Centurylink FTTH Prism setup help



  • So recently got CenturyLink FTTH and Prism TV and phone.. woo fun times. I only care about internet but family wants tv and phone. Internet is 1gig.
    So this is the closest guide to what I am seeing as my configuration needs.
    http://www.dslreports.com/forum/r30270839-Prism-TV-HOWTO-Use-pfSense-with-CenturyLink-FTTH-and-Prism-TV-in-Seattle1

    The only thing I am unable to do is the vlan tag of 201. Which I think can explain why if I am connected to the fiber modem(with phone woo bypass crap router of CL should be easy right?) with my pfsense Netgate SG-2440 I seem to only get around 500 up and down. My laptop directly to cl router or fiber modem can pull depending on testing location the full 1gig service.

    So issues I am seeing are that the CenturyLink router is configured as IPOE, with no tagging setup according to it. Everything I have read says that CenturyLink is using a tag of 201. Had to factory reset the CenturyLink router after the tech left, thing wouldn't even hand out a wired ip or show its 5g wifi network.

    So I thought I should just be able to get the IGMP Proxy setup and the firewall rules, and be good to go.
    IGMP setup, Firewall setup. TV box connects, and plays for about 5-10sec then stops and doesn't start again until channel change. Speeds over internet seem to be limited somewhere as I have been able to do over 500mbps transfers from a to b over the lan.

    My only guess is I need that vlan tag of 201 setup somewhere somehow, I don't have any managed switches at the moment. But I am thinking I need to get some to make this work.

    I would like to get this working so that I can wire the main TV box and have the secondary box actually work over wifi or wireless.

    Is there a simple way to tell if the fiber modem is tagging the ethernet connection?

    Hopefully this makes some sense since i am posting at 2:50am…

    EDIT 1:
    Son of a.... forgot to tell what i have for pfsense setup
    Currently running a Netgate SG-2440 on 2.3.4-RELEASE-p1
    Simple Wan > Lan bridge ports



  • So recently got CenturyLink FTTH and Prism TV and phone.. woo fun times.
    I only care about internet but family wants tv and phone. Internet is 1gig.
    So this is the closest guide to what I am seeing as my configuration needs.

    Is that set up using PPPoE?

    The only thing I am unable to do is the vlan tag of 201. Which I think can explain why if I am connected to the fiber modem(with phone woo bypass crap router of CL should be easy right?) with my pfsense Netgate SG-2440 I seem to only get around 500 up and down. My laptop directly to cl router or fiber modem can pull depending on testing location the full 1gig service.

    Is the pfSense firewall behind that router creating perhaps a double NAT situation or router cascade?

    So issues I am seeing are that the CenturyLink router is configured as IPOE, with no tagging setup according to it. Everything I have read says that CenturyLink is using a tag of 201. Had to factory reset the CenturyLink router after the tech left, thing wouldn't even hand out a wired ip or show its 5g wifi network.

    Is this a real router or a modem or perhaps a router that can be turned into the so called "bridge mode"?
    Vendor/model/model number would be nice to know here.

    If the router is in the so called "bridge mode" DHCP, VOIP and WiFi went away or are not able to use
    anymore in that mode, you can fairly went around and use a small cisco VOIP box behind the pfSense firewall
    and WiFi APs or miniPCIe card would be also running well, as you wish to walk down the road with those equipment.

    So I thought I should just be able to get the IGMP Proxy setup and the firewall rules, and be good to go.
    IGMP setup, Firewall setup. TV box connects, and plays for about 5-10sec then stops and doesn't start again until channel change. Speeds over internet seem to be limited somewhere as I have been able to do over 500mbps transfers from a to b over the lan.

    Please do the following first, if you own a SG-xxxx unit from pfSense update it with the ADI 2.4.0 image please!
    Make a backup first and a config backup too, for all cases you could come in. And then you will get a working IGMPv3
    proxy, in some former releases this will be broken or plain not working well.

    My only guess is I need that vlan tag of 201 setup somewhere somehow, I don't have any managed switches at the moment. But I am thinking I need to get some to make this work.

    Ok you might be able to bridge the router to act as a pure modem, some do then the VLAN tagging instead
    but not all do so. The pfSense firewall should be please not in the game here, its only for testing purpose.

    If the router, in the bridge mode is also serving right the TV you may update only the pfSense to version 2.4.0
    and connect then the TV the pfSense using the IGMPv3 proxy! And the other box could be also served with WLAN
    over an wireless access point and perhaps a small switch is needed if you are not connecting all to the firewall.

    I would like to get this working so that I can wire the main TV box and have the secondary box actually work over wifi or wireless.

    Then let the router must being working as a router, otherwise he is not serving WiFi.

    Is there a simple way to tell if the fiber modem is tagging the ethernet connection?

    You might be opening ports and forwarding protocols to the pfSense firewall if needed.



