Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13
'That VDSL Cat'
7764 posts

Uber Geek
+1 received by user: 1569

Trusted
Spark
Subscriber

  Reply # 1114583 24-Aug-2014 15:12
Send private message

kenkeniff:
hio77: Hows progress on this going?


I successfully created my network TAP which works on the LAN side at 100BASE-T however unsuccessfully it wont operate at 1000BASE-T (which I found out is impossible for a passive TAP) and the ONT wont seem to connect to the router at anything less than that.

My next option was gonna try this: http://www.m0rd0r.eu/how-to-make-transparent-bridge-with-slackware-linux

Will try your suggestion too Chris..


yes. i expected as much.


i thought the ONT would run at 100mbit still, be it subpar. 

Likely the VF Router is trying to force gbit speeds ild say..


as a cheeky way about it, you could try a normal old switch in the middle.. something to fool whichever end is stopping running at 100mbit..




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.




563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1114990 25-Aug-2014 11:11
Send private message

Not having much luck so far.

On a side note however I discovered that I seem to be able to bridge my WAN connection from pfSense to the ONT as many times as I like and end up with multiple simultaneous WAN connections over the one fibre (i.e. assigned multiple dynamic WAN IP's which I can assign to different VMs).

Not sure if this is expected behavior for fiber or what other side-effects or benefits besides being able to host multiple public-facing servers etc (still have to setup DDNS for each connection).

 
 
 
 


Try Wrike: fast, easy, and efficient project collaboration software
118 posts

Master Geek
+1 received by user: 30


  Reply # 1114991 25-Aug-2014 11:13
One person supports this post
Send private message

You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...

26344 posts

Uber Geek
+1 received by user: 5919

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1114997 25-Aug-2014 11:17
2 people support this post
Send private message

kenkeniff: Not having much luck so far.

On a side note however I discovered that I seem to be able to bridge my WAN connection from pfSense to the ONT as many times as I like and end up with multiple simultaneous WAN connections over the one fibre (i.e. assigned multiple dynamic WAN IP's which I can assign to different VMs).

Not sure if this is expected behavior for fiber or what other side-effects or benefits besides being able to host multiple public-facing servers etc (still have to setup DDNS for each connection).


Multiple IP address are something that's fully supported with UFB (as UFB itself is nothing but a layer 2 connection). This is no different to existing EUBA connections over ADSL2+ or VDSL2.

There slightly different MAC address limits based on the plan type, off the top of my head most are limited to 64 MAC addressesses.




563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115029 25-Aug-2014 11:52
Send private message

chrispchikin: You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...


I have Wireshark on my Windows host; what exactly would I be looking for?

So?:
ONT > Host NIC 1 > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 > STB

And capture NIC1 or Virtual NIC ?

5734 posts

Uber Geek
+1 received by user: 1692

Trusted

  Reply # 1115032 25-Aug-2014 11:54
Send private message

kenkeniff:
chrispchikin: You could even install wireshark on your Windows host and capture on the interface bridged to pfsense LAN...


I have Wireshark on my Windows host; what exactly would I be looking for?

So?:
ONT > Host NIC 1 > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 > STB

And capture NIC1 or Virtual NIC ?


Capture physical NIC.




Steam: Coil (Same photos as profile here)
Origin: Scranax
Currently playing on PC: Rust, Subnautica, CS:GO, AOE2 HD, BeamNG Drive, BF1.


118 posts

Master Geek
+1 received by user: 30


  Reply # 1115035 25-Aug-2014 12:00
Send private message

2 Different captures:

Host NIC1

 

Host NIC2

If you could PM me the .pcap files, but you're looking for CoS info the the 802.1Q (VLAN) header.


118 posts

Master Geek
+1 received by user: 30


  Reply # 1115047 25-Aug-2014 12:08
Send private message

You'll also need to look at the DSCP info in the IP header.

Because traffic inside your LAN is untagged (i.e no VLAN header) there is no CoS (or PCP) info present.

Traffic would instead be marked with DSCP info in the IP header which may be mapped to CoS(PCP) / 'trusted' by the HG659.



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115080 25-Aug-2014 12:50
Send private message

chrispchikin: 2 Different captures:

Host NIC1

Host NIC2

If you could PM me the .pcap files, but you're looking for CoS info the the 802.1Q (VLAN) header.



Sorry for the probably unnecessarily large dumps, hopefully no password were recorded lol:

Host NIC1 - ONT (277.3MB)> https://mega.co.nz/#!P0kAGYJK!8nV0aqCgNXuBIvHtcE-syzs_6YchKsFbE5ray-JUyQM
Host NIC2 - STB (49.9MB)> https://mega.co.nz/#!bkMFUAgZ!VcKVFAnGUrTQwvSsJWqI_nY_zZWebBobgn9ygPLzKzc

The setup was literally ONT > Host NIC 1 [Wireshark tap 1] > Host Virtual NIC - VLAN10 > pfSense > Host NIC 2 [Wireshark tap 2] > STB   (no HG659 attached)

With my current settings I'm actually getting some channels on the STB however very flaky, mostly no sound etc.

