Server Fault

Questions tagged [site-to-site-vpn]

Ask Question

The tag has no usage guidance.

444 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0 votes
1 answer
18 views

Can I add "firewall rules" to an AWS VPN connection?

i need to connect a couple of customers to an AWS VPC via VPN. requirements: no customer may send data (or best: even "see") another customer they should only be able to "see" ...
user avatar
flypenguin
  • 183
0 votes
0 answers
10 views

AWS Site-to-Site VPN ping working, TCP not

I want to establish a site-to-site IPsec VPN connection between an AWS EKS-Kubernetes-Cluster and a server from a different provider using AWS Site-to-Site VPN. Pings get through the VPN, but TCP ...
user avatar
Talinx
  • 1
0 votes
1 answer
13 views

IPSec Netgear BS200 and Linksys LRT214 - Can't reach devices

I have set up the first time an IPSec site to site tunnel. The tunnel is up and running from a Netgear BR200 and the Linksys LRT214 Router. Network 1 has 192.168.100.x and the Network 2 has 192.168.1....
user avatar
chrisonline
  • 101
0 votes
0 answers
32 views

AWS Site-to-Site VPN with BGP - how routes are advertized via BGP?

I've configured redundant site-to-site VPN between AWS and GCP with 2 VPN connections, 4 tunnels and BGP dynamic routing. Everything works, all good, servers on both sides of the tunnels can reach ...
user avatar
Dmitry
  • 1
0 votes
0 answers
65 views

Strongswan: {parsed IKE_SA_INIT response 0 [ N(NO_PROP) ]} and {recieved NO_PROPOSAL_CHOSEN notify error}

I am getting the feeling that I have just done somethign very silly on my end but I have no idea what is going on. For context, I have been using wireguard for a bit and am much more knowledgable than ...
user avatar
Kyle Champoux
  • 1
0 votes
0 answers
17 views

IPSec established but cannot ping remote LAN

I have successfully established IPSec in my OpenWrt router but I am unable to ping the remote subnet. Below are the related files cat ipsec.conf conn vpn3 keyexchange=ikev2 left=10.129.170.132 ...
user avatar
Sagar Jain
  • 1
0 votes
1 answer
48 views

Two DCs at home office, one remote office...DNS resolution?

Our main office has two domain controllers (Windows Server 2016), shown as one below for simplification. I'm bringing up a remote office, with a firewall at each location. I'm trying to keep the ...
user avatar
JeffR
  • 113
0 votes
2 answers
103 views

How is IPsec (strongswan) working without opening ports in UFW?

I needed to setup a site-to-site VPN between servers A and B, where server A is being managed by me and server B is being managed by a client. Server A is running Ubuntu 20.04 and I am using ...
user avatar
Ashish
  • 165
0 votes
0 answers
39 views

AWS Site-to-Site VPN with Strongswan - can't ping from strongswan to AWS

I'm trying to set up an AWS Site-to-Site VPN to Digital Ocean with strongswan. I can ping from AWS to my DO instance's private IP. I cannot ping from DO to AWS's private IP. I have all inbound ...
user avatar
Chris Bui
  • 1
0 votes
1 answer
24 views

Best way to set the network infrastructure - Windows Server (AD, DHCP, DNS) + Router + VPN + Load Balance

First of all, I'd like to say I really like working with networks and managing computers, but I do it as a hobby. I'm not really a professional and only do it for my own things as I love learning ...
user avatar
Charles Tomazini
  • 1
1 vote
1 answer
135 views

Why is my Azure VPN Gateway-NAT rule not working?

