Which consumer-type DSL modem/routers pass inbound VPN?

My setup is a Mac OS X 10.5.7 Server behind a DSL modem/router with a fixed IP address. Until recently, I had a working inbound VPN setup (PPTP), where the modem passed VPN on to the server. I had this with various brands of modem/routers over the years.
Now, my provider shipped me a new modem/router because the old one broke. I received a Linksys WAG54G2. And my inbound VPN stopped working. It turns out Cisco has explicitly crippled its consumer modem/routers not to be able to pass on VPN to the inside. I can pass TCP and UDP ports on, but not the GRE protocol (IP 47 if I recall correctly).
So, now I am looking for a decent DSL-modem/router that allows me to setup inbound VPN to my OS X Server again but is also decent in the firewall & NAT area.

Hello Leif,
Thanks for replying. Note: I already have a VPN connection (PPTP, though with problems which I am now trying to debug)
In answer to your questions:
- I run the latest firmware on the linksys already
- The firewall in the linksys gateway is not configurable, it is either on or off
- The server is behind the linksys
- When the client is on the LAN (where the server also is), I get a perfect PPTP VPN
- When the client is on the internet somewhere (I am setting up an outside-in VPN):
- PPTP works, but in the one location I tested it dies every time after 2 min 30 sec. The server log says "client hung up".
- I cannot get L2TP to work, not even on the LAN, not even with all firewalls turned off. The client ppp.log says:
Thu Jul 23 15:48:19 2009 : IPSec connection started
Thu Jul 23 15:48:19 2009 : IPSec phase 1 client started
Thu Jul 23 15:48:19 2009 : IPSec phase 1 server replied
Thu Jul 23 15:48:19 2009 : IPSec phase 1 established
Thu Jul 23 15:48:20 2009 : IPSec phase 2 started
Thu Jul 23 15:48:20 2009 : IPSec phase 2 established
Thu Jul 23 15:48:20 2009 : IPSec connection established
Thu Jul 23 15:48:20 2009 : L2TP sent SCCRQ
Thu Jul 23 15:48:40 2009 : L2TP cannot connect to the server
The server log says:
2009-07-23 15:48:35 CEST Incoming call... Address given to client = 192.168.2.15
Thu Jul 23 15:48:35 2009 : Directory Services Authentication plugin initialized
Thu Jul 23 15:48:35 2009 : Directory Services Authorization plugin initialized
Thu Jul 23 15:48:35 2009 : L2TP incoming call in progress from '192.168.2.88'...
Thu Jul 23 15:48:35 2009 : L2TP received SCCRQ
Thu Jul 23 15:48:35 2009 : L2TP sent SCCRP
2009-07-23 15:48:55 CEST --> Client with address = 192.168.2.15 has hungup
Windows is not involved in any way, it is all Mac OS X.

Similar Messages

  • Cannot access DSL modem in bridge mode w/ Airport Extreme

    Hi
    I have the following setup:
    DSL Modem: Used in bridge mode + NAT/DHCP/Firewall turned off. Static IP is set to 192.168.2.1
    Airport Extreme: In PPPOE mode with Shared IP (which is selected by default): Distributes IP range 192.168.1.X with subnet 255.255.255.0. At this point, Airport Extreme's IP address is what it gets from the ISP, basically DSL Modem is passing thru' this to the AE.
    Ethernet cable is running from DSL modem to AE's WAN.
    In this mode, everything works fine and me and all others can use Internet fine...
    But the problem is that I can't ping/ access DSL modem at all in this mode. Basically, I need to login to the DSL modem to monitor my DSL connection quality (SNR, Attenuation, etc.) but whatever I tried I could not figure out how.
    Basically, I tried setting a static IP on the DSL modem as 192.168.1.3, this did not work. I read somewhere that it needs to be on a different subnet, so tried using 192.168.2.1, that did not work either.
    If I connect the DSL modem to a machine directly and set that machine's IP to 192.168.2.10, it can connect to the DSL modem, but there is no way I could access this DSL modem from the setup I explained above.
    I am simply out of solutions at this point and any idea would be appreciated.
    Thanks a ton!

