Questions tagged [vpn]
VPN is the acronym for Virtual Private Network - a network type that uses a the Internet to provide remote networks or single machines with secure access to their organization's network avoiding expensive leased lines.
5,104
questions
-1
votes
0
answers
10
views
How to prevent a remote WireGuard server establishing new connections to on-premises computers?
Goals:
I want to allow all my local traffic to go through a WireGuard
tunnel, so I set my allowed IPs to 0.0.0.0/0.
I want to prevent my VPN provider's server from initiating any connections to my ...
0
votes
0
answers
9
views
How can I set separate phase 1 and phase 2 IPs using AWS Managed IPSec offerring?
I'm trying to setup an AWS Site-to-Site VPN connection that is IPSec based. It seems to be their managed offering. A particular connection I am trying to setup specifies distinct Phase 1 and Phase 2 ...
-1
votes
0
answers
23
views
What's the correct way to set up a network with multiple upstream routers? [closed]
I have a physical network topology that goes from
Modem, to
OPNSense Router (subnet 192.168.0.0/24), to
L2 Managed Network Switch, to
Various LAN clients, including
TP-Link Router (subnet 192.168....
0
votes
0
answers
16
views
Routing is not working using tun2socks? [closed]
Tu2socks Binary & for routing
netsh interface ipv4 set address name="Interface" static 10.0.85.2 255.255.255.0 10.0.85.1
netsh interface ip set dns name="Interface" static 8.8....
0
votes
0
answers
16
views
AWS Site to Site VPN to Kerio Control Phase 2 parsed INFORMATIONAL_V1 request 380820527 [ HASH N(INVALID) ]
I'm setting up a Site-to-Site VPN between my on-premises network and AWS VPC, and encountering an INVALID_ID_INFORMATION error during the phase 2 (Quick Mode) negotiation. The setup involves IPsec ...
0
votes
0
answers
25
views
Restricting Access to Kubernetes Ingress using LDAP and VPN
I'm working on securing access to my Kubernetes cluster, specifically for the domain name xyz.com. Currently, I'm using NGINX Ingress with the nginx.ingress.kubernetes.io/whitelist-source-range ...
0
votes
1
answer
67
views
Route all TCP traffic from port to another host:port [closed]
I have a wireguard config, creating a VPN between a remote server (10.0.1.1) and my local machine (10.0.1.2), so that the server can reach the local machine and vice versa.
I'd like the server to ...
-1
votes
1
answer
50
views
No DNS record or entry in Host file, but can still access IIS site?
We have a VM in azure (with no Public IP), that has a bunch of sites inside the IIS. These sites are only accessible from inside the VM or whilst being connected to our OpenVPN. There is no DNS record ...
0
votes
2
answers
25
views
Exclude local sub-net (local IP ranges)
In my company's VPN app we have a disable-able feature which excludes below List of non-web-site IP-address ranges from being routed into the VPN server.
This allows local-net Apps to continue working ...
-1
votes
1
answer
129
views
How to do VPN split tunneling for urls and IP addresses on Windows 11
On Windows 11 I want any traffic going to long.dns.name.amazonaws.com (DataGrip Redshift connection) and http://n.n.n.n:8000/ (Airbyte hosted on EC2 with an elastic ip) to be routed through my VPN, ...
0
votes
0
answers
14
views
Access home network using WireGuard VPN on public VPS (point-to-site) [migrated]
I don't have a public address at home. However, I would like to access the server at my home from my devices even when I'm not at home.
For this, I want to use a free-tier VPS from Oracle with a ...
1
vote
1
answer
163
views
Port unreachable when wireguard is connected
I have a server that routes all of its traffic through wireguard. When I start the wireguard, all ports listening on this server's public IP are unavailable - even ssh does not work.
What I want is to ...
0
votes
1
answer
27
views
Running wg-quick up wg0 is altering my /etc/wireguard/wg0.conf file
Im using debian 11 server on my VPS, and trying to setup wireguard.
after creating my private and public keys, i create my config file /etc/wireguard/wg0.conf with contents
[Interface]
PrivateKey = [...
1
vote
0
answers
65
views
I can't open X-UI panel address installed on my oracle ubuntu server
I have installed x-ui panel and it shows it's up and running on my server, but when I try to access my server_ip:specified_port_for_x-ui it says connection time out or the site can't be reached.
I ...
0
votes
0
answers
81
views
How to configure MFA for WireGuard VPN
I have a WireGuard VPN on linux to create a secure tunnel to my server and clients.
I want to add MFA functionality for user connections. I would like require entering a security code when connecting....
0
votes
2
answers
41
views
OpenVPN - Properly sharing keys/certificates
I enabled OpenVPN on the router at work so that we can connect to different devices like our NAS and RDP into the computers there without opening those ports to the internet.
One cause of concern that ...
0
votes
1
answer
77
views
Unable to ping other subnet through IPSEC tunnel
I'm configuring an S2S IPSEC VPN tunnel between two Fortigate firewalls.
The tunnel is up and running. Network topology:
When I ping from the LAN interface, which is directly connected to the ...
0
votes
0
answers
27
views
Wireguard connected to multiple VPN peers
I have a wireguard setup which connects my mobile devices with a wireguard instance running in a VPS.
This allows me to access both my internal resources, and the internet, as if I was on the VPS.
The ...
0
votes
1
answer
51
views
Site to Site VPN 4G/5G
We have just set up a new site where internet is currently unavailable so we are using 4G/5G internet which we are unable to get a static IP address for. We use WatchGuard devices for Branch Office ...
-1
votes
0
answers
28
views
Routing all traffic via VPN except SSH tunnel
I have the following idea.
I route all my Windows PC traffic via SSH Tunnel (Dynamic) to my Server.
Then I set up a VPN connection to a remote VPN server.
What I want to achieve is to route all trafic ...
-1
votes
0
answers
40
views
Is it possible to "teleport" an IP address of a Windows 2022 Server, mapping it to a different geographical location?
I have a Windows 2022 Standard server on VPS with several IP addresses. I host several websites with my own CMS system, but I have one site that is owned by an American company. My VPS provider, the ...
0
votes
0
answers
15
views
Google Cloud VPN maintenance
I would like to check when my GCP Cloud VPN underwent to maintenance.
I found docs regarding Cloud VPN Maintenance and availability, but there is noting about checking when this event occurred.
Is it ...
0
votes
0
answers
48
views
NRPT via GPO while using Always On VPN NRPT
I have a working Always On VPN Profile deployed using the ProfileXML implementation of automatic NRPT to the local device configuration:
<DomainNameInformation>
<DomainName>.example....
0
votes
0
answers
34
views
VPN netmap multiple sites with same LAN network address
I have some issues applying netmapping to a case for which I could not find much info about on the web.
I am trying to set up a VPN network (server ip: 10.1.0.1) where a user (VPN IP: 10.1.0.2) can ...
0
votes
1
answer
40
views
No internet connection after setuping OpenConnect server on ArchLinux
ip tuntap add mode tun dev vpn0
ip addr add 192.168.2.2/24 dev vpn0
# systemctl restart ocserv
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 8443 -j ACCEPT
iptables -...
0
votes
2
answers
76
views
in wireguard there is no access to some dns
I am implementing a docker with wireguard on a Linux ubuntu20.04 server as it says in its official documentation at https://github.com/linuxserver/docker-wireguard The clients cannot access certain ...
0
votes
1
answer
199
views
Dockerized http services are not accessible from nordvpn meshnet
I am setting up a home server (using ubuntu server 22.04) with several services deployed on various ports.
For example, my homepage server is deployed on port 3000.
When on the local network:
Ssh ...
0
votes
1
answer
61
views
ocserv VPN with 2 NIC CentOS6 routes
I have a working installation of ocserv 0.12.6 on an old CentOS 6 machine with 2 physical interfaces: eth0 (192.168.10.155) and eth1 (192.168.0.190).
eth0 has a manual configuration and uses default ...
0
votes
1
answer
119
views
Digital Ocean Firewall Prevent VPN Client Connectivity
Info: I have the below setup, connecting my digital ocean environment to my local network. Using strongswan on the Network A gateway I've made a site to site VPN connection with my meraki on Network B....
0
votes
2
answers
94
views
Computer can't join AD over point-to-site VPN to domain controller VM in Azure
Error indicates DNS problem but all diagnostics indicate it is working fine.
The following error occurred when DNS was queried for the service
location (SRV) resource record used to locate an Active ...
0
votes
1
answer
109
views
Local DNS not resolving when connected to work VPN on Windows 11
I have an issue on Windows 11 that I haven't had on Windows 10.
When I connect to my work VPN I can't reach my home servers that are on the same subnet as my pc via domain names.
If I use ping "...
0
votes
1
answer
90
views
OpenVPN client doesn´t connect to OpenVPN server
I followed the guides provided by two youtube videos, Install and Configure OpenVPN Server in Windows PC and how to Install & Setup OpenVPN on windows 10, step by step. However, client doesn´t ...
0
votes
0
answers
21
views
Is iptables NAT forwarding possible bewteen two libvirt VMs?
I'm building a test VPN setup using two libvirt VMs with StrongSwan
IKEv2 but can't get traffic to forward. I can see the client sending
traffic to the server using tcpdump but the server doesn't do
...
0
votes
0
answers
28
views
L2TP over IPSec VPN established successfully on main router/firewall, how to access second layer router and its devices?
