27 Oct
2017
27 Oct
'17
9 a.m.
Hello,
could be someone from swisscom so kind and contact me offlist via email
please.
our customer has a swisscom dsl connection and last week they changed these
to v6.
he already tried 3 times via swisscom helpdesk without success.
the first level seems to have no idea about ds lite and v6... ;-/
we want to go back to v4 native.
in customer center we have deactivated v6 - but it is still online via v6
and ds-lite
we did all what was explained:
- switchoff modem for an hour
- reboot 3 times router etc
effectively now the vpn is for sure not working via ds lite and carrier
grade NAT....
thanks in advance
Stephan
Besten Dank.
Freundliche Grüsse,
WolfSec-Support
WolfSec
Postanschrift:
Swiss Post Box: 104213
Zürcherstrasse 161
CH-8010 Zürich
http://www.wolfsec.ch
27 Oct
27 Oct
5:55 p.m.
New subject: background migration of swisscom connection from IPv4 native to v6 + DS-Lite
SOLVED:
many thanks to all @ swisscom who helped me
issue solved.
for propperness:
it was CG NAT, not ds-lite
(I had a week ago an issue with UPC and ds-lite; so was my fault)
now back to dual stack and all works :)
have a nice weekend,
cheers
stephan
2017-10-27 9:00 GMT+02:00 WolfSec-Support <support(a)wolfsec.ch>ch>:
Hello,
could be someone from swisscom so kind and contact me offlist via email
please.
our customer has a swisscom dsl connection and last week they changed
these to v6.
he already tried 3 times via swisscom helpdesk without success.
the first level seems to have no idea about ds lite and v6... ;-/
we want to go back to v4 native.
in customer center we have deactivated v6 - but it is still online via v6
and ds-lite
we did all what was explained:
- switchoff modem for an hour
- reboot 3 times router etc
effectively now the vpn is for sure not working via ds lite and carrier
grade NAT....
thanks in advance
Stephan
Besten Dank.
Freundliche Grüsse,
WolfSec-Support
WolfSec
Postanschrift:
Swiss Post Box: 104213
Zürcherstrasse 161
CH-8010 Zürich
http://www.wolfsec.ch
28 Oct
28 Oct
5:19 p.m.
New subject: background migration of swisscom connection from IPv4 native to v6 + DS-Lite
Well i only suspecting your try to use ipsec, wich is a crazy vpn solution.
I would sugest to evaluate ssl based vpn in the future which naturally do not run into nat
problems.
Just my five cents
Em 27 de outubro de 2017 03:00:18 AMT, WolfSec-Support <support(a)wolfsec.ch>
escreveu:
Hello,
could be someone from swisscom so kind and contact me offlist via email
please.
our customer has a swisscom dsl connection and last week they changed
these
to v6.
he already tried 3 times via swisscom helpdesk without success.
the first level seems to have no idea about ds lite and v6... ;-/
we want to go back to v4 native.
in customer center we have deactivated v6 - but it is still online via
v6
and ds-lite
we did all what was explained:
- switchoff modem for an hour
- reboot 3 times router etc
effectively now the vpn is for sure not working via ds lite and carrier
grade NAT....
thanks in advance
Stephan
Besten Dank.
Freundliche Grüsse,
WolfSec-Support
WolfSec
Postanschrift:
Swiss Post Box: 104213
Zürcherstrasse 161
CH-8010 Zürich
http://www.wolfsec.ch
--
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.
29 Oct
29 Oct
9:52 a.m.
New subject: background migration of swisscom connection from IPv4 native to v6 + DS-Lite
Roger
Well you are wrong. No ipsec.
With CGN outbound for sure no prob.
But inbound due to CG NAT impossible.
Br
Stephan
Am 28.10.2017 17:32 schrieb "Roger Schmid" <roger(a)mgz.ch>ch>:
Well i only suspecting your try to use ipsec, wich is a crazy vpn solution.
