Westell 9100em - Source of passthrough VPN problems

[philhu]

Hi

I've been reading on a few forums about people setting up passthough VPN through the Westell and it failing but it works if setup as the DMZ host in the Westel.

Well, I think I have found the problem in the Westell!

I have exactly that problem.  If I connect my VPN enabled server as the DMZ, works fine.

Here is the rub...

If the VPN server is NOT the DMZ host, and you do port forwarding rules to send 1701, 1723 and GRE to the server's IP address, IT STILL SENDS GRE AND 1723 TO THE DMZ HOST!!!!!!  I verified it in the logs on the Westell.

I even turned off DMZ, rebooted the modem, etc and it STILL sends GRE and 1723 to the last known DMZ host.

THIS IS A MAJOR BUG!

AND IT EXPLAINS WHY IT DOESNT WORK as DESCRIBED.

FiOS people, can you pass this forward?  I tried to tell tech support about this and was told any port forwarding is NOT SUPPORTED so they wont take a report for it.   Good way to fix a problem, huh?

[philhu]

Ok, more on this

If you unbundle the items, ie, instead of one rule with 5-6 forwarding items, and instead list them as 5-6 RULES, it works fine.

So it definitely is their handing of multiple items in a rule.

Verizon, listening, pass this forward please?

Thanks!