14
votes
VPN instead of VLANs
There is frequent employee turnover, which currently forces changes in the configuration of vlans on the switch ports.
As it seems, you might be using port-based VLANs instead of privilege groups. ...
- 9,232
9
votes
Accepted
VPN Server protocol or trick work in iran
So far there is a handful of VPN protocols that you can try. I'll try to summarize'em along with my observations of how easily they can be distinguished (and blocked) with or without DPI.
This post is ...
- 8,500
5
votes
Accepted
How can I convert a wireguard vpn config file to openvpn?
You cannot do this, WireGuard is not OpenVPN, OpenVPN is not WireGuard they are different things that are only related by being VPNs.
- 115k
4
votes
Accepted
DNS strange behavior for VPN addresses
With insights from @PatrickMevzek and @user1686 I managed to understand the problem, so I'll post this answer to help anyone with the same problem.
The barracudavpn program, after the connection, ...
- 168
2
votes
Use smarthost only if VPN is up (Debian, Postfix)
Your situation is similar to a dialup user.
Copy /etc/postfix/main.cf to /etc/postfix/main.cf.nodefer.
Copy /etc/postfix/main.cf to /etc/postfix/main.cf.defer and add defer_transports = smtp.
In your ...
- 17.9k
2
votes
Accepted
The specified protocol identifier is not known to the router Windows server 2022
I've found one thread and one article online regarding this error message - both suggest the issue is IPv6 being disabled on the VPN server - have you checked for that? It seems like that prevents the ...
- 156
2
votes
Accepted
How to setup Client VPN Endpoint to use AWS DNS?
VPN's own CIDR block is not supposed to be part of your VPC's CIDR block and exists outside the VPC.
As above my associated subnet was on 172.20.254.0/24, part of VPC CIDR 172.20.0.0/16. Having the ...
- 1,621
2
votes
Accepted
How so I SSH to two different machines with the same IP?
SSH checks its known_hosts for all entries for this host. If all of them don't match, including the usual case of all being the single one entry, then SSH will complain.
If any of them matches SSH ...
- 9,670
2
votes
Accepted
Can I connect to a server at home from a laptop via a VPN running on a remote VPS?
Yes you can install VPN on a VPS and use that to connect to your home network.
The architecture for this kind of VPN is called hub-and-spoke and can be done easily with WireGuard.
The setup on server ...
2
votes
Domain name is resolving to DC that is not accessable for VPN users
In Active Directory Sites and Services, you have to define a subnet for the VPN user, and assign it to the site that has the DCs you want them to talk to.
- 23k
2
votes
Is it possible to connect a Nodejs server to multiple VPN?
Yes, it's possible, and even easy as long as the IP ranges don't overlap. That's normal routing for you; Longest prefix wins.
- 5,793
1
vote
Can someone breakdown what the IPv6 address fd15:53b6:dead::2/64 is?
AWS copied the man page regarding block-ipv6, to illustrate an example of when you don't want IPv6 traffic outside of a tunnel (leaks), but the network is not IPv6 ready. Which apparently is currently ...
- 31k
1
vote
Accepted
Ubuntu 22.04 netns with veth connected to bridge unable to ping gateway
I have found an answer to my problem. It turned out to be something really simple. Basically, two weeks ago I had installed Docker. I wasn't aware of this, but Docker messes with iptables.
root@sam-...
- 19
1
vote
How to implement NAT in MuleSoft Anypoint VPN?
What @aled mentioned above will work as long as you have presence in AWS. That way you can push traffic over your own AWS VPC and NAT from there on. Still, I would probably NAT inside my own DC.
- 11
1
vote
Accepted
VPN integration with a 3rd party Cisco device
too long for a comment, but please ask detail from your provider. In most situation it's a simple Site-to-Site VPN to do. You are overthinking it at the moment.
The end goal is that they can query a ...
