On Thu, 14 Mar 2024, James Andrewartha wrote: > We've recently rolled out a Fortigate IKEv2 IPSec VPN to our student > devices and it works well for most of them, but for some it works for a > short time (5 seconds to 5 minutes) and then gets stuck, leaving the > student with no internet access (since we force it to be always-on). Event > viewer shows rasclient 631 which is "The port was disconnected by the > user" and definitely not the case. The common thread seems to be they use > Telstra wireless broadband at home. Has anyone successfully run an IKEv2 > VPN over this sort of connection? > > It's not CGNAT since it works fine on my ABB NBN connection. Maybe it's > IPv6 464XLAT?
Should have searched Whingepool, apparently changing the PDP type to IPv4 or IPv4v6 can work. I'll also look at bringing up our IPv6 allocation (shush). https://forums.whirlpool.net.au/archive/98wxy5q3-4 -- # TRS-80 trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will do \ # UCC Wheel Member http://trs80.ucc.asn.au/ #| what squirrels do best | [ "There's nobody getting rich writing ]| -- Collect and hide your | [ software that I know of" -- Bill Gates, 1980 ]\ nuts." -- Acid Reflux #231 / _______________________________________________ AusNOG mailing list [email protected] https://lists.ausnog.net/mailman/listinfo/ausnog