    What you are asking about is generally possible but probably not with an Airport Extreme. As others have noted you SHOULD be able to access a DSL modem in bridge mode via it's "lan" IP address if you directly attach a cable to it and configure your computer with appropriate static IP settings (I'm assuming that in bridge mode the DSL modem has it's DHCP server disabled).
    This approach can also be achieve through a router with sufficiently flexible configuration options (e.g. openwrt open-source firmware). Basically the router attaches its WAN port to the modem like usual. Then the router is configured to do PPPOE via the WAN port while SIMULTANEOUSLY assigning the WAN port a static IP address that can connect to the modem's LAN address. Finally the router firewall must be configured to pass traffic from the DSL modem LAN IP back to the network.
    So your intuition suggesting that this should be possible is absolutely right. However; you can probably also see from the steps required why most modems simply (incorrectly) document that it isn't possible.
    Here's a link with some gory details on achieving this with an openwrt-based router: https://forum.openwrt.org/viewtopic.php?id=10952

  • I had a failure of a dsl modem which inturn destroyed my ethernet port of non isight imac G5.  In attempt to solve the problem I did a clean install of leopard 10.5.4. I am unable to upate to 10.6,.7  or .8 without freezing system network preferences

    Dsl modem failure caused malfunction of ethernet port.  In attempt to solve problem I did a clean instillation of  Leopard 10.5.4 and then update to 10.5.5 with access to internet through apple usb to ethernet adapter.  If I attempt to update software to 10.5.6, .7 or .8 it freezes my network system preferences and computer will no longer shut down.  The network connection assistant also no longer sees a connection to the internet throught the usb/ethernet adapter.  I have checked they systerm Tech tool deluxe which shows no problems and also used hard drive utility on instillation disk which found no problems.  Permissions were also checked as well and no problems noted.  Any thoughts as I really like my imac G5.

    Could be many things, we should start with this...
    "Try Disk Utility
    1. Insert the Mac OS X Install disc, then restart the computer while holding the C key.
    2. When your computer finishes starting up from the disc, choose Disk Utility from the Installer menu at top of the screen. (In Mac OS X 10.4 or later, you must select your language first.)
    *Important: Do not click Continue in the first screen of the Installer. If you do, you must restart from the disc again to access Disk Utility.*
    3. Click the First Aid tab.
    4. Select your Mac OS X volume.
    5. Click Repair Disk, (not Repair Permissions). Disk Utility checks and repairs the disk."
    http://docs.info.apple.com/article.html?artnum=106214
    Then try a Safe Boot, (holding Shift key down at bootup), run Disk Utility in Applications>Utilities, then highlight your drive, click on Repair Permissions, reboot when it completes.
    (Safe boot may stay on the gray radian for a long time, let it go, it's trying to repair the Hard Drive.)
    If perchance you can't find your install Disc, at least try it from the Safe Boot part onward.
    If all the above fails, then it appears to be time for a relatively painless Archive & Install, which gives you a new/old OS, but can preserve all your files, pics, music, settings, etc., as long as you have plenty of free disk space and no Disk corruption, and is relatively quick & painless...
    http://docs.info.apple.com/article.html?artnum=107120
    Just be sure to select Preserve Users & Settings.

  • Which one shoud do DHCP; Airport Express or Wired DSL Modem?

    I have a wired DSL modem for my internet connection, and just purchased the Apple Airport Express to provide wireless to all 3 computers on the network (2 Mac, 1 PC). Which piece of hardware do I want to do the DHCP? I think right now it's set up on both, but I'm not sure. Any advise?

    DHCP server is responsible for allocating IP addresses to the computers on your private network. In order to avoid duplicating addresses, you can only setup one DHCP server per subnet. It makes sense to set up the DHCP on the router that's also running the NAT (Network Address Translation), this will ensure both functions are going to use the same private IP address range. It will also simplify IP address reservation, and port mapping.

  • How to detect which data type is passed in ?

    Hello!
     I've built a VI function. But I want to make it more secure - that function could detect which data type is wired to the inputs and allow wiring only certain data types. How can I do this?
     Thanks
    Message Edited by ACiDuser on 05-23-2009 08:13 PM
    Solved!
    Go to Solution.

    I'm assuming you're talking about numeric datatypes. In this case that information is not available to you at the subVI level. The LabVIEW compiler will have already changed the datatype to match what your subVI expects if someone wires something of a different type.
    You could use a variant as your input. Then in the subVI you can use the Variant to Flattened Data to get the type. The OpenG LabVIEW Data Tools VIs will be useful if returning an enum specifying the datatype. Specifically, using the "Get TDEnum From Data VI".
    Now that we've gotten that out of the way, let's talk about the why. Why do you need to do this? What are you trying to "secure"?

  • What's the best DSL modem to go with my EA6500 ?

