Eircom Huawei F2000 Gateway Bridging

TheChizler

I've had the pleasure of having to work with this contraption at both home and the family home, and feel that it's so complicated and tempermental that this topic deserves its own thread.

I've read a few threads on successfully bridging the F1000, here for example, and have done it myself on the pre-eFibre gateways, but I haven't been able to do it or find any information on its successor. Has anybody here managed to bridge via PPPoE and use it as a basic VDSL modem?

I spent three hours last night to incorporate the F2000 into the existing setup in the family home as they upgraded yesterday (I'm reluctant to call it an upgrade as the speeds are actually worse). This was the standard Zyxel ADSL2+ gateway bridged via PPPoE into a Netgear WNDR3700v3 (I think!) running dd-wrt. The only setting I changed on the Zyxel was selecting Bridge mode instead of Gateway, and putting eircom@eircom.net and Broadband1 as the PPPoE username and password in the Netgear, MTU set to default of 1492.

The new gateway gives MANY more options in its internet connection setting, I work as an electrical/layer 2 network engineer and way too many of the options were foreign to me, they either are badly labeled or have a non-standard implementation.

By leaving most of the settings for the VDSL connection intact and changing the encapsulation to PPP (will copy to a new connection profile in the next attempt) I managed to get every device in the house assigned a public IP, with regular internet access. After hastily unplugging non essential devices I couldn't get the Netgear to connect through its WAN port using the above PPPoE settings. I read on the other thread about using phone number/account number but these didn't work either. I tried disabling the VLAN at the Huawei and enabling VID 10 on the Netgear but no joy either.

Unfortunately Eircom won't even talk to you about bridging this and the manual is more of a datasheet. So, any ideas?

ED E

1. Reset the F2000
2. Bridge it, reboot to ensure its applied.
3. Set the WNDR to do WAN DHCP off the F2000.

That should leave all the PTM stuff to the F2000 and have a purely ethernet interconnect between the two.

TheChizler

ED E wrote: »

1. Reset the F2000
2. Bridge it, reboot to ensure its applied.
3. Set the WNDR to do WAN DHCP off the F2000.

That should leave all the PTM stuff to the F2000 and have a purely ethernet interconnect between the two.

In hindsight I was only doing a soft reboot and trusting the F2000 to do it properly. So as far as the F2000 goes it's only changing to PPP? It's always simpler than you expect! Cheers. I'll report back.

One other thing I'm trying to do is change the IP address for the F2000, it's only accepting addresses in the range 192.168.1.x, however I'd like to change the subnet in keeping with the previous setup. We would have most devices on 192.168.1.x and have the modem on 192.168.0.1, just to keep things separate. Is that possible or is it tied down? I could always change the WNDR to something else, but there's a load of static IPs for various access points and servers that I don't have the passwords for!

ED E

Second octet cant be changed, thats a major f'ckup on the part of Huawei. Its been around for a while and not fixed by the looks of things.

tetsujin1979

I recently upgraded to eFibre, and I've been wrestling with my own f2000 the last few days to try and get port forwarding set up.

I've used the following steps
log in to admin console
Internet -> Forwarding -> New Port Mapping
Selected the correct application from the drop down list, and the machine I want to forward requests to

Clicked save, and tried to connect, but no luck. I've rebooted and still doesn't work. Also tried dropping the security level and selecting that machine as a DMZ but still not working. I've confirmed the port is open with http://www.canyouseeme.org/ , and that other ports are closed, so it's possibly an internal setting. I had this setup with the previous router I had from eircom with no issues

Any ideas?

(not sure if this is the right thread for this, feel free to move if not)

ED E

If canyouseeme says its open that means the forward IS working and its not the F2000 thats at fault.

tetsujin1979

ED E wrote: »

If canyouseeme says its open that means the forward IS working and its not the F2000 thats at fault.

Thanks, but it's the only difference between my current and previous setup - I've made no change to the machine itself.
I've tried connecting to the port on the router, but the request wasn't forwarded to the destination machine
Was wondering if it's some customisation on the router by eircom, to not allow forwarding?

tetsujin1979

never mind, it's working. Everything I did was right, it turns out I'm an idiot.
Thanks for the help

paulieb2006

CAn someone explain to me how to open the ports on this modem for an Xbox 360.
The ports are

• Port 88 (UDP)
• Port 3074 (UDP and TCP)
• Port 53 (UDP and TCP)
• Port 80 (TCP)

Thanks
Paul

yankinlk

ED E wrote: »

1. Reset the F2000
2. Bridge it, reboot to ensure its applied.
3. Set the WNDR to do WAN DHCP off the F2000.

That should leave all the PTM stuff to the F2000 and have a purely ethernet interconnect between the two.

replying here in case i need to find this again!
Just got Eir efibre... f2000 router.

