GlobalProtect VPN not working on T-Mobile Home Internet

[jambulo]

Over the past couple of weeks we have been getting more and more support tickets stating that our users can't connect to GlobalProtect VPN. The one common thread they have is they all have T-Mobile Home Internet. Has anyone else noticed this? Is there a fix or workaround? Thank you.

[bennetts]

The workaround that worked for me was to change the Maximum Transmission Unit (MTU) to 1300. Then I disconnected from the VPN and reconnected and everything started working again.

Here is a link that provides the steps to decrease the MTU on the Virtual Ethernet connection for Global Protect: https://community.t-mobile.com/troubleshooting-38/globalprotect-vpn-not-working-with-t-mobile-35992

[ThomasZetzsche]

We had similar issues in Switzerland with the Provider "sunrise". We also reduced the MTU size in the App Config of Global Protect. im currntly not 100% sure what the value is, if needed i can update the case here. But defently check the MTU size.

[Russell_Halsey]

A command to test connectivity using different MTU’s was suggested by Palo TAC:

ping google.com -f -l XXXX   (XXXX being a value between 1200 and 1400)

we were unable to get over 1300 and never reliably .

I was getting an IP address in 101.188.67.134 IP Location: Melbourne, Australia AU From Central Ohio

machine would not connect reliably to anyconnect or Global Protect  The only GP connection was to Korea or SouthEast US