subject:"\[AFMUG\] VPN issues"

Re: [AFMUG] VPN issues

2021-03-23 Thread Seth Mattinen


On 3/22/21 4:31 PM, Steve Jones wrote:
That cable you put on the floor just became your responsibility in their 
eyes. I would have put theirs back in place. May have sold them a new on 
on the spot but made them plug it in.

This also means their IT didnt do any testing locally with the employee.




Yeah that too. Don't touch things you don't want to inherit all its 
future problems.


--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Steve Jones

That cable you put on the floor just became your responsibility in their
eyes. I would have put theirs back in place. May have sold them a new on on
the spot but made them plug it in.
This also means their IT didnt do any testing locally with the employee.

On Mon, Mar 22, 2021, 2:44 PM Seth Mattinen  wrote:

> On 3/22/21 12:36, Adam Moffett wrote:
> > So do you bill the customer or his employer?
>
>
> I'll always bill the customer, but if someone else installed the cable
> I'd say take it up with them for reimbursement.
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Dev

Did they blame you for breaking their cable when you hooked up to it? :)

We had a customer who’s cat ate a switch power cord - they insisted it wasn’t 
their cat. We swapped it and the cat ate the new one shortly thereafter. 
Somehow I recall them thinking we caused it in some manner, their cat wouldn’t 
dare think of it apparently. Nevermind the other cat chew marks on surrounding 
areas.

> On Mar 22, 2021, at 12:28 PM, Mark - Myakka Technologies  
> wrote:
> 
> UPDATE
> 
> I couldn't take the whining and crying about the VPN being down.  Remote IT 
> guys 100% sure it is my issue (must be blocking port 443).  Customer 100% I 
> changed something. So, I gathered my testing equipment and headed on out.  
> Well both IT guy and customer never mentioned that the VPN appliance is 
> connected to their router via a 100' CAT5e cable run on the floor across the 
> house.  They did at least have it tape down in places.  When I tried to 
> connect my notebook using the cable, I got no connection.  Pulled out the old 
> CAT5 tester and only 3 or of 8 lit up.  Replaced the cable and guess what, 
> VPN now working.
> 
> 
> --
> Best regards,
> Markmailto:m...@mailmt.com 
> <mailto:m...@mailmt.com>
> 
> Myakka Technologies, Inc.
> www.Myakka.com <http://www.myakka.com/>
> 
> --
> 
> Thursday, March 18, 2021, 1:37:08 PM, you wrote:
> 
> 
> I'm working a very similar issue right now.  I think I have tracked it down 
> to an issue with a single upstream connection, and it looks like it's doing 
> something with fragmenting/dropping large packets.  Doing a packet capture, 
> it looks like the VPN setup packet is about 2062 bytes in size, and it's not 
> getting to the other end.  ICMP Packets will flow regardless of size (of 
> course fragmenting)  If I route the traffic over any of my other upstreams, 
> it works fine.  I have a ticket open with this upstream, but getting them to 
> understand what the issue is has been cumbersome.
> On 3/18/2021 12:27 PM, Dev wrote:
> 
> Do you have other customers with similar config/topology where you can test, 
> maybe who hit the same VPN server? PCAP’s aside, VPN’s don’t usually like NAT 
> and firewall changes, but you have to divide and conquer to track down VPN 
> issues often because the error reporting is vague at best typically. 
> 
> 
> On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies  <mailto:m...@mailmt.com>> wrote:
> 
> Re: [AFMUG] VPN issues 
> Bill,
> 
> Well that is the issue.  Could be anything.  Been working fine since June.  I 
> have many many more people using VPN's with no issues.
> 
> But there is an issue on her link.  This is a fiber link BTW.  Her Internet 
> works fine.
> 
> Her IT guys have washed their hands of it, pushing it all on me.  Not sure 
> how I'm going to figure it out being I don't know what appliance she is using 
> yet.  Even when I get that info, I'll have no access to it.  Doubt they are 
> going to give me admin privileges on their equipment.  Also, I don't get the 
> opportunity to see what errors are showing up on server logs.
> 
> 
> 
> 
> --
> Best regards,
> Markmailto:m...@mailmt.com 
> <mailto:m...@mailmt.com>
> 
> Myakka Technologies, Inc.
> www.Myakka.com <http://www.myakka.com/>
> 
> --
> 
> Wednesday, March 17, 2021, 11:27:35 AM, you wrote:
> 
> 
> I would suspect maybe segmentation issues. Sometimes segment boundaries can 
> mess with a VPN.
> 
> bp
> 
> On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:
> 
> I  have  a  customer  that  has  some type of VPN router device on our
> system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
> a  packet  capture  for her IT guys and sent it to them.  Their answer
> is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
> attached the filtered packet dump.  Looks like things are talking back
> and forth.  Any issues anyone can see?
> 
> 
> --
> 
> Thanks,
> Mark  mailto:m...@mailmt.com <mailto:m...@mailmt.com>
> 
> Myakka Technologies, Inc.
> www.Myakka.com <http://www.myakka.com/>-- 
> AF mailing list
> AF@af.afmug.com <mailto:AF@af.afmug.com>
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com 
> <http://af.afmug.com/mailman/listinfo/af_af.afmug.com>
> -- 
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Nate Burke

Did your cat5 fix do my customer too?  This morning my customer that was 
having the VPN problems suddenly started working.  Maybe what they told 
me was a VPN Concentrator at a Datacenter was really at this guys house.


On 3/22/2021 2:28 PM, Mark - Myakka Technologies wrote:

Re: [AFMUG] VPN issues UPDATE

I couldn't take the whining and crying about the VPN being down. 
 Remote IT guys 100% sure it is my issue (must be blocking port 443). 
 Customer 100% I changed something. So, I gathered my testing 
equipment and headed on out.  Well both IT guy and customer never 
mentioned that the VPN appliance is connected to their router via a 
100' CAT5e cable run on the floor across the house.  They did at least 
have it tape down in places.  When I tried to connect my notebook 
using the cable, I got no connection.  Pulled out the old CAT5 tester 
and only 3 or of 8 lit up.  Replaced the cable and guess what, VPN now 
working.



--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com <http://www.Myakka.com>

--

Thursday, March 18, 2021, 1:37:08 PM, you wrote:


	I'm working a very similar issue right now.  I think I have tracked 
it down to an issue with a single upstream connection, and it looks 
like it's doing something with fragmenting/dropping large packets. 
 Doing a packet capture, it looks like the VPN setup packet is about 
2062 bytes in size, and it's not getting to the other end.  ICMP 
Packets will flow regardless of size (of course fragmenting)  If I 
route the traffic over any of my other upstreams, it works fine.  I 
have a ticket open with this upstream, but getting them to understand 
what the issue is has been cumbersome.

On 3/18/2021 12:27 PM, Dev wrote:

	Do you have other customers with similar config/topology where you 
can test, maybe who hit the same VPN server? PCAP’s aside, VPN’s don’t 
usually like NAT and firewall changes, but you have to divide and 
conquer to track down VPN issues often because the error reporting is 
vague at best typically.



	On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies 
mailto:m...@mailmt.com>> wrote:


Re: [AFMUG] VPN issues
Bill,

Well that is the issue.  Could be anything.  Been working fine since 
June.  I have many many more people using VPN's with no issues.


But there is an issue on her link.  This is a fiber link BTW.  Her 
Internet works fine.


Her IT guys have washed their hands of it, pushing it all on me.  Not 
sure how I'm going to figure it out being I don't know what appliance 
she is using yet.  Even when I get that info, I'll have no access to 
it.  Doubt they are going to give me admin privileges on their 
equipment.  Also, I don't get the opportunity to see what errors are 
showing up on server logs.





--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

--

Wednesday, March 17, 2021, 11:27:35 AM, you wrote:


	I would suspect maybe segmentation issues. Sometimes segment 
boundaries can mess with a VPN.


bp

On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:

I  have  a  customer  that  has  some type of VPN router device on our
system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
a  packet  capture  for her IT guys and sent it to them.  Their answer
is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
attached the filtered packet dump.  Looks like things are talking back
and forth.  Any issues anyone can see?


--

Thanks,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

--
AF mailing list
AF@af.afmug.com <mailto:AF@af.afmug.com>
http://af.afmug.com/mailman/listinfo/af_af.afmug.com






-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Bill Prince

Title: Re: [AFMUG] VPN issues

  
  
That is just classic.


bp

On 3/22/2021 12:28 PM, Mark - Myakka
  Technologies wrote:


  
  
  UPDATE

I couldn't take the whining and crying about the VPN being down.
 Remote IT guys 100% sure it is my issue (must be blocking port
443).  Customer 100% I changed something. So, I gathered my
testing equipment and headed on out.  Well both IT guy and
customer never mentioned that the VPN appliance is connected to
their router via a 100' CAT5e cable run on the floor across the
house.  They did at least have it tape down in places.  When I
tried to connect my notebook using the cable, I got no
connection.  Pulled out the old CAT5 tester and only 3 or of 8
lit up.  Replaced the cable and guess what, VPN now working.


--
Best regards,
Mark                            mailto:m...@mailmt.com
  
  Myakka
Technologies, Inc.
  www.Myakka.com
  
  --

Thursday, March 18, 2021, 1:37:08 PM, you wrote:

  
  

  


I'm working a very similar issue right now.  I
think I have tracked it down to an issue with a single
upstream connection, and it looks like it's doing
something with fragmenting/dropping large packets.
 Doing a packet capture, it looks like the VPN setup
packet is about 2062 bytes in size, and it's not getting
to the other end.  ICMP Packets will flow regardless of
size (of course fragmenting)  If I route the traffic
over any of my other upstreams, it works fine.  I have a
ticket open with this upstream, but getting them to
understand what the issue is has been cumbersome.
On 3/18/2021 12:27 PM, Dev wrote:
  
  

  


Do you have other customers
with similar config/topology where you can test,
maybe who hit the same VPN server? PCAP’s aside,
VPN’s don’t usually like NAT and firewall
changes, but you have to divide and conquer to
track down VPN issues often because the error
reporting is vague at best typically. 

  
  

  


On Mar 17, 2021, at
8:40 AM, Mark - Myakka Technologies <m...@mailmt.com> wrote:

    Re: [AFMUG] VPN issues 
Bill,

Well that is the issue.  Could be
anything.  Been working fine since June.
 I have many many more people using
VPN's with no issues.

But there is an issue on her link.  This
is a fiber link BTW.  Her Internet works
fine.

Her IT guys have washed their hands of
it, pushing it all on me.  Not sure how
I'm going to figure it out being I don't
know what appliance she is using yet.
 Even when I get that info, I'll have no
access to it.  Doubt they are going to
give me admin privileges on their
equipment.  Also, I don't get the
opportunity to see what errors are
showing up on server logs.




--
Best regards,
Mark                            mailto:m...@mailmt.com
  
  Myakka Technologies,
Inc.
  www.Myakka.com
  
  --

Wednesday, March 17, 2021, 11:27:35 AM,
you

Re: [AFMUG] VPN issues

2021-03-22 Thread Mark - Myakka Technologies

Title: Re: [AFMUG] VPN issues

Adam,

Yes they were billed.

--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

Monday, March 22, 2021, 3:36:55 PM, you wrote:

So do you bill the customer or his employer?

On 3/22/2021 3:28 PM, Mark - Myakka Technologies wrote:

Re: [AFMUG] VPN issues UPDATE

I couldn't take the whining and crying about the VPN being down. Remote IT guys 100% sure it is my issue (must be blocking port 443). Customer 100% I changed something. So, I gathered my testing equipment and headed on out. Well both IT guy and customer never mentioned that the VPN appliance is connected to their router via a 100' CAT5e cable run on the floor across the house. They did at least have it tape down in places. When I tried to connect my notebook using the cable, I got no connection. Pulled out the old CAT5 tester and only 3 or of 8 lit up. Replaced the cable and guess what, VPN now working.

--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

Thursday, March 18, 2021, 1:37:08 PM, you wrote:

I'm working a very similar issue right now. I think I have tracked it down to an issue with a single upstream connection, and it looks like it's doing something with fragmenting/dropping large packets. Doing a packet capture, it looks like the VPN setup packet is about 2062 bytes in size, and it's not getting to the other end. ICMP Packets will flow regardless of size (of course fragmenting) If I route the traffic over any of my other upstreams, it works fine. I have a ticket open with this upstream, but getting them to understand what the issue is has been cumbersome.
On 3/18/2021 12:27 PM, Dev wrote:

Do you have other customers with similar config/topology where you can test, maybe who hit the same VPN server? PCAP’s aside, VPN’s don’t usually like NAT and firewall changes, but you have to divide and conquer to track down VPN issues often because the error reporting is vague at best typically.

On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies <m...@mailmt.com> wrote:

Re: [AFMUG] VPN issues
Bill,

Well that is the issue. Could be anything. Been working fine since June. I have many many more people using VPN's with no issues.

But there is an issue on her link. This is a fiber link BTW. Her Internet works fine.

Her IT guys have washed their hands of it, pushing it all on me. Not sure how I'm going to figure it out being I don't know what appliance she is using yet. Even when I get that info, I'll have no access to it. Doubt they are going to give me admin privileges on their equipment. Also, I don't get the opportunity to see what errors are showing up on server logs.

--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

Wednesday, March 17, 2021, 11:27:35 AM, you wrote:

I would suspect maybe segmentation issues. Sometimes segment boundaries can mess with a VPN.

On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:

I have a customer that has some type of VPN router device on our
system. Her VPN isn't working anymore. Her Internet is fine. I did
a packet capture for her IT guys and sent it to them. Their answer
is the usual "It's your ISPs fault". I'm not a VPN expert, but I
attached the filtered packet dump. Looks like things are talking back
and forth. Any issues anyone can see?

Thanks,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Robert Andrews

I agree, this one needs to be billed for time to and from as well, and 
at least $100/hour...


On 03/22/2021 12:37 PM, Josh Luthman wrote:

You charged a hefty service call for that I hope...

Josh Luthman
24/7 Help Desk: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373


On Mon, Mar 22, 2021 at 3:35 PM Mark - Myakka Technologies 
mailto:m...@mailmt.com>> wrote:


UPDATE

I couldn't take the whining and crying about the VPN being down. 
Remote IT guys 100% sure it is my issue (must be blocking port

443).  Customer 100% I changed something. So, I gathered my testing
equipment and headed on out.  Well both IT guy and customer never
mentioned that the VPN appliance is connected to their router via a
100' CAT5e cable run on the floor across the house.  They did at
least have it tape down in places.  When I tried to connect my
notebook using the cable, I got no connection.  Pulled out the old
CAT5 tester and only 3 or of 8 lit up.  Replaced the cable and guess
what, VPN now working.


--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com <http://www.Myakka.com>

--

Thursday, March 18, 2021, 1:37:08 PM, you wrote:


I'm working a very similar issue right now.  I think I have tracked
it down to an issue with a single upstream connection, and it looks
like it's doing something with fragmenting/dropping large packets. 
Doing a packet capture, it looks like the VPN setup packet is about

2062 bytes in size, and it's not getting to the other end.  ICMP
Packets will flow regardless of size (of course fragmenting)  If I
route the traffic over any of my other upstreams, it works fine.  I
have a ticket open with this upstream, but getting them to
understand what the issue is has been cumbersome.
On 3/18/2021 12:27 PM, Dev wrote:

Do you have other customers with similar config/topology where you
can test, maybe who hit the same VPN server? PCAP’s aside, VPN’s
don’t usually like NAT and firewall changes, but you have to divide
and conquer to track down VPN issues often because the error
reporting is vague at best typically.


On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies
mailto:m...@mailmt.com>> wrote:

    Re: [AFMUG] VPN issues
Bill,

Well that is the issue.  Could be anything.  Been working fine since
June.  I have many many more people using VPN's with no issues.

But there is an issue on her link.  This is a fiber link BTW.  Her
Internet works fine.

Her IT guys have washed their hands of it, pushing it all on me. 
Not sure how I'm going to figure it out being I don't know what

appliance she is using yet.  Even when I get that info, I'll have no
access to it.  Doubt they are going to give me admin privileges on
their equipment.  Also, I don't get the opportunity to see what
errors are showing up on server logs.




--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

--

Wednesday, March 17, 2021, 11:27:35 AM, you wrote:


I would suspect maybe segmentation issues. Sometimes segment
boundaries can mess with a VPN.

bp

On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:

I  have  a  customer  that  has  some type of VPN router device on our
system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
a  packet  capture  for her IT guys and sent it to them.  Their answer
is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
attached the filtered packet dump.  Looks like things are talking back
and forth.  Any issues anyone can see?


--

Thanks,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

-- 
AF mailing list

AF@af.afmug.com <mailto:AF@af.afmug.com>
http://af.afmug.com/mailman/listinfo/af_af.afmug.com


-- 
AF mailing list

AF@af.afmug.com <mailto:AF@af.afmug.com>
http://af.afmug.com/mailman/listinfo/af_af.afmug.com





--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Seth Mattinen


On 3/22/21 12:36, Adam Moffett wrote:

So do you bill the customer or his employer?



I'll always bill the customer, but if someone else installed the cable 
I'd say take it up with them for reimbursement.


--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Josh Luthman

You charged a hefty service call for that I hope...

Josh Luthman
24/7 Help Desk: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373


On Mon, Mar 22, 2021 at 3:35 PM Mark - Myakka Technologies 
wrote:

