Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13
'That VDSL Cat'
8896 posts

Uber Geek
+1 received by user: 1952

Trusted
Spark
Subscriber

  Reply # 1114583 24-Aug-2014 15:12
Send private message

kenkeniff:
hio77: Hows progress on this going?


I successfully created my network TAP which works on the LAN side at 100BASE-T however unsuccessfully it wont operate at 1000BASE-T (which I found out is impossible for a passive TAP) and the ONT wont seem to connect to the router at anything less than that.

My next option was gonna try this: http://www.m0rd0r.eu/how-to-make-transparent-bridge-with-slackware-linux

Will try your suggestion too Chris..


yes. i expected as much.


i thought the ONT would run at 100mbit still, be it subpar. 

Likely the VF Router is trying to force gbit speeds ild say..


as a cheeky way about it, you could try a normal old switch in the middle.. something to fool whichever end is stopping running at 100mbit..




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.




563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1114990 25-Aug-2014 11:11
Send private message

Not having much luck so far.

On a side note however I discovered that I seem to be able to bridge my WAN connection from pfSense to the ONT as many times as I like and end up with multiple simultaneous WAN connections over the one fibre (i.e. assigned multiple dynamic WAN IP's which I can assign to different VMs).

Not sure if this is expected behavior for fiber or what other side-effects or benefits besides being able to host multiple public-facing servers etc (still have to setup DDNS for each connection).

121 posts

Master Geek
+1 received by user: 30


  Reply # 1114991 25-Aug-2014 11:13
One person supports this post
Send private message

You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...

27140 posts

Uber Geek
+1 received by user: 6579

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1114997 25-Aug-2014 11:17
2 people support this post
Send private message

kenkeniff: Not having much luck so far.

On a side note however I discovered that I seem to be able to bridge my WAN connection from pfSense to the ONT as many times as I like and end up with multiple simultaneous WAN connections over the one fibre (i.e. assigned multiple dynamic WAN IP's which I can assign to different VMs).

Not sure if this is expected behavior for fiber or what other side-effects or benefits besides being able to host multiple public-facing servers etc (still have to setup DDNS for each connection).


Multiple IP address are something that's fully supported with UFB (as UFB itself is nothing but a layer 2 connection). This is no different to existing EUBA connections over ADSL2+ or VDSL2.

There slightly different MAC address limits based on the plan type, off the top of my head most are limited to 64 MAC addressesses.




563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115029 25-Aug-2014 11:52
Send private message

chrispchikin: You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...


I have Wireshark on my Windows host; what exactly would I be looking for?

So?:
ONT > Host NIC 1 > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 > STB

And capture NIC1 or Virtual NIC ?

6175 posts

Uber Geek
+1 received by user: 1893

Trusted

  Reply # 1115032 25-Aug-2014 11:54
Send private message

kenkeniff:
chrispchikin: You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...


I have Wireshark on my Windows host; what exactly would I be looking for?

So?:
ONT > Host NIC 1 > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 > STB

And capture NIC1 or Virtual NIC ?


Capture physical NIC.




 


121 posts

Master Geek
+1 received by user: 30


  Reply # 1115035 25-Aug-2014 12:00
Send private message

2 Different captures:

Host NIC1

 

Host NIC2

If you could PM me the .pcap files, but you're looking for CoS info the the 802.1Q (VLAN) header.


121 posts

Master Geek
+1 received by user: 30


  Reply # 1115047 25-Aug-2014 12:08
Send private message

You'll also need to look at the DSCP info in the IP header.

Because traffic inside your LAN is untagged (i.e no VLAN header) there is no CoS (or PCP) info present.

Traffic would instead be marked with DSCP info in the IP header which may be mapped to CoS(PCP) / 'trusted' by the HG659.



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115080 25-Aug-2014 12:50
Send private message

chrispchikin: 2 Different captures:

Host NIC1

Host NIC2

If you could PM me the .pcap files, but you're looking for CoS info the the 802.1Q (VLAN) header.



Sorry for the probably unnecessarily large dumps, hopefully no password were recorded lol:

Host NIC1 - ONT (277.3MB)> https://mega.co.nz/#!P0kAGYJK!8nV0aqCgNXuBIvHtcE-syzs_6YchKsFbE5ray-JUyQM
Host NIC2 - STB (49.9MB)> https://mega.co.nz/#!bkMFUAgZ!VcKVFAnGUrTQwvSsJWqI_nY_zZWebBobgn9ygPLzKzc

The setup was literally ONT > Host NIC 1 [Wireshark tap 1] > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 [Wireshark tap 2] > STB   (no HG659 attached)

With my current settings I'm actually getting some channels on the STB however very flaky, mostly no sound etc.

EDIT: Current setting here: https://imgur.com/a/PtqvO#0


121 posts

Master Geek
+1 received by user: 30


  Reply # 1115103 25-Aug-2014 13:07
Send private message

So to confirm, you weren't using the VLC test client at all, just the STB plugged directly into the Win host running pfsense vm?



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115114 25-Aug-2014 13:24
Send private message

chrispchikin: So to confirm, you weren't using the VLC test client at all, just the STB plugged directly into the Win host running pfsense vm?


Yes correct, had TCP/IP etc unchecked on both host NIC's too so should only be seeing STB and pfSense traffic.



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115128 25-Aug-2014 13:48
Send private message

Ok so managed to get a dump of STB working perfectly though HG659 on LAN.

Setup was ONT > HG659 WAN > HG659 LAN > Server NIC 1 > Windows Bridge > Server NIC 2 [Wireshark] > STB

17.8MB: https://mega.co.nz/#!2lVFAIiL!AGIm3LIy28kcqRp5vUPRSu48fTzYvJNrM995HS6gc3A



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115176 25-Aug-2014 14:22
Send private message

And finally managed to get a dump of STB working perfectly though HG659 on WAN side.

ONT > Server NIC 1 in Promisc Mode [Wireshark] > Windows Bridge > Server NIC 2 in Promisc Mode > HG659 Router WAN port > HG659 LAN > STB

16.1MB: https://mega.co.nz/#!yxdizSxB!B5IV9vEAxdsXcmZcSiFtJB5DfVgLYZCb_Wto-nGnQ8o




563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115312 25-Aug-2014 16:33
Send private message

Another update:

After following instructions here: http://www.intel.com/support/network/sb/CS-005897.htm

I was able to enable MonitorMode (same as promiscuous mode I think) on my host NIC which has the following effects:

ONT > Server NIC > Virtual NIC VLAN 10:

 

  • Can browse internet from Windows Host
  • Can stream test streams with VLC on Windows Host perfectly

ONT > Server NIC > Virtual NIC VLAN 10 > pfSense > Host-only Virtual LAN:

 

  • Can ping outside WAN from Windows Host
  • Can't seem to browse internet from Windows Host
  • Can't stream test stream

ONT > Server NIC > pfSense > Host-only Virtual LAN
:

 

  • Can setup VLAN10 under pfSense and receive WAN IP (wouldn't work before enabled MonitorMode)
  • Can ping outside WAN from Windows Host
  • Can't seem to browse internet from Windows Host
  • Can't stream test stream

On a side note, DHCP keep dying annoyingly on my Windows 8 requiring a "netsh int ip reset" from Admin CMD and reboot each time. Anyway to stop this from happening?

121 posts

Master Geek
+1 received by user: 30


  Reply # 1115319 25-Aug-2014 16:45
Send private message

Is there any way you can get a dedicated PC with 2 NICs (even with a cheap realtek NIC from pbtech) running pfsense to test?

I'm beginning to wonder if the host networking is interfering with packet markings as well...

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.