Hi All, new to the EE Community and hoping some of you clever cookies can bring your experience to bear.
I entered in to contract with EE for 4G WiFi in March of last year. Explained to the nice lass at EE that I was looking for a solution that would support my works VPN and some gaming. Terrestrial providers could only offer 3Mbs^-1, which wasn't going to cut it with 4 of us working from home in our new intergenerational living situation due to CVOVID. No problems I was told and duly signed up for EE's Mobile WiFi solution using their Huawei CPE Pro H112-372.
I have had no problems, but others in the family have; where the VPN grinds to a halt when using Teams. With my background in datacomms (30 years ago X25 FFR etc.) suspected that we may not have the signal density to support the throughput demands, and after speaking to EE Aerials Team invested further on an external antenna. The signal was now banging through. But no better with regards to the issue.
Then spoke to EE Technical department today, only to be told that EE Mobile WiFi does not support VPN or Gaming! WOW! Really! Why was this not made clear at the time of sale, especially when I explained my requirements? Stunned silence. We had an extended conversation regarding why VPN was not supported, and it turns out it was due to EE's use of Dynamic IP addressing within the ISP network however, I felt that I was not being told something; so back to the drawing board.
So here we come to the crux
I then attempted to go into the CPE admin page, only to find that all the advanced settings were locked down due to the implementation of CLAT Mode..... Back to Mr Google! Right, this is where I need some help in verifying my findings and interpretation and a possible solution: I've dragged on enough so bullet points for clarity. Am I correct in saying:
- CLAT mode is implemented when a Customer Side Network Address Translator is employed by the UE.
- In the case of EE this is caused by EE's IPv4 -> IPv6 transitional arrangements.
- EE has implemented IPv6 only with 464XLAT and a central CG-NAT64 to embed Native and DNS IPV4 addresses into an IPv6 HEX format.
- Consequently, I can do nothing with the router.
So at the risk of throwing good money after bad, what I'm looking at is a pre-established Peer to Peer VPN tunnel using a second VPN router outside the EE deliverable, (Something like VPN Express), where the VPN router is set up on a separate subnet. We then should be able to run our corporate VPN connections on the proprietary VPN outside the EE network. The only thing I need from EE's CPE Pro is to "Pass Thru" the Proprietory VPN. Not sure if the CPE Pro will do this automatically or am I going to be stumped again by the CLAT shutting down the advanced settings.
If any of you clever cookies can come up with any alternate solutions, I'm all ears. All comments will be gratefully received. My only other option is to go elsewhere, and although I'm slightly bent out of shape for not being told about this issue before I handed over my hard-earned pennies, I really don't want to go anywhere else since the QoS is good, as is the Customer Services, and that is hard to find these days.
Thanks all in advance.
Kindest Regards
Dave.
