PPPoE on WAN link for Centurylink gigabit service

[dopey]

@superweasel:

Last one, in researching the speed issue with pfSense and gigabit PPPoE connections, I opened a support ticket with pfSense. As of v2.2.3, pfSense will not attain gigabit speeds with PPPoE (https://redmine.pfsense.org/issues/4821).

Thanks for tracking this down.  I've been wondering why I can't get gigabit over centurylink but was able to between hosts on the WAN and LAN interfaces.  Didn't think that PPPoE would have been the factor here.

[Heavyb]

Can anyone confirm that the PPPoE performance issue has been addressed in v.2.3?

Thanks!

[Bagoette]

I have just upgraded to CenturyLink Fiber Gigabit as well, and after getting pfSense to connect to the PPPoE, I can only manage at most 300 Mbps Down and 350 Mbps Up.

My CPU info is included in attachment.

I have both Gigabit NIC's on the LAN and WAN.

When I hook up the CenturyLink C2100T I can get 700+Mbps Up and Down. Can anyone pull high speeds with pfSense?


[Spirundik]

I had the opposite problem.  I got ~900 up/down when my pfSense was connected directly to the ONT and establishing the PPPoE connection, but only get ~700 up/down when the C2100T is in place to provide routing for my /29 subnet.

attached is my cpu info.

[teeler123]

I have tried everything suggested in this thread - VLAN201 on WAN, PPPoE on VLAN201, and input username and password. It then says that it is "up" but no IP address is received and not internet.

Any thoughts for further actions?

Thanks,

Tyler

[yuckey2d]

Bump… Gave this a try last month, hoping for a solution, or advice for how to build the PPPoE with multithread available.

[w0w]

According to https://redmine.pfsense.org/issues/4821 it is related to igb driver, are you all using Intel igb NICs? Currently solution is only to change the hardware — more powerful CPU that can handle 1Gbit with single core and/or other Intel card, that uses em(4) driver.

[PfKomrad]

@teeler123:

I have tried everything suggested in this thread - VLAN201 on WAN, PPPoE on VLAN201, and input username and password. It then says that it is "up" but no IP address is received and not internet.

Any thoughts for further actions?

Thanks,

Tyler

What version of pfsense do you have? 2.4.1 had a bug that didn't not let the VLAN interface work. 2.4.2-RELEASE  fixes that and it should work. I just set my up as VLAN 201 interface on the WAN hardware port, PPoE interface on the VLAN 201 interface, and finally assign the PPoE interface to the WAN port under interface assignments


[billmcg]

This post is deleted!

[billmcg]

I finally got this setup working with my sg-2440, but there's NO WAY this device supports a gigabit connection as claimed in the literature. Default CL modem sees speeds around 860/775 wheras setup with my sg-2440 I'm getting 450/450.

[chrismacmahon]

Have you tried the work around in this Redmine ticket: https://redmine.pfsense.org/issues/4821

You should be able to get a lot more speed out of the 2440.

Can you verify your PowerD settings; it should be enabled and either Hiadaptive, or Maximum should be the profile.

[billmcg]

@chrismacmahon said in PPPoE on WAN link for Centurylink gigabit service:

https://redmine.pfsense.org/issues/4821

I have tried the workaround. I'm currently running with the following /boot/loader.conf.local and max out around 530mbps:

hw.igb.fc_setting=0
net.isr.dispatch=deferred
net.inet.tcp.tso=0

I'm not sure what powerD is. I'll have to look into that now...

[billmcg]

Oh wow! Enabling powerD and setting to maximum really helped. I'm seeing 820/820 which is about as good as I think I can do given that my fiber run zigzags across 6 different poles and then I have about a 70ft cat6 run from the ONT. I consider this resolved.

Thanks for the tips!

[chrismacmahon]

Glad we got you sorted out.

[billmcg]

So, here's documentation of the entire process of getting CenturyLink Gigabit GPON service working at full speed with pfSense. This applies only to PPPoE "internet only" service from Century Link. The internet+prism TV service uses IPoE and is configured differently.

The hw.igb.fc_setting=0 below disables flow control for the Intel NICs in the Netgate SG-2440. Different hardware will require a different option. Other than this, the instructions below should be hardware agnostic. Assuming your hardware is fast enough, you should see performance comparable, or very near to CL supplied hardware.

Diagnostics -> Edit File
Path to file: /boot/loader.conf.local
Click Load to load the existing file.
Add:

net.isr.dispatch=deferred
net.inet.tcp.tso=0
hw.igb.fc_setting=0

Save and Reboot

In the pfSense GUI:

System -> Advanced -> Miscellaneous -> Power Savings
Check "Enable PowerD" and set to "Maximum" or Hiadaptive" for all power states.

