<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">CGNAT, like all NAT is a finicky beast. Best long term solution is to use ipsec over IPv6 and Telstra support Dual stack on their 4g network so nothing is stopping you from that side. <div class=""><br class=""></div><div class="">I'm certainly bumping it up my priority list. <br class=""><div class=""><br class=""></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 21 Sep 2018, at 9:20 am, Chris Barnes <<a href="mailto:chris.p.barnes@gmail.com" class="">chris.p.barnes@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">Has anyone received a Reason For Outage report on this?<div class=""><br class=""></div><div class=""><div dir="auto" class=""><br class=""><div class="gmail_quote"><div dir="ltr" class="">On Fri., 21 Sep. 2018, 6:49 am Mat van den Hoogen, <<a href="mailto:Mat@mimp.com" class="">Mat@mimp.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="auto" class="">Thanks Russell,<div class=""><br class=""></div><div class="">All looks good here, cheers!</div><div class=""></div></div><div dir="auto" class=""><div class=""><br class=""><div class="">~Mat</div><div class=""><br class="">On 21 Sep 2018, at 6:08 am, Russell Langton <<a href="mailto:russell3901@gmail.com" target="_blank" class="">russell3901@gmail.com</a>> wrote:<br class=""><br class=""></div><blockquote type="cite" class=""><div class=""><div dir="auto" class="">Hi All,<div dir="auto" class="">Fix was successfully deployed this morning.</div><div dir="auto" class="">This should fix any IPsec IKE issues.</div><div dir="auto" class="">CPE may need to be rebooted if not automatically restored.</div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Let me know if any further issues.</div><br class=""><br class=""><div class="gmail_quote" dir="auto"><div dir="ltr" class="">On Thu, 20 Sep. 2018, 12:46 pm Dino Sosic, <<a href="mailto:Dino.Sosic@datacom.com.au" target="_blank" class="">Dino.Sosic@datacom.com.au</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-AU" link="blue" vlink="purple" class="">
<div class="m_-8380165605493046524m_-6879468148345470215WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class="">Hi,<u class=""></u><u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class=""><u class=""></u> <u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class="">Telstra is putting a fix to this issue with a change order tonight. Should be fixed after that.<u class=""></u><u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class="">Cheers<u class=""></u><u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class="">Dino<u class=""></u><u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class=""><u class=""></u> <u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class=""><u class=""></u> <u class=""></u></span></p><p class="MsoNormal"><b class=""><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif" class="">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif" class=""> Alex Samad <<a href="mailto:alex@samad.com.au" rel="noreferrer" target="_blank" class="">alex@samad.com.au</a>>
<br class="">
<b class="">Sent:</b> Thursday, 20 September 2018 10:34 AM<br class="">
<b class="">To:</b> <a href="mailto:russell3901@gmail.com" rel="noreferrer" target="_blank" class="">russell3901@gmail.com</a><br class="">
<b class="">Cc:</b> <a href="mailto:Mat@mimp.com" rel="noreferrer" target="_blank" class="">Mat@mimp.com</a>; Ausnog <<a href="mailto:ausnog@lists.ausnog.net" rel="noreferrer" target="_blank" class="">ausnog@lists.ausnog.net</a>>; Dino Sosic <<a href="mailto:Dino.Sosic@datacom.com.au" rel="noreferrer" target="_blank" class="">Dino.Sosic@datacom.com.au</a>><br class="">
<b class="">Subject:</b> Re: [AusNOG] IPsec VPN over 4G telstra issue<u class=""></u><u class=""></u></span></p><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div class=""><p class="MsoNormal">Do we know what the issue is ?<u class=""></u><u class=""></u></p>
<div class=""><p class="MsoNormal">Is it just the IKE packets or are there other packets disappearing <u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">We use PA's ipsec vpn tech so ipsec inside udp from memory - wondering if they are filter / intercepting or ?<u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">A<u class=""></u><u class=""></u></p>
</div>
</div><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div class="">
<div class=""><p class="MsoNormal">On Thu, 20 Sep 2018 at 09:46, Russell Langton <<a href="mailto:russell3901@gmail.com" rel="noreferrer" target="_blank" class="">russell3901@gmail.com</a>> wrote:<u class=""></u><u class=""></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm" class="">
<div class=""><p class="MsoNormal">Thanks Mat, its being worked on.<u class=""></u><u class=""></u></p>
</div><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div class="">
<div class=""><p class="MsoNormal">On Thu, 20 Sep. 2018, 9:32 am Mat van den Hoogen, <<a href="mailto:Mat@mimp.com" rel="noreferrer" target="_blank" class="">Mat@mimp.com</a>> wrote:<u class=""></u><u class=""></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm" class="">
<div class=""><p class="MsoNormal" style="margin-bottom:12.0pt">We are experiencing the same on a few of our services, nothing has come back up though for us yet :(<u class=""></u><u class=""></u></p>
<div class=""><p class="MsoNormal">—Mat<u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal" style="margin-bottom:12.0pt"><br class="">
