Questions tagged [vpn]
For questions about Virtual Private Networks (VPNs).
25 questions
11
votes
2
answers
17k
views
In IPsec VPN, how is the pre-shared key encrypted?
I was doing IPsec VPN on ASA 8.0, and I understand a little about that. The initiator starts by sending its ISAKMP policy to the responder, and the responder sends back the matched policy. After that, ...
- 153
4
votes
2
answers
2k
views
IKE phase 1 and phase 2
Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere.
Phase ...
- 405
4
votes
2
answers
4k
views
Why do multi-line crypto ACL's create instability in VPN tunnels?
Why does using multiple sets of specific ip's to specific ip's in a crypto ACL - cause instability in VPN tunnels, please relate this to phase 2 SA's (IPSEC).
Ex.
172.16.0.0 -> 10.0.0.0
172.17.0....
- 3,310
3
votes
2
answers
6k
views
Should I increase the timeout value for UDP on our VPN router-device?
We have a SonicWALL NSA 2400. We have numerous (100+) personnel in different offices in different physical locations that establish VPN sessions successfully every day. Some of these client computers ...
- 45
2
votes
5
answers
472
views
What is the purpose of a VPN?
A VPN connects a PC, smartphone, or tablet to another computer (called a server) somewhere on the internet. But, i could comunicate to another pc even without a VPN, so what is the purpose of using it ...
- 145
7
votes
1
answer
3k
views
Problem with VPN tunel from remote location through ISP (PPTP)
I have network situation like this:
ISP Router (modem) - device given to us by our ISP - modem & router in one but it is set into transparent mode - ISP say so ;D we have to find it that it is ...
- 439
7
votes
1
answer
15k
views
Ipsec vpn, phase 2 unable to come up
I'm pretty sure I know the answer to this but I don't know how to implement it.
Trying to setup an ipsec vpn from a Cisco 2811 to a linux box running openswan. So far I can get phase 1 up but ...
- 353
7
votes
2
answers
4k
views
VPN routing for hosts with multiple ip addresses [closed]
I use Mikrotik RouterOS as the NAT router. Some hosts behind the router also have a direct connection to the Internet and these hosts have a default route to the ISP's gateway instead of RouterOS.
I ...
- 1,281
5
votes
3
answers
4k
views
Is VPN a layer 3 concept?
From Tanenbaum's Computer Network
This demand soon led to the invention of VPNs (Virtual Private Networks),
which are overlay networks on top of public networks but with most of the properties of ...
- 1,575
4
votes
3
answers
2k
views
Cisco ASA Site-to-Site VPN, remote LANs have no Internet
I have a site-to-site VPN from a Cisco ASA 5512 and a Cisco 891. I want all traffic, even Internet access, to come through our ASA. The VPN is established and working. The LANs have connectivity to ...
- 491
4
votes
4
answers
9k
views
VLANS vs. subnets for network security and segmentation
What are the security implications when using subnets as opposed to VLANs for segmenting an enterprise network? We have strict security requirements surrounding the data we handle and need to ensure ...
3
votes
2
answers
549
views
Wireguard protocol understanding source of the received packet
From the docs,
WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following:
This packet is meant for ...
- 219
3
votes
1
answer
1k
views
Cisco ASA Clientless SSL VPN Apply Tunnel Group
I'm trying to implement the answer from a previous question I've asked (Cisco ASA Clientless SSL VPN Restrict Network Access)
My ultimate aim is to set up an SSL VPN on a Cisco ASA device to allow ...
- 171
3
votes
2
answers
788
views
Site-to-Site VPN tunnel configuration
I remember in uni that we implemented VPN tunnels always on the border routers and then use GRE tunnels to connect between two remote subnets.
I was always told that VPN tunnels need to know the ...
- 133
3
votes
1
answer
5k
views
IPSec site-to-site with/without NAT
I am connecting my office to a client's network via IPSec. The need is for me to connect directly to internal IPs on their network; there is no need for them to connect to any services on my internal ...
- 153