Re: [Skunkworks] Zuku 3-Play and VPN-based services

That's IPSec vpn or even L2TP etc Either way it not right, a hint though if you are in control of both sides of the vpn and it not a site to site requirement, try deploy ssl-vpn it will make your life much simpler. R D ----- Reply message ----- From: "Brian Ngure" <brian@pixie.co.ke> To: "Skunkworks Mailing List" <skunkworks@lists.my.co.ke> Subject: [Skunkworks] Zuku 3-Play and VPN-based services Date: Wed, Mar 26, 2014 22:17 Splitters. Single cable coming in, one splitter to TV and Internet, second splitter on TV out to two TVs. On Wed, Mar 26, 2014 at 10:01 PM, Odhiambo Washington <odhiambo@gmail.com> wrote: Brian, you daisy-chained the decoders, or what did you do? FYI, I have never used Zuku triple-play anywhere. It's my first time doing this for top-dawg:) On VPN, I received an e-mail from their support that 'VPN is not supported on the network' and that sounded like a crowning to all the crap I have been receiving from their support ever since I asked them if I can get VPN pass-through enabled on this device. I have so far escalated the VPN issue to the higher echelons and I hope I will get a solution. I don't see any rationale for not supporting VPN on a network. On 26 March 2014 21:55, Brian Ngure <brian@pixie.co.ke> wrote: Hi Wash, For item 2, I had to get a second decoder for the other TV. Can't help you with item 1, also been trying VPN on Zuku without success. On Wed, Mar 26, 2014 at 8:20 PM, Odhiambo Washington <odhiambo@gmail.com> wrote: Hello Skunks, I have two questions about Zuku's Triple-play. 1. Is anyone here using Zuku Triple play and can still have their VPN services working? If YES, which of their Internet routers is deployed at your premises and what, if any, special action did you have to take for the VPN to work? I have a site where their Netgear Cable Modem CVG834G and my VPN phone doesn't work. This is an Avaya 4610SW IP, which has built-in VPN capability. Another funny aspect of the whole scenario is that this phone takes forever waiting to obtain an IP from the DHCP service on this Netgear. It doesn't succeed, so I assign an IP manually. 2. Does Zuku TV support Multi-view, the same way you'd have with DSTv. I need their TV to be accessible on 2 TVs in different rooms. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -- Regards Brian Ngure _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -- Regards Brian Ngure

On 27 March 2014 10:48, Odhiambo Washington <odhiambo@gmail.com> wrote:
Mine is IPSec and it's not in my plan to change.
I once tried doing PPTP, L2TP on Zuku and didn't work (i thought i was missing something till i did a port scan). That was like a year ago. I had to resort to mikrotik which supported SSTP (Secure Socket Tunneling Protocol) and in seconds i had the TV scream with BBC iplayer programs. I haven't tried ipsec though. But i wonder why would anyone want to block ipsec! Kind Regards, Wilson./

