Vodafone Sure Signal

[JesseMoore82]

Chaps,

Can you add UPNP into the next release of Firmware for the SureSignal boxes. So that the box can request port forwarding rules on customer routers.

Save a lot of time and effort. At least if UPNP is not turned on, on most (If not all) routers it's pretty easy to find the feature and turn it on.

[Nabs · Accepted solution]

The Sure Signal already supports UPnP i believe.

[chrise]

The vast majority of routers don't need any port-forwarding setup.  This is because they allow all outbound connections by default, and the SS only needs to make outbound connections.

I don't know why Voda insist on confusing people with all this port forwarding gubbins - when hardly anyone needs it...

[Digicom]

I also have never used any port-forwarding setup ever with suresignal and have found in most routers UPNP is enabled anyway

[JesseMoore82]

In order for IPsec to work through a NAT, the following protocols need to be allowed through the NAT interface(s), e.g. the LAN router:

• Internet Key Exchange (IKE) - User Datagram Protocol (UDP) port 500
• Encapsulating Security Payload (ESP) - IP protocol number 50
• Authentication Header (AH) - IP protocol number 51

or, in case of NAT-T:

• IKE - UDP port 500
• IPsec NAT-T - UDP port 4500

Often this is accomplished on home routers by enabling "IPsec Passthrough".

In Windows XP, NAT-T is enabled by default, but in XP with SP2, has been disabled by default for the case when the VPN server is also behind a NAT device, because of a rare and controversial security issue.[1] IPsec NAT-T patches are also available for Windows 2000, Windows NT and Windows 98.

One usage of NAT-T and IPsec is to enable opportunistic encryption between systems. NAT-T allows systems behind NATs to request and establish secure connections on demand.

Source: Wikipedia

[Digicom]

Reason you may need it is that you did say earlier Your router is a cheap and nasty Dlink DIR-614

[JesseMoore82]

My router is not running stock firmware

ww.dd-wrt.com

They where free with Virgin Media, so when I moved after 12 months I flashed it with DD-WRT and stuck my BE Unlimited supplier router in Bridge Mode (So it plays dumb modem)..

Fantastic capabilities.

In any case I've had to setup 10 or so routers for friends/contact's that use SureSignal. It's hit and miss depending on Router Make/Model/Revision/Firmware.

[Digicom]

ive set up plenty ov ss all on totally diffrent makes n models ov routers and not 1 required me to enable UPNP or any port forward

[JesseMoore82]

@Digicom,

I might be worth us and the eforum creating an unoffical "verified list" of routers that work with the units out of the box?

@Tom what do you think?

[Digicom]

Problem is you have to take into account how every user has there pc set up,

diff isps have diff configs,

also firmware versions can cause problems aswell

[chrise]

---

JesseMoore82 wrote:

In order for IPsec to work through a NAT, the following protocols need to be allowed through the NAT interface(s), e.g. the LAN router:

[snip]

Source: Wikipedia

---

Yep - and the vast majority of routers allow this traffic by default.