EDIT: Current setting here: https://imgur.com/a/PtqvO#0


118 posts

Master Geek
+1 received by user: 30


  Reply # 1115103 25-Aug-2014 13:07
Send private message

So to confirm, you weren't using the VLC test client at all, just the STB plugged directly into the Win host running pfsense vm?



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115114 25-Aug-2014 13:24
Send private message

chrispchikin: So to confirm, you weren't using the VLC test client at all, just the STB plugged directly into the Win host running pfsense vm?


Yes correct, had TCP/IP etc unchecked on both host NIC's too so should only be seeing STB and pfSense traffic.



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115128 25-Aug-2014 13:48
Send private message

Ok so managed to get a dump of STB working perfectly though HG659 on LAN.

Setup was ONT > HG659 WAN > HG659 LAN > Server NIC 1 > Windows Bridge > Server NIC 2 [Wireshark] > STB

17.8MB: https://mega.co.nz/#!2lVFAIiL!AGIm3LIy28kcqRp5vUPRSu48fTzYvJNrM995HS6gc3A



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115176 25-Aug-2014 14:22
Send private message

And finally managed to get a dump of STB working perfectly though HG659 on WAN side.

ONT > Server NIC 1 in Promisc Mode [Wireshark] > Windows Bridge > Server NIC 2 in Promisc Mode > HG659 Router WAN port > HG659 LAN > STB

16.1MB: https://mega.co.nz/#!yxdizSxB!B5IV9vEAxdsXcmZcSiFtJB5DfVgLYZCb_Wto-nGnQ8o




563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1115312 25-Aug-2014 16:33
Send private message

Another update:

After following instructions here: http://www.intel.com/support/network/sb/CS-005897.htm

I was able to enable MonitorMode (same as promiscuous mode I think) on my host NIC which has the following effects:

ONT > Server NIC > Virtual NIC VLAN 10:

 

  • Can browse internet from Windows Host
  • Can stream test streams with VLC on Windows Host perfectly

ONT > Server NIC > Virtual NIC VLAN 10 > pfSense > Host-only Virtual LAN:

 

  • Can ping outside WAN from Windows Host
  • Can't seem to browse internet from Windows Host
  • Can't stream test stream

ONT > Server NIC > pfSense > Host-only Virtual LAN
:

 

  • Can setup VLAN10 under pfSense and receive WAN IP (wouldn't work before enabled MonitorMode)
  • Can ping outside WAN from Windows Host
  • Can't seem to browse internet from Windows Host
  • Can't stream test stream

On a side note, DHCP keep dying annoyingly on my Windows 8 requiring a "netsh int ip reset" from Admin CMD and reboot each time. Anyway to stop this from happening?

118 posts

Master Geek
+1 received by user: 30


  Reply # 1115319 25-Aug-2014 16:45
Send private message

Is there any way you can get a dedicated PC with 2 NICs (even with a cheap realtek NIC from pbtech) running pfsense to test?

I'm beginning to wonder if the host networking is interfering with packet markings as well...

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Exhibition to showcase digital artwork from across the globe
Posted 23-May-2018 16:44


Auckland tops list of most vulnerable cities in a zombie apocalypse
Posted 23-May-2018 12:52


ASB first bank in New Zealand to step out with Garmin Pay
Posted 23-May-2018 00:10


Umbrellar becomes Microsoft Cloud Solution Provider
Posted 22-May-2018 15:43


Three New Zealand projects shortlisted in IDC Asia Pacific Smart Cities Awards
Posted 22-May-2018 15:14


UpStarters - the New Zealand tech and innovation story
Posted 21-May-2018 09:55


Lightbox updates platform with new streaming options
Posted 17-May-2018 13:09


Norton Core router launches with high-performance, IoT security in New Zealand
Posted 16-May-2018 02:00


D-Link ANZ launches new 4G LTE Dual SIM M2M VPN Router
Posted 15-May-2018 19:30


New Panasonic LUMIX FT7 ideal for outdoor: waterproof, dustproof
Posted 15-May-2018 19:17


Ryanair Goes All-In on AWS
Posted 15-May-2018 19:14


Te Papa and EQC Minecraft Mod shakes up earthquake education
Posted 15-May-2018 19:12


Framing Facebook: It’s not about technology
Posted 14-May-2018 16:02


Vocus works with NZ Police and telcos to stop scam calls
Posted 12-May-2018 11:12


Vista Group signs Aeon Entertainment, largest cinema chain in Japan
Posted 11-May-2018 21:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.