Questions tagged [site-to-site-vpn]

460 questions
1
vote
0 answers

Strongswan ipsec site to site vpn to aws virtual private gateway

I have configured ipsec tunnel between strongswan and aws vpc. Below is my ipsec conf: ---- config setup charondebug="all" uniqueids=no conn vpc mobike=no type=tunnel compress=no keyexchange=ikev1 …
1
vote
0 answers

Strongswan site-to-site VPN initiated but no traffic

I´ve seen this sort of question posted a few times before, but so far, none of them have solved my issue. I'm trying to set up an IKEv2 VPN on an VM in GCP using Strongswan. The connection seems to be set up correctly, but no packets are routed and…
Alex Tbk
  • 111
  • 4
1
vote
2 answers

Route traffic between two Azure site-to-site VPN locations

I have a single Azure virtual network gateway running the "Basic" VPN SKU (MainVGW) in "Route-based" mode in the Australia East region. MainVGW has two "Connections" (BR and MH) which are IPsec Site-to-Site VPN connections to two separate sites…
1
vote
0 answers

Firewall IP whitelist vs IPSEC VPN (Azure specific)

We are about to move our company's internal web app and samba shares from a datacenter to Azure. All our locations have a VPN connection to that data center. Instead of creating all new connections to Azure, would it be "safe" to simply use Azure's…
Chemdream
  • 93
  • 1
  • 9
1
vote
2 answers

Public traffic routed over an Amazon AWS VPN dies. Want it to egress from our corporate network

We're migrating to a new jump host, migrating from a machine in-house. We also have 100+ customers that we will still need to communicate with via SSH. Their firewalls currently allow our primary office in via SSH, but not our AWS host. It takes…
UtahJarhead
  • 928
  • 7
  • 14
1
vote
1 answer

Fixing 70% transfer speed slowdown over VPN compared as compared to SSH? (Tested OpenVPN, IPSec/L2TP, OpenSSH, SoftEther)

I'm currently configuring a site-to-site VPN between two VPSes that requires both outgoing and incoming connections. It will be used by a high bandwidth application so I require the maximum amount of speed that I can get over the connection. Using…
Gbps
  • 161
  • 1
  • 7
1
vote
1 answer

Libreswan IPSec IKEv2 unable to connect to multiple remote IPs

I have been beating my head against this for awhile, and I'm hoping that someone can point me in the right direction. I have a number of IPSec tunnels established, mostly from libreswan (v3.23) on CentOS to Cisco ASAs. Most are IKE v1, and in that…
Bob
  • 93
  • 1
  • 1
  • 8
1
vote
1 answer

Securely accessing SMB shares over Internet

I'm looking for some advice about securely offering CIFS shares over the Internet. The file server will be hosted on a cloud service (e.g. DigitalOcean). There will be up to 100 remote devices that need to access the share, although they wouldn't be…
CircularRecursion
  • 137
  • 1
  • 1
  • 7
1
vote
0 answers

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I have one VNET with multiple subnets (frontend,…
Matthew
  • 11
  • 2
1
vote
0 answers

Add Linux VPS (cloud VPS) to Local Network using VPN or IPSec

I have a Linux (Debian 8) VPS (cloud based VPS, not on Google Cloud platform, but that should not matter) on running a software PBX system. I want this remote cloud based Linux VPS to appear on my local LAN (local subnet) as if I bought a blank…
user442519
  • 11
  • 1
1
vote
2 answers

How to extend lan to offsite location

I would like to extend my LAN to another site. I have people who work on both sites and I want it to be as if they are in the same LAN, regardless of where they are. I have servers on both sites and they should not be aware that they are separated…
Johan Claes
  • 65
  • 2
  • 10
1
vote
0 answers

EdgeRouter IPSec Site-to-Site fails to come “up”

I've got two Ubiquiti EdgeRouters set up in different locations. I need to setup a Site-to-Site VPN so that everyone has access to the server on one location. This is the network topology: https://i.stack.imgur.com/7WmhA.png On the two ISP routers,…
1
vote
1 answer

Google Cloud VPN access to public IP address

I have a google cloud system running on subnet 10.128.1.0/24 and a remote network on 10.173.2.2/23 with a google VPN IPSEC tunnel up and running. I have the google remote network set to 10.173.2.2/23, and the local IP ranges 0.0.0.0/0 with the…
1
vote
0 answers

S2S VPN between on premise through pfsense for azure to application VM in azure

I am trying to create multi S2S ipsec VPN connections between on premise locations and a "pfsense for azure" VM. In the same subnet, I also have a application VM running. I can create a VPN tunnel no problem between my on premise device (meraki MX64…
Bart
  • 11
  • 1
1
vote
1 answer

Azure Site-to-Site VPN Tunnel Cisco ASA 8.2

I am attempting to set up Azure (Resource Manager) Site-to-Site VPN connection between my Azure Virtual Network and an on-premises Cisco ASA running 8.2. I've read elsewhere that folks have had success setting this up with 8.2 despite it not being…
Mark Bell
  • 11
  • 3