VPN issues

I’m running GP 5.2.5-66 so I think there might be some differences. 

When I run ifconfig I don’t have a gpd0, if appears as though on my Mac it is using gif0 and the default mtu setting is 1280 which is well within the 1420 threshold of the 5g21.

eps414 wrote:

What version firmware are you on?

also, what did you end up setting your MTU to for GPVpn?

My configuration is this:
Host: Apple Mac OS X 10.15.7
VPN:
Provider: GlobalProtect v5.0.9–15 Palo Alto Networks
Tunnel Mode: IPSEC
Gateway para Internet residencial de T-Mobile:
Model: 5G21–12-A Grey
Hardware Version: 3TG00739AABB
Versión de software: 1.2003.03.0178

And the MTU I set to 1350, using this command “sudo ifconfig gpd0 mtu 1350”

What version firmware are you on?

also, what did you end up setting your MTU to for GPVpn?

Mine was just the MTU issue, was able to resolve it by lowering the number. If this blog can be helpful for anyone to troubleshoot and resolve the issue:
https://amithkumarg.medium.com/resolved-t-mobile-home-internet-vpn-issue-2f5ca594c23e

I tried to post a reply twice. Neither seems to have gone thru. Lost my copy. LOL.

Cannot connect via Brave browser, chrome like. So doing this via Edge. I had no issues with Cisco Any Connect on the work laptop 2 days ago. Maybe I was lucky.

Ipv6 drops out via surfshark (SS) VPN. Can someone tell us if 4 vs 6 even matters for most of us? WireGuard no longer worked yesterday. IKEv2 and TCP worked yesterday. Using IKEv2 (automatic) now on SS via Kansas City (KC). Static IP not required for SS. Using dynamic IP. Nearby VPN locations are usually slow with SS. So I have used NYC, KC, Chicago, Seattle, and a few others far from DC over the past 2 days. Could be due to vagaries of SS. Pings usually in 40s from NYC. Higher elsewhere, usually at or under 100. Speeds: DL: sometimes only 1 but often around 20. UL are all over: 1 - 5 - 10 - 25. Tested via speedtest.net. Interestingly, yesterday Proton VPN worked with 40ms or so ping, not 200s. I have no idea what physical place I was connected to (and no idea how to find out) nor which connection protocol was used (smart, TCP, or UDP), as I forgot to check protocol.

I have had the T-Mobile Home Internet Service for about 2 months now and have been fighting non-stop with the VPN issues. I use Cisco AnyConnect for my work and constantly have issues with applications needed for work, mostly Microsoft Teams. When NOT connected to the VPN my download is about 75mbps and upload about 25mbps, all very good numbers. However, once connected to Cisco AnyConnect those numbers come down to almost a crashing halt of 2.5mbps down and 2.0mbps up… it is absolutely awful and quite honestly embarrassing because I have to be on Microsoft Teams all day including conferences.

I've talked to the tech support and it was elevated to a second tier, but that resulted in no solution. Their belief is that the VPN was the problem and that I needed to speak with my employer's IT department about it… so I did. I opened up various tickets through my employer and went in to the office so they could do additional diagnosing. They could not find anything wrong, in fact, had me log in to the VPN via their network and it worked just fine. 

I have starlink service on order and hope to have it here in a month. Ideally for the cost and what I anticipated being great performance by T-Mobile, I would prefer to keep T-Mobile. However, I simply CANNOT wait much longer especially if the company appears to be denying even an issue.

Hope T-Mobile comes to the rescue.

VPN issues via SurfShark (SS) are quite different this am. 

Automatic type of connection, SS, IKEv2 or OpenVPN TCP, etc is now connecting via IKEv2. However this is disabling all ipv6's. WireGuard is not working this am. TCP does work, but disables all ipv6's. Static IP vs (typical) dynamic IP does not seem to matter with regard to speed, Windows 10 laptop. Speeds around 30s for ping (up to 100 for Seattle and Chicago, from DC), 15-20 1.5-8, DL UL. I did not google "what is my ip" to make sure it matches with my VPN.

Proton free VPN, US 3, was fine today and ping was only 41 - not the 200s; 15, 4 DL, UL.

I will assume that ipv4 vs ipv6 is of no importance for most of us (

As an aside - the enormous variability of speeds without or with VPNs is again noted. Local DC area SS VPN locale had speeds of only 3 for a while, then up to 8, vs Seattle and Chicago, along with NYC static IP at 20 DL. Ten minutes later, the speeds were different again, with local DC SS VPN locale up to 20.

I made a post here that may help a few of you:

Basically, you must use the OpenVPN protocol with a TCP connection and a Static IP/Config method. I'm using it right now with almost no ping or speed difference and several web sites show my IP as my VPN's IP.

Hola:

First day with Gray tower Nokia device: model: 5G21-12W-A, Versión de software:

1.2003.03.0168. It arrived at lunchtime.

I found that my speeds were variably slow even without VPN. Usually in the teens-20s for downloads. Uploads were very variable from 0.3 to 25 !  When testing locations around the planet via SurfShark VPN from 5-8pm, there were huge differences. Ping tended to be higher with farther distance from 30-200. Speeds even from the same cities varied by 300%. Never got over 42 mbps.

Via RCN in the DC area: ping 11 ms, 52 / 11 mbps,  jitter 4.8 and 0.35% packet loss via speedtest multi. Loss was zero via single connection.

Why the VPN – in case of doing any banking, like paying bills and helps to keep things more secure.

Proton VPN, free version, worked fine, but ping was in the 200s.

SurfShark VPN initially did not work. Read the prior postings here. Did the items noted below. Someplace along the way I had to change IKE2 protocol to OpenVPN TCP or WIreGuard. Used WireGuard. This was all done in the SS windows 10 software. Ping went from 52 to 54 when using SS VPN. Speeds were a bit slower 27 to 26 and 5 to 2.

First, I did the reboot via the T Mobile ISP website: http://192.168.12.1/. No luck.

Did not do the 45 second reset.

Then I found the posting about the ipv6s and unticked the ipv6 boxes for Proton, SS, and in 1 or 2 other devices.

Still had problems with SS VPN.

Hooked up the T Mobile cylinder to my TP Link wireless device via ethernet and then ethernet from TP L to laptop, then wireless to laptop. It worked. 

Then found that the T Mobile ISP Grey tower worked with SS VPN, but after I killed the ipv6.

Then I tried turning ipv6 back on, took a while to figure out how to do this. I had to turn of SS, Then checked a website Test your IPv6. (test-ipv6.com) after making sure that all 9 network adapters had ipv6 box with a check mark in them ! Had to repeat this process several times. Also turned wireless on and off a few times too (airplane mode).

Best guess, maybe the reset and the IKE2 to TCP or WireGuard did the trick, not killing ipv6.

By 11pm I checked on the work laptop and the government VPN for NIH. It simply worked without any tweaking. Lucky I guess. Fastest speeds via T Mobile and the required gvt VPN 51 40 40 (ping, DL, Upload). Was 21 52 10 via RCN and TP L wireless router.

Also did the wireguard on the SS iphone app. Speeds were wildly variable from 22-40 DL and 1-38 upload on the iphone.

I wasted a whole day on this. I really hope my long posting here helps somebody else.

Cheers…..

I read somewhere that a new firmware greater than 1.2003.03.0168 would be coming out to address these VPN and WiFi Calling issues… anyone know?

iPhone’s WiFi calling will not work correctly with this 5G router, and also L2TP VPN will not work.

Help!  This is the best service I can get for my location… and the LTE previous (White Box) router worked for all these things… but at a slower rate.