Questions tagged [vpn]
VPN is the acronym for Virtual Private Network - a network type that uses a the Internet to provide remote networks or single machines with secure access to their organization's network avoiding expensive leased lines.
5,072
questions
-2
votes
1
answer
30
views
VPN Client on Laptop and Router [closed]
I'm trying to setup a vpn client connection (Surfshark) using two different configurations to unblock some OTT content.
VPN Client on Laptop:
I'm using OpenVPN 2.4.12 (to be in consistent with router ...
- 105
0
votes
0
answers
14
views
How can I troubleshoot why packets aren't coming back from Hyper-V host to guest?
I have a Win11 host ("Host") running Hyper-V and I have a Win10 guest ("Guest"). My Win11 host may connect to the Internet via Cisco AnyConnect VPN.
Without VPN connected, Internet ...
- 131
0
votes
1
answer
40
views
VPN on Linux - IP routing issue
I got the following scenario:
an ubuntu server 20.04 lts, for simplicity named A server with the following network interfaces:
loopback
enp1s0 (wan) PUBLIC-IP/23
enp8s0 (lan) 10.9.96.3/20
ppp0 (l2tp) ...
0
votes
0
answers
34
views
RRAS IKEv2 MacOS 13.4.1 unable to connect since upgrade to Ventura
I encountered a problem when trying to connect to a VPN server configured in IKEv2 from MacOS (Ventura 13.4.1) on a fresh install.
The VPN server is a RRAS hosted in a Windows server 2019, its ...
0
votes
0
answers
45
views
Very strange behavior of OpenVPN between two sites
We've got a OpenVPN configured with layer2.
It is connected to a BGP router which announces a /24 IPv4 and a /29 IPv6. The purpose of the VPN is to redistribute IPv4 and IPv6.
However, recently I have ...
0
votes
1
answer
27
views
Best Practices for Setting Up Multiple OpenVPN Instances for Different Clients
I'm working on a project where I need to set up OpenVPN instances to connect IoT devices from various customers to a central server. Each client should have its own isolated VPN connection. I'm ...
- 3
-1
votes
0
answers
38
views
Access Ubuntu OpenVPN Client From Other Machines on Local LAN
I have an OpenVPN client running on an Ubuntu machine (192.168.107.1/24) and able to successfully connect to a remote OpenVPN server (10.0.0.1/24). The problem is when the client is connected, other ...
- 9
0
votes
0
answers
28
views
sometimes, vpn connection doesn't work on ipsec(strongswan) configuration
I'm using ipsec with strongswan between aws and on-premise
here is strongswan configuration
config setup
uniqueids = no
charondebug="ike 1, knl 1, cfg 0"
conn %default
ikelifetime=...
- 1
-1
votes
0
answers
30
views
Setting up tunneling for docker containers
I want to use wireguard to restrict access to my containers. I have a couple of services running on the host (which is behind a NAT) and has the IP 192.168.206.35.
So I setup wireguard and able to ...
- 17
0
votes
1
answer
41
views
Is it possible to setup a VPN that passes multiple ports through a single port tunnel?
I am looking to set up a VPN (possibly OpenVPN) to allow a computer connected to the internet through a restricted university network to connect to the wider internet through my home network.
My ...
0
votes
0
answers
25
views
CA-Certificate and Server Certificate are expired! - openVPN - Server <--> Client(x)
I am hosting an openVPN-Service to connect ~30 IoT-Clients directly to my Server. I have forgoten to extend the lifetime of the self-signed ca.cert and the server.crt. Now my openVPN-Clients could not ...
- 3
0
votes
0
answers
16
views
self signed for a site accessible through VPN
I'd like to know if what I'm doing is right or is there another way to do this?
I have this site that is accessible through VPN and i'd like the end users not to see the "not secured" ...
- 11
0
votes
0
answers
15
views
Sporadic loss of connection to internet when connected through corporate VPN
I've had this prolonged issue where my internet connection disconnects every now and then, but only when I'm connected through my corporate VPN outside of my office.
Internet connection through WiFi ...
- 1
0
votes
1
answer
39
views
Android .sswan profile to ipsec.conf
I have a .sswan profile with an embedded cert and username/password from a server admin. It connects to a Watchguard VPN without any issues. I was told by the server admin I can connect with my ubuntu ...
- 121
0
votes
0
answers
14
views
Assign same static IP to a Windows 2003 VPN client connection
Every time a domain user is using our Windows VPN to connect to the company network a new IP from a range is taken. This range is configured in a Windows 2003 Server. Because we have applications that ...
- 13
0
votes
0
answers
20
views
How to set up an IPSec VPN with failover on linux without virtual IP?
I need to set up a VPN connection using IPsec between a client system and our Linux server. There shall be a fallback in case of failure of the VPN endpoint, i.e. some sort of automatic failover.