I have a very simple scenario, Azure Vnet with a subnets 10.140.1.0/24 (GatewaySubnet, SKU=Gw2 gen1) and 10.140.10.0/24 (VirtualMachineSubnet). Then an OnPrem network with 10.190.0.0/16. I have a ...
user avatar
user2713516
  • 155
1 vote
0 answers
25 views

How to forward traffic from 2 On-prem branches to eachother via Azure VPN Gateway

I have 2 scenario's that I am trying to solve in my Azure network environment. In both scenario's OnPrem-branch1 needs to connect to OnPrem-branch2 via my own Azure virtual network. I have Azure ...
user avatar
user2713516
  • 155
0 votes
1 answer
43 views

Connecting Azure Site-to-Site VPN to On-prem Gateway with 2 public IP's

I have a cisco ISR on-prem with 2 endpoints (primary and secondary) and I want to connect my Azure VPN Gateway to both endpoints through a single connection (same local address space for both IP's). ...
user avatar
user2713516
  • 155
0 votes
0 answers
20 views

How do I get onsite DNS to communicate with Azure VNet DNS?

We have an S2S and our DNS server in Azure can talk with the Azure VNET DNS, however our onsite DNS server cannot because of a routing issue I think. What configuration do I need to change so that ...
user avatar
naps1saps
  • 66
0 votes
0 answers
39 views

Azure Vpn Gateway with IP Range conflict - workarounds?

First of all I am fairly new to network topics and Azure itself, so maybe I might oversee a trivial solution here. We have a production system in Azure and some of our customers want to connect via ...
user avatar
GenericUsername
  • 1
0 votes
0 answers
18 views

AWS Natting Request through Site-to-Site VPN

I have a following specific requirement that I need to setup to access on premise server of one of the payment processor vendor that I am trying to access from EC2 instance. I don't have extensive ...
user avatar
Runcorn
  • 101
1 vote
0 answers
37 views

Site 2 Site VPN with ipv6

I have a Site 2 Site VPN running, based on IPv4. So I have 2 Networks, both connected via a router to the internet. The ISP provides a public IPv4. The 2 networks have the following IPs A: IPs 192.168....
user avatar
Chris
  • 131
0 votes
0 answers
54 views

Accessing to the Site to Site IPsec VPN with Remote Access VPN

first of all sorry I am a beginner with networking/VPN. We created a Site to Site VPN with Strongswan lets say between server A (our server 10.19.0.0/16) and server B (10.1.0.0/21). I can connect to ...
user avatar
Zealcage
  • 1
0 votes
0 answers
12 views

AWS Vendor to Client Data Integration

I am using AWS to host a VPC with a PostgreSQL RDS database. I need to be able to pull data via ODBC from several organizations into my RDS database for processing. From everything that I have ...
user avatar
themagicman2136
  • 1
0 votes
0 answers
65 views

Multiple IKE SAs with Strongswan VPN

I have a VPN between one server (Debian 10, Strongswan 5.7.2) and a partner server (Stormshield SN510). All run fine, my others servers can reach the partner one on HTTPS via the VPN. But IKE SAs stay ...
user avatar
Cédric Girard
  • 377
0 votes
0 answers
159 views

GCP site-to-site VPN traffic through Palo Alto

I'm looking for some directions. Has anyone implemented the use case described in this lab [Palo Alto Networks: VM-Series Advanced Deployment with site-to-site vpn to onprem? Question. Which vpc did ...
user avatar
Sunny J.
  • 607
0 votes
0 answers
36 views

Is it possible to create IPsec VPN tunnel between 2 Azure subscriptions

I have 2 different azure subscriptions for which I want to create a VPN tunnel. The obvious choice would be to create a VNet-to-VNet tunnel but as I understand this would cost extra resources. So I ...
user avatar
wouter205
  • 123
0 votes
0 answers
43 views

GCP VPN Tunnel is up, I can see Sent Bytes, but traffic is not reaching the recipient

I am trying to establish a VPN tunnel between a Classic CPN gateway and an on-prem VPN gateway. A requirement for the on-prem gateway is that traffic coming out of my VPN must present as a public ...
user avatar
Paul
  • 1
0 votes
0 answers
38 views

S2S Vpn Windows 2019

I am trying to set up a S2S VPN with 2 Windows 2019 servers. Lets say we have a Site A and a Site B. So I've setup two Windows 2019 server with Routing and Remote Access enabled. On both sites I added ...
user avatar
Chris
  • 131
0 votes
0 answers
31 views

IPSec site2site tunnel + vpn

In our research project, we needed to deploy a server "Molly" at another company. They made us set up a IPSec tunnel to their firewall/gateway and from there, the comms are forwarded to our ...
user avatar
Szymon
  • 1
0 votes
0 answers
172 views

