Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Resolved: T-Mobile CellSpot connectivity issues

    Scheduled Pinned Locked Moved Firewalling
    54 Posts 5 Posters 22.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      We had to be sure the GPS antenna was in a window too.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • A
        asterix
        last edited by

        @Derelict:

        Dude. It's not the firewall unless you broke it trying to "fix" it. Maybe undo everything you have done and restart the cell spot. when I was at her house I got tired of waiting but the states looked good so I left. She called me a few hours later and said it was up.

        As I said, it's on a fresh install with default settings. I did reset the CellSpot and when it worked I did see a large download on the CellSpot so I new it was doing it's thing. But that was an increase in counters and traffic graphs showed the data as well. Right now it hasn't moved more than 1.24MB of data since last 4 hours. Did multiple resets (rest to default and not just power reset) on the CellSpot. T-Mobile sent me a replacement which is behaving the exact same manner. Runs fine directly behind the modem but fails behind the router.

        I have been suspecting DNS Resolver but it hasn't given issues to all my other network. May be T-Mobile is using some weird IP address that the DNS is not able to resolve even with DNS forwarding option. Just shooting in the dark as I am running out of options and its getting frustrating as I barely have any cell signal inside the house and this CellSpot is used by 4 lines in the family.

        1 Reply Last reply Reply Quote 0
        • A
          asterix
          last edited by

          @chpalmer:

          Does it have a good GPS lock?  My Verizon unit will not attempt a connection unless the GPS is working.

          Yeah its sitting right next to the window with the GPS connected. The power light (and that's the only light) keeps blinking and it doesn't even go the next step of acquiring a GPS signal. When behind the modem, I can see the network cable lights blink rapidly and it still acquires a GPS signal though after a good 15-20 mins) down in the basement. All lights turn solid green with 4G LTE blinking on data. But when behind the router just the power light blinks and blinks and blinks.. :D

          1 Reply Last reply Reply Quote 0
          • A
            asterix
            last edited by

            Current states.. You can see its trying to connect to a different server. Also look at the Bytes.

            states.jpg
            states.jpg_thumb

            1 Reply Last reply Reply Quote 0
            • A
              asterix
              last edited by

              Made some progress, I think.

              I let it sit behind the modem to update itself. Everything looked good. Then I moved it behind the router with the updated software. This time the power light (green) and the Internet (orange) light blinks with a steady GPS light. Orange meaning an issue.

              I suspect it's not able to talk to the outside world due to DNS issue. How do I troubleshoot the DNS resolver? Weird is that the cellphones use the same network on WiFi and don't have any issues. They all point to 10.2.1.1.

              1 Reply Last reply Reply Quote 0
              • chpalmerC
                chpalmer
                last edited by

                It is locating its destination address as shown by the fact it is actually connected to the server by what is shown in your state table. If you had DNS problems it wouldn't be able to locate the servers.

                My guess is that something is screwing up the VPN packets somehow.

                Your connected using a wired connection?  Un-managed switch?

                Triggering snowflakes one by one..
                Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                1 Reply Last reply Reply Quote 0
                • A
                  asterix
                  last edited by

                  Yes wired connection. Managed switch as I have several VLANs. But no changes on the switch since last 4 years. Same VLAN used by 4 cellphones and 1 VoIP sip hone.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    Looks like good two-way traffic to me.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • A
                      asterix
                      last edited by

                      Orange Internet light means it does not have an internet connection or unable to talk to the internet.

                      1 Reply Last reply Reply Quote 0
                      • chpalmerC
                        chpalmer
                        last edited by

                        @Asterix:

                        Orange Internet light means it does not have an internet connection or unable to talk to the internet.

                        They really need to re-write their guide.

                        Is the light flashing or solid?

                        Triggering snowflakes one by one..
                        Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                        1 Reply Last reply Reply Quote 0
                        • chpalmerC
                          chpalmer
                          last edited by

                          Have you tried a different Ethernet cable?  Solid light would seem to indicate no connection to your switch..

