Hi hope one of you guys can / will help, been scratching head for ages.
A client requires to install Voda sure signal box and has sent me instruction on how to configure the device. its 2 hops away.

In order to function the Vodafone Access Gateway requires a synchronisation signal from the Vodafone network. This is carried outside the VPN tunnel and the following firewall rules will be required. These rules assume a stateful firewall, otherwise connections will be required in both directions. Some standard DSL routers may need changes to built in firewalls. Enterprise or more complicated Consumer IP setups may need wider changes which will depend on their environment and is not within the scope of Vodafone support.

Source Destination Protocol Port Description
Vodafone 212.183.133.181 ICMP 8 ping - keepalive
Access UDP 123 NTP
Gateway 212.183.133.182 icmp 8 ping
UDP 123 NTP