After much headache, got bridge mode going using the simple instructions above, plus this https://www.spark.co.nz/help/internet-data/equipment/huawei/hg659-gateway/setup-bridge-mode-huawei-hg659-hg659b/

I also disabled all wireless modes in the f2000 first, since it was playing havoc with my ddwrt setup (which works perfect).

swoofer

I have the F2000 and know nothing about it so would like it in bridge mode BUT I am connected via the wan port as I have a trial of FTTH. I had a brief look at the settings in the F2000 and one thing I tried was to disable remote management and clicked save , it then rebooted and updated the firmware I cannot access remote management settings now! The user interface changed as well. I get a nice home screen that shows connections etc. I now know I am connected via ethernet ie wan port and I have no username or password. It justs connects. Enscapulation is IPOE, which I have never heard of. There is a setting that says Layer2bridging and it has br0 and br1. It is possible to edit settings, br0 has ticks on all headings eg WAN3_INTERNET_R_ATM3_0_33, there are 8 in total. I want to bridge to an asus rt-nn66u.

Oops under internet settings I found bridged but what next?

I cant see IPOE in the asus

Help.

ED E

You dont need to bridge.

Connect the Asus to the ONT and forget the F2000. WAN DHCP.

swoofer

I tried direct but cant find where to do WAN DHCP? I thought they would use mac address from the F2000?

Packet

swoofer wrote: »

Enscapulation is IPOE, which I have never heard of.

I want to bridge to an asus rt-nn66u.

Oops under internet settings I found bridged but what next?

I cant see IPOE in the asus

Help.

IPOE means native IP over Ethernet. IPv4oE/DHCP & IPv6oE/DHCPv6-PD are both supported.

ED E wrote: »

You dont need to bridge.

Connect the Asus to the ONT and forget the F2000. WAN DHCP.

Correct but the 3rd party router must have 802.1q VLAN 10 enabled on its WAN interface.

swoofer

router is 2 years old, updated to latest asus software but cant find option for 802.1q.vlan 10 in the wan section. Its probably hidden . I was hoping it would connect
automatically. It may need that other software to configure it correctly.

ED E

swoofer wrote: »

router is 2 years old, updated to latest asus software but cant find option for 802.1q.vlan 10 in the wan section. Its probably hidden . I was hoping it would connect
automatically. It may need that other software to configure it correctly.

Its hidden in some fw versions it seems.

Go: LAN-IPTV-Select ISP Profile: Manual- Enter 10 blank blank.

Might need to reboot after.

Packet

swoofer wrote: »

router is 2 years old, updated to latest asus software but cant find option for 802.1q.vlan 10 in the wan section. Its probably hidden . I was hoping it would connect
automatically. It may need that other software to configure it correctly.

To put the F2000 into bridge mode go to

Internet tab-->Internet Settings-->Internet_TR069_(VDSL or ETH)_VID_10

For FTTH it is the separate WAN ETH port

select Edit, change "Connection type" from IP routing (IP) to "Bridged".
Save the change.

Then plug the WAN port of the ASUS into a LAN port of the F2000. The F2000 puts VLAN 10 on.

The F2000 can still be administered on 192.168.1.254 when in bridge mode but you might have to temporarily statically configure your computer's LAN address if that forgets its DHCP lease. The DHCP server (and WiFi) in the F2000 shutdown when it is in bridgemode. When it is put back into IP routing mode these must be manually turned back on.

swoofer

ok used ed e settings, router reconfigured itself without rebooting, then went to internet set up and selected manual, then a few options, clicked next a few times and... connected. It happened so fast I did not get a chance to make a note!!

Will keep this page and thanks both.

TheChizler

Eventually got around to sitting down to sort this out at home. They were having connection problems and the eir technician was called out. Washed his hands of the problem and said it was because there were too many devices connected and the modem should be at the point the line comes into the house (even though the previous guy was happy with the wiring from the entry point to where all the equipment is) and moved the modem there. Cue me being called because nobody can get internet because the switch > panel > access points have no internet connection.

So two feet of solid wall drilling later I've got a dedicated line from the modem to the distribution point. Figured while I'm here I might as well sort out the bridging so they can't complain there's too many devices connected. Tried applying the instructions above and turns out the WNDR3700 can't do tagging on the WAN port. I can set the F2000 to bridge mode and WNDR gets an IP via DHCP on it's WAN port, but nothing more. Is it possible to set the F2000 to do the push/pop tagging for VLAN 10 itself while in bridge mode? Half tempted to buy a cheap managed switch that can do tagging but there must be some thing that I'm missing. At the moment I've left it in IP routing mode and double NATting between the F2000 and the WNDR but that's just asking for trouble.

Edit: Never mind I got it working! Read somewhere that it didn't support tagging explicitly on the WAN interface, but when I went to (in the WNDR3700v2) Setup > Networking > and added a VID 10 on the interface assigned to the WAN port it all started working. WNDR gets assigned a public IP. Can't access the F2000 any more but sure what harm. Thanks for all the tips!

Some_Person

Can you not set the F2000 to TRUE bridge mode and run PPPoE on the Netgear?

I wouldn't fancy having the modem still handling PPPoE.

TheChizler

Some_Person wrote: »

Can you not set the F2000 to TRUE bridge mode and run PPPoE on the Netgear?

I wouldn't fancy having the modem still handling PPPoE.

I'm not sure that encapsulation is used for VDSL, and this was the simplest change to make that worked. I'm a layer 2 guy and not too familiar with these higher level protocols so I don't want to push my luck!

ED E

You can use PPPoE, but by default they use IPoE.

Some_Person

Some_Person wrote: »

Can you not set the F2000 to TRUE bridge mode and run PPPoE on the Netgear?

I wouldn't fancy having the modem still handling PPPoE.

This is true bridge mode. By default, VDSL doesn't use PPPoE but you can still use it if you want to.

Fiend-Foe

ED E wrote: »

1. Reset the F2000
2. Bridge it, reboot to ensure its applied.
3. Set the WNDR to do WAN DHCP off the F2000.

That should leave all the PTM stuff to the F2000 and have a purely ethernet interconnect between the two.

Hi,

Sorry for digging up old threads. I've really been trying to acheive this for some time. Have a DD-WRT router, used to work fine with UPC Cisco cable modem, just set an option to DMZ to router and all other options became disabled. DD-WRT just connected. Unfortunately eir my only option...

Having these ports accessible is essential, I use OpenVPN on my router, need to be able to send WoL over WAN, VNC, streaming SDR receiver, operating remote relays, FTP, Apache, tor exit node, IP cams... All useless (except at home) for the moment.

Any chance somebody could walk me through the above/working steps in a little more detail. Total noob when it comes to these new modems Also i will I lose my any TV service? Can I bridge to a single ethernet port so TV still gets internet connection as required?

I've tried forwarding ports on the F2000 to my DD-WRT, canyouseeme sees it as open, but cannot connect to any services. Tried disabling firewalls, A/V etc. Do I need to give modem+router same IP structure? If so which should be gateway?

Do I need to use multiple ports to forward things, something like
VNC

F2000 Ext Port Int Port IP

5900 5901 x.x.x.x

DDWRT Ext Port Int Port IP

5901 5902 x.x.x.x

Dunno if that would make any difference, but I am going crazy here. Hoping someone has a solution!!

Many Thanks...

Follow the screenshot attached to bridge the F2000. Then just set your router's WAN port to DHCP.

Fiend-Foe

Karsini wrote: »

Follow the screenshot attached to bridge the F2000. Then just set your router's WAN port to DHCP.

Hi, thanks for your response!

I tried that already, but gave it another go. I had screenshots but that PC is offline now, need to reset the modem.

Basically bridged it as you said, router on 'Automatic Configuration - DHCP'

Internet connection drops, router status reports WAN down and TV dies...

TV dies? Do you have Eir Vision? If so you'd have to double NAT the F2000.

ED E

Fiend-Foe wrote: »

Hi, thanks for your response!

I tried that already, but gave it another go. I had screenshots but that PC is offline now, need to reset the modem.

Basically bridged it as you said, router on 'Automatic Configuration - DHCP'

Internet connection drops, router status reports WAN down and TV dies...

If you have TV then you don't wanna bridge the F2000, use it as your router and just use the DDWRT unit as a wireless access point. Chances are the TV will cause you pain at some point and if you're passing through the multicast stream you'll get zero support until everything is reset.

Fiend-Foe

ED E wrote: »

If you have TV then you don't wanna bridge the F2000, use it as your router and just use the DDWRT unit as a wireless access point. Chances are the TV will cause you pain at some point and if you're passing through the multicast stream you'll get zero support until everything is reset.

