cancel
Showing results for 
Search instead for 
Did you mean: 

Plusnet: Stop blocking my incoming VPN connection.

FIXED
7up
Community Veteran
Posts: 15,868
Thanks: 1,604
Fixes: 19
Registered: ‎01-08-2007

Plusnet: Stop blocking my incoming VPN connection.

I've been using a VPN connection from my phone to PC quite successfully for many years and it's always been reliable.

The last few weeks has been atrocious.

I've had to:

restart the Routing and Remote Access service - then incoming VPN worked again (once)

Reinstate a port in the router that had mysteriously vanished - VPN worked again - once

reboot my phone - VPN then worked again - once

Login to the router - check the logs, no suspicious activity found, all devices connected have been verified

Call the phone network after realising that I am able to connect via 2/3/4~G at home but not away from home (and yes, the wifi is turned off)

Log back into the router today once home again, nothing found in logs

Reboot the router - able to connect again.... ONCE and then no more VPN connection and NO MORE INCOMING CONNECTIONS SEEN IN THE ROUTER LOG

 

So, it's either you or Tesco / O2 who are blocking my VPN connections from my phone to my PC. The router is simply not seeing any incoming VPN connections - none.

 

WHY?

 

I'm absolutely livid. Tell me why you are blocking my VPN connections.

I need a new signature... i'm bored of the old one!
13 REPLIES 13
7up
Community Veteran
Posts: 15,868
Thanks: 1,604
Fixes: 19
Registered: ‎01-08-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

Added port 3389 to firewall... Guess what? No connection. It's blocked.

I've never had RDP blocked before, always connected via VPN and then used RDP to get into my computer.

Now i can't even use port 3389 by itselt? - and yes, it's set to both TCP and UDP.

I've also tried connecting my netbook to my phone via hotspot and connecting VPN and RDP from my netbook... same result, blocked.

Plusnet please explain why you are blocking ALL of my incoming traffic please? - The only difference with RDP is that it DOES show in the router logs (yet mysteriously a PC that ALWAYS accepts RDP is complaining of malformed RDP packets and dropping the connection).

You or the router are deliberately blocking access to my PC. I want to know why.

I need a new signature... i'm bored of the old one!
7up
Community Veteran
Posts: 15,868
Thanks: 1,604
Fixes: 19
Registered: ‎01-08-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

@bobpullen some help please, your network is blocking every single inbound attempt I make via L2TP and RDP. 

 

I'm getting really angry.

 

Having connected to my VPS which is in a different country, even that is unable to make an inbound connection to my PC via our router. I want some answers please.

I need a new signature... i'm bored of the old one!
7up
Community Veteran
Posts: 15,868
Thanks: 1,604
Fixes: 19
Registered: ‎01-08-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

Miracle happens..

On phone to PN tech.. nothing to do with them he says... but try factory reset.

Does factory reset.. nothing. He puts me on hold.. it starts working.. both RDP and VPN using L2TP.

Gets off the phone, guess what? It all STOPS WORKING AGAIN.

 

Incidentally considering it's a factory reset, it's funny how there's still over 200 pages in the log file.

 

HOW VERY STRANGE. Interact with Plusnet and it starts working, then stops the moment I'm off the phone.

 

Yoiur Hub2 does however have a bug that I've noticed. My PC has a wifi and Ethernet adapter. These are bridged using the windows software network bridge - IP address is 192.168.1.2

 

Windows7 incoming VPN is set to use IP addresses randing from 198.168.1.210  <>  192.168.1.215

 

The router keeps picking up my PC between those ranges:

screenshot-1658

 

I doubt that's the actual cause though, it's been doing that for years - unless you've pushed an update that you've not told anyone about.

 

It would however sort of make sense if the router is now trying to push traffic there instead of to 192.168.1.2 - for remote desktop that's a killer as forwarding packets to 192.168.1.2 is how it should work.., no idea about VPN using L2TP.

 

Never heard of a factory reset leaving 200 pages of log files... that's amazing.

I need a new signature... i'm bored of the old one!
7up
Community Veteran
Posts: 15,868
Thanks: 1,604
Fixes: 19
Registered: ‎01-08-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

screenshot-1660

 

That was literally while I was on the phone to your man at Plusnet HQ.

Since then, NOTHING. No RDP, no VPN. Heck I don't think VNC will work either.

I need a new signature... i'm bored of the old one!
7up
Community Veteran
Posts: 15,868
Thanks: 1,604
Fixes: 19
Registered: ‎01-08-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

Fix

Right, your router IS at fault with a BUG that you have never discovered or corrected.

 

This:

screenshot-1661

 

Selecting the Device Name does not work - the router has (mysteriously) picked up it's VPN IP addresses (probably based on the Mac address) and has decided that using the machine name will do - data can be sent to the new IP which is wrong and not used by Windows to accept raw traffic. Windows accepts VPN encrypted traffic here.

 

So, it allows the first connection because it's pointing to 192.168.1.2. Then the router see's teh 210-215 IP address and points to that. Now it won't allow any normal traffic in because it's pointing there and will do so for X amount of time. Eventually, it will forget that IP and reset back to 192.168.1.2 - and then it will allow another connection again - and then lock onto the next IP in the 10 - 15 IP range - and so the cycle repeats. This now explains why I was getting one connection and then being blocked.

