The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
132 views

CCP site-to-site VPN using access rules

I use CCP for creating site-to-site VPNs on a Cisco router. I need to use network objects on my ipsec rule for having multiple hosts but the network objects are only available on the access rules ...
1
vote
1answer
522 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
2
votes
1answer
514 views

L2TP server - site-to-site vpn connection

I am not sure this is the right place for this question but here goes. We want to connect users using an L2TP VPN connection to a users at the other end of a SonicWall site-to-site VPN. Currently we ...
1
vote
0answers
75 views

Advice on Auditing VPN Connections

I've inherited a network that is truly a mess and the VPN config is amazingly long with confusing group names and very little documentation. I am curious to see how others have gone about auditing ...
2
votes
2answers
3k views

VMWare ESXi - VPN Tunnel to VMs

We are looking at renting a VMWare ESXi server through a provider. This VMWare ESXi server will be allocated a public IP. Most of the VMs that we will host on this server is only meant to be used ...
0
votes
1answer
370 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
2
votes
0answers
459 views

ASA Site to Site VPN Version 8.4 Natting Same Subnets

My site and client site has same Lan IP range. Both using ASA version 8.4 Site A : 192.168.18.0 Site B : 192.168.18.0 Please tell me how to do Natting on 8.4 Any help would be highly appreciated. ...
1
vote
1answer
525 views

Barracuda/ASA IPSEC tunnel is closing (which is ok, on idle) but can only be raised from the Barracuda side

We have a IPSEC tunnel set up between our ASA and a Barracuda NG on the other side. The tunnel is functional, except it seems to have a very short idle time-out (couple of seconds) and it can only be ...
0
votes
1answer
156 views

Unable to access Local computers in LAN2 of my Windows VPN

I have searched the site for a close situation, I didn't find one. We have two sites connected by VPN as follows: LAN1 (192.168.18.0) VPN Server - 192.168.18.4 LAN2 (192.168.19.0) VPN Server - ...
1
vote
1answer
902 views

Problems with packets on IPSEC Tunnel for Windows 2008 R2

I have a network with a Windows 2008 R2 server with Routing and Remote Access installed on a cloud platform with a PUBLIC and PRIVATE IP address. I have successfully configured the Fortigate FW and ...
1
vote
2answers
3k views

Ping Cisco ASA over VPN

ASA1 is 8.4(2) @ 192.168.1.1, behind this is host1 @ 192.168.1.10 ASA2 is 8.4(3) @ 192.168.2.1, behind this is host2 @ 192.168.2.10 Pinging form host1 to host2 works, but I can't ping that inside ...
3
votes
1answer
1k views

Site-specific folder redirection through group policy

Suppose I have two sites - A and B - both with 5/5 Mbps WAN links that are connected via L2L VPN. Each Site is defined in AD Sites 'n Services with its own domain controllers, etc. The problem is that ...
1
vote
0answers
430 views

IPSec VPN : Traffic not routing correctly

We have a server which is windows 2008 running on a VPS with a single public IP address. I've configured the firewall to allow IPSEC VPN connections to be established with our Draytek routers at ...
0
votes
1answer
80 views

Do sides of a VPN tunnel need IPs set (2 VPN routers connecting virtual LAN)?

Is there a reason to have IPs on terminating sides of a VPN tunnel when connecting, say, 2 remote offices? There is an option to have and an option not to have. Advantages and disadvantages of both ...
2
votes
2answers
4k views

Understanding ipsec with NAT and dynamic IP's

I'm using OpenSWAN to set up a net-to-net VPN tunnel. I have succeeded in configuring a test scenario as follows: About test and test2: they are Ubuntu 12.04 virtual machines created using ...
0
votes
2answers
2k views

Outside VPN traffic not able to ping site-to-site VPN remote site

we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly. Site/Subnet A: 192.100.0.0 - local (8.4(4)) Site/Subnet B: 192.200.0.0 - ...
0
votes
1answer
5k views

Site-to-Site VPN between two ASA 5505s only working in one direction

I am in the process of setting up a remote office for the first time and have been trying to establish a site-to-site VPN between the branch and the home office. I used the Site-to-Site VPN Wizards ...
0
votes
1answer
1k views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
0
votes
1answer
772 views

How can I create a permanent/persistent PPTP VPN from a Windows Server 2008 (R2) machine?

