The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
1answer
2k views

Site-to-site VPN between 5505 and 5512x

I am trying to setup a site-to-site vpn IPsec tunnel between an ASA 5512x and 5505 on an isolated network. I ran through the IPsec VPN wizard on both devices and used the same configuration but they ...
0
votes
1answer
332 views

ScreenOS Failover tunnel

I have a route-based vpn from my site (Netscreen204) to a customer site (Fortinet) . They want a second, backup tunnel in case of failure, and will be using the Fortune there too. The only thing I ...
0
votes
1answer
860 views

Site-to-Site VPN from Windows Azure to Cyberoam CR25iNG

I'm trying to configure Site-to-Site VPN between Windows Azure and on Premise network using Cyberoam CR25iNG UTM Firewall The Local Network Subnet is 192.168.0.1/20 (192.168.0.0 - 192.168.15.255) ...
2
votes
2answers
786 views

Internal Site to Site VPN over MPLS speed issues?

How do I troubleshoot slow performance of a site to site VPN tunnel over a MPLS circuit? What are the relevant reports/stats I should be looking at? Background: I support one end of a Site to Site ...
3
votes
1answer
2k views

site to site VPN

The problem i am facing is establishment of a site to site VPN in between pfSense( version 2.0.1) and SonicWall Pro2040 Enhanced ( Firmware Version: SonicOS Enhanced 4.2.1.4-7e) . All of the ...
1
vote
2answers
3k views

number of hops using tracert over vpn

I work for a small tech company that is signing up a new client that has two locations connected via a site to site VPN. If I run tracert from one pc to another pc at the remote office, there are no ...
3
votes
2answers
593 views

DNS Server replication created duplicate A-Records

I have a several Windows Server 2008 R2 DC/DNS servers locally, RODC's at the remote office, and a Windows Server 2012 DC/DNS server on Azure with a VPN tunnel established. Earlier today I moved a ...
0
votes
0answers
126 views

Site to Site to Site VPN

Just wondering if this is possible, we have a leased cisco 2911 (That I do not have access to) at that is set up with a site to site VPN to tie into a third party's Active Directory server. Our other ...
1
vote
2answers
4k views

AWS VPN Tunnel going down without traffic

I managed to setup a site-to-site VPN connection from Amazon VPC to a company's network, and after a lot of configuration it was working fine, but now i realized that the VPN tunnel is DOWN every time ...
0
votes
1answer
2k views

VPN Between Checkpoint R75.20 and AWS VPC

I have been trying for a long time now to configure a site-to-site VPN connection between Amazon and a Checkpoint R75.20 (previously i tried with Azure) unsuccessfully. I have tried everything and ...
0
votes
0answers
4k views

Tunnel is up but cannot ping directly connected network

We configured a site-to-site VPN and here is the topology. I control the network on the left but not the one on the right. All devices in our network has public IPs. ...
1
vote
0answers
213 views

big speed difference on a network link with and without VPN tunnel

Scenario: We have a network link between two offices. The link is provided by a third party company through a VLAN on their network, but to us it is totally transparent -as if we had a simple ...
0
votes
1answer
196 views

VPN ipsec tunnel from router to single windows server computer (gateway-to-host)

Firstly, is this possible? I haven't seen any posts that talk about this. The situation: 2 different ISP's. One has several servers and a firewall running. The other is limited to only one virtual ...
0
votes
1answer
198 views

HP MSR20 Router VPN Questions

I have limited experience with routers, I was wondering if some offer some insight. I am considering deploying a series of HP MSR20 (or similar routers) at a number of satellite offices which have ...
0
votes
1answer
1k views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
1
vote
1answer
548 views

Set up persistent point-to-point VPN connection on Windows Server

I have seen this question, but it doesn't have a good response and what I am looking for is a little different. I have a well working environment (New York) with a Juniper router that allows me to ...
2
votes
1answer
2k views

ASA 5510 Site to Site VPN works in one direction

I have setup a site to site VPN connection between two Cisco ASA 5510. One site (let's call it A) can see the private network of the other site (site B), but site B cannot see the private network of ...
0
votes
1answer
59 views

S2S VPN Subnet Mask Collisions

I am trying to educate myself on the creation of a site-to-site vpn for a planned vpn tunnel we will be creating at work. I am having trouble understanding what I should put for local-remote sub-nets ...
0
votes
1answer
371 views

Branch to Branch VPN through HQ router?

I've just upgraded our router and am working my way through setting it up as the old one was. The new router is a Draytek Vigor 3900. We have a number of sites with IPSec tunnels dialling in to our ...
0
votes
1answer
110 views

Site to Site VPN Tunnels

This is more of a theoritcal question then a problem. With regards to Site to Site VPN links, let's for the sake of the question say we have two Sonicwall Firewalls. Site A and Site B SonicwallA ...
1
vote
1answer
263 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
2
votes
1answer
8k views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
1
vote
1answer
535 views

Communications between Amazon EC2 VMs in VPCs across different regions?

I am building a Web site that will have users in the US and in Europe. I setup an Amazon Virtual Private Cloud (VPC) in the US-east region, and another VPC in Europe-west region. I also configured ...
3
votes
1answer
1k views

IPSec L2L Failover between two pfSense devices

Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
-1
votes
1answer
104 views

Windows Server as router + VPN

We have two locations between which we want to have secure connection. The link between those two networks is 4Gbit/s, and the problem is that our firewalls can provide VPN with maximum throughput of ...
1
vote
1answer
485 views

Pinging between hosts through Layer2 tunnel fails

I have some serious problems with my newly setup network with a Layer 2 VPN tunnel. I draw a little diagram to show the simple version of the setup: The green lines are through the VPN, the blue ...
1
vote
1answer
161 views

puzzled by VPN, can not see machines in network

I have set up a VPN tunnel between office and rackspace, this all works and i can access my servers by there local IP. However i wish to remove ALL remote access away, so have created a VPN tunnel ...
2
votes
3answers
147 views

How quickly should data/files be visible on a network share that goes through a VPN tunnel?

