Questions tagged [site-to-site-vpn]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
28 views

Ipsec clear text password

Apologies in advance as my knowledge is limited in IPsec VPN tunnel with StrongSwan. I am running VPN client from my OpenSuse 15.4 server to connect to a client. ipsec.conf My Shared key in ipsec....
nido's user avatar
  • 1
0 votes
0 answers
14 views

Iptsbles site to site vpn

I have installed strongswan site-to-site vpn,thats working fine. On server I have configured iptables with this commans iptables -t nat -A POSTROUTING -s 10.9.141.0/24 -d 10.10.27.0/24 -j MASQUERADE. ...
Dave's user avatar
  • 13
0 votes
0 answers
64 views

redundant VPN connections over Expressroute private peering

I have configured redundant VPN connections over expressroute private peering with private IPs. BGP is configured making router 2 backup using BGP as-path. Wondering how the traffic is sent back to on-...
MatB's user avatar
  • 1
0 votes
1 answer
123 views

Troubleshooting AWS S2S VPN connection with on-prem network

I am trying to set up a VPN connection between our AWS servers and a 3rd party network. The VPN tunnel in itself is active, but network calls are timing out. The setup: EC2 instances in private ...
BlackDog's user avatar
0 votes
0 answers
21 views

Unable to receive TCP packets larger than VPC MTU on Google Compute Engines (Redis Client)

This seems to be network issues between Redis cluster (Deployed on our site's on-prem worker node) and Redis client (On GCP VM that is connected to our site via Cloud VPN). Specifically, the issue is ...
Sung-IL's user avatar
1 vote
0 answers
38 views

Multiple S2S Connections for Azure

I’m confused by all of this and need help. I setup an Azure S2S tunnel from Azure to my On Prem DC. This is for AD and AAD to sync. We have a new billing system coming in and the only way they’ll ...
EastCoast2234's user avatar
0 votes
0 answers
45 views

AWS to pfsense site-to-site vpn

First of all, am a pfsense and AWS noobie, and this is my first big task on either system. After creating a Site-to-site vpn between my PFsense andAWS instance, i can see the connections is ...
Saptronic's user avatar
0 votes
0 answers
86 views

Site to site IKEv2 VPN between two Windows Server 2012 R2 machines only working in one direction

We are trying to set up a Site-to-Site VPN with IKE v2 using Windows Server 2012 R2 machines as the tunnel endpoints on each end. We are able to PING and get replies in one direction, but we are not ...
Gene Joy's user avatar
0 votes
1 answer
365 views

forward all traffic to another machine using reverse ssh

I have the following scenario Local Network | ...
Arash Sadeghizadeh's user avatar
0 votes
0 answers
31 views

TCP Session drops because of FIN signal

I have two servers communicating with each other through ISO 8385 messages over TCP sessions. Basically host-to-host interface between two payment switches. The problem is that the session keeps ...
Mohammed Tellesy's user avatar
-1 votes
1 answer
20 views

Can I connect two vpc's with one site to site vpn in same region?

I currently have one site to site vpn connected to one vpc. I want to add a vpc here(It's the same region), but I want to connect the on-premise network connected through site to site vpn through site ...
john_smith's user avatar
0 votes
0 answers
204 views

Setting up site to site VPN with IKEv2 on Windows Server 2012 R2

We are trying to set up a site to site VPN on Windows Server 2012 R2 with IKE v2. It was originally set up for IKE v1 but our partner no longer supports IKE v1. The parameters are as follows: Phase ...
Gene Joy's user avatar
0 votes
1 answer
148 views

Forward virbr0 (VM) traffic through IPSec tunnel

I have a virbr0 interface, created by libvirt with inet 10.1.2.1 netmask 255.255.255.0 broadcast 10.1.2.255 There's an active IPSec tunnel with leftsubnet=10.1.2.0/24 rightsubnet=192.168.160.0/20 ...
Jochen's user avatar
  • 137
0 votes
0 answers
70 views