Unable to SSH into OpenVPN cloud connector machine over VPN IP

I just started using OpenVPN cloud connectors for creating mesh VPN networks. I deployed a connector and setup relvant IP forwarding and NAT protocols that allow me to access the LAN network behind ...
user avatar
Rafay Khan
  • 101
0 votes
0 answers
72 views

Unable to join domain from Site-to-Site VPN Server

I work for a small business that is looking to expand to the cloud so that our remote workers can access more of our systems. As a software dev and keen IT enthusiast, I jumped at the opportunity to ...
user avatar
spovelec
  • 1
0 votes
0 answers
58 views

ASUS Merlin OpenVPN Client Route

I am have a established conection between two sites ( VPN Site-To-Site) using Edgerouter (SiteA - 10.0.1.0/24) and a Asus Merlin (SiteB - 10.1.1.0/24). On RouterB I have the following configurations: ...
user avatar
Dariko77
  • 3
0 votes
0 answers
89 views

OpenVPN Site-To-Site with Edgerouter and AsusMerlin

I have two distant places each with a public IP and I want to make the LAN network of these places as if they were one. That is, the machines in SiteA can communicate with the machines in SiteB and ...
user avatar
Dariko77
  • 3
0 votes
0 answers
1k views

Why do we lose IPSec connections and can't re-establish them?

We have tens of IPSec connections between our office and customer sites. At the office we use pfSense V2.4.5 as VPN gateway and placing Ubiquiti Edgerouter X devices with the latest firmware on the ...
user avatar
CodeNinja
  • 255
0 votes
1 answer
47 views

Connection Two sites

My office is moving and the big concern is about networking. The move will take two months but they need both sides to be operational during that time. The big challenge is our old PBX. Do they need ...
user avatar
Newbie
  • 1
0 votes
1 answer
214 views

site-to-site VPN route traffic through VPN tunnel

Short version: in a site-to-site VPN setup with Strongswan on both sides, how to route particular traffic via the VPN tunnel? Long version: We have two Linux (ubuntu 20.04) in AWS, both installed with ...
user avatar
Cal
  • 169
0 votes
0 answers
75 views

access to on premise S2S Azure connection through P2S

I have the following network configuration. On premise network : 192.168.13.31 Azure VN : 100.1.0.0/16 Azure vpn gateway : 51.136.4.136 I have S2S IKEV2 connection between on premise and azure. I'm ...
user avatar
Florian
  • 1
1 vote
1 answer
360 views

unable to ping across strongswan site-to-site vpn in aws

We have two Ubuntu-20.04 servers in aws, different VPC, both installed StrongSwan and have configuration as below (ipsec.conf): # basic configuration config setup # Add connections here. conn %default ...
user avatar
Cal
  • 169
1 vote
1 answer
1k views

UDM Pro Site To Site VPN with Domain Issues

I have 2 UDM Pro firewalls setup with a IPsec site to site VPN, the settings are the same for both VPNs (obviously the destination IPs are reversed for each unit) I can ping traffic with IP addresses ...
user avatar
David
  • 11
0 votes
1 answer
31 views

AWS - Connecting 2 VPC regions bi-directional?

I have 2 VPCs, one in US, one in EU, and each of them have 1 VM. (IN US there is the Customer GW (set to irish IP) and Virtual Private GW). I have succesfully connected with openswan from Irish VM, I ...
user avatar
Wojtas.Zet
  • 271
0 votes
1 answer
732 views

StrongSwan Linux Client refuses to connect to StrongSwan server

I have a StrongSwan VPN server set up on an Ubuntu 18.04 server, and it is working well. I am able to connect to this VPN from Windows 10 and macOS, and everything works wonderfully. The problem is ...
user avatar
deltamind106
  • 156
0 votes
0 answers
194 views

Traffic not passing through the site-to-site VPN Sonicwall (VM on Azure) to Sonicwall on premises

