Solid/Reliable Router for VPN - No Random Disconnects

JethroDJethroD
in Firebox - VPN Mobile User

Hi, I know it may be a bit of a long-shot, but hoping to get any recommendations for a home router that is known to allow or pass very reliable, solid VPN connections to a Firebox device at our office.

I am connecting to a Firebox M290 at our office from my home, which has Spectrum 1Gbps (40Mbps up) cable internet and just the default Spectrum router. I'm on a Macbook Pro M1 and OSX 13.7.x, and use the default Mac VPN client for connecting. Our office has a Mac Mini Server that I connect to, using AFP (but have tried SMB as well).

I have no idea if a robust, name-brand home router would make any difference in helping keep my VPN connection connected, but need to get a new one anyway, so figured I'd ask. Don't need crazy mesh WiFi or anything, just solid performance. I connect to router via 1Gb ethernet.

RANDOM DISCONNECTS
I worked with WatchGuard support agents for probably 8+ months back-and-forth trying to find a solution for my VPN connection that would randomly disconnect, but they were not able to come up with anything, so we gave up and I just deal with random disconnects. We have both IKEv2 and L2TP protocols enabled, which I connect to via the built-in Mac VPN client. When using IKEv2, which I prefer due to being split-tunnel, I get sudden, completely random disconnects throughout a workday (maybe 2-3 on a bad day). When using L2TP, the connection is more solid until I try to upload files to our server. What we were told about this was that the connection was getting saturated so the keep-alive or DPD messages would fail causing the disconnects. I only recently bumped my upload speed from 20Mbps to 40Mbps, but still not any more reliable. Hoping the eventual move to synchronous speeds may help, but that may be months/years away.

THANKS FOR ANY ADVICE!

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    I don't have any specific recommendations, but most home routers won't be able to do IKEv1/IKEv2 site-to-site (BOVPN) tunnels. You'll likely need to look in the prosumer space (stuff that goes in small offices.)

    Depending on your needs, a smaller WatchGuard might do what you're looking for. The sizing tool here can help pick a model based on your needs:
    https://www.watchguard.com/wgrd-resource-center/watchguard-appliance-sizing-tool

    -James Carson
    WatchGuard Customer Support

Sign In to comment.