ONT Pfsense Help

[netfly]

Ask? I want to remove the home router from my internet provider and put virtual pfsense on my pc (what do you recommend)?

this is the output of the internet !

[Gertjan]

@netfly

Look at the sticker on the device in the back ground, your "home router from my internet provider".
Find the reference of the device.
Find the more technical documentation, collect as much info about it as possible. Don't worry about all things you don't understand, you'll be an expert in no time.
You will find the 'real' name of the interface used.

We both know it isn't "RJ45" ;)
But, good new : some standardization exists, also for optical "fibre" connections.

Now you need to find a NIC (PCI Network card) that doesn't have a "RJ45" slot, but a "whatever you use as an optical cable with connector" slot.
While searching for this PCI card, do not look at the price.
If you ever want to use a PC like device with this card using pfSense without VM, running bare-bone, look for FreeBSD driver support !!

And now something that makes your question a mission impossible : with standard copper cable Ethernet compatible connections, devices auto negotiate a speed connection and you're done. Other stuff like PPPOE etc is also pretty standard, but there are ISP's who are using their own mixture of non standard things.
Who tells you that your "home router from my internet provider" doesn't use a special, for this ISP only, firmware in it's router ?? For example : how is authentication handled ?

I live in France, and the biggest operator Orange here uses a "box" with an obnoxious mixture of DHCP special undocumented option that contain the base64 encoded access code and password - with some 'phone' traffic over a VLAN - the TV set over another VLAN, etc.
It took a lot of people years to be able to throw the Orange box (called : Livebox) in the box where it belongs : the waste bin.
It is still an over complex thing to set up ....

Your situation is worse : Normally, you oder a powered ONT box that "translates" (can we say : a modem ?) optical traffic to classic RJ45 cables. This permitted them to capture and anlyse packets for years do reverse engineer the protocols used.

And all this is just the top of the iceberg.

Maybe, in your case, it's easy : just a "optical NIC", Maybe your ISP uses classic DHCP for IPv4 and why not, same thing for IPv6, and you're done. It could be that simple.
In that case, does your ISP want that ? Of course not, as now they have to support "whatever their client chose as a router". That's expensive for them. So probably : no, no support from your ISP. They will tell you : use our router or go see elsewhere.

You should know all this up front.

You still want to remove your home router ??

[A Former User]

This post is deleted!

[netfly]

@gertjan said in ONT Pfsense Help:

You still want to remove your home router ??

yes,

This the device that they installon

I FOUND THIS BUT MY DOUBT IS I SEE THAT HERE THE FIBER CABLE HAS 2 ENTRIES, MINE ONLY HAS 1

https://www.amazon.com/-/es/Convertidor-multimodo-transceptor-1000Base-Tx-1000Base-SX/dp/B06XBZB7P7?th=1

[jimp]

That looks like a G.PON connection. There are some people who have attempted to find a card and SFP module which might be compatible with those but I haven't seen anyone report back results.

[netfly]

@jimp said in ONT Pfsense Help:

That looks like a G.PON connection. There are some people who have attempted to find a card and SFP module which might be compatible with those but I haven't seen anyone report back results.

can you take a look at the amazon link ... please

[jimp]

I cannot say what will or won't work with that. The Amazon link is only a media converter with an SFP slot. You would still need to purchase a separate SFP module with a G.PON connector. You would have to contact the OEM of that media converter to find out if they have a list of compatible modules.

[Gertjan]

@netfly said in ONT Pfsense Help:

MINE ONLY HAS 1

The OEM version has two interfaces, so your ISP using 'something' based on the HG8245, exposing only one GPON, as their connection, the incoming cable, is only fibre cable.
A smart move so users don't connect to the wrong port.
This means also that your device is most probably build for your ISP only.

There is only one thing I can do now : I wish you good luck.
Please post your progress, as some one has to be the first.

