VPN is the acronym for Virtual Private Network - a network type that uses a the Internet to provide remote networks or single machines with secure access to their organization's network avoiding expensive leased lines.

learn more… | top users | synonyms

2
votes
1answer
123 views

Unable to sign certificates as CA using pkitool and easy-rsa script for OpenVPN .csr file

OpenVPN server on Ubuntu 14.04. Easy-rsa on the certificate authority server on Ubuntu 14.04. Done this way because I want the ca.key file to be separate from the machine that acts as the openvpn ...
1
vote
0answers
50 views

Is possible monitor the VPN's bandwidth with Check_MK? How?

I would like monitor the bandwidth in the VPN of Juniper SSG5 with Check_MK. Is possible? How? For the moment I am monitoring the status with the check automatic (check_mk-juniper_screenos_vpn). ...
0
votes
1answer
29 views

How do I allow outgoing connections to port 80 on a Remote Access VPN?

I have setup a simple L2TP VPN by using the Remote Access role. This works fine, however outgoing connections to port 80 don't work. I can connect to the shares and RDP, however browsing the web is ...
0
votes
0answers
85 views

IPv6 VPN routing to IPv4 network

I have been trying to solve my problem to access an IPv6 network from an IPv4 VPN connection for two days now. My setup is as follows: Local Debian IPv4 server <-- OpenVPN --> Remote IPv4/IPv6 ...
0
votes
1answer
39 views

Is this system design ok for a VPN service for 3000 users?

I am setting up a vpn service for 3000 users in AWS. The solution is built up on Linux and AWS. The design of the solution is: My questions is: Am I missing something critical in the design I have ...
0
votes
1answer
35 views

VPN IPSec on a user's local laptop, or SSL VPN?

We have bought a firewall (sonicwall nsa) and it comes with 2 SSLVPN license. With it, we also can download NetExtender, which I understood it as establishing some sort of VPN session between the ...
0
votes
0answers
24 views

Get access to host in OpenVPN network from global network

I need help with next situation. I have OpenVPN server set up on virtual machine in Azure cloud. This server have 104.208.34.118 IP adress. There are client, connected to this server, behind the NAT ...
1
vote
0answers
736 views

How to get OpenVPN Client (Mikrotik RouterOS) <-> OpenVPN server (Debian/Linux) setup to work

I have some issues with making MT to work with OpenVPN server (Debian). I can make successfull connection to OVPN server, but traffic is not routed through OVPN server. Here is my configuration. ...
0
votes
0answers
59 views

Azure VPN and On Site routing

Edit: I did cleaned up the question to focus on the main and more urgent problem to solve. I create a site to site VPN on Azure and connected it to a Virtual Machine hosted in our Server room in the ...
1
vote
1answer
37 views

How to route through intermediate VPN gateway?

Hello I'm not really system administrator nor network skilled so go easy on me. I'm trying to route through VPN on windows 7. I did add route -p ADD 10.165.0.0 MASK 255.255.0.0 10.124.16.2 METRIC ...
0
votes
1answer
33 views

Is RRAS SSTP VPN using publicly signed certificate a bad idea?

Most guides for deploying SSTP on RRAS recommend setting up a private CA using AD CS, with all the necessary steps that come with that to issue a server authentication certificate and have it trusted ...
0
votes
1answer
185 views

SSL/TLS Cert for Client VPN - Meraki

Hoping you can help me out here. I am attempting to setup a client VPN through our Cisco Meraki MX80 security appliance/router. I plan to use the Active Directory Authentication option so that users ...
0
votes
1answer
231 views

Does anyone know what the Fortigate SSL VPN error 6 on the linux client means?

I often get: SSLVPN down unexpectedly with error:6 When trying to connect the 64bit/forticlientsslvpn_cli. My experience has been: Once you start getting, no number of retries will get you ...
0
votes
0answers
13 views

Bypass hops viewed in tracert?

This is the issue that we're having: I use filezilla to connect via SFTP to a remote server to download files. Every box in this scenario (local server, remote server, my workstation, etc) are under ...
-1
votes
1answer
39 views

How do I only allow RDP connections over a VPN?

We require a VPN to connect to an RDP server. I have setup an L2TP server which functions correctly, and an RDP server that works as well. I am now wondering how I can set everything up so RDP ...
0
votes
1answer
56 views

How do I delete route to “link#8” gateway on MacOS?

