VPN trouble

Of course there is technical personal working for o2, but they are not doing first-level customer support.

 

I think o2 might react different if you can pinpoint (better word than proof) where the problem is. If you can provide a trace that shows that there is one server that is blocking udp-traffic most of the time (you said sometimes there is a slow connection), then o2 can perhaps solve the problem. If you just say o2 is a bad provider, because o2 blocks all udp-traffic somewhere, then o2 has no idea where to look for the problem and nothing happens.

 

Do you think this server is the problem or the 6431 is the problem? The problem may have started, when you installed the 6431, but that does not mean that the 6431 is the course. There might be a different routing, since you switched to VDSL.

 

And I think it is very unlikely that o2 is blocking all udp-traffic or the 6431 is blocking udp-traffic, because then there should be much more people complaining about some applications that are not working (because those use udp).

 

What was the exact point when vpn stopped working? Was there anything changed during that time? At the beginning of the thread you asked something about a firmware update. Was there a firmware update on the o2-router during that time?

 

You might order a Fritzbox 3370 on Amazon and try that one as a vdsl-modem. As it costs more than 40 Euro you can return it without any costs for you (if you don't damage it).

 

I know that I can probably not solve your problem, but maybe I can help you pinpoint your problem so that o2 is able to solve your problem. But to do that you need to give me some more information for example the link to the problem you use, maybe a public webserver that you cannot ping over udp, so that I can try that from my account and the trace you mentioned, so I can see where you think the udp-traffic is blocked.

 

And in the moment I use my free time to help you. So please help me melp you.

@winegum: What firmware-version is your 6431?

Do you have another vdsl-modem or can borrow one, so you can test whether the 6431 is causing the problem?

Did the L2TP-connection work in the past?

Then I cannot help you. Sorry.

 

By the way: If you stop the payments, o2 will completely disable your internet- and phone-connection.

No, I don't.  Can I use any vdsl modem or am I stuck with the 6431?

@winegum: unfortunately with another vdsl-modem your phone will not work, but it would be interesting to know whether the 6431 is causing the problems.

 

@E-berliner: You can try to file a complaint, explain that your internet connection is not fully functional and what ist not working, set a deadline two weeks in advance and announce that you will cancel the contract if o2 cannot fix this until the deadline. Write this as a registered letter with reply advice or as a fax, so you can prove that you send o2 this deadline. If o2 does not answer you can try to cancel the the contract.

Background for this is the §314 BGB (*Click*), but I am not sure whether it will work, because there is only a small bit of the internet connection that ist not working and I don't think that o2 guarantees that you can use every port and every protocol you like.

And I am not a lawyer and I have never done this before, so this tipp is theoretical.

 

Maybe there is someone in this forum with some experience on this topic.

Ah, great, we start the thread again from the beginning again!!

 

1. yes it worked for me too in the beginning.

 

2. 7170 behind the 6431 and a 7390 on the other side.

3. 6431 reset and it did not work anymore....

4. See the logic...?

 

The point is that a normal ping goes via TCP.

Installing a printer goes via TCP..

Transmitting files via UDP... NOT POSSIBLE BECAUSE IT IS BLOCKED BY O2

 

O2 - the worst provider ever

I did not want to start the whole discussion again. But in the past you answered only half of my question and that made it quite difficult to help you. Another difficulty is that one day you blame the o2-box next day you blame some o2-server somewhere and then you blame the o2-box again and so on.

And I gave you some advice about how you might perhaps cancel you contract.
And by the way: You never said "thank you" (at least never in a non-ironical way).

E-berliner schrieb:
3. 6431 reset and it did not work anymore....

 That is the first time you mention that the problem started after a reset of the 6431.

The point is that a normal ping goes via TCP.

Installing a printer goes via TCP..

Transmitting files via UDP... NOT POSSIBLE BECAUSE IT IS BLOCKED BY O2

Ping does not use TCP, but ICMP.

And I did the ping through the tunnel, so how can o2 know what kind of packets I transmit through the tunnel (maybe the NSA knows)? I think that the information whether it is an tcp- oder udp-packet going through the tunnel is encrypted too, but I might be wrong.

I thought you mean that the VPN-packets are transmitted over UDP and not that you try to transmit UDP-packets through the tunnel.

Does that mean you can transmit TCP-traffic through the tunnel without problems?

 

@binauchhier: I already suggested using another VDSL-modem, but unfortunately E-berliner does not have one.

nemesis03 schrieb:
I did not want to start the whole discussion again. But in the past you answered only half of my question and that made it quite difficult to help you. Another difficulty is that one day you blame the o2-box next day you blame some o2-server somewhere and then you blame the o2-box again and so on.

And I gave you some advice about how you might perhaps cancel you contract.
And by the way: You never said "thank you" (at least never in a non-ironical way).

Well I do have the feeling that I am the one explaining here quite a bit on the way internet works, documenting the process and test I have done pretty well. Fact is that the issue is not in my infrastructure, but in the O2 system. It has only been almost 3 weeks now and still there is no resolution. Anyone working for O2 will get a thank you as soon as the issue is resolved.  

 

So far the only official reaction form O2 is "I'm really sorry, but we can't help u here in this case." That is not very customer friendly. And it does set the mood of the conversation. 

