XR1000 Latest Firmware VPN users unable to connect

Question

Hello World,&nbsp;I have a strange issue. I have a firewall that users connect to via VPN and I have a XR1000 connected to a port off the firewall with the XR1000 in AP mode. I have several RFC1918 networks and all can access the resources behind the XR1000 except if they are connected remotely. All the firewall rules are in place and allowing this data flow.&nbsp;&nbsp;Here comes the weird part. So I have an older router a Nighthawk X4S r7800 NOT running DumaOS. I swapped out the XR1000 with the&nbsp;Nighthawk X4S r7800 same configuration in AP mode and the VPN users can access the resources again with no issues.&nbsp;&nbsp;Is there something unique that I have to configure on the XR1000 to get it to allow the same dataflow as the&nbsp;Nighthawk X4S r7800?&nbsp;&nbsp;Thank You For All Responses

Netduma-Fraser · Answer

In AP mode DumaOS is disabled so may be best to compare the settings you have on the R7800 and see what is different on the 1000 and go from there

bobbydigital00 · Answer

Thank You For Your Response.&nbsp;I checked all the settings. They are basically the same. Once you put the router in AP mode not a lot of options are present.&nbsp;Are certain routing protocols disabled when DumaOS is disabled or does it just become a layer 3 device at that point. The only difference with one working and one not working is the OS that is running on the routers.&nbsp;&nbsp;

Netduma-Fraser · Answer

Yeah they basically run the same as far as I know, maybe FURRYe38 has a suggestion?

FURRYe38 · Answer

How are the R7800 an XR1000 configured for AP mode? Auto DHCP or Static IP addressed on each router?&nbsp;
&nbsp;
Ya, AP mode, would just be working to just pass through data traffic too and from. All normal router features and functions are disabled awhile in AP mode sans Wifi configurations. Should not be blocking anything.&nbsp;
&nbsp;
Does the VPN or firewall device show logs for when this happens when the XR router is connected?&nbsp;
What is the brand and model# of this firewall?&nbsp;
What is the Mfr and model# of the Internet Service Providers modem/ONT the firewall is connected too?
&nbsp;

bobbydigital00 · Answer

Firewall is Sophos XG firmware&nbsp;19.5.3 MR-3-Build652XR1000 is in AP mode Static configuration.The firewall logs show the traffic being ALLOWED.&nbsp;Internet gateway is Uverse 1G Fiber Modem BGW210.&nbsp;What is really tripping me out is that all other routers I connect that aren't running DumaOS they work. For example I took an older router that I have and put DD-WRT on it and it worked as well.&nbsp;It's almost like the XR1000 router doesn't know what to do with the new network traffic when users are advertised behind the VPN network. I can see it ARP'ing and I even added a static route. Still no good.&nbsp;I'm open to any and all suggestions.&nbsp;

Forum Discussion

XR1000 Latest Firmware VPN users unable to connect

10 Replies