Interfaces -> Assignmnents -VLANs
Add a new VLAN interface. In the edit dialog:

Parent Interface: <the physical interface of your WAN port>
On the SG-2440 this is most likely igb0, so we'll assume that for the rest of this config.

VLAN Tag: 201
Save

Interfaces -> Assignments -> PPPs
Add a new PPP
Link Type: PPPoE
Link Interface: igb0.201
Username: CenturyLink Supplied
Password: CenturyLink Supplied
Service name: <leave blank>
Configure NULL service name: checked
Save

Interfaces -> Assignments -> Interface Assignments
WAN: select PPPoE0(igb0.201) - < CL Username > from the drop down
Save

Interfaces -> WAN
verify that IPv4 Configuration Type is PPPoE

Under PPPoE Configuration
Verify Username and Password are present
Save

Status -> Interfaces
Verify WAN Interface (wan, pppoe0)
Status: up
PPPoE: up
IPv4 Address: <is present>

[stephenw10]

Nice result!

Be aware that setting net.isr.dispatch=deferred will give you better PPPoE speeds but might cause problems with ALTQ if you need shaping.

And, yeah, you need to have powerd (speedstep) enabled on those ADI SG series devices to see the full CPU speed.

Steve

[DonaldColeman]

@billmcg
Worked great !!!
Thx.

[Plittle]

Hi there. Tried to get my protectli modem with pfsense working with centurylink fiber optic(internet only) following the above instructions. I was unable to edit
/boot/loader.conf.local
as I couldnt find it. there is a file
/boot/loader.conf.orig
or loader.conf
I followed the rest of the instructions, but WAN/VLAN not connecting...
Could anyone direct me as to where that file resides or how to figure out what I may be doing wrong?
Much appreciated, thank you.

[Plittle]

Correction-I got the PPoE connection over WAN up...but still cant get internet connection...
any ideas what Im doing wrong?
Status
up
PPPoE
up

Uptime
-
IPv6 Link Local
fe80::2e0:67ff:fe0e:4036%pppoe1
DNS servers
127.0.0.1
MTU
1500
In/out packets
0/22 (0 B/2 KiB)
In/out packets (pass)
0/22 (0 B/2 KiB)
In/out packets (block)
0/0 (0 B/0 B)
In/out errors
0/0
Collisions
0

LAN Interface (lan, bridge0)

Status
up
MAC Address
02:dd:73:83:d4:00
IPv4 Address
192.168.1.1
Subnet mask IPv4
255.255.255.0
IPv6 Link Local
fe80::1:1%bridge0
Subnet mask IPv6
64
MTU
1500
In/out packets
18576/18781 (690 KiB/1.84 MiB)
In/out packets (pass)
18576/18781 (690 KiB/1.84 MiB)
In/out packets (block)
121/0 (11 KiB/0 B)
In/out errors
0/0
Collisions
0

OPT1 Interface (opt1, igb2)

Status
no carrier
MAC Address
00:e0:67:0e:40:38
IPv6 Link Local
fe80::2e0:67ff:fe0e:4038%igb2
MTU
1500
Media
autoselect
In/out packets
0/3 (0 B/304 B)
In/out packets (pass)
0/3 (0 B/304 B)
In/out packets (block)
0/0 (0 B/0 B)
In/out errors
0/0
Collisions
0
Bridge (bridge0)
learning

OPT2 Interface (opt2, igb3)

Status
up
MAC Address
00:e0:67:0e:40:39
IPv6 Link Local
fe80::2e0:67ff:fe0e:4039%igb3
MTU
1500
Media
100baseTX <full-duplex>
In/out packets
48/2 (7 KiB/188 B)
In/out packets (pass)
48/2 (7 KiB/188 B)
In/out packets (block)
20/0 (3 KiB/0 B)
In/out errors
0/0
Collisions
0
Bridge (bridge0)
learning

OPT3 Interface (opt3, igb1)

Status
no carrier
MAC Address
00:e0:67:0e:40:37
IPv6 Link Local
fe80::2e0:67ff:fe0e:4037%igb1
MTU
1500
Media
autoselect
In/out packets
33/2 (5 KiB/188 B)
In/out packets (pass)
33/2 (5 KiB/188 B)
In/out packets (block)
5/0 (550 B/0 B)
In/out errors
0/0
Collisions
0
Bridge (bridge0)
learning

[stephenw10]

You have to create loader.conf.local if it doesn't exist. There are many ways to do that, one is to run:
touch /boot/loader.conf.local

Check ppp logs to see why it's not coming up.

You added the VLAN to use as the parent interface?

Steve