Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
1948 posts

Uber Geek
+1 received by user: 469
Inactive user


  # 644041 20-Jun-2012 21:54
Send private message

Oh that's not good. Seems like Vodafone / ihug have a private network routeable from their public internet. That's what you are pinging something in their core network. So I would make sure you don't try and use those ip addresses.

4025 posts

Uber Geek
+1 received by user: 1076

Trusted

  # 644097 21-Jun-2012 00:26
Send private message

That looks ridiculous.
Out of interest is this a RTA1320, RTA1320E or RTA1320V6?

 
 
 
 


40 posts

Geek
+1 received by user: 6


  # 644185 21-Jun-2012 11:27
Send private message

Sounds a bit like broken Path MTU Discovery.  This is something I encountered when using half-bridge mode, and again now that we're using a PPPoE/PPPoA bridge.  From memory it was caused by some sites blocking all ICMP packets, including those needed for Path MTU Discovery to work.  The net result is you can establish a TCP connection to the affected sites, but you'll be lucky to get much, if any, data received from them.  Akamai-hosted sites were a big problem for us.

The good news is that there is a workaround for the problem that doesn't involve jumping up and down and yelling.  I use the following iptables rule on my Linux router:

/sbin/iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu

You can find lots more information by Googling for broken PMTUD

One result:
http://lartc.org/howto/lartc.cookbook.mtu-mss.html

8033 posts

Uber Geek
+1 received by user: 390

Trusted

  # 644223 21-Jun-2012 12:22
Send private message

PPPoA can't be easily bridged like PPPoE. PPPoA half bridge aka ip extension is a hack not a standard. This old page describes how different modems achieve it:
http://wlug.org.nz/Half%20bridge%20with%20PPPoA

I would try changing the modem  to use the "Class A" private range for LAN and DHCP server, eg:

Modem: 10.0.0.x
Router: 192.168.0.x


Other options:

If you are on Vodafone red network you may be able to use PPPoE in the modem instead of PPPoA authentication, PPPoE full bridge is easy and standard is most devices.

Get a Draytek Vigor 120 that does PPPoA to PPPoE translation/relay.



3284 posts

Uber Geek
+1 received by user: 985

Trusted

  # 644240 21-Jun-2012 13:08
Send private message

Rubicon: This sounds like a routing issue.  Have you checked the routing table for your modem? 


Routing table on the RTA1320 looks like this when connected. Sorry about the formatting. Afraid it doesn't mean much to me:
Destination Netmask Gateway Interface Metric
203.109.128.95 255.255.255.255 0.0.0.0 pppoa_0_100_1 1
27.252.127.146 255.255.255.255 0.0.0.0 br0 0
192.168.52.0 255.255.255.0 0.0.0.0 br0 0
0.0.0.0 0.0.0.0 203.109.128.95 pppoa_0_100_1 0



plambrechtsen: Oh that's not good. Seems like Vodafone / ihug have a private network routeable from their public internet. That's what you are pinging something in their core network. So I would make sure you don't try and use those ip addresses.


Yes Embarassed  Sadly changing the modem to 192.168.52.1 doesn't fix the issue, but it is odd. I can ping a range of addresses on 192.168.1.x... wonder what they are.


eXDee: That looks ridiculous. 
Out of interest is this a RTA1320, RTA1320E or RTA1320V6?


RTA1320

seatil: 
The good news is that there is a workaround for the problem that doesn't involve jumping up and down and yelling.  I use the following iptables rule on my Linux router: 

/sbin/iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 


YES! Progress! :) This seems to improve it in that I can now access the sites I previously couldn't.  But it also completely kills my speed.  I usually get ~12Mbps but with this on it drops to 2.6...  Not ideal but I will keep experimenting.

Any more ideas welcome!



Also, since this is possibly(?) looking like an ISP specific issue, maybe a mod could move it to the Vodafone forum?



3284 posts

Uber Geek
+1 received by user: 985

Trusted

  # 644242 21-Jun-2012 13:12
Send private message

Ragnor: PPPoA can't be easily bridged like PPPoE. PPPoA half bridge aka ip extension is a hack not a standard. This old page describes how different modems achieve it:
http://wlug.org.nz/Half%20bridge%20with%20PPPoA

I would try changing the modem  to use the "Class A" private range for LAN and DHCP server, eg:

Modem: 10.0.0.x
Router: 192.168.0.x


Other options:

If you are on Vodafone red network you may be able to use PPPoE in the modem instead of PPPoA authentication, PPPoE full bridge is easy and standard is most devices.