A while ago I managed to create a permanent (or persistent) VPN to a remote server from my Windows 2008 server. However I can't remember how I did this and I can't find any articles explaining how you ...
5
votes
1answer
33k views

IPsec VPN site-to-site: How should I configure the ipsec.conf files on both sites to get the tunnel up?

What I am trying to do is to create a site-to-site IPsec VPN between my network and my friend's network. We both have a router and two computers on each router, with all computers running Linux. So I ...
1
vote
1answer
2k views

VPN Encryption Domain

I'm trying to connect to a counterparty using VPN IPsec. I have a standard cable broadband connection with a single static IP address. The counterparty have asked me for my "Public IP Address Assigned ...
0
votes
1answer
368 views

share one vpn connection through windows rras with other clients

I'm having a Cisco VPN connection to access our branch office. Since several people using the VPN I'm planing to install the VPN client on one of our server and share it through RRAS to save the ...
1
vote
0answers
721 views

Site-to-Site VPN: remote machines can't access local machines

In our office network we have a VPN setup to our datacenter. We are using a Sonicwall NAS. The VPN works fine for most cases. From our office we can connect to the servers in our DC but if I were to ...
4
votes
1answer
489 views

Is it possible to connect two IPSec site-to-site VPNs to one Windows 2008 Server?

I need to connect to two IPSEC site to site vpns from a Windows 2008 Server at the same time. Is it posible? I tried to assign two IP Security Policies, but it seems I can only have one assigned at ...
0
votes
3answers
757 views

How to test fail over VPN between ASAs without disabling the main connection?

I have a fail over VPN set up between two ASA in case the p2p connection drops. I'm trying to find a way to test this with out dropping the p2p. Any ideas on this? I can't generate any interesting ...
1
vote
3answers
1k views

Site to site VPN tracert

I'm not sure how in depth I need to go with this question, but currently I have a site-to-site VPN setup and we are having major connection issues between the two sites. I did a tracert and received ...
1
vote
1answer
235 views

Changing an IPSec pre-shared key without bringing down the tunnel (too long)

How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
1
vote
1answer
511 views

Wireless LAN Bridge with WAN VPN Failover

My network is below, it's currently just an ordinary 192.168.0.0/24, the branch offices needs to have access to resources on the main site. Currently all internet traffic go across the bridge and ...
1
vote
1answer
849 views

Basic Win2K8 R2 DNS/ADDS/DC setup within Amazon VPC

Newbie sysadmin here. I'd like to sharpen my skills by deploying Win2K8 R2 within Amazon's VPC offering. I'm using Tom Carpenter's 'Windows Server Administration Essentials' book (MTA-cert prep) for ...
3
votes
2answers
858 views

TCP Reverse Proxy through VPN

I have a rather odd situation, but it's simple, I swear. I have a server (we'll call it host A) that's connected up to the internet and I use for some websites and other odds and ends. I have another ...
0
votes
2answers
684 views

How do I know if my site-to-site vpn connection is being saturated?

We've got a T1-internet connection with a Cisco ASA 5510 appliance in our small office. We have a site-to-site vpn connection from our office to a remote data center. Question(s): How can I find ...
1
vote
1answer
192 views

Offshore application development - Access to dev network (Security best practice)

Let me start by telling you that I'm not very technical, but need to provide someone with some guidance and I was hoping you could assist. The situation is: Dev and Prod subnets (Not sure if ...
0
votes
1answer
338 views

how to NAT site to site VPN web traffic?

I have 2 Cisco routers and they are connected via GRE over IPsec. All of the traffic from the first router is being routed to the 2nd router with a default route. I need to access internet from the ...
0
votes
1answer
114 views

Overcoming same private IP addresses, different subnets

I am preparing for migration to VMWare ESXi. Part of this involves P2V a large number of physical servers. Since a lot of our applications depend on the IP addresses to stay the same (i.e. they ...
0
votes
1answer
229 views

How are my VPN tunnels being routed from both ends?

