Orbi RBR50 blocking outbound PPTP

[parker7120]

I have an Orbi RBR50 and two RBS50's all running the latest V2.7.4.24 and outbound PPTP sessions are being blocked. This did not happen with earlier releases (not sure when it stopped working as i don't use PPTP so much).

I have not setup any site or service blocking.

When I use my Android phone with 5G as a hotspot, PPTP works fine, so I know that the problem must be in the Orbi. And I can see that my PPTP credentials are being validated OK, indicating that TCP 1723 is OK, so I suspect that the Orbi is not handling the GRE packets correctly - either blocking them out or in (or both).

[parker7120 · Accepted solution]

Thanks for the info. 

I have now upgraded to 2.7.5.4 and it is working fine.

I have done some more testing using a different router (MikroTik) and it has the same issue - so I have now contacted my "fiber" ISP (Waoo) as I am now sure that the problem is there - probably something to do with "VPN Passthrough". Fortunately PPTP works fine with my "mobile (5G)" ISP (Oister). FYI the PPTP connection was to a commercial site (SmartDNSProxy.com).

Again, thanks for your help

[CrimpOn]

Netgear released new firmware for the RBR50 in Feb, 2023, but has not set the Firmware Update process to detect and install it.  Customers can install it manually (satellites first, router last) if they want to.

https://kb.netgear.com/000065539/RBR50-RBS50-Firmware-Version-2-7-5-4 

https://kb.netgear.com/31573/How-do-I-manually-upgrade-firmware-on-my-Orbi-router-using-orbilogin-co... 

Orbi routers do not block outbound connections, as evidenced by the VPN software log showing the credentials have been validated.  Can the software be set to provide more detail in the log file?

Is this a commercial VPN or a corporate site?

[CrimpOn]

This article talks about forwarding Port 47.  This is still active, correct?

https://www.vpnbook.com/howto/setup-pptp-vpn-on-windows11 

[parker7120 · Accepted solution]

Thanks for the info. 

I have now upgraded to 2.7.5.4 and it is working fine.

I have done some more testing using a different router (MikroTik) and it has the same issue - so I have now contacted my "fiber" ISP (Waoo) as I am now sure that the problem is there - probably something to do with "VPN Passthrough". Fortunately PPTP works fine with my "mobile (5G)" ISP (Oister). FYI the PPTP connection was to a commercial site (SmartDNSProxy.com).

Again, thanks for your help

[FURRYe38]

Glad you got it working. Please mark your thread as solved so others will know. Be sure to save off a back up configuration to file for safe keeping. Saves time if a reset is needed.
https://kb.netgear.com/000062080/How-do-I-back-up-the-configuration-settings-on-my-Orbi-WiFi-System
Enjoy. 📡

[parker7120]

Great tip - have taken a backup

[FURRYe38]

👍

[CrimpOn]

The router is "working fine" on new firmware, but the PPTP connection still fails, correct?

So, all eight steps of that "how to set up PPTP" worked correctly?

(and the ports show as forwarded?)

Another way to verify the ISP might be to connect to one of the other free PPTP hosts.

I did not see mention of what device is running the PPTP VPN Client?

[parker7120]

Yes, the router is "working fine" but the PPTP connection fails.

The 8 steps in "how to set up PPTP" look good but the "step 0" concerning "port forwarding" is not possible on the netgear orbi.

I was testing setting up the PPTP Client on a Lenovo PC running Windows 11, as well as on a MikroTik hAP ax3 wireless router running RouterOS 7.15.3.

I have contacted my ISP and I suspect that they will require me to use a router that supports "VPN Passthrough"

[CrimpOn]

Port Forwarding is on the Orbi web interface Advanced tab, under the Advanced Settings menu (bottom item)

[CrimpOn]

[parker7120]

I tried on the Orbi setting up "Port Forwarding" for "Service Name" PPTP to my Windows PC (which has the PPTP Client) but the connection still fails.

According to "Step 0" in the "how to set up PPTP" the "Protocol" should be "GRE" - but the Orbi only shows "Service Name" and not "Protocol" - see the attached screen shot.

[CrimpOn]

Add a Custom Service:

[parker7120]

I tried - both with ports 43 (as you showed) and 47 (which is GRE protocol), but the PPTP connection still does not work - which is almost what I expected as GRE is a protocol (like both TCP and UDP) and not a port. But thanks anyway.

Subsequently I have heard from my ISP - they have me currently on CGNAT IP (Carrier-Grade NAT), but I have now requested that they move me to a Public "Type 2" IP which I hope will resolve my problem.

[parker7120]

Just to let you know that after my ISP hs moved me to a Public "Type 2" address, my PPTP problems have vanished.