Thanks, new it would cause problems.

Thing is the DDWRT supports the VPN, I have 4 servers and a bunch of other stuff...

Karsini, to double NAT do I need to map each port the same on both modem and router? Should they have same IP structure?

Don't see why the DMZ option does nothing, it warns that the device will be exposed to WAN

Thanks...

The DMZ option should work. I don't like using it but if you can't bridge and need the VPN then you probably have to. I'd say you need to disable TR-069 or else the ports won't forward correctly.

Of course the device will be exposed to WAN, that's its purpose.

Fiend-Foe

Karsini wrote: »

The DMZ option should work. I don't like using it but if you can't bridge and need the VPN then you probably have to. I'd say you need to disable TR-069 or else the ports won't forward correctly.

Of course the device will be exposed to WAN, that's its purpose.

Yup. that's what I want. Still can't see router VPN port, Apache (anything) don't get it..

ED E

Is multicast traffic handled over public or privates do we know?

Fiend-Foe

ED E wrote: »

Is multicast traffic handled over public or privates do we know?

Sorry I'm not sure exactly what you mean.

On the DDWRT I disabled;

Block WAN Requests
*Block Anonymous WAN Requests (ping)
*Filter Multicast
*Filter WAN NAT Redirection
*Filter IDENT (Port 113)

And on the F2000 I enabled DMZ, disabled firewall. Couldn't find anything relating to multicast in the menu there. Still nothing...

Thanks for your help!

cadete

lads this thread just ended 2 days of messing around! my deepest gratitude to all involved

Fiend-Foe

cadete wrote: »

lads this thread just ended 2 days of messing around! my deepest gratitude to all involved

Pls pls tell me what you did!! Tried everything as best I could, no noob but hate the F2000 totally hate it!

Please help me stop my 2 months of messing around. Have servers doing nothing...

Have a spare, Eír sent me a new modem a while back and don't want old one returned. If anybody would enjoy seeing me bate the sh1te out of an F2000 with an aluminum baseball bat, will post a youtube vid if I can get sorted

Maybe drill some fat holes through it first and try plug it in. Maybe pouring zippo fluid in vents and plugging it in would look nice...

I'll get creative and accept suggestions. Thx

Just had a lightbulb moment.

Have you tried setting up a PPPoE connection on the DD-WRT router? Should give you the benefit of bridging without losing the TV.

Change the WAN port to PPPoE, username is eircom@eircom.net or eir@eir.ie and password is broadband1. Set MTU to 1492 if requested. If it works, the router will get its own IP, independent of the F2000's.

Fiend-Foe

Karsini wrote: »

Just had a lightbulb moment.

Have you tried setting up a PPPoE connection on the DD-WRT router? Should give you the benefit of bridging without losing the TV.

Change the WAN port to PPPoE, username is eircom@eircom.net or eir@eir.ie and password is broadband1. Set MTU to 1492 if requested. If it works, the router will get its own IP, independent of the F2000's.

Yup, tried it. Seems to be an older version of PPoE, updated DD-WRT to latest firmware. Couldn't get any WAN connection on the (DDWRT) network. Had to hard reset F2000.

Will try it again but can't afford to lose connectivity for a few hours, will need to do it tonight.

Thanks for idea and will check it out, anything else you may think of much appreciated. Will let you know how it goes, may get a chance to try soon.

Should the F2000 and the DD-WRT use the same IP structure. ATM I just have the DDWRT on DHCP - Auto and that uses a custom IP set (Just a pain to change because I have them in so many scripts for shares, port forwarding WoL, lots of IP cams configured with static IP's etc.

The F2000 is just using it's default IP, so I guess DDWRT picks up the gateway on F2000 with DHCP (Is DMZ too but doesn't seem to do anything) and my systems use gateway on DDWRT, all set up static IP's etc. I can still access the F2000 interface on my DDWRT's wired or Ethernet connection. If I bridge it I will lose connectivity to F2000 and have to do a reset.

As an experiment I turned everything off, bridged F2000 as in screenshots you kindly posted. Tried DDWRT with same IP structure (F2000 at default 192.168.1.254 and DDWRT and 192.168.1.1. Connected just using Laptop on DHCP both wireless and Ethernet) both with WAN settings on DHCP and PPPoE as you said (I may have fecked up) but basically lost all connectivity. Couldn't ping F2000.

What is wrong with me

ED E

Karsini wrote: »

Just had a lightbulb moment.

