The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
1answer
221 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
2
votes
1answer
5k views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
1
vote
1answer
481 views

Communications between Amazon EC2 VMs in VPCs across different regions?

I am building a Web site that will have users in the US and in Europe. I setup an Amazon Virtual Private Cloud (VPC) in the US-east region, and another VPC in Europe-west region. I also configured ...
3
votes
1answer
1k views

IPSec L2L Failover between two pfSense devices

Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
-1
votes
1answer
100 views

Windows Server as router + VPN

We have two locations between which we want to have secure connection. The link between those two networks is 4Gbit/s, and the problem is that our firewalls can provide VPN with maximum throughput of ...
1
vote
1answer
407 views

Pinging between hosts through Layer2 tunnel fails

I have some serious problems with my newly setup network with a Layer 2 VPN tunnel. I draw a little diagram to show the simple version of the setup: The green lines are through the VPN, the blue ...
1
vote
1answer
152 views

puzzled by VPN, can not see machines in network

I have set up a VPN tunnel between office and rackspace, this all works and i can access my servers by there local IP. However i wish to remove ALL remote access away, so have created a VPN tunnel ...
2
votes
3answers
140 views

How quickly should data/files be visible on a network share that goes through a VPN tunnel?

I'm looking for information on how information is shared/passed across a network between a Windows 7 client OS and a Windows Server 2008 server? Little history of our setup (I apologize as for Im not ...
1
vote
0answers
368 views

Site-to-Site VPN between Draytek Vigor and ISA 2006 Authentication Issue

I currently have a remote satellite office that has been configured as a site-to-site VPN. There is a Draytek Vigor 2830 router that is connected to an ISA 2006 server. I am having issues with ...
0
votes
1answer
240 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
1
vote
0answers
136 views

CCP site-to-site VPN using access rules

I use CCP for creating site-to-site VPNs on a Cisco router. I need to use network objects on my ipsec rule for having multiple hosts but the network objects are only available on the access rules ...
1
vote
1answer
596 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
2
votes
1answer
574 views

L2TP server - site-to-site vpn connection

I am not sure this is the right place for this question but here goes. We want to connect users using an L2TP VPN connection to a users at the other end of a SonicWall site-to-site VPN. Currently we ...
1
vote
0answers
81 views

Advice on Auditing VPN Connections

I've inherited a network that is truly a mess and the VPN config is amazingly long with confusing group names and very little documentation. I am curious to see how others have gone about auditing ...
2
votes
2answers
4k views

VMWare ESXi - VPN Tunnel to VMs

We are looking at renting a VMWare ESXi server through a provider. This VMWare ESXi server will be allocated a public IP. Most of the VMs that we will host on this server is only meant to be used ...
0
votes
1answer
401 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
2
votes
0answers
492 views

ASA Site to Site VPN Version 8.4 Natting Same Subnets

My site and client site has same Lan IP range. Both using ASA version 8.4 Site A : 192.168.18.0 Site B : 192.168.18.0 Please tell me how to do Natting on 8.4 Any help would be highly appreciated. ...
1
vote
1answer
575 views

Barracuda/ASA IPSEC tunnel is closing (which is ok, on idle) but can only be raised from the Barracuda side

We have a IPSEC tunnel set up between our ASA and a Barracuda NG on the other side. The tunnel is functional, except it seems to have a very short idle time-out (couple of seconds) and it can only be ...
0
votes
1answer
158 views

Unable to access Local computers in LAN2 of my Windows VPN

I have searched the site for a close situation, I didn't find one. We have two sites connected by VPN as follows: LAN1 (192.168.18.0) VPN Server - 192.168.18.4 LAN2 (192.168.19.0) VPN Server - ...
1
vote
1answer
964 views

Problems with packets on IPSEC Tunnel for Windows 2008 R2

I have a network with a Windows 2008 R2 server with Routing and Remote Access installed on a cloud platform with a PUBLIC and PRIVATE IP address. I have successfully configured the Fortigate FW and ...
1
vote
2answers
3k views

Ping Cisco ASA over VPN

ASA1 is 8.4(2) @ 192.168.1.1, behind this is host1 @ 192.168.1.10 ASA2 is 8.4(3) @ 192.168.2.1, behind this is host2 @ 192.168.2.10 Pinging form host1 to host2 works, but I can't ping that inside ...
3
votes
1answer
1k views

Site-specific folder redirection through group policy

Suppose I have two sites - A and B - both with 5/5 Mbps WAN links that are connected via L2L VPN. Each Site is defined in AD Sites 'n Services with its own domain controllers, etc. The problem is that ...
1
vote
0answers
480 views

IPSec VPN : Traffic not routing correctly

We have a server which is windows 2008 running on a VPS with a single public IP address. I've configured the firewall to allow IPSEC VPN connections to be established with our Draytek routers at ...
0
votes
1answer
81 views

Do sides of a VPN tunnel need IPs set (2 VPN routers connecting virtual LAN)?

Is there a reason to have IPs on terminating sides of a VPN tunnel when connecting, say, 2 remote offices? There is an option to have and an option not to have. Advantages and disadvantages of both ...
3
votes
2answers
4k views

Understanding ipsec with NAT and dynamic IP's

I'm using OpenSWAN to set up a net-to-net VPN tunnel. I have succeeded in configuring a test scenario as follows: About test and test2: they are Ubuntu 12.04 virtual machines created using ...
0
votes
2answers
2k views

Outside VPN traffic not able to ping site-to-site VPN remote site

we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly. Site/Subnet A: 192.100.0.0 - local (8.4(4)) Site/Subnet B: 192.200.0.0 - ...
0
votes
1answer
6k views

Site-to-Site VPN between two ASA 5505s only working in one direction

I am in the process of setting up a remote office for the first time and have been trying to establish a site-to-site VPN between the branch and the home office. I used the Site-to-Site VPN Wizards ...
0
votes
1answer
1k views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
0
votes
1answer
840 views

How can I create a permanent/persistent PPTP VPN from a Windows Server 2008 (R2) machine?

