New answers tagged

2

Yes you can have multiple VPN servers however they will have to operate on different ports. It's very common practice to have several VPN servers for redundancy.


0

Use Shrewsoft (https://www.shrew.net/download/vpn). It works very well in Windows 10 (including the newest 1607 version). No real issues and it imports in PCF files from Cisco VPN. The only problem you may have is that UWP apps (Metro apps) won't see a network connection while you're connected but Win32 apps have no problem.


0

If you're connecting to a website via Tor, they might not know your IP; but then you still click on that 'sign in' link and provide your details, you've just identified yourself to the website. By doing things like this (and there's far more to it and just sign in links such as cookies, timing attacks and other issues) you can expose information about ...


0

" even though connection itself is secured, data transfers are not" This is very simple to explain. If you drive a car through an old and crumbling tunnel, it may collapse and crash you. That's like a general non-secure connection. Imagine the VPN tunnel as a nice concrete-steel perfectly safe tunnel that you drive through. You will not ever be crashed by a ...


2

It's the same thing, you can basically just rename the .ovpnfile into .confand move it into /etc/openvpn


0

As of version 1.9 (Nov 2015), Docker Networking is available. https://docs.docker.com/v1.10/engine/userguide/networking/ Briefly you create a network sudo docker network create networkname Now when you run a container you add it to the network docker run -d --net=networkname --name containername imagename Now the /etc/hosts files will contain the ...


0

You may consider using SSH tunneling. Create few tunnels from your RPi device to each other you need access to, and you can SSH to them using local RPi ports. The problem is if device reboots your connection will break.


0

Looks like your network configuration is invalid somehow. You should be able to ping every client from the server. Are you sure that your client firewall allow ping requests by the way? Other than that you need to add route to the network 10.8.0.0/24 with gateway 10.8.0.1 on ALL your devices or on your default gateway, so your home network devices can route ...


0

AnyConnect's behavior with untrusted server handling is detailed in the admin guide. Please refer to it for details. If your client is configured to block connections to untrusted servers, first your input text needs to be modified to change the preference to accept connections. This is the case of handling the red prompt (Untrusted error) as mentioned in ...


1

The reason why you should use private addresses in those ranges in your internal networks, is because these are the addresses that are not used on the internet for real networks. In fact backbone routers won't forward in general packets for these addresses (although some ISPs actually dish out private IPs to customers, in this case you'll be going through ...


1

I know this is an old question, and some answers above are correct. To put it simply, the Internet Assigned Numbers Authority (IANA) established three blocks of the IP address space for private networks:10.0.0.0 – 10.255.255.255, 172.16.00 – 172.31.255.255, 192.168.0.0 – 192.168.255.255. The third IP address that you used is enough for most users for ...


1

As far as I know AWS blocks this type of operation (and other services, like route internet traffic through your network). We just did the following with AWS VPC VPN connection: We created a VPC for our instances, with a specific IP address range like 10.10.0.0/16 in one region, and we launch several instances there. After that, we created a Virtual ...


1

Zoredache has put you on the right track. The details of the answer are as follows: Leave the VPN as is, this will setup the default routing table called main; Now we setup a second routing table, for the packets that must not pass thru the VPN. We call the new routing table novpn (not a major flight of fancy there, I agree): echo 200 novpn >> /etc/...


-1

A couple steps to try troubleshooting: Can you use the VPN from any Windows clients on the network? (or any other clients on the LAN for that matter; anything the hosting VM. If understand your post correctly this device is the only one that can connect over the VPN.) When trying to connect to the VPN VM [from the linux server] run the following command ...


0

When I fully disable the Windows Firewall, I have internet access. It's weird. By default, the Windows firewall will not block any outbound traffic. When we connect a VPN server, we will forward all of the traffic to the VPN server. And the VPN server should forward these packets to the internet correctly. If the VPN server doesn't help on forwarding ...


0

It depends on the web site you are accessing and what special scripts run on their servers. For example: When you connect to a wifi hotspot, you will first be directed to a login web page where you have to enter your credentials to be given farther access to the Internet. If you check the address bar of that login page, you will discover your MAC address ...


0

In case you want to hide your web server's port using a VPN (openvpn) on the web server host In that case, you could configure a vpn server, e. g. openvpn, to listen on your host's ip, e. g. 192.168.1.1, port 1194 configure your web server to listen only to 192.168.1.1, port 4444 stop the port forwarding in your router which forwards traffic from the ...