    Hi All,
    I'm showing my ignorance around modems and routers here but here we go...
    I have an EA6500 which obviously has 4 Gigabit ethernet ports for my home network, but I need a DSL modem to get it working.
    What's the maximum speed current modems can supply from the Internet to my router, is there such a thing as a Gigabit capable DSL modem these days or am I dreaming ? Is it possible to even get Gigabit dowload speeds via DSL or would I have to go cable to achieve something like that ?
    My main concern is I don't want to buy a modem that will slow down or 'throttle' the capabilities of the new router I've just purchased or have I got the wrong idea ?
    Any suggestions on what type/brand/speed of modem I should consider most appreciated...
    thanks
    Tony

    Cisco does not have a plain DSL modem but they do have an ADSL gateway (modem/router) with model number: X3000. There is no such thing as a gigabit internet speed offered by an ISP (not that I’ve known of) but this gateway has a gigabit port which means that the modem is capable of supporting adapters with gigabit link/card speed. To know more about that gateway then check on the link below.
    Getting to know the Linksys X3000 Linksys X3000 product features and specifications

  • "Current Time" problem behind a NAT Configured DSL Modem

    I have a WRT54GS wireless router behind a NAT configured Alcatel Speedtouch Pro DSL modem.  I have noticed that the "Current Time:" is perpetually "Not Available".   I am speculating that it is because the NAT blocks the syncrhonization, but I'm not absolutely sure.  Can anyone confirm that this indeed could be the problem?
    If this is the case, is it possible to configure a NAT router to pass this signal?
    I would like to have the benefits of NAT, but I would also like to utilize the WRT54GS's policy feature to limit my kid's internet activity after hours.
    Thanks in advance!

    Alcatel makes a lot of SpeedTouch modems.  I cannot tell which one you have.  I assume it must be a "modem-router" rather than a true modem.
    What "Intenet connection type" are you using in the WRT54GS?  I assume it is probably DHCP or static.  Disconnect the WRT54GS and the Speedtough. Set the "Internet connection type" on the WRT54GS to "static", then set the (WAN) "Internet IP address" to an address that the SpeedTouch will see as a fixed LAN IP address, and set the "Default Gateway" to the LAN IP address of the SpeedTouch, and set the "Subnet Mask" to 255.255.255.0 , and set the "DNS server address" to your true Internet DNS server address  (you should be able to find this info in the SpeedTouch).  
    Hope this helps.
    Please let me know whether or not this worked.
    If you need more help, please state the exact model number of your modem (not the WRT54GS?

  • How do I connect the airport express base station to the DSL modem? Can it be done wirelessly?

    Can the airport express base station be wirelessly connected to the DCL modem?

    Alan1111 wrote:
    Can the airport express base station be wirelessly connected to the DCL modem?
    Alan,
         Please provide more information.  (Make/model of the modem and airport express, Mac OS version, etc.)
    Most likely your modem is the source of your internet connect and you sound like you are trying to extend your network through the airport express (which is a router).
    I don't know what a "DCL modem" is.   Perhaps you meant "DSL".
    Most internet modems are either a "Cable Modem" or a "DSL Modem".
    Time Warner (TMC) and Comcast typically provide cable modems, which use a coaxial (round) cable.
    "DSL Modems" are used with AT&T and they are connected to your telephone wires.
    Both of these types of modems usually includes a router built-in, some include a wireless router, too.
    Either way, I don't know of any way to connect an Airport base station to a router wirelessly.
    That would be called a "bridge" in networking terms and while it may be possible, it is not common.
    Most routers use a direct ethernet cable connection, because the data flows much faster than wirelessly.
    Normally, one connects to their airport base station with an ethernet cable from the primary home/office computer.
    It can be accessed wirelessly, but only if you enable that option in the Airport utility (not the default).
    Again, connecting or bridging one router to another router is not a common method.

  • Upgraded DSL Modem, Now Bonjour Doesn't Work

    I upgraded my Qwest DSL Modem from an ActionTec GT-701 to an ActionTec PK5000 and now my Quicksilver G4 is not available via Bonjour (I'm using it as a print server). I switched back to the old router, and it works again, so the problem def. is the new router. I tried to see if the known ports are blocked (http://support.apple.com/kb/ts1629), but they don't appear to be - I turned off UPnP (Universal Plug N Play) just to be sure it didn't conflict but no joy. Somebody else out there seems to have had similar problems (http://h30434.www3.hp.com/t5/Mac-printing-and-scanning/Beware-of-the-ActionTec-P K5000-for-wireless-printing-with-HP/td-p/267515) but I'm not sure if it's a direct match.
    I upgraded to make my VOIP smoother, due to the integrated Ethernet switch in the modem. But I'm moving back to the old modem for now, and using an external switch.
    Anybody have any feedback on how to configure the new DSL modem correctly so Bonjour will work? I did notice an error in the system log:
    "mDNSResponder: NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 192.168.0.1."
    Could that be the trouble? I did try to fix the DNS settings on the modem. Again, no success.

