Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

  7. current community

    your communities

    more stack exchange communities

    company blog
Server Fault

Questions tagged [site-to-site-vpn]

The tag has no usage guidance.

362 questions
info Newest Frequent Votes Active Unanswered
0
votes
1answer
35 views

VPN tunnel over ExpressRoute with Private Peering

Anyone know if we can use ExpressRoute Private peering and establish a site-to-site IPsec/IKE VPN tunnel over ER between our selected on-premises network and Azure VNet using Azure VPN Gateway? Here ...
0
votes
0answers
6 views

vpnc: hash comparison failed: (ISAKMP_N_AUTHENTICATION_FAILED)(24) check group password

I am trying to connect to my cisco remote vpn server using vpnc on raspberry pi (debian) commad window. My default.conf file contains IPSec ID My_id@domain.com IPSec secret PSK_of_REMOTE_VPN_SERVER ...
0
votes
1answer
38 views

Alert on VPN Gateway tunnels status

We have multiple VPN Gateways and Tunnels setup in GCP. Is there a way to monitor the health of the Tunnels and get alerts when a Tunnel goes down or gets out of sync. Thanks, Guy
0
votes
1answer
16 views

How to fix Branch Office - Root Forest Domain with the same name as HQ's

We have two offices of similar size, with a single server at each. Currently users at office #2 manually VPN directly to Office #1 to access resources. I want to replace the individual VPNs with a ...
0
votes
1answer
41 views

Strongswan site-to-site VPN connected/established but can't ping server

I need to create site-to-site VPN with one server (Not on "strong swan"). I did everything by this article https://blog.ruanbekker.com/blog/2018/02/11/setup-a-site-to-site-ipsec-vpn-with-strongswan-...
0
votes
1answer
42 views

Azure site to site VPN security

I have to connect an onpremise network to Azure VNET. I understand that Azure Virtual Network Gateway can be used to create a Site to site VPN. However, my customer is concerned about the security and ...
0
votes
0answers
40 views

Site to Site IPSEC with Debian and Zyxel USG210 - Server says connection established, Router doesn't

I'm trying to set up a StrongSwan IPSEC VPN on a Debian server and want to connect the Zyxel USG210 router to it. So far I've run into some issues and don't know the exact cause. Basically, the ...
1
vote
2answers
113 views

Route traffic between two Azure site-to-site VPN locations

I have a single Azure virtual network gateway running the "Basic" VPN SKU (MainVGW) in "Route-based" mode in the Australia East region. MainVGW has two "Connections" (BR and MH) which are IPsec Site-...
1
vote
0answers
37 views

Firewall IP whitelist vs IPSEC VPN (Azure specific)

We are about to move our company's internal web app and samba shares from a datacenter to Azure. All our locations have a VPN connection to that data center. Instead of creating all new connections ...
0
votes
1answer
63 views

Forward from VPN to non-VPN network

I want to connect an existing Kubernetes cluster to remote VPN that uses only a specific subnet IP range. I could create a custom-mode VPC network within my project that only has the appropriate ...
0
votes
0answers
96 views

Azure Site-to-site VPN loses connection every couple of days, server reboot fixes it

I have a compute infrastructure running in Azure (Windows Server 2016 VM's) with a Azure VPN Gateway (Basic). I have multiple site-to-site connections hooked up and they all show connected. However, 2 ...
0
votes
0answers
19 views

Is it reasonable to serve public website from cloud that request information through enterprise VPN?

We are setting up a public website (a web-service for public mobile application, to be accurate) on cloud service that serve information that has to be retrieve from enterprise data center. The cloud ...
0
votes
0answers
28 views

GCP Internal Load Balancer not responding

I am trying to reach GCP Internal Load Balancer from external network connected via 3rd party Pritunl-OpenVPN tunnel (tunnel endpoint is on VM). [external network] <------- Pritunl VPN ----> [GCP ...
0
votes
0answers
49 views

VPN IPSEC through an internet box on one side and preserving the internet connection on the other side

I want to setup a VPN IPSec tunnel between two sites, let's say PARIS and Toulouse. The tunnel rose well and statues on VPN Gateway routers at both sides shows it's up and OK. The problem is that I ...
0
votes
1answer
48 views

Azure VPN Site to Site VPN (Azure to Cisco)

I configured a VPN IP Sec tunnel from VPN gateway in Azure to Cisco Router to customer end. created vpn gateway created local gateway config and connected successfully to a cisco router at customer ...
0
votes
1answer
162 views

