VPN issues

If you have the new Nokia 5G gateway there are many corporate level VPN's like PaloAlto Networks GlobalProtect that do NOT work.  Many reports of this and hopefully T-Mobile responds quickly to fix.  These same VPN's DO work on the white Askey gateway and on the Franklin hotspot.

T-Mobile PLEASE, PLEASE, PLEASE address this as a priority and roll-out an update ASAP.  Gracias.

I just got the same message sent to me as Josh123. I'm in IT and work for a large company and troubleshooted the issue with our engineers for a few hours to figure out this is on the T-Mobile side. We are all amazed that they can't support and won't support ipv4 and what is more troubling is that they actually give you an ipv4 address for your external gateway which is the same thing Comcast and I'm guessing others are doing. So it makes no sense. The speeds have been awesome as we are less that 5,000 feet from the tower. Everything works great except the most import thing which is being able to use my VPN client. We use Global Protect by PaloAlto.

Seems to be a recurring theme.

I'm having the same issue.  If I can't get it resolved, I'm going to have to cancel my service and go back to Spectrum.

Same issue over here… on a Nokia 5g Gray. Coworker on the 4g White reported same issue after a firmware update was pushed. IPSec VPN is not working over Tmo home internet. I tried both work and home. PPTP oddly enough worked, but that's not a reasonable solution nor is it secure. I really doubt anyone's employer is going to re-architect their infrastructure for dual stack VPN for a single or a hand full of employees. Same VPN's work when connected via TMO hotspot on my cell… so I am not sure why they are blocking it. No options in the web console. Not very happy… Hell, charge me $5 more a month to make it work… Looks like TMO was not the escape plan I had hoped for getting away from comcast.

I was able to solve my VPN issues using the guidance in https://amithkumarg.medium.com/resolved-t-mobile-home-internet-vpn-issue-2f5ca594c23e.  This was on a MacBook + Cisco AnyConnect.  I don't think I needed to change all of them, but I set the MTU on four network adapters to 1350:

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1350
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1350
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1350
utun2: flags=80d1<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1350

Assuming this is something that can be fixed at the router level, I really hope T-Mobile pays attention to this thread.  Not every user is going to be tech savvy enough to do this on their own.

I’m having the same issue here. 

Using my old internet connection, I have no issues. The moment I switch over to T-Mobile Home Internet, I can't login to the VPN.

¿Tienes alguna idea?

TINC will also works out of box BUT that doesn't help most people that need the VPN for work sadly. I am not going to make massive changes to the environment for 1 person out of 300+ connections. This is going to be a show stopper for lots of people, especially with all the remote working going on.

ITGuy3323, I am also in IT and very disappointed.  I have ordered Starlink now but was really hoping T-Mobile would have a solution but nothing.  I can't even pay more to get a static IPv4 address.  I have read that T-MOBILE is sharing IPv4 addresses.

Tech support said they were all due to VPN set up issues asking to dual stack IPV4 and IPV6.

But why the existing set up works fine with the Specturm cabble not on T-Mobile 5G home internet?

The VPN set-up allows both IPV4 and IPV6.

I am not convinced the tech support’s assertion about dual stacking of IPV4/IPV6.

I am about to return it.