VPN Infrastructure Diagnostics & Troubleshooting
Diagnose and resolve VPN issues across all vendor platforms
What You Can Do
You get systematic VPN troubleshooting workflows that identify root causes of connectivity failures, performance degradation, and configuration errors across Cisco, Fortinet, Palo Alto, and other major platforms. The skill walks you through configuration audits, log analysis, and remediation steps to restore service quickly and document the resolution process.
Features
Analyze settings for Cisco ASA, VyOS, Fortinet, Palo Alto, SonicWall, and custom implementations against security and performance baselines
Identify latency bottlenecks, bandwidth constraints, and encryption overhead through packet capture analysis and throughput testing
Parse VPN server and client logs to pinpoint authentication failures, tunnel drops, and protocol mismatches
Detect misconfigurations in encryption, key exchange, NAT-T, fragmentation, and routing that block or degrade connectivity
Step-by-step guides to verify tunnel establishment, firewall rules, routing tables, and NAT behavior
Tune encryption algorithms, buffer sizes, and MTU settings to maximize throughput without sacrificing security
Create runbooks for recurring VPN problems so your team can troubleshoot independently
Example Output
Example 1: Multi-Site VPN Connectivity Failure
Issue: Site B cannot reach Site A over IPSec tunnel.
Diagnosis Output:
✓ Phase 1 (IKE) — Established
✗ Phase 2 (IPSec) — Failed to negotiate
└ Mismatch: Site B offers AES-256-GCM, Site A only supports AES-128-CBC
└ Action: Update Site A IKE proposal to accept AES-256-GCM
✓ Firewall rules — Allow UDP 500, 4500 ✓
✗ Routing — Site B's firewall blocks 10.0.1.0/24 traffic
└ Action: Add static route on Site B firewall for 10.0.1.0/24 via VPN tunnel
Resolution: Update Site A Phase 2 proposal + add firewall route on Site B
Example 2: Client VPN Performance Degradation
Issue: VPN clients see 80% throughput drop after update.
Diagnosis Output:
✓ Tunnel established, authenticated, connected
✗ Performance metrics (baseline → current):
- Throughput: 150 Mbps → 30 Mbps (80% drop)
- Latency: 5ms → 45ms (9x increase)
- Packet loss: 0% → 3%
Root cause: Post-update logs show SHA-512 + AES-256-GCM negotiated
(high CPU overhead on older client CPUs)
Fix: Revert to SHA-256 + AES-128-GCM or deploy CPU-optimized client
Example 3: VPN Configuration Audit Summary
Audit: Cisco ASA Pair (Active/Standby)
✓ Strong: Phase 1 uses AES-256, DPD enabled, IKEv2 only
⚠ Warning: Phase 2 includes deprecated 3DES-CBC
⚠ Warning: NAT-T disabled (blocks enterprise proxies)
✗ Critical: Perfect Forward Secrecy disabled on Phase 2
Remediations:
1. Remove 3DES-CBC from Phase 2 proposal
2. Enable NAT-T on both ASA units
3. Enable PFS in Phase 2 with group14/20
What's Included
- SKILL.md: Complete VPN troubleshooting workflows with decision trees for Cisco, Fortinet, Palo Alto, and generic IPSec/L2TP/PPTP scenarios
- VPN Configuration Audit Checklist: Security baseline and performance tuning items for each vendor
- Troubleshooting Runbook Template: Document recurring issues with symptoms, root causes, and remediation steps
- Log Analysis Reference: Common VPN errors across vendors with interpretation and fixes
- Performance Tuning Guide: Encryption algorithm selection, buffer/MTU optimization, and throughput testing methodology
- Multi-Site Connectivity Flowchart: Step-by-step verification of Phase 1/2, firewall rules, routing, and NAT
Who It's For
- Network Engineers — Diagnose and fix VPN failures without vendor escalation
- System Administrators — Troubleshoot remote access VPN client issues for end users
- Security Teams — Audit VPN configurations for compliance and encryption strength
- MSP/Managed Service Providers — Standardize VPN troubleshooting across customer sites
- DevOps/Infrastructure Teams — Debug site-to-site connectivity issues blocking deployments
Best For
- IPSec tunnel establishment failures (Phase 1/Phase 2 negotiation issues)
- Client VPN connectivity problems and performance degradation
- Configuration audits and security policy validation across multi-vendor environments
- Post-incident root cause analysis and documentation
- Performance tuning for VPN gateways and clients
You might also like
You can design culturally appropriate survey instruments tailored to international development contexts, analyze mixed-methods data by integrating quantitative findings with qualitative insights, and implement robust data quality management systems for your field operations. Claude helps you create survey templates with adaptive logic, develop validation protocols, and produce data quality reports that highlight issues before analysis begins.
by skillslib
Prepare comprehensive expert witness reports and testimony that meet Daubert standards for admissibility and withstand cross-examination scrutiny. You'll get structured case analyses integrating psychological assessments, relevant case law citations, and anticipated counterarguments. The skill helps you document your forensic opinions with the legal rigor required in criminal, civil, and family law proceedings.
by skillslib
You can systematically evaluate architectural options by building decision matrices, identifying trade-offs, and documenting design rationale. This skill generates comparison frameworks, risk assessments, and architecture decision records (ADRs) that help you choose between competing approaches based on concrete criteria like performance, scalability, cost, and team capabilities.
by skillslib
You provide a single core insight or perspective, and this skill transforms it into a complete, coordinated thought leadership content suite across every major channel. It generates optimized articles, social threads, email sequences, presentation outlines, and more—all reinforcing the same core message while adapting to each platform's unique audience and format. Every piece maintains strategic consistency while maximizing reach and engagement.
by skillslib
Analyze commercial insurance applications by extracting risk factors, evaluating loss history and industry exposure, and generating structured underwriting recommendations with standardized documentation. You'll reduce review time per application, ensure consistent decision criteria across your team, and maintain compliant audit trails for every underwriting action.
by skillslib
You can convert raw discovery call notes into polished, multi-section sales proposals that include executive summaries tailored to buyer personas, needs analysis mapped to your solution architecture, tiered pricing options with competitive positioning, ROI projections with financial justification, and realistic implementation timelines. The skill preserves personalization and strategic positioning while automating structural components, letting you respond to RFPs and time-sensitive opportunities without sacrificing quality or consistency.
by skillslib
This skill analyzes property damage claims to identify viable subrogation opportunities against third-party defendants. It quantifies recovery potential using liability assessment, damages analysis, and comparable settlement benchmarks—then develops negotiation-backed strategies to maximize your recovery. The skill guides you through intake, documentation, negotiation, and settlement workflows to transform claims into recoveries.
by skillslib
Turn project descriptions, timelines, and structured data into professional draw.io diagrams instantly. You can generate flowcharts, org charts, Gantt charts, swimlane diagrams, and process flows by describing what you need. Claude creates draw.io XML that you can open directly in the editor or modify further.
by skillslib