each ...
0
votes
3answers
2k views

Routing specific traffic through vpn

I have a router-router IPSEC VPN and am struggling to get a specific ip to go through the vpn instead of out to the internet. How does my router know whether to send traffic via the internet ...
0
votes
1answer
640 views

GRE over IPSec behind FW

I have a checkpoint S-Box which is a gateway for network 192.168.0.0/24. Internal IP is 192.168.0.1. On the S-Box configured static VPN tunnel with local IP 10.x.x.x and remote 10.y.y.y. I need to ...
0
votes
1answer
909 views

IPSEC tunnel Fortinet Transparent Mode to inside Fortinet firewall in NAT Mode does not respond to incomming traffic

I have 2 fortinet firewalls (fully patched); fw1 is providing an IPSEC tunnel in transparent mode. beneath this firewall is a fw2, a NAT firewall with a VIP address that has been confirmed to work. ...
0
votes
1answer
170 views

really dumb routing, ipsec, rdp question

We have persistent IPSec tunnels on my firewall to two remote offices. When users from those offices visit, what exactly would I need in order to get their RDP shortcuts to resolve over the tunnels? ...
1
vote
1answer
504 views

RRAS together with IPSec possible?

I have a server which basically acts as a router, but also offers some other services. The server has 3 interfaces, one leading to the main LAN and one to a server segment. Both these interfaces have ...