Questions tagged [site-to-site-vpn]
The site-to-site-vpn tag has no usage guidance.
457
questions
-1
votes
0
answers
28
views
Ipsec clear text password
Apologies in advance as my knowledge is limited in IPsec VPN tunnel with StrongSwan.
I am running VPN client from my OpenSuse 15.4 server to connect to a client.
ipsec.conf
My Shared key in ipsec....
0
votes
0
answers
14
views
Iptsbles site to site vpn
I have installed strongswan site-to-site vpn,thats working fine. On server I have configured iptables with this commans iptables -t nat -A POSTROUTING -s 10.9.141.0/24 -d 10.10.27.0/24 -j MASQUERADE.
...
0
votes
0
answers
64
views
redundant VPN connections over Expressroute private peering
I have configured redundant VPN connections over expressroute private peering with private IPs. BGP is configured making router 2 backup using BGP as-path. Wondering how the traffic is sent back to on-...
0
votes
1
answer
123
views
Troubleshooting AWS S2S VPN connection with on-prem network
I am trying to set up a VPN connection between our AWS servers and a 3rd party network. The VPN tunnel in itself is active, but network calls are timing out.
The setup:
EC2 instances in private ...
0
votes
0
answers
21
views
Unable to receive TCP packets larger than VPC MTU on Google Compute Engines (Redis Client)
This seems to be network issues between Redis cluster (Deployed on our site's on-prem worker node) and Redis client (On GCP VM that is connected to our site via Cloud VPN). Specifically, the issue is ...
1
vote
0
answers
38
views
Multiple S2S Connections for Azure
I’m confused by all of this and need help. I setup an Azure S2S tunnel from Azure to my On Prem DC. This is for AD and AAD to sync. We have a new billing system coming in and the only way they’ll ...
0
votes
0
answers
45
views
AWS to pfsense site-to-site vpn
First of all, am a pfsense and AWS noobie, and this is my first big task on either system.
After creating a Site-to-site vpn between my PFsense andAWS instance, i can see the connections is ...
0
votes
0
answers
86
views
Site to site IKEv2 VPN between two Windows Server 2012 R2 machines only working in one direction
We are trying to set up a Site-to-Site VPN with IKE v2 using Windows Server 2012 R2 machines as the tunnel endpoints on each end. We are able to PING and get replies in one direction, but we are not ...
0
votes
1
answer
365
views
forward all traffic to another machine using reverse ssh
I have the following scenario
Local Network | ...
0
votes
0
answers
31
views
TCP Session drops because of FIN signal
I have two servers communicating with each other through ISO 8385 messages over TCP sessions. Basically host-to-host interface between two payment switches. The problem is that the session keeps ...
-1
votes
1
answer
20
views
Can I connect two vpc's with one site to site vpn in same region?
I currently have one site to site vpn connected to one vpc.
I want to add a vpc here(It's the same region),
but I want to connect the on-premise network connected through site to site vpn through site ...
0
votes
0
answers
204
views
Setting up site to site VPN with IKEv2 on Windows Server 2012 R2
We are trying to set up a site to site VPN on Windows Server 2012 R2 with IKE v2. It was originally set up for IKE v1 but our partner no longer supports IKE v1. The parameters are as follows:
Phase ...
0
votes
1
answer
148
views
Forward virbr0 (VM) traffic through IPSec tunnel
I have a virbr0 interface, created by libvirt with
inet 10.1.2.1 netmask 255.255.255.0 broadcast 10.1.2.255
There's an active IPSec tunnel with
leftsubnet=10.1.2.0/24
rightsubnet=192.168.160.0/20
...
0
votes
0
answers
70
views
Routing connection to Azure DB through StrongSwan IPSec site-to-site tunnel
I have a Linux Strongswan IPSec site-to-site connection up and stable to an Azure Cloud Network, I'm trying to route an sql connection with a python script through the tunnel to an Azure database in ...
0
votes
1
answer
46
views
ipSec VPN configuration, VLANs advertised
We are in the process of setting up an ipSec VPN between 2 locations. There are various encryption methods, algorythms and preshared keys to set up. Network1 will have access to specific VLANs on ...
0
votes
0
answers
526
views
Can't ping or traceroute through EC2 using AWS Site-to-Site VPN to Cisco ASA
My VPC is connected to Cisco ASA, tunnel is shown to be UP in the AWS console.
What is working:
The engineer on the Cisco side has successfully pinged my EC2
instance within my private 10.5.0.0/17 ...
0
votes
0
answers
106
views
Pull image in AWS EKS cluster from on-prem Docker proxy server protected by VPN
I have a kubernetes cluster in AWS EKS. From the cluster, I need to pull Docker images from an on-prem proxy server.