> UPDATE
>
> I couldn't take the whining and crying about the VPN being down.  Remote
> IT guys 100% sure it is my issue (must be blocking port 443).  Customer
> 100% I changed something. So, I gathered my testing equipment and headed on
> out.  Well both IT guy and customer never mentioned that the VPN appliance
> is connected to their router via a 100' CAT5e cable run on the floor across
> the house.  They did at least have it tape down in places.  When I tried to
> connect my notebook using the cable, I got no connection.  Pulled out the
> old CAT5 tester and only 3 or of 8 lit up.  Replaced the cable and guess
> what, VPN now working.
>
>
> --
> Best regards,
> Markmailto:m...@mailmt.com 
>
> Myakka Technologies, Inc.
> www.Myakka.com
>
> --
>
> Thursday, March 18, 2021, 1:37:08 PM, you wrote:
>
>
> I'm working a very similar issue right now.  I think I have tracked it
> down to an issue with a single upstream connection, and it looks like it's
> doing something with fragmenting/dropping large packets.  Doing a packet
> capture, it looks like the VPN setup packet is about 2062 bytes in size,
> and it's not getting to the other end.  ICMP Packets will flow regardless
> of size (of course fragmenting)  If I route the traffic over any of my
> other upstreams, it works fine.  I have a ticket open with this upstream,
> but getting them to understand what the issue is has been cumbersome.
> On 3/18/2021 12:27 PM, Dev wrote:
>
> Do you have other customers with similar config/topology where you can
> test, maybe who hit the same VPN server? PCAP’s aside, VPN’s don’t usually
> like NAT and firewall changes, but you have to divide and conquer to track
> down VPN issues often because the error reporting is vague at best
> typically.
>
>
> On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies 
> wrote:
>
> Re: [AFMUG] VPN issues
> Bill,
>
> Well that is the issue.  Could be anything.  Been working fine since
> June.  I have many many more people using VPN's with no issues.
>
> But there is an issue on her link.  This is a fiber link BTW.  Her
> Internet works fine.
>
> Her IT guys have washed their hands of it, pushing it all on me.  Not sure
> how I'm going to figure it out being I don't know what appliance she is
> using yet.  Even when I get that info, I'll have no access to it.  Doubt
> they are going to give me admin privileges on their equipment.  Also, I
> don't get the opportunity to see what errors are showing up on server logs.
>
>
>
>
> --
> Best regards,
> Markmailto:m...@mailmt.com 
>
> Myakka Technologies, Inc.
> www.Myakka.com <http://www.myakka.com/>
>
> --
>
> Wednesday, March 17, 2021, 11:27:35 AM, you wrote:
>
>
> I would suspect maybe segmentation issues. Sometimes segment boundaries
> can mess with a VPN.
>
> bp
> 
> On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:
>
> I  have  a  customer  that  has  some type of VPN router device on our
> system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
> a  packet  capture  for her IT guys and sent it to them.  Their answer
> is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
> attached the filtered packet dump.  Looks like things are talking back
> and forth.  Any issues anyone can see?
>
>
> --
>
> Thanks,
> Mark  mailto:m...@mailmt.com 
>
> Myakka Technologies, Inc.
> www.Myakka.com <http://www.myakka.com/> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Adam Moffett


So do you bill the customer or his employer?


On 3/22/2021 3:28 PM, Mark - Myakka Technologies wrote:

Re: [AFMUG] VPN issues UPDATE

I couldn't take the whining and crying about the VPN being down. 
 Remote IT guys 100% sure it is my issue (must be blocking port 443). 
 Customer 100% I changed something. So, I gathered my testing 
equipment and headed on out.  Well both IT guy and customer never 
mentioned that the VPN appliance is connected to their router via a 
100' CAT5e cable run on the floor across the house.  They did at least 
have it tape down in places.  When I tried to connect my notebook 
using the cable, I got no connection.  Pulled out the old CAT5 tester 
and only 3 or of 8 lit up.  Replaced the cable and guess what, VPN now 
working.



--
Best regards,
Mark mailto:m...@mailmt.com <mailto:m...@mailmt.com>

Myakka Technologies, Inc.
www.Myakka.com <http://www.Myakka.com>

--

Thursday, March 18, 2021, 1:37:08 PM, you wrote:


	I'm working a very similar issue right now.  I think I have tracked 
it down to an issue with a single upstream connection, and it looks 
like it's doing something with fragmenting/dropping large packets. 
 Doing a packet capture, it looks like the VPN setup packet is about 
2062 bytes in size, and it's not getting to the other end.  ICMP 
Packets will flow regardless of size (of course fragmenting)  If I 
route the traffic over any of my other upstreams, it works fine.  I 
have a ticket open with this upstream, but getting them to understand 
what the issue is has been cumbersome.

On 3/18/2021 12:27 PM, Dev wrote:

	Do you have other customers with similar config/topology where you 
can test, maybe who hit the same VPN server? PCAP’s aside, VPN’s don’t 
usually like NAT and firewall changes, but you have to divide and 
conquer to track down VPN issues often because the error reporting is 
vague at best typically.



	On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies 
mailto:m...@mailmt.com>> wrote:


Re: [AFMUG] VPN issues
Bill,

Well that is the issue.  Could be anything.  Been working fine since 
June.  I have many many more people using VPN's with no issues.


But there is an issue on her link.  This is a fiber link BTW.  Her 
Internet works fine.


Her IT guys have washed their hands of it, pushing it all on me.  Not 
sure how I'm going to figure it out being I don't know what appliance 
she is using yet.  Even when I get that info, I'll have no access to 
it.  Doubt they are going to give me admin privileges on their 
equipment.  Also, I don't get the opportunity to see what errors are 
showing up on server logs.





--
Best regards,
Mark mailto:m...@mailmt.com <mailto:m...@mailmt.com>

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

--

Wednesday, March 17, 2021, 11:27:35 AM, you wrote:


	I would suspect maybe segmentation issues. Sometimes segment 
boundaries can mess with a VPN.


bp

On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:

I  have  a  customer  that  has  some type of VPN router device on our
system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
a  packet  capture  for her IT guys and sent it to them.  Their answer
is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
attached the filtered packet dump.  Looks like things are talking back
and forth.  Any issues anyone can see?


