Can IPFire Firewall connect directly to UFB ONT?

Forums › New Zealand Broadband › Can IPFire Firewall connect directly to UFB ONT?

kiwitrc

4123 posts

Uber Geek
Inactive user

#124680 16-Jul-2013 06:49

As the subject states we run IPFire which appears to have all the requirements to connect to the ONT Ethernet port on our UFB connection.

From here it appears that it is possible?

Edit: Looks like it will http://forum.ipfire.org/index.php?topic=8427.0 amazing what you can find with the right words in the search box.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#856220 16-Jul-2013 07:29

It merely needs to support VLAN tagging on the WAN interface. Nothing you've posted above mentions that.

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#856221 16-Jul-2013 07:32

You could configure the nic to do the tagging, you can with windows drivers if the nic supports it.

Cyril

kiwitrc

4123 posts

Uber Geek
Inactive user

#857484 16-Jul-2013 16:08

Well after a fair bit of buggerising around (read ISP hadn't set us up properly) I can confirm it does work direct into the ONT, no modem required. Also doesn't need VLAN enabled as that is done in the ONT apparently.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#857492 16-Jul-2013 16:31

kiwitrc: Well after a fair bit of buggerising around (read ISP hadn't set us up properly) I can confirm it does work direct into the ONT, no modem required. Also doesn't need VLAN enabled as that is done in the ONT apparently.

VLAN tagging is required on your router in a default UFB configuration. If you don't have a VLAN tag set you won't get connected.

Your ISP can request an untagged UNNI port which will work with no VLAN tagging but because there is no 802.1p tag you can't have any 802.1p tags and therefore no high priority traffic for your CIR.

kiwitrc

4123 posts

Uber Geek
Inactive user

#857495 16-Jul-2013 16:35

sbiddle:
kiwitrc: Well after a fair bit of buggerising around (read ISP hadn't set us up properly) I can confirm it does work direct into the ONT, no modem required. Also doesn't need VLAN enabled as that is done in the ONT apparently.

VLAN tagging is required on your router in a default UFB configuration. If you don't have a VLAN tag set you won't get connected.

Your ISP can request an untagged UNNI port which will work with no VLAN tagging but because there is no 802.1p tag you can't have any 802.1p tags and therefore no high priority traffic for your CIR.

Thats way past what I understand, is this like QOS say for voice packets?

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#857507 16-Jul-2013 16:56

A UFB connection speed consists of two components - an best effort EIR queue and a high priority CIR queue which would be used for VoIP or other high priority traffic.

kiwitrc

4123 posts

Uber Geek
Inactive user

#857510 16-Jul-2013 16:58

OK thanks. Next step is to go SIP trunks so may have to have a word with our ISP. The IPFire does have VLAN tagging capability if we need it down the track.

Sharesies kids

Free kids accounts - trade shares and funds (NZ, US) with Sharesies (affiliate link).

dolsen

1476 posts

Uber Geek

Trusted

Lifetime subscriber

#857515 16-Jul-2013 17:09

sbiddle: A UFB connection speed consists of two components - an best effort EIR queue and a high priority CIR queue which would be used for VoIP or other high priority traffic.

Do you know if you need to use 802.1p priority tags to access the CIR queue for a ufb connection?

Not sure if I have this right, for a typical ufb connection?

All traffic needs to be tagged vlan 10.
VOIP traffic should also have 802.1p priority tag - perhaps 6?
Other, best effort data should have 802.1p tag of 0.

dolsen

1476 posts

Uber Geek

Trusted

Lifetime subscriber

#857951 17-Jul-2013 10:59

dolsen:
sbiddle: A UFB connection speed consists of two components - an best effort EIR queue and a high priority CIR queue which would be used for VoIP or other high priority traffic.

Do you know if you need to use 802.1p priority tags to access the CIR queue for a ufb connection?

Not sure if I have this right, for a typical ufb connection?

All traffic needs to be tagged vlan 10.
VOIP traffic should also have 802.1p priority tag - perhaps 6?
Other, best effort data should have 802.1p tag of 0.

Found a likely answer, from document

http://www.crownfibre.govt.nz/wp-content/uploads/2013/01/Chorus-UFB-Services-Agreement-Service-Description-for-Bitstream-2.pdf

Untagged traffic sent from the End User is tagged and marked as Low Priority. Tagged Traffic is treated as follows:
(a)Traffic tagged with PCP = 4 will be treated as High Priority.
(b)Traffic tagged with PCP = 0 will be treated as Low Priority.
(c)Traffic tagged with PCP = 1, 2, 3, 5, 6 or 7 will be remarked as PCP 0 and treated as Low Priority