How do I delete default route of "link#8" gateway on MacOS El Capitan? It's a route automaticaly added after connecting to IPSec VPN. $ netstat -rn Routing tables Internet: Destination ...
0
votes
3answers
64 views

Configuring Open VPN subnet on windows machine

I'm trying to make my Open VPN client to be a part of my azure network. In order to so I need to provision IP addresses that's within a specific range, so I added this to the server.ovpn file on the ...
0
votes
0answers
41 views

Use RRAS Assigned Static IP for TCP

I'm using RRAS on Windows Server 2012 to establish a VPN client connection from a server I have offsite and my home computer. What I would like to do is use the RRAS assigned static IP that I am ...
3
votes
3answers
206 views

Bypass VPN for HTTP/HTTPS traffic on Ubuntu?

I have an Ubuntu 14.04 machine that all it's outgoing traffic is through a VPN, and I'm required to make sure that HTTP and HTTPS traffic don't go through the VPN.I've looked into static routing but ...
0
votes
1answer
25 views

Would this setup for MS Small business work? [closed]

I've just visited a friend's company and they have asked to help setup their IT infrastructure. At the moment they have around 20 laptops with 25 local accounts. I pity the guy who setup the local ...
0
votes
2answers
33 views

Can a poor client VPN connection corrupt a database?

We have a small office with one server and one client that connects to the server’s database for the Sage 300 accounting software. The server is also being used as a workstation for the Sage 300 ...
-1
votes
1answer
66 views

OpenVPN Full Tunnel not working (command line) [closed]

I can ping the server but not google.com or 8.8.8.8, traceroute also fails. Server: $iptables -t nat -A POSTROUTING -s 10.9.8.0/24 -o eth0 -j MASQUERADE $openvpn --dev tun1 --server 10.9.8.0 ...
0
votes
0answers
15 views

IP Routing for VPN Failover on ASA - Did I miss anything? Is there another method?

To handle the 4x VPNs I plan to use the following scenario for Routing: Prefered Order for VPN connection: ISP1<-->ISP3 ISP1<-->ISP4 ISP2<-->ISP3 ISP2<-->ISP4 Example Site ...
0
votes
0answers
61 views

Checkpoint VPN Linux command line (CLI) client

Is there an official/third party command line client for the checkpoint vpn for Linux? It seems that there are a few GUI options, but I can't fine a client for a headless machine.
0
votes
1answer
324 views

After openvpn setup client cannot connect “Cannot load inline certificate file”

Good day to everybody! I have tried recently to install & configure openvpn for my server. I have created certificates, tunneling seems to with fine at lease ifconfig shots that tun0 has been ...
0
votes
0answers
139 views

Tomato router killswitch using iptables

I have a tomato router setup with a VPN service. Everything works fine and I also have it that when the VPN drops it kills the connection so that any device connected to that router would never go ...
1
vote
1answer
258 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ...
0
votes
2answers
98 views

Deploy active directory ONLY on the cloud and join workstations to it WITHOUT VPN (No DCs on premise, No RODCs etc.)

The company has does not have any offices. All users are remote. However, they need an Active Directory to which workstations can be joined and users can be centrally managed. One suggestion is to ...
1
vote
1answer
75 views

Can I set up a VoIP phone to connect to it's gateway over VPN with different subnets?

A little background first: Currently, we have a main office and a remote office. They are connected via site-to-site VPN. Main office uses a Cisco router with DHCP at 10.10.10.0/24 while the remote ...
0
votes
1answer
95 views

Restrict access to Azure VM and VPN for customers

We want to use Microsoft Azure and want to provide virtual machines for our customers while having a backend for monitoring and Active Directory. Our network will be something like that: network: ...
-1
votes
1answer
222 views

Prevent IPv6 address being exposed when connected to IPv4 only OpenVPN

I have a OpenVPN server which has IPv4 only. I have a OpenVPN client which has IPv6 and IPv4. While connected to the VPN the client is exposed to "IPv6 leak". When client visits IPv6 enabled web ...
3
votes
3answers
3k views

Windows 10 vpn change the dns settings

My Windows 10 VPN IPv4 Properties button does not work. Others have found this too. There are powershell workarounds for changing default gateway options, e.g. Set-VpnConnection -Name ...
2
votes
1answer
60 views

openvpn connection without forwarding all traffic

I am trying to connect a client to a vpn network without openvpn forwarding all my traffic into the network. The point being is I want to be able to connect and communicate with all the other ...
2
votes
1answer
51 views