Administration of multiple sites (tunneling) - MikroTik & NAT

I would like to ask you for your opinion. I need to find a secure way how to manage small remote sites where I have RBs. We have HQ, where is Kerio Control as a FW and a lot of small sites with ...
1
vote
1answer
221 views

AWS EC2 CentOS 7 with LibreSwan IPsec Tunnel UP (Established), No Traffic flow, cannot ping Peer encryption Domain Nodes

I have LibreSwan Setup on AWS EC2 CentOS7 instance, IPsec tunnel is established with the peer (Cisco ASA). The Tunnel is up, but I no traffic. I cannot ping the nodes at the side of the peer. Here is ...
0
votes
1answer
299 views

Ipsec nat-traversal on port 4500

What is the point of switching the traffic on port 4500 in Phase 1 of IPSec negotiatons From 5th packets onwards? Since the NAT Is already detected in packet 3 and 4 itself, can’t we simply continue ...
0
votes
1answer
107 views

CISCO ASA tunnel is up but no traffic

I have reviewed the very similar questions to mine, but my scenario seems different. ASA Version 9.7(1)4 I had a VPN site-to-site ikev1 connection from a remote network in AWS to a remote network ...
1
vote
2answers
124 views

Public traffic routed over an Amazon AWS VPN dies. Want it to egress from our corporate network

We're migrating to a new jump host, migrating from a machine in-house. We also have 100+ customers that we will still need to communicate with via SSH. Their firewalls currently allow our primary ...
0
votes
2answers
56 views

Best practice for Domain Controller [closed]

I have a main DC on Microsoft Azure VM and an on-premise DC. Both domain networks are connected with site-to-site VPN. The purpose of setting up the DC on cloud was to get rid of the old on-premise ...
0
votes
1answer
460 views

Fixing 70% transfer speed slowdown over VPN compared as compared to SSH? (Tested OpenVPN, IPSec/L2TP, OpenSSH, SoftEther)

I'm currently configuring a site-to-site VPN between two VPSes that requires both outgoing and incoming connections. It will be used by a high bandwidth application so I require the maximum amount of ...
-2
votes
1answer
80 views

Connection between windows 2012r2 DC and ADC

I have a head office and a number of suboffices. Both head office and suboffices need to access some corporate server, which is physically in the head office. But suboffices should not be able to ...
2
votes
0answers
46 views

OpenVPN - Hypervisors and VMs communicating by VPN through the internet

I'm pretty lost with this problem (maybe I say something silly =D )... I have two hypervisors (CentOS 7) connected by a VPN (OpenVNP). In this scheme I have two virtual machines (VMA0 and VMB0) ...
-3
votes
3answers
57 views

is it possible to connect to sites over the internet [closed]

I have two sites which are 3km away from each other, both sites have internet access from the same ISP. I would like both sites to have access to each other throught the internet routers (TP-Link TD-...
0
votes
0answers
236 views

VPN Setup for Cisco ASA 5515 and Azure

I'm trying to setup a Site-To-Site VPN between a Cisco ASA 5515 and an Azure (Route-Based). I've gotten the VPN to connect on several occasions only for it to drop again a never come back up(roughly ...
0
votes
0answers
586 views

UniFi and pfSense IPSec VPN not passing traffic

I have a IPSec VPN running between two sites. Site A is pfSense and site B is a UniFi Security Gateway. I have got the VPN established but I cant ping anything in either direction on the network. Any ...
1
vote
0answers
221 views

Libreswan IPSec IKEv2 unable to connect to multiple remote IPs

I have been beating my head against this for awhile, and I'm hoping that someone can point me in the right direction. I have a number of IPSec tunnels established, mostly from libreswan (v3.23) on ...
2
votes
3answers
71 views

Site to Site VPN with Remote Access VPN

I would like to apologize in advance as I'm new to the whole VPN thingy. Currently my company network has been setup with a simple Remote Access VPN done on the router by my predecessor. The purpose ...
0
votes
1answer
964 views

Active directory in google cloud instance

I want to set up an active directory in a google cloud instance and connect local computers with it. I have configured the active directory in an instance, but cannot connect with the domain from ...
3
votes
2answers
822 views

VNET peering with on-premise gateway transit not working properly

We have a VNET (let's call it VN_MAIN) that is configured to have a S2S VPN connection to our on-premise network. The VMs deployed within subnets of VN_MAIN are reachable from on-premise. What I'm ...
2
votes
3answers
1k views

inter-cloud vpn tunneling (AWS and Azure)

I'm trying to establish a VPN site-to-site between a VPC in Amazon Web Services and a VNet in Microsoft Azure. For that I'd like to use AWS' Virtual Private Gateway on one side and Azure's Virtual ...
1
vote
1answer
3k views

