Server Fault

Questions tagged [site-to-site-vpn]

Ask Question

The tag has no usage guidance.

408 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0
votes
0answers
16 views

IPSec VPN working for PING, but not for SSH

I have created an IPSec VPN between two "sites" using Virtual Machines and Openswan for the IPSec tunnel. My configuration: I created 3 host-only networks, one for each "site" and the third to ...
0
votes
0answers
16 views

AWS Strongswan Site to site : VPN UP but no traffic

I having a troubleshoot with amazon VPN site to site, i'm using strongswan Network diagram +----------------------------------+ +----------------------------------+ | VPC 1 ...
0
votes
0answers
9 views

port forwarding across Meraki VPN

I have an FTP server on my network, and I use port forwarding on the Meraki MX64 so its externally available. I will be moving the ftp server to a new site with a Meraki MX100 and a new public IP ...
0
votes
0answers
16 views

2 seperate vpn servers on a single gateway

I am in a position where i set up a site to site vpn (using lancom hardware) and this works a treat (using pptp) I now want to set up a windows vpn for our users to connect to so that during covid 19 ...
-2
votes
0answers
17 views

Does every thin client in the office need a copy of windows 10?

As the questions states "Does every thin client in the office need a copy of windows 10?" lets say i have 6 remote offices and i want to change around the infrastructure and migrate over to thin ...
0
votes
0answers
49 views

Domain group policy not updating over site-to-site VPN

I have 2 sites: 192.168.10.0/24 - main site, this is where DC is. 192.168.20.0/24 - remote site, connected via site-to-site VPN. On main site everything works fine, GPO are being updated to members....
0
votes
0answers
51 views

Poor site-to-site VPN speed on one specific server

I use a Wireguard VPN for a site-to-site connection with a speed of 75/20 Mbit/s on each site. I figured out routing (without a NAT on the VPN) and can now ping every device from both sites. The only ...
0
votes
0answers
20 views

Site-to-Site VPN Ping fails

I'm trying to establish for my very first time a Site-to-Site VPN. I'm using StrongSwan to setup the tunnel. I have followed several post where explains step by step how to achieve that, but I reach ...
0
votes
0answers
15 views

How can decide no ping with site-to-site VPN on Strongswan?

I have 2 Linux routers in two different geographic location. And I want to create a site-to-site tunnel between these Linux-routers. I use Strongswan. The tunnel successfully up, but ping between ...
0
votes
0answers
13 views

Need to redirect outbound traffic from Azure VM/VNET to on-prem Public IP

I'm emergency migrating an EDI server to Azure. EDI customers whitelist our public IP. Take a while for all customers to whitelist new (Azure Public IP). I need to redirect outbound port 21 traffic ...
1
vote
1answer
40 views

How large does site-to-site VPN subnet need to be?

Users on the data VLAN in our HQ and future remote office(s) will need to access files, floating network licenses etc. from distant servers, so we will need a site-to-site VPN for the data network(s). ...
0
votes
0answers
17 views

Vpn gateway for multisite to multisite tunneling

Initially I have a simplest server to clients side VPn tunneling as below. I used simple Openvpn server and Client side architechture. Now the situation is there are multiple server side and ...
5
votes
3answers
1k views

What is the difference between AWS site-to-site VPN and AWS client VPN?

I know that site-to-site is using IPSec (layer 3), but client is using TLS (application layer). It seems like both are actually site to site vpns after reading articles/ docs online. I guess the ...
0
votes
0answers
37 views

OpenVPN Site-to-Site via Tunnel Adapter

I apologize if this has been asked elsewhere, but I haven't been able to find a solution after a few days of digging and experimentation. I've got an OpenVPN server running on a Linux box behind a ...
0
votes
0answers
27 views

Can't RDP or FTP to Azure VM via Site-to-Site VPN

I have a VM (Windows Server 2019) that's running in Azure and I want to be able to 'control' the VM via our on-premise network. I have a Fortinet firewall configured to make an IPSEC-tunnel to an ...
0
votes
0answers
37 views

convert esp-3des esp-sha-hmac for strongswan config

I am having problems with the correct config in strongswan for "esp-3des esp-sha-hmac". I have tried esp = 3des-sha esp = 3des-sha! can any assist with the correct esp config?
0
votes
0answers
26 views

IPSec Phase 2 Error

Below is my IPSec config, I am trying to establish a site to site VPN connection, I seam to be missing something in the configuration. conn 111conn auto=start type=tunnel Ikelifetime=24h salifetime=...
0
votes
0answers
22 views

Sharing public Wan IP Subnet between 2 locations (Site to Site WAN?)

