IPSec SSL VPN p2p tunnel w/o Hardware

[RabbieBurns]

this new one (a newer TP Link than the old TP Link that failled) has the following which the old one never did:

 

This page allows you to enable or disable gateway of application layer.

Virtual Private Network(VPN)

PPTP Passthrough:Enable Disable

L2TP Passthrough:Enable Disable

IPSec Passthrough:Enable Disable

Application Layer Gateway(ALG)

FTP ALG:Enable Disable

TFTP ALG:Enable Disable

 

Should I enable or disable the vPN stuff?

[SYNACK]

this new one (a newer TP Link than the old TP Link that failled) has the following which the old one never did:

 

This page allows you to enable or disable gateway of application layer.

Virtual Private Network(VPN)

PPTP Passthrough:Enable Disable

L2TP Passthrough:Enable Disable

IPSec Passthrough:Enable Disable

Application Layer Gateway(ALG)

FTP ALG:Enable Disable

TFTP ALG:Enable Disable

 

Should I enable or disable the vPN stuff?

 

EEEEEEEWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW!!

 

TP-Link ...

 

Anyhow, you want to enable PPTP passthrough but that is usually for internal clients opening channels out and may not help with inbound channels. Also check to see if it can run a different firmware like OpenWRT which features a full and predictable network routing stack.

 

Check in the pinhole/virtual host/firewall config to see if there is a preconfigured one for PPTP which should include the nessisary GRE passthrough commands and point it at the server if it is not already then make sure that the router has been rebooted and no-one else is using PPTP through it as it may foul the channels.

Edited October 23, 2012 by SYNACK

[RabbieBurns]

is tplink not a good brand? The VPN Passthrough option is enabled and the port forwarding I used was using the existing pptp entry. Still no dice

[SYNACK]

is tplink not a good brand? The VPN Passthrough option is enabled and the port forwarding I used was using the existing pptp entry. Still no dice

 

It is highly variable as a brand and they make some really shocking stuff in some of their lines, I have wasted several days of my life cleaning up after their hardware.

 

Anyway, Have you tried setting up the test Windows 7 VM as a PPTP endpoint

Setup a VPN – PPTP Host On Your Home Windows 7 PC [How-To] | groovyPost

 

then pipeing the traffic from the router to that instead, that should isolate out the server as being the cause. It that does not work then I'd look are rebooting then replacing that router with something different. DrayTek - search at PriceSpy is generally a decent brand that can handle multiple traffic streams.

 

Some providers have also been known to block inbound and even outbound PPTP unless you are on their Uber business plans (Vodafone NZ) so that's another reason to double check with a different VPN host just to make sure.

[RabbieBurns]

I dont think its my provider as the connections work in and out just not at the same time (and were working previously)

 

Ive just bought this TP Link, cant really afford to replace it again just yet might see if I can get my hands on a different one to test with though. The one I replaced was a TP Link though as well which is strange.

 

I will try using win7 as an endpoint, cheers for that.

 

This is the current router info if its any use:

 

Firmware version:0.6.0 0.11 v0005.0 Build 120802 Rel.68426n

Hardware version:TD-W8968 v1 00000000

 

Edit: Seems im not on the current firmware, ill try updating that and see if it makes a difference:

 

http://www.tp-link.com/en/support/download/?model=TD-W8968&version=V1

Edited October 24, 2012 by RabbieBurns

[SYNACK]

I dont think its my provider as the connections work in and out just not at the same time (and were working previously)

 

Ive just bought this TP Link, cant really afford to replace it again just yet might see if I can get my hands on a different one to test with though. The one I replaced was a TP Link though as well which is strange.

 

I will try using win7 as an endpoint, cheers for that.

 

This is the current router info if its any use:

 

Firmware version:0.6.0 0.11 v0005.0 Build 120802 Rel.68426n

Hardware version:TD-W8968 v1 00000000

 

Edit: Seems im not on the current firmware, ill try updating that and see if it makes a difference:

 

TD-W8968 - Welcome to TP-LINK

 

Yea, give the router a firmware update and see if that helps, if not and you can prove it is the router take it back and get it swapped for a different one as 'not fit for purpose'.

[RabbieBurns]

firmwar update has killed my sync. 15mb down to 6 and 1mb up is now 300k

 

this is going on ebay!

[SYNACK]

firmwar update has killed my sync. 15mb down to 6 and 1mb up is now 300k

 

this is going on ebay!

 

Sorry to hear that, at least you know what the issue is though, be thankful you only had one of their bits of junk to deal with rather than the 10 WAP nightmare that I walked into which killed the whole network at least once a week.

[RabbieBurns]

ok turns out it was the cable between the wall and the modem that caused the bad sync. replaced that and back to 16mb

 

anyway still cant get this bloody thing working so Im going to try smoothwall express at each end. Will that do a p2p vpn with routing between each side ?

[SYNACK]

ok turns out it was the cable between the wall and the modem that caused the bad sync. replaced that and back to 16mb

 

anyway still cant get this bloody thing working so Im going to try smoothwall express at each end. Will that do a p2p vpn with routing between each side ?

 

Looks like it will do site to site: Feature Comparison Chart

[RabbieBurns]

couldnt figure out smoothwall.,. all the rainbow of interfaces confused me.

 

anyway i rebuilt a new VM of 2008r2 at either end and started from scratch, and it immediately just worked... bizarre