Ask
Reply
Solution
10-01-2013 03:46 PM - last edited on 14-07-2014 05:29 PM by Jenny
This thread has been created to discuss and troubleshoot the version 3 Sure Signal when the light sequence is as follows:
Cause
This light sequence indicates the Sure Signal's not active and it has been unable to authenticate on the Vodafone network
Troubleshooting
Please restart your Sure Signal. If the symptoms continue please add the following details to this thread:
Traceroute command:
On a PC:
On a Mac:
This will help us get the quickest possible resolution for you.
Thanks
LeeH
02-12-2014 12:05 PM
02-12-2014 12:16 PM - last edited on 02-12-2014 07:25 PM by Gemma
Just to keep this in perspective: this is a finger-pointing exercise between Vodafone and BT. Although there are some unexplained issues with certain models of BT router, these would disappear if Vodafone took five minutes to configure their network properly. Vodafone still can't explain why they're blocking all ICMP packets on their firewall, including those fragmentation-needed packets which tell their server to adapt to a lower MTU. They claim this is for 'security' -
Why is this important? Simple. Vodafone's servers try to send a copy of a public certificate to the SureSignal as part of the initial negotiation. This certificate is larger than can be carried by a single packet, so is split into multiple smaller packets. Vodafone's servers assume that they can send full 1500-byte packets to the far end - which isn't the case for some types of connection (PPPoE included). What should happen is BT's BRAS (Broadband Remote Access Server) should send an ICMP fragmentation-required packet back to the Vodafone server, which will then re-send the packet with a smaller payload.
If this process can't take place, the larger packets are dropped on the floor, and never received by the SureSignal. Hence no secure channel can be established, and the SureSignal won't work.
BT has a mechanism to allow the MTU to be increased (baby jumbo frames) but not all routers support this.
Let's be clear: Vodafone could fix this problem for everyone with a one-line configuration change to their firewall. No need for customers to buy new routers, no need for customers to waste their time running through the pointless instructions provided by the tech staff on this forum. The fact that this issue has been going on for years now just goes to show how incompetent Vodafone actually is.
02-12-2014 01:40 PM
02-12-2014 07:15 PM
02-12-2014 07:29 PM - edited 02-12-2014 07:30 PM
Hi everyone,
We've recently edited a post in this thread as it breached our House Rules. Whilst we encourage conversation within the community, there are certain rules everyone must follow. This ensures the forum remains suitable for everyone, as well as being free from excess clutter.
The person whose post has been edited has been contacted privately.
If you're unfamiliar with the House Rules, please take a minute to view them here.
Thanks,
Gemma
02-12-2014 07:58 PM
Whilst the word in question is in everyday use in the British vernacular and is not considered to be offensive by most people, I do take the point, and I apologise.
However, we still need to recognise the extreme levels of frustration that Vodafone's customers are experiencing as a result of this issue. There are 92 pages of forum posts here about this issue alone, and not one of those posts actually offers a solution to the problem. Vodafone's copy-and-paste instructions for 'solving' the problem are utterly useless, and technically incorrect. They are designed to pass the buck back to users and waste their time.
Why is it that a so-called breach of forum rules makes Vodafone respond quickly, yet the Vodafone tech team have been unable to resolve this issue in 92 pages of posting? A small suggestion for the tech team: stop wasting your time policing forum posts and instead try to listen to the advice that your users have given to resolve the problem. It is clear that some of your customers understand a lot more about this issue than you do. Why do you consider your lack of attention to this problem acceptable?
02-12-2014 09:17 PM
03-12-2014 09:14 AM
Hi.
I hate to throw water on the fire, as both BT and Vodafone have been somewhat non suportive on this matter for some time, + personally, I have other gripes with both of them. But... And sorry to shout...
Vodafone's Sure Signal service DOES work with BT Infinity, BUT NOT IF YOU USE BT'S SUPPLIED DEFAULT HARDWARE! (The "Outreach" VDSL modem, and the BT Business Hub router.)
