T-Mobile - iOS 10.2 WiFi works, LTE "Network is unreachable"

[jasn]

I'm having a similar issue, (previously posted here but thread is locked), in that my iPhone running iOS 10.2, and the OpenVPN 1.0.7 build 199 client, will connect to my provider's VPN servers when using WiFi, but not when using LTE, producing the "Network is unreachable" error, previously mentioned. (I have the latest carrier settings, can't initiate an update, and they're not editable as far as I can tell). Thinking that this may be IPv6 related, I then tried adding the following lines to the ovpn configuration file I used. First;

Code: Select all

redirect-gateway ipv6

and then removing that line and adding;

Code: Select all

push-remove tun-ipv6
push-remove ifconfig-ipv6
push-remove route-ipv6

Neither had any effect on this issue.

OpenVPN Log file;

Code: Select all

2017-01-03 15:13:56 ----- OpenVPN Start -----
OpenVPN core 3.0.11 ios arm64 64-bit built on Apr 15 2016 14:13:50
2017-01-03 15:13:56 Frame=512/2048/512 mssfix-ctrl=1250
2017-01-03 15:13:56 UNUSED OPTIONS
4 [nobind] 
5 [persist-key] 
6 [persist-tun] 
7 [mute-replay-warnings] 
11 [verb] [3] 
15 [tls-cipher] [...] 

2017-01-03 15:13:56 EVENT: RESOLVE
2017-01-03 15:13:56 Contacting XXX.XXX.XXX.XXX:443 via TCP
2017-01-03 15:13:56 EVENT: WAIT
2017-01-03 15:13:56 SetTunnelSocket returned 1
2017-01-03 15:13:56 Transport Error: TCP connect error on 'XXX.XXX.XXX.XXX:443' (XXX.XXX.XXX.XXX:443): Network is unreachable
2017-01-03 15:13:56 Client terminated, restarting in 2...
2017-01-03 15:13:56 NET WiFi:NotReachable/WR tc-----
2017-01-03 15:13:56 NET Internet:ReachableViaWWAN/WR t------
2017-01-03 15:13:58 EVENT: RECONNECTING
2017-01-03 15:13:58 Contacting XXX.XXX.XXX.XXX:443 via TCP
2017-01-03 15:13:58 EVENT: WAIT
2017-01-03 15:13:58 SetTunnelSocket returned 1
2017-01-03 15:13:58 Transport Error: TCP connect error on 'XXX.XXX.XXX.XXX:443' (XXX.XXX.XXX.XXX:443): Network is unreachable
2017-01-03 15:13:58 Client terminated, restarting in 2...
2017-01-03 15:14:00 EVENT: RECONNECTING
2017-01-03 15:14:00 Contacting XXX.XXX.XXX.XXX:443 via TCP
2017-01-03 15:14:00 EVENT: WAIT
2017-01-03 15:14:00 SetTunnelSocket returned 1
2017-01-03 15:14:00 Transport Error: TCP connect error on 'XXX.XXX.XXX.XXX:443' (XXX.XXX.XXX.XXX:443): Network is unreachable
2017-01-03 15:14:00 Client terminated, restarting in 2...
2017-01-03 15:14:02 EVENT: RECONNECTING
2017-01-03 15:14:02 Contacting XXX.XXX.XXX.XXX:443 via TCP
2017-01-03 15:14:02 EVENT: WAIT
2017-01-03 15:14:02 SetTunnelSocket returned 1
2017-01-03 15:14:02 Transport Error: TCP connect error on 'XXX.XXX.XXX.XXX:443' (XXX.XXX.XXX.XXX:443): Network is unreachable
2017-01-03 15:14:02 Client terminated, restarting in 2...
2017-01-03 15:14:04 EVENT: RECONNECTING
2017-01-03 15:14:04 Contacting XXX.XXX.XXX.XXX:443 via TCP
2017-01-03 15:14:04 EVENT: WAIT
2017-01-03 15:14:04 SetTunnelSocket returned 1
2017-01-03 15:14:04 Transport Error: TCP connect error on 'XXX.XXX.XXX.XXX:443' (XXX.XXX.XXX.XXX:443): Network is unreachable
2017-01-03 15:14:04 Client terminated, restarting in 2...

[TinCanTech]

I'm having a similar issue, (previously posted here but thread is locked)

It is much easier to start your own thread and add a link to the other thread, that way things do not get so confused.

Please see:
HOWTO: Request Help !

[jasn]

Forgot add link to prior thread and can't edit my OP. Sentence should have read; (previously posted here but thread is locked)...

[TinCanTech]

If the problem you are having is the same as that link, the OP posted a solution:
https://www.cnet.com/news/t-mobile-warns-dont-update-your-iphone-to-ios-10/

If not then please provide the necessary details.

[jasn]

That CNET article is not a link to a solution. Neither are the links in the article. However, I did post a response to what the OP of that thread stated was their actual solution;

I just got it working. Turns out it was the bad T-Mobile carrier settings.

and to that, I posted my response in my OP in this thread;

...(I have the latest carrier settings, can't initiate an update, and they're not editable as far as I can tell)

However, since the OP of the referenced thread posted the following, as the final message to that thread;

Seems to have cleared up. But I'm on another network than T-Mobile at the moment.

It's not clear that any solution was posted to that thread.

If any TMUS subscribers can provide some insight or advice, I would appreciate it.

[TinCanTech]

OpenVPN 1.0.7 build 199 client, will connect to my provider's VPN servers when using WiFi, but not when using LTE

Have you asked your VPN Provider's for an answer or T-Mobile .. ?

[wolfteeth]

I am experiencing the same issue. Using T-mobile with iOS 10.2, immediately after the update, I could no longer connect using OpenVPN Connect over cellular service. It works fine on WiFi but that's not really acceptable since I move back and forth between the two.

I contacted my VPN provider and they indicated T-mobile is forcing IPv6 for all connections now. My VPN provider is IPv4 only for the time being, although I'm able to connect fine using their custom (IPSec) app. So it's not like the VPN gateway is impossible to reach via T-mobile.

I'd like to use OpenVPN again - it was always much faster than using my VPN provider's custom app.

[wolfteeth]

I should add: While traveling I ended up on TELUS and found OpenVPN Connect worked. So I think it is the carrier settings for T-mobile that cause OpenVPN to stop playing nice with my VPN.

The carrier settings can't be edited on iOS anymore, unfortunately. My VPN provider suggested this first thing.

[jasn]

Thanks wolfteeth! I appreciate the feedback.

In fact before I posted this issue here. I wondered if this was an issue with IPv6, given the amount of posts on the subject both here and over at the T-Mobile forums. I did try the two IPv6 workarounds I found online, as I described above, they just didn't change anything as far as this error condition is concerned. I had also contacted my VPN provider prior to posting here, but they weren't aware of it being an issue.

If I find a ovpn client configuration setting that does work, I'll post back to the thread. In the meantime if anyone has a suggestion for something I can try, please feel free to add to the thread.

[superikey]

I am having this same problem with my tmobile iphone 6s running ios 10.2
its inhibiting my ability to use MS L2TP VPN, Avaya One-X App, and other apps as well.
anyone find a way around this issue?