Questions tagged [vpn]
VPN is the acronym for Virtual Private Network - a network type that uses a the Internet to provide remote networks or single machines with secure access to their organization's network avoiding expensive leased lines.
5,073
questions
0
votes
0
answers
10
views
Issue with AWS Client VPN on AWS Workspace connecting to the internet
I have a Ubuntu AWS Workspace. On it I connect to my VPC using AWS Client VPN. This allows me to access local resources but the public internet doesn't work. When I am not connected to using the AWS ...
- 317
-1
votes
0
answers
15
views
DNS timeouts between Hetzner Cloud VMs and Azure private DNS
I have asked the same question already on networkengineering.stackexchange.com, but it might be that it was not the right place to ask. so i was referred here.
We have the following setup
There are ...
0
votes
0
answers
27
views
Is there a significant difference when virtualizing a VPN server?
Basically, my question is this: I have a "server"(a regular PC) with Debian installed. On this machine, I need to have a Tomcat service running at the same time as a VPN server service.
To ...
0
votes
1
answer
46
views
Can't resolve private domains using bind9 with Wireguard VPN connection
I have a VPS with static external IP and Ubuntu 22.04. I configured the Wireguard VPN connection to my server tunneling all traffic through VPS. I also have UFW enabled. I want to resolve some domains ...
-2
votes
1
answer
30
views
VPN Client on Laptop and Router [closed]
I'm trying to setup a vpn client connection (Surfshark) using two different configurations to unblock some OTT content.
VPN Client on Laptop:
I'm using OpenVPN 2.4.12 (to be in consistent with router ...
- 105
0
votes
0
answers
14
views
How can I troubleshoot why packets aren't coming back from Hyper-V host to guest?
I have a Win11 host ("Host") running Hyper-V and I have a Win10 guest ("Guest"). My Win11 host may connect to the Internet via Cisco AnyConnect VPN.
Without VPN connected, Internet ...
- 131
0
votes
1
answer
48
views
VPN on Linux - IP routing issue
I got the following scenario:
an ubuntu server 20.04 lts, for simplicity named A server with the following network interfaces:
loopback
enp1s0 (wan) PUBLIC-IP/23
enp8s0 (lan) 10.9.96.3/20
ppp0 (l2tp) ...
0
votes
0
answers
50
views
RRAS IKEv2 MacOS 13.4.1 unable to connect since upgrade to Ventura
I encountered a problem when trying to connect to a VPN server configured in IKEv2 from MacOS (Ventura 13.4.1) on a fresh install.
The VPN server is a RRAS hosted in a Windows server 2019, its ...
0
votes
0
answers
46
views
Very strange behavior of OpenVPN between two sites
We've got a OpenVPN configured with layer2.
It is connected to a BGP router which announces a /24 IPv4 and a /29 IPv6. The purpose of the VPN is to redistribute IPv4 and IPv6.
However, recently I have ...
0
votes
1
answer
29
views
Best Practices for Setting Up Multiple OpenVPN Instances for Different Clients
I'm working on a project where I need to set up OpenVPN instances to connect IoT devices from various customers to a central server. Each client should have its own isolated VPN connection. I'm ...
- 3
-1
votes
0
answers
38
views
Access Ubuntu OpenVPN Client From Other Machines on Local LAN
I have an OpenVPN client running on an Ubuntu machine (192.168.107.1/24) and able to successfully connect to a remote OpenVPN server (10.0.0.1/24). The problem is when the client is connected, other ...
- 9
0
votes
0
answers
29
views
sometimes, vpn connection doesn't work on ipsec(strongswan) configuration
I'm using ipsec with strongswan between aws and on-premise
here is strongswan configuration
config setup
uniqueids = no
charondebug="ike 1, knl 1, cfg 0"
conn %default
ikelifetime=...
- 1
-1
votes
0
answers
31
views
Setting up tunneling for docker containers
I want to use wireguard to restrict access to my containers. I have a couple of services running on the host (which is behind a NAT) and has the IP 192.168.206.35.
So I setup wireguard and able to ...
- 17
0
votes
1
answer
44
views
Is it possible to setup a VPN that passes multiple ports through a single port tunnel?
I am looking to set up a VPN (possibly OpenVPN) to allow a computer connected to the internet through a restricted university network to connect to the wider internet through my home network.
My ...
0
votes
0
answers
26
views
CA-Certificate and Server Certificate are expired! - openVPN - Server <--> Client(x)
I am hosting an openVPN-Service to connect ~30 IoT-Clients directly to my Server. I have forgoten to extend the lifetime of the self-signed ca.cert and the server.crt. Now my openVPN-Clients could not ...
- 3
0
votes
0
answers
16
views
self signed for a site accessible through VPN
I'd like to know if what I'm doing is right or is there another way to do this?
