New answers tagged

0

Looks like your network configuration is invalid somehow. You should be able to ping every client from the server. Are you sure that your client firewall allow ping requests by the way? Other than that you need to add route to the network 10.8.0.0/24 with gateway 10.8.0.1 on ALL your devices or on your default gateway, so your home network devices can route ...


-1

What you would need to do is set up Site to Site VPN tunnel. Right now, SERVER only has access to two networks; its local network, and the VPN network. This would make it so that devices on both networks could see each other.


1

You can use a CMD command to add an IP route. Example adapted to your case: ROUTE ADD 10.10.0.0 MASK 255.255.255.0 192.168.1.20 METRIC 5 ^-net to reach ^-subnet mask ^-gateway to use ^-keep that number low You can use the parameter -p after ROUTE to keep that route across reboots (i.e. ROUTE -P). And remember to run that command in an ...


1

Zoredache has put you on the right track. The details of the answer are as follows: Leave the VPN as is, this will setup the default routing table called main; Now we setup a second routing table, for the packets that must not pass thru the VPN. We call the new routing table novpn (not a major flight of fancy there, I agree): echo 200 novpn >> /etc/...


0

I finally got it working :-) My working solution involves: Parallels VM (the "router"): "host only" network, with the ip range defined by default by Parallels (I could change that in Parallels - Preferences - Network - Host Only). Setup nat with iptables with wlan0 (wifi) as the outbound interface. Virtualbox VM (the "client"): "bridge" network, using ...


0

Reboot helps but as soon as I connect to a VPN server with OpenVPN it destroys my connection for good and I have to reboot again. It sounds to me that you are using the VPN server as your default gateway. If yes, please remove the default gateway pointed to the VPN server. Then your internet should be recovered. To access the subnets behind the VPN server, ...


0

Try /etc/init.d/networking restart; /etc/init.d/iptables restart - This will restart your network and restart IPTables as well. Note that IPTables handles firewalling but not generally routing (routing can usually be handled with "ip route" commands or the older "route" commands)


0

connect directly to 192.168.1.something will faster. your packages data does not need to passthrough router forwarder. communication will be established in OSI layer 2.


2

If you're using the public IPv4 address (visible to the Internet), then the network traffic gets sent to the device with that address. That would be your router. This means your router needs to receive the traffic. Then, your router is noticing that there is a forwarded port, so it converts the network traffic's IP address and then sends the converted ...


0

So long as it works it doesn't matter. However you will probably get better performance by using the LAN address and thus, not involving the router.


0

Only routing is not enough. You need enabling routing and NAT on your Windows 7 box. Windows 7 has a built-in NAT function called ICS. You may try it. Also, you may try to install any router software to achieve your goal. Personally, I use GNS3 to simulate the Cisco router so that I can get a lot of features.


0

Any enterprise router is able to satisfy your requirement. Simple ACL would achieve your goal. As a CCIE, I would prefer cisco device personally. We currently use a Cyberoam UTM, which has a nice GUI for rules GUI is not a good idea for me. Normally, it is not so stable if we involve GUI and also, it is not good for troubleshooting.


0

Looking at that raw packet screenshot, your packets look to have essentially no payload. I imagine that your PC is sending an enormous amount of tiny packets which is crippling your network devices and capping out at 4mbps. You should send packets with a real TCP/UDP payload to accurately measure network throughput. I realise you have have specific ...


0

I'm currently trying to offer Blackbox an IP from same 10.0.1.0/24 subnet Please do not assign the same subnet to the eth2. Actually, your Linux server(Gateway) acts as a router. Assigning same subnet on different interfaces is not allowed on the physical router(Cisco). It's called overlap. You should assign the different subnet on the eth2, such as 10.0....


2

If you don't already understand IP Routing, then the results from traceroute will not tell you anything. The route between two nodes over the wider Internet can change from second to second. And the route in one direction is not the same as the return route. And that's not even accounting for the fact that the specific case you mention uses a CDN, meaning ...


0

You have two options: 1.Remove the default gateway pointed to the VPN server and add the static routes for accessing the subnets behind the VPN server. 2.Make sure that the traffic from VPN client side can be NAT to the internet correctly.


1

Normally, the traceroute will use ICMP message. If we use the TCP or UDP message, the traceroute can't know the services running on the destination computer, which means it's hard to determine the port in TCP or UDP message. But the ICMP message should be OK if there is no firewall blocking the ICMP message. can I be certain that an active browser ...


1

Take a look here: http://askubuntu.com/questions/612840/adding-route-on-client-using-openvpn D) Bonus option! openvpn also has a up /down directive that allows you to launch a script on connect to vpn this can allow you to do anything you want really. setting dns, routes etc. But it requires you to store the commands in another file. So if you had ...


-1

the reason you lost internet is because the asa was set in full tunnel mode which mean all your traffic will go through the vpn tunnel. If you have access to the ASA, set it to split-tunnel mode then you will be able to access your internet again.


0

I'm not sure that I understand the problem here. Let's assume that your server have the IP 1.1.1.1 and VPN IP 10.0.0.1 Is your web server listening on VPN IP only? Then you need to add your domain name to the hosts file on your local PC like: 10.0.0.1 mydomain.com After that you'll access your web server using domain name. Take a look here for more ...


1

If you want to set up a transparent proxy, you need a proxy server software that supports it. That’s because a “captured” connection is different from how the browser would normally talk to a (regular) proxy. First, you install your proxy, Squid in this case, and verify it works as a regular proxy. Then, you set it to accept captured connections: ...


0

It is generally used to set routes to the VPN clients. For instance, I use it to push 0.0.0.0 to one of the computers inside the VPN so all traffic is tunneled through the VPN. In your case, it would seem that you are pushing a route to the LAN behind the VPN so you end up sending packets to the VPN tunnel endpoint to be forwarded to the LAN. In which ...



Top 50 recent answers are included