Questions tagged [site-to-site-vpn]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
8k views

Cisco ASA site-to-site VPN up but no traffic

I currently have site to site VPN tunnel up between Cisco ASA 5550 & Cisco ASA5506-X. I can see the vpn tunnel is up on both end but no traffic is passing through. Cisco ASA 5550 is receiving ...
2 votes
1 answer
3k views

How can I allow iptables to properly use a tunnel rather than NAT?

I have two NAT networks connected via a point-to-point tunnel as follows: | Machine A | | Machine B | | 1.2.3.4 |<-10.101.3.2-------tun------10.101....
6 votes
1 answer
66k views

IPsec VPN site-to-site: How should I configure the ipsec.conf files on both sites to get the tunnel up?

What I am trying to do is to create a site-to-site IPsec VPN between my network and my friend's network. We both have a router and two computers on each router, with all computers running Linux. So I ...
0 votes
0 answers
285 views

Azure VPN and On Site routing

Edit: I did cleaned up the question to focus on the main and more urgent problem to solve. I create a site-to-site VPN on Azure, and connected it to a virtual machine hosted in our server room in ...
0 votes
2 answers
122 views

Encrypted network connecting public IPs without using private IP ranges

I need to connect several servers on various public IPs together to form a virtual encrypted network, where ports and services on the servers are accessible only to those servers in the network and ...
-1 votes
2 answers
55 views

VPS vs Real Hardware performance correlation

Assuming I have application running in a VPS and consuming 50% of assigned CPU resource. Will it correct to assume that on real hardware with same properties CPU usage will not be more than 50% ...
1 vote
0 answers
204 views

S2S VPN between on premise through pfsense for azure to application VM in azure

I am trying to create multi S2S ipsec VPN connections between on premise locations and a "pfsense for azure" VM. In the same subnet, I also have a application VM running. I can create a VPN tunnel no ...
0 votes
1 answer
1k views

Cisco 2901 Site-to-Site VPN for Google Cloud VPN

I recently inherited a Cisco 2901 router and have, literally, 0 experience managing this device. I need help configuring a Site-to-Site VPN between my premises: IP: 5.5.5.1 Subnet: 10.4.0.0/15 (255....
1 vote
2 answers
3k views

Routing in Azure between point-to-site and site-to-site networks

I'm new to Azure and trying to use VPN to connect a single machine here to a VM on Azure. The VM is on the newer Resource Manager platform. Unfortunately, only the classic platform supports point-to-...
2 votes
1 answer
2k views

Site to Site and Point to Site VPN simultaneously on Azure

I'm trying to get P2S and S2S to work at the same time. They are working fine individually but when I try to make it work together it falls short. Windows 2012 R2 server and a USG110 Zyxel firewall. ...
2 votes
0 answers
618 views

File share over site-to-site VPN (DFS enabled)

I have two sites with servers with DFS and one site with just two VPN site-to-site to the other two sites with the servers. The users can't acess the file share via \\domain.local\SHARE but they can ...
0 votes
0 answers
629 views

Site-To-Site VPN: Remote Windows Server Can Ping But Can't Share Resources?

I have a site-to-site VPN tunnel between two MicroTik routers in two separate locations. Location A where the server is located is on the subnet 192.168.33.0 and Location B is 192.168.1.0. The VPN ...
0 votes
2 answers
650 views

Remote VPN route over Site-to-Site VPN

I've been trying to set this up for a while and while I'm a little out of my depth, what seems obvious to me doesn't seem to be working. It would be great to hear some other people's thoughts on the ...
0 votes
1 answer
4k views

Change Route Based S2S to Policy Based

I have a route-based S2S VPN setup on Azure but discovered the on-premise only supports static routing. Is it possible to convert the route based to policy based? The reason I want this is to ...
1 vote
1 answer
491 views

Azure site to site vpn to CISCO ASA 5550 using azure public ip addresses

I have a VPN with a gateway to connect to another network (a local mobile operator) which are using CISCO ASA 5550 Version 8.0(3), on azure side i would like advertise the public ip instead of the ...
0 votes
0 answers
845 views

How to create site-to-site VPN from CentOS Server to Windows Server

For a small business: at one site is windows 2012 server, (with ssl certificate), already running as a SSTP VPN Server. At a remote site, is a live-to-public CentOS webserver running CFS. ...
1 vote
1 answer
902 views

Azure Site-to-Site VPN Tunnel Cisco ASA 8.2

I am attempting to set up Azure (Resource Manager) Site-to-Site VPN connection between my Azure Virtual Network and an on-premises Cisco ASA running 8.2. I've read elsewhere that folks have had ...
0 votes
1 answer
160 views

public and non-public IP addresses in a VPN

We have a remote web server that talks to a SQL Server database (located in a different city) via a VPN. That's working fine. The SQL database is on 192.168.1.xxx on the local LAN, and in addition to ...
2 votes
1 answer
1k views

What are the VPN configuration requirements for site-to-site VPN with Azure?

