SRXN3205 No internet for any clients

[H3llGhost]

Hello,

I am facing the problem, that my clients losing the internet access after a short time.
The WAN Status is always connected and I can lookup all domains, but I don't get any data to my clients f.e. ping doesn't work any longer, etc.

What can I do?

[H3llGhost]

Hmm ... Because there is no edit function, I have to write a double post, sorry. I have tested the SSL-VPN connection and found out, that the internet access is working fine from the connected client. :) In the same time I tested the internet access on the clients, but it doesn't work. It is curious.

[Daedalus01]

Since you mentioned SSL, can I assume from users connected via VPN, or users locally?

[H3llGhost]

Ähm ... In my first post I mean the local users. We tested the SSL-VPN functionality and found out that with connected SSL-VPN the internet works on the connected clients: Client -> Smartphone -> Internet (SSL-VPN tunnel) -> Router -> Internet

[Daedalus01]

And you've turned data plan off on the smartphone correct? I know that on mine, if the WIFI is down, it will revert to using the phones data plan.

[jmizoguchi]

H3llGhost wrote:
Hmm ... Because there is no edit function, I have to write a double post, sorry. I have tested the SSL-VPN connection and found out, that the internet access is working fine from the connected client. 🙂 In the same time I tested the internet access on the clients, but it doesn't work. It is curious.

SPLIT tunnel uses local internet (remote end)
FULL tunnel uses ALL the traffic including the internet goes via SSL VPN

[H3llGhost]

Yes I know (it stands in the manual 🙂 ), but it doesn't explain why clients (local), can't access the internet. The solution was to reset the router and know all works fine. PS: @jmizoguchi Thanks for your howto about using IPSec with the iPhone.

[jmizoguchi]

local ONLY for ipsec

[jmizoguchi]

Yes I know (it stands in the manual ), but it doesn't explain why clients (local), can't access the internet.
The solution was to reset the router and know all works fine.

you need to make sure DNS section in SSL-VPN setting is correctly entered

[jmizoguchi]

meaning as ROUTER SIDE setting for SSL-VPN settings

[H3llGhost]

SSL-VPN works fine. Local clients connected to the LAN ports and the WLAN, can't access the internet.

[H3llGhost]

Daedalus01 wrote:
And you've turned data plan off on the smartphone correct? I know that on mine, if the WIFI is down, it will revert to using the phones data plan.

WiFi is disabled, so the computer uses my data plan and connect over the internet with an external ip to my router. 🙂

[jmizoguchi]

for internet traffic behind the 3205 issues then try placing ISP DNS to one of the PC's network properties. and see

[H3llGhost]

I have tried it with disabling the DNS Proxy, which means that the ISP DNS is transferred with the DHCP lease, but it hadn't any effect. traceroute shows that the traffic stopped at the router.

[jmizoguchi]

all devices or just one out so many?

[H3llGhost]

A few devices was tested without success.

[jmizoguchi]

this is still with VDSL broadband?

[H3llGhost]

Yes with the VDSL broadband. 🙂

[jmizoguchi]

how are you setting with VDSL and SRXN..

VDSL require PPP login or not?

[H3llGhost]

VDSL doesn't require any authentication. The connection type is DHCP.

[jmizoguchi]

assuming the WAN if srxn have public IP (dynamic IP)?

[H3llGhost]

In general it is a dynamic public ip, but it changes only a few times in a year.

[jmizoguchi]

there should be no reason not work. did you properly power cycle both DSL modem and router in sequence by one by one.?

[H3llGhost]

Yes, I know the troubleshooting section in the manual. 😉
The only difference was the use of the 10er ip range.

[jmizoguchi]

The only difference was the use of the 10er ip range.

lost on this...