 

Using the actual IP address WORKS. I do vaguely remember now having some issue with this moons ago.

 

So your router has a bug. I use windows VPN which offers it's own IP addresses to connecting clients and it expects encrypted traffic. There is no point associating these IP addresses with that MAC and attempting to forward unencrypted data here as it does nothing.

 

In the process, your tech support guy telling me to factory reset it, has now lost me all of the family devices MACs, IP addresses and 'names' that were associated with them. I can sort that another time but this is the sort of expert knowledge I would have expected from a technical support person who is supposed to sit there supporting YOUR ROUTER.

 

The logic to fix this in your firmware?

Discover device MAC and IP address - first sighting of it, capture and store. Once this mac address is seen with a different IP address, ping the old one. If it responds and still has the same MAC then DO NOT UPDATE IT. It's that simple (obviously in code it probably won't be but that's the general logic flow).

 

Hope this helps someone else..

I need a new signature... i'm bored of the old one!
dvorak
Moderator
Moderator
Posts: 29,766
Thanks: 6,624
Fixes: 1,485
Registered: ‎11-01-2008

Re: Plusnet: Stop blocking my incoming VPN connection.


Moderators Note


This topic has been moved from Broadband to My Router

Customer / Moderator
If it helped click the thumb
If it fixed it click 'This fixed my problem'
paul_blitz
Pro
Posts: 254
Thanks: 72
Fixes: 3
Registered: ‎20-07-2016

Re: Plusnet: Stop blocking my incoming VPN connection.

To be honest, if such a 'feature' was so important to me, I'd just ditch the "free router", and buy something more up to the job. The ISP provided routers are 'fine for the majority', but not so good for the 'clever stuff' we techies might want to do.

 

It's a bit like the many bits of Microsoft "free" software: it is as good as what you pay for it!

jab1
Legend
Posts: 19,307
Thanks: 6,357
Fixes: 290
Registered: ‎24-02-2012

Re: Plusnet: Stop blocking my incoming VPN connection.

All my software - and OS - is free, although I do pay for some of it in the form of donations, if it proves useful.

John
krusty
Rising Star
Posts: 105
Thanks: 17
Registered: ‎09-08-2017

Re: Plusnet: Stop blocking my incoming VPN connection.

Completely agree, what 7up needs is a higher spec router.....  The hub 2 wasn't really designed for what he wants it do and yes an update could have broken the features he wanted.

7up
Community Veteran
Posts: 15,868
Thanks: 1,604
Fixes: 19
Registered: ‎01-08-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

Well that's the weird thing, the router shows the current firmware as being over a year old but in the logs I did find a reference to it performing an update..

This setup worked flawlessly for many years until something caused a change - it was pointing the ports to my machine but not by IP address as I set up years ago (and consequently forgot).

Now it's working again it's fine but the router does have a bug that needs fixing. I've no intention of replacing the device, it's worked for years with no fuss but what has caused annoyance is that it somehow switched from pointing ports to my computers IP address to using it's name and whatever IP address it currently recognises. I did not change that and my missus never touched the router.
I need a new signature... i'm bored of the old one!
Champnet
Aspiring Hero
Posts: 2,912
Thanks: 1,095
Fixes: 15
Registered: ‎25-07-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

In fairness RDP  over VPN isn’t your average user’s setup……

Dan_the_Van
Hero
Posts: 3,179
Thanks: 1,593
Fixes: 92
Registered: ‎25-06-2007

Re: Plusnet: Stop blocking my incoming VPN connection.

The Hub two i use current firmware version as seen in >Advanced settings >Information

Firmware version: v0.10.00.04201-PN
Firmware updated: 30-Jun-2023

Looking at the event log category BOOT I see the version the Hub startup on

17:56:30, 21 Oct. Booting firmware v0.10.00.04201-PN (Thu Apr 20 16:54:19 2023)

 

 

 

bobpullen
Community Gaffer
Community Gaffer
Posts: 16,933
Thanks: 5,024
Fixes: 317
Registered: ‎04-04-2007

Re: Plusnet: Stop blocking my incoming VPN connection.


@7up wrote:
This setup worked flawlessly for many years until something caused a change - it was pointing the ports to my machine but not by IP address as I set up years ago (and consequently forgot).

Now it's working again it's fine but the router does have a bug that needs fixing. I've no intention of replacing the device, it's worked for years with no fuss but what has caused annoyance is that it somehow switched from pointing ports to my computers IP address to using it's name and whatever IP address it currently recognises. I did not change that and my missus never touched the router.

The Plusnet Hub has not received any recent updates, I can assure you of that at least.

Whilst I don't fully understand exactly how you have things configured (I've personally never relied on Windows as a VPN endpoint, nor bridged network adapters), this does seem to be a very niche set-up; Assuming it is a bug in firmware, it's one that will have eluded folk for the best part of a decade!

Am I reading it right that you are assigning VPN clients IP addresses from the same subnet as the local network? If so, is this the recommended way to do things? For my self-hosted VPN endpoint, it runs off a completely different subnet.

 

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