I finally got to discuss the issue with a senior engineer at Zuku - it really helps to know people! While we couldn't immediately track down the issue about VPN not working for the phone - I need ideas why this is so - and left it to be investigated, I was able to move one step ahead. My Avaya IP phone (4610SW) cannot obtain an IP from Zuku routers - the Netgear and Cisco one. Zuku had agreed to swap the Netgear for a Cisco one.. We put the Cisco in bridge mode and my phone was able to get an IP from upstream Zuku equipment and the phone was able to work. This is not what I want, because in bridge mode, there is no WiFi and so it would mean either users get cables or I get another router to daisy-chain to the Zuku one. At the moment, it seems like that is what I will need to do - Zuku router in bridge mode, and I get my own router to serve the network. This is against the KISS principle but for the moment is the only option to give zuku engineers time to investigate, since they say this is the first time they are seeing this. ION, I now understand why everyone here always seems to shed tears when it comes to dealing with Zuku Customer Care on 0 205 205 205. I went through it for 3 days and concluded that if there is anyone who needs to undergo stress (for free), you don't have to any further - just call Zuku Customer Care. They are a bunch of assholes with a seemingly daft script to be followed when assisting clients, with no room to think out of the box, and completely without initiative! BTW, you cal the number, get a IVR with an introduction that sux (from a hungry woman's voice), reach a CS Rep, somehow calls always disconnect or they do that deliberately and don't call back; they don't have the courtesy to get your details so fast because I suppose they believe it's in their system - Client ID - and it's only the clients who can call, not a technical consultant. Next time you call Zuku, have the Client ID at hand, and make sure you have the phone with the registered number next to you, not any other phone! After getting so stressed up on the phone with them, I resorted to e-mail - and got even more pissed off: It went like below: ME: Subject: VPN Passthrough on a Netgear CVG834G Hello Support, I have a request: It it possible for you to enable VPN passthrough on the subject router for the following client: Scorpio Africa, 4th Parklands Avenue?? I need a VPN phone to work on that link. If this is not possible with the router, is it possible to substitute their router with one that supports the VPN passthrough feature? Kindly expedite the response as it is critical for making other decisions. --------------------------------------------------------------------------- 1st Zuku Support Respondent: Dear Washington, Thank you for your mail. Unfortunately we are not able to comply with your request since you require a static IP for VPN while the service you are on is offered on a dynamic IP. We appreciate your feedback, support and continued patronage. Regards, Edward A ---------------------------------------------------------------------------- ME: Hi Edward, Are you a network engineer by any chance? This sort of answer is the type I expect from an Intern CS Executive. Please answer my question. ---------------------------------------------------------------------------- 2nd Zuku Support Respondent: Dear Washington, We are in receipt of your mail and noted your concerns. Please note that the ports on the modem installed are usually open, have an IT person configure on the modem settings to have the VPN connection pass-through. This is possible as well with an added router to the modem. Thank you for your continued support. Regards, Alloys ------------------------------------------------------------------------------ ME: Now I don't understand what sort of crap this is. I made a request about the modem/router - the Netgear. If I install another router behind the Netgear, what difference does/will it make? ------------------------------------------------------------------------------ 3rd Zuku Support Respondent: Dear Odhiambo, Thank you for your mail. Please be advised VPN services are not supported on the network, however I have escalated your request to our network engineers and will get back to you with feedback. Kindly accord us your patience. Regards, Edward A -------------------------------------------------------------------------------- ME: After this response, I go to my phonebook and lookup the contacts of senior Zuku engineers who I can now stress up on the phone:) On 27 March 2014 17:04, Patrick Kariuki <patrick.kariuki@gmail.com> wrote:
I had to resort to mikrotik + 1
No reason why IPSEC shouldn't work unless AH traffic is blocked. _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."

@Wash, welcome to the club of Zuku. Regards, Peter Mugoh Sent from my BlackBerry® -----Original Message----- From: Odhiambo Washington <odhiambo@gmail.com> Sender: skunkworks-bounces@lists.my.co.ke Date: Sun, 30 Mar 2014 13:34:21 To: Skunkworks Mailing List<skunkworks@lists.my.co.ke> Reply-To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] Zuku 3-Play and VPN-based services _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

And since zuku staff are right here on this forum, cant they just reply to you? Zuku, you have a chance to redeem your image right here on this forum, if you really care..... On Sunday, 30 March 2014, Peter Mugoh <pkmugoh@gmail.com> wrote:
@Wash, welcome to the club of Zuku.
Regards,
Peter Mugoh
Sent from my BlackBerry®
-----Original Message----- From: Odhiambo Washington <odhiambo@gmail.com> Sender: skunkworks-bounces@lists.my.co.ke Date: Sun, 30 Mar 2014 13:34:21 To: Skunkworks Mailing List<skunkworks@lists.my.co.ke> Reply-To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] Zuku 3-Play and VPN-based services
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Kind Regards, Wilson./

