Secure independent connection to internet required

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Secure independent connection to internet required

1 | 2

Dynamic

3867 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2716576 1-Jun-2021 09:52

cyril7:

Dynamic:

@cyril7 can you please elaborate why you see this as a poor solution and a security issue? I'm genuinely curious.

Hi, users in the 2nd Router are NAT'd into the first, therefore they have full and unfettered access to all hosts and devices in that first network.

Your solution is what you would do if all you ever used or understood was residential routers. A commercial router need not cost a lot, and will let you do the job correctly, but will require more in depth knowledge of networking to make the most of it.

Cyril

Ahhhhh OK. My explanation may have been unclear. I meant leave the Vodafone router in place (for ISP-support reasons), and then BOTH parties put a router each behind this. The two tenancies are double-NATted (not great but not the end of the world for basic access) and are not able to access each other's network. If they wanted to share a network device (e.g. a printer that had cost accounting enabled), it could hang off the Vodafone router.

The OP struck me as likely not having an established IT support partner, so I suggested a solution at that enthusiast DIY level. Ultimately there are 'better' solutions available should the OP be prepared to invest in them.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

1101

3122 posts

Uber Geek

#2716609 1-Jun-2021 10:54

OP asked for "Secure independent"

Surely the best option is a 2nd internet connection ?
Otherwise , dont specify "secure & independant" if you arnt willing to pay costs to have that setup properly ? which may be 100% OK not to do it properly & accept some risk .
Shared internet isnt really "independent" , for reasons stated above .

Bteam

89 posts

Master Geek

Lifetime subscriber

#2732594 22-Jun-2021 11:54

Time marched on and we now need to implement the setup.

The new tenant and I thought once their ISP was informed they would connect their modem/router to a port on the ONT and have their own secure separate connection.

Today our neighbouring business was asked by their ISP whether they were moving as Chorus had asked to disconnect their fibre connection. We share the same physical postal address which adds to problems of identification.

Their optical fibre connection is split from our ONT and they have their own ONT as far as I can tell.

Am I correct to assume that 2 degrees, the new tenant's ISP, and Chorus can connect a modem/router through a port on the ONT independently from me and run their own operation from there?

Thanks,

Stephen Buckland

freitasm

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2732606 22-Jun-2021 12:06

@bmarquis might want to chime in.

Dynamic

3867 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2732610 22-Jun-2021 12:16

When comissioning a UFB connection, always give the serial number of the ONT so there is no confusion.

Yes, a second UFB connection can be set up at the same premises using the second port on the ONT if you ask. I believe this is limited to 100/100 or 200/200 speeds, but for the majority of small businesses this is fine and 950/450 connections give very little real-world benefit. I have heard that some ISPs are reluctant to do this, though I have no first-hand knowledge of that reluctance.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

Bteam

89 posts

Master Geek

Lifetime subscriber

#2732683 22-Jun-2021 14:07

Thanks, the powers that be had the ONT serial number but that appears to have been overlooked by Chorus. It was handwritten in ball point on a piece of gaffer tape at time of installation.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2732815 22-Jun-2021 20:22

Bteam:

Thanks, the powers that be had the ONT serial number but that appears to have been overlooked by Chorus. It was handwritten in ball point on a piece of gaffer tape at time of installation.

Wouldn't have been overlooked by Chorus - if you gave that serial number to the RSP they are the ones that would have incorrectly identified the ONT.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

Bteam

89 posts

Master Geek

Lifetime subscriber

#2732911 23-Jun-2021 09:29

I've realised that s/n of the ONT on an almost inaccesible side is not the same as the SLID gaffered to the front. Which is the relevant ID?

Dynamic

3867 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2732933 23-Jun-2021 10:01

We've only ever used the ONT serial number when ordering connections. Can you possibly get a camera phone into the space to take a photo of the serial number?

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

BMarquis

445 posts

Ultimate Geek

Trusted

Chorus

Lifetime subscriber

#2733130 23-Jun-2021 13:21

Bteam:

I've realised that s/n of the ONT on an almost inaccesible side is not the same as the SLID gaffered to the front. Which is the relevant ID?

The serial number is the best, it provides absolute certainty and is known by both RSPs and us.

I'm not sure I can personally help much in this situation... The @ChorusNZ folks are better positioned when it comes to installation/ordering and things. Although I suspect when you get that serial to the RSP, they will have this under control.

What I can say is that:
- Using a second port on the ONT is possible, but is ISP dependent - i.e some don't support the provisioning of it.
- Anywhere the physical ONT could be confused due to some kind of MDU or sub-let, etc situation, providing the serial (which starts with ALCL) is going to help give the RSP some certainty that they are ordering on the correct ONT.
- If there are any further troubles or you have some specific questions, feel free to reach out to me.

Cheers,
Brent

Bteam

89 posts

Master Geek

Lifetime subscriber

#2733213 23-Jun-2021 15:14

Thanks Brent,

There may have been "too many cooks in the kitchen" on this and the serial number had been supplied per QR code on side of ONT. 2 degrees has assured the new user that everything is in order and we'll know for sure on Monday.

To all who have provided answers, thanks. I know much more than when I started this post, at least.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2733315 23-Jun-2021 18:35

Bteam:

I've realised that s/n of the ONT on an almost inaccesible side is not the same as the SLID gaffered to the front. Which is the relevant ID?

SLID is not the same as the S/N.

When ordering a new connection the S/N is the only thing that's important as this will never change - the SLID will change on every new connection on the ONT as it's just a service ID.

BMarquis

445 posts

Ultimate Geek

Trusted

Chorus

Lifetime subscriber

#2733347 23-Jun-2021 20:31

sbiddle:
SLID is not the same as the S/N.

When ordering a new connection the S/N is the only thing that's important as this will never change - the SLID will change on every new connection on the ONT as it's just a service ID.

Not quite... You are thinking of the ASID( aka Product ID).
SLID is per ONT (It is the GPON Subscriber Location ID), rather than service, and is immutable. For historical reasons, a small number of SLIDs are not unique (the ones that start with F instead of all being digits).

Importantly though, the Serial Number is more accessable to RSPs, so has become the best thing to provide in these situations.

1 | 2