Skip to main content
12 votes

How can I stop openconnect from changing /etc/resolv.conf?

Create the following script /etc/vpnc/no_resolverupdate.sh #!/bin/sh # # export INTERNAL_IP4_DNS= . /usr/share/vpnc-scripts/vpnc-script Make it executable: chmod +x /etc/vpnc/no_resolverupdate.sh ...
MartinW's user avatar
  • 121
8 votes
Accepted

How can I stop openconnect from changing /etc/resolv.conf?

Use vpn-slice to set up a split tunnel connection wherein your DNS configuration is not modified, and only traffic to a few hosts or IP subnets is routed over the VPN. It was created for this exact ...
Dan Lenski's user avatar
7 votes

Ways to circumvent Cisco AnyConnect VPN Routing Table

Barring that, would it be possible to setup a linux VM with an HTTP/S proxy and SSH that route over the VPN tunnel? I can only address the first part of that question, "would it be possible to setup ...
flaviut's user avatar
  • 173
4 votes

Ways to circumvent Cisco AnyConnect VPN Routing Table

It doesn't allow split tunnels. This is a security feature of the VPN software. Allowing split tunnels puts the business network at risk because this can be used to bypass the firewall. The software ...
Ron Maupin's user avatar
  • 3,273
4 votes

How to Set-Up VPN that is Client and Server Independent

There's no magic here. VPN is a complex ecosystem, with many different vendors, many different technologies, and many different configurations. There is no "VPN Master Software" or the like that will ...
EEAA's user avatar
  • 110k
3 votes

Install protocols in Windows 10 native VPN

I know this is like a year late, but if anyone else looks for the answer, you can install the AnyConnect UWP from the Microsoft Store, and then you can select the Cisco AnyConnect provider within the ...
Enrique Amaya's user avatar
3 votes

How to configure Cisco VPNUI shortcut to open a specific host?

Hi i tried a lot of things and the below is what worked for me To connect to cisco anyconnect vpn using commandline from windows: Install anyconnect using the installer In powershell create a file ...
Sharath Prakash's user avatar
2 votes

Ways to circumvent Cisco AnyConnect VPN Routing Table

Since the routing has to allow for TCP packets towards the VPN server, you can use clever NAT rules and software like SSLH to multiplex additional streams (such as SSH with tunnels) on this by-design ...
dnet's user avatar
  • 121
2 votes

Data usage in case of VPN?

Data usage is in your personal network. If you download a file it needs to reach you. VPN is only an encrypted tunnel, not a remote solution.
Aviyam Fischer's user avatar
2 votes
Accepted

Data usage in case of VPN?

You ask us whether the VPN will not have to send the data over your internet provider link? VPN will send the traffic over an existing connection. It can't make the packets appear at the company ...
TomTom's user avatar
  • 51.9k
2 votes

Strongswan to Cisco ASA with multiple right subnet

The answer is simple, Cisco ASAs don't support multiple traffic selectors per CHILD_SA. So you have to negotiate individual CHILD_SAs for each combination of local and remote subnet you want to tunnel....
ecdsa's user avatar
  • 4,102
2 votes

How to use SMB Multichannel over VPN?

From the article, it seems like you would need a VPN adapter (which remember, looks like a NIC but is software) that implements RSS or RDMA*. From the output you show, the AnyConnect virtual NIC can't ...
mfinni's user avatar
  • 36.3k
2 votes
Accepted

AWS internal and external ELB visibility

Elastic Load Balancers can only be public or private, it cannot be both. So if you want your ELB to be publicly accessible, then you can only access it via the public IP endpoints. Private endpoints ...
Matt Houser's user avatar
  • 10.3k
1 vote
Accepted

How to connect to a Cisco VPN in "native mode"?

Well, finally I got the solution: The VPN was vpnc type. As I thought, the data called Dedicated public IP was useless. The domain name called Remote was finally the Gateway. And the PSK was the ...
forvas's user avatar
  • 161
1 vote
Accepted

Can I use my local server when connect through vpn

Yes you can. What you are looking for is "splitted tunneling". The general idea is only when you need ressources located on company servers that you use VPN and any other ressource outside ...
Lasse Michael Mølgaard's user avatar
1 vote

Can I use my local server when connect through vpn

Generally you can - but it's often disallowed/blocked by default for (mainly) security reasons, but you'll most likely have to get the guys & gals who manage the VPN to allow for it - for them to ...
DennisVM-D2i's user avatar
1 vote
Accepted

Google Cloud Policy Based Classic VPN configuration text file for Cisco ASA

At first have a look at this article. You can find details about IPsec and IKE support in the documentation: Cloud VPN only supports a pre-shared key (shared secret) for authentication. You must ...
Serhii Rohoza's user avatar
1 vote
Accepted

Verizon VPN to AWS VPC

Yes, VZW can terminate their MPN solution to virtual hardware within AWS.
Eng's user avatar
  • 26
1 vote

Recently I configured a Site-2-Site VPN Tunnel and I'm getting this errors:

The above error message indicates that negotiation of IKE (Internet Key Exchange) has failed because there is no match between ISAKMP (Internet Security Association Key Management Protocol) policies ...
O King's user avatar
  • 61
1 vote
Accepted

One-Way VPN connection from VPC to on-premise network

There is no native support in VPC for what you need. The root of the problem is that VPC's Hardware VPN isn't really designed for connections to third party networks. It's designed for ...
Michael - sqlbot's user avatar
1 vote

Configuring L2TP/IPSec on Cisco Router 2911

It seems you have a misconfiguration between yours hash algorithm : The conf of your router : ... crypto isakmp policy 20 encr 3des authentication pre-share group 2 hash md5 ... And ...
Sorcha's user avatar
  • 1,335
1 vote

Google Cloud VPN Confusion

What you're looking to do will work with a VPN that supports Port Address Translation (PAT). Google Cloud VPN does not support this feature at the moment. You can configure any open VPN software ...
Marilu's user avatar
  • 296
1 vote

How to force Port 25 to a VPN IP Address

Your best option is to configure the server in Azure as an SMTP relay, and configure all clients/devices to use the internal ip address of the Azure server.
Linuxx's user avatar
  • 1,189
1 vote

VPNC dropping traffic

I was also in the same boat (using Debian v8.8 and vpnc v5.3r550); all was well with the connect (other than group name now being case sensitive), but once tunneled, I lost all traffic in and out. ...
S Hunter Simpson's user avatar
1 vote
Accepted

AWS VPN-only subnet in a VPC with private and public subnets

First off, you should have multiple public and multiple private subnets. The routes for the public subnets should have 0.0.0.0/0 targeting the IGW, which you don't mention in your question. The ...
chris's user avatar
  • 4,013
1 vote

Cisco VPN dynamic crypto-map

Thx hertitu, that helped. I tried to edit with ASDM --> Network (Client) Access --> Advanced --> IPsec --> Cryptomaps, and added the ESP-3DES-SHA-TRANS transform set to the default dynamic crypto map....
Andreas's user avatar
  • 309
1 vote
Accepted

It is possible to setup CISCO1921/K9 router for site to Site vpn behind a firewall?

You need to forward following ports 500 for Phase 1 4500 for NAT-Traversal look at this article below for more information regarding configuration https://networkengineering.stackexchange....
stambata's user avatar
  • 1,718
1 vote

Routing with Cisco CSR 1000v to Peered VPC

You could better use Transit VPC approach for routing traffic from both the VPCs. Note- the Spoke VPCs are not in peering with each other when you use a transit VPC. https://aws.amazon.com/answers/...
riturajb1's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible