Are you using an ip address or FQDN as the vpn target for the students to connect to?
> On 14 Mar 2024, at 1:14 pm, James Andrewartha <[email protected]> wrote: > > On Thu, 14 Mar 2024, James Andrewartha wrote: > >> We've recently rolled out a Fortigate IKEv2 IPSec VPN to our student >> devices and it works well for most of them, but for some it works for a >> short time (5 seconds to 5 minutes) and then gets stuck, leaving the >> student with no internet access (since we force it to be always-on). Event >> viewer shows rasclient 631 which is "The port was disconnected by the >> user" and definitely not the case. The common thread seems to be they use >> Telstra wireless broadband at home. Has anyone successfully run an IKEv2 >> VPN over this sort of connection? >> >> It's not CGNAT since it works fine on my ABB NBN connection. Maybe it's >> IPv6 464XLAT? > > Should have searched Whingepool, apparently changing the PDP type to IPv4 > or IPv4v6 can work. I'll also look at bringing up our IPv6 allocation > (shush). > > https://forums.whirlpool.net.au/archive/98wxy5q3-4 > > -- > # TRS-80 trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will > do \ > # UCC Wheel Member http://trs80.ucc.asn.au/ #| what squirrels do best > | > [ "There's nobody getting rich writing ]| -- Collect and hide your > | > [ software that I know of" -- Bill Gates, 1980 ]\ nuts." -- Acid Reflux > #231 / > _______________________________________________ > AusNOG mailing list > [email protected] > https://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list [email protected] https://lists.ausnog.net/mailman/listinfo/ausnog
