VPN client cant connect

Trusted

Lifetime subscriber

#261664 9-Dec-2019 14:23

Should a VPN client fail to connect if on a CGNAT connection (Trustpower in this case) ?

Was able to use VPN fine, then moved to Trustpower and since then, unable to connect to the VPN server (which is on static via diff ISP).

And if CGNAT does stop it, what would the symptoms be ? Just a flat out no server available, or random protocol errors etc ?

XPD / Gavin

nzkc

1647 posts

Uber Geek
+1 received by user: 1049

#2371252 9-Dec-2019 14:35

I wouldnt have thought so. But I would also guess "its entirely possible".

No error message to report? Ideally from the client and server side if you can (without revealing anything sensitive obviously).

I have clients that will also firewall their VPN servers to specific IP addresses only. Not a case here is it?

What's the VPN software too?

xpd

Geek of Coastguard
14315 posts

Uber Geek
+1 received by user: 4837

Retired Mod

Trusted

Lifetime subscriber

#2371260 9-Dec-2019 14:50

No, not locked down to IP's, client side just gives "wrong username/password or authentication protocol".

I am starting to wonder if it is a server issue, because if I try from my connection I get same error. Yet noone else has complained... yet ;)

XPD / Gavin

mikesmac

19 posts

Geek
+1 received by user: 9

#2371263 9-Dec-2019 14:54

So why don't you just ask to get moved to a public address, there is no charge for this, if you are happy to have a dynamic public address..

hio77

'That VDSL Cat'
13050 posts

Uber Geek
+1 received by user: 3906

Trusted

Lizard Networks

Subscriber

#2371272 9-Dec-2019 15:06

my IPSEC VPN's work fine over trustpower (1000/500 so no cgnat though)

I tend to prefer to just hotspot it though...

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

xpd

Geek of Coastguard
14315 posts

Uber Geek
+1 received by user: 4837

Retired Mod

Trusted

Lifetime subscriber

#2371286 9-Dec-2019 15:22

mikesmac:

So why don't you just ask to get moved to a public address, there is no charge for this, if you are happy to have a dynamic public address..

Its not my account :-p

XPD / Gavin

xpd

Geek of Coastguard
14315 posts

Uber Geek
+1 received by user: 4837

Retired Mod

Trusted

Lifetime subscriber

#2371288 9-Dec-2019 15:23

Yeah tried hotspotting.... tried from my personal server and no go as well. So looks like its server related.

Thanks all :) Case closed as it were ;)

XPD / Gavin

Dyson

Shop now for Dyson appliances (affiliate link).

nztim

4147 posts

Uber Geek
+1 received by user: 2876

Trusted

TEAMnetwork

Subscriber

#2371297 9-Dec-2019 15:32

VPN (IPSEC) doesn't like double NAT, so CGNAT will break it

Any views expressed on these forums are my own and don't necessarily reflect those of my employer.

hio77

'That VDSL Cat'
13050 posts

Uber Geek
+1 received by user: 3906

Trusted

Lizard Networks

Subscriber

#2371318 9-Dec-2019 16:18

nztim: VPN (IPSEC) doesn't like double NAT, so CGNAT will break it

It can work totally fine long as it's done right.

i actually prefer to run my work vpn over a CGNAT network (so double natted) but that's mainly for the much larger upstream bandwidth i have there...

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

taneb1

562 posts

Ultimate Geek
+1 received by user: 247