Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[gemini]

I am an automation systems specialist, not IT, so I hope below makes some sense.
 
I tested a DIR-130 connected to a land line ADSL (Telus, Canada) service successfully.  All required features  including PPTP VPN worked except;
(1) remote VPN client could not browse WEB - DLink tech support said is normal when using PPTP and if desired to configure using IPSec (however I see this may not be true according to Harrkev post with MTU solution),
(2) Win XP PPTP VPN client connection was not repeatable - peers said Windows VPN client is flakey.

When the DIR-130 was put into real service, similar ADSL was not available, so 3G EVDO (BT5600v2 cell modem) was installed for "always on" ISP connection (still Telus - CDMA).  Cell modem obtains IP,SN,GW,DNS from ISP and acts like router itself.  DIR-130 WAN/Internet port connected to cell modem (cell modem includes DHCP server 192.168.1.10-19).  So cell modem and DIR-130 WAN port establish one network 192.168.1.x (cell modem x=1, DIR-130 WAN x=11 via DHCP).  DIR-130 LAN establishes second network 192.168.0.x.  This setup works as any device on the DIR-130 LAN can access any other device on 192.168.1.x and 192.168.0.x as well as internet websites.  What doesn't work is the PPTP VPN.  I thought the VPN request would flow through the cell modem to the DIR-130.  The cell modem includes settings such as GRE pass through and DMZ that I enabled with IP address of the DIR-130 WAN IP.  Cell modem port forwarding is also available but left unused.  VPN client connection does advance to "verifying username" then immediately returns error 619.  Maximum unfragmented ping over internet is 1350bytes.

[Fatman]

It sounds like you may need to play with the GRE passthrough option you mentioned on your Cellular Modem to ensure that it is working properly.  We do not advise double NAT'ing routers, doubly so when there is a VPN involved.

[gemini]

Bluetree (cell modem) tech support returned my message.  Turns out one setting I thought was irrelevant was very relevant.  Was directed to enable IP pass through to Ethernet (other options were serial and USB made me think the function was not relevant).  When enabled, the cell modem becomes invisible and all ISP settings are obtained by the DIR-130 WAN port.  Makes it just like my ADSL modem test - no double NAT'ing.  Unfortunately, VPN client connection attempt still ends with error 619 but after a much longer attempt to verify username.

[Fatman]

We we get to check the NAT device the client is behind.

[gemini]

I discussed with the ISP if they may be affecting this with respect to NAT, etc.  They say there is no issue and what I am attempting should work.  However, before the discussion, I was able to connect with my client behind a different service (internet service provided at the Hotel in which I was staying).  So I tried my client behind yet another internet service, and another.  In total I have tried four different services now and have a success rate of 75%.  The service that my client was unable to connect on was another 3G service just like the one the DIR-130 is behind.  The succesful services were ADSL. Will consider the implementation a success as connecting from two of the three tested ADSL services will be the typical method.

Thanks for your comments and direction.