PDA

View Full Version : VPN and UPnP IGD


David Shorthouse
May 15th 03, 10:45 PM
Hey folks,

I have a Linksys BEFW11S4 and notice two issues.

1) Accepting incoming VPN connections breaks the UPnP IGD connection. Only
way to get it back is to delete the incoming VPN connection.
2) Using the NetBIOS name instead of the client IP in the IGD UPnP
configuration results in random UPnP port-forwarding assignments

Can anyone comment or assist with this?

Thanks,

Dave

David Shorthouse
May 15th 03, 11:23 PM
On top of this, I cannot properly get through the authentication procedure
when a VPN connection is initiated from the outside. I had this problem with
54g version of this router and returned it in favour of the 11b!

So, here's my beef:

The firmware Linksys is using in this router is junk. Either a VPN can be
configured for incoming connections OR UPnP can be configured. Having either
one buggers up the other.

Has anyone successfully set up an incoming VPN connection with this model
AND successfully enabled UPnP functionality?

Thanks,

Dave

"David Shorthouse" > wrote in message
...
> Hey folks,
>
> I have a Linksys BEFW11S4 and notice two issues.
>
> 1) Accepting incoming VPN connections breaks the UPnP IGD connection.
Only
> way to get it back is to delete the incoming VPN connection.
> 2) Using the NetBIOS name instead of the client IP in the IGD UPnP
> configuration results in random UPnP port-forwarding assignments
>
> Can anyone comment or assist with this?
>
> Thanks,
>
> Dave
>
>

Bill Sanderson
May 16th 03, 04:15 AM
I've had little trouble with other Linksys models in this regard, but I
don't have any experience with yours.

Do you have a Filters page? At the bottom of that page, is there a
"PPTP passthrough" setting? Is that enabled?

I have noticed that incoming traffic over UPnP forwarding results in odd
appearances in the log files. It works, however.

I've also noticed that UPnP appearances tend to come and go oddly--but my
routers are in small business offices, and I really don't want the users to
mess with the router anyway, so I tend to ignore or welcome this flakiness.
UPnP functionality that I've used has worked.

"David Shorthouse" > wrote in message
...
> On top of this, I cannot properly get through the authentication procedure
> when a VPN connection is initiated from the outside. I had this problem
with
> 54g version of this router and returned it in favour of the 11b!
>
> So, here's my beef:
>
> The firmware Linksys is using in this router is junk. Either a VPN can be
> configured for incoming connections OR UPnP can be configured. Having
either
> one buggers up the other.
>
> Has anyone successfully set up an incoming VPN connection with this model
> AND successfully enabled UPnP functionality?
>
> Thanks,
>
> Dave
>
> "David Shorthouse" > wrote in message
> ...
> > Hey folks,
> >
> > I have a Linksys BEFW11S4 and notice two issues.
> >
> > 1) Accepting incoming VPN connections breaks the UPnP IGD connection.
> Only
> > way to get it back is to delete the incoming VPN connection.
> > 2) Using the NetBIOS name instead of the client IP in the IGD UPnP
> > configuration results in random UPnP port-forwarding assignments
> >
> > Can anyone comment or assist with this?
> >
> > Thanks,
> >
> > Dave
> >
> >
>
>

David Shorthouse
May 16th 03, 04:51 AM
Bill,

Thanks for the reply. I do have a filters page and indeed PPTP Pass
Through is enabled yet continue to have problems as described. I'm not
entirely impressed with Linksys anymore. In addition to these issues, I have
noticed that using NetBIOS names for the UPnP forwarding in the IGD set-up
screens results in the wrong client IP addresses used. The only way around
this is to set-up a static client IP address and forward the appropriate
ports, which one could have done without UPnP. So much for the ease of
"universal" plug-and-play- it doesn't even work as it should with this
firmware.