I'm looking for information on how information is shared/passed across a network between a Windows 7 client OS and a Windows Server 2008 server? Little history of our setup (I apologize as for Im not ...
1
vote
0answers
404 views

Site-to-Site VPN between Draytek Vigor and ISA 2006 Authentication Issue

I currently have a remote satellite office that has been configured as a site-to-site VPN. There is a Draytek Vigor 2830 router that is connected to an ISA 2006 server. I am having issues with ...
0
votes
1answer
269 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
1
vote
0answers
146 views

CCP site-to-site VPN using access rules

I use CCP for creating site-to-site VPNs on a Cisco router. I need to use network objects on my ipsec rule for having multiple hosts but the network objects are only available on the access rules ...
1
vote
1answer
689 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
2
votes
1answer
657 views

L2TP server - site-to-site vpn connection

I am not sure this is the right place for this question but here goes. We want to connect users using an L2TP VPN connection to a users at the other end of a SonicWall site-to-site VPN. Currently we ...
1
vote
0answers
87 views

Advice on Auditing VPN Connections

I've inherited a network that is truly a mess and the VPN config is amazingly long with confusing group names and very little documentation. I am curious to see how others have gone about auditing ...
2
votes
2answers
5k views

VMWare ESXi - VPN Tunnel to VMs

We are looking at renting a VMWare ESXi server through a provider. This VMWare ESXi server will be allocated a public IP. Most of the VMs that we will host on this server is only meant to be used ...
0
votes
1answer
450 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
2
votes
0answers
539 views

ASA Site to Site VPN Version 8.4 Natting Same Subnets

My site and client site has same Lan IP range. Both using ASA version 8.4 Site A : 192.168.18.0 Site B : 192.168.18.0 Please tell me how to do Natting on 8.4 Any help would be highly appreciated. ...
1
vote
1answer
695 views

Barracuda/ASA IPSEC tunnel is closing (which is ok, on idle) but can only be raised from the Barracuda side

We have a IPSEC tunnel set up between our ASA and a Barracuda NG on the other side. The tunnel is functional, except it seems to have a very short idle time-out (couple of seconds) and it can only be ...
0
votes
1answer
169 views

Unable to access Local computers in LAN2 of my Windows VPN

I have searched the site for a close situation, I didn't find one. We have two sites connected by VPN as follows: LAN1 (192.168.18.0) VPN Server - 192.168.18.4 LAN2 (192.168.19.0) VPN Server - ...
1
vote
1answer
1k views

Problems with packets on IPSEC Tunnel for Windows 2008 R2

I have a network with a Windows 2008 R2 server with Routing and Remote Access installed on a cloud platform with a PUBLIC and PRIVATE IP address. I have successfully configured the Fortigate FW and ...
1
vote
2answers
4k views

Ping Cisco ASA over VPN

ASA1 is 8.4(2) @ 192.168.1.1, behind this is host1 @ 192.168.1.10 ASA2 is 8.4(3) @ 192.168.2.1, behind this is host2 @ 192.168.2.10 Pinging form host1 to host2 works, but I can't ping that inside ...
3
votes
1answer
2k views

Site-specific folder redirection through group policy

Suppose I have two sites - A and B - both with 5/5 Mbps WAN links that are connected via L2L VPN. Each Site is defined in AD Sites 'n Services with its own domain controllers, etc. The problem is that ...
2
votes
0answers
532 views

IPSec VPN : Traffic not routing correctly

We have a server which is windows 2008 running on a VPS with a single public IP address. I've configured the firewall to allow IPSEC VPN connections to be established with our Draytek routers at ...
0
votes
1answer
85 views

Do sides of a VPN tunnel need IPs set (2 VPN routers connecting virtual LAN)?

Is there a reason to have IPs on terminating sides of a VPN tunnel when connecting, say, 2 remote offices? There is an option to have and an option not to have. Advantages and disadvantages of both ...
3
votes
2answers
5k views

Understanding ipsec with NAT and dynamic IP's

I'm using OpenSWAN to set up a net-to-net VPN tunnel. I have succeeded in configuring a test scenario as follows: About test and test2: they are Ubuntu 12.04 virtual machines created using ...
0
votes
2answers
3k views

Outside VPN traffic not able to ping site-to-site VPN remote site

we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly. Site/Subnet A: 192.100.0.0 - local (8.4(4)) Site/Subnet B: 192.200.0.0 - ...
0
votes
1answer
6k views

Site-to-Site VPN between two ASA 5505s only working in one direction

I am in the process of setting up a remote office for the first time and have been trying to establish a site-to-site VPN between the branch and the home office. I used the Site-to-Site VPN Wizards ...
0
votes
1answer
1k views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
0
votes
1answer
940 views

How can I create a permanent/persistent PPTP VPN from a Windows Server 2008 (R2) machine?

A while ago I managed to create a permanent (or persistent) VPN to a remote server from my Windows 2008 server. However I can't remember how I did this and I can't find any articles explaining how you ...
5
votes
1answer
41k views

IPsec VPN site-to-site: How should I configure the ipsec.conf files on both sites to get the tunnel up?

What I am trying to do is to create a site-to-site IPsec VPN between my network and my friend's network. We both have a router and two computers on each router, with all computers running Linux. So I ...