Thanks all, we were able to get Spectrum to listen by escalating through their media channels. They confirmed a bad firmware on these routers and have rolled it back. We are safe, for now! Cheers, Chris On Tue, May 13, 2025 at 2:09 PM Rampley, Jim F <jim.rampley@charter.com> wrote:
Hey Chris,
Not sure if you saw it, but I reached out off list.
Jim
On 5/12/25, 7:41 PM, "Christopher Aloi via NANOG" <nanog@lists.nanog.org <mailto:nanog@lists.nanog.org>> wrote:
CAUTION: The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance.
Thanks Eric and Brendan. Yes, this is specifically related to when we put the rac2v1s in bridge mode and I bind one of the static public IP addresses to my router. If I captured packets on my router I can see GRE packets leaving my router destined for my data center, but I never see any of the return packets I send. They are being lost/dropped on the way back in. I am up to 30 of these now. What I can't grock is why they come in at a rate of ~5 every morning. If anyone has any contacts at Spectrum that might listen, or a workaround, please let me know!
On Mon, May 12, 2025 at 4:04 PM Eric C. Miller via NANOG < nanog@lists.nanog.org <mailto:nanog@lists.nanog.org>> wrote:
Sorry, no help from here per se, but I used to get into the same situation with AT&T Uverse routers. It seemed to be an issue with the built-in stateful firewall of the DSL router. I was able to get around it by having tunnels to multiple public IPs and rotating their usage with a script on our equipment. The problem seems to self-resolve after a reboot. Very frustrating when you pay for static IPs.
Good luck!
Eric ________________________________ From: Brendan Carlson via NANOG <nanog@lists.nanog.org <mailto: nanog@lists.nanog.org>> Sent: Monday, May 12, 2025 3:20 PM To: North American Network Operators Group <nanog@lists.nanog.org <mailto:nanog@lists.nanog.org>> Cc: Brendan Carlson <brendan@bcarlsonmedia.com <mailto: brendan@bcarlsonmedia.com>> Subject: Re: Spectrum & GRE
I've seen the same thing on those same models with them being in bridge mode specifically. They generally have issues with gre and l2tp tunnels.
On Mon, May 12, 2025 at 12:13 PM Christopher Aloi via NANOG < nanog@lists.nanog.org <mailto:nanog@lists.nanog.org>> wrote:
Hey All,
Hoping someone can lend a hand here. I have ~ 1k customers running GRE tunnels back to me for VoIP. Over the last three weeks these tunnels have started to break at a rate of 3-5 per day. We've narrowed it down to customers using specific Spectrum routers (rac2v1s and rac2v2s). I am still able to access the public IP but the tunnel drops and will not come back up. The fix has been to reconfigure as VPN or have the CPE router replaced with a rac2v1k. I have been unable to get anyone to listen to me at Spectrum as these accounts are owned by the customer and I can't prove a systemic issue. I have a list of accounts that have been impacted. Has anyone else encountered this? Any contacts at Spectrum that might listen to me? I am fearing all of these tunnels will go down at some point.
Thanks,
Chris _______________________________________________ NANOG mailing list
https://lists.nanog.org/archives/list/nanog@lists.nanog.org <mailto: nanog@lists.nanog.org>/message/Q344UTT7EK7AGJ3YY7OHJZZ7UBPZI63H/
_______________________________________________ NANOG mailing list
https://lists.nanog.org/archives/list/nanog@lists.nanog.org <mailto: nanog@lists.nanog.org>/message/727V6TQH3LZ5M6XPFMWZUR52JEJ4YLB5/ _______________________________________________ NANOG mailing list
https://lists.nanog.org/archives/list/nanog@lists.nanog.org <mailto: nanog@lists.nanog.org>/message/Z7Z4YWCI4MKTOOXOLIYSJTVWNVGMKAE6/
NANOG mailing list https://lists.nanog.org/archives/list/nanog@lists.nanog.org <mailto: nanog@lists.nanog.org>/message/FHFYKLHGVYR7ZLTQ6GG7G3VAH4WQJMF5/
The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.