Questions tagged [vpn]

VPN is the acronym for Virtual Private Network - a network type that uses a the Internet to provide remote networks or single machines with secure access to their organization's network avoiding expensive leased lines.

Filter by
Sorted by
Tagged with
0 votes
1 answer
22 views

VPN setup multi-user multi-network topology

Context I am trying to understand how to best setup VPN access for a group of users and networks. The situation is represented by this network schematic: Site A represents the main network I have ...
Bonvi's user avatar
  • 11
0 votes
0 answers
20 views

IPv6 route based VPN client with Strongswan, packets arrive but not received by application

I'm trying to set up a linux client PC with a route based VPN tunnel using strongswan and an XFRM interface, with IPv6 (end to end). strongswan 5.8.2, linux kernel 5.15.0 [An aside - I've tried an ...
feca67's user avatar
  • 1
0 votes
1 answer
76 views

OpenVPN AS split tunneling with "whitelisted" domains

got a requirement to enable split tunneling for our work openVPN as server's This also includes having a "split DNS" configuration where some internal/public company domains traffic should ...
Eyal Solomon's user avatar
-1 votes
0 answers
22 views

Masquerade traffic from certain source subnet to VPN connection

I have an IP LAN network 192.168.100.0/24. In this network there are many client Windows PCs. The default gateway is 192.168.100.1 and a Linux server (with IP 192.168.100.200) is opening a Cisco ...
Piero Viano's user avatar
0 votes
0 answers
18 views

IPSec Example for a Password Authentication

I am trying to configure an ipsec (strongswan) vpn client to connect to my ISP-provided router's VPN. I only have a username and password, no certificates. In the documentation the provided (https://...
sashok_bg's user avatar
  • 101
-2 votes
0 answers
25 views

vpn server with /24 public ip [closed]

i have dedicated server with /24 announced ip range. i want to use this server for local customers as vpn server. aim is to give each client different public ip. and each time the device connected ...
Bülent Arslan's user avatar
0 votes
0 answers
16 views

Stongswan IKEv2 VPN with PSK - What is the Identifier?

I have set up a Strongswan IKEv2 VPN with PSK in my efforts to use it for my mobile Devices with Samsung SDS EMM. In the Configuration in the EMM i know how to put in the information but im asked for ...
Simon Kämmler's user avatar
0 votes
0 answers
33 views

Wireguard with VPS for mobile clients for all traffic routing

I have been trying to configure Wireguard as a VPN for accessing my home network which partially I have been successful. But I still am experiencing problems when trying to make two things happen. I ...
Luke Keude's user avatar
0 votes
2 answers
70 views

How to properly do ip specific routing on sbc gateway/router? Not forwarding responce

My network uses 192.168.100.0/24 The routers gateway is 192.168.100.1 I have a windows pc at 192.168.100.15 I have a fresh install of ubuntu 20.04 on a SBC with ip 192.168.100.207 lan0 On this sbc I ...
Chris Zahrt's user avatar
0 votes
1 answer
48 views

IPsec tunnel gets connected, Phase 2 is successful but no IP adapter is created thus tunnel does not work

I am trying to establish an IPsec tunnel between my virtual server and a customer's server. The IPsec tunnel gets established successfuly in Phase 2, but no IP gets added to my system. This is the ...
Hanz94's user avatar
  • 1
0 votes
0 answers
32 views

How to get 2 tunnels UP between OpenSwan and AWS?