- 16.5k
1
vote
Accepted
How do I install dhcp plugin for Strongswan on Ubuntu focal
You need to install the libcharon-extra-plugins package because the plugin is technically located in libcharon (note that the other two packages you reference are actually called libstrongswan-...-...
- 3,870
1
vote
forwarded TCP traffic is refragmented on Linux despite the "Don't fragment" flag
Pretty certain that this is going to be related to TCP segmentation offload which allows the kernel to stuff packets much larger than the MTU onto the ring buffers of the ethernet driver, then the ...
- 23.2k
1
vote
Accepted
How do I make an OpenVPN server access the internet using its second IPv4 when a client connects to VPN on a specific port?
You should use /24 instead of /8 in the -s matches of your SNAT rules.
FINAL TOUCH:
after changing the rules try iptables -t nat -F POSTROUTING and restart the ufw, and check with iptables-save -t nat ...
- 722
1
vote
Accepted
Redirecting traffic via Wireguard VPN
Sounds like you just want to be able to connect from your Network Device to your Example Client, and vice versa? If so, then this is the classic Hub and Spoke WireGuard scenario, with the VPS as the ...
- 1,176
1
vote
Use smarthost only if VPN is up (Debian, Postfix)
Postfix supports dynamic configuration using various databases http://www.postfix.org/DATABASE_README.html
That might be too much for your setup. Since you always want to use a relayhost, you can use ...
- 289
1
vote
Accepted
WireGuard: 2 client peers on the same server with Internet connection and port forwarding
The simplest thing to do would be to add masquerading to your VPS's iptables rules -- that would rewrite the source address of packets forwarded to your Homeserver to use the IP address of the VPS's ...
- 1,176
1
vote
Accepted
Wireguard Client to Client issues
Turns out, I needed these PostUp and PostDown rules in my wg0.conf to make it work.
PostUp = iptables -I FORWARD 1 -i wg0 -j ACCEPT; iptables -I FORWARD 1 -o wg0 -j ACCEPT; iptables -t nat -I ...
- 121
1
vote
Accepted
Why does StrongSwan charon-cmd client require the --cert command-line option for multiple CA chain certificates?
Intermediate CA certificates are currently not accepted as trust anchor in strongSwan, only self-signed root CA certificates.
If the server sends the intermediate CA certificate along with the server ...
- 3,870
1
vote
Why can't i acces remote Windows Server through MacBookPro?
Are you connecting by domain name or via IP?
Try connecting with IP and see if you get a different response.
You can also ensure the connection is actually possible by using telnet in Terminal as so: ...
- 23
1
vote
VPN overlapping with network that provides access to internet
Implement IPv6 and solve overlapping address space problems forever.
When the internet access via A is over its own unique IPv6 prefix, for example 2001:db8:45b2::/48, it no longer conflicts.
IPv4 ...
- 31k
1
vote
How do I configure Wireguard for a K8s multi-site?
(Apologies, this should probably be a comment as I'm not 100% sure if it's correct, but I don't have enough rep on this site to use comments yet.)
I believe the AllowedIPs for each [Peer] need to be ...
- 111
1
vote
Adopt IP of network connecting to without routing everything through the VPN
In theory you could set a source IP on a packet that goes out. But in practice not.
The Users own equipment would need to set this source IP, but most ISPs does not allow for spoofing a IP that "...
- 1,208
1
vote
SonicWall SSL VPN with both AD and local users
Yes you can use both account type; please use LocalDomain for the domain, case sensitive.
- 16.5k
1
vote
Accepted
How to connect to a Cisco VPN in "native mode"?
Well, finally I got the solution:
The VPN was vpnc type.
As I thought, the data called Dedicated public IP was useless.
The domain name called Remote was finally the Gateway.
And the PSK was the ...
- 161
1
vote
L2TP VPN with 2 network interfaces
##Install ipsec-vpn by script normally##
##Environment##
eth0: 111.222.333.91/29 gw 111.222.333.92
eth1: 192.168.0.1/24 gw 192.168.0.254 (default gateway)
##Solution##
// redirect input
iptables -t ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible