This is the response we had from DrayTek on getting a Vigor 2910 to work but the settings have been shown to work against other models in the series too:
Under System Management and Management, untick “Disable PING from the Internet”. Save the settings and on next page click on OK to restart the router.
Under VPN – Remote Access Control > untick “Enable IPSec VPN Service”. Save the settings and it will ask you to restart again.
Under Firewall – General Setup, enable “Accept large or fragmented UDP or ICMP packets” .
Under NAT – DMZ host setup page, set “Private IP” option for WAN1 (assuming its WAN1 connected on your DrayTek) interface and select the IP address of Vodafone device.
Telnet to the router (using Putty or similar Telnet client) and run the following command:
> srv nat ipsecpass on
After making these changes, restart the vodafone device and see if connects OK.


Just a note in terms of giving the Sure Signal 2 a static IP.
After all steps above.
The Sure Signal seems to connect a lot quicker if you allow it to get it’s own IP address through DCHP and then after that, identify it by it’s destination IP 212.183.x.x on the NAT sessions table; and bind the IP address which has been assigned to it. Trying assign a different static IP to it after it has already got one doesn’t work, it doesn’t seem to respect the assigned IP from the bind on the router and keeps it’s first one.
Excuse the type – supposed to be DHCP!