I have a VPC and network in eu-central-1 and one in eu-west-1 in AWS. The eu-central-1 fakes my on-prem environment. There I installed and configured OpenSwan on an EC2. In in eu-west-1 I configured a ...
DenCowboy's user avatar
  • 323
0 votes
1 answer
42 views

route to VPN network

I have a VPN question and hope there is an answer in the ether. :-) My setup so far: (layer 3) OpenVPN Server: NIC eth0 10.85.202.20 tun topology subnet server 10.10.16.0 255.255.240.0 route 172.16.0....
T McTrain's user avatar
0 votes
0 answers
42 views

send Windows Sandbox network traffic through host VPN connection

I want to run an application in a Windows Sandbox. The application must contact a server only accessible through the host Windows PC VPN connection. But Windows Sandbox network traffic only uses the ...
JamesThomasMoon's user avatar
0 votes
0 answers
34 views

Cannot access network resources after connecting to Always On VPN

Background: recently moved offices to a new network that did not have any domain controllers. The network here has a basic WiFi router that has both DNS and DHCP. We moved our DC here that has our ...
Mike H's user avatar
  • 1
-1 votes
0 answers
74 views

Partially route client VPN traffic through nested VPN tunnel

The goal is to let user (roadwarrior) access subnet A through Gateway A, but route all traffic to resource B on the internet through Gateway B only. Roadwarrior -> Gateway A <-site-to-site> ...
fw gw's user avatar
  • 1
0 votes
0 answers
12 views

How to set up a Linux "external" server that proxy/route external requests to a server accessible only on a VPN

I am going to set up a Linux server attached to my university network, but this server will be accessible only from our local network, or externally trough the VPN of our organisation. I need however ...
Antonello's user avatar
  • 145
1 vote
0 answers
157 views

Networking in a Distributed Kubernetes Cluster Over Tailscale

Background I have two nodes, Narvi and Orcams, which are part of a Tailnet. They are located in physically distinct and differing "real" subnets. They can communicate with each other using ...
Arman's user avatar
  • 175
0 votes
0 answers
40 views

Kubernetes cluster through VPN

I have multiples nodes spread accross differents locations and i would like to use them in a kubernetes cluster (k3s) throught OpenVPN. Has anyone already tried this and could give me some leads ? ...
Nicolas VIOLLIN's user avatar
1 vote
0 answers
73 views

Configure number of RADIUS retransmits or timeout for Strongswan eap-radius

I have the following connection scheme: Site A (radius server) <--> Site B (gateway) <--> Roadwarrior (Bob) Site B uses eap-radius plugin for RADIUS Authentication and Accounting. ...
Ilya Cherevkov's user avatar
0 votes
0 answers
123 views

Routing VPN traffic through VPN router

I have looked through lots of Double-VPN / VPN Chain questions over the internet and it looks like my case is a bit special. Long story short. I have a Raspberry Pi acting as WiFi-to-USB-C dongle (...
amexcommunicado's user avatar
-1 votes
1 answer
51 views

Centralizing Multiple VPN Connections to Avoid Client Conflicts on Employee Laptops

I work for a company that delivers support to multiple healthcare institutions. Each of these institutions requires us to connect via their specific VPN software using individual accounts provided to ...
Matthias De Mey's user avatar
0 votes
0 answers
132 views

GKE and multiple VPN

I have a GKE autopilot cluster where I deployed a workload that needs to connect to two SQL databases via two different on-premise VPNs. The network is on another project and it is a shared VPC. The ...
Lic's user avatar
  • 101
0 votes
0 answers
10 views

Missing static routing in VPN Connection (VPN server + RPi + subnet) [migrated]

guys. I have two networks that are connected via VPN. I have an OpenVPN server running on my NAS at home. Outside my network I have a Raspberry Pi (RPi) which is connected to my local network via VPN. ...
pepco2's user avatar
  • 1
0 votes
0 answers
74 views

OpenVPN Timeout when connecting

I have followed instructions here (with slight adaptations, as listed below) to set up OpenVPN on an OpnSense router, but clients are not able to connect. Differences: I set Local port to 1179 I set ...
scubbo's user avatar
  • 193
0 votes
0 answers
71 views

Create VPN server on Windows 2022 server programatically

I'm migrating VPN server from Windows Server 2016 to Windows Server 2022. This time I want to create it programmatically/automatically (IaC way)? On Windows Server 2016 is the build-in Windows VPN ...
Tomas Tintera's user avatar
0 votes
0 answers
37 views

How to change routes dynamically based on route availability on Linux?