--

Thanks,
Mark mailto:m...@mailmt.com <mailto:m...@mailmt.com>

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

--
AF mailing list
AF@af.afmug.com <mailto:AF@af.afmug.com>
http://af.afmug.com/mailman/listinfo/af_af.afmug.com 
<http://af.afmug.com/mailman/listinfo/af_af.afmug.com>




-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-22 Thread Mark - Myakka Technologies

Title: Re: [AFMUG] VPN issues

UPDATE

--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

Thursday, March 18, 2021, 1:37:08 PM, you wrote:

On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies <m...@mailmt.com> wrote:

Re: [AFMUG] VPN issues
Bill,

Well that is the issue. Could be anything. Been working fine since June. I have many many more people using VPN's with no issues.

But there is an issue on her link. This is a fiber link BTW. Her Internet works fine.

--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

Wednesday, March 17, 2021, 11:27:35 AM, you wrote:

I would suspect maybe segmentation issues. Sometimes segment boundaries can mess with a VPN.

On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:

Thanks,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-18 Thread Nate Burke

I'm working a very similar issue right now.  I think I have tracked it 
down to an issue with a single upstream connection, and it looks like 
it's doing something with fragmenting/dropping large packets.  Doing a 
packet capture, it looks like the VPN setup packet is about 2062 bytes 
in size, and it's not getting to the other end.  ICMP Packets will flow 
regardless of size (of course fragmenting)  If I route the traffic over 
any of my other upstreams, it works fine.  I have a ticket open with 
this upstream, but getting them to understand what the issue is has been 
cumbersome.


On 3/18/2021 12:27 PM, Dev wrote:
Do you have other customers with similar config/topology where you can 
test, maybe who hit the same VPN server? PCAP’s aside, VPN’s don’t 
usually like NAT and firewall changes, but you have to divide and 
conquer to track down VPN issues often because the error reporting is 
vague at best typically.


On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies 
mailto:m...@mailmt.com>> wrote:


Re: [AFMUG] VPN issues
Bill,

Well that is the issue.  Could be anything.  Been working fine since 
June.  I have many many more people using VPN's with no issues.


But there is an issue on her link.  This is a fiber link BTW.  Her 
Internet works fine.


Her IT guys have washed their hands of it, pushing it all on me.  Not 
sure how I'm going to figure it out being I don't know what appliance 
she is using yet.  Even when I get that info, I'll have no access to 
it.  Doubt they are going to give me admin privileges on their 
equipment.  Also, I don't get the opportunity to see what errors are 
showing up on server logs.





--
Best regards,
Mark mailto:m...@mailmt.com <mailto:m...@mailmt.com>

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

--

Wednesday, March 17, 2021, 11:27:35 AM, you wrote:


	I would suspect maybe segmentation issues. Sometimes segment 
boundaries can mess with a VPN.


bp

On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:

I  have  a  customer  that  has  some type of VPN router device on our
system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
a  packet  capture  for her IT guys and sent it to them.  Their answer
is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
attached the filtered packet dump.  Looks like things are talking back
and forth.  Any issues anyone can see?


--

Thanks,
Mark mailto:m...@mailmt.com <mailto:m...@mailmt.com>

Myakka Technologies, Inc.
www.Myakka.com <http://www.myakka.com/>

--
AF mailing list
AF@af.afmug.com <mailto:AF@af.afmug.com>
http://af.afmug.com/mailman/listinfo/af_af.afmug.com



-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-18 Thread Dev

Do you have other customers with similar config/topology where you can test, 
maybe who hit the same VPN server? PCAP’s aside, VPN’s don’t usually like NAT 
and firewall changes, but you have to divide and conquer to track down VPN 
issues often because the error reporting is vague at best typically. 

> On Mar 17, 2021, at 8:40 AM, Mark - Myakka Technologies  
> wrote:
> 
> Bill,
> 
> Well that is the issue.  Could be anything.  Been working fine since June.  I 
> have many many more people using VPN's with no issues.
> 
> But there is an issue on her link.  This is a fiber link BTW.  Her Internet 
> works fine.
> 
> Her IT guys have washed their hands of it, pushing it all on me.  Not sure 
> how I'm going to figure it out being I don't know what appliance she is using 
> yet.  Even when I get that info, I'll have no access to it.  Doubt they are 
> going to give me admin privileges on their equipment.  Also, I don't get the 
> opportunity to see what errors are showing up on server logs.
> 
>  
> 
> 
> --
> Best regards,
> Markmailto:m...@mailmt.com 
> 
> 
> Myakka Technologies, Inc.
> www.Myakka.com 
> 
> --
> 
> Wednesday, March 17, 2021, 11:27:35 AM, you wrote:
> 
> 
> I would suspect maybe segmentation issues. Sometimes segment boundaries can 
> mess with a VPN.
> 
> bp
> 
> On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:
> 
> I  have  a  customer  that  has  some type of VPN router device on our
> system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
> a  packet  capture  for her IT guys and sent it to them.  Their answer
> is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
> attached the filtered packet dump.  Looks like things are talking back
> and forth.  Any issues anyone can see?
> 
> 
> --
> 
> Thanks,
> Mark  mailto:m...@mailmt.com 
> 
> Myakka Technologies, Inc.
> www.Myakka.com -- 
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-17 Thread Steve Jones

