Business Class Modem/router for VodafibreFibre ??

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Business Class Modem/router for VodafibreFibre ??

1101

3122 posts

Uber Geek

#180696 18-Sep-2015 10:04

Hi there. Rather than hijack the thread below, I'm starting a new one as this has differnet requirement

I'm after recommendations to replace a unreliable Vodafone Fibre modem , it has to be restarted occasionally (sometimes on the weekend unfortunately, so someone has to drive out there to do it)
New router wont need wifi, and would just be setup with a DMZ pointed to the firewall device

Vodafone sent out HGF659 as a replacement: what a disaster. I set the DMZ to to point to the Hardware firewall: incoming email to the server (25)
worked, as did remote desktop(TS) . So these ports were correctly forwarded through the DMZ (to the firewall)
OWA, Remote Web Workplace & access to the company website were all blocked/not working
That HG659 had to come out quickly & the old flaky modem put back in.

Im guessing the HG659 is more of a home user modem/router ?

So any recommendations? I'd assume the aftermarket fibre modems would work with any ISP , in case the company changes internet provider.

1 | 2

3556 posts

Uber Geek

Subscriber

#1389575 18-Sep-2015 10:09

You don't need a modem with UFB. Could you not use your hardware firewall?

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1389576 18-Sep-2015 10:11

Why are you using a router in front of a firewall/router and putting up with potential double NAT and not just hooking your router directly to the UFB connection?

1101

3122 posts

Uber Geek

#1389579 18-Sep-2015 10:18

lxsw20: You don't need a modem with UFB. Could you not use your hardware firewall?

I was just about to ask that question. :-)
So what would be conceived as the 'modem/router', is really the box screwed into the wall with the fibre going into it.?
Or is that fibre box on the wall a direct internet connection , so to speak?

And the Voda 'router' is just a straight router ?
so that Voda router can be removed & connect the hardware firewall direct to the actual fibre device .

Would the WAN port on the router need to match the companies static IP, or is there some NATing in that wall fibre box ?

lxsw20

3556 posts

Uber Geek

Subscriber

#1389582 18-Sep-2015 10:23

Nope that's the ONT. The HG659 is a Router/Modem, but you only use the modem part with an xDSL connection. So with UFB you're just using it as a router.

Depending on the firewall, it should be able to do a PPPoE auth and vlan tag and sort traffic routing for you. I would suggest getting someone familiar with that particular firewall product in to sort it out for you.

1101

3122 posts

Uber Geek

#1389754 18-Sep-2015 15:11

Ok, the Hardware firewall doesnt support VLAN Tagging (too old I guess)

So looks like I'll need a recommendation for a router
Cheers

lxsw20

3556 posts

Uber Geek

Subscriber

#1389757 18-Sep-2015 15:16

What is the current firewall? You should consider replacing that instead.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1389760 18-Sep-2015 15:17

1101: Ok, the Hardware firewall doesnt support VLAN Tagging (too old I guess)

So looks like I'll need a recommendation for a router
Cheers

Your best solutions are to either replace the current router (what you call the "firewall") with some better or spend $40ish on hardware to enable that to stay by using VLAN tagging.

Another router sitting in front is not a solution. That's just a poor network setup.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

1101

3122 posts

Uber Geek

#1390962 21-Sep-2015 09:25

sbiddle:

1101: Ok, the Hardware firewall doesnt support VLAN Tagging (too old I guess)

So looks like I'll need a recommendation for a router
Cheers

Your best solutions are to either replace the current router (what you call the "firewall") with some better or spend $40ish on hardware to enable that to stay by using VLAN tagging.

Another router sitting in front is not a solution. That's just a poor network setup.

what I called a firewall, IS a hardware firewall, not a router .
The FIREWALL doesnt support VLAN tagged, its too old, the newer versions (sonicwalls) do but are damn expensive .

1101

3122 posts

Uber Geek

#1390968 21-Sep-2015 09:33

lxsw20: What is the current firewall? You should consider replacing that instead.

