[AusNOG] telstra.extranet limitations

Ryan Mounce ryan at mounce.com.au
Tue Aug 1 16:16:17 EST 2017


 No state is created for ESP packets, they get out to the server but
not back to the handset.



On 1 August 2017 at 15:41, Jeremy Visser <jeremy.visser at gmail.com> wrote:
> On 1 August 2017 at 16:04, Ryan Mounce <ryan at mounce.com.au> wrote:
>> IPsec is currently broken over Telstra mobile IPv6.
>
> Can you elaborate?
>
> Do they block UDP port 500? ESP packets?

UDP/500 is fine, so key exchange occurs. No state is created for ESP
packets, they make it out to the server but responses are silently
dropped.

>
> If you can specify exactly what's wrong a little birdie on this list
> may notice and fix it.  :-)

I believe I have already made direct contact with said birdie :)


More information about the AusNOG mailing list