Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Techspert]

Hello,

I'm a WAN ENgineer for my company and we have been having recent noticeable issues with our VPN users getting disconnected randomly from VPN or they're able to authenticate but NOT access any server-side resource (ICMP,telnet, RDP, etc.)  In an effort to troubleshoot, I connected to VPN from home and experienced the same sort of problem.  I can connect to my Atlanta facility and receive an IP address; however, I cannot ping anything or access any server in Atlanta.  I went into one of my dialer profiles and disabled 'Transparent Tunneling' alltogether.  This worked and allow me to access resource but then I noticed access getting extremely slow.  I set a ping to ping an Atlanta-side Exchange server and some of the packets timed out or had responses of 4000+ ms.  As an added test, I ping an external public IP address and it had the same pings and drops.  I was NOT able to ping my local DIR-655 D-Link router due to our policy of disabling Split Tunneling (local LAN access).  In an effort to resolve the slowness, I disabled VPN, and logged out of my PC session.  I relogged in and tried VPN again.  I was able to authenticate and all but access was still slow.  After a PC reboot, I tried again and all was STILL slow.  I then rebooted and did no VPN, just general web surfing and everything was slow.  I ping external IP addresses and the RTTs were in the 4000+ ms range still w/ dropped packets. 
I tried a Mac computer which is also on wireless and it was slow to the Internet.  I ended up having to reboot my D-Link router and all returned to normal.  So it seems like VPN can hose UP my router's connection.  THis is very bogus to me and I'd really like to know the resolution.  I verified with my company users what devices they have on their home networks and they both verified they were using D-Links (one a DI-524 firmware 3.02 and the other I'm not sure).  These users had the authenticate but cannot access resources issue I had but I told them to disable 'Transparent Tunneling' and they are now working correctly.  They do get disconnected after 40+ minutes to 4 hours which is still agitating.

[FurryNutz]

Are the routers set up for Reserved IP addressing for the devices?
Is DNS addresses filled in under Setup/Internet/Manual?
Try disabling Advanced DNS Services.
IS DNS relay enabled? Try On or Off.
Turn off QoS engine if it's not being used.
Set Firewall TCP and UDP to Endpoint Independent.
Try turning On/off uPnP.

I would recommend setting WiFi modes to the supported ones for your devices, i.e. Single mode G or Mixed G and N if you have N supported devices. A and B aren't used much anymore. Turn things off like Protected WiFi and features if you don't need them. I prefer to run routers and lean as possible.

[Techspert]

I'll try some of those suggestions and report back.  I did upgrade to firmware version 2.01 and was connected for 11+ hours w/o the same dropped packets and high RTT's occurring. 

Our users are still reporting random issues with D-Links.  I'll report back.

[FurryNutz]

Another issue to look at is the users ISP Modems, sometimes modems have a built in router already. Having that and this router makes for problems. It's preferred to bridge these modems if this is the case.