Routing connection to Azure DB through StrongSwan IPSec site-to-site tunnel

I have a Linux Strongswan IPSec site-to-site connection up and stable to an Azure Cloud Network, I'm trying to route an sql connection with a python script through the tunnel to an Azure database in ...
Jason is a robot's user avatar
0 votes
1 answer
46 views

ipSec VPN configuration, VLANs advertised

We are in the process of setting up an ipSec VPN between 2 locations. There are various encryption methods, algorythms and preshared keys to set up. Network1 will have access to specific VLANs on ...
aristosv's user avatar
0 votes
0 answers
526 views

Can't ping or traceroute through EC2 using AWS Site-to-Site VPN to Cisco ASA

My VPC is connected to Cisco ASA, tunnel is shown to be UP in the AWS console. What is working: The engineer on the Cisco side has successfully pinged my EC2 instance within my private 10.5.0.0/17 ...
MarkK's user avatar
  • 101
0 votes
0 answers
106 views

Pull image in AWS EKS cluster from on-prem Docker proxy server protected by VPN

I have a kubernetes cluster in AWS EKS. From the cluster, I need to pull Docker images from an on-prem proxy server. When pulling the images from my local machine, I must create a VPN connection to ...
Michael Harris's user avatar
0 votes
0 answers
113 views

IP Tunnel - First router is not sending traffic to the second one

I'm a beginner when it comes to Mikrotik . I'm trying to run an IP tunnel between 2 RouterOS . First Router is set up as PPTP and L2TP server and clients can connect and use the internet but what I ...
Mr Pro's user avatar
  • 33
0 votes
0 answers
140 views

What does it mean if I don't receive a SMB Negotiate Protocol Response from server?

What does it mean to not get an SMB Negotiate Protocol Response from server? Unable to mount fileshare drive (a third-party fileshare outside Azure). The architecture is similar to this one: https://...
Mel J's user avatar
  • 1
1 vote
2 answers
78 views

VPN integration with a 3rd party Cisco device

Apologies if this set-up makes no sense. It makes no sense to me, but any assistance is greatly appreciated. Background I have a Payment provider who requires me to provide 2 IP addresses, and ...
Iain Ballard's user avatar
0 votes
0 answers
57 views

How do I connect aws private network to 3rd party private?

My plan was to connect a 3rd party private using AWS's site to site VPN service. However, in the process of creating the customer gateway of the site to site vpn, I cannot enter the IP address for ...
Joker's user avatar
  • 1
-1 votes
1 answer
102 views

Best options for connecting to IPSec tunnel, outside of firewall?

A company I am working with is providing an IPSec VPN tunnel to their network for access to some of their systems. To my understanding, IPSec tunnels are typically configured through firewalls. The ...
GeekGeek4's user avatar
0 votes
0 answers
25 views

Navigating to a host on the other side of a site-to-site vpn [from EC2 instance to a host on the local network]?

Hey gang! First question on serverfault so dig in wherever you can. Also relatively new to networking in general. The issue I believe I'm running into IP routing isn't bringing me across the VPN (...
hasn't read the book's user avatar
1 vote
0 answers
458 views

UDM Pro Site-to-Site VPN issues

I just got the UDM Pro and got to setting up the Site-to-Site VPN. Everything seems to work, but I'm unable to add all 3 redundant subnets that I've got set up in my AWS VPC. It works fine with a one, ...
vdemcak's user avatar
  • 11
0 votes
0 answers
814 views

Issues configuring strongSwan client on AWS instance for site-to-site VPN

I am trying to setup a IPSec VPN client on a debian-10 AWS instance. Unfortunately, I do not have access to the VPN server as it is configured by another party, so all I know is they told me it is ...
deann's user avatar
  • 101
0 votes
1 answer
164 views

Can I add "firewall rules" to an AWS VPN connection?

