What is happening with 3G?
rcorn1's profile

Tutor

 • 

7 Messages

Thursday, August 29th, 2013 11:24 PM

Micro Cell fails to activate

I have an interesting issue with the microcell. ATT has not been much help. I have the cell connected to my network and my network device config is as correct as I know to make it. Activation fails, just sits with the singal bars light flashing. So I use network packet analyzer and watch as I restart the cell. After GPS lock, the cell tries to contact 12.230.209.3 on port 443. This I expected as it was indicated as an early step in the process by some posts I read. However, the attempt to connect to this IP address times out. There is no reply from 12.230.209.3. The cell will retry this address and 12.230.209.67, which is apparently shutdown as I get an ICMP for that indicating it is blocked on purpose. A tracert of 12.230.209.3 shows the route going into series of att servers and finally to 12.122.138.245 and then the tracert times out.

 

Now it seems if this connection is not made, activiation cannot proceed. ATT ignores this and runs me through all kinds of other stuff before telling me my connection speed is too low and that is why it fails. Really?

 

ATT did confirm that 12.230.209.3 is the correct IP but thats about all I got out of them.

 

Any ideas on why I am not getting any further than the failed connect to 12.230.209.3:443?

ACE - Expert

 • 

23.9K Messages

11 years ago

There are 4 ports that should be open at all times. 443 seems to be the most troublesome. I have seen an upstream switch between the ISP and AT&T's servers fail which will cause the symptoms that you are describing. Unfortunately, it takes some footwork to figure this out. You might want to PM CustomerCare (see the link in my sig), explain the problem, give them your account info, and include a copy of your traceroute to show where it appears to be failing. You might also want to look at my MicroCell Technical Guide for further information (the link is in my sig). Let us know what happens.

Tutor

 • 

7 Messages

11 years ago

I want to confirm, port 443 needs to be open for incomming connection? If so, does this mean ATT will try to contact the MC on 443?

 

Separately, I have a friend, who has an MC (the reason I got one) and he installed it, made no changes to router/modem (no port forwarding) turned it on and it worked first time and ever since. I had him do the tracert on his connection (comcast) and the tracert failed exactly the same as mine...that baffles me. My network traces show the MC failing to get a connection to 12.230.209.3 (this appears to be a connection timeout) and that is as far as the MC start up gets. tracert shows path to 12.230.209.3 ends at 12.91.193.50 with "Destination Net Unreachable".

ACE - Expert

 • 

23.9K Messages

11 years ago

The ports that need to be open are 123 UDP, 443 TCP, 500 UDP, and 4500 UDP (all public and private). IPSec Pass-through has to be enabled and Block Fragmented Packets needs to be disabled. If you have a separate router and modem, only one of them can be handling NAT. 123 is for NTP traffic, 443 is for HTTPS over TLS/SSL, 500 is for IPSec Phase 1 prior to NAT detection, and 4500 is for IPSec NAT Traversal.

 

Most of the time, the MicroCell is plug and play with little to none configuring. But, depending on how you have your LAN setup, the router you use, your ISP, etc it may take a little more work to get it up and running. I don't have an answer for the confusing traceroute results. Make sure that your home address is correct. You may have to either reset the MicroCell or deactivate/reactivate your account. Is this a new MicroCell or did you buy it off of eBay or someplace else. You may find some useful information in my MicroCell Guide. See the link in my sig.

Tutor

 • 

7 Messages

11 years ago

So here is an interesting twist to all this. I was watching my router logs and saw a ping comming to my router from an ATT ip address which I have previously seen as the source of the icmp message stating the target att IP 12.230.209.3 or 12.230.209.67 cant be reached. My router was blocking that icmp from reaching the MC and so I have opened that up. We will see what happens. as an aside, until today my MC would get GPS lock in about 2 min, today its taking an hour or more...the fun never stops.

Professor

 • 

2.2K Messages

11 years ago

Another thing you might try is to put your Mcell in your router's DMZ.

ACE - Expert

 • 

23.9K Messages

11 years ago

Yep. Can you tell us how you have your LAN setup for the MicroCell?

Tutor

 • 

7 Messages

11 years ago

Did that. No joy.

Tutor

 • 

7 Messages

11 years ago

lets ignore my home setup for now. I have the MC at my office where I have more control and tools to research this problem. The setup is actiontec dsl modem doing pretty much 100% passthru to a Windows 2000 box running ISA server as the gateway and firewall. The 2000 box serves my office lan via a second nic.

 

Now using packet analyzer to monitor my network, both inside and on the outgoing nic to the dsl modem, when the MC gets GPS lock, it tries to connect TCP to 12.230.209.3:443. This appears to be expected based on my readings on this forum and elsewhere. The problem is, that connect never completes. It times out and in looking at the packets, I get an ICMP message sent back to me by an att server saying that 12.230.209.3 is administratively blocked. Given that this connection fails, the MC never goes any further. It does try 12.230.209.67 after an hour and then back to 12.230.209.3 after an hour and this just repeats failing each time. At my home, I see the same thing, tho in less detail...MC trys to connect to 12.230.209.3:443 but fails.

 

It appears to me that all the configuration info about ports and fragmentation and etc does not yet apply here as the MC needs to complete that connection to 12.230.209.3 in order to move forward with configuration and eventually reach a point where that other stuff would come into play. It suggests the ATT server for MC has changed at some point and my MC (used) has old firmware or ??

 

As one might expect, regular ATT MC support has been useless. I have received a response to my PM posted here saying I will be contacted by a tech at some point soon.

Tutor

 • 

7 Messages

11 years ago

As an additional data point, I had my ISP check things out and they pointed out that a tracert on 12.230.209.3 goes into s series of ATT systems before the tracert stops with the ICMP indicating the IP is not available.

ACE - Expert

 • 

23.9K Messages

11 years ago

Ok. The MicroCell is basically a simple, dumb device. The more you put in front of it, the more it is apt not to work. It is for home use and not for work use (but there are some who successfully use it at work).Your home setup is important for us to troubleshoot the issues so that is why we asked. See the MicroCell Technical Guide link in my sig for more information.

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.