Telstra Gateway Pro (Netgear model number v7610) and Sophos Client Connect VPN

Hi Johana Romero Melo,

Thank you for reaching out to Sophos Community.

Do you see any incoming requests on Sophos Firewall from the user's public IP address?

You may follow the below steps to check traffic flow on user's public IP address.

Login to SSH > 4. Device Console

console> tcpdump 'host user_public_IP

Just to confirm, an issue is reported with a single user only. For other users, Sophos Connect is working fine. Is that correct?

Hi,

I am sure they are not blocked by Telstra because those ports  are used by wifi calling which I have setup on my XG and my iPhones.

Ian

Hi Yash,

I will check for the traffic flow when the user is at home.

Yes, so far the error is just for 1 user.

Regards,

Johana

Yes,

We opened a case with Telstra and they verify the ports were not closed.

Sounds more like the VPN configuration is missing or has the wrong gateway?

ian

Hi Ian,

"Use as default gateway" is off

And i listed the permitted networks as shown below

Johana

Yeah, we had the same problem and have three of these devices at different locations. Telstra are about as helpful as the magpie on my lawn... and not quite as smart.

After some pain, trial and error we found that you have to add a Port Trigger to the V7610 for UDP port 500.

Login to the Router and go to ADVANCED tab
Click on Advanced Setup in the side bar
Click on Port Forwarding / Port Triggering

Please select the service type

Select Port Triggering (radio button)
Click on " + Add Service " button

Enter the new Service:

Port Triggering - Services

Service Name = VPN Service
Service User = Any
Service Type = UDP
Triggering Port = 500
Inbound Connection = UDP
Starting Port = 50000
End Port = 50100

Click the green " Apply > " button

OK, now try to connect using Sophos Connect VPN, YAY!

Hope this helps

Mark

Hi Mark,

Thank you for sharing your solution. It worked.

However, I was wondering why the port range from 50000 to 50100?

Regards,

Johana