An ISP has allocated us a /27 to use. We need to use some of the IPs within the /27 in a separate location where the ISP (transit) is a different ISP. Public IP Subnet (/27) <=> Pf Sense (PF A) &...
2
votes
1answer
134 views

Azure VPN Gateway (S2S) disabling Replay Detection

I'm running an Azure VPN Gateway (VpnGw1, gen1, Route-based) and trying to connect a S2S connection to a Fortigate gateway. The connection is losing connectivity every so hours and I'm wondering if I ...
0
votes
0answers
41 views

AWS EC2 public IP unreachable over IPSec VPN but private IP still reachable

We have a FortiGate (FortiOS 6.0) connected to a IPSec Site-to-Site VPN (Dynamic BGP) on AWS. When the VPN is up, we can only access EC2 using the private IP, public IP no longer works. Only the ...
0
votes
1answer
185 views

Azure Site-to-Site VPN through a Watchguard Firewall

Summary I'm trying to figure out what Firewall Policy I need to create to allow VPN connection traffic through my Watchguard firewall. Description I'm really struggling to figure out how to create ...
0
votes
0answers
20 views

Providing Support from Jumphosts using Site-to-Site VPNs

To provide support for our customers, our support staff has to establish VPN connections in order to connect to hardware devices that are located in the networks of our customers. Due to security ...
0
votes
1answer
341 views

IKEV2 IPSEC Autostart, restart, daemon

I use strongswan for IKEV2 and IPSEC. And i don't know how to keep it updated, and running on change restart etc. For starting service i use: systemctl status strongswan Afer that i need to type ...
0
votes
1answer
189 views

Azure P2S VPN routing issue

I set up a Virtual Network on Azure a few days ago and connected our local business Network through a site-to-site VPN Connection with the virtual network. Everything is working fine so far. Then I ...
0
votes
0answers
50 views

Multiple Public IPs, VPN using Ubuntu 18.04

I am attempting to configure a tricky sort of traffic handling node. I'd like to have a node receive traffic over a VPN connection on one NIC, then NAT them out to the internet over a second NIC. I'm ...
0
votes
0answers
47 views

Access Windows Homegroup behind wireguard VPN

I have a raspberrypi running wireguard server in my office. My office runs a bunch of windows machine sharing files via Homegroup. I can successfully connect to Wireguard VPN from my home windows ...
0
votes
0answers
62 views

Change advanced tcp/ip settings vpns2sinterface powershell

I created a VPN s2s interface (Add-VpnS2sInterface). How do I change the interface setting: Register this connections address in DNS? The command Get-NetConnectionProfile-InterfaceAlias "...
0
votes
0answers
28 views

Aws VPN : canā€™t ping on premise server with existing active vpn connection

I have an active (both vpn tunnels up) vpn connection between the AWS virtual private gateway and customer gateway. Through this I can access my on premise server(server A) from an ec2 instance on ...
0
votes
0answers
70 views

Site-To-Site VPN: Reachability of bridged devices in subnet

I have the following problem. I have established a site-to-site connection via IPSec between a virtual network in Azure and a Raspberry Pi at my home. The Raspberry Pi is connected via cable to my ...
0
votes
2answers
187 views

Overlapping subnetworks with Google Cloud IPSec VPN

My company's infrastructure is hosted on Google Cloud. We'd like to connect a network of one our clients with site-to-site (IPSec) VPN. I've setup one on Google Cloud but we have a problem. Our ...
0
votes
0answers
69 views

pfSense openvpn site to site vpn and remote vpn route issues?

I have 2 installed firewalls. The first has a public IP and 2 openvpn servers: site-to-site(to connect with the second one) and remote vpn for client connections. The second one located in local ...
0
votes
1answer
192 views

Configuring an Site to Site VPN ,open VPN client on Pfsense and Azure will host Open VPN Scess Server

Dears, I am relatively new to Open vpn , by reading through forums i have tried may of the suggestions, but still not able to get it work. I am trying to have a Site To Site VPN , with Open VPn ...
0
votes
0answers
15 views

Add routes to vpn

I have established VPN between on-prem and Strongswan configured in GCP VM. But Client stating that they cannot telnet or pass the traffic to our subnets (left subnet). What should I do ? I have ...
0
votes
0answers
24 views

