Checkpoint SecuRemote and 3G Modem Connection Issue

[naman]

Hello.

We are using Checkpoint SecuRemote VPN service in order to access our company network. VPN works perfectly fine with ethernet connection. However, when I use my 3G modem connection, VPN automatically disconnnects after 5-10 seconds.

I searched through web to find a solution, however I couldn't find something useful. People say VPN clients do not support 3G connections? I don't know why.

I'd appreciate any help.

Update: This problem is really a big pain for my job. I'd really appreciate for any help.

 

[naman]

I am not sure whether this is against rules but, I'd really appreciate any help and need to bump this thread.

 

[Shadowjk]

The issue with 3G connection is that it isn't very stable in terms of ping responses and can sometimes have packet loss. A VPN connection uses a tunneling protocol called ESP that tries to detect anyone hacking or stealing the information sent between you and the server. This algorithm is based on packet loss and ping times. If too many packets get dropped then the VPN will end and then re-initiate the connection using a different path through the internet.

Can you upload your results of a ping test to a server that is closest to you and then one that is far away from you while using your 3G connection - Pingtest.net - The Global Broadband Quality Test

Many Thanks,
Josh

 

[naman]

Hi Shadowjk. Thanks for the reply.

Here is my test result: I guess something wrong with Java or Firewall, 'cause it couldn't complete package loss test.

In addition to this, I've talked to IT guy of company and he told me that my 3G service uses the same IP range with my company's VPN IP range. However, he hasn't given any information how to fix it.

 

[Shadowjk]

The IP conflict may be an issue however if it was you shouldn't be able to connect in the first place but I cannot comment since I do not know the addressing scheme.

Can you run a ping test via CMD and see if there are any dropped packets.

To do so enter the following command into a command prompt:

ping www.google.com -t

This will continuously ping Google. While pinging look out for 'Request Timed Out' errors since these are dropped packets. Please allow the ping to continue for a couple of miniutes allowing you to see if there is any dropped packets. To end the command press CTRL-C and then upload your results here so I can see if any packets dropped as well as the ping times.

Many Thanks,
Josh

 

[naman]

74.125.136.99 Ping statistics:
Package: Transmitted = 64, Received = 64, Lost = 0 (0% loss),

Min. = 85ms, Max. = 1505ms, Average = 372ms

Here is the result of ping test. I hope it is sufficient enough.

 

[Shadowjk]

Your ping times vary quite a bit and I have a strong feeling that this is the cause of your problem. What is your signal strength like to the 3G mobile tower?

Do you get disconnected no matter how far away you are?

It is possible for the 3G provider to block you since VPN connections have increased bandwidth and overhead compared to normal data traffic.

Josh

 

[naman]

Hi Josh, thank you very much for the answer.

3G connection does not disconnect. I tried this at several locations, several cities and even several countries Most of time I do have a stable connection. However, VPN connection "always" disconnect after 5-10 seconds while I'm connected to internet via 3G.

Is it possible to change the IP range of 3G connection like we do in normal ethernet connection. I am not familiar with 3G IP configuration interface.

 

[Shadowjk]

How far away are you from the VPN host server? This can have a drastic affect on your ping times and whether or not your connection is stable.

As for changing the IP address, not possible . Your 3G device will receive a public IP address from the 3G provider and therefore you cannot assign a different one. If it disconnects in different countries then I would be almost certain that this isn't an IP issue since each country will give a different public IP address.

The reason I suspect an unstable connection is because you say it connects for 5-10 seconds then drops. This is a classic symptom of VPN protecting itself from a packet sniffer which is determined by packet times and packet loss. That being said, it is possible for the VPN server to reject you. Do your currently used credentials work via a wired connection?

I think the best person to go to is your tech support team since they are the ones with the most amount of domain knowledge. Tell them that you have tried in multiple areas and they should understand.

Many Thanks,
Josh

 

[naman]

Hi Josh. I tried it in a closer location to VPN server, but same problem occured. Our IT guy told me that VPN service and 3G IP range conflicts and there is no solution.

My problem was not solved but that's all I can post for this thread.