Spark fibre with untangle

Forums › Spark New Zealand (including Skinny and BigPipe) › Spark fibre with untangle

sahne

26 posts

Geek

#240590 15-Sep-2018 14:49

Hi all,

Anyone running untangle firewall who has successfully managed to setup wan to connect to fibre?
I have been trying for hours without success screenshots for working Configs (wan and vlan out of untangle would be very much appreciated.

Thanks
Daniel

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2091117 15-Sep-2018 15:28

should work fine.

You will want PPPoE on vlan 10 interface.

any username/password works i'd go for something easy like user@spark.co.nz / password (type these out dont copy and paste i suspect you may have dreaded copy paste issue)

ensure your configuring on the right port, don't set a service name.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

sahne

26 posts

Geek

#2091165 15-Sep-2018 17:34

The only other thing I can think of, I have untangle as a VM in hyper v and the wan is plugged into ONT but because you can’t pass through the network card into untangle.

Diagram:
ONT -HOST-Microsoft virtual switch-untangle

Do you guys think this is what’s stops it from working?

Anyone has similar setup and managed to get it working?

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2091169 15-Sep-2018 17:43

sahne: The only other thing I can think of, I have untangle as a VM in hyper v and the wan is plugged into ONT but because you can’t pass through the network card into untangle.

Diagram:
ONT -HOST-Microsoft virtual switch-untangle

Do you guys think this is what’s stops it from working?

Anyone has similar setup and managed to get it working?

I assume you're not aware of how VLANs work in Hyper V? This is the important part.

The first thing would be to read up on that. There is no reason why it won't work with the VM doing the VLAN tagging which would be the easiest approach. if you can't do VLAN tagging with your hardware you'll need something such as a switch or Mikrotik router to strip PVID10 so it will work.

Seems like you're creating an awfully complex setup for yourself.

sahne

26 posts

Geek

#2091202 15-Sep-2018 18:51

Have you got this running in your environment what i am after?

Before I go and read up on something which by the way i don’t mind, I do need to know you have managed to get the exact same setup working before. I appreciate people’s advise and opinion and some might not won’t to share their knowledge. I do however have asked in my post for instruction to achieve what I am after and not to tell me to go back to school. I hope i didn’t come across rude and it’s not my intention but we can spare comments like yours which don’t answer the question.

So back to my initial question, has someone got a similar setup and is kind enough to share how they have achieved this?

Thank you very much

timbosan

2159 posts

Uber Geek

#2091209 15-Sep-2018 19:09

@sahne - I run Untangle, have done for many years, from ADSL to fibre. Currently I am with BigPipe, so pretty close to Spark (expect Spark do VLAN tagging, BigPipe don't). I haven't had any problems (I have an averagely complex network running my own Exchange server, and Untangle is connected directly to the ONT).

Can you post your config details of your external interface? Here's what mine looks like (note I am not using the BigPipe DNS, instead I use 1.1.1.1):

I suspect one of two problems:

1) VLAN tagging is not on, or is wrong
2) Your VM is not set up properly.

What hypervisor are you running? I run Untangle natively on a dedicated box, just an old AMD X2, and that's more than fast enough.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2091224 15-Sep-2018 19:21

sahne: Have you got this running in your environment what i am after?

Before I go and read up on something which by the way i don’t mind, I do need to know you have managed to get the exact same setup working before. I appreciate people’s advise and opinion and some might not won’t to share their knowledge. I do however have asked in my post for instruction to achieve what I am after and not to tell me to go back to school. I hope i didn’t come across rude and it’s not my intention but we can spare comments like yours which don’t answer the question.

So back to my initial question, has someone got a similar setup and is kind enough to share how they have achieved this?

Thank you very much

I've never played with untangle but it's no different to multiple other setups I manage running RouterOS in a virtualised environment.

The key here is VLAN support - Spark requires VLAN10 tagging on the WAN port so running this under Hyper V either one of the above solutions - handing the tagging elsewhere before it enters the box OR VLAN support to be configured in Hyper-V and the passing VLAN10 through to the VM or tagging the VM with VLAN10 which negates the need to handle the tagging within the VM which can pose some issues.

There are pros and cons to each solution, and some of those pros and cons will also depend on what you're planning to use as your LAN interface - whether this be a 2nd NIC port or egressing the VM using a different VLAN.

timbosan

2159 posts

Uber Geek

#2091226 15-Sep-2018 19:23

sbiddle:
sahne: Have you got this running in your environment what i am after?

Before I go and read up on something which by the way i don’t mind, I do need to know you have managed to get the exact same setup working before. I appreciate people’s advise and opinion and some might not won’t to share their knowledge. I do however have asked in my post for instruction to achieve what I am after and not to tell me to go back to school. I hope i didn’t come across rude and it’s not my intention but we can spare comments like yours which don’t answer the question.

So back to my initial question, has someone got a similar setup and is kind enough to share how they have achieved this?

Thank you very much

I've never played with untangle but it's no different to multiple other setups I manage running RouterOS in a virtualised environment.

The key here is VLAN support - Spark requires VLAN10 tagging on the WAN port so running this under Hyper V either one of the above solutions - handing the tagging elsewhere before it enters the box OR VLAN support to be configured in Hyper-V and the passing VLAN10 through to the VM or tagging the VM with VLAN10 which negates the need to handle the tagging within the VM which can pose some issues.

There are pros and cons to each solution, and some of those pros and cons will also depend on what you're planning to use as your LAN interface - whether this be a 2nd NIC port or egressing the VM using a different VLAN.

Personally I would try and remove the HyperV portion and run Untangle natively if possible, and prove that works (which shouldn't be hard). I agree with one of the your previous comments that it seems to be a complex setup; removing one of the variables should help in getting it working.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

sahne

26 posts

Geek

#2091232 15-Sep-2018 19:32

Hi guys thanks for all the info already. :-) Will be writing a proper map tonight with screenshots on my current setup so I don’t waste anyone’s time and perhaps will help find what i misconfigured.

sahne

26 posts

Geek

#2091410 16-Sep-2018 13:21

Hi everyone please see below my network map with current configuration perhaps someone can pinpoint what has been misconfigured.

sahne

26 posts

Geek

#2091450 16-Sep-2018 14:06

I figured it out. OMG why didnt I think about this. While I looked at my screenshots it all came together what was configured incorrect. As soon as I have time I will provide diagram in case someone else is interested to configure the same.

sahne

26 posts

Geek

#2091455 16-Sep-2018 14:28

See below map with screenshots to indicate what needs to be done to get it working. Hope this can assist people in future.