Dave

> I've had little trouble with other Linksys models in this regard, but I
> don't have any experience with yours.
>
> Do you have a Filters page? At the bottom of that page, is there a
> "PPTP passthrough" setting? Is that enabled?
>
> I have noticed that incoming traffic over UPnP forwarding results in odd
> appearances in the log files. It works, however.
>
> I've also noticed that UPnP appearances tend to come and go oddly--but my
> routers are in small business offices, and I really don't want the users
to
> mess with the router anyway, so I tend to ignore or welcome this
flakiness.
> UPnP functionality that I've used has worked.
>
> "David Shorthouse" > wrote in message
> ...
> > On top of this, I cannot properly get through the authentication
procedure
> > when a VPN connection is initiated from the outside. I had this problem
> with
> > 54g version of this router and returned it in favour of the 11b!
> >
> > So, here's my beef:
> >
> > The firmware Linksys is using in this router is junk. Either a VPN can
be
> > configured for incoming connections OR UPnP can be configured. Having
> either
> > one buggers up the other.
> >
> > Has anyone successfully set up an incoming VPN connection with this
model
> > AND successfully enabled UPnP functionality?
> >
> > Thanks,
> >
> > Dave
> >
> > "David Shorthouse" > wrote in message
> > ...
> > > Hey folks,
> > >
> > > I have a Linksys BEFW11S4 and notice two issues.
> > >
> > > 1) Accepting incoming VPN connections breaks the UPnP IGD connection.
> > Only
> > > way to get it back is to delete the incoming VPN connection.
> > > 2) Using the NetBIOS name instead of the client IP in the IGD UPnP
> > > configuration results in random UPnP port-forwarding assignments
> > >
> > > Can anyone comment or assist with this?
> > >
> > > Thanks,
> > >
> > > Dave
> > >
> > >
> >
> >
>
>

Bill Sanderson
May 16th 03, 04:58 AM
That's pretty much what I expected--PPTP (GRE protocol 47, really) carries
the bulk of the traffic, and I think the 1723, TCP (which I assume you have
forwarded) does the authentication piece.

The Linksys models I am familiar with don't even have the option of using
the netbios names, which I can see would be a useful feature!

About all I can suggest is trying to contact Linksys. Some folks have
reported responsiveness--immediate referrals to beta firmware which fixes
obvious bugs (like your netbios issue.)

"David Shorthouse" > wrote in message
...
> Bill,
>
> Thanks for the reply. I do have a filters page and indeed PPTP Pass
> Through is enabled yet continue to have problems as described. I'm not
> entirely impressed with Linksys anymore. In addition to these issues, I
have
> noticed that using NetBIOS names for the UPnP forwarding in the IGD set-up
> screens results in the wrong client IP addresses used. The only way around
> this is to set-up a static client IP address and forward the appropriate
> ports, which one could have done without UPnP. So much for the ease of
> "universal" plug-and-play- it doesn't even work as it should with this
> firmware.
>
> Dave
>
> > I've had little trouble with other Linksys models in this regard, but I
> > don't have any experience with yours.
> >
> > Do you have a Filters page? At the bottom of that page, is there a
> > "PPTP passthrough" setting? Is that enabled?
> >
> > I have noticed that incoming traffic over UPnP forwarding results in odd
> > appearances in the log files. It works, however.
> >
> > I've also noticed that UPnP appearances tend to come and go oddly--but
my
> > routers are in small business offices, and I really don't want the users
> to
> > mess with the router anyway, so I tend to ignore or welcome this
> flakiness.
> > UPnP functionality that I've used has worked.
> >
> > "David Shorthouse" > wrote in message
> > ...
> > > On top of this, I cannot properly get through the authentication
> procedure
> > > when a VPN connection is initiated from the outside. I had this
problem
> > with
> > > 54g version of this router and returned it in favour of the 11b!
> > >
> > > So, here's my beef:
> > >
> > > The firmware Linksys is using in this router is junk. Either a VPN can
> be
> > > configured for incoming connections OR UPnP can be configured. Having
> > either
> > > one buggers up the other.
> > >
> > > Has anyone successfully set up an incoming VPN connection with this
> model
> > > AND successfully enabled UPnP functionality?
> > >
> > > Thanks,
> > >
> > > Dave
> > >
> > > "David Shorthouse" > wrote in
message
> > > ...
> > > > Hey folks,
> > > >
> > > > I have a Linksys BEFW11S4 and notice two issues.
> > > >
> > > > 1) Accepting incoming VPN connections breaks the UPnP IGD
connection.
> > > Only
> > > > way to get it back is to delete the incoming VPN connection.
> > > > 2) Using the NetBIOS name instead of the client IP in the IGD UPnP
> > > > configuration results in random UPnP port-forwarding assignments
> > > >
> > > > Can anyone comment or assist with this?
> > > >
> > > > Thanks,
> > > >
> > > > Dave
> > > >
> > > >
> > >
> > >
> >
> >
>
>