A while ago I managed to create a permanent (or persistent) VPN to a remote server from my Windows 2008 server. However I can't remember how I did this and I can't find any articles explaining how you ...
5
votes
1answer
36k views

IPsec VPN site-to-site: How should I configure the ipsec.conf files on both sites to get the tunnel up?

What I am trying to do is to create a site-to-site IPsec VPN between my network and my friend's network. We both have a router and two computers on each router, with all computers running Linux. So I ...
2
votes
1answer
3k views

VPN Encryption Domain

I'm trying to connect to a counterparty using VPN IPsec. I have a standard cable broadband connection with a single static IP address. The counterparty have asked me for my "Public IP Address Assigned ...
0
votes
1answer
390 views

share one vpn connection through windows rras with other clients

I'm having a Cisco VPN connection to access our branch office. Since several people using the VPN I'm planing to install the VPN client on one of our server and share it through RRAS to save the ...
1
vote
0answers
760 views

Site-to-Site VPN: remote machines can't access local machines

In our office network we have a VPN setup to our datacenter. We are using a Sonicwall NAS. The VPN works fine for most cases. From our office we can connect to the servers in our DC but if I were to ...
4
votes
1answer
512 views

Is it possible to connect two IPSec site-to-site VPNs to one Windows 2008 Server?

I need to connect to two IPSEC site to site vpns from a Windows 2008 Server at the same time. Is it posible? I tried to assign two IP Security Policies, but it seems I can only have one assigned at ...
0
votes
3answers
808 views

How to test fail over VPN between ASAs without disabling the main connection?

I have a fail over VPN set up between two ASA in case the p2p connection drops. I'm trying to find a way to test this with out dropping the p2p. Any ideas on this? I can't generate any interesting ...
1
vote
3answers
1k views

Site to site VPN tracert

I'm not sure how in depth I need to go with this question, but currently I have a site-to-site VPN setup and we are having major connection issues between the two sites. I did a tracert and received ...
1
vote
1answer
265 views

Changing an IPSec pre-shared key without bringing down the tunnel (too long)

How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
1
vote
1answer
531 views

Wireless LAN Bridge with WAN VPN Failover

My network is below, it's currently just an ordinary 192.168.0.0/24, the branch offices needs to have access to resources on the main site. Currently all internet traffic go across the bridge and ...
1
vote
1answer
862 views

Basic Win2K8 R2 DNS/ADDS/DC setup within Amazon VPC

Newbie sysadmin here. I'd like to sharpen my skills by deploying Win2K8 R2 within Amazon's VPC offering. I'm using Tom Carpenter's 'Windows Server Administration Essentials' book (MTA-cert prep) for ...
4
votes
2answers
969 views

TCP Reverse Proxy through VPN

I have a rather odd situation, but it's simple, I swear. I have a server (we'll call it host A) that's connected up to the internet and I use for some websites and other odds and ends. I have another ...
0
votes
2answers
776 views

How do I know if my site-to-site vpn connection is being saturated?

We've got a T1-internet connection with a Cisco ASA 5510 appliance in our small office. We have a site-to-site vpn connection from our office to a remote data center. Question(s): How can I find ...
1
vote
1answer
200 views

Offshore application development - Access to dev network (Security best practice)

Let me start by telling you that I'm not very technical, but need to provide someone with some guidance and I was hoping you could assist. The situation is: Dev and Prod subnets (Not sure if ...
0
votes
1answer
338 views

how to NAT site to site VPN web traffic?

I have 2 Cisco routers and they are connected via GRE over IPsec. All of the traffic from the first router is being routed to the 2nd router with a default route. I need to access internet from the ...
0
votes
1answer
115 views

Overcoming same private IP addresses, different subnets

I am preparing for migration to VMWare ESXi. Part of this involves P2V a large number of physical servers. Since a lot of our applications depend on the IP addresses to stay the same (i.e. they ...
0
votes
1answer
233 views

How are my VPN tunnels being routed from both ends?

Our organization uses Sonicwall devices as our gateway/firewall for all of our locations, with VPN tunnels between each of them. Each site also has a primary and backup internet line (WAN1 and WAN2), ...
0
votes
1answer
182 views

Is this the proper way to set up VPN tunnels for this network topology?

Below is the network topology I will be working with. The left just shows that all sites have a single internet connection. The right shows how I would be setting up the VPN tunnels. The main concern ...
2
votes
1answer
1k views

Recommendation for a virtual site-to-site VPN appliance [closed]

can you please recommend an Virtual Appliance or Operating System for creating multiple site-to-site VPN? The appliance must of course handle IPSec. It should also be OpenVPN capable. An Additional ...
0
votes
2answers
6k views

ClearOS - how to create a site to site VPN between two ClearOS boxes?

I plan on setting up some ClearOS boxes at several sites, and would like to set up site-to-site VPN between the remote sites and a main site (all running ClearOS enterprise 5.2sp1 / latest version). ...
0
votes
3answers
1k views

VPN from my server to a clients

I have an Amazon EC2 server instance running Windows Server 2008 R2. I need to setup a VPN connection between this machine and one of my clients. The purpose is that my server is going to pull data ...
2
votes
2answers
130 views

Replace Cisco 2600 PTP T1

Our office and an outside location have a dedicated T1 point to point connected with Cisco2600's. We need to eliminate the need of the T1 circuit as it is costly and would like to route the traffic ...