NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
BretD
Oct 24, 2019Administrator
BR500 VPN Currently Experiencing Intermittent Connectivity Issues - Reply Thread
Update Oct 30, 2019
Dear NETGEAR BR500 customers,
Over the past two weeks we have experienced extreme instability with our VPN cloud ecosystem. We believe it is due to the scale of custo...
MrJoshW
Mar 25, 2020NETGEAR Employee Retired
The IPSEC VPN would not be impacted by the Insight VPN outage that is on going and may be an issue with the rules that are setup. Verify if the rules are correct on both points and make sure the rules match. From the BR500 side, you can view the VPN connection logs to see if the connection was successful or where along the connection process the issue is happening at:
IPADDRESSOFDEVICE.COM/cgi-bin/vpnlog.cgi
As for issues with the Insight VPN, Insight team is aware of this issue and they are addressing this issue as we speak. This does not impact all the proxy nodes, and if you are experiencing issues. You can attempt to connect to another node by going to:
IPADDRESSOFDEVICE.COM/support.html
Once you have changed the proxy node, you can verify if the connection is successful by watching the VPN logs under:
IPADDRESSOFDEVICE.COM/cgi-bin/vpnlog.cgi
NathenB
Mar 25, 2020Apprentice
On the BR500 that I am working on there are no proxies shown. I do still have an active case, and have Secure Diagnostic Mode enabled.
- eremoMar 25, 2020Guide
Same here. When I go to IPADDRESSOFDEVICE.COM/support.html, there are no proxy choices. All I see are a checkbox for "Secure Diagnostic Mode" and boxes to enter a Port and a Comment.
- eremoMar 25, 2020Guide
I don't think the IPSec VPN not working is a problem with the rules, because it worked before with the same rules.
- tetrawestMar 25, 2020Apprentice
I also have no proxies when I pull up the (router IP)/support.htlm page
We cannot be the only ones with problems. This has been going on since October. 6-7 weeks of downtime since the beginning of October, 2019.
- tetrawestMar 25, 2020Apprentice
eremo wrote:I don't think the IPSec VPN not working is a problem with the rules, because it worked before with the same rules.
The discussion I had with support, the IPSEC VPN will not work with an active Insight VPN. We tried to delete the Insight VPN, but what ever problem is going on, we cannot delete the Insight VPN group!
- eremoMar 25, 2020Guide
tetrawest wrote:
eremo wrote:I don't think the IPSec VPN not working is a problem with the rules, because it worked before with the same rules.
The discussion I had with support, the IPSEC VPN will not work with an active Insight VPN. We tried to delete the Insight VPN, but what ever problem is going on, we cannot delete the Insight VPN group!
Today I can't delete the Insight VPN group either. The other day when I could delete the Insight VPN group, the IPSecVPN also didn't work, using the same rules that used to work.
- tetrawestMar 26, 2020Apprentice
I am back on
The insight system was somewhat back. It looked like it was trying to connect, but it wouldn't connect.
I systematically went through and deleted the Users in the VPN group, then the devices. Once all of these were deleted, I deleted the VPN group.
I recreated the VPN group (same name). Then I added the devices back into the LAN group. Insight VPN is up.
For how long? I don't know.
- tetrawestMar 26, 2020Apprentice
Well, that was fast. Already off-line.
- tetrawestMar 26, 2020Apprentice
At 250/hr, Professional Engineer, I'm going to guess I've spent $25K-50K in time messing with these things.
This morning, I deleted the VPN again. I then tried an IPSEC VPN. I was finally able to get the IPSEC to connect, but I'm still stuck with no actual access. BTW - to get them to connectec, after deleting the Insight VPN, requires rebooting the routers.
Disabled the IPSEC conection at both ends, and rebooted.
Created a new Insight VPN group with a NEW name, different. Then added my routers back in. And we are working as of 8:40 AM US CDT.
Again, for how long...I'll post again if it goes down.
NETGEAR: Question: If deleting the VPN Group & then making a new VPN group works, I would think this could mean that the data in the VPN group on the Insight server is becoming corrupted. Might want to check that area.
- NathenBMar 26, 2020Apprentice
I have done the breakdown and rebuild of the VPN in the past. I typically try that as a last resort now. It seems that if the clients are not connecting at all, all I typically do is to reboot the BR500 and see if it shows the bounce on Insight. If it does, then I know the BR500 is connected to Insight, then I test the clients again, if they connect, I test the tunnel, the problem is that we do not know how long the tunnel will stay up. If that does not work, I have found that there is usually an issue on the backend.
