12
votes
How can I stop openconnect from changing /etc/resolv.conf?
Create the following script /etc/vpnc/no_resolverupdate.sh
#!/bin/sh
#
#
export INTERNAL_IP4_DNS=
. /usr/share/vpnc-scripts/vpnc-script
Make it executable:
chmod +x /etc/vpnc/no_resolverupdate.sh
...
- 121
7
votes
Accepted
How can I stop openconnect from changing /etc/resolv.conf?
Use vpn-slice to set up a split tunnel connection wherein your DNS configuration is not modified, and only traffic to a few hosts or IP subnets is routed over the VPN.
It was created for this exact ...
- 318
5
votes
Accepted
What method can I use to manage hundreds of VPNs/Remote Connections to servers outside my network?
That's quite a unique problem to be solved.
Your old solution sounded like it worked for you, so there's got to be a cheaper way continuing what you were doing.
A free thing would be to replace ...
- 68.6k
4
votes
How to Set-Up VPN that is Client and Server Independent
There's no magic here. VPN is a complex ecosystem, with many different vendors, many different technologies, and many different configurations. There is no "VPN Master Software" or the like that will ...
- 109k
4
votes
Ways to circumvent Cisco AnyConnect VPN Routing Table
It doesn't allow split tunnels. This is a security feature of the VPN software. Allowing split tunnels puts the business network at risk because this can be used to bypass the firewall. The software ...
- 3,213
4
votes
Ways to circumvent Cisco AnyConnect VPN Routing Table
Barring that, would it be possible to setup a linux VM with an HTTP/S proxy and SSH that route over the VPN tunnel?
I can only address the first part of that question, "would it be possible to setup ...
- 143
3
votes
Install protocols in Windows 10 native VPN
I know this is like a year late, but if anyone else looks for the answer, you can install the AnyConnect UWP from the Microsoft Store, and then you can select the Cisco AnyConnect provider within the ...
3
votes
Can I make a site-to-site VPN with a public IP on one side only?
Yes you can do this.
Evidence? I have an IPSec connection from our office in Albania to our office in Norway. The Albania office is behind CGNAT (the ISP provides only 10. addresses to its customers)....
- 1,589
3
votes
How to configure Cisco VPNUI shortcut to open a specific host?
Hi i tried a lot of things and the below is what worked for me
To connect to cisco anyconnect vpn using commandline from windows:
Install anyconnect using the installer
In powershell
create a file ...
2
votes
Accepted
Possible to have DHCP hand out different DNS server address when using different tunnel?
In your situation I would simply use the ASA as a DHCP that hands out its internal IP as the DNS server, use DNS proxy to the tunnel DNS and have several public DNS's listed in the config.
EG. (these ...
- 181
2
votes
Accepted
Trouble Connecting with Cisco VPN client reason 412
Caused by several different reasons:
The client is behind (or using) a firewall that is blocking ports TCP 4500/10000 or UDP 4500/10000 or 500 and/or ESP.
Your Internet connection is not stable and ...
- 396
2
votes
Accepted
AWS internal and external ELB visibility
Elastic Load Balancers can only be public or private, it cannot be both.
So if you want your ELB to be publicly accessible, then you can only access it via the public IP endpoints. Private endpoints ...
- 9,894
2
votes
Accepted
Data usage in case of VPN?
You ask us whether the VPN will not have to send the data over your internet provider link? VPN will send the traffic over an existing connection. It can't make the packets appear at the company ...
- 51.4k
2
votes
Data usage in case of VPN?
Data usage is in your personal network. If you download a file it needs to reach you. VPN is only an encrypted tunnel, not a remote solution.
- 101
2
votes
How to use SMB Multichannel over VPN?
From the article, it seems like you would need a VPN adapter (which remember, looks like a NIC but is software) that implements RSS or RDMA*. From the output you show, the AnyConnect virtual NIC can't ...
