Dynamic to Static IPSEC Tunnel with Netcomm NF4V

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Dynamic to Static IPSEC Tunnel with Netcomm NF4V

dotkiwi

5 posts

Wannabe Geek

#145400 16-May-2014 20:51

Hello my first post on Geekzone :)

I've just had a an Orcon UFB fibre connection installed using a Netcomm NF4V router and im on an unlimited plan.

Im trying to setup a Site to Site VPN tunnel to my work.
I have a dynamic IP on my side and other side is static.

Now my problem.

Since this is a dynamic to static vpn i would normally configure the vpn tunnel with the "Local ID" parameter but the Netcomm IPSEC configuration page doesn't appear to support the "Local ID" parameter.
I could install an additional router inside the Netcomm, but i dont like clutter and prefer a minimalist setup.

Is there something i have missed?
Will Orcon be offering static ips with unlimited ufb plans?
Can Orcon provide updated firmware that does support the "Local ID" parameter?

ripdog

548 posts

Ultimate Geek
Inactive user

#1046869 17-May-2014 10:55

If I were you, I'd replace the router.

Instructions: http://www.geekzone.co.nz/forums.asp?forumid=82&topicid=143067

Just make sure your new router supports MAC cloning and VLAN tagging.

I use the Asus RT-AC66U, and if you install the Merlin Firmware, Entware, and strongSwan, it can do IPsec. It also has excellent wifi, VLAN tagging, MAC cloning.

dotkiwi

5 posts

Wannabe Geek

#1046959 17-May-2014 13:25

Cheers mate thats interesting, though i'd prefer to follow the straight and narrow, if i run into any issues Orcon won't support any other routers.

That router you suggested does't support SIP, my phone line runs over the UFB connection plugged via the Orcon router.

ripdog

548 posts

Ultimate Geek
Inactive user

#1046968 17-May-2014 13:38

dotkiwi: Cheers mate thats interesting, though i'd prefer to follow the straight and narrow, if i run into any issues Orcon won't support any other routers.

That router you suggested does't support SIP, my phone line runs over the UFB connection plugged via the Orcon router.

There's no problem with running an alternate router - if something goes wrong, simply put the NF4V back to confirm it's not a router issue. A UFB connection to Orcon is very simple - plain IPoE+DHCP. There are basically no moving parts that can lead to an unoptimized/unreliable connection. It either works or it doesn't. Unless you screw with the MTU or something, I guess...

I use an SPA112 for SIP. There are also dedicated IP Phones and Softphones. The SPA112 is awesome because 2talk (my sip provider) does automated provisioning for it, leading to 0-config setup. I use 2talk instead of Orcon SIP because I need the flexibility.

If you really want an all-in-one, a Fritz!Box may be a good idea. I'm pretty sure from googling that it has IPSec support, but ask Snap (the NZ resellers) to be sure. It has SIP and DECT support, works well. Only problem is the WiFi can be a little weak, and some people have firmware stability issues.

As for getting a custom firmware modification done by Orcon... heh, good luck mate.

Have you considered just tunneling from your computer? I'm not too familiar with IPSec, so I don't know how optimal this is.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1046972 17-May-2014 13:55

You're wanting something that's outside the feature set of 99% of home users which the product you're using is targeted at. If you need IPSEC capabilities you really should be looking at appropriate hardware for the job.

The NF4V is a nice device, but it's a SOHO router, not a full on business grade device.

FireEngine

1223 posts

Uber Geek

Trusted

#1047023 17-May-2014 15:22

dotkiwi: Is there something i have missed?
Will Orcon be offering static ips with unlimited ufb plans?
Can Orcon provide updated firmware that does support the "Local ID" parameter?

Currently we don't offer static ip's on Residential Unlimited plans, only on Business plans. That is under review fairly periodically, I'll feedback your case as a request.

If our current firmware doesn't support it then I'm safe in saying I'm sure we don't have any current specific plans to add it but again I'll feedback to the team that deal with modems.

Regards FireEngine

dotkiwi

5 posts

Wannabe Geek

#1047172 17-May-2014 20:11

@ ripdog & sbiddle

Thanks for the feedback guys. Both valid answers.
I'm fully aware that throwing more money and buying additional hardware can solve my problem, was just trying to get the best bang for my buck, and making sure there weren't any other options.
The NF4V router has a strong feature set, i must say more than most SOHO models offer, will investigate other hardware options further.

@FireEngine

Thanks for feedback from Orcon, ill take that as an official answer. Look forward to hearing the outcome of the "review".
A few years ago i was on a resedential Orcon ADSL plan that had a static IP, loved it :) Keep up the good work.