I have an odd and somewhat specific routing question. I want to change routes/next-hop based on next-hop availability. My setup is quite odd, and probably a far cry from any best practice. It looks ...
espenfjo's user avatar
  • 1,686
-1 votes
1 answer
54 views

Draytek VPN stuck on Authentica IKEv2 EAP

I've set up the following configurations on my draytek vigor 2926: IPsec general setup and the remote dial-in user: remote dial-in user I get the following error: unknown error Status in Smartclient: ...
LemonFridge's user avatar
0 votes
0 answers
25 views

How Can I Update Encryption and Deffie Hellman Groups for VPN in GCP?

So, I've got a VPN set up at the moment that's connected to the client's VPN and it's all good. Now, the client wants to tweak the encryption method to AES256 and Deffie Hellman groups to 19. Is it ...
Jose Carro's user avatar
0 votes
2 answers
172 views

Trying to exclude traffic on specific interface from Mullvad vpn

I have an ubuntu machine with one interface connected to the internet (through mullvad). A RPi box is connected to another ethernet interface on my ubuntu box. Connection works if mullvad is turned ...
Nhfb9E's user avatar
  • 1
0 votes
0 answers
40 views

Intermittent connection problems for some users on StrongSwan VPN gateway

We have a VPN gateway using StrongSwan U5.9.10 and Rocky Linux 9.2 with 5.14.0-284 x86_64 kernel serving total of <200 Windows users. Split-tunneling is used. StrongSwan configuration was migrated ...
udev's user avatar
  • 11
0 votes
0 answers
66 views

Opnsense Wireguard Site-to-Site VPN. Don't see Windows clients

I need to make a transparent Site-to-site VPN between 2 Opnsense routers. As I don't have admin skills I followed this tutorial https://www.wundertech.net/how-to-set-up-wireguard-in-opnsense/ I did ...
Vladimir's user avatar
  • 135
1 vote
1 answer
118 views

OpenVPN Revoke a certificate without the CRT file with Easy RSA

I'm confused, I have an OpenVPN server on Debian. The previous system administrator who was in charge of this server deleted the user certificates (.crt file) with the command "rm -f example.crt&...
g1398's user avatar
  • 13
0 votes
0 answers
78 views

Why port is open when checked as root but closed for a regular user after establishing a VPN connection on Debian 11?

On Debian 11, I establish a VPN connection as root using openconnect. After the connection is established, I have access to a network where the IP address is 1.2.3.4.5 with an open port 1433. Question:...
jasneinfo's user avatar
0 votes
1 answer
64 views

WireGuard portforwarding setup

I need help with the following scenario: I have a small instance on AWS, which should accept all traffic from ports 1024:65535 and should send it to my local server. The local server shouldn't send ...
Apatus's user avatar
  • 21
0 votes
1 answer
48 views

Site to site routing rules

I have installed strongswan tunnel to Site to Site vpn providing in our datacenter. I have in iptables set up masquerade. That is working fine. But now, I want to setup that same traffic with routing ...
Dave's user avatar
  • 25
0 votes
1 answer
106 views

Wireguard with multiple local subnets using iptables

I'm trying to allow multiple local subnets when using a wireguard VPN. Below is the iptables config from my wireguard config file. I'm assuming I have to write this in a different way, but I have no ...
Sim Hat's user avatar
0 votes
0 answers
79 views

Issue with AWS Client VPN on AWS Workspace connecting to the internet

I have a Ubuntu AWS Workspace. On it I connect to my VPC using AWS Client VPN. This allows me to access local resources but the public internet doesn't work. When I am not connected to using the AWS ...
GodAtum's user avatar
  • 317
0 votes
0 answers
47 views

DNS timeouts between Hetzner Cloud VMs and Azure private DNS

I have asked the same question already on networkengineering.stackexchange.com, but it might be that it was not the right place to ask. so i was referred here. We have the following setup There are ...
Pirmin Schneider's user avatar
0 votes
0 answers
30 views

Is there a significant difference when virtualizing a VPN server?

