main_icn_My_Vodafone main_icn_Search main_icn_Chevron_right main_icn_Chevron_down main_icn_Close main_icn_Menu social-facebook social-google-plus social-linkedin social-twitter social-youtube main_icn_Community_or_Foundation main_icn_Location main_icn_Network_signal

Vodafone Sure Signal

Sure Signal v3 not working

Highlighted
2: Seeker

Hi, my question is similar to many asked before: Sure Signal, Flashing red bar, no light, orange, orange.

I am trying to get it working on our Oxford University network.  I registered it, but got the lights above.  I then took it home to my house and it functioned perfectly on my personal EE broadband - the phone connected to it and it made calls and was all fine.  I then brought it back to the office and plugged it in but got the same error (Flashing red bar, no light, orange, orange).

I have confirmed with my network team that we have no outgoing restrictions on our firewall.  Please help me to isolate the issue. 

 

Many thanks.

Darren.

 

The Sure Signal is connected on an internet-facing IP address.

Sure Signal Serial number: 42184631903

Internet speed: 87.5 Mbps

Tracert: 

 

tracert 212.183.133.177

Tracing route to 212.183.133.177 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms router-ict-178.ict.ox.ac.uk [163.1.178.254]
2 3 ms 1 ms 1 ms pmus-frodo-050106.frodo.ox.ac.uk [172.24.65.26]
3 1 ms <1 ms <1 ms groq2-pmus.odin.ox.ac.uk [172.31.4.242]
4 <1 ms <1 ms <1 ms ae11.oxforq-rbr1.ja.net [193.63.109.89]
5 <1 ms <1 ms <1 ms ae3.oxfoii-rbr1.ja.net [193.63.108.97]
6 1 ms 1 ms 1 ms ae2.readdy-rbr1.ja.net [193.63.108.93]
7 3 ms 3 ms 2 ms ae19.londpg-sbr2.ja.net [146.97.37.193]
8 3 ms 3 ms 3 ms ae29.londhx-sbr1.ja.net [146.97.33.1]
9 3 ms 3 ms 3 ms ae0.londhx-ban2.ja.net [146.97.35.198]
10 3 ms 4 ms 3 ms ldn-b3-link.telia.net [62.115.148.158]
11 3 ms 4 ms 3 ms vodafone-ic-325869-ldn-b4.c.telia.net [62.115.61.191]
12 3 ms 4 ms 5 ms ae0-xcr1.lsh.cw.net [195.2.24.110]
13 3 ms 3 ms 3 ms ae36-xcr1.lns.cw.net [195.2.25.170]
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

 

View more options
7 REPLIES 7
2: Seeker

Forgot IP:  163.1.178.99 (not NAT'd and not Proxy'd - direct internet via university JANET network)

View more options
Moderator

Hey @Daz_1234, that's certainly a strange one. You've got a connection but it looks like there's possibly no authentication happening. It's likely that this is a port forwarding issue. The Sure Signal should really open all the ports it needs automatically, however this depends on the router it’s connecting to. Your network administrator might be able to shed some light on this.

 

The ports might need to be manually opened. The info below is the only information I’ve got on the ports and IP address ranges that need to be allowed on the router for the Sure Signal to connect and authenticate.

 

I hope this is of help.

 

Ports to be opened for forwarding
• 8 (TCP & UDP)
• 50 (TCP & UDP)
• 53 (TCP & UDP)
• 67 (UDP)
• 68 (UDP)
• 123 (UDP)
• 500 (UDP)
• 1723 (TCP & UDP)
• 4500 (UDP)
• 33434 - 33445 (UDP)

IP addresses to be allowed on the router & firewall
• 183.133.177-179
• 183.133.181-182
• 183.131.128-191

 

Blair

View more options
2: Seeker

Hi @Blair,   thanks for the reply. 

 

Port forwarding is not necessary - the Sure Signal is not on a NAT'd address - it has been assigned an internet facing IP address directly on the unit (DHCP reservation via its MAC address).  Therefore the the IP Address 163.1.178.99 is not a router - it is the IP address of the Sure Signal itself.

Also, the network it is on has a perimeter firewall, but all outgoing ports are open.  

When this unit is plugged into a consumer ADSL, does it use PnP to open *incoming* ports?  if so which ones?

 

Kind regards, Darren.

 

View more options
2: Seeker

What are the lights doing on the Sure Signal?

 

I bought a v3 earlier in the year (from Vodafone website) and it wouldn't connect to the internet (red lights on front of sure signal), even though I had a Vodafone supplied on Vodafone connection. After heaps of troubleshooting with their support team, they eventually sent me a replacement, but not after they kept pushing the ideas that (1) I got it from a different country (nope, bought from Vodafone NZ), (2) it hadn't been configured for Vodafone FibreX (rubbish) because I didn't give them my account number when I ordered or (3) because I was showing on their map as being in good Vodafone signal coverage, the SureSignal was detecting signal and was refusing to start (my reception was terrible). 

