I have been experiencing some problemas lately, customer who have a router installed at home, experience problmes while navigating, some images do not load on fb, new tabs on explorer show “page not found”, newspapers do not load, and apple products are not able to surf the app store.
Again, this problems arise when customer have a router at home.
I used to have a rb2011uias, and thought it was a resource problem, and therefore moved to a rb11002xAh, and the issue stilll ocurrs. Have configured DNS back and forward, and still the same.
from my personal experience what i can tell you is if you are doing NAT 3 times or more then this problem will occur like
ISP>>your router(NAT)>>Customer CPE(Nat)>>customer Router(Nat)>>customer pc
keep the CPE or customer router in bridge mode and it should work fine
They are all connected via Ubiquiti Nanolocos M5 & Ubiquiti Panels. Have tried changing MTU to 1440, 1460, did not work.
At the moment, I writing from the office, which is connected to a TP-Link 740n, the cpe is bridged. Therefore it looks like this:
ISP>>your router(NAT)>>Customer CPE(bridged)>>customer Router(Nat)>>customer pc. Nat 2 times.
Test using a ping with a 1500 byte packet size and the do-not-fragment bit set. Go down in packet size 4 bytes at a time until you find the point it starts working.
I’ve done this, please let me know if its correct:
C:>ping 8.8.8.8 -l 1472 -f
Pinging 8.8.8.8 with 1472 bytes of data:
Reply from 8.8.8.8: bytes=1472 time=17ms TTL=56
Reply from 8.8.8.8: bytes=1472 time=17ms TTL=56
Reply from 8.8.8.8: bytes=1472 time=17ms TTL=56
Reply from 8.8.8.8: bytes=1472 time=30ms TTL=56
Ping statistics for 8.8.8.8:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 17ms, Maximum = 30ms, Average = 20ms
So, should I change the MTU of my home router to 1472? How can I change this for all customers? MSS?
Pinging 8.8.8.8 with 1473 bytes of data:
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Ping statistics for 8.8.8.8:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
I did at the time move earth to find a solution, I did not succed. At the time, I could have in my hands two tplink routers, different models, exactly same config. and one would work and the other wouldnt.
Since then, what we do, we put the home router (whatever brand it is) as a bridge and we leave the CPE as a router. That works just fine.
If the customer then wants to forward ports, etc., we do the other way… we put the CPE as bridge and we assign a public ip to the router.