Solved

Internet Problem

Posted on 2013-01-08
6
361 Views
Last Modified: 2013-01-16
I am setting up a remote connections from a few branch offices to a main office.  I have a WatchGuard router at the main office and am using the Mobile VPN with SSL to connect the individual computers to the main office.  

One location on has one computer and doesn't have any problems connecting and staying connected.  

The other location however is driving me nuts trying to pin point the problem.  When we started the some computers could connect and some couldn't and then the ones that could couldn't and the ones that couldn't could.  After troubleshooting it seems to be that after connecting 5 or 6 computer not more would connect (they were not even hitting the remote device), but if we disconnected one then another could connect.

I eliminated the possibility of only a certain number of computers could connect from one location by connecting 9 from the location that is not having any problems.  I verified that we had a 50 user license and it was working with WatchGuard support and upgraded to the latest firmware.  

I notice that internet speed at this location was less than a 1MB upload and download.  So we waited until an internet speed upgrade to 3.0MB, but this had not effect.

We are only using a 5250 telnet connection to the main server, so I opened ports on the router to allow a connection outside of the VPN and still have the same problem.

Where to look now?  Could it be something with there ISP, which is TW Telecom.  Could it be the Belkin router they have behind the DSL modem?

I do know I could try getting another appliance and make a BOVPN with one tunnel.

TIA
0
Comment
Question by:DCS12
6 Comments
 
LVL 10

Expert Comment

by:akhalighi
ID: 38755489
what do you see in the log files ? what phase of VPN fails ? what's the error message ?
0
 
LVL 14

Expert Comment

by:setasoujiro
ID: 38755494
I think the problem would be indeed at the problem site, might be the belkin or another device there.
0
 
LVL 10

Expert Comment

by:akhalighi
ID: 38755500
check log files in all check pints  start from VPN client > branch router > main router. you should see a message somewhere. a reason for a failure .

If you don;t see it , increase level of logging to debug or something .
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:DCS12
ID: 38755652
@ akhalighi: I have already done this with the assistance of WatchGuard also.  The only log entry when it is raised to debug level is that is is downloading the configuration and then it times out.  Sometimes the client doesn't even hit the main router.  Plus I am having the same issue when I don't use the VPN and do a straight telnet.

@ setasoujiro: This is what I am thinking, but want to get other opinions.
0
 
LVL 14

Expert Comment

by:setasoujiro
ID: 38755668
Could you try and replace the router with another device and see what happens?
0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 38755849
All routers (at client site) have limits as to the number of VPN pass-through connections they will allow, from 0-9.  If you have multiples users connecting by VPN from the same site you really should have a site to site VPN configured With a VPN hardware based router at each site.
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Allow IP range in sonicwall 1 25
Unmanaged Switches for Optimized Network Speeds 7 50
Best adsl router for small MS network 6 40
RRAS computer has too many IP addresses 24 20
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question