From ...
0
votes
1
answer
45
views
self signed certificate for a site that can only be access through VPN
I read a lot of articles about self signed certificates and I'm not exactly sure if I'm getting near to what I want to actually achieve.
I'm trying to implement a self signed certificate so that the ...
- 11
0
votes
0
answers
24
views
Sonicwall SSLVPN Default Gateway Not Being Set
I am setting up a SonicWall SSLVPN on SonicOS 6.5 and am having issues with the default gateway being handed out to the client. When setting up the VPN I created an SSLVPN network (10.10.0.0/24). I am ...
0
votes
3
answers
107
views
Zscaler as a router
Is it possible to install zscaler on virtual machine (e.g. linux), and use that machine for accessing only few hostnames? I would point other machines to go via this virtual machine only for those few ...
0
votes
0
answers
31
views
AWS Site-to-Site VPN logging not working
Anyone encountered a problem where logging to CloudWatch for Site-To-Site VPN isn't working even though logging is enabled?
The only log file that is created is one with the title "...
- 1
0
votes
2
answers
36
views
IPTables: introduce a policy for a chain so that I can maintain the drop policy/rule without having to delete it when I need to add a new accept rule?
Say I have a chain introduced with iptables -N SERVICES-VPN.
But then I want this chain to drop everything... so iptables -A SERVICES-VPN -j DROP.
The problem here is that I may need to add rules ...
0
votes
0
answers
47
views
IPSec VPN Windows 10 Client Not Working - SOLVED
After 3 days of banging my head against the keyboard, I finally came up with a solution that allows my Windows 10 Professional built-in VPN client to connect to my Linux IPSec VPN server using EAP and ...
0
votes
2
answers
88
views
Best way of implementing a VPN for remote device management
Looking for thoughts on how to proceed with our remote management of hardware.
We deploy MileSight LoraWan UG65 gateways at our customers.
The tooling Milesight themselves provide for remote ...
- 1
0
votes
0
answers
31
views
Wireguard peer rejecting traffic
My Wireguard setup randomly stopped working yesterday and I don't know how to trace the source of the problem.
I inspected the traffic with Wireshark and it shows that the traffic gets sent from the ...
0
votes
1
answer
120
views
Ping and mDNS over WireGuard not working
When running through WireGuard VPN tunnel from outside the network, I can access machines inside directly via IP. For example, hitting IP of PiHole box in a browser returns the PiHole UI. I can also ...
0
votes
0
answers
73
views
Multiple Site-To-Site VPNs to one OpenVPN Server
I am struggling to setup multiple site-to-site vpns.
I have 3 sites:
Site A: OpenVPN Server, inside OPNsense, IP Ranges: 192.168.10.0/24
Site B: Asus Router with Fresh-Tomato, IP Ranges: 192.168.20.0/...
- 101
0
votes
0
answers
95
views
how to set up eat /etc/pam.d/radiusd file to authenticate a user with his username, password and Google Authenticator token. Using Freeradius for 2FA
i have a problem about configuring the “/etc/pam.d/radiusd” file.
I am working on a Linux Debian System.
rn this is my configuration:
auth requisite pam_google_authenticator.so forward_pass
auth ...
0
votes
0
answers
33
views
iptables - How do I restrict access to just local devices on the network?
I have asked this question on SuperUser but the only response was from someone who I was unable to understand
I have a WireGuard VPN Server running on a Debian 12 host with no problems, listening on a ...
0
votes
0
answers
64
views
OpenVPN Site-to-Site Routing
I've been trying to set up an OpenVPN site-to-site tunnel for 2 days and I'm currently stuck with the following problem. :/
With the current configuration I can reach all servers in the client network ...
0
votes
0
answers
17
views
Securing VPN access using the Always On Technology or 3rd party VPN clients?
I'm using Hybrid Azure AD Join for all my Windows 10 & 11 Workstations, but not for the Windows Server OS.
So rather than manually deploying the 3rd Party VPN client to each workstation, can I use ...
- 1,275
0
votes
0
answers
63
views
Stuck on OpenVPN Server with PiVPN: Can't Access GUI or SSH on PLCs – Need Guidance
I'm venturing into a bit of uncharted territory for me and need some assistance. I'm working on setting up an OpenVPN server on a Raspberry Pi using PiVPN, aiming to connect my work laptop remotely to ...
- 1
0
votes
0
answers
135
views
Windows native client not connecting to IKEv2 EAP VPN
We are investigating the possibility of replacing pfSense/opnSense with Mikrotik for our office routers. Our current routers provide site-to-site tunnels between locations, as well as RADIUS-backed ...
- 940
-1
votes
2
answers
51
views
OpenVPN headless on Debian 11.7 IP does not change
I have a ProtonVPN paid account.
I want to use it on my VPS server (so in headless), to change my ip.
