Questions tagged [vpn]
VPN is the acronym for Virtual Private Network - a network type that uses a the Internet to provide remote networks or single machines with secure access to their organization's network avoiding expensive leased lines.
5,086
questions
0
votes
1
answer
22
views
VPN setup multi-user multi-network topology
Context
I am trying to understand how to best setup VPN access for a group of users and networks.
The situation is represented by this network schematic:
Site A represents the main network
I have ...
- 11
0
votes
0
answers
20
views
IPv6 route based VPN client with Strongswan, packets arrive but not received by application
I'm trying to set up a linux client PC with a route based VPN tunnel using strongswan and an XFRM interface, with IPv6 (end to end).
strongswan 5.8.2, linux kernel 5.15.0
[An aside - I've tried an ...
- 1
0
votes
1
answer
76
views
OpenVPN AS split tunneling with "whitelisted" domains
got a requirement to enable split tunneling for our work openVPN as server's
This also includes having a "split DNS" configuration where some internal/public company domains traffic should ...
- 75
-1
votes
0
answers
22
views
Masquerade traffic from certain source subnet to VPN connection
I have an IP LAN network 192.168.100.0/24. In this network there are many client Windows PCs.
The default gateway is 192.168.100.1 and a Linux server (with IP 192.168.100.200) is opening a Cisco ...
0
votes
0
answers
18
views
IPSec Example for a Password Authentication
I am trying to configure an ipsec (strongswan) vpn client to connect to my ISP-provided router's VPN.
I only have a username and password, no certificates.
In the documentation the provided (https://...
- 101
-2
votes
0
answers
25
views
vpn server with /24 public ip [closed]
i have dedicated server with /24 announced ip range. i want to use this server for local customers as vpn server. aim is to give each client different public ip. and each time the device connected ...
0
votes
0
answers
16
views
Stongswan IKEv2 VPN with PSK - What is the Identifier?
I have set up a Strongswan IKEv2 VPN with PSK in my efforts to use it for my mobile Devices with Samsung SDS EMM.
In the Configuration in the EMM i know how to put in the information but im asked for ...
0
votes
0
answers
33
views
Wireguard with VPS for mobile clients for all traffic routing
I have been trying to configure Wireguard as a VPN for accessing my home network which partially I have been successful. But I still am experiencing problems when trying to make two things happen.
I ...
0
votes
2
answers
70
views
How to properly do ip specific routing on sbc gateway/router? Not forwarding responce
My network uses 192.168.100.0/24
The routers gateway is 192.168.100.1
I have a windows pc at 192.168.100.15
I have a fresh install of ubuntu 20.04 on a SBC with ip 192.168.100.207 lan0
On this sbc I ...
0
votes
1
answer
48
views
IPsec tunnel gets connected, Phase 2 is successful but no IP adapter is created thus tunnel does not work
I am trying to establish an IPsec tunnel between my virtual server and a customer's server. The IPsec tunnel gets established successfuly in Phase 2, but no IP gets added to my system.
This is the ...
- 1
0
votes
0
answers
32
views
How to get 2 tunnels UP between OpenSwan and AWS?
I have a VPC and network in eu-central-1 and one in eu-west-1 in AWS.
The eu-central-1 fakes my on-prem environment. There I installed and configured OpenSwan on an EC2. In in eu-west-1 I configured a ...
- 323
0
votes
1
answer
42
views
route to VPN network
I have a VPN question and hope there is an answer in the ether. :-)
My setup so far: (layer 3)
OpenVPN Server: NIC eth0 10.85.202.20
tun
topology subnet
server 10.10.16.0 255.255.240.0
route 172.16.0....
0
votes
0
answers
42
views
send Windows Sandbox network traffic through host VPN connection
I want to run an application in a Windows Sandbox. The application must contact a server only accessible through the host Windows PC VPN connection. But Windows Sandbox network traffic only uses the ...
- 743
0
votes
0
answers
34
views
Cannot access network resources after connecting to Always On VPN
Background: recently moved offices to a new network that did not have any domain controllers. The network here has a basic WiFi router that has both DNS and DHCP. We moved our DC here that has our ...
- 1
-1
votes
0
answers
74
views
Partially route client VPN traffic through nested VPN tunnel
The goal is to let user (roadwarrior) access subnet A through Gateway A, but route all traffic to resource B on the internet through Gateway B only.
Roadwarrior -> Gateway A <-site-to-site> ...
- 1
0
votes
0
answers
12
views
How to set up a Linux "external" server that proxy/route external requests to a server accessible only on a VPN
I am going to set up a Linux server attached to my university network, but this server will be accessible only from our local network, or externally trough the VPN of our organisation.
I need however ...