Hehehehe, wash. If not for any, please do record these calls and chare on list for entertainment value. Sent from my iPad
On Mar 30, 2014, at 1:34 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
I finally got to discuss the issue with a senior engineer at Zuku - it really helps to know people! While we couldn't immediately track down the issue about VPN not working for the phone - I need ideas why this is so - and left it to be investigated, I was able to move one step ahead. My Avaya IP phone (4610SW) cannot obtain an IP from Zuku routers - the Netgear and Cisco one. Zuku had agreed to swap the Netgear for a Cisco one.. We put the Cisco in bridge mode and my phone was able to get an IP from upstream Zuku equipment and the phone was able to work. This is not what I want, because in bridge mode, there is no WiFi and so it would mean either users get cables or I get another router to daisy-chain to the Zuku one. At the moment, it seems like that is what I will need to do - Zuku router in bridge mode, and I get my own router to serve the network. This is against the KISS principle but for the moment is the only option to give zuku engineers time to investigate, since they say this is the first time they are seeing this.
ION, I now understand why everyone here always seems to shed tears when it comes to dealing with Zuku Customer Care on 0 205 205 205. I went through it for 3 days and concluded that if there is anyone who needs to undergo stress (for free), you don't have to any further - just call Zuku Customer Care. They are a bunch of assholes with a seemingly daft script to be followed when assisting clients, with no room to think out of the box, and completely without initiative! BTW, you cal the number, get a IVR with an introduction that sux (from a hungry woman's voice), reach a CS Rep, somehow calls always disconnect or they do that deliberately and don't call back; they don't have the courtesy to get your details so fast because I suppose they believe it's in their system - Client ID - and it's only the clients who can call, not a technical consultant. Next time you call Zuku, have the Client ID at hand, and make sure you have the phone with the registered number next to you, not any other phone! After getting so stressed up on the phone with them, I resorted to e-mail - and got even more pissed off:
It went like below:
ME:
Subject: VPN Passthrough on a Netgear CVG834G
Hello Support, I have a request: It it possible for you to enable VPN passthrough on the subject router for the following client: Scorpio Africa, 4th Parklands Avenue?? I need a VPN phone to work on that link. If this is not possible with the router, is it possible to substitute their router with one that supports the VPN passthrough feature? Kindly expedite the response as it is critical for making other decisions. ---------------------------------------------------------------------------
1st Zuku Support Respondent:
Dear Washington,
Thank you for your mail. Unfortunately we are not able to comply with your request since you require a static IP for VPN while the service you are on is offered on a dynamic IP. We appreciate your feedback, support and continued patronage.
Regards, Edward A ----------------------------------------------------------------------------
ME: Hi Edward,
Are you a network engineer by any chance? This sort of answer is the type I expect from an Intern CS Executive. Please answer my question. ----------------------------------------------------------------------------
2nd Zuku Support Respondent:
Dear Washington,
We are in receipt of your mail and noted your concerns. Please note that the ports on the modem installed are usually open, have an IT person configure on the modem settings to have the VPN connection pass-through. This is possible as well with an added router to the modem. Thank you for your continued support. Regards, Alloys ------------------------------------------------------------------------------
ME: Now I don't understand what sort of crap this is. I made a request about the modem/router - the Netgear. If I install another router behind the Netgear, what difference does/will it make? ------------------------------------------------------------------------------
3rd Zuku Support Respondent: Dear Odhiambo,
Thank you for your mail. Please be advised VPN services are not supported on the network, however I have escalated your request to our network engineers and will get back to you with feedback. Kindly accord us your patience.
Regards, Edward A --------------------------------------------------------------------------------
ME: After this response, I go to my phonebook and lookup the contacts of senior Zuku engineers who I can now stress up on the phone:)
On 27 March 2014 17:04, Patrick Kariuki <patrick.kariuki@gmail.com> wrote:
I had to resort to mikrotik + 1
No reason why IPSEC shouldn't work unless AH traffic is blocked. _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (6)
-
Collins Areba
-
dwahome@gmail.com
-
Odhiambo Washington
-
Patrick Kariuki
-
Peter Mugoh
-
Thuo Wilson