[AusNOG] VPNs over Telstra wireless broadband

[Craig Askings]

Are you using an ip address or FQDN as the vpn target for the students to connect to?

> On 14 Mar 2024, at 1:14 pm, James Andrewartha <trs80 at ucc.gu.uwa.edu.au> wrote:
> 
> On Thu, 14 Mar 2024, James Andrewartha wrote:
> 
>> We've recently rolled out a Fortigate IKEv2 IPSec VPN to our student
>> devices and it works well for most of them, but for some it works for a
>> short time (5 seconds to 5 minutes) and then gets stuck, leaving the
>> student with no internet access (since we force it to be always-on). Event
>> viewer shows rasclient 631 which is "The port was disconnected by the
>> user" and definitely not the case. The common thread seems to be they use
>> Telstra wireless broadband at home. Has anyone successfully run an IKEv2
>> VPN over this sort of connection?
>> 
>> It's not CGNAT since it works fine on my ABB NBN connection. Maybe it's
>> IPv6 464XLAT?
> 
> Should have searched Whingepool, apparently changing the PDP type to IPv4
> or IPv4v6 can work. I'll also look at bringing up our IPv6 allocation
> (shush).
> 
> https://forums.whirlpool.net.au/archive/98wxy5q3-4
> 
> --
> # TRS-80              trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will do \
> # UCC Wheel Member     http://trs80.ucc.asn.au/ #|  what squirrels do best     |
> [ "There's nobody getting rich writing          ]|  -- Collect and hide your   |
> [  software that I know of" -- Bill Gates, 1980 ]\  nuts." -- Acid Reflux #231 /
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> https://lists.ausnog.net/mailman/listinfo/ausnog