Ask
Reply
Solution
10-01-2013 03:46 PM - last edited on 14-07-2014 05:29 PM by Jenny
This thread has been created to discuss and troubleshoot the version 3 Sure Signal when the light sequence is as follows:
Cause
This light sequence indicates the Sure Signal's not active and it has been unable to authenticate on the Vodafone network
Troubleshooting
Please restart your Sure Signal. If the symptoms continue please add the following details to this thread:
Traceroute command:
On a PC:
On a Mac:
This will help us get the quickest possible resolution for you.
Thanks
LeeH
27-10-2014 10:41 AM
Mine still dead after many reboots and three days of trying to get support from Vodafone. Finally after 30 minutes on hold yesterday Vodafone support say that my broadband provider 'must have changed something their end'. Suresignal is the ONLY reason I have 4 phones with Vodafone, but if it is unreliable and comes with no customer service, what's the point?
27-10-2014 08:19 AM
Hi,
Experiencing problems with Sure Signal last days.
http://www.speedtest.net/result/3862355208.png
http://www.pingtest.net/result/109293205.png
Your IP Address is 86.136.145.230
Sure Signal Serial 42141202525
Traceroute has started…
traceroute to 212.183.133.177 (212.183.133.177), 64 hops max, 72 byte packets
1 192.168.11.1 (192.168.11.1) 0.808 ms 0.681 ms 0.831 ms
2 217.32.147.0 (217.32.147.0) 13.709 ms 13.287 ms 13.261 ms
3 217.32.147.46 (217.32.147.46) 14.899 ms 14.106 ms 14.036 ms
4 213.120.176.26 (213.120.176.26) 26.876 ms 15.651 ms 15.764 ms
5 217.41.168.203 (217.41.168.203) 14.996 ms 15.374 ms 14.945 ms
6 217.41.168.109 (217.41.168.109) 15.985 ms 16.639 ms 15.509 ms
7 acc2-10gige-0-0-0-4.l-far.21cn-ipp.bt.net (109.159.249.194) 15.476 ms 15.549 ms 14.917 ms
8 core3-te0-10-0-21.faraday.ukcore.bt.net (109.159.249.141) 15.369 ms 15.449 ms 17.236 ms
9 host213-121-193-97.ukcore.bt.net (213.121.193.97) 16.238 ms 15.605 ms 15.655 ms
10 lndgw2.arcor-ip.net (195.66.224.124) 16.990 ms 17.080 ms 19.874 ms
11 85.205.0.93 (85.205.0.93) 17.327 ms 17.216 ms 17.262 ms
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
31 * * *
32 * * *
33 * * *
34 * * *
35 * * *
36 * * *
37 * * *
38 * * *
27-10-2014 09:03 AM
Suresignal not working again.
I'm just gettting the In use light solid organge and flashing power.
I seem to have issues every time and it takes me a while plugging and unplugging, resetting suresignal and hub and usually eventually works, but not this time.
I'm on BT infinity latest hub.
This is really tedious. I was very happy to have at last got it working, but it just doesn't stay that way. As soon as unplugged, when plug in again doesn't work!
Please advise what to do as really, really annoying!!!!!
Before you start advising me to open ports and assign static IP addresses and port clamping to be on....all done.
Cheers
Iain
27-10-2014 11:04 AM
Hi,
My SureSignal doesn't appear to want to connect. Results from the tests requested below:
Speed test results:
Ping 98ms
Download 3.94Mbps
Upload 0.41Mbps
Ping test results:
Packet loss: 0%
Ping: 72ms
Jitter: 9ms
External IP Address:
91.125.185.116
Sure Signal serial number:
40134613237
traceroute results:
traceroute to 212.183.133.177 (212.183.133.177), 64 hops max, 52 byte packets
1 dsldevice.lan (192.168.1.254) 82.234 ms 94.979 ms 99.949 ms
2 lo0-central10.ptn-ag04.plus.net (195.166.128.193) 327.398 ms 229.163 ms 368.779 ms
3 link-b-central10.ptn-gw02.plus.net (212.159.2.142) 345.248 ms 186.854 ms 364.456 ms
4 xe-8-2-0.ptw-cr02.plus.net (212.159.0.118) 420.480 ms 469.089 ms 487.780 ms
5 ae2.ptw-cr01.plus.net (195.166.129.4) 513.961 ms 591.569 ms 577.826 ms
6 ldngw1.arcor-ip.net (195.66.224.209) 484.939 ms 501.103 ms 532.085 ms
7 85.205.0.93 (85.205.0.93) 545.581 ms 565.755 ms 589.497 ms
8 * * *
9 * * *
10 * * *
27-10-2014 02:41 PM
Hi everyone,
@djctec – So we can access your account, please get in touch here.
