Questions tagged [site-to-site-vpn]
The site-to-site-vpn tag has no usage guidance.
444
questions
0
votes
1
answer
18
views
Can I add "firewall rules" to an AWS VPN connection?
i need to connect a couple of customers to an AWS VPC via VPN. requirements:
no customer may send data (or best: even "see") another customer
they should only be able to "see" ...
0
votes
0
answers
10
views
AWS Site-to-Site VPN ping working, TCP not
I want to establish a site-to-site IPsec VPN connection between an AWS EKS-Kubernetes-Cluster and a server from a different provider using AWS Site-to-Site VPN.
Pings get through the VPN, but TCP ...
0
votes
1
answer
13
views
IPSec Netgear BS200 and Linksys LRT214 - Can't reach devices
I have set up the first time an IPSec site to site tunnel.
The tunnel is up and running from a Netgear BR200 and the Linksys LRT214 Router.
Network 1 has 192.168.100.x and the Network 2 has 192.168.1....
0
votes
0
answers
32
views
AWS Site-to-Site VPN with BGP - how routes are advertized via BGP?
I've configured redundant site-to-site VPN between AWS and GCP with 2 VPN connections, 4 tunnels and BGP dynamic routing. Everything works, all good, servers on both sides of the tunnels can reach ...
0
votes
0
answers
65
views
Strongswan: {parsed IKE_SA_INIT response 0 [ N(NO_PROP) ]} and {recieved NO_PROPOSAL_CHOSEN notify error}
I am getting the feeling that I have just done somethign very silly on my end but I have no idea what is going on. For context, I have been using wireguard for a bit and am much more knowledgable than ...
0
votes
0
answers
17
views
IPSec established but cannot ping remote LAN
I have successfully established IPSec in my OpenWrt router but I am unable to ping the remote subnet.
Below are the related files
cat ipsec.conf
conn vpn3
keyexchange=ikev2
left=10.129.170.132
...
0
votes
1
answer
48
views
Two DCs at home office, one remote office...DNS resolution?
Our main office has two domain controllers (Windows Server 2016), shown as one below for simplification. I'm bringing up a remote office, with a firewall at each location. I'm trying to keep the ...
0
votes
2
answers
103
views
How is IPsec (strongswan) working without opening ports in UFW?
I needed to setup a site-to-site VPN between servers A and B, where server A is being managed by me and server B is being managed by a client.
Server A is running Ubuntu 20.04 and I am using ...
0
votes
0
answers
39
views
AWS Site-to-Site VPN with Strongswan - can't ping from strongswan to AWS
I'm trying to set up an AWS Site-to-Site VPN to Digital Ocean with strongswan.
I can ping from AWS to my DO instance's private IP.
I cannot ping from DO to AWS's private IP.
I have all inbound ...
0
votes
1
answer
24
views
Best way to set the network infrastructure - Windows Server (AD, DHCP, DNS) + Router + VPN + Load Balance
First of all, I'd like to say I really like working with networks and managing computers, but I do it as a hobby. I'm not really a professional and only do it for my own things as I love learning ...
1
vote
1
answer
135
views
Why is my Azure VPN Gateway-NAT rule not working?
I have a very simple scenario, Azure Vnet with a subnets 10.140.1.0/24 (GatewaySubnet, SKU=Gw2 gen1) and 10.140.10.0/24 (VirtualMachineSubnet). Then an OnPrem network with 10.190.0.0/16.
I have a ...
1
vote
0
answers
25
views
How to forward traffic from 2 On-prem branches to eachother via Azure VPN Gateway
I have 2 scenario's that I am trying to solve in my Azure network environment.
In both scenario's OnPrem-branch1 needs to connect to OnPrem-branch2 via my own Azure virtual network. I have Azure ...
0
votes
1
answer
43
views
Connecting Azure Site-to-Site VPN to On-prem Gateway with 2 public IP's
I have a cisco ISR on-prem with 2 endpoints (primary and secondary) and I want to connect my Azure VPN Gateway to both endpoints through a single connection (same local address space for both IP's).
...
0
votes
0
answers
20
views
How do I get onsite DNS to communicate with Azure VNet DNS?
We have an S2S and our DNS server in Azure can talk with the Azure VNET DNS, however our onsite DNS server cannot because of a routing issue I think.
What configuration do I need to change so that ...
0
votes
0
answers
39
views
Azure Vpn Gateway with IP Range conflict - workarounds?
First of all I am fairly new to network topics and Azure itself, so maybe I might oversee a trivial solution here.
We have a production system in Azure and some of our customers want to connect via ...
0
votes
0
answers
18
views
AWS Natting Request through Site-to-Site VPN
I have a following specific requirement that I need to setup to access on premise server of one of the payment processor vendor that I am trying to access from EC2 instance. I don't have extensive ...
