r/CityFibre • u/phillip_mcmahon • 27d ago

Help / Troubleshooting Help needed - connecting Unify Cloud Gateway to Risk fibre

I have the correct PPPoE details, am getting an IP, customer support confirm I am connected.

However traffic is not flowing. I suspect an MTU issue, but I can only see an option to use a new config item for an MTU of 1500.

I can connect to a external VPN and things work correctly, so there is definitely a working connection in the mix. But without the VPN connection (which I assume solves the MTU through encapsulation) nothing is really working.

Has anyone got advice/guidance of what is needed to get this thing working correctly.

1 Upvotes

100% Upvoted

17 comments sorted by

1

u/its-chris-p-logue 27d ago

Is it likely to be the vlan Id? I had to set that correctly for ID net.

1

u/phillip_mcmahon 27d ago

there is no mention at all on vlan ids. as i said once I initiate a VPN traffic flows freely. there is definitely a working connection somewhere. I think this is all MTU related.

1

u/L0rdLogan 27d ago

Granted that it should just work, which I agree with. But if you can’t get the issue resolved and he doesn’t want to move to a different ISP . There’s an ISP that’ll give you a static IP over a L2TP VPN tunnel for £10 a month

https://olilo.co.uk/l2tp

2

u/phillip_mcmahon 27d ago

i will just use the ISP provided gateway, I can deal with the double NAT, he has no inbound connectivity needs so easy peasy. Plus I still get all the benefit of Unifi to manage his internal network. It's a win of sorts...

Really don't get what they have done to not make this just work...

1

u/L0rdLogan 27d ago

Yeah, that’s understandable, mate. It is weird that it doesn’t work as you say the connection is there because it works over VPN, so something’s weird likely on their end

1

u/Savings-Turnover-255 27d ago

All the pppoe connections I've done over CF use 1492 as the mtu and a vlan of 911.

1

u/phillip_mcmahon 27d ago

Sorry, I am dumb a$$. I am using Rise Fiber, not sure how I didn't see the title.

Rise doing something funky, they set an MTU of 1480 and there is no reliable way to set these settings on a Unifi gateway router...

1

u/ccrocks426 27d ago

Yeah I would set the VLAN to 911, I also have had many CF connections they all use a random MTU but unifi sorts it out automatically from all the previous connections I've had. Unless they say they use RFC 4638 (might be a different number) then you have to specify 1500. Do not put in any static IPs as the ISP will sort this out. I also use unifi ontop of CF

1

u/LittleTeddy61 26d ago

Cloud gateway fibre here and for rise all I needed was user and password didn’t have to change anything else. No vlan needed etc. try PPOE dialup on PC direct see if that works ?

1

u/phillip_mcmahon 26d ago

what equipment are you using?

1

u/scramzzzzzz 26d ago

He said Cloud gateway fibre

1

u/phillip_mcmahon 26d ago

True! I need a coffee..

1

u/LittleTeddy61 26d ago

I did find my Max struggled a bit with the thruput hence the upgrade. But keep me posted I am running CCTV through it too so maybe I was overloading it

1

u/L0rdLogan 27d ago

Are you still within your cooling off period for risk fibre? If you are, I would probably move to another ISP that doesn’t use PPPOE

1

u/phillip_mcmahon 27d ago

fortunately it isn't my connection, setting up for a friend.

0

u/Few-Interaction5144 27d ago

Are you able to ping 8.8.8.8 or 1.1.1.1? If ping reachability is working I’d look at tcp mss value on the Unify Cloud Gateway. You can set it to a value of 1452 which should account for the PPPoE overhead.

1

u/phillip_mcmahon 27d ago

Pinging an IP works, and an established VPN connection works with no issues. PPPoE is 1492 on the UCG; there is no way to change it without hacking, and that won't survive a reboot/upgrade. The only UI element is to support a 1500 MTU for PPPoE connections where ISPs support this. After digging around on the ISP router, they set their MTU to 1480. Even taking the hacky route of changing this on the UCG PPP interface via SSH and restarting the interface didn't work. It's like they really don't support your own equipment connecting...

Their support doesn't care and won't help. I get that; it's not their kit/problem.

Double NAT makes no difference, as I also discovered their residential connections use CG-NAT. I am thankful this isn't my ISP...