    Thanks for that.
    Probably has an Application Layer Gateway (ALG) for SIP (Session Initiation Protocol) which is something iChat uses, that can not be changed from pushing SIP data to port 5060.
    SIP is also used by SIP/VoIP phones which gets around Long Distance charges so many ISPs block it until you pay for the "Extra Service" which a few years ago was open anyway.
    There was an International agreement that all SIP apps and equipment would use port 5060-5063. It was supposed to be accessible on a pass-through basis from one Internet Server to another but ISPs seem to have classed end users as a non through connections.
    Thomson-Alcatel have had a SIP Binding as they call it since there models could run Version 3 firmware. (You had to telnet into the device to turn it off)
    At version 5 firmware they changed it so that it could only be partially turned Off.
    Thomson-Alcatel make devices branded for other people including the HOME HUB from BT (Formerly British Telecom) who own 99% of Landline connections in the UK (they Wholesale out both Land lines and Broadband DSL connections).
    Various ISPs that supply modems often have them supplied with Branded Firmware on there. It tends to be these Branded versions that cause problems (Although the Thomson-Alcatel issue is below the Web Browser interface level).
    This may give clues as to where to look and how your device maybe accessed (telnet).
    10:28 PM Monday; August 30, 2010
    Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

  • Macbook pro to DSL-Modem via Ethernet

    I need help getting on Interneet using Ethernet cable to the Speedstream-4200 DSL modem.
    Usually I use the Airport-Extreme which then goes ethernet to the Speedstream DSL Modem.
    However, I was trying to trace some major DSL slowdowns and want to try connecting directly to the DSL modem ... I tried various 'assistants', tried u things but never get the Macbook Pro to see the modem ... usually I can type the address of the modem in the url window and connect to it also ... and I can't via ethernet.
    I have set the PPPoe data the same as I see it in the Airport setup
    username and password ... what else?

    Since you have switched the device connected to the DSL modem, you need to perform a power recycle so that the modem "forgets" the old one...and don't forget to do the same when reconnecting the modem to the AEBS.
    Modem/Router Power ReCycling
    - Power-off the DSL/Cable modem, Internet Router, & computer(s). (Wait at least 30 minutes. If possible, leave the modem off overnight.)
    - Power-on the DSL/Cable modem; Wait at least 30 minutes.
    - Power-on the Internet Router; Wait at least 5 minutes.
    - Power-on the computer(s)

  • Connecting Timemachine to Verizon DSL modem/wirelss router

    How can I successfully connect my Timemachine to a Verizon GT704WG DSL modem/wireless router? Set-up I tried: The DSL line (reg. phone wire) is connected to the Verizon device. I connected the Timemachine to the router via ethernet. On my Verizon Network (loggin in via the browser) I can see the device connected. But the Timemachine keeps blinking Orange (error I assume). I cannot see the device via my MacBook pro in AirPort Utility (when trying to open TimeMachine). I also cannot click on manual set-up (option not available - grayed out).
    Question: Is it possible to connect Apple's Timemachine to another DSL wireless router via ethernet. Are there setting I must use to make the timemachine available, since the DSL router recognizes the device. How does one set this networking configureation up - or are there other devices I need as an intermitted relay - and will thise hamper troughput?
    PS: My DSL router does not have a firewall set-up for the connection to the Timemachine. I allowed all rules for the device. DHCP is dynamic.
    Any advice is much appreciated.

    Thank you Neturonboy for asking this question and thank you Tesserax for answering it. It's amazing that Verion's site has nothing about this; they do mention the Time Capsule, but nothing about this typical configuration. I have the GT784WNV model DSL modem/router, which is probably similar to yours. As soon as I turned Connection Sharring Off (Bridge Bode) and updated changes it worked.
    However, I couldn't find where to do this at first using Mac OS X Lion. Luckily, I had an older laptop, which had the more familiar looking AirPort Utility version 5.4.2 you're talking about. After I had switched to Bridge Mode, I went back to Lion's version and could easily see where this setting is located. In Lion's (10.7.4) AirPort Utility, click on the image of your Time Capsule (there is no "Manual Setup" button in Lion), then select Network (not Internet), then change Router Mode (not Connection Sharing): to Off (Bridge Mode).
    About Guest Networks:
    Note, if you have a Guest Network, then once you go to Bridge Mode, this feature is turned off; the whole Guest Network tab disappears from the choices under Airport (using the older AirPort Utility). Since these Verizon modem/routers are also wireless, your guests can access the network directly from  Verizon's router instead of going through your Time Capsule. Perhaps having a wireless router feature for your DSL modem makes the Time Capsule's Guest Network option redundant. You can get the network name, and other security information from the label on Verizon's router, but there is also a WPS (Wi-Fi Protected Setup) feature that looks like it might be useful for sharing your network. There's a physical button on the modem and there's a settings page on the routers' web browser accessible settings at 192.168.1.1.. I'm still looking into this.
    Good luck!