I have this site that is accessible through VPN and i'd like the end users not to see the "not secured" ...
- 11
0
votes
0
answers
15
views
Sporadic loss of connection to internet when connected through corporate VPN
I've had this prolonged issue where my internet connection disconnects every now and then, but only when I'm connected through my corporate VPN outside of my office.
Internet connection through WiFi ...
- 1
0
votes
1
answer
42
views
Android .sswan profile to ipsec.conf
I have a .sswan profile with an embedded cert and username/password from a server admin. It connects to a Watchguard VPN without any issues. I was told by the server admin I can connect with my ubuntu ...
- 121
0
votes
0
answers
14
views
Assign same static IP to a Windows 2003 VPN client connection
Every time a domain user is using our Windows VPN to connect to the company network a new IP from a range is taken. This range is configured in a Windows 2003 Server. Because we have applications that ...
- 13
0
votes
0
answers
22
views
How to set up an IPSec VPN with failover on linux without virtual IP?
I need to set up a VPN connection using IPsec between a client system and our Linux server. There shall be a fallback in case of failure of the VPN endpoint, i.e. some sort of automatic failover.
From ...
0
votes
1
answer
47
views
self signed certificate for a site that can only be access through VPN
I read a lot of articles about self signed certificates and I'm not exactly sure if I'm getting near to what I want to actually achieve.
I'm trying to implement a self signed certificate so that the ...
- 11
0
votes
0
answers
27
views
Sonicwall SSLVPN Default Gateway Not Being Set
I am setting up a SonicWall SSLVPN on SonicOS 6.5 and am having issues with the default gateway being handed out to the client. When setting up the VPN I created an SSLVPN network (10.10.0.0/24). I am ...
0
votes
3
answers
109
views
Zscaler as a router
Is it possible to install zscaler on virtual machine (e.g. linux), and use that machine for accessing only few hostnames? I would point other machines to go via this virtual machine only for those few ...
0
votes
0
answers
37
views
AWS Site-to-Site VPN logging not working
Anyone encountered a problem where logging to CloudWatch for Site-To-Site VPN isn't working even though logging is enabled?
The only log file that is created is one with the title "...
- 1
0
votes
2
answers
36
views
IPTables: introduce a policy for a chain so that I can maintain the drop policy/rule without having to delete it when I need to add a new accept rule?
Say I have a chain introduced with iptables -N SERVICES-VPN.
But then I want this chain to drop everything... so iptables -A SERVICES-VPN -j DROP.
The problem here is that I may need to add rules ...
0
votes
0
answers
52
views
IPSec VPN Windows 10 Client Not Working - SOLVED
After 3 days of banging my head against the keyboard, I finally came up with a solution that allows my Windows 10 Professional built-in VPN client to connect to my Linux IPSec VPN server using EAP and ...
0
votes
2
answers
89
views
Best way of implementing a VPN for remote device management
Looking for thoughts on how to proceed with our remote management of hardware.
We deploy MileSight LoraWan UG65 gateways at our customers.
The tooling Milesight themselves provide for remote ...
- 1
0
votes
0
answers
31
views
Wireguard peer rejecting traffic
My Wireguard setup randomly stopped working yesterday and I don't know how to trace the source of the problem.
I inspected the traffic with Wireshark and it shows that the traffic gets sent from the ...
0
votes
1
answer
133
views
Ping and mDNS over WireGuard not working
When running through WireGuard VPN tunnel from outside the network, I can access machines inside directly via IP. For example, hitting IP of PiHole box in a browser returns the PiHole UI. I can also ...
0
votes
0
answers
77
views
Multiple Site-To-Site VPNs to one OpenVPN Server
I am struggling to setup multiple site-to-site vpns.
I have 3 sites:
Site A: OpenVPN Server, inside OPNsense, IP Ranges: 192.168.10.0/24
Site B: Asus Router with Fresh-Tomato, IP Ranges: 192.168.20.0/...
- 101
0
votes
0
answers
95
views
how to set up eat /etc/pam.d/radiusd file to authenticate a user with his username, password and Google Authenticator token. Using Freeradius for 2FA
i have a problem about configuring the “/etc/pam.d/radiusd” file.
I am working on a Linux Debian System.
rn this is my configuration:
auth requisite pam_google_authenticator.so forward_pass
auth ...
0
votes
0
answers
33
views
iptables - How do I restrict access to just local devices on the network?
I have asked this question on SuperUser but the only response was from someone who I was unable to understand
I have a WireGuard VPN Server running on a Debian 12 host with no problems, listening on a ...
0
votes
0
answers
67
views
OpenVPN Site-to-Site Routing
I've been trying to set up an OpenVPN site-to-site tunnel for 2 days and I'm currently stuck with the following problem. :/
With the current configuration I can reach all servers in the client network ...