This last issue, I have found a few things odd, the VPN clients are showing connected, and will even show the remote subnet, but there is no traffic crossing, to add to that when I connect to the device on site I see a message about the device not being able to connect to the Insight service. This makes me wonder if the subnet info is cached somewhere on Netgears servers, or if there is a routing/capacity issue.
The other item is that the proxy options seem to disappear. I lost connectivity last night and was able to login and then repoint to another proxy, after that I logged the clients off and back in again and they were back up.
This is super frustrating, not only for me, but also for my clients, which will not be shutting down during everything that is going on.
- tetrawestMar 26, 2020Apprentice
I delted and then rebuilt the group and I'm back up. The VPN is working. The VPN light on the router is lit.
This is the router webpage. VPN light not lit AND it reports it cannot Access the Insight VPN
- eremoMar 26, 2020Guide
I have OpenVPN working for a client computer connection. It doesn't give me a two-way tunnel, but it gives me part of what I need.
Netgear, please don't try to improve the OpenVPN option for the BR500, because it works as it is now.
- tetrawestMar 31, 2020Apprentice
Are you kidding me???
Down AGAIN?
This INSIGHT VPN has an uptime of about 77%. Period.
- tetrawestMar 31, 2020Apprentice
Reboot - Reboot - Reboot
Rebooted twice last night to restore the Insight VPN. By 2AM local, the VPN was down again. 545 REBOOT and it is restored.
Now I have to go manually trigger all of the "automatic" backups that were supposed to run overnight.
BretD - Where is our daily update?
NETGEAR - When will you FIX THESE THINGS?
- eremoApr 02, 2020Guide
Netgear -
Please explain why the Insight VPN keeps failing, and what you are doing to stop it from regularly failing. Thank you.
- MrJoshWApr 02, 2020NETGEAR Employee Retired
Hello,
Spoke to engineering and they were able to determine the root cause of the VPN issue. They have been rolling out a schedule to reduce the need to bring down the servers for maintenance as well as configuration changes on the server. This will be noticeable over the next few days as more of the proxy nodes will be updated with the changes.
- tetrawestApr 06, 2020Apprentice
We have been putting up with the for 6 months. What was the problem and the fix?
Also, the Insight VPN is not "Fully Fixed", or at least the firmware still has issues.
My Insight VPN is up. I can use the Insight App and the Insight Webpage to look at the VPN service. If I log into the Router, it says the VPN is not avaiable and there is no VPN group. It is connected and working, yet the Router reports it doesn't exist. I'll post picture later.
- Retired_MemberApr 06, 2020After dealing with the VPN issues for over a year we have been forced to go to other firewalls. These BR500s have potential but we cannot have constant downtime with the tunnels between offices. The generic answers of reboot firewall or manually connect and change the VPN proxy is not a solution - it works maybe 1 out of 10 attempts.
We wasted so much $ on these devices between constant downtime for our branch offices, remote users, cost of devices, subscription costs, and IT time in babysitting these. These devices and the Insight VPN solutions are not ready for production use - Beta at best.
Best of luck to everyone with these going forward. - tetrawestApr 06, 2020Apprentice
Router Insight VPN pageLocal application
- INICKApr 12, 2020Aspirant
and again the vpn client is down. site to site works but my customers can't connect to the network via vpn client.
- tetrawestApr 13, 2020Apprentice
The VPN connection went down AGAIN overnight. Yes, rebooting "fixed" it. But this is CRAZY. Constantly rebooting these devices so they will communicate is ridiculous.
- Francis78Apr 14, 2020Tutor
Hi,
BR500 is down again and again.
Today, Secure Diagnostic Mode is down too.
I can not choose a server in the list, so i can't connect by myself...
Technical support is out of order because CORONAVIRUS.
I'm in France and I have 3 BR500 => users can't work...
BR500 is a bad product since the beginning
Bred D: VPN servers are NOT opérationnal and it is NOT normal.
- INICKApr 14, 2020Aspirant
here again everything down again. nothing goes. again. although, you have to count when you can. it's easier. i doubt netgear will be able to do it. maybe after the crisis. only then the subscribers are gone.
- MrJoshWApr 15, 2020NETGEAR Employee Retired
Francis78,
Thanks for the update. In regards to SDM not generating a port number. I am discussing this with engineering, do you have a support case already opened regarding this issue or the VPN issues?
- tetrawestApr 15, 2020Apprentice
The BR500s went down again overnight, preventing some of our backup systems from operating. This is generally when we notice the overnight VPN shutdown.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!