Re: [AusNOG] IPsec VPN over 4G telstra issue

>> Cheers >> >> Dino >> >> >> >> >> >> From: Alex Samad mailto:a...@samad.com.au>> >> Sent: Thursday, 20 September 2018 10:34 AM >> To: russell3...@gmail.com <mailto:russell3...@gmail.com> >> Cc: m...@mimp.com &l

Re: [AusNOG] IPsec VPN over 4G telstra issue

Telstra is putting a fix to this issue with a change order tonight. >> Should be fixed after that. >> >> Cheers >> >> Dino >> >> >> >> >> >> *From:* Alex Samad >> *Sent:* Thursday, 20 September 2018 10:34 AM >&g

Re: [AusNOG] IPsec VPN over 4G telstra issue

sday, 20 September 2018 10:34 AM To: russell3...@gmail.com<mailto:russell3...@gmail.com> Cc: m...@mimp.com<mailto:m...@mimp.com>; Ausnog mailto:ausnog@lists.ausnog.net>>; Dino Sosic mailto:dino.so...@datacom.com.au>> Subject: Re: [AusNOG] IPsec VPN over 4G telstra issue

Re: [AusNOG] IPsec VPN over 4G telstra issue

x to this issue with a change order tonight. Should > be fixed after that. > > Cheers > > Dino > > > > > > *From:* Alex Samad > *Sent:* Thursday, 20 September 2018 10:34 AM > *To:* russell3...@gmail.com > *Cc:* m...@mimp.com; Ausnog ; Dino Sosic < > dino.so

Re: [AusNOG] IPsec VPN over 4G telstra issue

Also, thanks to Russel for getting quickly on this. Cheers mate. From: Dino Sosic Sent: Thursday, 20 September 2018 12:17 PM To: 'Alex Samad' ; russell3...@gmail.com Cc: m...@mimp.com; Ausnog Subject: RE: [AusNOG] IPsec VPN over 4G telstra issue Hi, Telstra is putting a fix to this issue

Re: [AusNOG] IPsec VPN over 4G telstra issue

Hi, Telstra is putting a fix to this issue with a change order tonight. Should be fixed after that. Cheers Dino From: Alex Samad Sent: Thursday, 20 September 2018 10:34 AM To: russell3...@gmail.com Cc: m...@mimp.com; Ausnog ; Dino Sosic Subject: Re: [AusNOG] IPsec VPN over 4G telstra issue

Re: [AusNOG] IPsec VPN over 4G telstra issue

I'll just leave this here... https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-on-ipsec-ike.html -- Sam McLeod https://smcleod.net https://twitter.com/s_mcleod Words

Re: [AusNOG] IPsec VPN over 4G telstra issue

Do we know what the issue is ? Is it just the IKE packets or are there other packets disappearing We use PA's ipsec vpn tech so ipsec inside udp from memory - wondering if they are filter / intercepting or ? A On Thu, 20 Sep 2018 at 09:46, Russell Langton wrote: > Thanks Mat, its being worked

Re: [AusNOG] IPsec VPN over 4G telstra issue

Thanks Mat, its being worked on. On Thu, 20 Sep. 2018, 9:32 am Mat van den Hoogen, wrote: > We are experiencing the same on a few of our services, nothing has come > back up though for us yet :( > > —Mat > > On 19 Sep 2018, at 8:11 pm, Russell Langton wrote: > > Hi All, > > I'll reach out to

Re: [AusNOG] IPsec VPN over 4G telstra issue

We are experiencing the same on a few of our services, nothing has come back up though for us yet :( —Mat On 19 Sep 2018, at 8:11 pm, Russell Langton mailto:russell3...@gmail.com>> wrote: Hi All, I'll reach out to some of you for details of the services impacted and get it in front of the

