0
votes
1answer
47 views

How is my GRE-Tunneled packet being routed? [closed]

I'm trying to figure out exactly what is happening when I create a GRE tunnel. My network looks like this (-> means directly connected): Computer A (eth0: 10.0.1.1) -> (eth0: 10.0.1.2) Router B ...
2
votes
1answer
36 views

Should we accomodate a customer asking us to NAT servers behind new PUBLIC IPs within a VPN?

We're a SaaS provider, setting up a IPSec VPN between our data center and a customer's site so they can directly access their hosted database server from their LAN. Instead of exposing our internal ...
0
votes
0answers
86 views

Fortigate VPN can't reach site

I've two Fortigate's here and I use one of them for each site. Site A Site B 192.168.2.0/24 <---------- VPN ...
0
votes
0answers
33 views

No such device error when trying to create IPSec tunnels

I'm trying to establish parallel tunnels between the same two routers, each of which route traffic from slightly different subnets. I can always set up the first tunnel without a problem, however when ...
0
votes
0answers
33 views

simple subnetting, regarding vpn

i am using 2 cisco rv180 to build up a ipsec tunnel. thats working. but i cant get any packets trough the tunnel. first i was using: local: 10.0.0.X 255.0.0.0 remote 10.0.1.x 255.0.0.0 but 0 ...
2
votes
1answer
556 views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
1
vote
0answers
150 views

Complicated OpenVPN/IPSec passthrough setup to solve

I currently have some sort of complicated setup to do. I have a dedicated server, installed with OpenVPN server. There is one OpenWRT router connected to the dedicated server via OpenVPN. On the other ...
0
votes
0answers
137 views

Connecting a Linux client to an IPSec VPN (Vyatta)

I have just setup an IPSec on a Vyatta server and now I am trying to connect a Linux client to this router. What I basically am trying to do is to be able to make that Vyatta machine a physically ...
0
votes
1answer
105 views

ipsec routing / strange routing behavior

I have following network configuration: Office1 <-- openvpn --> office2 <-- ipsec tunnel --> branch office Office1 and office2 are on Debian, Branch office: juniper srx100 Office1 ...
0
votes
0answers
146 views

IPSec configuration between a (Cisco) routed network and a (Racoon) NATed network?

I am trying to set up the following WAN configuration: Both interfaces on the router at the datacenter connect to public networks. However, our office is behind a standard cable modem and is ...
0
votes
2answers
151 views

How does VPN software 'hijack' packets for tunneling?

My current mental model An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation Somewhere along the line before the ...
0
votes
1answer
88 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
3
votes
1answer
445 views

selective routing through a VPN tunnel

The problem: after establishing an IPsec VPN tunnel all traffic is routed to the remote endpoint, while I only need to route the packets destined to that internal network and still be able to access ...
2
votes
1answer
1k views

VPN iptables Forwarding: Net-to-net

I've tried to look elsewhere on this site but I couldn't find anything matching this problem. Right now I have an ipsec tunnel open between our local network and a remote network. Currently, the ...
0
votes
0answers
546 views

NETKEY IPsec and ARP

I'm wondering if I have the correct routing setup for an IPsec tunnel. I have control over the IPsec endpoints and the hosts connected to one side. These hosts are connecting to the tunnel so that ...
0
votes
1answer
571 views

Windows 7 + IPSec: Force all remote traffic through VPN

I have set up a VPN connection to an remote L2TP/IPSec VPN server, which works fine. Now i like to ensure that all remote traffic is being routed through this VPN, so if the VPN connection drops, no ...
1
vote
1answer
98 views

Linux networking and routing

I have 3 networks: 192.168.1.0/24 192.168.11.0/24 192.168.50.0/24 192.168.1.0/24 and 192.168.11.0/24 are connected to each other through an IPSec tunnel, and 192.168.11.0/24 and 192.168.50.0/24 are ...
0
votes
0answers
3k views

Zywall USG 300 ipsec config issue

We have a Zywall USG 300 which dials ipsec to a Server 2008 R2 server. This was working until recently when any attempt to communicate with the server sees the following in the logs. error IPSec ...
0
votes
1answer
184 views

Scaling up to tens of hundreds of IPSec tunnels and alternative methods of secure transactions

I may have a need to add (to start) 10 IPSec tunnels in a hub-spoke design, whereas communication is one-way (spokes -> hub only) for the purpose of collecting data in a central database server. Each ...
0
votes
3answers
2k views

Routing specific traffic through vpn

I have a router-router IPSEC VPN and am struggling to get a specific ip to go through the vpn instead of out to the internet. How does my router know whether to send traffic via the internet ...
0
votes
1answer
604 views

GRE over IPSec behind FW

I have a checkpoint S-Box which is a gateway for network 192.168.0.0/24. Internal IP is 192.168.0.1. On the S-Box configured static VPN tunnel with local IP 10.x.x.x and remote 10.y.y.y. I need to ...
0
votes
1answer
881 views

IPSEC tunnel Fortinet Transparent Mode to inside Fortinet firewall in NAT Mode does not respond to incomming traffic

I have 2 fortinet firewalls (fully patched); fw1 is providing an IPSEC tunnel in transparent mode. beneath this firewall is a fw2, a NAT firewall with a VIP address that has been confirmed to work. ...
0
votes
1answer
167 views

really dumb routing, ipsec, rdp question

We have persistent IPSec tunnels on my firewall to two remote offices. When users from those offices visit, what exactly would I need in order to get their RDP shortcuts to resolve over the tunnels? ...
1
vote
1answer
493 views

RRAS together with IPSec possible?

I have a server which basically acts as a router, but also offers some other services. The server has 3 interfaces, one leading to the main LAN and one to a server segment. Both these interfaces have ...