Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | ... | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13
hio77
'That VDSL Cat'
12984 posts

Uber Geek

ID Verified
Trusted
Voyager
Subscriber

  #1114583 24-Aug-2014 15:12
Send private message

kenkeniff:
hio77: Hows progress on this going?


I successfully created my network TAP which works on the LAN side at 100BASE-T however unsuccessfully it wont operate at 1000BASE-T (which I found out is impossible for a passive TAP) and the ONT wont seem to connect to the router at anything less than that.

My next option was gonna try this: http://www.m0rd0r.eu/how-to-make-transparent-bridge-with-slackware-linux

Will try your suggestion too Chris..


yes. i expected as much.


i thought the ONT would run at 100mbit still, be it subpar. 

Likely the VF Router is trying to force gbit speeds ild say..


as a cheeky way about it, you could try a normal old switch in the middle.. something to fool whichever end is stopping running at 100mbit..




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 

 


 
 
 
 

Get easy to use, easy to install Norton antivirus protection against advanced online threats (affiliate link).
kenkeniff

628 posts

Ultimate Geek


  #1114990 25-Aug-2014 11:11
Send private message

Not having much luck so far.

On a side note however I discovered that I seem to be able to bridge my WAN connection from pfSense to the ONT as many times as I like and end up with multiple simultaneous WAN connections over the one fibre (i.e. assigned multiple dynamic WAN IP's which I can assign to different VMs).

Not sure if this is expected behavior for fiber or what other side-effects or benefits besides being able to host multiple public-facing servers etc (still have to setup DDNS for each connection).

chrispchikin
128 posts

Master Geek


  #1114991 25-Aug-2014 11:13
Send private message

You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...



sbiddle
30853 posts

Uber Geek

Retired Mod
Trusted
Biddle Corp
Lifetime subscriber

  #1114997 25-Aug-2014 11:17
Send private message

kenkeniff: Not having much luck so far.

On a side note however I discovered that I seem to be able to bridge my WAN connection from pfSense to the ONT as many times as I like and end up with multiple simultaneous WAN connections over the one fibre (i.e. assigned multiple dynamic WAN IP's which I can assign to different VMs).

Not sure if this is expected behavior for fiber or what other side-effects or benefits besides being able to host multiple public-facing servers etc (still have to setup DDNS for each connection).


Multiple IP address are something that's fully supported with UFB (as UFB itself is nothing but a layer 2 connection). This is no different to existing EUBA connections over ADSL2+ or VDSL2.

There slightly different MAC address limits based on the plan type, off the top of my head most are limited to 64 MAC addressesses.


kenkeniff

628 posts

Ultimate Geek


  #1115029 25-Aug-2014 11:52
Send private message

chrispchikin: You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...


I have Wireshark on my Windows host; what exactly would I be looking for?

So?:
ONT > Host NIC 1 > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 > STB

And capture NIC1 or Virtual NIC ?

Coil
6614 posts

Uber Geek
Inactive user


  #1115032 25-Aug-2014 11:54
Send private message

kenkeniff:
chrispchikin: You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...


I have Wireshark on my Windows host; what exactly would I be looking for?

So?:
ONT > Host NIC 1 > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 > STB

And capture NIC1 or Virtual NIC ?


Capture physical NIC.

chrispchikin
128 posts

Master Geek


  #1115035 25-Aug-2014 12:00
Send private message

2 Different captures:

Host NIC1

 

Host NIC2

If you could PM me the .pcap files, but you're looking for CoS info the the 802.1Q (VLAN) header.




chrispchikin
128 posts

Master Geek


  #1115047 25-Aug-2014 12:08
Send private message

You'll also need to look at the DSCP info in the IP header.

Because traffic inside your LAN is untagged (i.e no VLAN header) there is no CoS (or PCP) info present.

Traffic would instead be marked with DSCP info in the IP header which may be mapped to CoS(PCP) / 'trusted' by the HG659.

kenkeniff

628 posts

Ultimate Geek


  #1115080 25-Aug-2014 12:50
Send private message

chrispchikin: 2 Different captures:

Host NIC1

Host NIC2

If you could PM me the .pcap files, but you're looking for CoS info the the 802.1Q (VLAN) header.



Sorry for the probably unnecessarily large dumps, hopefully no password were recorded lol:

Host NIC1 - ONT (277.3MB)> https://mega.co.nz/#!P0kAGYJK!8nV0aqCgNXuBIvHtcE-syzs_6YchKsFbE5ray-JUyQM
Host NIC2 - STB (49.9MB)> https://mega.co.nz/#!bkMFUAgZ!VcKVFAnGUrTQwvSsJWqI_nY_zZWebBobgn9ygPLzKzc

The setup was literally ONT > Host NIC 1 [Wireshark tap 1] > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 [Wireshark tap 2] > STB   (no HG659 attached)

With my current settings I'm actually getting some channels on the STB however very flaky, mostly no sound etc.