Re: [AusNOG] IPsec VPN over 4G telstra issue

+1 for Russell, one of the shining lights of Telstra On Wed, 19 Sep 2018 at 20:37, Russell Langton wrote: > Hi All, > > I'll reach out to some of you for details of the services impacted and get > it in front of the right people to progress. > > On Wed, Sep 19, 2018 at 5:20 PM Peter Tiggerdine

Re: [AusNOG] IPsec VPN over 4G telstra issue

A lot of our sites came back online around 7pm but most of them needed a reboot to get it started again. One of our techs got a few driving miles for the fun of it On 19 Sep 2018, at 8:37 pm, Russell Langton mailto:russell3...@gmail.com>> wrote: Hi All, I'll reach out to some of you for

Re: [AusNOG] IPsec VPN over 4G telstra issue

Hi All, I'll reach out to some of you for details of the services impacted and get it in front of the right people to progress. On Wed, Sep 19, 2018 at 5:20 PM Peter Tiggerdine wrote: > ROFL! THAT'S GOLD!! > > Dutton Button!! > > Regards, > > Peter Tiggerdine > > GPG Fingerprint: 2A3F EA19

Re: [AusNOG] IPsec VPN over 4G telstra issue

ROFL! THAT'S GOLD!! Dutton Button!! Regards, Peter Tiggerdine GPG Fingerprint: 2A3F EA19 F6C2 93C1 411D 5AB2 D5A8 E8A8 0E74 6127 On Wed, Sep 19, 2018 at 5:18 PM Matt Palmer wrote: > On 19 Sep 2018, at 4:33 pm, Dino Sosic wrote: > > Apparently Telstra confirmed today that there are issues

Re: [AusNOG] IPsec VPN over 4G telstra issue

On 19 Sep 2018, at 4:33 pm, Dino Sosic wrote: > Apparently Telstra confirmed today that there are issues with forming VPN > IPsecs over 4G SIMs on telstra.internet APN. Anyone experiencing the same > or knows anything about it? I have multiple sites down. IKE packets simply > not making it to the

Re: [AusNOG] IPsec VPN over 4G telstra issue

on behalf of Peter Tiggerdine Date: Wednesday, 19 September 2018 at 4:59 pm To: "boblob...@gmail.com" Cc: "ausnog@lists.ausnog.net" Subject: Re: [AusNOG] IPsec VPN over 4G telstra issue Wouldn't surprise me if Telstra decided to block all ports below 1024. Does IKE over NAT-T (

Re: [AusNOG] IPsec VPN over 4G telstra issue

Wouldn't surprise me if Telstra decided to block all ports below 1024. Does IKE over NAT-T (4500) work? Regards, Peter Tiggerdine GPG Fingerprint: 2A3F EA19 F6C2 93C1 411D 5AB2 D5A8 E8A8 0E74 6127 On Wed, Sep 19, 2018 at 4:44 PM Boblobsta . wrote: > Hi, > > +1 > I've also been

Re: [AusNOG] IPsec VPN over 4G telstra issue

Hi, +1 I've also been troubleshooting UDP reachability problems that started just after midday on Telstra mobile network - Bob W On Wed, 19 Sep 2018 at 16:37, Craig Askings wrote: > > Yup I'm seeing the same issue for a couple of connections. > > UDP gets through fine but IKE on UDP/500

Re: [AusNOG] IPsec VPN over 4G telstra issue

Yup I'm seeing the same issue for a couple of connections. UDP gets through fine but IKE on UDP/500 never makes it through their network. I did look at using ike over tcp by my equipment only supports that for roaming users, not site to site ipsec. > On 19 Sep 2018, at 4:33 pm, Dino Sosic

[AusNOG] IPsec VPN over 4G telstra issue

Hi, Apparently Telstra confirmed today that there are issues with forming VPN IPsecs over 4G SIMs on telstra.internet APN. Anyone experiencing the same or knows anything about it? I have multiple sites down. IKE packets simply not making it to the other side. Russel any insight mate? Cheers