When pulling the images from my local machine, I must create a VPN connection to ...
0
votes
0
answers
113
views
IP Tunnel - First router is not sending traffic to the second one
I'm a beginner when it comes to Mikrotik . I'm trying to run an IP tunnel between 2 RouterOS .
First Router is set up as PPTP and L2TP server and clients can connect and use the internet but what I ...
0
votes
0
answers
140
views
What does it mean if I don't receive a SMB Negotiate Protocol Response from server?
What does it mean to not get an SMB Negotiate Protocol Response from server? Unable to mount fileshare drive (a third-party fileshare outside Azure). The architecture is similar to this one: https://...
1
vote
2
answers
78
views
VPN integration with a 3rd party Cisco device
Apologies if this set-up makes no sense. It makes no sense to me, but any assistance is greatly appreciated.
Background
I have a Payment provider who requires me to provide 2 IP addresses, and ...
0
votes
0
answers
57
views
How do I connect aws private network to 3rd party private?
My plan was to connect a 3rd party private using AWS's site to site VPN service. However, in the process of creating the customer gateway of the site to site vpn, I cannot enter the IP address for ...
-1
votes
1
answer
102
views
Best options for connecting to IPSec tunnel, outside of firewall?
A company I am working with is providing an IPSec VPN tunnel to their network for access to some of their systems.
To my understanding, IPSec tunnels are typically configured through firewalls. The ...
0
votes
0
answers
25
views
Navigating to a host on the other side of a site-to-site vpn [from EC2 instance to a host on the local network]?
Hey gang! First question on serverfault so dig in wherever you can. Also relatively new to networking in general.
The issue I believe I'm running into
IP routing isn't bringing me across the VPN (...
1
vote
0
answers
458
views
UDM Pro Site-to-Site VPN issues
I just got the UDM Pro and got to setting up the Site-to-Site VPN. Everything seems to work, but I'm unable to add all 3 redundant subnets that I've got set up in my AWS VPC.
It works fine with a one, ...
0
votes
0
answers
814
views
Issues configuring strongSwan client on AWS instance for site-to-site VPN
I am trying to setup a IPSec VPN client on a debian-10 AWS instance.
Unfortunately, I do not have access to the VPN server as it is configured by another party, so all I know is they told me it is ...
0
votes
1
answer
164
views
Can I add "firewall rules" to an AWS VPN connection?
i need to connect a couple of customers to an AWS VPC via VPN. requirements:
no customer may send data (or best: even "see") another customer
they should only be able to "see" ...
1
vote
1
answer
258
views
AWS Site-to-Site VPN ping working, TCP not
I want to establish a site-to-site IPsec VPN connection between an AWS EKS-Kubernetes-Cluster and a server from a different provider using AWS Site-to-Site VPN.
Pings get through the VPN, but TCP ...
0
votes
1
answer
71
views
IPSec Netgear BS200 and Linksys LRT214 - Can't reach devices
I have set up the first time an IPSec site to site tunnel.
The tunnel is up and running from a Netgear BR200 and the Linksys LRT214 Router.
Network 1 has 192.168.100.x and the Network 2 has 192.168.1....
0
votes
1
answer
1k
views
AWS Site-to-Site VPN with BGP - how routes are advertized via BGP?
I've configured redundant site-to-site VPN between AWS and GCP with 2 VPN connections, 4 tunnels and BGP dynamic routing. Everything works, all good, servers on both sides of the tunnels can reach ...
1
vote
0
answers
2k
views
Strongswan: {parsed IKE_SA_INIT response 0 [ N(NO_PROP) ]} and {recieved NO_PROPOSAL_CHOSEN notify error}
I am getting the feeling that I have just done somethign very silly on my end but I have no idea what is going on. For context, I have been using wireguard for a bit and am much more knowledgable than ...
0
votes
1
answer
197
views
Two DCs at home office, one remote office...DNS resolution?
Our main office has two domain controllers (Windows Server 2016), shown as one below for simplification. I'm bringing up a remote office, with a firewall at each location. I'm trying to keep the ...
0
votes
2
answers
1k
views
How is IPsec (strongswan) working without opening ports in UFW?
I needed to setup a site-to-site VPN between servers A and B, where server A is being managed by me and server B is being managed by a client.
Server A is running Ubuntu 20.04 and I am using ...
0
votes
1
answer
69
views
Best way to set the network infrastructure - Windows Server (AD, DHCP, DNS) + Router + VPN + Load Balance
First of all, I'd like to say I really like working with networks and managing computers, but I do it as a hobby. I'm not really a professional and only do it for my own things as I love learning ...
1
vote
2
answers
655
views
Why is my Azure VPN Gateway-NAT rule not working?
