bridge mode working on HG633

[Anonymous]

Hi

Thought I'd post this up as it may be of use, especially anyone who is studying Cisco.

I just got bridge mode working on the HG633 (v2.00t firmware). This allows me to effectively switch off NAT/Routing/Firewall/PPP Authentication on the HG633 and bridge or forward it over to another device. No nasty double NAT or anything like that. VPNs still work fine too.

In my case it goes

ADSL phone line > HG633 > Cisco 3825 router > Cisco 3550 switches > PC

The Cisco 3825 takes care of NAT/Routing/Firewall and PPP Authentication. What threw me for a while was that Bridge mode is not the same as Modem mode. I had to configure the Cisco for a lot more than just listening for a public IP on the external interface. Once I got my head around that though, it all worked great. If anyone was wondering if there is a difference in ping or throughput with this setup - there isn't. Everything is the same.

When you enable bridge mode on the HG633 the power and broadband lights remain solid green but the Internet light goes red. The ethernet light continues to flash as normal. I assume the red Internet light means no authentication and the green Broadband light means a valid link to the Exchange.

Settings on the HG633 are:

Internet menu > Internet Connection > Edit button > from Service type untick TR069,  from Connection type drop down list select Bridged  and finally from Link mode drop down list select EoA.  Click save and OK. That's it - just 3 options and it will work.

On the Cisco you have to do a *lot* more. This page was really helpful: https://www.dslreports.com/faq/8199

The important bits are:

interface GigabitEthernet0/0            
 description ADSL_WAN_PORT
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip virtual-reassembly in
 duplex auto
 speed auto
 media-type rj45
 pppoe enable group global
 pppoe-client dial-pool-number 1
 no cdp enable
 no mop enabled


interface Dialer1
 description ADSL_WAN_Dialer
 ip address negotiated
 no ip unreachables
 ip mtu 1492
 ip nat outside
 ip virtual-reassembly in
 zone-member security out-zone
 encapsulation ppp
 ip tcp adjust-mss 1452
 dialer pool 1
 dialer-group 1
 ppp authentication chap callin
 ppp chap hostname <your phone number>@talktalk.net
 ppp chap password <your talktalk broadband password>
 ppp ipcp dns request accept
 ppp ipcp route default
 ppp ipcp address accept
 no cdp enable

ip nat inside source list NAT interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1

ip access-list standard NAT
 permit <your internal IP network and wildcard mask>

dialer-list 1 protocol ip permit

Don't forget to configure your ZBF (zone based firewall). Some instructions for that are here: https://supportforums.cisco.com/t5/security-documents/ios-zone-based-firewall-step-by-step-basic-con...

You can perform some basic checking of the firewall using "Shields UP" available here: https://www.grc.com

Hope this helps someone

[Velkov]

Hello There, I have similar problem, could you please share your settings.

[marcofm]

Please help me to configure two TT HG633.  I am a real rookie.  A step-by-step will be very much appreciated.  I know what I want but not entirely sure HOW... My intended configuration below:

Thank you.

[stagger321]

OK, thats great news.

Mines been rock solid since I have it configured this way. Don't remember the last time I had to reboot it.

[ParallelPort]

Ok I finally got the HG633 to behave as a modem forwarding the internet IP to another computer - my Linux server.

The difference is that when I was on the slowest package - 17Mbit I needed to use a PPOE client to connect to a LAN IP that the HG633 had.  But with the faster 38Mbit speed deal Bridged mode is simpler in that the HG633 just forwards the internet IP to a single network client with its IP settings to use DHCP IP so it will grab the internet IP. This was confusing to me because the router was not showing it had a internet IP address when instead it was forwarding it to do a single dhcp client.

[stagger321]

Mate, I've already tried to tell you more than once, you have gone from a ADSL2+ feed to VDSL2 feed. Don't be surprised that the formats available are different.

If you really want the old options available to you you will have to ask TT to downgrade you line speed.
Other than that, have you approached you routers forum or the SNB forum I mentioned?

