|
|
ID Verified
Trusted
Lizard Networks
#include <std_disclaimer>
Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.
Just waiting, for Tito to finish up his discussion with John..
Honestly, is this stuff relevant or not, everything else works, from the IP Cams to the front gate, just not the 'sure'Signal?
http://help.vodafone.co.nz/app/answers/detail/a_id/12608/~/setting-up-more-complex-networks-with-sure-signal
Setting up more complex networks with Sure Signal
This article describes the connectivity required between the Vodafone Sure Signal and the Vodafone network.
IP address
The Vodafone Sure Signal requires a DHCP assigned IP address. This may be a private IP address but if so will need to go through a proxy or NAT function so that it is routeable to over the Internet, i.e. seen by the Vodafone network as a public IP address. This is normal for a standard DSL connection but may need to be ensured in Enterprise or more complicated Consumer IP setups.
VPN Configuration
All traffic between the Vodafone Sure Signal and the Vodafone network, with the exception of the DNS and synchronisation traffic described below, is carried within a VPN tunnel. The VPN is established by the Vodafone Sure Signal on initial setup and is successfully created if the @ LED on the Vodafone Sure Signal housing is lit – the LED flashes during VPN setup.
The following firewall rules will be required as a minimum to allow the VPN to be established between the Vodafone Sure Signal and the Vodafone network. These rules assume a stateful firewall, otherwise connections will be required in both directions. Some standard DSL routers may need changes to built in firewalls. Enterprise or more complicated Consumer IP setups may need wider changes which will depend on their environment and is not within the scope of Vodafone support.
Source
Destination
Protocol
Port
Description
Vodafone Sure Signal 124.6.205.17
124.6.205.18
124.6.205.19
124.6.205.41
124.6.205.42
124.6.205.42 IP 50 ESP UDP 4500 IPSEC NAT Traversal UDP 500 ISAKMP
Domain Name Resolution
In order to setup the VPN the Vodafone Sure Signal requires the ability to resolve IP addresses for hosts in the initial-ipsecrouter.vag.vodafone.co.nz domain.
These are specified on the Vodafone Public DNS servers. The DNS server used by the Vodafone Sure Signal must be DHCP assigned. Standard DSL connectivity includes DHCP assignment of DNS server.
Synchronisation
In order to function the Vodafone Sure Signal requires a synchronisation signal from the Vodafone network. This is carried outside the VPN tunnel and the following firewall rules will be required. These rules assume a stateful firewall, otherwise connections will be required in both directions. Some standard DSL routers may need changes to built in firewalls. Enterprise or more complicated Consumer IP setups may need wider changes which will depend on their environment and is not within the scope of Vodafone support.
etc etc etc etc ......Vodafone Sure Signal 124.6.205.25 UDP 123 NTP - for synchronisation 124.6.205.26 UDP 123 NTP - for synchronisation.'
|
|
|
