VPN Access

[mashu]

Can you give more info please:

- Could they connect in the past, but now cannot connect?
- Can they connect with other networks, i.e. is this only on VC?
- You sure the PC setup is correct?
- Do you use non-standard ports, etc?

Thanks for the prompt reply, Jannie.

1. Yes, they could connect before - this problem has arisen in the past few weeks.
2. We only have VC 3G. Just to be clear - all can connect to the VC network, it's just when users are allocated an address in the 10.x.x.x or 41.13.x.x range that they cannot establish a VPN connection to our network. Other IP ranges eg 41.23.x.x work fine. This is not to say that there are not other ranges that will not allow a VPN connection - it's just that 41.13.x.x comes up so often.
3. Yes, I have checked this. As I mentioned earlier - the VPN connection does work, just not on the 41.13.x.x range.
4. Yes, completely standard - port 1723 (PPTP)

[mashu]

Can you give more info please:

- Can they connect with other networks, i.e. is this only on VC?

Further to my previous reply, I have spoken to several of the users and two of them use their personal MTN 3G modems when they cannot establish a VPN connection with the work issued VC modems - they can always connect via MTN.

[ambo]

Then we got a crapola allocation of IP's (thanks Ambo!) and could retire the InternetVPN APN.

Unfortunately we're now back to square one and have run out of public IP's, so it's back to NAT and thus the InternetVPN APN got reintroduced in the last week or two.

No luck yet with getting another allocation?

[jannievanzyl]

No luck yet with getting another allocation?

Not yet, but I suspect they won't have anough left for us, we now need many millions.

[ambo]

Not yet, but I suspect they won't have anough left for us, we now need many millions.

Just under 60 million available in the AfriNIC pool. Don't think you're out of luck just yet.

[jannievanzyl]

Thanks for the prompt reply, Jannie.

1. Yes, they could connect before - this problem has arisen in the past few weeks.
2. We only have VC 3G. Just to be clear - all can connect to the VC network, it's just when users are allocated an address in the 10.x.x.x or 41.13.x.x range that they cannot establish a VPN connection to our network. Other IP ranges eg 41.23.x.x work fine. This is not to say that there are not other ranges that will not allow a VPN connection - it's just that 41.13.x.x comes up so often.
3. Yes, I have checked this. As I mentioned earlier - the VPN connection does work, just not on the 41.13.x.x range.
4. Yes, completely standard - port 1723 (PPTP)

1. How do you check the IP? with ifconfig or a 'whatsmyip' type of web site.
2. Which area are these guys that battle with the 41.13 range?

[mashu]

1. How do you check the IP? with ifconfig or a 'whatsmyip' type of web site.
2. Which area are these guys that battle with the 41.13 range?

1. checkip.dyndns.org
2. Recent complaints from Linbro Park, Sandringham and Johannesburg South. I can compile a more detailed list if it will help.

[CARNaG3za]

So we managed to get one SIM switched over the the InternetVPN APN for testing, but it has not made a difference according to the user.
They are still not able to connect to our VPN.

[jannievanzyl]

So we managed to get one SIM switched over the the InternetVPN APN for testing, but it has not made a difference according to the user.
They are still not able to connect to our VPN.

Are you sure they switched over properly? You need the SIM to be provisioned by Vodacom and then you need to change the APN setting on his device.

Did you do both? What IP do you get with ipconfig.

[jannievanzyl]

1. checkip.dyndns.org
2. Recent complaints from Linbro Park, Sandringham and Johannesburg South. I can compile a more detailed list if it will help.

You cannot use a web-based IP checker as it'll report the public side of the NAT.

Rather do an ipconfig on the actual device.

[CARNaG3za]

Are you sure they switched over properly? You need the SIM to be provisioned by Vodacom and then you need to change the APN setting on his device.

Did you do both? What IP do you get with ipconfig.

Ok, I will have to get the notebook back in here.
Hopefully tomorrow I will be able to do some proper testing and get all the relevant info for you.

[garp]

Same problem here - cannot get a VPN connection from a 41.13.x.x IP address. Gauteng.

[Matthysdt]

Hi Guys

It's 3 AM, I need to do support and I'm so frustrated by this issue.

No watter what connection I dial from my Vodacom 3G, the authentication always fails.

I have 6+ connections, including connections to ADSL lines, TDIS lines, Unrestricted APN 3G's (also on Vodacom), some lines use Afrihost, some Telkom, some XDSL.

No matter what combination I try, I always fail at authentication!

I use normal pptp connections in most cases, but besides that, I know for a fact that these VPN's are up and running, my colleagues can all connect, but I cannot.

My Vodacom 3G is due for an upgrade and I'm seriously considering moving to another network, any advice? Which networks are unaffected by this Natting issue?

Regards

Oh, and btw, my IP is 10.184.44.x

[CARNaG3za]

I can confirm that switching over to the internetvpn APN has resolved our problem (for the one sim that I am testing)
Will be switching the rest of the company over to the new APN setting.

The APN setting was not set on the software side, after I change it I only got 41.x.x.x IP addresses and each time I was able to connect to the VPN.

Thanks jannievanzyl for the assistance.

[ginggs]

My Vodacom 3G is due for an upgrade and I'm seriously considering moving to another network, any advice?

Use the 'internetvpn' APN as suggested above and stick with Vodacom.

Which networks are unaffected by this Natting issue?

They may not have NAT issues now, but they have routing problems, blocked ports, connections being closed, etc.
At least Vodacom care about this kind of stuff and will fix it.