i need to connect a couple of customers to an AWS VPC via VPN. requirements: no customer may send data (or best: even "see") another customer they should only be able to "see" ...
flypenguin's user avatar
1 vote
1 answer
258 views

AWS Site-to-Site VPN ping working, TCP not

I want to establish a site-to-site IPsec VPN connection between an AWS EKS-Kubernetes-Cluster and a server from a different provider using AWS Site-to-Site VPN. Pings get through the VPN, but TCP ...
Talinx's user avatar
  • 11
0 votes
1 answer
71 views

IPSec Netgear BS200 and Linksys LRT214 - Can't reach devices

I have set up the first time an IPSec site to site tunnel. The tunnel is up and running from a Netgear BR200 and the Linksys LRT214 Router. Network 1 has 192.168.100.x and the Network 2 has 192.168.1....
chrisonline's user avatar
0 votes
1 answer
1k views

AWS Site-to-Site VPN with BGP - how routes are advertized via BGP?

I've configured redundant site-to-site VPN between AWS and GCP with 2 VPN connections, 4 tunnels and BGP dynamic routing. Everything works, all good, servers on both sides of the tunnels can reach ...
Dmitry's user avatar
  • 11
1 vote
0 answers
2k views

Strongswan: {parsed IKE_SA_INIT response 0 [ N(NO_PROP) ]} and {recieved NO_PROPOSAL_CHOSEN notify error}

I am getting the feeling that I have just done somethign very silly on my end but I have no idea what is going on. For context, I have been using wireguard for a bit and am much more knowledgable than ...
Kyle Champoux's user avatar
0 votes
1 answer
197 views

Two DCs at home office, one remote office...DNS resolution?

Our main office has two domain controllers (Windows Server 2016), shown as one below for simplification. I'm bringing up a remote office, with a firewall at each location. I'm trying to keep the ...
JeffR's user avatar
  • 113
0 votes
2 answers
1k views

How is IPsec (strongswan) working without opening ports in UFW?

I needed to setup a site-to-site VPN between servers A and B, where server A is being managed by me and server B is being managed by a client. Server A is running Ubuntu 20.04 and I am using ...
Ashish's user avatar
  • 165
0 votes
1 answer
69 views

Best way to set the network infrastructure - Windows Server (AD, DHCP, DNS) + Router + VPN + Load Balance

First of all, I'd like to say I really like working with networks and managing computers, but I do it as a hobby. I'm not really a professional and only do it for my own things as I love learning ...
Charles Tomazini's user avatar
1 vote
2 answers
655 views

Why is my Azure VPN Gateway-NAT rule not working?

I have a very simple scenario, Azure Vnet with a subnets 10.140.1.0/24 (GatewaySubnet, SKU=Gw2 gen1) and 10.140.10.0/24 (VirtualMachineSubnet). Then an OnPrem network with 10.190.0.0/16. I have a ...
user2713516's user avatar
1 vote
0 answers
202 views

How to forward traffic from 2 On-prem branches to eachother via Azure VPN Gateway

I have 2 scenario's that I am trying to solve in my Azure network environment. In both scenario's OnPrem-branch1 needs to connect to OnPrem-branch2 via my own Azure virtual network. I have Azure ...
user2713516's user avatar
0 votes
1 answer
358 views

Connecting Azure Site-to-Site VPN to On-prem Gateway with 2 public IP's

I have a cisco ISR on-prem with 2 endpoints (primary and secondary) and I want to connect my Azure VPN Gateway to both endpoints through a single connection (same local address space for both IP's). ...
user2713516's user avatar
0 votes
0 answers
32 views

How do I get onsite DNS to communicate with Azure VNet DNS?