Again, sorry to shout, but to be fair, it does work, if you want it to.
The lame BT "Business Hub" is one problem (cant support more than one VPN passthrough in any way, or firewall rules based on external IP address) and the Infininty VDSL modem appears to be another (MTU limitation, perhaps by default, but, there is no documented way to get to it's admin portal, if it has such a thing...)
We replaced both of them in one hit with a single box, a Draytek Vigor 2860n+ VDSL capable router/firewall/security device. No doubt other similarly capable devices are available from other vendors.
"It just works" is the good news. The cost (retail) of some £200 is the bad news. BUT IT DOES WORK, and works very well.
The Draytek can also accept and re-assemble (I think) fragmented packet streams, so any hassle with mismatched MTU's elsewhere, are much less of a problem, if at all now.
The new box also now gives us a secure tunnel to our American HQ, lets multiple L2TP/PPtP type VPN's exist (incoming and outgoing) and can have firewall rules based on external IP addresses applied (the bigest failing BT's lame box.) We also now have a "Guest" LAN over Wifi (and wired with another re-purposed old router) for visitors, or other needs, keeping such traffic away from the main office resources.
But the best news, is that the VSS works, and very well too. In fact, when I.T. reset the router by mistake the other day, it took longer to re-establish a Skype conference call that they killed, than it took for the VSS to sort itself out, after the Vigor box had rebooted.
I see two issues.
Vodafone spewing out techno babble that means little, even when it might be vaguely correct, and sadly often it is not, plus not "listening" to the customers needs and requirements, after all who pays them?
BT who don't know their own hardware, as like others, we had conflicting advice from them over this (and other) issues.
Both, who seem to have the (understandable if misguided) policy of not helping the competition in any way, despite the luckless customer who PAYS them both for the services!
Then, there are ISP's such as Plus+Net (owned by BT afik) who are issuing US registered IP's to some UK located subscribers!
Feel free to get the media involved perhaps (but count your fingers first) but be aware that the VSS service CAN AND DOES WORK WELL (sorry to shout again) over BT's Infinity service, but only if the default BT supplied hardware is replaced with more capable kit.
Now... On BT's side. It could be semi intentional to hobble things like this, 'cos if everyone did the same trick, their back end systems would be getting hammered with the extra traffic, creating mayhem for all. With the roll out of Fibre based broadband, I doubt if the beckground bandwidth has been proportionally increased to cope with the possible effect if everyone used it, if used to the full.
There again, if a sizable propotion of all the landline telephone subscribers on any exchange all picked up their phones at the same time, said exchange would throw a hissy fit, to put it politely...
The same applies with the mobile phone systems. They both can have 1000's or millions of subscribers, but only support only a relatively small proportion of "active" connections at any one time. Probably better than when I worked for "The PO", but it'll still be a limitation.
Have fun y'all.
Dave Baxter.
(Not a Vodafone person, but Ex BT, back in the Post Office Telephones days...)
03-12-2014 07:45 PM - edited 03-12-2014 07:49 PM
Hi everyone,
I can appreciate some of the frustrations being posted by those unable to use our device in the plug and play way it's designed for.
As with any tech of this kind, we cannot guarantee 100% compatibility. This is why we state as such in Section 5 of the Ts&Cs for the device. There's also a 14 day cooling period on each one, so customers who have incompatible hardware/ISP packages can arrange a return.
Part of the licensing agreement we have to run the femto cell technology of Vodafone Sure Signal, includes being unable to fragment the initial exchange file below 1500MTU.
PPPOE is not supported by Sure Signal.
My team are here to help with general troubleshooting tips for those where the ISP/router isn't responsible for an outage. For queries where account access is needed, please use our Contact us options.
Thanks,
Ben
03-12-2014 08:33 PM
None of this explains why our sure signal has stopped working after a good year of operating with no issues. Nothing has been changed on our side and, to the best of my knowledge, nothing has changed on the BT router side either.