Hacker News Reader

Comment by liotier | Hacker News Reader

I plugged French Orange's GPON FTTH ONT into my Debian router's RJ-45 port, added a VLAN interface, added a couple of lines to my DHCP client configuration to pretend my router is some Sagem device and pass authentication to the server... And that's all - sweet 500/200 Mb/s throughput, no ISP CPE in sight (well, technically the ONT...) and Orange even waived the 3€/month CPE rental fee !

Former provider offered FTTB and I used the coaxial cable CPE as a bridge - and even when I do not have that option, I insist on having a router of my own as my network's demarcation: it is basic hygiene.

Other option for GPON would have been to plug a GPON SFP module into one of my switches - the friendly guy who laid the fiber to my apartment even left me one in case I changed my mind... But going through the switch to the router and back to the switch on a different VLAN is unnecessarily complicated in my case. Anyone wants a free GPON SFP module ?

View on HN

I thought about bridging an Ubiquit EdgeRouter and putting in front of the AT&T gateway. You must pass authentication back to the gateway. Users were also reporting around 100megs max speed which wasn’t acceptable for me since I pay for gigabit.

There is a new line of EdgeRouters out and maybe it has some acceleration for bridging. I would like this setup.

You might try this: https://github.com/jaysoffian/eap_proxy

You have to enable `set system offload ipv4 vlan enable` else your routing performance will suffer.

Hey that’s me! I’m glad it’s working for you. All credit to the folks who figured out this bypass. I just coded it up in Python when I couldn’t get some of the other solutions to work for me.

Ha! Small world on HN. I haven't personally tried the Edgerouter solution. I've been trying to replicate on pfSense/BSD, but it isn't as simple as you might think. :/

https://forum.pfsense.org/index.php?topic=111043.0

Yeah that seems like a bit of a headache. I appreciate your dedication to sticking with pfSense.

I get wirespeed routing from my ERL on my 1Gps connection. If it’s maxing out at 100 Mbps, those folks have it configured so that it’s having to route with the CPU.

I can’t find the dslreports link but here is one on the Ubiquiti forums . You can see the comments below about 100Mbps. The dslreports was slightly different but same results.

[1]https://community.ubnt.com/t5/EdgeMAX-Stories/Bypassing-AT-a...

That post configures the ERL in bridging mode. The ERL simply isn't suitable for that. Don't buy an ERL if you need to use it in a configuration that it can't offload and expect more than 100Mbps performance. It's got a minimal CPU, so yes, performance will suffer if it can't offload.

You don't need to use bridging mode to bypass the AT&T RG. That post probably predates the EAP proxy solution.

https://github.com/jaysoffian/eap_proxy

Reply on news.ycombinator.com