Transparent bridge for VLAN tag to non VLAN router

Forums › New Zealand Broadband › Transparent bridge for VLAN tag to non VLAN router

coffeebaron

6319 posts

Uber Geek
+1 received by user: 3581

Trusted

Lifetime subscriber

#119093 20-May-2013 13:41

Got one or two customers who may move to UFB. Router installed is a Cisco UC320, which runs their phone system.

The UC320 cannot dot VLAN tag on WAN side; so will only work for non-tagged PPPoE connection.

Question: is there some type of router I can put between the ONT and the UC320 to take care of the VLAN 10 tag, but still allow the UC320 to do the PPPoE auth? This would need to work transparently so as to avoid double NAT etc.

A short how too guide would be great too.

Cheers

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

lokeynz

106 posts

Master Geek
+1 received by user: 16

#822449 20-May-2013 14:26

One of these should do the trick.

Ditch the default config.
Add a VLAN10 subinterface to ether1.
Create a bridge interface and add your VLAN10 as well as ether2 to it.
Plug ONT to ether1, UC320 to ether2, Profit?

sbiddle

30853 posts

Uber Geek
+1 received by user: 9998

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#822463 20-May-2013 14:56

A Mikrotik device such as the RB750 mentioned above it the cheapest option. The easiest option would be to use a VLAN capable switch, but you're not going to get one new for as cheap as an RB750.

mercutio

1392 posts

Uber Geek
+1 received by user: 134

#822471 20-May-2013 15:15

sbiddle: A Mikrotik device such as the RB750 mentioned above it the cheapest option. The easiest option would be to use a VLAN capable switch, but you're not going to get one new for as cheap as an RB750.

they've come down in cost a lot, still not as cheap as rb750, but a vlan capable switch is useful for more than just that..

based on ascent's pricing cost diff is about 3x.

8 port vlan capable switch with poe (~360) http://www.ascent.co.nz/productspecification.aspx?ItemID=414726

16port vlan capable switch (~$320) http://www.ascent.co.nz/productspecification.aspx?ItemID=410699

routerboard 750 (~$120, out of stock) http://www.ascent.co.nz/productspecification.aspx?ItemID=411043

the switches also have fibre, not including those ports in the count.

Zeon

3927 posts

Uber Geek
+1 received by user: 759

Trusted

#822472 20-May-2013 15:15

May be able to get some cheap manages switches on Trademe? Maybe even your current switch there already can do VLAN tagging?

Speedtest 2019-10-14

mercutio

1392 posts

Uber Geek
+1 received by user: 134

#822477 20-May-2013 15:24

Zeon: May be able to get some cheap manages switches on Trademe? Maybe even your current switch there already can do VLAN tagging?

considering they're using phones, if they're not already they should have a seperate vlan for phones, and use poe anyway...

BMarquis

466 posts

Ultimate Geek
+1 received by user: 581

Trusted

Chorus

Lifetime subscriber

#822634 20-May-2013 19:58

You could just order the bitstream 2 service as an untagged UNI?

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9998

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#822659 20-May-2013 20:44

BMarquis: You could just order the bitstream 2 service as an untagged UNI?

I'm pretty sure off the top of ky head when you do this you lose the ability to use 802.1p tags for traffic and lose the CIR meaning there are no high priority and low priority queues. As the customer is using VoIP I wouldn't recommend this.

BMarquis

466 posts

Ultimate Geek
+1 received by user: 581

Trusted

Chorus

Lifetime subscriber

#822715 20-May-2013 22:19

sbiddle:
BMarquis: You could just order the bitstream 2 service as an untagged UNI?

I'm pretty sure off the top of ky head when you do this you lose the ability to use 802.1p tags for traffic and lose the CIR meaning there are no high priority and low priority queues. As the customer is using VoIP I wouldn't recommend this.

You are right, untagged = no VLAN, so no 802.1p bit.

But - OP says the router cannot VLAN tag, so I assumed nothing heading into the UNI would be tagged... Can the UC320 really only pass through VLAN tags but not add tags for PPPoE? Sounds odd to me.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9998

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#822750 21-May-2013 06:19

BMarquis:
sbiddle:
BMarquis: You could just order the bitstream 2 service as an untagged UNI?

I'm pretty sure off the top of ky head when you do this you lose the ability to use 802.1p tags for traffic and lose the CIR meaning there are no high priority and low priority queues. As the customer is using VoIP I wouldn't recommend this.

You are right, untagged = no VLAN, so no 802.1p bit.

But - OP says the router cannot VLAN tag, so I assumed nothing heading into the UNI would be tagged... Can the UC320 really only pass through VLAN tags but not add tags for PPPoE? Sounds odd to me.

Are you confusing 802.1p and 802.1q?

The UC320 can do DSCP and 802.1p tags which are passed through. I obviously just can't do 802.1q tags.

BMarquis

466 posts

Ultimate Geek
+1 received by user: 581

Trusted

Chorus

Lifetime subscriber

#822752 21-May-2013 06:38

sbiddle:
BMarquis:
sbiddle:
BMarquis: You could just order the bitstream 2 service as an untagged UNI?

I'm pretty sure off the top of ky head when you do this you lose the ability to use 802.1p tags for traffic and lose the CIR meaning there are no high priority and low priority queues. As the customer is using VoIP I wouldn't recommend this.

You are right, untagged = no VLAN, so no 802.1p bit.

But - OP says the router cannot VLAN tag, so I assumed nothing heading into the UNI would be tagged... Can the UC320 really only pass through VLAN tags but not add tags for PPPoE? Sounds odd to me.

Are you confusing 802.1p and 802.1q?

The UC320 can do DSCP and 802.1p tags which are passed through. I obviously just can't do 802.1q tags.

Not at all.

The .1p bit is part of the .1q vlan header. you must have a vlan tag to be able to set the p-bit marking.
the only way to have 802.1p 'without' .1q vlan tag is to have the vlan tag set to 0 (so in relality you are vlan tagging anyway...)

I'd be as surprised as my last post if the UC320 could set the vlan to 0 and set the .1p bit without also allowing the vlan ID to be set as something other than 0.

DSCP is a layer 3 priority tag which we dont use or translate to .1p in UFB.