 

Point is, they can be faulty. And they should be plug and play even with other ISPs - no opening required ideally. Do you know someone with a Vodafone connection that you can test it on? The trouble is, they won't believe you that it's faulty as long as you are testing on another ISP's connection

 


@Daz_1234 wrote:

Hi, my question is similar to many asked before: Sure Signal, Flashing red bar, no light, orange, orange.

I am trying to get it working on our Oxford University network.  I registered it, but got the lights above.  I then took it home to my house and it functioned perfectly on my personal EE broadband - the phone connected to it and it made calls and was all fine.  I then brought it back to the office and plugged it in but got the same error (Flashing red bar, no light, orange, orange).

I have confirmed with my network team that we have no outgoing restrictions on our firewall.  Please help me to isolate the issue. 

 

Many thanks.

Darren.

 

The Sure Signal is connected on an internet-facing IP address.

Sure Signal Serial number: 42184631903

Internet speed: 87.5 Mbps

Tracert: 

 

tracert 212.183.133.177

Tracing route to 212.183.133.177 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms router-ict-178.ict.ox.ac.uk [163.1.178.254]
2 3 ms 1 ms 1 ms pmus-frodo-050106.frodo.ox.ac.uk [172.24.65.26]
3 1 ms <1 ms <1 ms groq2-pmus.odin.ox.ac.uk [172.31.4.242]
4 <1 ms <1 ms <1 ms ae11.oxforq-rbr1.ja.net [193.63.109.89]
5 <1 ms <1 ms <1 ms ae3.oxfoii-rbr1.ja.net [193.63.108.97]
6 1 ms 1 ms 1 ms ae2.readdy-rbr1.ja.net [193.63.108.93]
7 3 ms 3 ms 2 ms ae19.londpg-sbr2.ja.net [146.97.37.193]
8 3 ms 3 ms 3 ms ae29.londhx-sbr1.ja.net [146.97.33.1]
9 3 ms 3 ms 3 ms ae0.londhx-ban2.ja.net [146.97.35.198]
10 3 ms 4 ms 3 ms ldn-b3-link.telia.net [62.115.148.158]
11 3 ms 4 ms 3 ms vodafone-ic-325869-ldn-b4.c.telia.net [62.115.61.191]
12 3 ms 4 ms 5 ms ae0-xcr1.lsh.cw.net [195.2.24.110]
13 3 ms 3 ms 3 ms ae36-xcr1.lns.cw.net [195.2.25.170]
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

 


Do not keep restarting the Sure Signal unit! The first time the unit can take about an hour or two to register

The help section on the Vodafone Website contains all the info you need

Try a factory reset, then leave overnight.
View more options
2: Seeker

Thanks for the reply @kingbily96,

The lights are red bar flashing, off, orange, orange.

The unit is not faulty as I took it home and it worked perfectly off of my home broadband.

 

I think there's a bug where the unit can't cope being directly on the Internet - i.e. I think it expects to be on a NAT'd network.  I think the bug is in the unit's networking itself, possible the internal VPN software and this preventing it from authenticating.

It could also be related to the unit sending fragmented packets, as we saw when checking the network traffic using wireshark.

Basically we don't know any more and really need a Vodafone expert in the networking of these things to help us.

 

Cheers, Darren.

View more options
Moderator

@Daz_1234 I've taken a closer look into your Sure Signal and can see everything is set up correctly from our end.

With the light sequence that you're seeing this does indicate an issue with the IP address. I've checked the one you've provided and this is on our whitelist so should be connecting.

I'd advise speaking with your Internet Service Provider (ISP) and depending on your IP address, you'll need to advise them one of the following:

  • With a static IP address, please let them know that you're trying to set up a VPN tunnel and that the IPsec is being blocked on an internal firewalled server within their network
  • With a dynamic IP address, please advise them that you're trying to set up a VPN tunnel and that the IPsec is being fragmented in transit

They'll then be able to help with setting this up for you fully.

View more options
2: Seeker

Hi @Natasha,

Thanks for your reply.  At Oxford University we are our own ISP as we own the direct links to the JANET backbone.

No normal traffic is being blocked, but I think focusing on the packet fragmentation is the right thing to do, as I suspect that fragmented packets are being dropped.

So I will ask our network team to allow (as in not drop) fragmented packets to the following IP Addresses (TCP/UDP).  Please let me know if this should be good enough:

212.183.133.177
212.183.133.178
212.183.133.179
212.183.131.128/26

212.183.133.181

212.183.133.182

 

Many thanks again. Regards, Darren.

View more options