Corporate VPN issues

[fourstardan]

Hi,

Has anyone got Plusnet and had issues with using Corporate SSL VPN?

[Wax1234]

I have plusnet. No issue using SSL via the Fortinet client

[churchie2856]

I've use Cisco Anyconnect client with SSL over Plusnet without issue.

What's the problem you are experiencing?

[fourstardan]

Its with an F5.

Getting loads of drops when accessing certain services.

Worked in IT for 20 years tbh and never had issues like it, apparently its an ISP issue.

Im not so sure so wanted to put some feelers out.

[LordGrover]

I'd be surprised if it's down to Plusnet; they're pretty big and it would be a big issue if they were blocking it or having trouble.

Sounds more like an IT department with sloping shoulder syndrome to me.

[Jinx]

Not an problem I had but colleagues on Sky broadband did have issues via Cisco VPN. Ended up having to find another solution for them (Global protect).

[buggalugs]

A home worker had issues using SSL vpn over plusnet, never did resolve it, they switched to BT in the end.

[weeboot]

Check whether or not the ISP uses Barefruit.. We’ve seen VPN drops on AnyConnect because of it.

[fourstardan]

LordGrover said:

I'd be surprised if it's down to Plusnet; they're pretty big and it would be a big issue if they were blocking it or having trouble.

Sounds more like an IT department with sloping shoulder syndrome to me.

My 20 years in IT would also slant towards this diagnosis.

Encrypted tunnel is surely not something an ISP can fiddle with.

Thanks all

[jw673]

fourstardan said:

LordGrover said:

I'd be surprised if it's down to Plusnet; they're pretty big and it would be a big issue if they were blocking it or having trouble.

Sounds more like an IT department with sloping shoulder syndrome to me.

My 20 years in IT would also slant towards this diagnosis.

Encrypted tunnel is surely not something an ISP can fiddle with.

Thanks all

As a test, though possibly for naught, try lowering the MTU on your ethernet or Wifi adapter (whichever you use for your internet connectivity/browsing) and see if that helps.

[theboss]

jw673 said:

As a test, though possibly for naught, try lowering the MTU on your ethernet or Wifi adapter (whichever you use for your internet connectivity/browsing) and see if that helps.

I’d start with this as well. It may be more of an issue on the server side as PlusNet will be supporting 1492 the same as any other pppoe xdsl provision. If there are unknown tunnelling protocols in use on the server side (likely if they are hosting in public cloud for example) and pathMTU is failing you could be getting packets dropped left right and centre in either direction.

Wireshark would likely reveal much more if you are so inclined to do the infra teams job for them.

[buggalugs]

fourstardan said:

My 20 years in IT would also slant towards this diagnosis.

Encrypted tunnel is surely not something an ISP can fiddle with.

Thanks all

Depends on the VPN type. If it’s plain SSL then unlikely to have issues. Some others though like ipsec based ones can use weird non tcp protocols that not all cheesy £5 a month ISP’s deal with very well. Remember before SSL was everywhere some ISP’s were starting to inject their own ads into peoples http streams and you get an idea of what they’re trying to do to your traffic.

[Burrow01]

Could you test it with a friends connection thats not with Plusnet?

[colin79666]

Burrow01 said:

Could you test it with a friends connection thats not with Plusnet?

Or temporarily tether to you mobile? If it works and the only thing that changed was the isp then you know where to concentrate the effort.

As an aside, we often find users on Virgin Media have issues with Microsoft Direct Access.

[bitchstewie]

Router?

I've a colleague who had issues with our SSL VPN where it was dropping out during Teams meetings (we tunnel everything through the VPN) and he changed "something" in his Draytek router and it's never happened since.

[Chozza]

About 2 years ago Plusnet had an issues with one of there IP ranges and VPNs ( work VPNs )

Never checked if they fixed it .. as just moved anyone with an issue to another isp.

goggle suggest it was an issue with ip addresses starting 146.