We have an S2S and our DNS server in Azure can talk with the Azure VNET DNS, however our onsite DNS server cannot because of a routing issue I think. What configuration do I need to change so that ...
naps1saps's user avatar
  • 177
1 vote
0 answers
123 views

Site 2 Site VPN with ipv6

I have a Site 2 Site VPN running, based on IPv4. So I have 2 Networks, both connected via a router to the internet. The ISP provides a public IPv4. The 2 networks have the following IPs A: IPs 192.168....
Chris's user avatar
  • 131
0 votes
0 answers
106 views

GCP VPN Tunnel is up, I can see Sent Bytes, but traffic is not reaching the recipient

I am trying to establish a VPN tunnel between a Classic CPN gateway and an on-prem VPN gateway. A requirement for the on-prem gateway is that traffic coming out of my VPN must present as a public ...
Paul's user avatar
  • 1
0 votes
0 answers
117 views

S2S Vpn Windows 2019

I am trying to set up a S2S VPN with 2 Windows 2019 servers. Lets say we have a Site A and a Site B. So I've setup two Windows 2019 server with Routing and Remote Access enabled. On both sites I added ...
Chris's user avatar
  • 131
0 votes
0 answers
54 views

IPSec site2site tunnel + vpn

In our research project, we needed to deploy a server "Molly" at another company. They made us set up a IPSec tunnel to their firewall/gateway and from there, the comms are forwarded to our ...
Szymon's user avatar
  • 1
0 votes
0 answers
392 views

Unable to SSH into OpenVPN cloud connector machine over VPN IP

I just started using OpenVPN cloud connectors for creating mesh VPN networks. I deployed a connector and setup relvant IP forwarding and NAT protocols that allow me to access the LAN network behind ...
Rafay Khan's user avatar
0 votes
0 answers
160 views

Unable to join domain from Site-to-Site VPN Server

I work for a small business that is looking to expand to the cloud so that our remote workers can access more of our systems. As a software dev and keen IT enthusiast, I jumped at the opportunity to ...
spovelec's user avatar
  • 101
0 votes
0 answers
3k views

Why do we lose IPSec connections and can't re-establish them?

We have tens of IPSec connections between our office and customer sites. At the office we use pfSense V2.4.5 as VPN gateway and placing Ubiquiti Edgerouter X devices with the latest firmware on the ...
CodeNinja's user avatar
  • 295
0 votes
1 answer
53 views

Connection Two sites

My office is moving and the big concern is about networking. The move will take two months but they need both sides to be operational during that time. The big challenge is our old PBX. Do they need ...
Newbie's user avatar
  • 1
0 votes
1 answer
496 views

site-to-site VPN route traffic through VPN tunnel

Short version: in a site-to-site VPN setup with Strongswan on both sides, how to route particular traffic via the VPN tunnel? Long version: We have two Linux (ubuntu 20.04) in AWS, both installed with ...
Cal's user avatar
  • 189
1 vote
1 answer
713 views

unable to ping across strongswan site-to-site vpn in aws

We have two Ubuntu-20.04 servers in aws, different VPC, both installed StrongSwan and have configuration as below (ipsec.conf): # basic configuration config setup # Add connections here. conn %default ...
Cal's user avatar
  • 189
1 vote
1 answer
2k views

UDM Pro Site To Site VPN with Domain Issues

I have 2 UDM Pro firewalls setup with a IPsec site to site VPN, the settings are the same for both VPNs (obviously the destination IPs are reversed for each unit) I can ping traffic with IP addresses ...
David's user avatar
  • 11
0 votes
1 answer
75 views

AWS - Connecting 2 VPC regions bi-directional?

I have 2 VPCs, one in US, one in EU, and each of them have 1 VM. (IN US there is the Customer GW (set to irish IP) and Virtual Private GW). I have succesfully connected with openswan from Irish VM, I ...
Wojtas.Zet's user avatar
0 votes
1 answer
2k views

StrongSwan Linux Client refuses to connect to StrongSwan server

I have a StrongSwan VPN server set up on an Ubuntu 18.04 server, and it is working well. I am able to connect to this VPN from Windows 10 and macOS, and everything works wonderfully. The problem is ...
deltamind106's user avatar

1
2 3 4 5
10