I would sugest to evaluate ssl based vpn in the future which naturally do
not run into nat problems.
Just my five cents
Em 27 de outubro de 2017 03:00:18 AMT, WolfSec-Support <support(a)wolfsec.ch>
escreveu:
Hello,
could be someone from swisscom so kind and contact me offlist via email
please.
our customer has a swisscom dsl connection and last week they changed
these to v6.
he already tried 3 times via swisscom helpdesk without success.
the first level seems to have no idea about ds lite and v6... ;-/
we want to go back to v4 native.
in customer center we have deactivated v6 - but it is still online via v6
and ds-lite
we did all what was explained:
- switchoff modem for an hour
- reboot 3 times router etc
effectively now the vpn is for sure not working via ds lite and carrier
grade NAT....
thanks in advance
Stephan
Besten Dank.
Freundliche Grüsse,
WolfSec-Support
WolfSec
Postanschrift:
Swiss Post Box: 104213
Zürcherstrasse 161
CH-8010 Zürich
http://www.wolfsec.ch
--
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.
_______________________________________________
swinog mailing list
swinog(a)lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
10:12 a.m.
New subject: background migration of swisscom connection from IPv4 native to v6 + DS-Lite
Hi,
On Sun, Oct 29, 2017 at 09:52:07AM +0100, WolfSec-Support wrote:
With CGN outbound for sure no prob.
But inbound due to CG NAT impossible.
Run the VPN over IPv6?
In 2017 there shouldn't be any reason anymore to rely on IPv4...
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
10:32 a.m.
New subject: background migration of swisscom connection from IPv4 native to v6 + DS-Lite
The vpn needs to run on v4
Its not site 2 site in this case.
As all know it is still rare to get v6 access everywhere
But in general it would be better if an ISP informs the customer BEFORE
such a change.
To implement CGN without making sure the customer gets a notice was simply
the root of the problem
Br
Stephan
Am 29.10.2017 10:12 schrieb "Gert Doering" <gert(a)space.net>et>:
Hi,
On Sun, Oct 29, 2017 at 09:52:07AM +0100, WolfSec-Support wrote:
With CGN outbound for sure no prob.
But inbound due to CG NAT impossible.
Run the VPN over IPv6?
In 2017 there shouldn't be any reason anymore to rely on IPv4...
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
10:33 a.m.
New subject: background migration of swisscom connection from IPv4 native to v6 + DS-Lite
Hi,
On Sun, Oct 29, 2017 at 10:32:03AM +0100, WolfSec-Support wrote:
The vpn needs to run on v4
Its not site 2 site in this case.
As all know it is still rare to get v6 access everywhere
But in general it would be better if an ISP informs the customer BEFORE
such a change.
To implement CGN without making sure the customer gets a notice was simply
the root of the problem
Yeah, it's quite unfortunate that IPv4 ran out so suddenly, barely 15 years
after people were told to move towards IPv6.
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
11:23 a.m.
New subject: background migration of swisscom connection from IPv4 native to v6 + DS-Lite
> Yeah, it's quite unfortunate that IPv4 ran out
so suddenly, barely 15
years
> after people were told to move towards IPv6.
sad but true
2017-10-29 10:33 GMT+01:00 Gert Doering <gert(a)space.net>et>:
Hi,
On Sun, Oct 29, 2017 at 10:32:03AM +0100, WolfSec-Support wrote:
The vpn needs to run on v4
Its not site 2 site in this case.
As all know it is still rare to get v6 access everywhere
But in general it would be better if an ISP informs the customer BEFORE
such a change.
To implement CGN without making sure the customer gets a notice was
simply
the root of the problem
Yeah, it's quite unfortunate that IPv4 ran out so suddenly, barely 15 years
after people were told to move towards IPv6.
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
2039
days inactive
2041
days old
7 comments
3 participants
participants (3)
-
Gert Doering -
Roger Schmid -
WolfSec-Support