[netfly]

@jimp said in ONT Pfsense Help:

I cannot say what will or won't work with that. The Amazon link is only a media converter with an SFP slot. You would still need to purchase a separate SFP module with a G.PON connector. You would have to contact the OEM of that media converter to find out if they have a list of compatible modules.

2

1

the correct question is it will work to connect this with 1 thread?

[jimp]

No, you need an SFP module specifically made for a G.PON connection, not LC connectors or anything else.

[jimp]

It would need to be something like one of these: https://www.fs.com/c/pon-transceivers-2845 -- but again, you would also have to ensure that the module is compatible with whatever you are plugging it into. You may have to contact the vendors directly to find that out.

[netfly]

@jimp ok, i'll be digging, my ultimate goal is to remove this modem for whatever else...just don't like any ideas?

[jimp]

I am stuck in a similar setup. My fiber ISP uses a GPON connection. I have not tried to move it off because my ISP was willing to put it in bridge mode so my own device has the external address. So it's essentially only working as a media converter at this point. The only reason I'd have to change it would be because I could.

You may have better luck asking your ISP if they can put it in bridge mode. I don't know about that model, but mine is from a different maker and it has no user option for bridge mode, the ISP has the push the config from their end.

That's what I'd try first. If you can't get that done, then I'd start looking at other vendors like fs.com and asking them if they can help you locate a compatible module and media converter. Even then there is no guarantee it will work with your ISP.

[netfly]

@jimp said in ONT Pfsense Help:

I am stuck in a similar setup. My fiber ISP uses a GPON connection. I have not tried to move it off because my ISP was willing to put it in bridge mode so my own device has the external address. So it's essentially only working as a media converter at this point. The only reason I'd have to change it would be because I could.
You may have better luck asking your ISP if they can put it in bridge mode. I don't know about that model, but mine is from a different maker and it has no user option for bridge mode, the ISP has the push the config from their end.
That's what I'd try first. If you can't get that done, then I'd start looking at other vendors like fs.com and asking them if they can help you locate a compatible module and media converter. Even then there is no guarantee it will work with your ISP.

Ok, I understand you but I don't want it in bridge mode, I want to eliminate it completely logically and physically from my configuration.

[netfly]

@jimp said in ONT Pfsense Help:

My fiber ISP uses a GPON connection.

https://www.amazon.com/-/es/Universal-Stick-compatible-direcci%C3%B3n-%C2%A1Atenci%C3%B3n/dp/B08C818JSQ/ref=sr_1_5?__mk_es_US=%C3%85M%C3%85%C5%BD%C3%95%C3%91&crid=AIFFEKZ20HLA&keywords=SFP%2BGPON&qid=1645209030&sprefix=sfp%2Bgpon%2Caps%2C79&sr=8-5&th=1

look at this I think it's just what I need?

[jimp]

Possibly -- but again there are multiple parts to what you need:

1. The SFP GPON module
2. A card or device in which that SFP module can work and be fully supported
3. Support in whatever operating system / drivers are needed for that card

There are network cards and media converters that take SFPs but you can't know for certain that they will actually work together fully until you try it on your ISP and hardware.

A small media converter may be ideal for 2/3 since to pfSense it would look just like Ethernet. If you try the GPON SFP in a card directly on pfSense there's a good chance it wouldn't work, since many SFP cards only link at 1G or 10G for example, not the rates that GPON uses (which IIRC are something like 1.25 and 2.5G).

[Cool_Corona]

I am sure a normal SFp converter will work just fine.

I use that setup in Switzerland on SAK Fiber FTTH.

[netfly]

@cool_corona said in ONT Pfsense Help:

I am sure a normal SFp converter will work just fine.

Could you recommend me what to buy?

[Cool_Corona]

@netfly I took the SFP connector from the Frtizbox and plugged it in to this one

https://www.optcore.net/product/101001000base-t-sfp-fiber-media-converter/

Then no need for VLAN or anything

[netfly]

@cool_corona said in ONT Pfsense Help:

Then no need for VLAN or anything

VLAN 100