@MarkOne – Please test your Sure Signal at a different location.
If it’s still the same, let us know what light sequence you’re seeing.
@Dodge_Kev – Your Sure Signal hasn’t made any contact with the network since you’ve re registered it.
Please test a different Ethernet cable and that the following ports are open:
Ports to be opened for forwarding
IP addresses to be allowed on the router & firewall
Once the above steps have been followed please perform a reset:
@RoseAdams – Thanks for the update.
@Arcan – Everything you’ve posted is ok.
Your Sure Signal hasn’t made contact with the network since 24 October at 7.56am.
If you’ve added or removed any new members recently, please see my post above for how to perform a reset.
@bobholwill – Please check your ports are open (see my post above to user Dodge_Kev for how to do this).
If it’s still not working, you’ll need to speak with your ISP.
@Iainsax – If your ports are matching above, please test your Sure Signal at a different location.
@jwpercival – Your Tracer route is showing high latency.
We’re typically looking for a number no higher than 300ms and you’ll see yours are higher than this.
Please speak to your Internet Service Provider.
Thanks,
Gemma
29-10-2014 09:22 AM
Gemma:
The addresses you show, are WRONG. (again.)
You show...
That should be shown as three address ranges :-
Start/first to End/last
212.183.133.177 to 212.183.133.179
212.183.133.181 to 212.183.133.182
212.183.131.128 to 212.183.131.191
Yet again, you left the most significant octet (212) off the addresses. (It is as if you do not want anyone to be able to use these things, by giving out misleading or plain wrong information.)
All the users need to do, is ensure those address ranges are allowed to have all traffic routed to the VSS, that it itself is assigned a fixed IP address on the users LAN.
Sadly, not all "consumer" (or even some so called "business") routers are able to do that, "routing by source address" feature, they can only route by traffic type, and that will often break other services the user may have, especially in a business environment. In which case, a replacement router will be needed. Or, if the existing router supports it (again, not all do) enable support for "NAT Traversal". (That is not the same as UPnP, that as far as we can tell, the Sure Signal devices do not use anyway. Plus, it will be disabled in many corporate environments, with no option to enable it as it is regarded as a security risk in such environments. NAT Traversal is also sometimes blocked, for much the same reasons.)
There is also the issue you (Vodafone) seem to ignore. With some ISP's services (BT Infininty for one) it is often needed to alter the users routers MTU value, to prevent packet fragmentation, else none of the above will ever make it work. That is not helped it seems by your (Vodafones) aparrent inability to talk with other major ISP's (BT for one) to sort that issue out, or adjust your server settings to auto-negotiate what is needed on a per-user basis. It should not be needed in 2014 (soon 2015) for "users" to have to mess with this stuff at all, just to allow these consumer grade things to be able to work, so you (Vodafone) can make money charging for calls made and data usage.
Remember, we PAY you for these things and the service, therefore you work for us!
Best Regards.
Dave Baxter.
(Does anyone at Vodafone ever read all the way to the end?)
(I still have our company VSS "parked" at home, working well via a Netgear DGN1000 router, keeping its account alive, while our corporate IT support people drag their feet over this. Another lot who don't seem to undersand the "they work for us" bit.)
>><<
29-10-2014 09:54 AM
arukDave, is it not possible to make the first IP address range 212.183.133.177 to 212.183.133.182 ?
It's just .180 that is 'missing' which I am pretty sure is still one of Vodafone's servers, and would make the creation/managing rules just a tad easier?
Vodafone are probably not talking to BT because they're 'enemies' what with Vodafone's OneNet and BT's SmartTalk App to be used for 'expensive' mobile calls …
Gosh, making the VSS plug-and-play … now there's a thought! And surely if Vodafone are worried about where in the world these devices are being used, it can't be beyond their capabilities to build a GPS locator into the box? That way if someone used it in another country, Vodafone could charge the appropriate (possibly discounted) rates?
Regards
Stewart Armstrong
29-10-2014 11:35 AM
jabwky: (Stuart)
I don't see why not, as you say, it's "unlikley" that .180 is not one of Vodafone's addresses, but it's not impossible.
Interestingly, it (.180) also does not reply to a "Ping", just like .177, .178, .179 & .181
However: .182 does respond pings! (Until someone at Vodafone reads this and tweaks something perhaps, that would be telling!)
If I do a tracert on the above addresses, then I usualy see the last address/node that responds, as 85.205.0.86, that according to RIPE, is under Vodafone's control, but is located in Spain! Past that, no response to tracert. (And they want us to only use these things within the UK, so why route the traffic via Spain?)
Anyway. I guess 212.183.133.180 is indeed part of Vodafones empire, but what its purpose is, or if it is even part of the Sure Signal support server farm network I do not know, nor have a way to find out. Unless someone from Vodafone comes on here and says it is, or is not.