Securely accessing SMB shares over Internet

I'm looking for some advice about securely offering CIFS shares over the Internet. The file server will be hosted on a cloud service (e.g. DigitalOcean). There will be up to 100 remote devices that ...
0
votes
0answers
61 views

Azure Virtual network gateway no IP

In Azure how do I find the internal IP address of my Virtual network gateway? In the 'Connected devices' section of my virtual network there is no IP address showing up.
0
votes
1answer
51 views

Azure Site recovery

Planning for ASR and migrating all our servers to Azure in distant future from VMware. Issue is that we do not have any VPN capable device in the network and have read that it is necessary. Can ...
0
votes
0answers
61 views

Printer stops pinging after 3 minutes from IPSEC remote side. Continues from local side

I have a very strange issue that I have come across twice now. It is making me go cross-eyed. We have two sites, one runs our server infrastructure and the other hosts end-users. There is an IPSEC ...
0
votes
0answers
233 views

connecting multiple lans with openvpns iroute directive

I have multiple AWS VPC network and want to connect in the following configuration using OpenVPN +---------+ +---------+ | vpc1 | | vpc2 | +---------+ +------...
1
vote
0answers
127 views

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I ...
0
votes
1answer
71 views

Route traffic from one VPN tunnel to the other

I have three sites with the following interconnections: Site1 connected to Site2 and Azure site. Site2 connected only to Site1. I need to establish a route that goes from Site2 to Azure through ...
0
votes
0answers
841 views

How to do port forwarding for VPN server

Let say my workplace public IP is 111.222.111.222. And I have a pc inside this network, and the computer ip is 10.0.0.60. I installed a SFTP server inside this pc. And in my router, I do port ...
5
votes
1answer
4k views

Site-to-site IPSec routing (Ubuntu, StrongSwan)

I am stuck in trying to connect two networks. SiteA: is a number of VPS in different locations and office workstations connected with OpenVPN in a private network 10.113.0.0/24. Each has it's own ...
0
votes
1answer
292 views

Multiple static VPN gateways on for Azure VPN Gateway workaround?

I have an Azure infrastructure environment with multiple VM's and an Azure VPN Gateway for both Point 2 site (RDP, SSMS) connections, and multiple site 2 site connections for connecting to external ...
1
vote
2answers
2k views

Client packets not forwarded over strongSwan IPsec site-to-site tunnel for client and gateway on the same server

I have a site-to-site IPsec tunnel set up with strongSwan between my CentOS 7 virtual private server (public IP x.x.x.233 for subnet 172.25.10.0/24) and a customer's network (public IP y.y.y.24 for ...
0
votes
0answers
10 views

Why does client connecting to our Windows 2012 R2 Standard OS via VPN, disconnect every 12 hours

Our server: VM, Win Server 2012 R2 Standard. Their server: VM, Win Server 2012 Standard. They open a VPN connection to our external IP Authenticate using a local account on our host. The account is ...
1
vote
0answers
237 views

Add Linux VPS (cloud VPS) to Local Network using VPN or IPSec

I have a Linux (Debian 8) VPS (cloud based VPS, not on Google Cloud platform, but that should not matter) on running a software PBX system. I want this remote cloud based Linux VPS to appear on my ...
0
votes
3answers
3k views

Azure VPN Site-to-site connected but host not reachable

Using Azure gateway VPN I created a site to site connection with another vpn device (checkpoint) over which I have no control (customer endpoint). I created the connection, using their public ip, ...
0
votes
1answer
859 views

VPC-TRANSIT: Difference between detached VGW and Direct IPSec connection (csr1000v)

Picture worth thousands words So i draw 2 different network diagrams involving the VPC Transit infrastructure on AWS using csr1000v. Direct connection between csr1000v and on premise Connection ...
0
votes
2answers
1k views

How to extend lan to offsite location

I would like to extend my LAN to another site. I have people who work on both sites and I want it to be as if they are in the same LAN, regardless of where they are. I have servers on both sites and ...
0
votes
0answers
337 views

Is there a way in Azure to route traffic from a Site-to-Site VPN Gateway to a Public IP Address on a Virtual Machine?

In every scenario I've seen, a Site-to-Site VPN tunnel is used to bridge 2 virtual networks with a private IP address range - this all makes sense as a use-case to me, and I've implemented such in ...
0
votes
0answers
123 views

GCP VPN route errors when two VPN share CIDR

Firstly I need to apolgise - I am new so I am unable to post images and links :-( I have a VPN to a peer with redundancy configured as per the VPN Advanced Configuration page. The remote CIDR should ...

1 2 3 4 5 … 8