DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Firmware 3.8.9.6 TLS issues on 2860n+

  • rusbrc
  • Topic Author
  • User
  • User
More
29 Nov 2019 20:20 #19 by rusbrc
Replied by rusbrc on topic Re: Firmware 3.8.9.6 TLS issues on 2860n+

admin3 wrote:
Thanks for trying that, it's good to see that it resolved your issues as well. I'll pass this information on to the support team so that the next firmware release can work with VDSL and larger MTU values.



I'm on ADSL - not enough capacity in the cabinet. I've got a support ticket open, but haven't had an update. Sent them the MTU workaround today.

Please Log in or Create an account to join the conversation.

  • bernagh
  • User
  • User
More
02 Dec 2019 23:05 #20 by bernagh
Replied by bernagh on topic Re: Firmware 3.8.9.6 TLS issues on 2860n+
Identical issue:
2860
Plus.Net VDSL
3.8.9.6 cannot access websites, other functions such as the home alarm signalling that uses TTMQ protocol seem unaffected.
Restored to 3.8.9.5 normal service restored.

Please Log in or Create an account to join the conversation.

  • rusbrc
  • Topic Author
  • User
  • User
More
03 Dec 2019 08:13 #21 by rusbrc
Replied by rusbrc on topic Re: Firmware 3.8.9.6 TLS issues on 2860n+

bernagh wrote:
Identical issue:
2860
Plus.Net VDSL
3.8.9.6 cannot access websites, other functions such as the home alarm signalling that uses TTMQ protocol seem unaffected.
Restored to 3.8.9.5 normal service restored.



Best workaround is to reduce MTU to 1492.

Please Log in or Create an account to join the conversation.

  • seasider64
  • User is blocked
  • User is blocked
More
03 Dec 2019 12:11 #22 by seasider64
Replied by seasider64 on topic Re: Firmware 3.8.9.6 TLS issues on 2860n+
I had exactly the same issue, regressed back to 3.8.9.5 cured the problem.
Going to try the update again overnight with the MTU set to 1492.

Please Log in or Create an account to join the conversation.

  • hornbyp
  • User
  • User
More
03 Dec 2019 13:44 #23 by hornbyp
Replied by hornbyp on topic Re: Firmware 3.8.9.6 TLS issues on 2860n+

rusbrc wrote:

hornbyp wrote:
VDSL



Thanks - well that's something different :)



Something else that was (and is) different was my MTU...

Mine was (and is) set to 1500. Oddly, although you can enter 1520 on the "WAN1 >> Internet Access" Page, the largest value you can set on the "Path MTU Discovery" page is 1500.

(I'm fairly sure I didn't set it to 1500; I reckon it was the default.)

If I try the Path Discovery option with one of your problem web sites (www.doorstore.co.uk aka 80.76.197.136), it suggests 1500.

Which is a long-winded way of saying, you might not need to go as low as 1492 :)

Please Log in or Create an account to join the conversation.

  • rusbrc
  • Topic Author
  • User
  • User
More
03 Dec 2019 22:31 #24 by rusbrc
Replied by rusbrc on topic Re: Firmware 3.8.9.6 TLS issues on 2860n+

hornbyp wrote:

rusbrc wrote:

hornbyp wrote:
VDSL



Thanks - well that's something different :)



Something else that was (and is) different was my MTU...

Mine was (and is) set to 1500. Oddly, although you can enter 1520 on the "WAN1 >> Internet Access" Page, the largest value you can set on the "Path MTU Discovery" page is 1500.

(I'm fairly sure I didn't set it to 1500; I reckon it was the default.)

If I try the Path Discovery option with one of your problem web sites (www.doorstore.co.uk aka 80.76.197.136), it suggests 1500.

Which is a long-winded way of saying, you might not need to go as low as 1492 :)



Aha! It didn't even occur to me that 1520 wasn't the default - must be getting rusty.

I've got beta firmware from support i'll try with 1520, before going back to more modest MTU values.

Please Log in or Create an account to join the conversation.