Sonicwall .

Replacing/upgrading the sonicwall would be the best long term solution, but I dont think think that will happen due to cost .
Looks like a descent Draytek router isnt cheap either, but its not my choice on how much they are willing to spend .

Putting a router before the firewall isnt perfect, but to be honest , its really not that different than ADSL conections having a modem/router before the firewall .

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1390974 21-Sep-2015 09:42

1101:
sbiddle:
1101: Ok, the Hardware firewall doesnt support VLAN Tagging (too old I guess)

So looks like I'll need a recommendation for a router
Cheers

Your best solutions are to either replace the current router (what you call the "firewall") with some better or spend $40ish on hardware to enable that to stay by using VLAN tagging.

Another router sitting in front is not a solution. That's just a poor network setup.

what I called a firewall, IS a hardware firewall, not a router .
The FIREWALL doesnt support VLAN tagged, its too old, the newer versions (sonicwalls) do but are damn expensive .

So your firewall is doing no routing/NAT? That makes no sense and sounds like a very complex setup.

Aredwood

3885 posts

Uber Geek

#1390975 21-Sep-2015 09:46

Just do what Sbiddle says. The $40 piece of hardware he is referring to is probably a managed switch. Which you will setup to remove the VLAN tags. As currently you are running 2 routers. Meaning double NAT. Which is why you get weird problems with some things working and others not.

billgates

4705 posts

Uber Geek

Trusted

#1390977 21-Sep-2015 09:50

Fortigate 30D, 40D or 60D depending on your services requirements from the router. From what you have described a 40D will do the job.

Do whatever you want to do man.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1390983 21-Sep-2015 09:57

Aredwood: Just do what Sbiddle says. The $40 piece of hardware he is referring to is probably a managed switch. Which you will setup to remove the VLAN tags. As currently you are running 2 routers. Meaning double NAT. Which is why you get weird problems with some things working and others not.

2nd hand managed switch or a cheap hAP Lite if you want to go down the Mikrotik route and only need 100Mbps. You're looking at a few $ more for a cheap Mikrotik with 1Gbps ports.

Zeon

3918 posts

Uber Geek

Trusted

#1391040 21-Sep-2015 10:33

1101:
lxsw20: What is the current firewall? You should consider replacing that instead.

Sonicwall .

Replacing/upgrading the sonicwall would be the best long term solution, but I dont think think that will happen due to cost .
Looks like a descent Draytek router isnt cheap either, but its not my choice on how much they are willing to spend .

Putting a router before the firewall isnt perfect, but to be honest , its really not that different than ADSL conections having a modem/router before the firewall .

Are you 100% sure you are not using any routing function on it? What are its WAN IP and the LAN IP ranges?

I have heard that the Ubiquiti router is relatively easy to setup and not too expensive. I have mikrotik and its super complex so wouldn't suggest you touch that stuff.

Speedtest 2019-10-14

Sideface

9365 posts

Uber Geek

Trusted

Lifetime subscriber

#1391063 21-Sep-2015 11:07

Zeon: ... I have heard that the Ubiquiti router is relatively easy to setup and not too expensive. I have mikrotik and its super complex so wouldn't suggest you touch that stuff.

I have a Ubiquiti EdgeRouter Lite - it works well on a fast cable connection and was not expensive.
"Relatively easy to setup" is optimistic in my view - it took me many hours of research and trial-and-error to set up and I hope that I never, ever, need to change anything ever again

"The bottom line is that this is not a router that the average router buyer should even consider. It is poorly documented, difficult to set up and will test your patience unless you have experience with the Linux command line, understand routing mechanics and know what router interfaces are and how to use them. Not to mention that it has only, at best, two LAN ports, if you are willing to delve into the command line to bridge the two. So you'll probably need to buy a Gigabit switch to go along with it."

In the end I downloaded some configuration files from here - they worked.

Sideface

1 | 2