Your call Sir.
As to adding a GPS locator to the SS. That's one way, but GPS's dont usually work well, if at all "inside" a building.
However, as internally the SS's obviously have a cellular modem and radio, they could perhaps "sniff" the RF environment, scan arround and find out themselves what terretory they are in based on what other cellular services they might find. Assuming a signal to examine can be found of course! After all, most of these are used to fill in black holes where "they" decide not to provide coverage, or as we are, located inside a tin building.
Trying to geolocate by IP address, is proably not too reliable these days what with all the IP4 address space trading going on, but using the two methods could be better than it is now. But, that would almost certainly need a major firmware update, and maybe to parts of the SS that mught not currently be remotely upgradable (The cellular radio subsystem itself perhaps.) So, major investment in time to develop and test such things, and that costs money.
These things are not made by Vodafone, they are created by a third party (Alcatel Lucent is mentioned on our box) on Vodafone's behalf, plus some of the software is created by yet another entitiy, who I forget, but was identified a little while back in this thread.
Oh, there is alegedly "Open Souce" software contained in them, according to the leaflet in the box, but Vodafone appears to be breaching the "Open Source" licence it quotes, as it is not currently possible to obtain a copy of that "Open Source" software, due to no contact link shown in the copy the GPL/LGPL licence shipped in the box.
In any case, it is probably just the embedded Linux operating system, that the Sure Signal software run's on. I would expect the custom Sure Signal software itself, to be if not totally, but partly closed source.
As it would appear (someone else confirmed it) that Linux is involved. Lets hope they've patched "bash" now, to fix the "Shellshock" problem, discovered and made public a little while ago.
That sort of thing is the reason not to just use blind port forwarding to the device, allowing such traffic from any external address (not just Vodafone's servers) to reach the SureSignal. The best practice is probably to use a combination of port forwarding based on protocol/port AND external IP address. Sadly again, many consumer and so called business routers canot do such things.
The highly regarded alternative router firmware "Tomato" that can be loaded onto older Linksys (and other "Broadcom" based routers) is one that can do such things by the way.
See:- http://en.wikipedia.org/wiki/Tomato_%28firmware%29
(I have not yet had the chance to deploy such a thing, so I cannot say in truth that I "know" that will work, but from what I've learnt, it "should do".)
Sadly, I found DDWRT (another alternative router firmware package) does not.
My Netgear routers at home, can also use external address and destination port to filter/route traffic. The BT (so called) "Business" hub, is particularly lame in this respect.
And then. There is still the issue of apparently mismatched MTU values, between Vodafone's network and some other ISP's. That along with Vodafone's blanket blocking of all ICMP packets (not just "pings") breaks the systems ability to detect and prevent fragmented packets, especially when negotiating the setup of the VPN that the SS establishes between iteself and Vodafone.
I've attached again, a pdf showing what I did on my Netgear DGN1000 router, that works 100% with the SS.
However, I have since found, that even without any such application of rules, the SS is able to sort things out for itself. 99.999% certain by using NAT Traversal methods, as I have UPnP firmly disabled at home.
http://en.wikipedia.org/wiki/NAT_traversal One starting place to read up on that.
Note though, my home ISP is "Demon Internet". Now owned by... Vodafone! So, I guess it's easy for it to join the needed dots for the service to "just work".
Best Regards Sir.
Dave Baxter.
29-10-2014 12:29 PM
I've also 'lodged' my VSS at home—BT Infinity Home but with a HH3. I de-registered the VSS two weeks ago, but have just re-registered it today, and after 2 hours and 12 minutes of flashing lights and many combinations/sequences I now have a working VSS. Port clamping is on.
My broadband at home was a Business Broadband connection as I needed an external IP address until recently, but last week it was changed to a BT Infinty Home connection. When it was a business connection, same router, same router configuration (i.e. port clamping on), it came up with the light sequence Power - flashing; Internet - off; In Service; orange, In Use; orange no matter how many times I reset it, registered/deregistered the VSS etc. Who knows what Vodafone might have done in the interim that might have made it work.
I now have to take it back to the work network (BT Business Broadband with fixed IP address) at a different location to see if it works there. At work, the BT hub has been removed and replaced with a Kerio Control appliance which is configurable for opening ports, allowing IP address ranges and so forth. As an aside, I had to configure an even more complex set of ports/IP addresses to allow a Pitney Bowes franking machine to access the Pitney Bowes servers, so I am confident what I have configured for the VSS on the router will work.
It won't be until early next week that I get to check the VSS at our work network, but I wonder whether the BT Business Broadband connections are managed differently to the BT Home Broadband connections … ?
Stewart
28-10-2014 08:25 AM
I have tried powering off, and tried resetting for 30 secs