- 35.9k
1
vote
Strongswan to Cisco ASA with multiple right subnet
The answer is simple, Cisco ASAs don't support multiple traffic selectors per CHILD_SA. So you have to negotiate individual CHILD_SAs for each combination of local and remote subnet you want to tunnel....
- 3,870
1
vote
Recently I configured a Site-2-Site VPN Tunnel and I'm getting this errors:
The above error message indicates that negotiation of IKE (Internet Key Exchange) has failed because there is no match between ISAKMP (Internet Security Association Key Management Protocol) policies ...
- 61
1
vote
Ways to circumvent Cisco AnyConnect VPN Routing Table
Since the routing has to allow for TCP packets towards the VPN server, you can use clever NAT rules and software like SSLH to multiplex additional streams (such as SSH with tunnels) on this by-design ...
- 111
1
vote
Accepted
One-Way VPN connection from VPC to on-premise network
There is no native support in VPC for what you need.
The root of the problem is that VPC's Hardware VPN isn't really designed for connections to third party networks. It's designed for ...
- 22.4k
1
vote
Configuring L2TP/IPSec on Cisco Router 2911
It seems you have a misconfiguration between yours hash algorithm :
The conf of your router :
...
crypto isakmp policy 20
encr 3des
authentication pre-share
group 2
hash md5
...
And ...
- 1,315
1
vote
Google Cloud VPN Confusion
What you're looking to do will work with a VPN that supports Port Address Translation (PAT). Google Cloud VPN does not support this feature at the moment.
You can configure any open VPN software ...
- 296
1
vote
How to force Port 25 to a VPN IP Address
Your best option is to configure the server in Azure as an SMTP relay, and configure all clients/devices to use the internal ip address of the Azure server.
- 1,189
1
vote
VPNC dropping traffic
I was also in the same boat (using Debian v8.8 and vpnc v5.3r550); all was well with the connect (other than group name now being case sensitive), but once tunneled, I lost all traffic in and out. ...
1
vote
Accepted
AWS VPN-only subnet in a VPC with private and public subnets
First off, you should have multiple public and multiple private subnets.
The routes for the public subnets should have 0.0.0.0/0 targeting the IGW, which you don't mention in your question.
The ...
- 3,963
1
vote
Cisco VPN dynamic crypto-map
Thx hertitu, that helped.
I tried to edit with ASDM --> Network (Client) Access --> Advanced --> IPsec --> Cryptomaps, and added the ESP-3DES-SHA-TRANS transform set to the default dynamic crypto map....
- 299
1
vote
Accepted
It is possible to setup CISCO1921/K9 router for site to Site vpn behind a firewall?
You need to forward following ports
500 for Phase 1
4500 for NAT-Traversal
look at this article below for more information regarding configuration
https://networkengineering.stackexchange....
- 1,618
1
vote
Routing with Cisco CSR 1000v to Peered VPC
You could better use Transit VPC approach for routing traffic from both the VPCs.
Note- the Spoke VPCs are not in peering with each other when you use a transit VPC.
https://aws.amazon.com/answers/...
- 26
1
vote
Accepted
What is the breakdown of all the default IPsec and IKE parameters for the Azure VPN endpoint?
IPsec Parameters:
https://msdn.microsoft.com/en-us/library/azure/jj156075.aspx#bkmk_IPsecParameters
Even if your device supports these parameters there will be cases where the VPN will not connect ...
- 3,804
1
vote
How Do I Troubleshoot Azure VPN Without Access to Peer's VPN Device?
You can use the Powershell cmdlet Get-AzureVirtualNetworkGatewayDiagnostics to dump gateway logs (from the azure side obviously) to an azure storage account and download them from there. We've used it ...
- 4,201
1
vote
Accepted
VPN Tunnel Migration
Configure SSH to allow connections on the outside interface without VPN from only your IP address or IP range for the duration of the migration, then disable that again. That way you can access the ...
- 2,831
Only top scored, non community-wiki answers of a minimum length are eligible