When my GL-AR750S ran firmware version 3.216, my Synology NAS L2TP/IPsec VPN worked for remote access. After upgrading the router to firmware version 4.3.25, the Synology VPN stopped working from a remote network. I've confirmed that the proper port forwarding rules are in place and that the VPN still works if accessed from within the local LAN. But it doesn't not work if accessed from the WAN side of the router. GL-inet tech support suggested that the problem is because in firmware version 4 they disabled ICMP packets from the WAN side. That seems to likely be the case. BTW, it works again if I downgrade the router to v3.216. Can anyone tell me the step-by-step procedure for enabling ICMP packets to be passed from the WAN to the LAN? I'm comfortable using the Luci interface and just need some guidance for the specifics. Any assistance would be greatly appreciated. Thanks for reading!
Might want to consider Tailscale which does not require open ports or forwarding.
This doesn’t answer your question, but after a short while playing with 4.x code on my ar750s I rolled back to 3.x code. It just wasn’t buying me anything I really needed tbh. I am sure there were some security fixes in there somewhere, but I don’t expose much on my travel router - only outbound traffic with nothing on the wan side open. IMO, if things were working fine in 3.216, just stay there.
Hi,
We noticed that you’ve already contacted us by email regarding this issue.
Please continue working with our experts through the ticket system for further assistance — Just let they know you need a detailed, step-by-step guidance, they’ll be happy to provide.
@packetmonkey, yes, you’re correct, it doesn’t answer the question but it is a pragmatic approach (which I’ve considered). That said, I prefer to run the latest version of the firmware b/c presumably it has security and other improvements. None-the-less, it may come down to what you’re suggesting. That said, GL-inet folks are trying to help and since they seem familiar w/the problem I’m hopeful they’ll have a solution for me. Thanks for responding to my request for help.