1
vote
0
answers
37
views
Site 2 Site VPN with ipv6
I have a Site 2 Site VPN running, based on IPv4.
So I have 2 Networks, both connected via a router to the internet. The ISP provides a public IPv4.
The 2 networks have the following IPs
A: IPs 192.168....
0
votes
0
answers
54
views
Accessing to the Site to Site IPsec VPN with Remote Access VPN
first of all sorry I am a beginner with networking/VPN.
We created a Site to Site VPN with Strongswan lets say between server A (our server 10.19.0.0/16) and server B (10.1.0.0/21). I can connect to ...
0
votes
0
answers
12
views
AWS Vendor to Client Data Integration
I am using AWS to host a VPC with a PostgreSQL RDS database. I need to be able to pull data via ODBC from several organizations into my RDS database for processing. From everything that I have ...
0
votes
0
answers
65
views
Multiple IKE SAs with Strongswan VPN
I have a VPN between one server (Debian 10, Strongswan 5.7.2) and a partner server (Stormshield SN510). All run fine, my others servers can reach the partner one on HTTPS via the VPN.
But IKE SAs stay ...
0
votes
0
answers
159
views
GCP site-to-site VPN traffic through Palo Alto
I'm looking for some directions. Has anyone implemented the use case described in this lab [Palo Alto Networks: VM-Series Advanced Deployment with site-to-site vpn to onprem?
Question. Which vpc did ...
0
votes
0
answers
36
views
Is it possible to create IPsec VPN tunnel between 2 Azure subscriptions
I have 2 different azure subscriptions for which I want to create a VPN tunnel.
The obvious choice would be to create a VNet-to-VNet tunnel but as I understand this would cost extra resources.
So I ...
0
votes
0
answers
43
views
GCP VPN Tunnel is up, I can see Sent Bytes, but traffic is not reaching the recipient
I am trying to establish a VPN tunnel between a Classic CPN gateway and an on-prem VPN gateway. A requirement for the on-prem gateway is that traffic coming out of my VPN must present as a public ...
0
votes
0
answers
38
views
S2S Vpn Windows 2019
I am trying to set up a S2S VPN with 2 Windows 2019 servers.
Lets say we have a Site A and a Site B.
So I've setup two Windows 2019 server with Routing and Remote Access enabled.
On both sites I added ...
0
votes
0
answers
31
views
IPSec site2site tunnel + vpn
In our research project, we needed to deploy a server "Molly" at another company. They made us set up a IPSec tunnel to their firewall/gateway and from there, the comms are forwarded to our ...
0
votes
0
answers
172
views
Unable to SSH into OpenVPN cloud connector machine over VPN IP
I just started using OpenVPN cloud connectors for creating mesh VPN networks.
I deployed a connector and setup relvant IP forwarding and NAT protocols that allow me to access the LAN network behind ...
0
votes
0
answers
72
views
Unable to join domain from Site-to-Site VPN Server
I work for a small business that is looking to expand to the cloud so that our remote workers can access more of our systems. As a software dev and keen IT enthusiast, I jumped at the opportunity to ...
0
votes
0
answers
58
views
ASUS Merlin OpenVPN Client Route
I am have a established conection between two sites ( VPN Site-To-Site) using Edgerouter (SiteA - 10.0.1.0/24) and a Asus Merlin (SiteB - 10.1.1.0/24).
On RouterB I have the following configurations:
...
0
votes
0
answers
89
views
OpenVPN Site-To-Site with Edgerouter and AsusMerlin
I have two distant places each with a public IP and I want to make the LAN network of these places as if they were one. That is, the machines in SiteA can communicate with the machines in SiteB and ...
0
votes
0
answers
1k
views
Why do we lose IPSec connections and can't re-establish them?
We have tens of IPSec connections between our office and customer sites. At the office we use pfSense V2.4.5 as VPN gateway and placing Ubiquiti Edgerouter X devices with the latest firmware on the ...
0
votes
1
answer
47
views
Connection Two sites
My office is moving and the big concern is about networking. The move will take two months but they need both sides to be operational during that time. The big challenge is our old PBX. Do they need ...
0
votes
1
answer
214
views
site-to-site VPN route traffic through VPN tunnel
Short version: in a site-to-site VPN setup with Strongswan on both sides, how to route particular traffic via the VPN tunnel?
Long version:
We have two Linux (ubuntu 20.04) in AWS, both installed with ...
0
votes
0
answers
75
views
access to on premise S2S Azure connection through P2S
I have the following network configuration.
On premise network : 192.168.13.31
Azure VN : 100.1.0.0/16
Azure vpn gateway : 51.136.4.136
I have S2S IKEV2 connection between on premise and azure. I'm ...