Configure IPs for siteā€“to-site VPN

my vpn-client is connected to a VPN-server and the Client is in a 192.168.1.0/24 network. I have successfully setup an client to site VPN but I want to create a site to site VPN. I have read some ...
0
votes
1answer
375 views

Site to Site VPN devices behind ISP modem

site to site vpn setup when behind isp wifi router image I've read through many site to site vpn posts on this site but I still haven't found a solution to my issue. Here is the situation. I was ...
0
votes
0answers
63 views

pfSense multi site-to-site vpn with ipsec pointing same local network

I've an ipsec working on my pfsense with this configuration. Sites and subnets: Site A: 10.1.0.0/16 Linking sites: Site A (Server) < 10.0.2.150/32 > (Client) Site b (Server) < 10.0.15.130/32 ...
0
votes
0answers
21 views

How to Ping from Remote Branch to a Private Server through Sophos UTM

I have a windows server on a EC2 instance on a private subnet (10.10.10.0/24). I also have a strongSwan VPN server on another EC2, on a public subnet (10.10.11.0/24). Then I connect from my local ...
0
votes
0answers
29 views

VPN connection between distinct cloud instances

What is the recommended architecture for establishing a virtual "local" area network across many servers located in many geographically distinct datacenters and clients (all running linux) through the ...
0
votes
0answers
70 views

Tp-link TL-R600VPN level 2 bridge

I have bought a couple of tp-link r600vpn router to connect two lans with the same subnet over an office wan. I've configured a simple lan to lan VPN with IPsec as in the manual, but to work it needs ...
0
votes
1answer
450 views

azure forced tunneling - route all traffic back through on prem firewall

configured a site to site vpn with azure and on prem juniper srx firewall. traffic in both direction is working. configured forced tunneling to route azure vm internet traffic too through on-prem ...
0
votes
0answers
256 views

Routing OpenVPN to a IPsec L2TP-PSK connection using OpenSwan (site-to-site)?

The goal here is to connect two VPNs together, one is a OpenVPN service and the other is a IPsec. I have a DigitalOcean droplet (Ubuntu 18.04) IP 163.212.45.110 that is hosting an OpenVPN service. My ...
0
votes
0answers
120 views

What is meant by ā€œLocal host is behind natā€ in <ipsec status> output in StrongSwan VPN?

First, I could establish EC2 server 1 to EC2 server 2 VPN connection using strongSwan. It works like a charm. Now trying to connect one of the AWS Ubuntu EC2 instance with a Ubuntu server in VMware ...
0
votes
0answers
20 views

Cannot access hosted web application from some private IP Addresses

My head office network is connected to branch office network by site to site VPN. I have an application hosted in windows server running in head office network which is being used from branch offices. ...
0
votes
0answers
24 views

Allow devices in in a VPN direct access to the internet in AWS

Is it possible to route all traffic from a site-to-site VPN connection to the public internet? Currently, I have set up Squid as a proxy. Since I need to forward also non-http/s protocols I would ...
0
votes
0answers
89 views

GCP VPN establishes not passing traffic

I am working with a client to create a Site to Site VPN between my GCP network and a client network. An internal server on their remote end needs to connect to an internal server on my local end to ...
0
votes
1answer
316 views

How to configurate AWS VPN <-> Subnet <-> NAT <-> Internet

I have set up a site-to-site VPN to a communication provider (for mobile data connection). They have the subnet 192.168.0.0/21. This is connected via vgw (virtual gateway) to a subnet 10.0.1.0/24. ...
1
vote
2answers
130 views

Site to Site VPN behind a NAT

I have a firewall "stormshield" bedind a NAT device, and I would like to establish an Azure site to site VPN, is that possible? I have already configured it, the VPN connection is established but the ...
0
votes
2answers
134 views

Azure - unable to reach VM over site-to-site VPN

I am new here and also new to Sophos XG firewalls and to Azure nor am I a network expert, which might not be a good combination. On the bright side, there might be something very easy that I have ...
1
vote
0answers
282 views

Strongswan ipsec site to site vpn to aws virtual private gateway

I have configured ipsec tunnel between strongswan and aws vpc. Below is my ipsec conf: ---- config setup charondebug="all" uniqueids=no conn vpc mobike=no type=tunnel ...
0
votes
1answer
780 views

Azure S2S VPN: Egress Packets Dropped due to Traffic Selector Mismatch

I have set up a S2S VPN in Azure to connect to an on-prem device (PfSense) of a 3rd Party. We have managed to establish the VPN tunnel, and I can see the status of the connection in the Azure Portal ...

1
2 3 4 5
ā€¦
9