  • So currently (stressing)TEMPORARY setup. Just as a FYI I have the my pfsense router hooked up to the Centurylink Router. Not the best setup did DMZ the pfsense router in the Centurylink unit to maybe help with routing of app connections. I don't want to be like this but I don't also want to reconfigure EVERYTHING in the house.

    "Fiber Modem"
          Calix 716GE-I
          Also handles Phone line.
          Appears to just hand out a External IP address to anything without reboot.

    Centurylink Router
          Zyxel C2100z (i hate this thing its huge for apparently no reason.)

    1. Not setup as PPOE in the CenturyLink Router.

    2. Pfsense connected directly to the "Fiber Modem" means that the CenturyLink TV box does not work. Even with all the IP's setup in igmpproxy and firewall.

    3. So setup is Fiber Modem >(ethernet) CenturyLink Router > everything else atm including pfsense network sadly.

    Would rather have fiber modem > pfsense > tv, wifi tv box, wifi everything etc. tv doesn't work like this so nope not yet.
    I haven't been able to get into the fiber modem configuration yet. Need to sit down and look it up properly. If I can get in it at all.

    Only reason I brought up the vlan 201 tag is that all the guides I have been able to find have been using that coming from the modem.

    4. Can do. but possibly won't be until next week going out of town this weekend for twitchcon.
    Was waiting for it to be confirmed more stable been seeing mixed results from people. On the forum here.
    Was also thinking that the version of igmp proxy i have should have worked but maybe it was a bugged version also from some reading. I appear to have 1.3.1 or something.

    5. So try bridged mode on CL router? but might just be the igmp proxy being bugged on the version of pfsense.

    6. I have a wifi setup that it should be able to connect too if I can get the tv wired working right

    7. firewall was setup like the guide i linked in first post. So maybe igmp proxy not working right.

    In general my version of igmp proxy might be the issue here. going to see if i can find a manual for getting into the fiber modem.

    EDIT:
    Don't know what happened some how partial posted.

    If i could get wan tagged with vlan without ppoe that would be awesome not sure how to do that yet.

    Might have to contact centurylink and dig info out of a tech.

    EDIT 2:

    Found this again might not be able to much tinkering with it until I get back next week.
    https://www.calix.com/content/calix/en/site-prod/library-html/systems-products/e-series/sysop/e7-ud/r2-5/gpon-ag/index.htm?toc36798107.htm?69276.htm



  • Wow I can't believe it took me a month before I could really sit down and try anything with this again, after upgrading PFSENSE router and getting smart managed switches and other stuff.

    Since the last post the CenturyLink Router had to be replaced for some reason it and the TV box(which was replaced also) was causing the phone call id incoming to not display on the TV via the original TV box/ router combo they gave us. Tech seemed to think some firewall settings I supposedly set in the CL router caused the issue… DMZ'ing one port/device. Right. I rarely get lucky enough to have a tech with network background come by. they have been general techs.

    Purchased a switch with igmp snooping, basically a smart managed switch.

    This switch told me today that there does not appear to be any VLAN's coming from the CL Fiber Modem, and also allowed me to identify the IP ranges for IGMP. None of which I have seen online.
    IP Address           VLAN ID
    239.192.28.15   1
    239.192.48.25   1
    239.231.0.20   1

    I assume no vlan atm because no difference in the way anything worked with and without the managed switch in between the CL Router. or my PFSense router. Creating vlan 201 coming from CL Modem and untagging the router side port caused there to be no connection.

    Speed tests today using various sites with my PFsense router connected to the CL Modem gave me upwards of 900+ up and down depending on testing location.

    IGMP Proxy, Firewall Wan, Firewall Lan, screenshots attached.

    I factory reset settings today. Reconfigured no difference.

    Status is that it still works for about 5 or so seconds and then stops streaming stations.

    Types of IGMP messages I have received
    The source address 192.168.10.57 for group 239.255.255.250, is not in any valid net for upstream VIF. <<<< very common first ip is always internal(as far as i can tell) to my network and not the tv box
    select() failure; Errno(4): Interrupted system call <<< rare
    Some other generic messages before it was configured right.

    Now when I am going through the CL router the Switch snooping shows the multiple IGMP addresses(as mentioned above), it also shows 239.255.255.250 but that is only from my laptop connected to the switch looking at the interface so going to say it doesn't count.

    So Modem > Switch(snooping IGMP) > CL Router = TV works, phone call ID works on TV box Internet works etc.

    But when I go through my PFsense router it doesn't show any IGMP going through at all.
    So Modem > Switch(snooping IGMP not seeing any IP's coming through) > PFSENSE = TV stations for 5 seconds or so when channel is changed, Phone ID works on TV box, Internet works etc.

    Now my assumption is my IGMPPRoxy is either not configured right or broken somehow.
    What other configuration information do you wonderful people need from me to troubleshoot.

    I do want to / am going to try a full on factory image factory reset of my PFSENSE router in case at some point I messed up something that upgrading between versions wont fix for some reason.







Log in to reply