0
votes
0
answers
17
views
Securing VPN access using the Always On Technology or 3rd party VPN clients?
I'm using Hybrid Azure AD Join for all my Windows 10 & 11 Workstations, but not for the Windows Server OS.
So rather than manually deploying the 3rd Party VPN client to each workstation, can I use ...
- 1,275
0
votes
0
answers
68
views
Stuck on OpenVPN Server with PiVPN: Can't Access GUI or SSH on PLCs – Need Guidance
I'm venturing into a bit of uncharted territory for me and need some assistance. I'm working on setting up an OpenVPN server on a Raspberry Pi using PiVPN, aiming to connect my work laptop remotely to ...
- 1
0
votes
0
answers
148
views
Windows native client not connecting to IKEv2 EAP VPN
We are investigating the possibility of replacing pfSense/opnSense with Mikrotik for our office routers. Our current routers provide site-to-site tunnels between locations, as well as RADIUS-backed ...
- 940
-1
votes
2
answers
53
views
OpenVPN headless on Debian 11.7 IP does not change
I have a ProtonVPN paid account.
I want to use it on my VPS server (so in headless), to change my ip.
Their client does not work in headless mode, so I use OpenVPN.
I download the Linux config file on ...
- 99
0
votes
0
answers
20
views
VPN route establish connection failed
I am traing to connect from my VPN from work to home but it is failed (my real address is not 12.12.12.12 I chaneged it here).
initiating Main Mode IKE_SA Note8[3] to 12.12.12.12
generating ID_PROT ...
0
votes
1
answer
30
views
VPN server+client without client-specific settings
I have SBCs with Debian. These SBCs will send data to server (using e.g. REST), but I want to secure the connection using some VPN/tunnel and I want also to be able to remote access the SBCs for ...
- 1
0
votes
1
answer
74
views
MITM attacks inside VPN network?
Is it possible to use any MITM attacks (including ssh-mitm) if I'm connected to a VPN? OpenVPN connects me via tun0 interface with some IP in 10.0.0.0/8 and gateway at some IP 10.0.0.0/8. I know that ...
1
vote
0
answers
84
views
VPN access issue
==Summary==
I installed "Routing and Remote Access" role on Windows Server 2016 so I can use it as a VPN gateway(L2TP/IPsec with pre-shared key). The authentication is handled by a RADIUS ...
- 11
1
vote
1
answer
71
views
WireGuard default route in AWS ECS container
I have a container inside an AWS ECS instance.
I want to establish a connection to a WireGuard server from that container.
The connection itself works but I have issues with routing all the traffic ...
- 111
0
votes
1
answer
80
views
How can I SSH locally into a server that is using a VPN?
How can i access locally through ssh to my orange pi that is running under a vpn provider?
I attach a draw how it is build the infrastructure, it's a simple hose connection.
The orange pi has a static ...
- 1
0
votes
0
answers
97
views
openvpn - iptables or nftables
Iptables has been around for a long time, but nftables seems to be picking up steam. I've noticed in newer distributions of Kubernetes images (aws, etc) no longer have the iptables kernel module baked ...
- 133
0
votes
0
answers
258
views
Wireguard Site-to-Site connection in Docker ping working but TCP not
I am quite desperate. I am trying to get my site-to-site vpn setup working, but no luck so far. Please don't judge me, I am quite new to the routing problematic.
I have a VPS with a public IP 123.456....
- 1
0
votes
1
answer
119
views
WireGuard config protection
I want to set up WireGuard in the corporate network instead of OpenVPN. How can the client's config be protected from theft or loss? If the client's config falls into the wrong hands, then attackers ...
- 1
-1
votes
1
answer
42
views
Built-in Windows VPN PPTP not working for user
I am trying to setup a built in Windows VPN PPTP for a client on their laptop, and when it tries to connect to their VPN server it fails with VPN error 806.
I've enabled GRE protocol and opened TCP ...
- 1
0
votes
0
answers
106
views
How to realize a user-based bandwidth throttling in VPN or Proxy server
I created my own VPN or proxy server on a rented Ubuntu server. For example it may be an OpenVPN server with Pritunl or a Wireguard server with wg-easy or wg-install or firezone installation script.
...
- 11
0
votes
0
answers
39
views
Internet Forwarding
I am looking for Internet Routing. Right now we have 2 offices one in Germany and One in Dubai. Everyone is connected through VPN Tunnel of the German office. The German office wants to connect to our ...
- 1
0
votes
1
answer
199
views
ipsec/strongswan - tunnel is up, traffic is sent and received but replies are ignored
I need some help, I set up a strongswan IPsec tunnel with ESP and IKEv2, the tunnel is UP and remote sees packets coming and answers them, but my server is ignoring? answers.
The tunnel is between my ...
- 1