Our organization uses Sonicwall devices as our gateway/firewall for all of our locations, with VPN tunnels between each of them. Each site also has a primary and backup internet line (WAN1 and WAN2), ...
0
votes
1answer
176 views

Is this the proper way to set up VPN tunnels for this network topology?

Below is the network topology I will be working with. The left just shows that all sites have a single internet connection. The right shows how I would be setting up the VPN tunnels. The main concern ...
2
votes
1answer
940 views

Recommendation for a virtual site-to-site VPN appliance [closed]

can you please recommend an Virtual Appliance or Operating System for creating multiple site-to-site VPN? The appliance must of course handle IPSec. It should also be OpenVPN capable. An Additional ...
0
votes
2answers
5k views

ClearOS - how to create a site to site VPN between two ClearOS boxes?

I plan on setting up some ClearOS boxes at several sites, and would like to set up site-to-site VPN between the remote sites and a main site (all running ClearOS enterprise 5.2sp1 / latest version). ...
0
votes
3answers
1k views

VPN from my server to a clients

I have an Amazon EC2 server instance running Windows Server 2008 R2. I need to setup a VPN connection between this machine and one of my clients. The purpose is that my server is going to pull data ...
2
votes
2answers
128 views

Replace Cisco 2600 PTP T1

Our office and an outside location have a dedicated T1 point to point connected with Cisco2600's. We need to eliminate the need of the T1 circuit as it is costly and would like to route the traffic ...
2
votes
1answer
1k views

VPN IP Routing - slow connections

UPDATE: Router error logs show: LCP Time-out 0 I'm not sure how to correct this. The Lan-to-Lan profiles are set to -1 Idle Timeout (for the remote branch). I have a PPTP VPN running between two ...
1
vote
1answer
589 views

Replace a Cisco VPN IPSec concentrator with an Ubuntu-box

Is it possible to replace a Cisco VPN IPSec concentrator with Ubuntu and for instance Strongswan? 1) Do Strongswan implement the same protocolls that Cisco uses? 2) Can we retrieve keys from the ...
1
vote
1answer
4k views

Incorporating LogMeIn Hamachi into your own work network as dedicated VPN solution

I've been using LogMeIn Hamachi for a while for personal use and recently I started to wonder how to (and if at all) implement it as full blown VPN solution for my multiple clients. Those are ...
3
votes
1answer
759 views

Site to site VPN : how does the routing work?

I've established a site to site VPN with two Zyxell routers. Site A (LAN: 192.168.16.x) is the main office, and site B (LAN: 192.168.17.x) is a branch office. Both sites are able to reach each other, ...
1
vote
0answers
859 views

Site B FXO configuration for incoming calls

I am trying to configure the FXO port (voice-port 4) on a Cisco SRST881. Currently, there is one working remote extension here (ext 50) and all calls originate from our main office. My goal is to ...
0
votes
2answers
281 views

Setting up VPN for satellite locations

I'm looking to set up multiple VPNs to connect 6 different smaller locations all together. I mean to use a site to site VPN from each location to the main location. I'm using Sonicwall TZ210's at each ...
1
vote
1answer
555 views

Site-to-Site VPN between a Cisco router and a Linux box

SITE A A Cisco router (877W), configured for incoming VPN IPSec client connections Some servers, in a 192.168.0.0/24 network SITE B A Linux box with a physical NIC and a vpnc client ...
1
vote
1answer
138 views

Will entries in hosts file on my SBS2008 box allow email to be delivered to other SBS2008 boxes over VPN

I wonder if someone can assist in solving a problem I am experiencing. Our organisation has 13 offices around the country with an MS SBS2008 box in each office. Each office has its own email domain ...
2
votes
1answer
292 views

Will a Checkpoint Safe@Office 500WP Respond to Site to Site VPN (IPSec) on WAN2?

Pretty simple - if I have two WANs, will the site-to-site VPN work if I specify the WAN2 IP address? (It currently works with the WAN1 IP.)
0
votes
2answers
3k views

Best practice for two site Active Directory through VPN

Currently we have a site-to-site VPN setup between our two locations A and B. Location A has the domain controller; all hosts in location B connect via the site to site VPN to the DC in A. I was ...