David Shorthouse
May 16th 03, 03:24 PM
Just got an email from a Linksys tech who send me an earlier firmware. What
the heck! So much for moving forward with their product line. Sounds to me
like they will soon be discontinuing this model if they haven't done so
internally already.

Dave

"Bill Sanderson" > wrote in message
...
> That's pretty much what I expected--PPTP (GRE protocol 47, really) carries
> the bulk of the traffic, and I think the 1723, TCP (which I assume you
have
> forwarded) does the authentication piece.
>
> The Linksys models I am familiar with don't even have the option of using
> the netbios names, which I can see would be a useful feature!
>
> About all I can suggest is trying to contact Linksys. Some folks have
> reported responsiveness--immediate referrals to beta firmware which fixes
> obvious bugs (like your netbios issue.)
>
> "David Shorthouse" > wrote in message
> ...
> > Bill,
> >
> > Thanks for the reply. I do have a filters page and indeed PPTP Pass
> > Through is enabled yet continue to have problems as described. I'm not
> > entirely impressed with Linksys anymore. In addition to these issues, I
> have
> > noticed that using NetBIOS names for the UPnP forwarding in the IGD
set-up
> > screens results in the wrong client IP addresses used. The only way
around
> > this is to set-up a static client IP address and forward the appropriate
> > ports, which one could have done without UPnP. So much for the ease of
> > "universal" plug-and-play- it doesn't even work as it should with this
> > firmware.
> >
> > Dave
> >
> > > I've had little trouble with other Linksys models in this regard, but
I
> > > don't have any experience with yours.
> > >
> > > Do you have a Filters page? At the bottom of that page, is there a
> > > "PPTP passthrough" setting? Is that enabled?
> > >
> > > I have noticed that incoming traffic over UPnP forwarding results in
odd
> > > appearances in the log files. It works, however.
> > >
> > > I've also noticed that UPnP appearances tend to come and go oddly--but
> my
> > > routers are in small business offices, and I really don't want the
users
> > to
> > > mess with the router anyway, so I tend to ignore or welcome this
> > flakiness.
> > > UPnP functionality that I've used has worked.
> > >
> > > "David Shorthouse" > wrote in
message
> > > ...
> > > > On top of this, I cannot properly get through the authentication
> > procedure
> > > > when a VPN connection is initiated from the outside. I had this
> problem
> > > with
> > > > 54g version of this router and returned it in favour of the 11b!
> > > >
> > > > So, here's my beef:
> > > >
> > > > The firmware Linksys is using in this router is junk. Either a VPN
can
> > be
> > > > configured for incoming connections OR UPnP can be configured.
Having
> > > either
> > > > one buggers up the other.
> > > >
> > > > Has anyone successfully set up an incoming VPN connection with this
> > model
> > > > AND successfully enabled UPnP functionality?
> > > >
> > > > Thanks,
> > > >
> > > > Dave
> > > >
> > > > "David Shorthouse" > wrote in
> message
> > > > ...
> > > > > Hey folks,
> > > > >
> > > > > I have a Linksys BEFW11S4 and notice two issues.
> > > > >
> > > > > 1) Accepting incoming VPN connections breaks the UPnP IGD
> connection.
> > > > Only
> > > > > way to get it back is to delete the incoming VPN connection.
> > > > > 2) Using the NetBIOS name instead of the client IP in the IGD UPnP
> > > > > configuration results in random UPnP port-forwarding assignments
> > > > >
> > > > > Can anyone comment or assist with this?
> > > > >
> > > > > Thanks,
> > > > >
> > > > > Dave
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Bill Sanderson
May 16th 03, 11:43 PM
There's a lot on their plate--implementing WPA, for example.
Don't know what to say--does sound like a lemon!

