User Profile
amithkumarg
Roaming Rookie
Joined 4 years ago
User Widgets
Contribuciones
Re: I cannot access my job's VPN from home
I Am wrote: amithkumarg wrote: Mine was just the MTU issue, was able to resolve it by lowering the number. If this blog can be helpful for anyone to troubleshoot and resolve the issue: https://amithkumarg.medium.com/resolved-t-mobile-home-internet-vpn-issue-2f5ca594c23e Is this a confirmed fix for the GlobalConnect issue? It connects just fine but the sites I need to access do not load. Funny, sometimes I don't feel like running an Ethernet cord through my home, and sometimes it has worked on Wi-Fi (work sites) and other times it refuses to load - and as soon as I plug in this stupid cord - it works just fine… This is quite cumbersome, it's 2021 like "VPN" Ethernet just WORK jeez all these "so called security" protocols - data bases and data still getting hacked and sold - I don't mind the "VPN" but we are in a wireless world - I almost feel like it isn't a T-Mobile "issue" as much as its a silly "security" or some odd setting - also if the issue is with the MTU being the lowest on the T-Mo Nokia router then why don't T-Mobile do a firmware update and just use the MAX size - what is the delay - I just dont understand - I wonder if my IT team will eve given admin access to try this - it really sucks because I don't want to have to use Comcast - but yea the irony of not being able to use T-Mobile "home" internet and you……. Yes its a confirmed fix. I have been using it without issue over a month now. I don't know when T-Mobile will fix this issue in their gateway, but meanwhilelowering MTU on VPNinterface is non-harmful in every way, so your IT team shouldn't have any concern setting this one up for you. Since you don't have admin access, make sure to ask them to set the sh script (as explained in the blog) to run on every restart as the VPN interface resets itself everytime on restarts.9Visto0likes0ComentariosRe: VPN issues
eps414 wrote: Figured it out. We apparently use advanced routing, so my gpd0 is actually utun0 and we have 2 vpn's. Each vpn requires a different mtu setting, but having found the correct numbers 1330 and 1310 it now works. Yay! I am glad you figured it out. utun (tun short tunneling) is interface created by Mac following any VPN installation. I guess limiting that too, should work, if you don't see gpd0 specifically. I was wondering since you have the latest version of GP app >=5.2.4, you should be able to update the MTU through the app settings. Check here GP documentation: https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-new-features/new-features-released-in-gp-app/configurable-maximum-transmission-unit-for-globalprotect-connections7Visto0likes0ComentariosRe: VPN issues
eps414 wrote: What version firmware are you on? also, what did you end up setting your MTU to for GPVpn? My configuration is this: Host:Apple Mac OS X 10.15.7 VPN: Provider: GlobalProtect v5.0.9-15 Palo Alto Networks Tunnel Mode: IPSEC T-Mobile Home Internet Gateway: Model: 5G21-12-A Grey Hardware Version: 3TG00739AABB Software Version: 1.2003.03.0178 And the MTU I set to 1350, using this command "sudo ifconfig gpd0 mtu 1350"11Visto1like0ComentariosRe: I cannot access my job's VPN from home
Mine was just the MTU issue, was able to resolve it by lowering the number. If this blog can be helpful for anyone to troubleshoot and resolve the issue: https://amithkumarg.medium.com/resolved-t-mobile-home-internet-vpn-issue-2f5ca594c23e28Visto2likes0Comentarios