2

You're writing the Netmask wrong. Netmask depends upon the private IP ranges you use, hence if your private ip range is 192.168.1.1-254 then netmask should be 255.255.255.0 Updated route configuration : route foo.bar 255.255.255.0 {your-default-gateway} route 1.2.3.4 255.255.255.0 {your-default-gateway} To find out what your default gateway IP address ...


0

If you're using OpenVPN Client for your VPN Connection, then you can add custom routes for specific domains/IPs. So that once you add the route, the connection to those domains/IPs will go through the specific route. A route syntax for OpenVPN Config file is : route [ip or website name] [subnet mask] [your gateway] So in your case, if the gateway is ...


0

You can add routes for any websites you want to pass via eth0 like this: ip route add websiteIP via gatewayIP dev eth0 Here, you add the IP address of the website you want to visit at websiteIP, and add your normal gateway IP at gatewayIP.


0

I did something similar with iptables a while back. The main difference between your goal, and my project, was that I was attempting to redirect all traffic incoming from the network to tun0. No changes to firefox required. The gist of it is this: A custom entry in rt_tables is created to handle certain packets All packets destined for port 80 or a ...


0

Here are some good articles about how certificate works. It will be helpful for understanding digital certificate: What are certificates How certificate works


0

In this section we will generate a master CA certificate/key, a server certificate/key certificate and key which is used to sign each of the server and client certificates. That... I'm guessing that's just the result of copy&paste accidentally mashing two different paragraphs together. It should be like this: "In this section we will generate a master ...


1

Your "clear" unencrypted traffic goes to tun0, where openvpn encapsulates and encrypts it, and sends it out of eth0 to the remote gateway, where it is decrypted. So if you block eth0, then you will prevent the encrypted packets being sent to the remote gateway. tun0 provides a routing path. If you sent your packets directly out of eth0, then they would ...


2

Your ISP knows the IP address of their website so won't impose any traffic policing on requests going to that particular IP address. We cannot help you circumvent your ISP's terms of service.


0

You can use your Linux server as a SOCKS5 proxy using SSH tunneling. It's safe enough and all the traffic will be encrypted using SSH v.2 protocol. All you need is Putty on Windows, and not SSH server configuration needed. Take a look here for examples of SSH tunnel configuration.


0

Create a shortcut to the phonebook file works pretty well too. %userprofile%\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk Screenshot of shortcut and what it opens


0

Can someone, kindly, help how to troubleshoot? First of all, to wipe out the possibility which firewall may cause this issue. please turn off the firewall and try again. If it doesn't work, we need to make sure that there is a valid route for client to access your Windows box. Please try to ping the Windows box from the VPN client. If the ping successes, ...


0

OK a quick update, I turned off NAT on my "Lab" router and I was then able to resolve host names. However..My Internet then went down and I was also unable to log back into the router! So maybe something to do with double-NAT??


0

my questions is how can I access the share files from Network B to Network A through VPN by the Address name and NOT the IP address? First, if you want to access the shared files in Network A from Network B, you do not need VPN. NAT is enough. In your deployment, the Network A is external network and the Network B is the internal network. Access the ...


0

From what I understand of your log: env_block is an error message meaning that there is a problem with environment variables. More specifically, the variable PATH, which does not contain elements needed by OpenVPN. That means OpenVPN can't start the tools it needs to configure Windows correctly. To check if that really is the problem: Open Control Pannel ...


0

Unsupported protocol 'Compression Control Protocol' (0x80fd) received Where did you get this error message? If you get it on the client, it means that the server is sending the 'Compression Control Protocol' (CCP) message and your client can not recognize it. You should enable the CCP on the client so that the negotiation process can continue. By the way, ...


1

Windows 10 provides a new function to achieve your goal. It's called "App-triggered VPN" and "Traffic filters". App-triggered VPN VPN profiles in Windows 10 can be configured to connect automatically on the launch of a specified set of applications. This feature was included in Windows 8.1 as "On demand VPN". The applications can be defined ...


0

Have you tried with the Windows built-in VPN client? If both connections are created by the built-in client, we are able to dial up the first one automatically when we try to connect to the secondary VPN connection. Here is the screenshot of my computer: In your case, please try to establish the first connect through Windows built-in VPN client. Hope ...


