Converting from ADSL with firewall to UFB

Forums › Spark New Zealand › Converting from ADSL with firewall to UFB

dazz1

90 posts

Master Geek
+1 received by user: 3

Topic # 205564 17-Nov-2016 22:14

Hello

At present I have an ADSL router connected to an IPCop firewall appliance. The ADSL router/firewall connection is PPPoE to avoid double NATing.

From the firewall, I have a switch for wired network connections, and a wireless access point. The WAP is located in the centre of the house, well away from the cable entry point.

For various reasons, I would much like to keep the firewall between the modem and the network, including wireless.

So now Spark have made fibre available on my street. So all I should need is a fibre modem with PPPoE to replace the ADSL router. After not much research, it seems that all? fibre modems have built in wifi.

Can someone point me to a a good quality but basic fiber modem with PPPoE?

hio77

'That VDSL Cat'
9430 posts

Uber Geek
+1 received by user: 2137

Trusted

Spark

Subscriber

Reply # 1673208 17-Nov-2016 22:19

One person supports this post

You won't need a modem in this case, You will simply terminate the PPPoE session on the IPCop FIrewall.

By the sounds of things, your current setup is a bridge mode 0/110 VLAN10. Which is a pretty common EUBA PPPoE route for ADSL, In this case it will be a seamless transition of removing the modem, directly connecting to the Port on the ONT.

Obviously assuming you are doing Queuing you will need to change all that ofcourse.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1673210 17-Nov-2016 22:37

OK thanks. I am on the steep side of the learning curve here. I have just found out what an ONT is.

I haven't played around with queuing. Can you tell me something about that?

hio77

'That VDSL Cat'
9430 posts

Uber Geek
+1 received by user: 2137

Trusted

Spark

Subscriber

Reply # 1673233 17-Nov-2016 23:21

If you do not know what Queuing is, Likely it wont be a problem for you.

Was an assumption on my part, that considering you were using an heavy-sided firewall, Likely Queuing would be in-place past that of basic First past the port as it goes.

Besides, it is far less important with a larger pipe.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

BarTender

2555 posts

Uber Geek
+1 received by user: 1016

Trusted

Lifetime subscriber

Reply # 1673274 18-Nov-2016 05:48

I think the VLAN 10 will be your only issue.

It seems ipcop doesn't support vlans natively so there is a few plugins that add support. Google for "ipcop support vlan" and you will see the options.

Depending on the age of the computer it may not be able to run at full speed on your UFB line depending on which speed plan you order so you may need an upgrade.

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1673295 18-Nov-2016 07:21

Thanks.

My knowledge is very uneven on networking

I am running IPCop on an ALIX SBC by www.pcengines.ch If that isn't fast enough, I will upgrade to an APU model.

I will look into the issue around VLANs and IPCop.

One of the main reasons I want to keep IPCop (apart from good security) is it's flexibility. I have it setup with a reverse SSH tunnel to a webcam server connected via the cellular network. The reverse tunnel allows me to initiate a secure log-on from my home network. The reverse tunnel is terminated at the IPCop box which means I can make a connection from anywhere within the green zone. There is probably other hardware that can do this, but IPCop does what I want it to.

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1698748 5-Jan-2017 10:17

IPCop does have a VLAN GUI available here so I can install that.

There appears to be conflicting advice above. hio77 says I should be able to seamlessly move from ADSL to UFB. My understanding is that I should be able to physically move the ethernet cable from ADSL to the UFB ONT without changing anything in the IPCop configuration.

Bartender says I need to add VLAN 10. If so, then it would appear I just need to add VLAN 10 to the red interface.

I looked up the UFB router settings here and it looks like VLAN tagging is on for Spark UFB.

If the connection from Spark ONT to the IPCop red port is pppoe, I would not have expected the need to worry about VLAN. Unless Spark send different traffic down different VLANs.

If VLAN 10 is for data, are there other VLANs available/accessible?

