PKI and IPSec IKEv2 remote-access VPN
Hello! VyOS was always strong in supporting a multitude of different VPN techniques ranging from old school IPsec site-to-site/DMVPN setups to new kids on the b...
Category: VyOS Platform Blog | vpn
Take a third option: site to site OpenVPN
I've written a long series of post about setting up IPsec VPNs between NATed machines. As you've already seen, with some creative configuration it's possible, b...
Interaction between IPsec and NAT (on the same router)
I've just completed a certain unusual setup that involved NATing packets before they are sent to an IPsec tunnel, so I thought I'll write about this topic. Even...
Setting up GRE/IPsec behind NAT
In the previous posts of this series we've discussed setting up "plain" IPsec tunnels from behind NAT. The transparency of the plain IPsec, however, is more oft...
How to setup an IPsec connection between two NATed peers: using id's and RSA keys
In the previous post from this series, we've discussed setting up an IPsec tunnel from a NATed router to a non-NATed one. The key point is that in the presence ...
Why IPsec behind 1:1 NAT is so problematic and what you can do about it
Not so long ago the only scenario when the issues with IPsec and NAT could arise was a remote access setup, while routers invariably had real public addresses a...