 

 That is the first time you mention that the problem started after a reset of the 6431.

I could not imagine that a reset could cause problems. So far a reset has almost always resolved any issues. However, it could be a vital piece of information. 

 

Ping does not use TCP, but ICMP.

Depends on the program. The standard windows ping is a simple utility with limited functionality. Netscan Tools can use TCP, IMCP, UDP. And so can PsPing.

And I did the ping through the tunnel, so how can o2 know what kind of packets I transmit through the tunnel (maybe the NSA knows)? I think that the information whether it is an tcp- oder udp-packet going through the tunnel is encrypted too, but I might be wrong.

I thought you mean that the VPN-packets are transmitted over UDP and not that you try to transmit UDP-packets through the tunnel.

Does that mean you can transmit TCP-traffic through the tunnel without problems?

 

@binauchhier: I already suggested using another VDSL-modem, but unfortunately E-berliner does not have one.

What port and protocol a VPN tunnel uses depends on the type. source: Juniper Networks

 

Internet Protocol Security (IPSec) uses IP protocol 50 for Encapsulated Security Protocol (ESP), IP protocol 51 for Authentication Header (AH), and UDP port 500 for IKE Phase 1 negotiation and Phase 2 negotiations. UDP ports 500 and 4500 are used, if NAT-T is used for IKE Phase 1 negotiation and Phase 2 negotiations

Secure Sockets Layer (SSL) uses TCP port 443 and works by using a private key to encrypt data that is transferred over the SSL connection. SSL also uses 465 Secure SMTP, 993 Secure IMAP, and 995 Secure POP.

Layer Two Tunneling Protocol (L2TP) uses TCP port 1701 and is an extension of the Point-to-Point Tunneling Protocol. L2TP is often used with IPSec to establish a Virtual Private Network (VPN).

Point-to-Point Tunneling Protocol (PPTP) uses TCP port 1723 and IP port 47 Generic Routing Encapsulation (GRE). PPTP provides a low-cost, private connection to a corporate network through the Internet. PPTP works well for people who work from home or travel and need to access their corporate networks. It is often used to access a Microsoft Remote Access Server (RAS).

 

This is the reason why I can transfer via SSL since it only uses TCP. Any other secure solution uses UDP or GRE.

 

Even IPsec is not safe for the NSA. It is stronger than PPTP though.

 

Final word on replacing the router. I need username and password to do so. I have read to many issues with placing a decent router (fritz 7360/7390/7490) in place of the 6431, since the inlog data are not known, cannot be read from the router (firmware 23b) or provided incorrectly by the customer service. Secondly, I don't see why I need to do a significant investment (starting at 130 euro) in hardware. O2 should deliver a working internet connection without any restrictions that are not being communicated beforehand. 

 

O2 - the worst provider ever

Now I really get the feeling you are an O2 employee. They don't help either!!

 

And I see that an O2 moderator named Stefan gave you a kuddo for your last answer, just like me. It seems this is confirms my previous statement.

 

1https://http://o2de.i.lithium.com/html/rank_icons/moderator.gifo2_StefanModeratorKudos-Gewichtung: 3Kudos: 3Kudos-Datum: ‎03.02.20142http://o2de.i.lithium.com/t5/image/serverpage/avatar-name/toytrain/avatar-theme/chrome/avatar-collection/toys/avatar-display-size/messagehttp://o2de.i.lithium.com/html/rank_icons/ranks_neu%20(24).pngE-berlinerErste ErfahrungenKudos: 1Kudos-Datum: ‎01.02.2014 

O2 - the worst provider ever

Absolutely not, because now I finally have drawn the attention of an O2 person that is able to explain me why UDP connections are not possible via my connection!!

 

Lieber Stefan, 

 

Why are UDP connections not possible via a O2 VSDL 50 with a 6431 box with firmware 1.01.23b not possible?

 

Thank you in advance for your answer! ☺️

 

That is a rude answer. My internet connection does not work right, who are you to tell me that I should be satidfied with it. What a lack of respect for a customer.

 

If you specify you deliver an internet connection, then there are no restrictions. VPN or any other protocol should be possible without having to explicitely mentioning this

 

My internet connection does not work fine since UDP is being blocked. That is the root cause of my VPN issue. However, you should address the root case in stead of blaming the customer. 

 

My issue is NOT UNIQUE. Look at all the threads in the forum! There seems to be 1 common denominator; the 6431 box. However I cannot replace this box without violating O2 conditions. So I am left with no alternatives.

 

There are 2 ways forward:

1. Either you provide me with all the details to be able to setup a working connection via an alternative like a Fritz box. A private message is appreciated.

2. Or we agree to cancel my contract

 

It must be clear that the latter has my preference as you will understand. 

 

Cooperation from your side is highly appreciated to resolve the issue. 

 

 

 

You need the username and password for the internetconnection. Maybe those are in the "Auftragsbestätigung" that you should have received from o2. Otherwise write a private message to the user o2_dsl and ask for username and password for the internet connection.

Usually you get these information without problems, only the login data for the internet telephony won't be given to you.

 

And you need to configure VPI=1, VCI=32 and VLAN-ID=7 (if that does not work try VLAN-ID=11)