DHCP/IPoE Authentication is here!

Forums › Quic › DHCP/IPoE Authentication is here!

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | ... | 11

meow
13217 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3198750 22-Feb-2024 13:26

@CYaBro Hold off on the factory reset. I'll know by 3:30pm if my theory works. Easy to untag a connection but it takes 2hrs to do. If you want to try this then PM @quic and configure your controller with PPPoE without a VLAN.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

CYaBro

4565 posts

Uber Geek

ID Verified

Trusted

#3198753 22-Feb-2024 13:33

michaelmurfy:

@CYaBro Hold off on the factory reset. I'll know by 3:30pm if my theory works. Easy to untag a connection but it takes 2hrs to do. If you want to try this then PM @quic and configure your controller with PPPoE without a VLAN.

But how will the USG connect to the controller again to get the PPPoE settings without a VLAN?

At the moment it's got no internet with the DHCP VLAN ID 10 settings.

Opinions are my own and not the views of my employer.

michaelmurfy

meow
13217 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3198756 22-Feb-2024 13:35

CYaBro:

But how will the USG connect to the controller again to get the PPPoE settings without a VLAN?

At the moment it's got no internet with the DHCP VLAN ID 10 settings.

There is a bug that causes the DHCP listener to work on the untagged interface so abusing a bug to fix a bug. You however can't use DHCP/IPoE and will be stuck on PPPoE but it is a potential remote fix. Configure your controller with untagged PPPoE and when it reconnects it'll load this configuration then reconnect 30mins later.

You don't want it reconnecting with DHCP as it exposes all services without a firewall.

Baitercell

21 posts

Geek

#3198762 22-Feb-2024 13:54

michaelmurfy:

You're right. One of my routers worked (kind-of), the other didn't then I found a pretty substantial breaking configuration change that UniFi does causing all services to be exposed to the internet (I got an alert his router was exposing Port 53). Changed back to PPPoE.

DO NOT remotely change a USG over to IPoE. It doesn't work. You need to do a full re-provision by removing the router from the UniFi portal and re-adding it again. Looks like I'll be doing a drive to fix this one up.

Hey Michael,

Just want to confirm that this is the USG you are referring to. I've got one and don't want to expose everything to the internet.

michaelmurfy

meow
13217 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3198763 22-Feb-2024 13:57

Baitercell: Hey Michael,

Just want to confirm that this is the USG you are referring to. I've got one and don't want to expose everything to the internet.

All UniFi Security Gateways including this one. Dream machines are unaffected by this.

If you're configured with PPPoE then don't reconfigure with IPoE. Shouldn't matter anyway as PPPoE is offloaded on these so there is no real improvement.

mentalinc

3196 posts

Uber Geek

Trusted

#3198765 22-Feb-2024 13:58

Thanks have run the line to fix the bug (not that I saw issues, but it's bound to happen at some point).

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

naggyman

697 posts

Ultimate Geek

#3198768 22-Feb-2024 14:08

@quic just tried it and didn't work, so reenabled my PPPoE dialler, which worked successfully.

What has surprised me though, is that in traces I am now going through bng1-chc2.vetta.net instead of bng2.quic.net.nz. Any ideas on why my connection has just moved BNG?

Sharesies kids

Free kids accounts - trade shares and funds (NZ, US) with Sharesies (affiliate link).

quic

233 posts

Master Geek

Trusted

Quic Broadband

Lifetime subscriber

#3198769 22-Feb-2024 14:10

naggyman:

@quic just tried it and didn't work, so reenabled my PPPoE dialler, which worked successfully.

What has surprised me though, is that in traces I am now going through bng1-chc2.vetta.net instead of bng2.quic.net.nz. Any ideas on why my connection has just moved BNG?

Connections can see multiple BNGs to provide increased resiliency (e.g. if you're connected to one that goes bang, it'll automatically shift across to an alternate).

Quic Broadband
quic.nz - The telco who puts you in charge!

Nismo214

8 posts

Wannabe Geek

#3198777 22-Feb-2024 14:29

Im giving up for now cant get DHCP up on 2 different routers one the whole router hangs and the old vodafone router never goes past connecting. both show a DHCP session in the Quic dashboard though. will try again some other time

aj6828

136 posts

Master Geek

ID Verified

Trusted

#3198781 22-Feb-2024 14:49

Hey quic can you do a 4gig hyperfiber for me..please

Exclusive for Geekzone Members!

Get FREE SETUP & Dynamic IP & Bring Your Own Device too (NO-CGNAT) by default on all Hyperfibre & Max Fibre plans with Hyperline.co.nz powered by 2degrees

Hyperfibre plans available on Chrous areas only HYPERLINE.co.nz

lucasnz

45 posts

Geek

#3198785 22-Feb-2024 15:16

I tried a "quick" change to DHCP no my WAN interface, but I didn't get an IP address. Tried rebooting the router - but then the kids started appearing and asking why the internet was down. Back to PPPoE for now... I am interested to see if I get more consistency with speedtests with DHCP. I'll try again later. Someone mentioned rebooting the ONT which I didn't try yet.

michaelmurfy

meow
13217 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3198788 22-Feb-2024 15:18

@lucasnz It'll take around 5mins to come back again once you've changed it.

michaelmurfy

meow
13217 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3198791 22-Feb-2024 15:22

@CYaBro Doesn't look like my theory worked but now it should be OK to use the web interface of the USG and reconnect it to the internet without the VLAN. It'll then check into the controller again. I'm about to shoot off to the remote site I broke to reconfigure it over WiFi.

Edit: Go to your Gateways IP in a web browser, login with your management user / password (configured in your UniFi controller) then drop into Configuration, untick VLAN (if you disabled this - nice it is VLAN aware now) and configure back to PPPoE:

It'll take ~2mins to apply, and if you had a DHCP lease before it'll also take 30mins to reconnect after this (unless if you block DHCP beforehand). Should be all good from there and will reconnect to the UniFi controller.