On 19 Sep 2018, at 8:11 pm, Russell Langton <<a href="mailto:russell3901@gmail.com" rel="noreferrer" target="_blank" class="">russell3901@gmail.com</a>> wrote:<u class=""></u><u class=""></u></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt" class="">
<div class="">
<div class="">
<div class="">
<div class=""><p class="MsoNormal">Hi All,<br class="">
<br class="">
I'll reach out to some of you for details of the services impacted and get it in front of the right people to progress.<u class=""></u><u class=""></u></p>
</div>
</div>
</div><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div class="">
<div class=""><p class="MsoNormal">On Wed, Sep 19, 2018 at 5:20 PM Peter Tiggerdine <<a href="mailto:ptiggerdine@gmail.com" rel="noreferrer" target="_blank" class="">ptiggerdine@gmail.com</a>> wrote:<u class=""></u><u class=""></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm" class="">
<div class=""><p class="MsoNormal">ROFL! THAT'S GOLD!!<u class=""></u><u class=""></u></p>
<div class=""><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">Dutton Button!!<br clear="all" class="">
<u class=""></u><u class=""></u></p>
<div class="">
<div class="">
<div class="">
<div class="">
<div class=""><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">Regards,<u class=""></u><u class=""></u></p>
<div class=""><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">Peter Tiggerdine<u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">GPG Fingerprint: 2A3F EA19 F6C2 93C1 411D 5AB2 D5A8 E8A8 0E74 6127<u class=""></u><u class=""></u></p>
</div>
</div>
</div>
</div>
</div>
</div><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
</div><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div class="">
<div class=""><p class="MsoNormal">On Wed, Sep 19, 2018 at 5:18 PM Matt Palmer <<a href="mailto:mpalmer@hezmatt.org" rel="noreferrer" target="_blank" class="">mpalmer@hezmatt.org</a>> wrote:<u class=""></u><u class=""></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm" class=""><p class="MsoNormal">On 19 Sep 2018, at 4:33 pm, Dino Sosic <<a href="mailto:Dino.Sosic@datacom.com.au" rel="noreferrer" target="_blank" class="">Dino.Sosic@datacom.com.au</a>> wrote:<br class="">
> Apparently Telstra confirmed today that there are issues with forming VPN<br class="">
> IPsecs over 4G SIMs on telstra.internet APN. Anyone experiencing the same<br class="">
> or knows anything about it? I have multiple sites down. IKE packets simply<br class="">
> not making it to the other side.<br class="">
<br class="">
Uh oh, looks like someone accidentally lent on the Dutton Button.<br class="">
<br class="">
- Matt<br class="">
<br class="">
_______________________________________________<br class="">
AusNOG mailing list<br class="">
<a href="mailto:AusNOG@lists.ausnog.net" rel="noreferrer" target="_blank" class="">AusNOG@lists.ausnog.net</a><br class="">
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank" class="">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u class=""></u><u class=""></u></p>
</blockquote>
</div><p class="MsoNormal">_______________________________________________<br class="">
AusNOG mailing list<br class="">
<a href="mailto:AusNOG@lists.ausnog.net" rel="noreferrer" target="_blank" class="">AusNOG@lists.ausnog.net</a><br class="">
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank" class="">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u class=""></u><u class=""></u></p>
</blockquote>
</div>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt" class="">
<div class=""><p class="MsoNormal">_______________________________________________<br class="">
AusNOG mailing list<br class="">
<a href="mailto:AusNOG@lists.ausnog.net" rel="noreferrer" target="_blank" class="">AusNOG@lists.ausnog.net</a><br class="">
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank" class="">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u class=""></u><u class=""></u></p>
</div>
</blockquote>
</div>
</blockquote>
</div><p class="MsoNormal">_______________________________________________<br class="">
AusNOG mailing list<br class="">
<a href="mailto:AusNOG@lists.ausnog.net" rel="noreferrer" target="_blank" class="">AusNOG@lists.ausnog.net</a><br class="">
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank" class="">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u class=""></u><u class=""></u></p>
</blockquote>
</div>
</div>
<br class=""><br class=""><p style="font-family:Verdana;font-size:10pt;color:#666666" class=""><b class="">Confidentiality and Privilege Notice</b></p><p style="font-family:Verdana;font-size:8pt;color:#666666" class="">This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message or responsible for delivery of the message to such person, you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.</p></div>
</blockquote></div></div>
</div></blockquote></div></div>_______________________________________________<br class="">
AusNOG mailing list<br class="">
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank" class="">AusNOG@lists.ausnog.net</a><br class="">
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank" class="">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br class="">
</blockquote></div></div></div>
_______________________________________________<br class="">AusNOG mailing list<br class=""><a href="mailto:AusNOG@lists.ausnog.net" class="">AusNOG@lists.ausnog.net</a><br class="">http://lists.ausnog.net/mailman/listinfo/ausnog<br class=""></div></blockquote></div><br class=""></div></div></body></html>