I will pull full, extended pcaps at our edge router for the customer IP and
at the nearest network router for the customer and send them to them to
relay to their techs. At that point I require them to show where THEIR VPN
is failing, as they control both end points. This is after due diligence on
our network. Its almost always an end user issue, or junk IT staff that
misconfigured something somewhere. It is not the IT staff place to wash
their hands of their responsibility to the staff. I courteously relay that
to the customer. I let the customer know that until the IT does their due
diligence and identifies the VPN component failure, we cannot do anything.
I have them take their device off our network and bring up the VPN to see
if it is, in fact only happening on our network. At that point until the IT
staff does their job and provides detailed VPN server/client logs and
details of the VPN, there is nothing further we can do. Getting the staff
member (who is now non productive) directing their concern in the right
direction, at the IT staff, to their supervisors is pretty successful for
me.

It used to always be ALG in the old dlinks, Microsoft is running scared
right now that they are perceived to be not secure, god only knows what
theyre up to if its a software client VPN, Or its an IT douche who
"secures" the VPN by IP without bothering to ensure the client is on a
static IP, I love that one.

On Wed, Mar 17, 2021 at 10:48 AM Josh Luthman 
wrote:

> "We can't support someone else's service.  If they can narrow down what
> the issue exactly is we can help but without any information there's
> nothing we can do, it's encrypted to keep us from being able to do
> anything."
>
> Josh Luthman
> 24/7 Help Desk: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
>
> On Wed, Mar 17, 2021 at 11:43 AM Mark - Myakka Technologies <
> m...@mailmt.com> wrote:
>
>> Bill,
>>
>> Well that is the issue.  Could be anything.  Been working fine since
>> June.  I have many many more people using VPN's with no issues.
>>
>> But there is an issue on her link.  This is a fiber link BTW.  Her
>> Internet works fine.
>>
>> Her IT guys have washed their hands of it, pushing it all on me.  Not
>> sure how I'm going to figure it out being I don't know what appliance she
>> is using yet.  Even when I get that info, I'll have no access to it.  Doubt
>> they are going to give me admin privileges on their equipment.  Also, I
>> don't get the opportunity to see what errors are showing up on server logs.
>>
>>
>>
>>
>> --
>> Best regards,
>> Markmailto:m...@mailmt.com 
>>
>> Myakka Technologies, Inc.
>> www.Myakka.com
>>
>> --
>>
>> Wednesday, March 17, 2021, 11:27:35 AM, you wrote:
>>
>>
>> I would suspect maybe segmentation issues. Sometimes segment boundaries
>> can mess with a VPN.
>>
>> bp
>> 
>> On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:
>>
>> I  have  a  customer  that  has  some type of VPN router device on our
>> system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
>> a  packet  capture  for her IT guys and sent it to them.  Their answer
>> is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
>> attached the filtered packet dump.  Looks like things are talking back
>> and forth.  Any issues anyone can see?
>>
>>
>> --
>>
>> Thanks,
>> Mark  mailto:m...@mailmt.com 
>>
>> Myakka Technologies, Inc.
>> www.Myakka.com
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-17 Thread Josh Luthman

"We can't support someone else's service.  If they can narrow down what the
issue exactly is we can help but without any information there's nothing we
can do, it's encrypted to keep us from being able to do anything."

Josh Luthman
24/7 Help Desk: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373


On Wed, Mar 17, 2021 at 11:43 AM Mark - Myakka Technologies 
wrote:

> Bill,
>
> Well that is the issue.  Could be anything.  Been working fine since
> June.  I have many many more people using VPN's with no issues.
>
> But there is an issue on her link.  This is a fiber link BTW.  Her
> Internet works fine.
>
> Her IT guys have washed their hands of it, pushing it all on me.  Not sure
> how I'm going to figure it out being I don't know what appliance she is
> using yet.  Even when I get that info, I'll have no access to it.  Doubt
> they are going to give me admin privileges on their equipment.  Also, I
> don't get the opportunity to see what errors are showing up on server logs.
>
>
>
>
> --
> Best regards,
> Markmailto:m...@mailmt.com 
>
> Myakka Technologies, Inc.
> www.Myakka.com
>
> --
>
> Wednesday, March 17, 2021, 11:27:35 AM, you wrote:
>
>
> I would suspect maybe segmentation issues. Sometimes segment boundaries
> can mess with a VPN.
>
> bp
> 
> On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:
>
> I  have  a  customer  that  has  some type of VPN router device on our
> system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
> a  packet  capture  for her IT guys and sent it to them.  Their answer
> is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
> attached the filtered packet dump.  Looks like things are talking back
> and forth.  Any issues anyone can see?
>
>
> --
>
> Thanks,
> Mark  mailto:m...@mailmt.com 
>
> Myakka Technologies, Inc.
> www.Myakka.com
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-17 Thread Mark - Myakka Technologies

Title: Re: [AFMUG] VPN issues

Bill,

Well that is the issue. Could be anything. Been working fine since June. I have many many more people using VPN's with no issues.