"David Shorthouse" > wrote in message
.. .
> Just got an email from a Linksys tech who send me an earlier firmware.
What
> the heck! So much for moving forward with their product line. Sounds to me
> like they will soon be discontinuing this model if they haven't done so
> internally already.
>
> Dave
>
> "Bill Sanderson" > wrote in message
> ...
> > That's pretty much what I expected--PPTP (GRE protocol 47, really)
carries
> > the bulk of the traffic, and I think the 1723, TCP (which I assume you
> have
> > forwarded) does the authentication piece.
> >
> > The Linksys models I am familiar with don't even have the option of
using
> > the netbios names, which I can see would be a useful feature!
> >
> > About all I can suggest is trying to contact Linksys. Some folks have
> > reported responsiveness--immediate referrals to beta firmware which
fixes
> > obvious bugs (like your netbios issue.)
> >
> > "David Shorthouse" > wrote in message
> > ...
> > > Bill,
> > >
> > > Thanks for the reply. I do have a filters page and indeed PPTP
Pass
> > > Through is enabled yet continue to have problems as described. I'm not
> > > entirely impressed with Linksys anymore. In addition to these issues,
I
> > have
> > > noticed that using NetBIOS names for the UPnP forwarding in the IGD
> set-up
> > > screens results in the wrong client IP addresses used. The only way
> around
> > > this is to set-up a static client IP address and forward the
appropriate
> > > ports, which one could have done without UPnP. So much for the ease of
> > > "universal" plug-and-play- it doesn't even work as it should with this
> > > firmware.
> > >
> > > Dave
> > >
> > > > I've had little trouble with other Linksys models in this regard,
but
> I
> > > > don't have any experience with yours.
> > > >
> > > > Do you have a Filters page? At the bottom of that page, is there a
> > > > "PPTP passthrough" setting? Is that enabled?
> > > >
> > > > I have noticed that incoming traffic over UPnP forwarding results in
> odd
> > > > appearances in the log files. It works, however.
> > > >
> > > > I've also noticed that UPnP appearances tend to come and go
oddly--but
> > my
> > > > routers are in small business offices, and I really don't want the
> users
> > > to
> > > > mess with the router anyway, so I tend to ignore or welcome this
> > > flakiness.
> > > > UPnP functionality that I've used has worked.
> > > >
> > > > "David Shorthouse" > wrote in
> message
> > > > ...
> > > > > On top of this, I cannot properly get through the authentication
> > > procedure
> > > > > when a VPN connection is initiated from the outside. I had this
> > problem
> > > > with
> > > > > 54g version of this router and returned it in favour of the 11b!
> > > > >
> > > > > So, here's my beef:
> > > > >
> > > > > The firmware Linksys is using in this router is junk. Either a VPN
> can
> > > be
> > > > > configured for incoming connections OR UPnP can be configured.
> Having
> > > > either
> > > > > one buggers up the other.
> > > > >
> > > > > Has anyone successfully set up an incoming VPN connection with
this
> > > model
> > > > > AND successfully enabled UPnP functionality?
> > > > >
> > > > > Thanks,
> > > > >
> > > > > Dave
> > > > >
> > > > > "David Shorthouse" > wrote in
> > message
> > > > > ...
> > > > > > Hey folks,
> > > > > >
> > > > > > I have a Linksys BEFW11S4 and notice two issues.
> > > > > >
> > > > > > 1) Accepting incoming VPN connections breaks the UPnP IGD
> > connection.
> > > > > Only
> > > > > > way to get it back is to delete the incoming VPN connection.
> > > > > > 2) Using the NetBIOS name instead of the client IP in the IGD
UPnP
> > > > > > configuration results in random UPnP port-forwarding assignments
> > > > > >
> > > > > > Can anyone comment or assist with this?
> > > > > >
> > > > > > Thanks,
> > > > > >
> > > > > > Dave
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Google