I have a very simple scenario, Azure Vnet with a subnets 10.140.1.0/24 (GatewaySubnet, SKU=Gw2 gen1) and 10.140.10.0/24 (VirtualMachineSubnet). Then an OnPrem network with 10.190.0.0/16.
I have a ...
1
vote
0
answers
202
views
How to forward traffic from 2 On-prem branches to eachother via Azure VPN Gateway
I have 2 scenario's that I am trying to solve in my Azure network environment.
In both scenario's OnPrem-branch1 needs to connect to OnPrem-branch2 via my own Azure virtual network. I have Azure ...
0
votes
1
answer
358
views
Connecting Azure Site-to-Site VPN to On-prem Gateway with 2 public IP's
I have a cisco ISR on-prem with 2 endpoints (primary and secondary) and I want to connect my Azure VPN Gateway to both endpoints through a single connection (same local address space for both IP's).
...
0
votes
0
answers
32
views
How do I get onsite DNS to communicate with Azure VNet DNS?
We have an S2S and our DNS server in Azure can talk with the Azure VNET DNS, however our onsite DNS server cannot because of a routing issue I think.
What configuration do I need to change so that ...
1
vote
0
answers
123
views
Site 2 Site VPN with ipv6
I have a Site 2 Site VPN running, based on IPv4.
So I have 2 Networks, both connected via a router to the internet. The ISP provides a public IPv4.
The 2 networks have the following IPs
A: IPs 192.168....
0
votes
0
answers
106
views
GCP VPN Tunnel is up, I can see Sent Bytes, but traffic is not reaching the recipient
I am trying to establish a VPN tunnel between a Classic CPN gateway and an on-prem VPN gateway. A requirement for the on-prem gateway is that traffic coming out of my VPN must present as a public ...
0
votes
0
answers
117
views
S2S Vpn Windows 2019
I am trying to set up a S2S VPN with 2 Windows 2019 servers.
Lets say we have a Site A and a Site B.
So I've setup two Windows 2019 server with Routing and Remote Access enabled.
On both sites I added ...
0
votes
0
answers
54
views
IPSec site2site tunnel + vpn
In our research project, we needed to deploy a server "Molly" at another company. They made us set up a IPSec tunnel to their firewall/gateway and from there, the comms are forwarded to our ...
0
votes
0
answers
392
views
Unable to SSH into OpenVPN cloud connector machine over VPN IP
I just started using OpenVPN cloud connectors for creating mesh VPN networks.
I deployed a connector and setup relvant IP forwarding and NAT protocols that allow me to access the LAN network behind ...
0
votes
0
answers
160
views
Unable to join domain from Site-to-Site VPN Server
I work for a small business that is looking to expand to the cloud so that our remote workers can access more of our systems. As a software dev and keen IT enthusiast, I jumped at the opportunity to ...
0
votes
0
answers
3k
views
Why do we lose IPSec connections and can't re-establish them?
We have tens of IPSec connections between our office and customer sites. At the office we use pfSense V2.4.5 as VPN gateway and placing Ubiquiti Edgerouter X devices with the latest firmware on the ...
0
votes
1
answer
53
views
Connection Two sites
My office is moving and the big concern is about networking. The move will take two months but they need both sides to be operational during that time. The big challenge is our old PBX. Do they need ...
0
votes
1
answer
496
views
site-to-site VPN route traffic through VPN tunnel
Short version: in a site-to-site VPN setup with Strongswan on both sides, how to route particular traffic via the VPN tunnel?
Long version:
We have two Linux (ubuntu 20.04) in AWS, both installed with ...
1
vote
1
answer
713
views
unable to ping across strongswan site-to-site vpn in aws
We have two Ubuntu-20.04 servers in aws, different VPC, both installed StrongSwan and have configuration as below (ipsec.conf):
# basic configuration
config setup
# Add connections here.
conn %default
...
1
vote
1
answer
2k
views
UDM Pro Site To Site VPN with Domain Issues
I have 2 UDM Pro firewalls setup with a IPsec site to site VPN, the settings are the same for both VPNs (obviously the destination IPs are reversed for each unit) I can ping traffic with IP addresses ...
0
votes
1
answer
75
views
AWS - Connecting 2 VPC regions bi-directional?
I have 2 VPCs, one in US, one in EU, and each of them have 1 VM.
(IN US there is the Customer GW (set to irish IP) and Virtual Private GW).
I have succesfully connected with openswan from Irish VM,
I ...
0
votes
1
answer
2k
views
StrongSwan Linux Client refuses to connect to StrongSwan server
I have a StrongSwan VPN server set up on an Ubuntu 18.04 server, and it is working well. I am able to connect to this VPN from Windows 10 and macOS, and everything works wonderfully. The problem is ...