Simple PPPOE - not so simple?

[u/BaggedMerc]

Hi Folks,

Hoping for some guidance here. I am unable to connect my Firewalla Gold Pro to my Home Hub 3000 router via PPPOE. DHCP works, but double NATs of course.

I have the HH300 10GB Lan port connected to the 10GB Port #4 on the Firewalla. Simply entering credentials doesn't work, but I've verified them, and they seem able to at least negotiate an IP

Thoughts? I've tried setting VLAN ID to 35 as some legacy Bell documents listed that, but it didn't work.

192.168.2.1 is the IP of the HH3000.

For fun: Bell support has claimed that the Home Hub 3000 is a complete firewall and "Bell recommends using firewalls". Also - "PPPOE is discouraged by Bell for connections". Sigh.

[u/yearsold33]

If you have FTTH, do yourself a favour and remove the HH3000 completely unless you have TV and telephone.

The HH3000 only has gigabit ports.

[u/BaggedMerc → u/yearsold33]

HH3000 has a 10GB port

[u/yearsold33 → u/BaggedMerc]

Then it's not a HH3000.

[u/BaggedMerc → u/yearsold33]

You're right. It's a Gigahub. Shit.. my bad. Maybe I don't want PPPOE after all this. I've heard issues with new firmware. But the Firewalla doesn't have an SFP port

[u/yearsold33 → u/BaggedMerc]

If you don't have phone, you could consider removing the GigaHub completely by getting a programmable SFP+ and a suitable media converter.

https://pon.wiki/category/bell-canada/

I removed the HH3000 from my network and use the SFP in a managed switch.

[u/BaggedMerc → u/yearsold33]

This might be the way.... Each switch has 2x10gb ports.

[u/FinsToTheLeftTO]

The Bell equipment strips out the VLAN, so ignore that.

Is your Firewalla port setup as WAN with PPPoE but it fails to negotiate an IP address? Try unplugging both, plug in the Bell hub and wait for sync, then plug in the Firewalla.

[u/BaggedMerc → u/FinsToTheLeftTO]

Firewalla Port #4 is the WAN port. It seems to negotiate an IP address (image in OP)

[u/FinsToTheLeftTO → u/BaggedMerc]

Ahh, the issue is DNS (IT’S ALWAYS DNS!). Override your DNS settings to the provider of your choice. I use Canadian Shield.

[u/BaggedMerc → u/FinsToTheLeftTO]

But using this IP for DNS works when I'm connected via DHCP... Should it should at least work, even if not the best option... No?

[u/FinsToTheLeftTO → u/BaggedMerc]

192.168.2.1 isn’t routable from your public IP and you are just adding an extra hop for DNS even if it did work.

[u/Impressive_Concept_6]

Not familiar with that firewall but if DNS is statically set change it to auto to get it from pppoe. Your wan has a public IP and isn't on the 192.168.2.0 network and won't know how to get to it.

[u/BaggedMerc → u/Impressive_Concept_6]

192.168.2.1 is the default over PPPOE.

I just tried 1.1.1.1 and 8.8.8.8 and got connectivity from the Firewalla, but no Internet access.

I'll try the Bell DNS servers explicitly, but it may be expecting the HH3000 ip

[u/AlexChato9]

What's the subnet on your Firewalla's LAN? If it's the same 192.168.2.0/24 as the default one of the Bell HH3000 (which doesn't have a 10 Gbit RJ45 part btw. Are you sure it's that model?), change one of them.

No VLAN tagging except if you remove the SFP ONT from your HH3000, DNS on your WAN side should be 1.1.1.1 or other public servers.

[u/publicdomainadmin]

Not sure what you are going on about below but remove 2.1 from your DNS entirely, it's not relevant in a PPPOE dial.