1
vote
1
answer
360
views
unable to ping across strongswan site-to-site vpn in aws
We have two Ubuntu-20.04 servers in aws, different VPC, both installed StrongSwan and have configuration as below (ipsec.conf):
# basic configuration
config setup
# Add connections here.
conn %default
...
1
vote
1
answer
1k
views
UDM Pro Site To Site VPN with Domain Issues
I have 2 UDM Pro firewalls setup with a IPsec site to site VPN, the settings are the same for both VPNs (obviously the destination IPs are reversed for each unit) I can ping traffic with IP addresses ...
0
votes
1
answer
31
views
AWS - Connecting 2 VPC regions bi-directional?
I have 2 VPCs, one in US, one in EU, and each of them have 1 VM.
(IN US there is the Customer GW (set to irish IP) and Virtual Private GW).
I have succesfully connected with openswan from Irish VM,
I ...
0
votes
1
answer
732
views
StrongSwan Linux Client refuses to connect to StrongSwan server
I have a StrongSwan VPN server set up on an Ubuntu 18.04 server, and it is working well. I am able to connect to this VPN from Windows 10 and macOS, and everything works wonderfully. The problem is ...
0
votes
0
answers
194
views
Traffic not passing through the site-to-site VPN Sonicwall (VM on Azure) to Sonicwall on premises
I have created a VPN site-to-site with a Sonicwall NSv on Azure and a TZ400 on-premises. The VPN is ON but the traffic between the two sites does not go through. I am able to ping the X0 (LAN ...
1
vote
0
answers
19
views
Connecting to Client Data Centre using AWS VPN
I have been using AWS for the past 3 years. We have never required to connect to our client data centre using a VPN until recently. I am entirely new to the concept of VPN, however, I have figured a ...
0
votes
1
answer
188
views
Azure webapp: Site-to-Site VPN not working when used with webapp
I have this setup in Azure:
A vnet with address space: 172.16.0.0/16
A subnet with 172.16.1.0/24 named WebAppSubnet and delegated ot Microsoft.Web/serverFarms
A subnet with 172.16.255.0/24 named ...
0
votes
0
answers
36
views
Alias subnetworks with Google Cloud IPSec VPN
My company's infrastructure is hosted on Google Cloud. We'd like to connect a network of one our clients with site-to-site (IPSec) VPN. I've setup one on Google Cloud but we have a problem. Our ...
2
votes
1
answer
121
views
Site-to-site VPN connection between VMs in a private network and remote Linux hosts [closed]
Recently I've faced with a problem - connect multiple VMs running on bare metal servers with Linux hosts in the remote location via the Internet.
Basically, what I need is a simple VPN setup where I ...
0
votes
0
answers
68
views
Connecting two networks on the same range with WireGurard
I have a problem. I need to connect two networks in the same IP range with Site-to-site VPN. Is it possible?
Network #1 (n1) is 192.168.1.0/24 and network #2 (n2) is also in the same range - 192.168.1....
1
vote
0
answers
278
views
Specify outgoing network interface in ipsec.conf for one IPSec tunnel?
I'd like one of my tunnels to go out a particular interface. Is there a way to specify it?
ipsec.conf
conn remotehost.example.org
keyexchange=ikev2
type=tunnel
authby=psk
rekey=yes
keyingtries=%...
0
votes
1
answer
86
views
AWS routing between AZs
There's three subnets:
subnet A on AZ-A, 10.0.1.0/24
subnet B on AZ-B, 10.0.2.0/24
subnet C on AZ-C, 10.0.3.0/24
There's one server on subnet A (10.0.1.50) answering to ping performed via Site-to-...
1
vote
0
answers
118
views
How to map palo alto firewall params to strongswan's ipsec.conf
I have these configs from a partner of mine
How do I match them to ipsec.conf? This is what I have currently.
conn %default
ikelifetime=28800s
keylife=3600s
rekeymargin=3m
keyingtries=...
0
votes
1
answer
64
views
How to streamline connections to my Google Cloud VPN to approved Ip addresses
Please I need assistance on streamlining connections to my cloud VPN as I am a developer with little networking knowledge.
After back and forth with I was able to setup VPN connection from a vendor ...
1
vote
0
answers
24
views
Site-to-Site - Subnet routed to azure firewall but rules are being ignored
I configured a Site-to-Site connection between my Azure VNet and On-Premise firewall.
The connection is working just fine but I'm trying to control the Site-to-Site connection on my Azure Firewall.
I ...
0
votes
1
answer
663
views
OpenVPN routing from server to client
I have two distant places each with a public IP and I want to make the LAN network of these places as if they were one. That is, the machines in place A can communicate with the machines in place B ...
0
votes
1
answer
409
views
How to troubleshoot VPN issues between Azure VPN and VMWare SNX?
I have created Virtual Network Connection (policy based) in Azure.
I have created Connection for Site to Site(IPSec) which connects to VMWare-snx.
Connection status is "Connecting". (Also ...