Bt Home Hub V2 & Vodafone Access Gateway

Hi Guys,

I've been sent an email by the tech guys at Vodafone since a firmware update a few days ago on my BT Home Hub V2 has stopped the Vodafone Access Gateway working.

Basically I need some help with what figures to put where in the Hub manager.....

Text below from Vodafone.

Vodafone Access Gateway

This document describes the connectivity required between the Vodafone Access Gateway and the Vodafone network.

IP address

The Vodafone Access Gateway requires a DHCP assigned IP address. This may be a private IP address but if so will need to go through a proxy or NAT function so that it is routeable to over the Internet, i.e. seen by the Vodafone network as a public IP address. This is normal for a standard DSL connection but may need to be ensured in Enterprise or more complicated Consumer IP setups.

VPN Configuration

All traffic between the Vodafone Access Gateway and the Vodafone network, with the exception of the DNS and synchronisation traffic described below, is carried within a VPN tunnel. The VPN is established by the Vodafone Access Gateway on initial setup and is successfully created if the LED on the Vodafone Access Gateway housing is lit � the LED flashes during VPN setup.

The following firewall rules will be required as a minimum to allow the VPN to be established between the Vodafone Access Gateway and the Vodafone network. These rules assume a stateful firewall, otherwise connections will be required in both directions. Some standard DSL routers may need changes to built in firewalls. Enterprise or more complicated Consumer IP setups may need wider changes which will depend on their environment and is not within the scope of Vodafone support.

Source Destination Protocol Port Description
Vodafone Access Gateway 212.183.133.177 IP 50 ESP
UDP 4500 IPSEC NAT Traversal
UDP 500 ISAKMP

Domain Name Resolution

In order to setup the VPN the Vodafone Access Gateway requires the ability to resolve IP addresses for hosts in the vap.vodafone.co.uk domain.

These are specified on the Vodafone Public DNS servers. The DNS server used by the Vodafone Access Gateway must be DHCP assigned. Standard DSL connectivity includes DHCP assignment of DNS server.

Synchronisation

In order to function the Vodafone Access Gateway requires a synchronisation signal from the Vodafone network. This is carried outside the VPN tunnel and the following firewall rules will be required. These rules assume a stateful firewall, otherwise connections will be required in both directions. Some standard DSL routers may need changes to built in firewalls. Enterprise or more complicated Consumer IP setups may need wider changes which will depend on their environment and is not within the scope of Vodafone support.

Source Destination Protocol Port Description
Vodafone Access Gateway 212.183.133.181 UDP 123 NTP - for synchronisation
212.183.133.182 UDP 123 NTP � for synchronisation



Any help much appreciated.

As a first step, try putting the Vodafone box into the DMZ and see if it works then.

Hi Phil,

DMZ hasn't fixed the problem?

Appreciate the thought, any other suggestions please?

Regards

Edited by 996ducati (Sun 27-Dec-09 19:33:57)

OK, I'll go through the Vodafone stuff a bit at a time,

IP address

The Vodafone Access Gateway requires a DHCP assigned IP address.

**OK, as long as your router is dishing out IP addresses via DHCP that should be fine, you should be able to check which addresses are assigned to which devices.

VPN Configuration

**Here, I'm thinking it's worth a shot to set up port forwarding for the below.

Source Destination Protocol Port Description
Vodafone Access Gateway 212.183.133.177 IP 50 ESP
UDP 4500 IPSEC NAT Traversal
UDP 500 ISAKMP

Domain Name Resolution

In order to setup the VPN the Vodafone Access Gateway requires the ability to resolve IP addresses for hosts in the vap.vodafone.co.uk domain.

**That should be fine, use NSLOOKUP on a windows PC to check this is resolving to an IP address.

Synchronisation

In order to function the Vodafone Access Gateway requires a synchronisation signal from the Vodafone network.

Source Destination Protocol Port Description
Vodafone Access Gateway 212.183.133.181 UDP 123 NTP - for synchronisation
212.183.133.182 UDP 123 NTP � for synchronisation

**Again, that should be OK. You could try setting the HH or your PC to use this time server and see if it sets the time correctly.

In reply to a post by shtu:

VPN Configuration

**Here, I'm thinking it's worth a shot to set up port forwarding for the below.

Source Destination Protocol Port Description
Vodafone Access Gateway 212.183.133.177 IP 50 ESP
UDP 4500 IPSEC NAT Traversal
UDP 500 ISAKMP

Hi Shtu...how would I set this up in a HH 2 pls?

Go into advanced settings, application sharing.

The portforward.com website is probably a better guide than I.

(I've found uPNP to be a little hit or miss, better to set it up manually)

I've left the router on all night (PC switched off) with the firewall totally disabled.

Still no joy? Is it possible something BT's end is blocking it?

As mentioned everything was working out of the box until mid Dec and what seemed to coincide with the HH firmware update?

Regards

Hi Shtu....

Just to say thank you very much for your kind help.

The main issue turned out to be Vodafone hadn't changed the serial number of the new Gateway so it wasnt able to sync. After a quick call they realised the issue and reset it.

Secondly I used your advice to set up the port forwarding on the HH2 as initially it was blocking the ports required for the Access Gateway to work.

Many Thanks

No problem.

I was a bit puzzled why just dropping it into the DMZ (ie, outside the firewall completely) didn't sort it, but that's turned out to be Vodafone's fault.