Have you tried setting up a PPPoE connection on the DD-WRT router? Should give you the benefit of bridging without losing the TV.

Change the WAN port to PPPoE, username is eircom@eircom.net or eir@eir.ie and password is broadband1. Set MTU to 1492 if requested. If it works, the router will get its own IP, independent of the F2000's.

I suppose that could work, but its something their pools should deny as you're basically getting a free extra WAN address. I think your CSI will conflict even if its delegated with NGA.

ED E

ED E wrote: »

I suppose that could work, but its something their pools should deny as you're basically getting a free extra WAN address. I think your CSI will conflict even if its delegated with NGA.

It does work on domestic connections anyway, as do multiple IPs on a bridged modem via IPoE. I've seen some do it as a last resort when they couldn't port forward (or just to get NAT Type 1 on a PS3 when they didn't understand the meaning of it).

Probably wouldn't work on a business connection with a static IP.

Fiend-Foe

Have bridged F2000, just loses connectivity + TV. Tried double NAT forwarding, can see ports open on canyouseeme.org (except routers VPN port) but cannot connect to any services on any system.

Set up DDWRT with PPPoE whilst bridged, just lost connectivity. Am I doing something wrong?

Don't know why the internet goes, If I have to lose the TV will unsubscribe from E-Vision and get Sky if needs be, unfortunately Eír have monopoly on ISP in this apartment complex.

UPC I just connected Cisco cable modem, ETH1 to DDWRT WAN-In. DMZ page just asked for an IP and enable/disable. Once enabled wireless/all other functions disabled and DDWRT picked up WAN from DHCP nice and simple, never a problem. Just want the same result

ED E

With broadcast TV its a lot simpler than IPTV.

And to say Eir have a monopoly is misleading, OpenEir have a wholesale monopoly but you could get Sky TV and Fibre Broadband over the same infrastructure.


Probably the easiest way to work this out would be to ssh to the F2000 and try and dump its NAT rules and config.

Fiend-Foe

ED E wrote: »

With broadcast TV its a lot simpler than IPTV.

And to say Eir have a monopoly is misleading, OpenEir have a wholesale monopoly but you could get Sky TV and Fibre Broadband over the same infrastructure.


Probably the easiest way to work this out would be to ssh to the F2000 and try and dump its NAT rules and config.

I said there was a monopoly in my apartment building, haven't seen a non Eircom SSID. Modem runs over VDSL to Cab in basement to optic connection. Only other option would be to go for another POTS broadband provider. Vodafone seem to use F2000 too, not sure who else I can try who would be different. I did look around to avoid Eircom.

Apartment buildings in complex have shared sky dishes piped in to each flat, no cable/UPC. Eircom seem to own the gear downstairs so not sure if I can get another provider. In a bloody 18 month contract now...

Would like to avoid Sky, as I said I've only seen Eircom SSID's around (did some scouting, several 100 apartments) and a few that were from mobiles tethering/those 3g SIM mini wireless jobs. But believe Sky BB comes over POTS, standard ADSL. Would be serious downgrade from fiber. If they have any Satellite internet would be worse and has serious lag and bandwidth restrictions.

Like to move lots of data

John Dough

Slighly OT but was thinking of changing to Sky Fibre rang the other day and they said they would supply new fibre modem but did not specify type, local phone and basic TV for 39 euro for 12 months contract then 75 euro month but I could change back to Eir then for there offers as Eir line is the same as Skys. Anyone with Sly here?

Decoda

Hi and sorry for dragging up an old thread. Have had Eir FTTH 150mb for approx 6 months and as well as having signal strength issues (long house with double layer block wall extensions at each end) we are constantly having to reboot the f2000 due to Wi-Fi dropping continuously. Anyway to try and solve the above problems I am proposing on installing 2 tplink ac1200 access points and switch off the Wi-Fi capability on the f2000.

https://www.amazon.co.uk/TP-Link-Wireless-Controller-Software-EAP225/dp/B01LRQW0GM/ref=sr_1_2?s=computers&ie=UTF8&qid=1515229151&sr=1-2&keywords=TP-Link+AC1200+Wireless

I also have tplink powerline extenders working from it to link smart tv and playstation and they have never given any trouble (40 to 50mb) and I would like to keep these working from the f2000.

Would anyone be able / willing to walk me through how I would go about adding the AP's and switching the f2000 Wi-Fi off. I'm a complete dunce when it comes to this sort of thing but have finally had enough of the constant Wi-Fi problems with Eirs modem.

Any assistance gratefully received.

D.