Can't reach NS&I login page

[#1]

@kehall If it helps :

External Ip address 212.159.n.n

SP: British Telecommunications PLC

City: Wigton

Region: England

Country: United Kingdom of Great Britain and Northern Ireland

*Where's Wigton ?

[#2]

@Champnet  - Cumbria.

[#3]

FWIW same issue here.

- I can't get to https://secure.nsandi.com on any device on my network using my broadband connection

- I can, however, when using 4G

[#4]

@Champnet ok since that IP range also shares the same autonomous system (AS) number for PlusNet (AS6871) I'm suspecting the BGP routing at that site housing the systems that are inaccessible, has dropped the BGP routing advertisements for AS6871, meaning no PlusNet routes on that AS are going to be present in the routing table and therefore the reply packets from the systems are effectively unroutable and have nowhere to go to eventually get back to the browser via PlusNet. Access is available from other VPNs, ISPs etc as those routes are unaffected.

It's going to take someone in networking within the organisation responsible for the systems hosting NS&I etc to correct this unfortunately, although since it seemingly is only affecting PlusNet (could be others but insufficient data to know that), the request ought to get through to them via PlusNet, it's not a common nor straightforward issue to explain though and convincing someone to escalate to the correct people to action it may be somewhat of a challenge

[#5]

@kehall  Agreed, your conclusions are supported by the relevant facts.

let’s hope someone sitting on the sidelines can summon a Plusnet networking guru.

Anyone ?

[#6]

Same here - unable to load the login page with PN FTTP static IP - but it's fine with mobile data.

But it's not an NS & I issue - it's the same for another finance related site where clicking the link to log in - which takes you to a different URL than the main site - also isn't loading. I'd assumed it was their end until trying mobile after seeing this about NS & I and finding it also works fine on mobile data.

So this is a PN or OR issue.

[#7]

@jwsg It is not a 'PN or OR' issue - more of a intermediary one, as I too, on a Zen connection, have the same issue, and the only OR connection I have is that I am on the OR 'wires' - Zen use their own DNS servers, and don't touch the BT/OR network at all, at that level.

[#8]

@jab1 

It would be interesting to see the results of a traceroute from your device to secure.nsandi.com

[#9]

@Dan_the_Van I can provide that - but pardon my ignorance, how to I copy that to insert it into a post? I'm using ZorinOS, and don't know how to copy the Terminal output?

[#10]

@jab1 

With mint and I expect with Zorin you can highlight the text in the terminal window using a mouse, then use the right mouse button you should see an option to copy.

Then use </> in the expanded posting options above and paste in there, then post.

Hope that works

[#11]

@jab1 

If the above doesn't work, you could try copying the highlighted test using CTRL+C and pasting it with CTRL+V

That is what I often do in Mint.

.

[#12]

Cheers, Dan - I'll do it in a while.

Cheers, @Mr_Paul 

[#13]

@Dan_the_Van  traceroutes below , 1st from the apartment Plusnet dynamic IP connection , 2nd via the office VPN and out through the Zen connection

C:\Users\xxx>tracert secure.nsandi.com

Tracing route to secure.nsandi.com [157.203.60.156]
over a maximum of 30 hops:

  1     1 ms     1 ms     1 ms  dsldevice.lan [192.168.1.254]
  2     6 ms     5 ms     5 ms  172.16.14.96
  3     *        *        *     Request timed out.
  4    11 ms    12 ms    12 ms  136.hiper04.sheff.dial.plus.net.uk [195.166.143.136]
  5    11 ms    11 ms    11 ms  core5-hu0-0-0-26.faraday.ukcore.bt.net [195.99.127.68]
  6    19 ms    20 ms    23 ms  core1-hu0-16-0-4.colindale.ukcore.bt.net [109.159.252.137]
  7    12 ms    12 ms    12 ms  acc3-hu0-0-0-0.colindale.ukcore.bt.net [217.32.170.57]
  8    14 ms    14 ms    14 ms  217.38.123.105
  9     *        *        *     Request timed out.
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17  ^C

C:\Users\xxx>tracert secure.nsandi.com

Tracing route to secure.nsandi.com [157.203.60.156]
over a maximum of 30 hops:

  1    25 ms    26 ms    25 ms  cmacsrv01.cl-group.com [192.168.42.131]
  2    26 ms    25 ms    26 ms  sw-vdsl-254.cl-group.com [192.168.42.254]
  3    25 ms    27 ms    25 ms  dsldevice.lan [192.168.1.254]
  4    50 ms    37 ms    36 ms  lo0-0.bng5.thn-lon.zen.net.uk [51.148.77.133]
  5     *        *       50 ms  lag-15.p2.thn-lon.zen.net.uk [51.148.73.100]
  6    36 ms    36 ms    36 ms  ge-3-3-0.mpr1.lhr3.uk.above.net [195.66.236.76]
  7     *        *        *     Request timed out.
  8    41 ms    41 ms    41 ms  ae6.mpr1.man1.uk.zip.zayo.com [64.125.23.131]
  9    58 ms    64 ms    61 ms  94.31.33.78.IPYX-124905-ZYO.zip.zayo.com [94.31.33.78]
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17  ^C

[#14]

@MisterW 

does secure.nsandi.com work for you on your Zen connection?

Using a Vodafone hotspot I see, last two hops are the same as your Zen traceroute

C:\>tracert secure.nsandi.com

Tracing route to secure.nsandi.com [157.203.60.156]
over a maximum of 30 hops:

  1     5 ms     6 ms     7 ms  192.168.105.41
  2     *        *        *     Request timed out.
  3   121 ms    41 ms    43 ms  192.168.174.2
  4     *        *        *     Request timed out.
  5     *        *        *     Request timed out.
  6    80 ms    51 ms    53 ms  172.21.251.233
  7   148 ms     *      458 ms  63.130.172.45
  8   256 ms    42 ms   129 ms  ae13-100-xcr1.ltw.cw.net [195.2.23.77]
  9    83 ms    63 ms    67 ms  zayo-6461.ltw.cw.net [195.2.12.90]
 10     *        *        *     Request timed out.
 11   250 ms    53 ms   184 ms  ae6.mpr1.man1.uk.zip.zayo.com [64.125.23.131]
 12    57 ms    58 ms    53 ms  94.31.33.78.IPYX-124905-ZYO.zip.zayo.com [94.31.33.78]
 13     *        *        *     Request timed out.
 14  ^C

I suppose what is really needed here is a comparison with a working and not working traceroute from different plusnet connections.

There is clearly an issue which needs investigating but how to engage?

[#15]

I get 3 or 4 hops from my machine to the 'zip.zayo' link, then it stalls forever on 'waiting for reply' - can't do anything else as the command never completes.