- 145
1
vote
0
answers
157
views
Networking in a Distributed Kubernetes Cluster Over Tailscale
Background
I have two nodes, Narvi and Orcams, which are part of a Tailnet. They are located in physically distinct and differing "real" subnets. They can communicate with each other using ...
- 175
0
votes
0
answers
40
views
Kubernetes cluster through VPN
I have multiples nodes spread accross differents locations and i would like to use them in a kubernetes cluster (k3s) throught OpenVPN.
Has anyone already tried this and could give me some leads ?
...
1
vote
0
answers
73
views
Configure number of RADIUS retransmits or timeout for Strongswan eap-radius
I have the following connection scheme:
Site A (radius server) <--> Site B (gateway) <--> Roadwarrior (Bob)
Site B uses eap-radius plugin for RADIUS Authentication and Accounting.
...
- 163
0
votes
0
answers
123
views
Routing VPN traffic through VPN router
I have looked through lots of Double-VPN / VPN Chain questions over the internet and it looks like my case is a bit special.
Long story short. I have a Raspberry Pi acting as WiFi-to-USB-C dongle (...
-1
votes
1
answer
51
views
Centralizing Multiple VPN Connections to Avoid Client Conflicts on Employee Laptops
I work for a company that delivers support to multiple healthcare institutions. Each of these institutions requires us to connect via their specific VPN software using individual accounts provided to ...
0
votes
0
answers
132
views
GKE and multiple VPN
I have a GKE autopilot cluster where I deployed a workload that needs to connect to two SQL databases via two different on-premise VPNs. The network is on another project and it is a shared VPC.
The ...
- 101
0
votes
0
answers
10
views
Missing static routing in VPN Connection (VPN server + RPi + subnet) [migrated]
guys. I have two networks that are connected via VPN. I have an OpenVPN server running on my NAS at home. Outside my network I have a Raspberry Pi (RPi) which is connected to my local network via VPN. ...
- 1
0
votes
0
answers
74
views
OpenVPN Timeout when connecting
I have followed instructions here (with slight adaptations, as listed below) to set up OpenVPN on an OpnSense router, but clients are not able to connect.
Differences:
I set Local port to 1179
I set ...
- 193
0
votes
0
answers
71
views
Create VPN server on Windows 2022 server programatically
I'm migrating VPN server from Windows Server 2016 to Windows Server 2022.
This time I want to create it programmatically/automatically (IaC way)?
On Windows Server 2016 is the build-in Windows VPN ...
- 101
0
votes
0
answers
37
views
How to change routes dynamically based on route availability on Linux?
I have an odd and somewhat specific routing question. I want to change routes/next-hop based on next-hop availability.
My setup is quite odd, and probably a far cry from any best practice.
It looks ...
- 1,686
-1
votes
1
answer
54
views
Draytek VPN stuck on Authentica IKEv2 EAP
I've set up the following configurations on my draytek vigor 2926:
IPsec general setup
and the remote dial-in user:
remote dial-in user
I get the following error: unknown error
Status in Smartclient: ...
- 11
0
votes
0
answers
25
views
How Can I Update Encryption and Deffie Hellman Groups for VPN in GCP?
So, I've got a VPN set up at the moment that's connected to the client's VPN and it's all good. Now, the client wants to tweak the encryption method to AES256 and Deffie Hellman groups to 19.
Is it ...
0
votes
2
answers
172
views
Trying to exclude traffic on specific interface from Mullvad vpn
I have an ubuntu machine with one interface connected to the internet (through mullvad). A RPi box is connected to another ethernet interface on my ubuntu box. Connection works if mullvad is turned ...
- 1
0
votes
0
answers
40
views
Intermittent connection problems for some users on StrongSwan VPN gateway
We have a VPN gateway using StrongSwan U5.9.10 and Rocky Linux 9.2 with 5.14.0-284 x86_64 kernel serving total of <200 Windows users. Split-tunneling is used.
StrongSwan configuration was migrated ...
- 11
0
votes
0
answers
66
views
Opnsense Wireguard Site-to-Site VPN. Don't see Windows clients
I need to make a transparent Site-to-site VPN between 2 Opnsense routers.
As I don't have admin skills I followed this tutorial https://www.wundertech.net/how-to-set-up-wireguard-in-opnsense/ I did ...
- 135
1
vote
1
answer
118
views
OpenVPN Revoke a certificate without the CRT file with Easy RSA
I'm confused, I have an OpenVPN server on Debian. The previous system administrator who was in charge of this server deleted the user certificates (.crt file) with the command "rm -f example.crt&...
- 13
0
votes
0
answers
78
views
Why port is open when checked as root but closed for a regular user after establishing a VPN connection on Debian 11?
On Debian 11, I establish a VPN connection as root using openconnect. After the connection is established, I have access to a network where the IP address is 1.2.3.4.5 with an open port 1433.
Question:...