Get a Draytek Vigor 120 that does PPPoA to PPPoE translation/relay.


Thanks Ragnor.

No I'm not on red network anymore (I think) as I'm quite far from exchange so got swapped to wholesale.

Yeah, Vigor is certainly one I would like to try.  Not cheap though (RTA1320 can be had for ~$1.50 on trademe, lol)


I'll try those ranges for modem\router though.

192 posts

Master Geek


  # 644243 21-Jun-2012 13:14
Send private message

I'm on Vodafone (not on the red network) using the RTA1320E (192.168.1.x) half bridged to a WRT54GL (192.168.2.x) with no issues.  When I get home I'll take a look at the routing tables on the RTA1320E and see how they compare to yours.

 
 
 
 




3284 posts

Uber Geek
+1 received by user: 985

Trusted

  # 644337 21-Jun-2012 16:02
Send private message

dannyres: I'm on Vodafone (not on the red network) using the RTA1320E (192.168.1.x) half bridged to a WRT54GL (192.168.2.x) with no issues.  When I get home I'll take a look at the routing tables on the RTA1320E and see how they compare to yours.


Thanks, that would be helpful! :)



3284 posts

Uber Geek
+1 received by user: 985

Trusted

  # 644346 21-Jun-2012 16:13
Send private message

Hrm. Just retested and this is now working... Haven't changed anything and I'm pretty sure I'm not going crazy ;-) I need to go out for a while but will test more when I get back.

5348 posts

Uber Geek
+1 received by user: 1201

Trusted
Subscriber

  # 644347 21-Jun-2012 16:14
Send private message

sbiddle:
sidefx: Hmm, ok I will check what it's set to on the modem\router that works.

I think it defaults to 1500 on the RTA1320. Are there any others I should try? I can't see any definitive instructions on the vodafone site.


Your DSL MTU will be lower than this. I don't know what Vodafone use but if you're on EUBA you could try 1492.


I think you're wrong. 

192,168.*.*  is all reserved as private .....but 192.0 to 192.167 and 192.169 to 192.255 are all valid public addresses.  






____________________________________________________
I'm on a high fibre diet. 

 

High fibre diet


29 posts

Geek


  # 644459 21-Jun-2012 21:16
Send private message

sidefx: Routing table on the RTA1320 looks like this when connected. Sorry about the formatting. Afraid it doesn't mean much to me:
Destination Netmask Gateway Interface Metric
203.109.128.95 255.255.255.255 0.0.0.0 pppoa_0_100_1 1
27.252.127.146 255.255.255.255 0.0.0.0 br0 0
192.168.52.0 255.255.255.0 0.0.0.0 br0 0
0.0.0.0 0.0.0.0 203.109.128.95 pppoa_0_100_1 0


I don't see anything wrong with this, so your problem must be caused by something else.  In case you want a brief explanation:
1) Traffic to Vodafone's gateway (203.109.128.95/32) is sent via the modem's ADSL port (pppoa_0_100_1).
2) Traffic directed to your public IP address is directed via the modem's LAN port (br0).
3) Traffic to addresses on your LAN (192.168.52.0/24) is sent via the modem's LAN port.
4) All other traffic is sent to Vodafone's gateway via the ADSL port.

As such, traffic to adobe.com, or other addresses in 192.0.0.0/8, is being sent via the ADSL line.




3284 posts

Uber Geek
+1 received by user: 985

Trusted

  # 644596 22-Jun-2012 10:34
Send private message

@Rubicon: Thanks, yeah, that makes perfect sense.

As I say above, this all now seems to be working without any real issue. I still have no idea what fixed it, but I'm not going to complain.


The only minor niggle remaining now is that pinging the modem is taking a bit longer than 1ms to complete (less than 2ms though lol), but I was under the impression that anything on your local network should be well under 1ms?

1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic



Switch your broadband provider now - compare prices


Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Dunedin selects Telensa to deliver smart street lighting for 15,000 LEDs
Posted 18-Jul-2019 10:21


Sprint announces a connected wallet card with built-in IoT support
Posted 18-Jul-2019 08:36


Educational tool developed at Otago makes international launch
Posted 17-Jul-2019 21:57


Symantec introduces cloud access security solution
Posted 17-Jul-2019 21:48


New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.