[ParallelPort]

The reason I am frustrated with this is that I had briged mode with PPPOE working before my speed upgrade on last Monday.  So I am dealing with a step backwards.

Now with less options I can set 'Bridged mode' and the Internet LED goes red but the router is not getting a Internet IP for a PPOE client to use.

[stagger321]

@ParallelPort

While I admire your resilience here, I'm not sure you got the message in my last post.

Yes the TT customer service follow a script, but I'm not sure what you are expecting here.

The router is putting out a bridged signal if you see the same LEDs as I do.

Can't see TT adding in any extra bridged options for you by way of any firmware upgrade. You ( and me ) are running in a non standard config from their perspective.

Good luck, but I really think you are wasting your time. I strongly recommend you look at your routers config, and not expect any extra from a ''free" router.

[ParallelPort]

Over 2 calls I spent 60 minutes on the phone to TalkTalk helpline who could not fix this.  Basically the people who work at the call center don't understand how a router works other than following a fault finding flow chart.  Maybe a TalkTalk engineer could help me but they don't work at or transfer their knowledge to a helpline call center.

So at this point the only thing I can try is to turn on Remote Management for the chance that my Huewei HG633 router gets its firmware upgraded from V1.15t to something higher that will bring back all the Brideged mode options I have lost.

[stagger321]

Hi @ParallelPort,

Re your point to @Anonymous  - if you have moved to VDSL2 from ADSL2+, which is what I assume has happened here, you will always end up with these limited options on the Internet connection page of the HG633. 
Your HG633 knows the feed it is getting from TT and provides you the appropriate settings. There is no control over this if you are on a VDSL2 feed which is what you must be if you are getting over 24Mbps. So it matters not how many times you hit the reset button.

When you have the settings the same as mine the power and broadband lights remain solid green but the Internet light goes red. This is normal. If it looks like that you are about done with the HG633 settings.

DHCP and NAT should be handled via your linux router, not by the HG633, so if anything is different there please disable it.

At this point you have the HG633 setup and its really down to your router setup, and at this point I have to defer any advise, as I am not aware of your settings, or how to configure them for your device.

If there is no-one here with your router setup I suggest you look to users on another forum.

I have had invaluable advice from the Small Net Builder forum (google 'snbforum') - in fact it was a combination of advice for the HG633 here, and additional stuff from the snbforum for the ASUS.

All I can show you is what I have on my ASUS WAN page - which gives little away unfortunately. A combination of the HG633 settings I have indicated above, and the ASUS settings gives me a rock solid bridged setup.

ASUS WAN page

[ParallelPort]

Stagger321 I have just seen your previous post from 03-10-2018 01:43 PM that indeed you had the same limited Bridged options that I now have.  
But I have tried many times trying the different limited Bridged mode options and I see that the router is not getting a internet IP.

ianr_tt My HG633 has a hardware version of H.1.01 and a firmware version of V1.15t.  I have tried both a factory reset through the web interface and a factory
reset using the pin hole reset button but neither has brought back the full Bridged mode options I had before.

[stagger321]

@ParallelPort

The setup you have looks to be the same as I have - see post above from October.

When you go to a Bridged VDSL2/Fibre setup the list of options ARE reduced like this.

It got me confused as well. 

The way I got it working on my Asus Router was to set the Huawei as you have, then let the Asus work out the settings for itself in a kinda semi - auto mode.

So the way to approach this may be to look into the Linux based server for answer, not the Huawei.

I doubt you will be able to change anything much from what you have on the Huawei, as it does indeed serve bridged with your settings.

[Anonymous]

Are you still on the v2.00t firmware? If you are, the only thing I can think of is a pinhole reset and then set it all up manually from scratch to see if the options have come back.