I have created a VPN site-to-site with a Sonicwall NSv on Azure and a TZ400 on-premises. The VPN is ON but the traffic between the two sites does not go through. I am able to ping the X0 (LAN ...
user avatar
Klenti Toska
  • 1
1 vote
0 answers
19 views

Connecting to Client Data Centre using AWS VPN

I have been using AWS for the past 3 years. We have never required to connect to our client data centre using a VPN until recently. I am entirely new to the concept of VPN, however, I have figured a ...
user avatar
Somnath Guthula
  • 11
0 votes
1 answer
188 views

Azure webapp: Site-to-Site VPN not working when used with webapp

I have this setup in Azure: A vnet with address space: 172.16.0.0/16 A subnet with 172.16.1.0/24 named WebAppSubnet and delegated ot Microsoft.Web/serverFarms A subnet with 172.16.255.0/24 named ...
user avatar
mslot
  • 105
0 votes
0 answers
36 views

Alias subnetworks with Google Cloud IPSec VPN

My company's infrastructure is hosted on Google Cloud. We'd like to connect a network of one our clients with site-to-site (IPSec) VPN. I've setup one on Google Cloud but we have a problem. Our ...
user avatar
Roger Magezi
  • 1
2 votes
1 answer
121 views

Site-to-site VPN connection between VMs in a private network and remote Linux hosts [closed]

Recently I've faced with a problem - connect multiple VMs running on bare metal servers with Linux hosts in the remote location via the Internet. Basically, what I need is a simple VPN setup where I ...
user avatar
Dmitry T.
  • 121
0 votes
0 answers
68 views

Connecting two networks on the same range with WireGurard

I have a problem. I need to connect two networks in the same IP range with Site-to-site VPN. Is it possible? Network #1 (n1) is 192.168.1.0/24 and network #2 (n2) is also in the same range - 192.168.1....
user avatar
Mathew Paret
  • 25
1 vote
0 answers
278 views

Specify outgoing network interface in ipsec.conf for one IPSec tunnel?

I'd like one of my tunnels to go out a particular interface. Is there a way to specify it? ipsec.conf conn remotehost.example.org keyexchange=ikev2 type=tunnel authby=psk rekey=yes keyingtries=%...
user avatar
ensnare
  • 2,052
0 votes
1 answer
86 views

AWS routing between AZs

There's three subnets: subnet A on AZ-A, 10.0.1.0/24 subnet B on AZ-B, 10.0.2.0/24 subnet C on AZ-C, 10.0.3.0/24 There's one server on subnet A (10.0.1.50) answering to ping performed via Site-to-...
user avatar
lingo
  • 101
1 vote
0 answers
118 views

How to map palo alto firewall params to strongswan's ipsec.conf

I have these configs from a partner of mine How do I match them to ipsec.conf? This is what I have currently. conn %default ikelifetime=28800s keylife=3600s rekeymargin=3m keyingtries=...
user avatar
Wafula Samuel
  • 111
0 votes
1 answer
64 views

How to streamline connections to my Google Cloud VPN to approved Ip addresses

Please I need assistance on streamlining connections to my cloud VPN as I am a developer with little networking knowledge. After back and forth with I was able to setup VPN connection from a vendor ...
user avatar
SFS Fund
  • 1
1 vote
0 answers
24 views

Site-to-Site - Subnet routed to azure firewall but rules are being ignored

I configured a Site-to-Site connection between my Azure VNet and On-Premise firewall. The connection is working just fine but I'm trying to control the Site-to-Site connection on my Azure Firewall. I ...
user avatar
Shlomi
  • 321
0 votes
1 answer
663 views

OpenVPN routing from server to client

I have two distant places each with a public IP and I want to make the LAN network of these places as if they were one. That is, the machines in place A can communicate with the machines in place B ...
user avatar
Dariko77
  • 3
0 votes
1 answer
409 views

How to troubleshoot VPN issues between Azure VPN and VMWare SNX?

I have created Virtual Network Connection (policy based) in Azure. I have created Connection for Site to Site(IPSec) which connects to VMWare-snx. Connection status is "Connecting". (Also ...
user avatar
Kenny_I
  • 101

1
2 3 4 5
…
9

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.