Blocked IP ranges

[jamie_w]

Hi,

We're a UK ISP who were recently assigned new IP ranges by RIPE and have noticed that customers on our new IP ranges are unable to use their Sure signal devices. This is presumably because our new IP's are being firewalled by yourselves. We have verified this by routing the same devices over our previous ranges, which enables them to connect fine.

If possible can you forward this range onto the relevent department or provide me with the details for somebody at Vodafone we can contact regarding this. 

The affected range is 31.205.0.0/16

Thanks,

Jamie

[gommog]

@chazzD

I was told the same thing 5 years ago by Vodafone support that our addresses were already on the whitelist, so unless you're doing the checks yourself i'm afraid i'll have to take that with a pinch of salt.  I'm a network administrator with 20 years experience of working in IT so i've already done the checks you mention, our speed test results are 44 Mbps upload and 42 Mbps download, we have a 50Mb leased line so that is pretty standard.

Our ping test came back with a result of B* with a 22ms response time to a server in Milton Keynes 50 miles away. Our primary external IPs are 5.148.142.18 and 5.148.6.34 which will be the IPs all sure signal traffic comes from.

The traceroutes return nothing as they won't find the endpoints (your servers) in the first place. If they're not going to ping then there is no way a route can be established and so a traceroute won't even start.

[Glitch]

Can the following IP address be checked that its on the whitelist please:

195.2.24.198 ?  

Its actually a Vodafdone (aka ex-C&W) AS1273 Direct Internet Access pipe.

Have confirmed the VSS is working correctly when connected to another ISP (VM) service, but when connected to the above IP address the VSS is failing to connect to the Vodafone servers, and just going into an endless config loop.

[DaveCD]

@gommog

I've double checked your IP addresses and can confirm these are UK based and on our whitelist.

So we can look at other possabilites, please let us know what light's you're seeing on the Sure Signal.

@Glitch

The IP address 195.2.24.198 wasn't on our whitelist, so I've requested this to be added.

[HBCChief]

Our Customer's VSS is connected to the Internet, I can see it trying DNS queries, and IPSec port 500 requests but fails to establish a connection.

We are unable to tracert to the suggested IPs.

Please can you confirm that IP addresses 176.52.214.177-176.52.214.190 are whitelisted?

Many Thanks

[gommog]

@DaveCD

The lights i'm seeing on the sure signals are red flashing light on left, amber network connection symbol lit and amber phone symbol lit. I've checked the setup guide and the explanation is "Your sure signal can't access the vodafone system"

As i've mentioned before our firewall is configured to allow all types of traffic to and from the sure signal units. I have 20 years experience in IT so i know what i'm going with firewalls and i see no traffic coming from the sure signals when doing a packet capture other than DNS requests to our DNS server for initial-ipsecrouter.vap.vodafone.co.uk

[gommog]

@DaveCD

Any chance of a response?

[Retired-Beau]

@HBCChief

I've checked these and they were'nt on the whitelist and I've requested these to be added.

@gommog

Can you take a look at our Sure Signal Troubleshooting thread, and then post back your results if you’re not directed to an existing thread?

[HBCChief]

@Beau

Great, thanks. I will check over the next couple of days.

[gommog]

@Beau

I'm not sure what you want me to do here, i've taken a look at that thread and none of the links describes my issue. I've been though every troubleshooting guide i could find on the sure signal and have explained exactly what is happening, i've even done a packet capture to see what traffic is being produced by the sure signal, something beyond your troubleshooting steps. Can you tell me what further information you're after?

I just keep getting passed from one vodafone support person/department after the other and no one seems to be giving me any answers.

[gommog]

@Beau

Can you tell me what other information you're after please? I'm willing to give you any information you ask for to get these working but please respond.