I'm using a Cisco RV325, and I don't have access to any bigger/better routers. My understanding is that the RV325 should still support the necessary security protocols to connect to the Azure site-to-...
0 votes
1 answer
250 views

Can HSRP be used with two different ISPs to achieve a high availability VPN

Can HSRP be used to set up a high-availability site-to-site VPN using two routers from different ISPs? If one ISP's connectivity fails, the VPN would be switched over to the other ISP transparently, ...
0 votes
1 answer
185 views

does a failover site-to-site VPN require two firewalls at the remote site

We have two ISPs, each of which has assigned us a bank of public IP addresses. Let's call the first ISP "VZON" and the second ISP "CCAST". Telephony (VoIP) traffic goes out the VZON gateway; all ...
0 votes
1 answer
153 views

Is it secure to contact on-premise active directory directly from web services hosted in Azure?

Let me keep it simple by explaining the current setup by points We have active directory setup in on-premise We have web service hosted in Azure (ASP.NET MVC + EF + SQL Server) There is a WCF ...
0 votes
1 answer
480 views

Does the on-premise VPN Device see my public IP?

I have several VMs within the same virtual network on Microsoft Azure and I plan to connect to a vendor's on-premise site. I have setup a site-to-site ipsec VPN with a public IP and about to send out ...
1 vote
1 answer
3k views

Cisco IPsec VPN with key-id on a specific tunnel only

I'm trying to work with another party to set up a site-to-site IPsec VPN between us and them. We are behind NAT, so need their Cisco (ASA 5510 on IOS 9.1.7) to match on our IKE id (key-id in Cisco ...
0 votes
0 answers
843 views

Using Hamachi to link domain controllers at multiple sites

I'm an IT guy at a start-up retail chain which uses AD (I've managed AD before but it was inside one physical location). Right now each site (HQ, shop1, shop2 and shop3) uses it's own AD domain. I'm ...
-1 votes
2 answers
424 views

what settings cause a site-to-site VPN that fails (due to electrical outage, say) to try to come back up ASAP

Which setting(s) tell(s) a hardware firewall to try to reestablish a site-to-site VPN as soon as possible after a cause of failure has been corrected? We have a site-to-site VPN (firewall to firewall)...
0 votes
1 answer
900 views

Multiple Local Network Gateway objects with same address space

I have multiple internet providers. For my Azure instances I'd like to be able to define a local network gateway for each with the same address space so that I can easily switch between them in the ...
0 votes
1 answer
38 views

VPN Client-Client connection between sites

At our company, having multiple physical locations, we currently utilize an OpenVPN solution faciliated by a server at our main office. All sub-sites connect to this server, interconnecting the office ...
1 vote
2 answers
617 views

site-to-site vpn tunnel - does hardware matter? [closed]

I have been tasked with setting up 4 offices and connecting them all together so they can be on the same network. Does hardware really matter or could I build a decent machine in the low $1000's and ...
2 votes
2 answers
2k views

Use AWS private DNS from Azure through site-to-site VPN

I have a site-to-site VPN setup with StrongSwan between AWS and Azure. In AWS we use Route53 in our VPC to map something like production-db.internal.com to the the AWS-provided name for our RDS ...
0 votes
1 answer
471 views

Cannot connect back to local site over S2S connection via Azure Point-to-Site VPN client

As things stand today, I have a site-to-site VPN between on-prem and Azure which works well. I am currently using an SSL VPN to my on-prem, but would like to migrate my clients to all use Point-to-...
0 votes
1 answer
691 views

Strongswan - Cisco ASA Transaction Request failure

I am trying to create a S2S VPN between an Ubuntu StrongSwan (in Azure) and a Cisco ASA at a client site. Currently using ikev1 (the Cisco won't support v2 for a few months) and it appears to be ...
0 votes
1 answer
696 views

Is a Watchguard BOVPN or "site-to-site" VPN the best way to backup a server to a NAS at another location?

