Didn't find what you were looking for?


We have advanced search options to make it easier to locate posts, questions and answers on this community.
More information can be found at Advanced Search Options
If you are looking for something specific, please check if someone else has already asked or answered the same question.

Business “Class” service with Static

rickyloera
rickyloera Posts: 3 Spectator
edited January 12 in Connectivity

Hi all,

I have Spectrum Business “Gig” service with a paid static IP, and Spectrum installed the following equipment:

Modem: EN2251

Router: SAX1V1K

Since Spectrum inserted the SAX1V1K between the modem and my network, my inbound and VPN connectivity is broken. I can no longer reliably establish:

  1. IPsec tunnels (site to site VPN and remote access VPN).
  2. SIP trunking traffic (VoIP signaling and related RTP flows).

This is not an equipment issue on my side. This worked previously before Spectrum’s new “cascading” setup. The Spectrum router appears to be doing one or more of the following:

  1. NAT or double NAT.
  2. SIP ALG or other VoIP manipulation.
  3. Stateful firewall filtering.
  4. Any form of upstream filtering that interferes with IPsec ESP, IKE, NAT-T, or SIP signaling.

To be clear, I did not request a managed security stack, filtering, NAT, or firewall services. I pay for a static IP because I need true business-grade connectivity. I have my own router and security stack that handles filtering, firewalling, VPN termination, and VoIP policies.


What I need from Spectrum:

  1. True bridge mode or passthrough for the SAX1V1K, with my static IP delivered directly to my equipment (no NAT).
  2. No SIP ALG. No “VoIP optimization.” No manipulation.
    • IKEv1 or IKEv2 on UDP 500
    • NAT-T on UDP 4500
    • ESP (IP protocol 50) if applicable
    • SIP signaling typically UDP/TCP 5060 and/or TLS 5061 (depends on provider)
    • RTP ports as required by the SIP provider

If anyone has this same modem and router combo with a static IP and has successfully run IPsec tunnels and SIP trunks, please share exactly how Spectrum configured it, and what you told support to reach the right engineering group.


I need to speak to someone at Spectrum who understands business networking, static IP delivery, IPsec, and SIP trunking. I find it hard to believe I am the only Spectrum Business customer who relies on VPN tunnels and VoIP trunks.

Also, if Spectrum’s official position is that static IP service on this platform is incompatible with IPsec and SIP trunking, I need that stated clearly so I can cancel and move to a provider that supports standard business protocols.

**Currently the modem is in Bridge-mode without wifi and supposedly without NAT.

Comments

  • RAIST515O
    RAIST515O Posts: 304 Contributor
    edited January 6

    I would expect you could connect your router directly to your modem's ethernet port (2.5g) as we always can with residential... unless they are doing something funky when it comes to reserving your IP. I have kept the same IP for 6 months before with my home network because it would just keep renewing the same lease fairly consistently. My modem has always been straight passthrough... any SIP, VPN pass through, and such managed by my router.

    Would think they would be able to either bind it to the modem's MAC/Serial in DHCP, or otherwise configure it statically in the profile it downloads.

    Basically the same kind of approaches we have always been able to do with our own networks.

    ¯\_(ツ)_/¯

  • James_L
    James_L Posts: 56 ✅ Verified Employee Moderator
    edited January 6 Answer ✓

    Welcome to the community, @rickyloera! We're sorry for any frustration you're experiencing due to the issue with the connection. Please contact our business department at 1-855-762-1243 for assistance with the static IP and business networking concerns.

  • rickyloera
    rickyloera Posts: 3 Spectator

    @James_L that's why I’m here. You business department throughout is great at selling and not delivering. I’ve spend hours debating your staff on the business needs of IPSEC tunneling and SIP trunking. These are common business technologies and you are hindering my business. I need this escalated and or a DIRECT line to someone that’s not only knowledgeable but capable of delivering what you advertise.

  • rickyloera
    rickyloera Posts: 3 Spectator

    @RAIST515O Yes I can connect directly to the modem and everything work. But as a business I pay for business class and a static IP. That alone warrants action on the provider to deliver what they sell. If I wasn’t paying for these services what you outlined would work. I’m just astonished that I’m having to debate networking technologies with a provider and every turn. This goes to show that training is not a priority.

  • RAIST515O
    RAIST515O Posts: 304 Contributor
    edited January 6

    Have you reached out to them about taking their router back and removing any of it's management charges from your bill? That is how it is handled in residential when we use our own router and not theirs.

  • James_M
    James_M Posts: 5,411 ✅ Verified Employee Moderator

    @rickyloera,

    Unfortunately, this team does not have access to the tools used for Business Class customers and it sounds like the service is working as intended, but does not meet your expectations.

    For direct support with your account, please contact our business department at 1-855-762-1243.

This discussion has been closed.

Categories