Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Forums › New Zealand Broadband › VPN client cant connect - Trustpower

xpd

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod
ID Verified
Trusted
Lifetime subscriber

#261664 9-Dec-2019 14:23
Send private message

Should a VPN client fail to connect if on a CGNAT connection (Trustpower in this case) ?

 

Was able to use VPN fine, then moved to Trustpower and since then, unable to connect to the VPN server (which is on static via diff ISP).

 

And if CGNAT does stop it, what would the symptoms be ? Just a flat out no server available, or random protocol errors etc ?




XPD / Gavin

 

LinkTree

 

 

 

Create new topic
nzkc
1634 posts

Uber Geek
+1 received by user: 1041


  #2371252 9-Dec-2019 14:35
Send private message

I wouldnt have thought so.  But I would also guess "its entirely possible".

 

No error message to report? Ideally from the client and server side if you can (without revealing anything sensitive obviously).

 

I have clients that will also firewall their VPN servers to specific IP addresses only. Not a case here is it?

 

What's the VPN software too?



xpd

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #2371260 9-Dec-2019 14:50
Send private message

No, not locked down to IP's, client side just gives "wrong username/password or authentication protocol".

 

I am starting to wonder if it is a server issue, because if I try from my connection I get same error. Yet noone else has complained... yet ;)

 

 




XPD / Gavin

 

LinkTree

 

 

 

mikesmac
17 posts

Geek
+1 received by user: 8


  #2371263 9-Dec-2019 14:54
Send private message

So why don't you just ask to get moved to a public address, there is no charge for this, if you are happy to have a dynamic public address..



hio77
'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified
Trusted
Lizard Networks
Subscriber

  #2371272 9-Dec-2019 15:06
Send private message

my IPSEC VPN's work fine over trustpower (1000/500 so no cgnat though)

 

I tend to prefer to just hotspot it though...

 

 

 

 




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have. 

xpd

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #2371286 9-Dec-2019 15:22
Send private message

mikesmac:

 

So why don't you just ask to get moved to a public address, there is no charge for this, if you are happy to have a dynamic public address..

 

 

Its not my account :-p




XPD / Gavin

 

LinkTree

 

 

 

xpd

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #2371288 9-Dec-2019 15:23
Send private message

Yeah tried hotspotting.... tried from my personal server and no go as well. So looks like its server related.

 

 

 

Thanks all :) Case closed as it were ;)

 

 




XPD / Gavin

 

LinkTree

 

 

 

 
 
 
 

Shop now for Lenovo laptops and other devices (affiliate link).
nztim
4012 posts

Uber Geek
+1 received by user: 2710

ID Verified
Trusted
TEAMnetwork
Subscriber

  #2371297 9-Dec-2019 15:32
Send private message

VPN (IPSEC) doesn't like double NAT, so CGNAT will break it




Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 

hio77
'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified
Trusted
Lizard Networks
Subscriber

  #2371318 9-Dec-2019 16:18
Send private message

nztim: VPN (IPSEC) doesn't like double NAT, so CGNAT will break it

 

It can work totally fine long as it's done right.

 

 

 

i actually prefer to run my work vpn over a CGNAT network (so double natted) but that's mainly for the much larger upstream bandwidth i have there...




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have. 

taneb1
544 posts

Ultimate Geek
+1 received by user: 213

ID Verified
Trusted
Mercury

  #2371991 10-Dec-2019 19:54
Send private message

Sorry, only just saw this - Glad it wasn't connection related, however if you do want it switched to a Public IP/CGNAT turned off, feel free to PM me the account details and I can get this sorted for you. 




Any comments made are my personal views and does not represent those of my employer

Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.








RSS feeds
Main feed
Forums feed
Copyright
©2002-2026 Geekzone®
Site features
Geekzone BI dashboard
Geekzone Badges
Geekzone Status Page

 

Site Information
Subscribe to Geekzone
Privacy Statement
Forum Usage Guidelines (FUG)
Advertising
Trademark and copyright