Connect to VPN only when outside office LAN

I'm trying to figure out a way to make domain clients connect to office LAN using VPN only when it's physically disconnected to the said LAN. I've found this and this detailed official guides. As far ...
0
votes
1answer
85 views

TLS-PSK vs TLS-PKI

I have read that once TLS-PSK encryption is about equally secure as TLS-PKI. The level of security by both depends on the data entered to configure the encryption. Could you please confirm this? ...
0
votes
0answers
44 views

Outlook Opens slowly over SSL VPN when offline files are set to be working online

We have a problem whereby Outlook 2010 performs very poorly when used via our SSL VPN. The setup is this: Exchange 2010 SP2 Office 2010 SP2 32 bit in Cached Mode Sonicwall SRA SSL VPN with ...
1
vote
0answers
225 views

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few ...
1
vote
1answer
244 views

Two tunnels with same rightsubnet for StrongSWAN/OpenSWAN

I'm trying to set up the "Option 3" configuration for Google Cloud VPN, with two Google Cloud VPN gateways on the left and StrongSWAN or OpenSWAN on the right: If you have two Peer VPN gateways ...
0
votes
0answers
30 views

A firewall is blocking incoming connections.

To begin with, I am using clients (console applications) on remote computers that send me some data to my IIS server. The server is a regular computer running windows 7 with the default firewall ...
-1
votes
1answer
190 views

Strongswan: clients can connect to server but no internet access

I've set up an ipsec server and after a while I could connect to it from my android device. but there is no internet connection in client side. I have also added NAT rules to forward traffics from ...
0
votes
0answers
78 views

How to add static route to a second network on IPSec racoon tunnel

I have something like this: 192.168.25.35 -- 10.104.146.97 -- (eth2)10.104.146.99(eth0) --[IPSec VPN]-- (eth0)10.2.10.11(eth2) -- 10.2.10.20 I am trying to connect from computer 10.2.10.20 to server ...
0
votes
0answers
74 views

Error connecting VPN tunnel from Ubuntu 14.04 AWS instance to remove VPN server

I am attempting to establish a VPN connection from an Ubunutu 14.04 server instance on AWS to a remove VPN server being maintained by a client of mine. I need some help getting my connection fully ...
0
votes
0answers
18 views

Synchronise a large quantity of small files over a slow connection

I have 4 NAS devices on a VPN with 164,000,000,000 files on these devices that I need to synchronize. The folder that I need to synchronize (as close to live as practical) contains 39,000 files and ...
0
votes
0answers
38 views

Disable OpenVPN LAN access

I have a Debian VPS running an OpenVPN server with this basic config: http://aaronlevie.blogspot.com/2011/07/openvpn-and-pptp-server-setup.html What I need is to disable the virtual LAN the OpenVPN ...
2
votes
0answers
192 views

meaning of 'event_wait : Interrupted system call'

I manage several OpenVPN links. sometimes while the VPN is UP since minutes, hours, suddenly it falls with this message: event_wait : Interrupted system call (code=4) Sep 8 11:13:46 hostname ...
0
votes
1answer
40 views

Is this network implementation possible at all?

I'm currently working on a machine we will ship to many customers over the world that needs to connect to a single server, this is currently done over the internet but i'm thinking it would be easier ...
0
votes
0answers
21 views

Why can't my VPN Clients connect to addresses on a different subnet?

So, I've just transitioned our network from a class C to a class A. At the moment, I've got the router configured to hand out DHCP from 10.0.0.101 to 200. On our Windows 2008 domain server, I've ...
0
votes
1answer
223 views

High availability and AWS VPN

I have a question about achieving high availability over an AWS VPN. Context: I have a requirement to establish a site to site VPN connection between my AWS VPC and a big corporate. This VPN link is ...
1
vote
0answers
85 views

How do I deploy Docker Swarm securely, without hard-coding everything?

I would like to set up Docker Swarm over a public network, and I would like to minimize the amount of reconfiguration that has to happen when workers' IP addresses change. The recommended setup ...
0
votes
1answer
50 views

Connecting two servers via VPN

Usage: both client and our server will be sending API requests to each other. Basically our server will be 'consuming' their web-services AND we will need to expose certain API's to them. Client ...