Their client does not work in headless mode, so I use OpenVPN.
I download the Linux config file on ...
- 99
0
votes
0
answers
20
views
VPN route establish connection failed
I am traing to connect from my VPN from work to home but it is failed (my real address is not 12.12.12.12 I chaneged it here).
initiating Main Mode IKE_SA Note8[3] to 12.12.12.12
generating ID_PROT ...
0
votes
1
answer
30
views
VPN server+client without client-specific settings
I have SBCs with Debian. These SBCs will send data to server (using e.g. REST), but I want to secure the connection using some VPN/tunnel and I want also to be able to remote access the SBCs for ...
- 1
0
votes
1
answer
68
views
MITM attacks inside VPN network?
Is it possible to use any MITM attacks (including ssh-mitm) if I'm connected to a VPN? OpenVPN connects me via tun0 interface with some IP in 10.0.0.0/8 and gateway at some IP 10.0.0.0/8. I know that ...
1
vote
0
answers
83
views
VPN access issue
==Summary==
I installed "Routing and Remote Access" role on Windows Server 2016 so I can use it as a VPN gateway(L2TP/IPsec with pre-shared key). The authentication is handled by a RADIUS ...
- 11
1
vote
1
answer
65
views
WireGuard default route in AWS ECS container
I have a container inside an AWS ECS instance.
I want to establish a connection to a WireGuard server from that container.
The connection itself works but I have issues with routing all the traffic ...
- 111
0
votes
1
answer
71
views
How can I SSH locally into a server that is using a VPN?
How can i access locally through ssh to my orange pi that is running under a vpn provider?
I attach a draw how it is build the infrastructure, it's a simple hose connection.
The orange pi has a static ...
- 1
0
votes
0
answers
92
views
openvpn - iptables or nftables
Iptables has been around for a long time, but nftables seems to be picking up steam. I've noticed in newer distributions of Kubernetes images (aws, etc) no longer have the iptables kernel module baked ...
- 133
0
votes
0
answers
236
views
Wireguard Site-to-Site connection in Docker ping working but TCP not
I am quite desperate. I am trying to get my site-to-site vpn setup working, but no luck so far. Please don't judge me, I am quite new to the routing problematic.
I have a VPS with a public IP 123.456....
- 1
0
votes
1
answer
113
views
WireGuard config protection
I want to set up WireGuard in the corporate network instead of OpenVPN. How can the client's config be protected from theft or loss? If the client's config falls into the wrong hands, then attackers ...
- 1
-1
votes
1
answer
40
views
Built-in Windows VPN PPTP not working for user
I am trying to setup a built in Windows VPN PPTP for a client on their laptop, and when it tries to connect to their VPN server it fails with VPN error 806.
I've enabled GRE protocol and opened TCP ...
- 1
0
votes
0
answers
99
views
How to realize a user-based bandwidth throttling in VPN or Proxy server
I created my own VPN or proxy server on a rented Ubuntu server. For example it may be an OpenVPN server with Pritunl or a Wireguard server with wg-easy or wg-install or firezone installation script.
...
- 11
0
votes
0
answers
39
views
Internet Forwarding
I am looking for Internet Routing. Right now we have 2 offices one in Germany and One in Dubai. Everyone is connected through VPN Tunnel of the German office. The German office wants to connect to our ...
- 1
0
votes
1
answer
187
views
ipsec/strongswan - tunnel is up, traffic is sent and received but replies are ignored
I need some help, I set up a strongswan IPsec tunnel with ESP and IKEv2, the tunnel is UP and remote sees packets coming and answers them, but my server is ignoring? answers.
The tunnel is between my ...
- 1
0
votes
1
answer
206
views
The remote connection was not made because the attempted VPN tunnels failed
I installed "Routing and Remote Access" role on Windows Server 2016 so I can use it as a VPN and NAT server .enter image description here On the screenshot you can see what my lab looks like....
- 11
0
votes
1
answer
169
views
IP Routing Questions (Wireguard as Company Network, Hetzner Private Network as Server Private Network)
(educational purposes)
Hey Guys,
actually i'm trying to create a company network (employee clients) with wireguard. Lets say its the subnet 10.0.0.0/24. The Wireguard Server is a Hetzner Cloud server, ...
- 11
0
votes
1
answer
74
views
Connecting to OpenVPN blocks access to local VLANs on different subnets
When I'm connecting to an OpenVPN provider, such as NordVPN, I lose connectivity to my local devices which are configured on another subnets.
Eg. the computer connecting to NordVpn is on vlan A which ...
- 13
-1
votes
1
answer
162
views
Always on VPN profile with Group policy
I am trying to deploy the always on VPN profile via GPO, with a powershell script from Richard hicks. the script works when i run local, but i can't figure out how to run it with a startup script in ...