But there is an issue on her link. This is a fiber link BTW. Her Internet works fine.

--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

Wednesday, March 17, 2021, 11:27:35 AM, you wrote:

I would suspect maybe segmentation issues. Sometimes segment boundaries can mess with a VPN.

On 3/17/2021 7:50 AM, Mark - Myakka Technologies wrote:

I have a customer that has some type of VPN router device on our

system. Her VPN isn't working anymore. Her Internet is fine. I did

a packet capture for her IT guys and sent it to them. Their answer

is the usual "It's your ISPs fault". I'm not a VPN expert, but I

attached the filtered packet dump. Looks like things are talking back

and forth. Any issues anyone can see?

Thanks,

Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.

www.Myakka.com

--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-17 Thread Bill Prince


  
  
I would suspect maybe segmentation issues. Sometimes segment
  boundaries can mess with a VPN.


bp

On 3/17/2021 7:50 AM, Mark - Myakka
  Technologies wrote:


  I  have  a  customer  that  has  some type of VPN router device on our
system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
a  packet  capture  for her IT guys and sent it to them.  Their answer
is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
attached the filtered packet dump.  Looks like things are talking back
and forth.  Any issues anyone can see?


--

Thanks,
 Mark  mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com
  
  

  


-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-17 Thread Mark - Myakka Technologies

Title: Re: [AFMUG] VPN issues

Adam,

No NAT, but yes on PPPoE, so smaller MTU. ONT is already bridged. Also, this was working fine since June 2020 and all of a sudden stopped working.

--
Best regards,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

Wednesday, March 17, 2021, 11:02:30 AM, you wrote:

I don't think the issue can be determined from that.
.but if both points can reach one another then it's pretty much always NAT/ALG issue, or an MTU issue.
Is there anything that would prevent this end user from sending and receiving 1500 byte packets? PPPoE? Tunneling of any sort? There's nothing inherently wrong with that, but some devices (Sonicwall) don't participate in MTU discovery, or seem to ignore the path MTU. That isn't "your fault" but you can probably fix it.
NAT stuff is harder to pin down, but for example we had someone who's VPN wouldn't work consistently through NAT on a UFiber Nano ONT, but when we bridged the ONT and moved NAT to a Mikrotik behind it magically everything worked.

On 3/17/2021 10:50 AM, Mark - Myakka Technologies wrote:

Thanks,
Mark mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

2021-03-17 Thread Adam Moffett


I don't think the issue can be determined from that.

.but if both points can reach one another then it's pretty much 
always NAT/ALG issue, or an MTU issue.


Is there anything that would prevent this end user from sending and 
receiving 1500 byte packets?  PPPoE?  Tunneling of any sort? There's 
nothing inherently wrong with that, but some devices (Sonicwall) don't 
participate in MTU discovery, or seem to ignore the path MTU.  That 
isn't "your fault" but you can probably fix it.


NAT stuff is harder to pin down, but for example we had someone who's 
VPN wouldn't work consistently through NAT on a UFiber Nano ONT, but 
when we bridged the ONT and moved NAT to a Mikrotik behind it magically 
everything worked.



On 3/17/2021 10:50 AM, Mark - Myakka Technologies wrote:

I  have  a  customer  that  has  some type of VPN router device on our
system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
a  packet  capture  for her IT guys and sent it to them.  Their answer
is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
attached the filtered packet dump.  Looks like things are talking back
and forth.  Any issues anyone can see?


--

Thanks,
  Mark  mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

[AFMUG] VPN issues

2021-03-17 Thread Mark - Myakka Technologies

I  have  a  customer  that  has  some type of VPN router device on our
system.   Her VPN isn't working anymore.  Her Internet is fine.  I did
a  packet  capture  for her IT guys and sent it to them.  Their answer
is  the  usual  "It's  your  ISPs fault".  I'm not a VPN expert, but I
attached the filtered packet dump.  Looks like things are talking back
and forth.  Any issues anyone can see?


--

Thanks,
 Mark  mailto:m...@mailmt.com

Myakka Technologies, Inc.
www.Myakka.com-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

Re: [AFMUG] VPN issues

[AFMUG] VPN issues

20 matches

Site Navigation

Mail list logo

Footer information