                          Triggering snowflakes one by one..
                          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                          1 Reply Last reply Reply Quote 0
                          • A
                            asterix
                            last edited by

                            @chpalmer:

                            @Asterix:

                            Orange Internet light means it does not have an internet connection or unable to talk to the internet.

                            They really need to re-write their guide.

                            Is the light flashing or solid?

                            Internet light is Flashing orange. When it has good internet connection its solid green.

                            If I turn off the cellspot for some time and then turn it back on the GPS light turns steady green as it was previously configured and acquires a signal. So it's blinking green power light and orange Internet light and steady green GPS light.

                            If I do a hard reset to factory defaults, just the green power light blinks as its trying to communicate to T-Mobile for a software download.

                            1 Reply Last reply Reply Quote 0
                            • A
                              asterix
                              last edited by

                              @chpalmer:

                              Have you tried a different Ethernet cable?  Solid light would seem to indicate no connection to your switch..

                              Yeah ..lol. I can see it acquires an IP address in the DHCP leases table. I can ping it. Moved to LAN subnet and it works the same way. Same cable used to connect directly to the modem and it works.

                              1 Reply Last reply Reply Quote 0
                              • chpalmerC
                                chpalmer
                                last edited by

                                https://support.t-mobile.com/docs/DOC-24271    I was just reading this doc..

                                Your cellspot is making a VPN connection to the Tmobile servers as proven by your state table.

                                Your cellspot is not making an connection inside the VPN as shown by your blinking orange light.

                                Something is messing up the VPN packets.  Can you try connecting the cellspot direct to your pfsense box without the switch?  Have an extra interface?

                                Just trying to rule things out.

                                Triggering snowflakes one by one..
                                Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                1 Reply Last reply Reply Quote 0
                                • A
                                  asterix
                                  last edited by

                                  Yep, just tried it. Plugged in the VoIP interface straight… no go :(

                                  1 Reply Last reply Reply Quote 0
                                  • chpalmerC
                                    chpalmer
                                    last edited by

                                    And to verify-  No static DHCP setting for it is there?

                                    Your not blocking DNS in any way?  These devices unless you see different as it starts, tend to use their own DNS so your DNS should not matter

                                    Triggering snowflakes one by one..
                                    Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                    1 Reply Last reply Reply Quote 0
                                    • DerelictD
                                      Derelict LAYER 8 Netgate
                                      last edited by

                                      This seems like a 100% problem for t-mobile to solve. Too bad their support is so unhelpful and ignorant.

                                      Chattanooga, Tennessee, USA
                                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                      1 Reply Last reply Reply Quote 0
                                      • A
                                        asterix
                                        last edited by

                                        @chpalmer:

                                        And to verify-  No static DHCP setting for it is there?

                                        Your not blocking DNS in any way?  These devices unless you see different as it starts, tend to use their own DNS so your DNS should not matter

                                        Wide open same as default LAN.

                                        IPv4 * VOIP net * * * * none Default allow VoIP to any rule

                                        1 Reply Last reply Reply Quote 0
                                        • chpalmerC
                                          chpalmer
                                          last edited by

                                          @Derelict:

                                          This seems like a 100% problem for t-mobile to solve. Too bad their support is so unhelpful and ignorant.

                                          Sounds like the device is not set for NAT operation.

                                          Many people here including myself (for my office and two other customers) have these femtocell devices up and running behind our pfsense boxes with no issue. If this was an issue with pfSense there would be tons of posts with complaints of the same. But it just works for me and seemingly everyone else.

                                          To test my NAT therory.. do you have a SOHO router hanging around?  Your not double NATted are you?

                                          Triggering snowflakes one by one..
                                          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                          1 Reply Last reply Reply Quote 0
                                          • DerelictD
                                            Derelict LAYER 8 Netgate
                                            last edited by

                                            There are generally zero configurable options on these things.

                                            Chattanooga, Tennessee, USA
                                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.