  • WAN Port disconnecting Ethernet between Gigaset 4300 DSL modem

    I have a WRT400N setup as a wireless/wired router on a Windstream DSL modem.  The Ethernet light on the Modem keeps going out and it log's a disconnect.  At the same time, the internet connection light on the WRT400N goes out.  I disconnect the router from the network and connected the Windstream Gigaset 4300 Modem/Gateway directly to my PC.  No more problems.  Any idea on what setting would be making the WAN port ethernet connection act like a RTS/CTS lead in the old RS232 interface?
    Steve

    The issue is between the DSL modem's ethernet port and the WRT400N's WAN port.  The light's on both the router's Internet connection and the modem's Ethernet port goes out, like the cable is being unpluged.  I have replaced the cable, so it's not that.  Naturally, all devices, both wired and wireless cease internet connectivity when this connection is open.  I have connected the DSL modem/gateway directly (via the same ethernet port) to two different computers and never lose this connection, which makes me think that the WRT400N is opening (disconnecting) the internet port at different intervals for some reason.  It happens both wireless connections and wired connections are using the internet.  As I type this, my PS3 (wireless G) is downloading a 1.4 gig demo and about every 30 sec. the ethernet light on the modem goes out, at the same time the internet light on the router goes out also.  It varies in time, some time as little as 10 sec. between disconnects, sometime it will stay connected for over 2 min.  It's a closed network with 3 wired connections (2 computers and Dish VIP922 DVR), several wireless connections (1 Computer via N adapter, Wii wireless G, PS3 Wireless G, Ipod touch Wireless G, 2 cell phones wireless G).  No QoS or port forwarding is in use.

  • BTMM - DSL modem or router issue?

    Having read many and sundry posts and support articles about BTMM, I am to the point of wondering what will work.
    Posts and support articles say the routers must support UPnP or NAT-PMP and the "Third-party router devices that work with Back to My Mac" list, which seems to be getting smaller rather than larger, list routers and only mentions modem in one footnote.
    So does the router or DSL modem need to support UPnP or NAT-PMP?
    Are any of the routers mentioned on the list also DSL modems?
    Dose anyone have a DSL Router/Modem that is working?
    Thanks

    Greetings,
    I use BTMM all the time with Airport Extreme Base Stations and a couple of different model Netgear devices at other locations, so it's AEBS to AEBS, AEBS to Netgear, and Netgear to AEBS - I also use it to connect to and from Aruba and Cisco equipment.
    I use the UPnP and NAT-PMP built in services for the most part, but in the corporate stuff, I had to create a rule and map it out on the Corporate Checkpoint Firewall and on the Cisco Corporate Routers.
    I like the little home/small business routers, as UPnP and NAT-PMP make as easy as it could ever be.
    Good Luck - Cheers,
    M.

  • What type of modem do i need for time capsule. I can't get it to pick up the net

    what type of modem do i need for time capsule. I can't get it to pick up the net

    Simply bridge the TC..
    With DSL you need to either bridge the modem and use PPPoE client which can be difficult to setup.. especially as some modems do not bridge readily..
    Or bridge the TC which is simple.. go to the airport utility and select internet page, on v5 utility or network page on v6 utility and select off-bridged mode for the mode of connection.

  • Safest settings to connect airport extreme A1354 to DSL modem

    I want to connect my DSL modem  (Motorolla 3347) to my Airport extreme (A1354) which will be used as a base for connecting multiple wireless devices.
    I would preferr not to bridge the airport. What are the safest settings to select on the airport for wifi security and most function using airplay?
    Thanks.

    I would preferr not to bridge the airport.
    In that case, you would need to check to see if the Motorola modem/router can possibly be configured to act as a simple bridge mode modem. If it can, then the AirPort can be configured to act as the main router for the network handling DHCP and NAT services.
    Next check with your ISP to make sure that they will support you for this type of configuration.
    IF....the modem can be configured to operate as a simple bridge...and IF....your ISP will support this type of setup, then the AirPort Extreme needs be configured to Connect Using = PPPoE.
    The safest settings for Wi-Fi are WPA2 Personal, also known as WPA2-PSK-AES with a long password comprised of random letters and numbers.
    AirPlay does not care what type of connection that you have as long as the signal is strong enough.

Maybe you are looking for