Basically, my question is this: I have a "server"(a regular PC) with Debian installed. On this machine, I need to have a Tomcat service running at the same time as a VPN server service. To ...
Daniel Manjabacas Meneses's user avatar
0 votes
1 answer
127 views

Can't resolve private domains using bind9 with Wireguard VPN connection

I have a VPS with static external IP and Ubuntu 22.04. I configured the Wireguard VPN connection to my server tunneling all traffic through VPS. I also have UFW enabled. I want to resolve some domains ...
andryuhat's user avatar
0 votes
0 answers
19 views

How can I troubleshoot why packets aren't coming back from Hyper-V host to guest?

I have a Win11 host ("Host") running Hyper-V and I have a Win10 guest ("Guest"). My Win11 host may connect to the Internet via Cisco AnyConnect VPN. Without VPN connected, Internet ...
Bridgey's user avatar
  • 131
0 votes
1 answer
58 views

VPN on Linux - IP routing issue

I got the following scenario: an ubuntu server 20.04 lts, for simplicity named A server with the following network interfaces: loopback enp1s0 (wan) PUBLIC-IP/23 enp8s0 (lan) 10.9.96.3/20 ppp0 (l2tp) ...
Emiliano Spada's user avatar
0 votes
0 answers
184 views

RRAS IKEv2 MacOS 13.4.1 unable to connect since upgrade to Ventura

I encountered a problem when trying to connect to a VPN server configured in IKEv2 from MacOS (Ventura 13.4.1) on a fresh install. The VPN server is a RRAS hosted in a Windows server 2019, its ...
Boby Lapointe's user avatar
0 votes
0 answers
48 views

Very strange behavior of OpenVPN between two sites

We've got a OpenVPN configured with layer2. It is connected to a BGP router which announces a /24 IPv4 and a /29 IPv6. The purpose of the VPN is to redistribute IPv4 and IPv6. However, recently I have ...
Kibioctet's user avatar
0 votes
1 answer
66 views

Best Practices for Setting Up Multiple OpenVPN Instances for Different Clients

I'm working on a project where I need to set up OpenVPN instances to connect IoT devices from various customers to a central server. Each client should have its own isolated VPN connection. I'm ...
Mat's user avatar
  • 3
0 votes
0 answers
43 views

sometimes, vpn connection doesn't work on ipsec(strongswan) configuration

I'm using ipsec with strongswan between aws and on-premise here is strongswan configuration config setup uniqueids = no charondebug="ike 1, knl 1, cfg 0" conn %default ikelifetime=...
lee's user avatar
  • 1
0 votes
1 answer
84 views

Is it possible to setup a VPN that passes multiple ports through a single port tunnel?

I am looking to set up a VPN (possibly OpenVPN) to allow a computer connected to the internet through a restricted university network to connect to the wider internet through my home network. My ...
Ed_Silver's user avatar
0 votes
0 answers
75 views

CA-Certificate and Server Certificate are expired! - openVPN - Server <--> Client(x)

I am hosting an openVPN-Service to connect ~30 IoT-Clients directly to my Server. I have forgoten to extend the lifetime of the self-signed ca.cert and the server.crt. Now my openVPN-Clients could not ...
Mat's user avatar
  • 3
0 votes
0 answers
22 views

self signed for a site accessible through VPN

I'd like to know if what I'm doing is right or is there another way to do this? I have this site that is accessible through VPN and i'd like the end users not to see the "not secured" ...
Reefo Relaxo's user avatar
0 votes
0 answers
18 views

Sporadic loss of connection to internet when connected through corporate VPN

I've had this prolonged issue where my internet connection disconnects every now and then, but only when I'm connected through my corporate VPN outside of my office. Internet connection through WiFi ...
Marc Lee's user avatar

1
2 3 4 5
102