[ParallelPort]

Today I got my speed upgraded from the basic up to 17Mbit too up to 35Mbit.  After this upgrade my Huawei HG633 went from its custom working Bridged mode\PPPOE setup to a default setup of being a full router with wifi turned on.  So I did a backup of this configuration to a .conf file and tried to restore my backup .conf file that had the Bridged mode PPPOE configuration.  This did not work.  Then I went to Internet > Internet Connection > Edit > changed Connection type to Bridged but I then noticed I was missing some previously available options including Link mode drop down list too select EoA.  So now I can't use the HG633 in modem mode to forward the internet IP across PPPOE to my Debian Linux home server.  I tried to use the Bridged mode with going through the various more limited options but the HG633 would not get a internet IP.  Anyone got any ideas how to solve this so I can get it to work in PPPOE mode again?

[ParallelPort]

Yay I have got a Internet IP on my Windows 10 PC using a PPOE client on top of a regular Ethernet IP connection.  For user name I gave (my telephone number)@talktalk.net and a blank password. This was for testing.  Now I will setup a PPOE client the other Debian Linux router PC.

I wrongly assumed that I would get a Internet IP from the TalkTalk router using just a regular Ethernet connection because that worked years ago when my ISP was Virgin and I had a Cable Modem that simply forwarded the Internet IP address.

Thank you ianr_tt

[Anonymous]

this may help:

https://blog.confirm.ch/using-pppoe-on-linux/

[ParallelPort]

I also would like to setup my Huwei HG633 router as bridged mode so it basically forwards the WAN\Internet IP to a single Ethernet connection.  Which in my case would be a PC setup as a Debian Linux router.

But I can't get Bridged mode to work.  I have edited the Internet Connection:

    Connection type: Bridged

    Service type: Untick TR069

    Link mode: EoA

    And in the LAN Interface turned off IPV4 DHCP Server.

After doing this my regular games Windows 10 PC, that I am using for testing,  is the only Ethernet device plugged into the Huwei HG633 but it does not pick up a WAN\Internet IP but the PC can still connect to the router if i give it a static IP: 192.168.0.3 that goes to the Router LAN IP which in my case is 192.168.0.2.  So it seems part of the problem is that the Router is keeping its LAN IP instead of forwarding a dhcp WAN\Internet IP

Any ideas?

[charlesb224]

@stagger321 : Glad it's working for you.  VPN should work as intended, I use a software VPN for work and I have OpenVPN on my Asus router for inbound connections.

Check on your Asus router on the WAN menu, NAT Passthrough tab.  Should look like this:  I highlighted in RED what should be enabled for VPN (I have Voip as well, so all but one of mine are set to Enabled)WAN -NAT Passthrough

[stagger321]

I have it sorted folks.

The HG633 settings do work. for VDSL bridging. 

After advise from the SNB forum I left the connection setting to Automatic (is that what you meant @charlesb224??), i.e let it sort itself out - and voila - it worked. I am getting I am getting a decent throughput on the ASUS router upload & download.

My mistake here was to try and do a manual setup on the Asus before connecting to the HG633 when in bridge mode.

Having issues with VPN, but if it continues to work like this, for now I will be very happy for now.

Many thanks for the help.

[charlesb224]

on your Asus (I have an RT-ac66u and rt-ac68u in AiMesh mode)  Set to Dynamic IP  not pppoe

On the HG633, you have the WAN correct, but you MUST go to the LAN page and turn off the DHCP server.

[stagger321]

Got to admit struggling here.

Limited time to check the connection stability of the HG633 at this point. However not happy with the HG633 wifi range in our house (compared with my old TP-Link), or the lack of gigabit ports (for internal ethernet traffic - not WAN), so although it will work after a fashion, it will not suit my requirements.

Have purchased a ASUS RT-AC86U - with is a stonking newish (non modem) wifi router with fantastic speed and range, VPN config options, etc, but can't get it to get bridge connection from the HG633. 

Back to the HG633 in bridged mode - Its noticable that there is no Link Mode dropdown list such as @Anonymous lists above.

All I get is as shownbelow, and a big fat red link error on the ASUS. Can anyone assist?
BTW, the ASUS is set to accept PPPoE (Don't know if that is right), and I have disabled DHCP and Wifi on the HG633.

ISP Connection seems to be there - but nothing downstream (internal to my ASUS router)