I apologize if the question doesn't make a lot of sense. Let me explain.
I have two routers with a setup like this:
ISP-provided modem configured as bridge mode, connected to a TP-Link router TL-...
0
votes
0
answers
15
views
Access and restrict organization pages in client network
Im working on a sonarqube project for .net code which needs to be built to run the scan. However due to dependency issues, I'm planning to have the sonarqube set up (which runs on my organization VPN) ...
-1
votes
1
answer
119
views
My Hyper-V vm doesn't have internet connectivity after installing NordVPN
Like the title says, after I installed nordvpn my VMs don't connect to the internet. I tried disabling NordVPN completely and restarting my machine but the problem still persists. My VM is connected ...
0
votes
0
answers
16
views
Issue with passing OpenVPN connection from Raspberry Pi device to only one particular device in subnet
I'm trying to figure out, how to pass OpenVPN connection to device from Raspberry Pi
There is openVPN connection set up on Raspberry Pi. Also pi-hole is set up for the whole network via main gateway (...
0
votes
0
answers
71
views
Keepalived VIP with WireGuard VPN
When WireGuard and KeepAlived are configured, VIP Switches between VPNs.
There is a connection at address 10.0.0.X between the VPS,
But when I try to contact via VIP I get an error.
ChatGPT Advises ...
0
votes
0
answers
28
views
Site-to-site VPN jump through 2 tunnels
I have 3 networks like on the below diagram:
network
Subnet A: 10.0.1.0/24, public IP of VPN Gateway: 55.0.0.1
Subnet B: 172.30.0.0/24, public IP of VPN Gateway: 66.0.0.1
Subnet C: 172.20.0.0/24, ...
0
votes
0
answers
139
views
How to forward Wireguard traffic to shadowsocks by provided urls?
I have 2 servers on separate hosts: wireguard and shadowsocks. They work as expected.
Wireguard server config in docker container (0.0.0.0:51821->51821/tcp, :::51821->51821/tcp, 0.0.0.0:51820-&...
0
votes
0
answers
23
views
RDP Issues after docker update
I'm using Docker Containers with VPN Images which do a portforwarding. I'm connecting to the container published ports via RDP. After running this update
containerd.io/bookworm 1.6.27-1 amd64 [...
0
votes
1
answer
63
views
Reissuing AD certificate breaks Always On VPN
Reissuing AD certificate breaks Always On VPN.
We needed to update our AD CA to have a longer key length and an improved signing algorithm.
This works fine and we are able to issue new certificates ...
0
votes
1
answer
48
views
error connecting to open vpn from my server
i'm connecting to an open vpn server but i dont know why i does not connect.
i use this commend:
sudo openvpn ./config.ovpn
here is the output:
Sun Jan 21 11:11:10 2024 us=434468 Re-using SSL/TLS ...
0
votes
0
answers
144
views
Docker Swarm nodes on different subnets
I'm trying to setup a docker swarm between two computers I have at home and a VPS, the configuration is the following:
Manager ip: 192.168.1.132/24
Manager second ip: 192.168.100.1/24 (VPN)
...
1
vote
3
answers
58
views
How to select what LAN port to use with VNC, ping, or another apps?
See image to get info how is my network built:
I do have office network 192.168.1.0/24 connected through router/NAT to internet. My PC has TWO LAN ports: the main has address 192.168.1.50, and the ...
0
votes
0
answers
49
views
Unable to acces on some websites when connected to VPN IKEv2 server from linux
I have a VPN server hosted on Windows 2019 and configured on IKEv2,
Everything works very well from all clients, however on Linux clients I have one last point to adjust, so for clarification I use ...
0
votes
0
answers
21
views
Best mechanism for access control to AWS / Cloud Resources for remote users
We use Cloud solutions such as AWS and Azure, so frequently access EC2 instances, AWS Workspaces etc.
These cloud resources are only accessible to a static public IP address. So our employees use ...
0
votes
1
answer
87
views
Connect to Google Cloud SQL on VPN
I'm new to Google Cloud, and I am currently writing a script to connect to a PostgreSQL instance hosted in Cloud SQL.
My script is very simple: it should connect to the Postgre instance and create a ...
2
votes
0
answers
430
views
AWS VPN Client - "Unknown error ocurred. Try again"
I'm experiencing a persistent issue with the AWS VPN Client and need some assistance. Despite numerous troubleshooting attempts, I'm unable to establish a connection and fail even before reaching the ...
0
votes
0
answers
41
views
SSL_VPN SRV record entry?
I am setting up a certificate for an SSL VPN on a sonicwall device the certificate is valid and appears as such when inspected but its still seen as untrusted since the VPN sign in is through an ...