EDIT: Current setting here: https://imgur.com/a/PtqvO#0


chrispchikin
128 posts

Master Geek


  #1115103 25-Aug-2014 13:07
Send private message

So to confirm, you weren't using the VLC test client at all, just the STB plugged directly into the Win host running pfsense vm?

kenkeniff

628 posts

Ultimate Geek


  #1115114 25-Aug-2014 13:24
Send private message

chrispchikin: So to confirm, you weren't using the VLC test client at all, just the STB plugged directly into the Win host running pfsense vm?


Yes correct, had TCP/IP etc unchecked on both host NIC's too so should only be seeing STB and pfSense traffic.

kenkeniff

628 posts

Ultimate Geek


  #1115128 25-Aug-2014 13:48
Send private message

Ok so managed to get a dump of STB working perfectly though HG659 on LAN.

Setup was ONT > HG659 WAN > HG659 LAN > Server NIC 1 > Windows Bridge > Server NIC 2 [Wireshark] > STB

17.8MB: https://mega.co.nz/#!2lVFAIiL!AGIm3LIy28kcqRp5vUPRSu48fTzYvJNrM995HS6gc3A

kenkeniff

628 posts

Ultimate Geek


  #1115176 25-Aug-2014 14:22
Send private message

And finally managed to get a dump of STB working perfectly though HG659 on WAN side.

ONT > Server NIC 1 in Promisc Mode [Wireshark] > Windows Bridge > Server NIC 2 in Promisc Mode > HG659 Router WAN port > HG659 LAN > STB

16.1MB: https://mega.co.nz/#!yxdizSxB!B5IV9vEAxdsXcmZcSiFtJB5DfVgLYZCb_Wto-nGnQ8o


kenkeniff

628 posts

Ultimate Geek


  #1115312 25-Aug-2014 16:33
Send private message

Another update:

After following instructions here: http://www.intel.com/support/network/sb/CS-005897.htm

I was able to enable MonitorMode (same as promiscuous mode I think) on my host NIC which has the following effects:

ONT > Server NIC > Virtual NIC VLAN 10:

 

  • Can browse internet from Windows Host
  • Can stream test streams with VLC on Windows Host perfectly

ONT > Server NIC > Virtual NIC VLAN 10 > pfSense > Host-only Virtual LAN:

 

  • Can ping outside WAN from Windows Host
  • Can't seem to browse internet from Windows Host
  • Can't stream test stream

ONT > Server NIC > pfSense > Host-only Virtual LAN
:

 

  • Can setup VLAN10 under pfSense and receive WAN IP (wouldn't work before enabled MonitorMode)
  • Can ping outside WAN from Windows Host
  • Can't seem to browse internet from Windows Host
  • Can't stream test stream

On a side note, DHCP keep dying annoyingly on my Windows 8 requiring a "netsh int ip reset" from Admin CMD and reboot each time. Anyway to stop this from happening?

chrispchikin
128 posts

Master Geek


  #1115319 25-Aug-2014 16:45
Send private message

Is there any way you can get a dedicated PC with 2 NICs (even with a cheap realtek NIC from pbtech) running pfsense to test?

I'm beginning to wonder if the host networking is interfering with packet markings as well...

1 | ... | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

New Air Traffic Management Platform and Resilient Buildings a Milestone for Airways
Posted 6-Dec-2023 05:00


Logitech G Launches New Flagship Console Wireless Gaming Headset Astro A50 X
Posted 5-Dec-2023 21:00


NordVPN Helps Users Protect Themselves From Vulnerable Apps
Posted 5-Dec-2023 14:27


First-of-its-Kind Flight Trials Integrate Uncrewed Aircraft Into Controlled Airspace
Posted 5-Dec-2023 13:59


Prodigi Technology Services Announces Strategic Acquisition of Conex
Posted 4-Dec-2023 09:33


Samsung Announces Galaxy AI
Posted 28-Nov-2023 14:48


Epson Launches EH-LS650 Ultra Short Throw Smart Streaming Laser Projector
Posted 28-Nov-2023 14:38


Fitbit Charge 6 Review 
Posted 27-Nov-2023 16:21


Cisco Launches New Research Highlighting Gap in Preparedness for AI
Posted 23-Nov-2023 15:50


Seagate Takes Block Storage System to New Heights Reaching 2.5 PB
Posted 23-Nov-2023 15:45


Seagate Nytro 4350 NVMe SSD Delivers Consistent Application Performance and High QoS to Data Centers
Posted 23-Nov-2023 15:38


Amazon Fire TV Stick 4k Max (2nd Generation) Review
Posted 14-Nov-2023 16:17


Over half of New Zealand adults surveyed concerned about AI shopping scams
Posted 3-Nov-2023 10:42


Super Mario Bros. Wonder Launches on Nintendo Switch
Posted 24-Oct-2023 10:56


Google Releases Nest WiFi Pro in New Zealand
Posted 24-Oct-2023 10:18









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.







Norton for Gamers