- 23
0
votes
1
answer
64
views
WireGuard portforwarding setup
I need help with the following scenario:
I have a small instance on AWS, which should accept all traffic from ports 1024:65535 and should send it to my local server. The local server shouldn't send ...
- 21
0
votes
1
answer
48
views
Site to site routing rules
I have installed strongswan tunnel to Site to Site vpn providing in our datacenter. I have in iptables set up masquerade. That is working fine.
But now, I want to setup that same traffic with routing ...
- 25
0
votes
1
answer
106
views
Wireguard with multiple local subnets using iptables
I'm trying to allow multiple local subnets when using a wireguard VPN. Below is the iptables config from my wireguard config file.
I'm assuming I have to write this in a different way, but I have no ...
- 1
0
votes
0
answers
79
views
Issue with AWS Client VPN on AWS Workspace connecting to the internet
I have a Ubuntu AWS Workspace. On it I connect to my VPC using AWS Client VPN. This allows me to access local resources but the public internet doesn't work. When I am not connected to using the AWS ...
- 317
0
votes
0
answers
47
views
DNS timeouts between Hetzner Cloud VMs and Azure private DNS
I have asked the same question already on networkengineering.stackexchange.com, but it might be that it was not the right place to ask. so i was referred here.
We have the following setup
There are ...
0
votes
0
answers
30
views
Is there a significant difference when virtualizing a VPN server?
Basically, my question is this: I have a "server"(a regular PC) with Debian installed. On this machine, I need to have a Tomcat service running at the same time as a VPN server service.
To ...
0
votes
1
answer
127
views
Can't resolve private domains using bind9 with Wireguard VPN connection
I have a VPS with static external IP and Ubuntu 22.04. I configured the Wireguard VPN connection to my server tunneling all traffic through VPS. I also have UFW enabled. I want to resolve some domains ...
0
votes
0
answers
19
views
How can I troubleshoot why packets aren't coming back from Hyper-V host to guest?
I have a Win11 host ("Host") running Hyper-V and I have a Win10 guest ("Guest"). My Win11 host may connect to the Internet via Cisco AnyConnect VPN.
Without VPN connected, Internet ...
- 131
0
votes
1
answer
58
views
VPN on Linux - IP routing issue
I got the following scenario:
an ubuntu server 20.04 lts, for simplicity named A server with the following network interfaces:
loopback
enp1s0 (wan) PUBLIC-IP/23
enp8s0 (lan) 10.9.96.3/20
ppp0 (l2tp) ...
0
votes
0
answers
184
views
RRAS IKEv2 MacOS 13.4.1 unable to connect since upgrade to Ventura
I encountered a problem when trying to connect to a VPN server configured in IKEv2 from MacOS (Ventura 13.4.1) on a fresh install.
The VPN server is a RRAS hosted in a Windows server 2019, its ...
0
votes
0
answers
48
views
Very strange behavior of OpenVPN between two sites
We've got a OpenVPN configured with layer2.
It is connected to a BGP router which announces a /24 IPv4 and a /29 IPv6. The purpose of the VPN is to redistribute IPv4 and IPv6.
However, recently I have ...
0
votes
1
answer
66
views
Best Practices for Setting Up Multiple OpenVPN Instances for Different Clients
I'm working on a project where I need to set up OpenVPN instances to connect IoT devices from various customers to a central server. Each client should have its own isolated VPN connection. I'm ...
- 3
0
votes
0
answers
43
views
sometimes, vpn connection doesn't work on ipsec(strongswan) configuration
I'm using ipsec with strongswan between aws and on-premise
here is strongswan configuration
config setup
uniqueids = no
charondebug="ike 1, knl 1, cfg 0"
conn %default
ikelifetime=...
- 1
0
votes
1
answer
84
views
Is it possible to setup a VPN that passes multiple ports through a single port tunnel?
I am looking to set up a VPN (possibly OpenVPN) to allow a computer connected to the internet through a restricted university network to connect to the wider internet through my home network.
My ...
0
votes
0
answers
75
views
CA-Certificate and Server Certificate are expired! - openVPN - Server <--> Client(x)
I am hosting an openVPN-Service to connect ~30 IoT-Clients directly to my Server. I have forgoten to extend the lifetime of the self-signed ca.cert and the server.crt. Now my openVPN-Clients could not ...
- 3
0
votes
0
answers
22
views
self signed for a site accessible through VPN
I'd like to know if what I'm doing is right or is there another way to do this?
I have this site that is accessible through VPN and i'd like the end users not to see the "not secured" ...
- 11
0
votes
0
answers
18
views
Sporadic loss of connection to internet when connected through corporate VPN
I've had this prolonged issue where my internet connection disconnects every now and then, but only when I'm connected through my corporate VPN outside of my office.
Internet connection through WiFi ...
- 1