Superhub 50MB line with 5 static IPs + Draytek - VPN problem

naysan19 · 21-11-2015, 16:34

Hi all,

I have some problems with a new 50mb line with 5 static IPs connected to a Draytek 2860N using SH1.

I know are is a major issues with modem mode and I have read most of the posts in this forum about it - after 45 minutes to trying to get modem mode working I gave up and connected the Draytek using the second useable IP addresses in my allocation, set the gateway as the internal IP of the SH and turned off DHCP and firewall at the SH - the connection is working and all computers are able to connect to the internet!

Just a few problems though...

1. I set the SH1 LAN IP to 192.168.1.254 however I can't connect to the UI from any browser on any computer - is this because its connected to the WAN2 port of the Draytek and not to a LAN port?

2. My simple PPTP VPN setup on the Draytek no longer connects, I tried to see if there are any references to WAN1 to change it to WAN2 but couldn't find any - Do I need to turn VPN on, on the SH1 too? Even if i'm exclusively connecting to the Draytek?

Note: I changed my DNS servers on the Draytek to Google's 8.8.8.8 and 8.8.4.4 as the ones supplied (192.168.4.100 and 192.168.8.100 were being very slow and were not resolving on some computers.

Thanks,
Naysan

---------- Post added at 17:34 ---------- Previous post was at 16:51 ----------

Ignore point 2, I got it working by configuring L2TP instead.

Thanks,
Naysan

ccarmock · 22-11-2015, 11:34

I have a very similar setup to you, but instead have a Cisco router where you have the Draytek.

Firstly which UI can't you access ? I assume the SH1?

If so it doesn't respond on it's LAN address. In router mode, which you have set, it will respond on 192.168.0.1

pip08456 · 22-11-2015, 13:27

It should also respond on 192.168.100.1

ccarmock · 22-11-2015, 13:44

The business SH1 will only respond on 192.168.100.1 when in modem mode, which then doesn't allow any of the Fixed IP services to work.

pip08456 · 22-11-2015, 19:52

Quote:

Originally Posted by ccarmock

The business SH1 will only respond on 192.168.100.1 when in modem mode, which then doesn't allow any of the Fixed IP services to work.

I happily stand corrected not ever having had a VMB connection.

naysan19 · 22-11-2015, 20:14

Quote:

Originally Posted by ccarmock

I have a very similar setup to you, but instead have a Cisco router where you have the Draytek.

Firstly which UI can't you access ? I assume the SH1?

If so it doesn't respond on it's LAN address. In router mode, which you have set, it will respond on 192.168.0.1

Thanks ccarmock, I hoped it would be something that simple.

Sorry, yes I meant the UI for the SH1, I'll test it out when I get a chance!

On a side note I haven't seen many success stories with SH1 and Modem Mode - I would definitely recommend the 5 static IP option and router mode until the SH3 comes out or they fix the problems with the SH1. £5 extra a month for piece of mind and not needing to reboot the SH every day or so is well worth it, seeing as its a business connection! For us, this new connection is cheaper than the terrible 3.5mb LLU line we are moving away from...

ccarmock · 22-11-2015, 22:00

The Business version of the SH3 is due to be available in Feb next year, when the fixed IP options will be available on speeds other that 50 Mb/s

I understand there is unlikely to be a firmware fix for the business SH1, but rather a swap of the device.

With the routed subnet option also I find it very stable.

naysan19 · 24-11-2015, 10:16

Maybe I spoke too soon - just had to reboot the SH1 to get the internet back - all settings on the Draytek were fine - clients were getting the correct IP, gateway and DNS but no internet connection.

I'm really hoping its a one off - its been less than 72hours since I connected it all up!

I remember reading on one of the threads that in router mode, over time the SH1 will suffer from double-NAT or something similar - with both the SH1 and draytek working as NAT servers. Could this have caused the disconnection?

The only settings I changed on the SH1 were to set public IP, set new internal IP and turn off DHCP and the firewall - was there anything else that I should be changing?

---------- Post added at 11:16 ---------- Previous post was at 09:26 ----------

In addition, by using speedtest.net I have just found out that the ping time has shot up and speeds are slightly lower.
Yesterday at the same time of day the speeds were:

Ping:20, Download: 48, Upload:5

Today:
Ping: between 64-94, Download: 44-46, Upload: 3

Not too bothered about the download and upload as these are going to vary but the ping seems very high! This is not going well!

naysan19 · 24-11-2015, 17:16

Update:

Had to go back onsite a second time to manually restart the SH1, logged a fault with VM. Got a call back from a diagnostics team member who suggested it was an anomaly and explained they are aware of all the problems with the firmware and are trying to resolve them...He also invited me to upgrade to 152MB connection and SH2 which should in reality be a sticky dynamic IP - I can't loose the IPs as I use them for different services.

Everything seems fine again, internet is working and ping, download and upload speeds are back to the same as yesterday. Hopefully it won't happen again.

APS · 24-11-2015, 17:22

If it is any help we have been suffering from this issue to almost a year and I was told there would be no fixed firmware only an offer to upgrade to a better service next Feb.

As someone reported the problem might be related to a memory leak which takes a few days to get the point the modem locks, I bought a £10 mains timer and set it to turn off the modem for one minute in the middle of the night. Since doing that we have not had any daytime lockups requiring a manual reboot....so far.

naysan19 · 24-11-2015, 17:46

Quote:

Originally Posted by APS

If it is any help we have been suffering from this issue to almost a year and I was told there would be no fixed firmware only an offer to upgrade to a better service next Feb.

As someone reported the problem might be related to a memory leak which takes a few days to get the point the modem locks, I bought a £10 mains timer and set it to turn off the modem for one minute in the middle of the night. Since doing that we have not had any daytime lockups requiring a manual reboot....so far.

Thanks for sharing APS, I'll buy one tomorrow!

naysan19 · 24-11-2015, 20:30

I wonder if it's a faulty SH1 too, the connection went down again, thats 3 times in less than 24 hours.

I had enabled remote management on the SH so even though there is no internet connection on-site, I can still connect to the SH UI using it's external static IP, rebooted it through the UI and all is working again - extremely grateful for that.

Interestingly I noticed that the SH seems to forget the Draytek is connected to one of its LAN port (the one closest to the Coax cable) - Please see attached.

Is my memory leak just faster than others or is there another problem?

ccarmock · 24-11-2015, 21:08

Quote:

Originally Posted by naysan19

I remember reading on one of the threads that in router mode, over time the SH1 will suffer from double-NAT or something similar - with both the SH1 and draytek working as NAT servers. Could this have caused the disconnection?

Double NAT won't be a good thing, but in routed subnet mode that you have the Superhub is not actually performing any NAT. The Draytek will be, but not the SH1

Bad news for the hang issues - try the timeswitch as suggested as I too have heard it's a memory leak. Though why I never suffer it I have no idea.

I do have a very early SH1 - one of the initial installs after the old modem only business service was withdrawn. Wondering if there were variants of it and some are better than others.

naysan19 · 24-11-2015, 21:38

Thanks for the clarification ccarmock.

I'm happy to use a timeswitch for an out of hours reboot but as the connection isn't stable for a full working day (so far) I may have to move the 152mb connection with SH2 and hope for a sticky dynamic IP until the new services are out in February - i'd rather loose the static IPs than having an unstable connection.

Lucky most of the services I wanted static IPs for don't use generic ports so port forwarding will be ok until Feb. I'll monitor the connection over the next few days.

naysan19 · 25-11-2015, 22:34

It's been 26 hours connected without any problems - hoping yesterday was just a rare occasion. I will install a timeswitch in any case.