Regards

Dazz

sbiddle

27480 posts

Uber Geek
+1 received by user: 6949

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 1698772 5-Jan-2017 10:59

3 people support this post

dazz1:

Hi

IPCop does have a VLAN GUI available here so I can install that.

There appears to be conflicting advice above. hio77 says I should be able to seamlessly move from ADSL to UFB. My understanding is that I should be able to physically move the ethernet cable from ADSL to the UFB ONT without changing anything in the IPCop configuration.

Bartender says I need to add VLAN 10. If so, then it would appear I just need to add VLAN 10 to the red interface.

I looked up the UFB router settings here and it looks like VLAN tagging is on for Spark UFB.

If the connection from Spark ONT to the IPCop red port is pppoe, I would not have expected the need to worry about VLAN. Unless Spark send different traffic down different VLANs.

If VLAN 10 is for data, are there other VLANs available/accessible?

Regards

Dazz

If a RSP delivers UFB over a tagged UNI port it uses VLAN10. That is the only VLAN used and it's the identical setup as VDSL2.

You will need to tag your port with VLAN10 and simply move the cable.

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1698790 5-Jan-2017 11:19

Thanks.

Dazz

hio77

'That VDSL Cat'
9430 posts

Uber Geek
+1 received by user: 2137

Trusted

Spark

Subscriber

Reply # 1698992 5-Jan-2017 19:38

dazz1:

hio77 says I should be able to seamlessly move from ADSL to UFB.

I did leave an if and stated i was assuming a certain setup for your ADSL link. I may have confused you here, but i went with assuming there was a different setup in play.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

ANglEAUT

883 posts

Ultimate Geek
+1 received by user: 188

Trusted

Reply # 1699021 5-Jan-2017 20:11

sbiddle: If a RSP delivers UFB over a tagged UNI port it uses VLAN10. That is the only VLAN used and it's the identical setup as VDSL2.

You will need to tag your port with VLAN10 and simply move the cable.

To me, it sounds like @sbiddle got it right. That is why I marked his post as the answer.

@michaelmurfy has some tutorials and mentions the DrayTek DV130 for passthrough PPPoE / bridge mode. If you really want to buy another modem.

Edit: Need to make sure I get my usernames correct next time.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1699487 6-Jan-2017 17:12

I have a Draytek vigor 120 ADSL modem but it has failed which has given me an excuse to change over to UFB.

I have ordered the free Spark modem but don't intend using it. The plan is to use the IPCop router/firewall.

Regards

Dazz

hio77

'That VDSL Cat'
9430 posts

Uber Geek
+1 received by user: 2137

Trusted

Spark

Subscriber

Reply # 1699889 7-Jan-2017 15:10

dazz1:

I have a Draytek vigor 120 ADSL modem but it has failed which has given me an excuse to change over to UFB.

Yep, there was the detail missing.

your modem was doing PPPoA -> PPPoE conversions so the vlan tagging will be needed on Fibre.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1710277 26-Jan-2017 20:18

Hello

I can now confirm that IPCop runs straight out of the box (no addon's needed) with UFB. I am writing this post connected to the internet via the IPCop firewall.

The settings are shown in this image.

I had a quick look at the Spark supplied HG659 modem. Looks like it has been dumbed down to stupid.

Regards

Dazz

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1710935 28-Jan-2017 08:30

Just run some side by side speed comparisons with my Alix SBC IPCop appliance and the Spark HG659 router.

The Alix SBC can only do 24Mbps compared with the 91Mbps from the HG659.

I will need to replace the Alix SBC with something more powerful.

Dazz

dazz1

90 posts

Master Geek
+1 received by user: 3

Reply # 1722487 18-Feb-2017 21:54

Brought a Eglobal Barebone mini pc J1900 Quad core 4 LAN PC and installed IPCop firewall.

The speedtest came out at 87Mbps. The CPU load is less than 70%.

That's good enough for me.

Dazz