0

I had the same problem when running through the browser: IE, Chrome, Firefox I ran the Cisco connect program directly by clicking on start button / Programs / Cisco / Cisco AnyConnect Secure Mobility Client Then Run Remote Desktop Connection


1

I don't believe it's possible to connect with a VPN profile that isn't saved, but you can create a connection on the command line with PowerShell, using the Add-VpnConnection cmdlet specifically. For example, to create a VPN connection, you might do something like this: Add-VpnConnection -Name 'MyNewVpn' -ServerAddress 'vpn.example.com' Depending on your ...


3

I'm attempting to add users on the sonicwall from my windows AD. I want the windows logon password to be the VPN password. Users>Local users> import from ldap > I pick the user and they are created. I think you want to Select LDAP + Local Users and not just Local Users if you want to Integrate LDAP/Active Directory with Sonicwall UTM Appliance. I'...


0

I'm not familiar with the kerio vpn. If it is free and you installed client on your computer, then it might be a malware. But it is just a suspect. To find the detailed information about the unknown traffic, please perform a network capture on the server. I would suggest you to install the Network Monitor if your computer has Windows OS. It will tell you ...


1

That's because the guest isn't making contact with a DNS server that's on the VPN network. Only way to fix this would be to run a DNS server inside the VPN network and then edit the guest network DNS settings to also include the IP of the DNS server. Make sure to only add this DNS server, don't make it the only one or unless you properly configure everything ...


1

You can get the type of VPN you're looking for by firewalling off the box you're using as a VPN endpoint to restrict it to accessing the Internet but not the rest of your network. For example, if you have a Linux-based router, you can use IPTables to DROP FORWARDed traffic from your VPN endpoint to the LAN, but allow to the Internet. Edit: you could also ...


0

i'd recommend a PPTP VPN, Simple to setup and will provide everything you listed above. This links below shows how to fully set it up using Windows 7 http://strongvpn.com/setup-windows-7-pptp.html Mac OS https://www.ibvpn.com/billing/knowledgebase/48/Set-up-the-PPTP-VPN-connection-on-Mac-OS.html Linux Distros https://www.photonvps.com/...


0

If you connect properly- You can check if Automatic config is turned on. Go in Start -> Settings -> Network & Internet -> VPN -> now pick your VPN connection and click on Advanced Options button. Find "Automatic configuration" and turn it on... and disable all next settings (like use script or manual configuration) if u have some. If that didn't work, ...


0

You have two options: 1.Remove the default gateway pointed to the VPN server and add the static routes for accessing the subnets behind the VPN server. 2.Make sure that the traffic from VPN client side can be NAT to the internet correctly.


0

I think this is not possible. For UDP hole punching you need one more server to be involved. What do you mean with 'it is activated'? For solutions like L2TP it is necessary that not only UDP packets are routed properly, e.g. you also need IP protocol 47 (GRE) to pass the firewall. NAT makes things more complicated. If you want to connect to a device behind ...


0

There is no problem to vpn to use a site-to-site vpn. HOWEVER, when you setup a site-to-site you allow certain IP's from your local traffic (office 1) to be allowed to the remote site (office 2) When you vpn into the office (office 1) from home, you get a DIFFERENT IP RANGE, so the site-to-site vpn won't allow you through to the remote RDP (office 2) ...


0

When you are connected to a VPN, you are connected to the remote network - and thus, your local DNS settings will be different from your remote's records. This is the trouble you're seeing. The answer would be found in your remote network's DNS settings. This will entirely depend on how the site is set up. It does help sometimes to use ipconfig \flushdns ...


0

I think VMware fusion use Cisco Any connect to connect to internet right? Wrong. They use your MAc to connect to the network.


0

In additional to Flowerking's answer, you could specify the folder in which your ovpn file lives, perhaps to store private key data in user space. For that, use config_dir: openvpn-gui.exe --connect "client.ovpn" --config_dir "C:\Users\Foo\Documents\protected_crypto_data"


-1

the reason you lost internet is because the asa was set in full tunnel mode which mean all your traffic will go through the vpn tunnel. If you have access to the ASA, set it to split-tunnel mode then you will be able to access your internet again.


0

I was able to solve this problem using a configuration option specific to the game in question (which I stumbled upon quite by accident with no small amount of luck). This allowed me to specify directly which interface the game should use. This is done by adding the following entry to the Options.ini file (located in %USERPROFILE%\AppData\Roaming\My Battle ...



Top 50 recent answers are included