I currently have a customer who has two offices in separate cities. Each location has a Watchguard. They need a backup solution so we proposed a NAS to backup both servers to. The issue is the NAS ...
-1 votes
1 answer
58 views

Connect multiple corporate partner private networks

Here is a scenario: You would like to setup a private network between four companies at different cities for teams in these companies to collaborate on anti-virus software. Because of the nature of ...
1 vote
1 answer
2k views

pfSense allow one part of the network access to VPN Tunnel

I Have two pfSense routers (Router 1 and Router 2) ROuter 1 is VPN Server for other routers and in his LAN network are different servers like domain server, mail server... Router 2 is WiFI captiv ...
-4 votes
1 answer
86 views

Two branches connect without vpn appliance [closed]

i have one issue to connect a two location in different city together to transfer a file and RDP all machine use WIN 7 OS , i have one idea to install two appliance VPN but on this case there is any ...
1 vote
1 answer
3k views

Can't establish site to site vpn connection between Cisco 3900 and strongSwan client

I have website, which displays data, received from gsm modems. So i am trying to connect my website to GSM network provider using vpn. Provider side there is a Cisco 3900, configured as site to site ...
0 votes
1 answer
58 views

Site-to-Site Group policy

So I have Site A and Site B. At Site A is a Domain Controller that has a OU called "GPO_test" I have a GPO that maps a drive to \\Server\Share and given the drive letter X: linked to GPO_test Now ...
0 votes
1 answer
711 views

IPSec Tunnel VyOS+AWS: Cannot communicate from router to other side

I have a site (192.168.1.0/24) with a VyOS based router connecting to an AWS VPC (10.7.0.0/16) through IPSec tunnel set up with dynamic routing (BGP). The tunnel itself works: The clients on site can ...
1 vote
1 answer
4k views

Site-to-site VPN on Meraki with AWS VPC?

we have multiple locations with Meraki Firewalls that are using the Meraki Site-to-site VPN connection in a Hub configuration. We would like to add our VPC to our Site-to-Site VPN so that if any ...
0 votes
1 answer
450 views

Cannot initiate connections from AzureVM to On Premises machines via Dynamic route site-to-site VPN

I have a Dynamic route S2S VPN set up between my on-premises environment and virtual network in Azure using Resource Manager. My local machine (Office1) can RDP to a VM created in Azure (Azure1) no ...
0 votes
1 answer
454 views

Plan for software site-to-site VPN in AWS VPC

We need to create a site-to-site VPN connection from our AWS VPC (in this case, a DMZ VPC dedicated to this connection only and peered with the production VPC). AWS's VPC Connection does not meet the ...
0 votes
1 answer
723 views

set WAN IP in pfsense openvpn site to site connection?

I am new to networking, I am trying to connect two networks using pfsense openvpn site to site connection but upto now I can't successful. Please see my configuration here. basics idea is most of ...
1 vote
1 answer
2k views

client get not connected in pfsense openvpn site to site

I am trying to connect pfsense openvpn site to site (peer to peer shared key), but upto now I could not found any traffic between client and server. openvpn server log Listening for incoming TCP ...
2 votes
1 answer
3k views

Cisco ASA Site-To-Site VPN change peer IP

We use Cisco ASA 5510 and I have to change peer IP address on the current Site-To-Site VPN. Every time when I have similar issue I deleted current vpn and then create new one from scratch.After ...
0 votes
1 answer
151 views

setting up hardware site to site vpn connection using one customer gateway to multiple vpcs

so we have 4 vpc's but have to connect them to our on premise office and set up vpn connection between them as i can create only one customer gateway because we have only one public ip address for our ...
2 votes
5 answers
5k views

Is it possible to create a VPN link between AZURE VNET and AWS VPC?

As I found solutions on making site-to-site VPN between Azure and AWS using a software VPN server, I'm asking myself if it's possible to connect the VPN gateways (Azure VNET / AWS VPC) directly. Is ...
0 votes
1 answer
1k views

Diffie Hellman Group 20 Cisco Asa

It seems to be that I am a little bit lost in the scrap of documentation. I am looking out for a new ASA Appliance that supports lvl 20+ Diffie Hellman. But I cannot find any documentation if there is ...
0 votes
1 answer
963 views

juniper SRX vs Cisco strange VPN error

the IKE seems to fail, and I can not figure out why... here is ike log: Jun 13 10:38:28 No proposal selected in first phase for local=ipv4(any:0,[0..3]=X.X.X.X) remote=ipv4(udp:500,[0..3]=Y.Y.Y.Y) ...
0 votes
1 answer
328 views

Giving access to intranet without handling internet access [Windows server 2012 r2]

I have an hard time explaining what I am looking for, but essentially, I am trying to open up my intranet to secure clients like a VPN would, but without handling their normal internet activity. Is ...

1
3 4
5
6 7
10