Does Vodafone Fibre block/have issues with Google One VPN?

[jamesl1001]

I have recently moved home and have signed up for Vodafone Fibre.

Since it's been installed, I've been experiencing connection drop outs several times an hour.

When these drop outs occur, my PC is still connected to the router but all pings timeout and the browser/games/etc. behave like the PC is offline. Other devices are unaffected.

I am still diagnosing but I have a suspicion the drop outs may be due to being connected via Google One VPN.

Does Vodafone have any issues with Google One VPN?

[jamesl1001]

I have some further info to try to diagnose these infrequent drop outs...

I'm now pretty certain the issue isn't to do with the VPN as I've experienced the same drop outs several times with the VPN switched off.

1. I have been pinging 192.168.1.1 during the day, and these requests time out in line with my internet dropping out.
2. During these drop outs, most of the time my PC remains connected to the router (according to the Windows wi-fi symbol on the task bar).
3. During these drop outs, my two other devices (in the same room) remain online.

I've also extracted the router logs from the time of the drop outs:

Date		Time		Category	Severity		Log Details
02.10.2023	22:18:27	system		Error   		Failed to send DHCPV6 message to ff02::1:2 (Permission denied)
02.10.2023	22:18:26	system		Warning 		2023/10/02 22:18:25 [warn] 6610#0: *74800 [lua] session.lua:103: changeUser(): changing user to vodafone
02.10.2023	22:18:20	system		Error   		2023/10/02 22:18:20 [error] 6610#0: *74800 [lua] sessionmgr.lua:262: redirectIfNotAuthorized(): Unauthorized request
02.10.2023	22:18:20	system		Error   		2023/10/02 22:18:20 [error] 6610#0: *74800 [lua] sessionmgr.lua:262: redirectIfNotAuthorized(): Unauthorized request
02.10.2023	22:18:20	system		Warning 		2023/10/02 22:18:20 [warn] 6610#0: *74800 [lua] session.lua:354: new(): new session for default user
02.10.2023	22:18:12	firewall		Warning 		[385736.568765] DROP wan in: IN=pppoe-wan OUT= MAC= src=79.124.62.86 DST=<MYIP> LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=11602 PROTO=TCP SPT=42797 DPT=63289 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
02.10.2023	22:18:09	lan		Info    		DHCPACK(br-lan) 192.168.1.74 <MYMACADDRESS>
02.10.2023	22:18:09	lan		Info    		DHCPREQUEST(br-lan) 192.168.1.74 <MYMACADDRESS>
02.10.2023	22:18:09	data		Notice  		Added new STA to monitor [<MYMACADDRESS>]
02.10.2023	22:18:09	system		Warning 		[385733.342837] br-lan: received packet on wl1 with own address as source address
02.10.2023	22:18:09	lan		Info    		Probing device <MYMACADDRESS> IP address 192.168.1.74 on interface br-lan
02.10.2023	22:18:09	data		Notice  		Deleting STA from monitor [<MYMACADDRESS>]

Date		Time		Category	Severity		Log Details
03.10.2023	00:09:02	system		Error   		Failed to send DHCPV6 message to ff02::1:2 (Permission denied)
03.10.2023	00:08:09	firewall		Warning 		[392333.103882] DROP wan in: IN=pppoe-wan OUT= MAC= src=185.224.128.17 DST=<MYIP> LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=53742 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
03.10.2023	00:07:53	system		Warning 		2023/10/03 00:07:53 [warn] 6610#0: *76295 [lua] session.lua:103: changeUser(): changing user to vodafone
03.10.2023	00:07:51	system		Warning 		2023/10/03 00:07:51 [warn] 6610#0: *76295 [lua] session.lua:354: new(): new session for default user
03.10.2023	00:07:21	firewall		Warning 		[392285.697322] DROP wan in: IN=pppoe-wan OUT= MAC= src=125.246.98.153 DST=<MYIP> LEN=36 TOS=0x00 PREC=0x00 TTL=54 ID=16233 DF PROTO=UDP SPT=10226 DPT=123 LEN=16 MARK=0x8000000
03.10.2023	00:06:52	system		Error   		Failed to send DHCPV6 message to ff02::1:2 (Permission denied)

Does any of this provide any clues?

[Ripshod]

Indeed, it answers your enquiry. The VPN is trying to use IPv6. Vodafone don't provide IPv6. 

[Cynric]

@Ripshod  I think we already mentioned that 😁

[jamesl1001]

VPN was actually off when these logs were taken.

[jamesl1001]

I've found these router settings. Should IPv6 be switched off here?

[Cynric]

@jamesl1001 We have to wait until the image has been moderated.

[jamesl1001]

I think you should be able to see it now?

(These are the default settings, so I'd be surprised if this is causing the drop outs, otherwise everyone would be having the same issue.)

[Cynric]

@jamesl1001 Images still hidden.

[Jayach]

The mods are never very quick at moderating images, If you want us to see them quicker you will need to use a 3rd party image sharing site.

[Cynric]

@jamesl1001  You can ignore the ones containing "DROP wan in: " because that's the firewall doing its job protecting you. If you're bored you can lookup the SRC ip-address and see where the intrusion is coming from. For example 125.246.98.153 is in South Korea and has been previously reported port scanning and brute force attacks.