IPSEC VPN fail on Slingshot ?

Welcome Guest.

You haven't logged in yet. If you don't have an account you can register now.

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › IPSEC VPN fail on Slingshot ?

xpd

Geek of Coastguard
14235 posts

Uber Geek
+1 received by user: 4715

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#324990 23-Jun-2026 11:31

Got a user on Slingshot fibre who for some reason cannot use our VPN. Is a managed laptop, running same setup as the other 100 odd, VPN works everywhere, except their home connection.

Is a standard Slingshot supplied router.

They click connect on the client (Forticlient fwiw), it sits there for a moment, then gives a timeout message and drops.

From the gateway/server side, we can see the client connecting, tunnel goes up, then goes down as if the client has requested a disconnect.

Any ideas ? As mentioned, seems to work fine on other ISPs etc

XPD / Gavin

LinkTree

Linux

12397 posts

Uber Geek
+1 received by user: 8706

Trusted

Lifetime subscriber

#3505416 23-Jun-2026 11:37

Have they disabled port filtering in the Slingshot user panel and tried?

Long shot but might be worth a try

xpd

Geek of Coastguard
14235 posts

Uber Geek
+1 received by user: 4715

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#3505418 23-Jun-2026 11:39

Didnt know they did port filtering :D Thanks, will take a look at that.

XPD / Gavin

LinkTree

nztim

4097 posts

Uber Geek
+1 received by user: 2801

ID Verified

Trusted

TEAMnetwork

Subscriber

#3505422 23-Jun-2026 11:50

Someone else is using src port udp 500/4500 on the same CG Nat pool at them and their connection is trying to do the same meaning connection tracking is lost

Any views expressed on these forums are my own and don't necessarily reflect those of my employer.

xpd

Geek of Coastguard
14235 posts

Uber Geek
+1 received by user: 4715

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#3505430 23-Jun-2026 12:20

No change, same issue. Poo. :D

Will get them to contact Slingshot support and see if theres something else at play.

XPD / Gavin

LinkTree

freitasm

BDFL - Memuneh
81054 posts

Uber Geek
+1 received by user: 41962

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3505443 23-Jun-2026 13:02

And is the router configured to allow VPN Passthrough? Something like checking the appropriate boxes:

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

xpd

Geek of Coastguard
14235 posts

Uber Geek
+1 received by user: 4715

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#3505446 23-Jun-2026 13:13

Leaving it with the user and Slingshot, done all I can from my end. I don't want to start playing with a users home network :)

XPD / Gavin

LinkTree

Lego

Shop now for Lego sets and other gifts (affiliate link).

clinty

1209 posts

Uber Geek
+1 received by user: 412

Lifetime subscriber

#3505620 23-Jun-2026 19:04

Few years ago had a user with a similar problem except using Contact, was never able to figure out what caused it

Had them get a Static to get around CGNat, no change. Other VPNs in the house worked fine

Eventually moved them to Cloudflare Warp with tunneling, pro went away

Clint

MadEngineer

4666 posts

Uber Geek
+1 received by user: 2655

Trusted

#3505656 23-Jun-2026 21:58

Been a while since I've used fortinet but is their home IP range different to work?

Also, unrelated to this fault but please search for yourself here: FortiBleed — 73,932+ Compromised Fortinet Firewalls | Hudson Rock | Hudson Rock

You're not on Atlantis anymore, Duncan Idaho.

xpd

Geek of Coastguard
14235 posts

Uber Geek
+1 received by user: 4715

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#3505678 24-Jun-2026 07:07

Turns out that their router is over 10 years old, so Slingshot sending them a new one. Will test with that and go from there :)

And yes, I'm well aware of Fortibleed - I'm the one who posted about it on GZ :D

Thanks all :)

XPD / Gavin

LinkTree

nztim

4097 posts

Uber Geek
+1 received by user: 2801

ID Verified

Trusted

TEAMnetwork

Subscriber

#3505690 24-Jun-2026 08:47

xpd:

Turns out that their router is over 10 years old, so Slingshot sending them a new one.

Oh dear lol

Any views expressed on these forums are my own and don't necessarily reflect those of my employer.

xpd

Geek of Coastguard
14235 posts

Uber Geek
+1 received by user: 4715

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#3506170 26-Jun-2026 06:56

New router resolved issue :)

XPD / Gavin

LinkTree

News and reviews »

ECOVACS Deebot T80s Review
Posted 22-Jun-2026 11:58

D-Link A/NZ Launches GaN Charger Range
Posted 12-Jun-2026 09:25

New Amazon Kindle Scribe Range Now Available in New Zealand
Posted 12-Jun-2026 09:19

OPPO Watch X3 Launches in New Zealand
Posted 5-Jun-2026 17:01

Blink Debuts Its First 2K Video Doorbell
Posted 4-Jun-2026 15:45

Spark Launches Verified Call to Help Combat Rising Impersonation Scams
Posted 4-Jun-2026 06:00

Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Support Geekzone »

You can support Geekzone with a one-off or recurring donation via PressPatron.

RSS feeds: Main feed; Forums feed

Site features: Geekzone BI dashboard; Geekzone Badges; Geekzone Status Page

Site Information: Subscribe to Geekzone; Privacy Statement; Forum Usage Guidelines (FUG); Advertising; Trademark and copyright