[outages] VPN issues over Spectrum L3 boundaries

[Biddle, Josh]

The original issue began 2-3 months ago at one client office. This past week it has spread to two clients over at least 6 different offices. Any other thoughts?

From: Stephen Wilcox <steve.wilcox at ixreach.com>
Sent: Tuesday, October 15, 2019 4:38 PM
To: Biddle, Josh <JBiddle at ntst.com>
Cc: Justin Oeder <justin.oeder at beyondhosting.net>; outages at outages.org
Subject: Re: [outages] VPN issues over Spectrum L3 boundaries

Sounds more like a technical issue such as a tunnel with lower MTU. So your signalling works but the tunnel and data doest get established. I would very much doubt a commercial problem caused someone to randomly implement filters. You ought to be able to test it tho by seeing if the relevant ports are open in either direction and if ping/no fragment works at the maximum tunnel MTU.

Hth

On Wed, 16 Oct 2019, 00:33 Biddle, Josh via Outages, <outages at outages.org<mailto:outages at outages.org>> wrote:
See if you can get proof with traceroutes and post on the thread that I made to see if we can get some type of answer out of someone. My best guess at this time is that it is some business squabble at the transit provider where these two Internet providers interconnect.


From: Justin Oeder <justin.oeder at beyondhosting.net<mailto:justin.oeder at beyondhosting.net>>
Sent: Tuesday, October 15, 2019 8:51 AM
To: Biddle, Josh <JBiddle at ntst.com<mailto:JBiddle at ntst.com>>
Cc: outages at outages.org<mailto:outages at outages.org>
Subject: Re: [outages] VPN issues over Spectrum L3 boundaries

We had a similar issue last week that we chalked up to a Spectrum outage.

Because this was all new install we have not gone back and tested again yet but very similar to you - Multiple sites over Ohio.  VPN would establish and one side would send traffic and it would be received on the other end.  The other side would send traffic and it would not be received.

Justin

On Oct 15, 2019, at 8:04 AM, Biddle, Josh via Outages <outages at outages.org<mailto:outages at outages.org>> wrote:

Found a thread in the Spectrum forums talking about the issue finally – it was marked as resolved so I started a new one.

https://forums.timewarnercable.com/t5/Connectivity/Traffic-issues-at-66-109-7-162/m-p/164091#M53497<https://urldefense.proofpoint.com/v2/url?u=https-3A__forums.timewarnercable.com_t5_Connectivity_Traffic-2Dissues-2Dat-2D66-2D109-2D7-2D162_m-2Dp_164091-23M53497&d=DwMFaQ&c=-7HNwxqfpkdcRXCW8HB54Q&r=svX1Si7sopSBMitBL3bFwQ&m=iQLepJM5vHmCTqpsc5_QOKPNiy5wXujKdcHvm7JWg0k&s=RUIXDoc0T_bmNFkrtsGtYl5C5cVvjOWGsqTFkuO39dE&e=>

From: Outages <outages-bounces at outages.org<mailto:outages-bounces at outages.org>> On Behalf Of Biddle, Josh via Outages
Sent: Sunday, October 13, 2019 12:00 PM
To: outages at outages.org<mailto:outages at outages.org>
Subject: [outages] VPN issues over Spectrum L3 boundaries

We have several offices over the Ohio and Pennsylvania area that are experiencing issues passing traffic over VPN tunnels (specifically, there is always a Spectrum >< Level 3 interconnect). It is a very strange issue. The VPN tunnel will actually establish, and if you source your ping from inside the internal network across the VPN tunnel to the destination, the traffic gets there and replies, but the replies never make it back to the original sending point.

Anyone else experiencing any similar issues like this?

Best Regards,
Josh

This email and its attachments may contain privileged and confidential information and/or protected health information (PHI) intended solely for the use of Netsmart Technologies and the recipient(s) named above. If you are not the recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any review, dissemination, distribution, printing or copying of this email message and/or any attachments is strictly prohibited. If you have received this transmission in error, please email compliance at NTST.com<mailto:compliance at NTST.com> immediately and permanently delete this email and any attachments.
This email and its attachments may contain privileged and confidential information and/or protected health information (PHI) intended solely for the use of Netsmart Technologies and the recipient(s) named above. If you are not the recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any review, dissemination, distribution, printing or copying of this email message and/or any attachments is strictly prohibited. If you have received this transmission in error, please email compliance at NTST.com<mailto:compliance at NTST.com> immediately and permanently delete this email and any attachments. _______________________________________________
Outages mailing list
Outages at outages.org<mailto:Outages at outages.org>
https://puck.nether.net/mailman/listinfo/outages<https://urldefense.proofpoint.com/v2/url?u=https-3A__puck.nether.net_mailman_listinfo_outages&d=DwMFaQ&c=-7HNwxqfpkdcRXCW8HB54Q&r=svX1Si7sopSBMitBL3bFwQ&m=iQLepJM5vHmCTqpsc5_QOKPNiy5wXujKdcHvm7JWg0k&s=2be7j5W6TaOMjgT-Wm0C5ThoYvwYYbN7BHQUklMyQdc&e=>

This email and its attachments may contain privileged and confidential information and/or protected health information (PHI) intended solely for the use of Netsmart Technologies and the recipient(s) named above. If you are not the recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any review, dissemination, distribution, printing or copying of this email message and/or any attachments is strictly prohibited. If you have received this transmission in error, please email compliance at NTST.com<mailto:compliance at NTST.com> immediately and permanently delete this email and any attachments.
_______________________________________________
Outages mailing list
Outages at outages.org<mailto:Outages at outages.org>
https://puck.nether.net/mailman/listinfo/outages<https://urldefense.proofpoint.com/v2/url?u=https-3A__puck.nether.net_mailman_listinfo_outages&d=DwMFaQ&c=-7HNwxqfpkdcRXCW8HB54Q&r=svX1Si7sopSBMitBL3bFwQ&m=p9pDGllAuH7XysxTdZgskh5NId7UuP2Nsa9hbEZh-rQ&s=6BXmu4K5MpMz8Qk1HOWepbDeauFt-Fq3YUQa4qOYHN0&e=>
This email and its attachments may contain privileged and confidential information and/or protected health information (PHI) intended solely for the use of Netsmart Technologies and the recipient(s) named above. If you are not the recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any review, dissemination, distribution, printing or copying of this email message and/or any attachments is strictly prohibited. If you have received this transmission in error, please email compliance at NTST.com immediately and permanently delete this email and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages/attachments/20191015/998a19a4/attachment.htm>