Bypass At&t fiber BGW210-700

Phantom_Stage

does any one know where to find bin/ng_etf.ko?

stephenw10

Easiest place to get it from is the equivalent FreeBSD ISO, which would be 11.2-rel for pfSense 2.4.4.

But since I have that right here find it attached. remove the .txt extension.

It is in the /bin folder on that repo though exactly as described in the instructions there.

Steve

ng_etf.ko.txt

Phantom_Stage

I looked in my bin folder but don't see it there.

stephenw10

It's in the bin folder on the github repo you are pulling this from: https://github.com/aus/pfatt/blob/master/bin/ng_etf.ko

Phantom_Stage

Oh wow thank you...! I thought I could get it directly from browsing my PFsense folders...I am just a NUBE sorry.

stephenw10

You need to add that netgraph kernel module to pfSense because it isn't included by default. There would not normally be any reason to use such shenanigans!

Phantom_Stage

Is there a better way to do this?

stephenw10

Go to a different provider?

But no, that's the only way I'm aware of to remove the AT&T router from the connection.

Steve

Phantom_Stage

I would gladly do that but the only other choice is Comcast and they don't offer gig speeds where I am at.

Phantom_Stage

Ok I am lost here how do I get the other files (pfatt.sh) ...I can't seem to download them...I can copy them to txt file but not sure that's what needs to be done.

sherpagoodness

hey, the best thing you can do is read these threads online. nobody wants to hold your hand while you do this.

that being said, you can upload files under diagnostics>command prompt ..... that will place them in the /tmp/ directory, then i'll give you another useful bit of information you can use ssh and the cp command to copy something, like this cp /tmp/pfatt.sh /bin/

also steve you could have pointed out that chris posted this a few months ago; much easier

run the below bold commands when your on console or ssh

Just a quick note that the etf kernel module is now available as a command-line-installable package from the Netgate repos.

[2.4.4-RELEASE][root@pfSense]/root: pkg search etf
ng_etf-kmod-0.1 ng_etf kernel module
[2.4.4-RELEASE][root@pfSense]/root: pkg install ng_etf-kmod
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
ng_etf-kmod: 0.1 [pfSense]

Number of packages to be installed: 1

3 KiB to be downloaded.

Proceed with this action? [y/N]:

No need to scp it from another FreeBSD node and it should track updates by FreeBSD.

Phantom_Stage

Dude thank you for this info!!!!!!! OMG this is exactly what i was looking for...straight forward even for this nube. thank you thank you thank you

stephenw10

Ah, I missed that post. Didn't realise that was in our repo now. That's good as it will probably be updated for 2.4.5 which would otherwise have required a new module uploading.

Steve

Phantom_Stage

@sherpagoodness said in Bypass At&t fiber BGW210-700:

pfSense-core repository

ok I have done my best with no success...I copied and edited the files as such and placed it in root/bin

ONT_IF=igb1
RG_IF= igb0
RG_ETHER_ADDR=xx:xx:xx:xx:xx:xx replaced with mac of BGW210-700
OPNSENSE=no

edited my xml file as such above system as instructed.
<?xml version="1.0"?>
<pfsense>
<version>19.1</version>
<lastchange></lastchange>
<earlyshellcmd>/root/bin/pfatt.sh</earlyshellcmd>
<system>

placed NG_etf.ko in /boot/kernel

Any further suggestions I would really like to get rid of BGW210-700

Phantom_Stage

I also did a clean install of pfsense and tried the package install of etf with no success.

sherpagoodness

you had it going correctly....and just so you understand you're still keeping the gateway, its just off to the side now

make sure you search 'pkg search etf' then 'pkg install ng_etf-kmod'

and use the shellcmd package from the package manager rather than editing that xml file; that gave me problems trying to edit it manually

Phantom_Stage

ok thanks...will try the shellcmd to edit the xml

Phantom_Stage

installed pkg shellcmd

<earlyshellcmd>/root/bin/pfatt.sh</earlyshellcmd> earlyshellcmd ATT bridge

getting an error stating sh: syntax error: end of file unexpected (expecting word)
directly after loading configuration completes.

stephenw10

Do you get that same error if you just run the script at the command line?

It seems like the script may not be complete if it's showing that error. How did you copy it onto your firewall?

Steve

sherpagoodness

this is how your file should be - just replace with your modems mac address

#!/bin/sh
set -e

ONT_IF='igb0'
RG_IF='igb1'
RG_ETHER_ADDR='********LEAVE Apostrophes****************'
OPNSENSE='no'
LOG=/var/log/pfatt.log

getTimestamp(){
    echo `date "+%Y-%m-%d %H:%M:%S :: [pfatt.sh] ::"`
}

{
    echo "$(getTimestamp) pfSense + AT&T U-verse Residential Gateway for true bridge mode"
    echo "$(getTimestamp) Configuration: "
    echo "$(getTimestamp)        ONT_IF: $ONT_IF"
    echo "$(getTimestamp)         RG_IF: $RG_IF"
    echo "$(getTimestamp) RG_ETHER_ADDR: $RG_ETHER_ADDR"
    echo "$(getTimestamp)      OPNSENSE: $OPNSENSE"

    echo -n "$(getTimestamp) loading netgraph kernel modules... "
    /sbin/kldload -nq ng_etf
    echo "OK!"

    if [ ${OPNSENSE} != 'yes' ]; then
        echo -n "$(getTimestamp) attaching interfaces to ng_ether... "
        /usr/local/bin/php -r "pfSense_ngctl_attach('.', '$ONT_IF');" 
        /usr/local/bin/php -r "pfSense_ngctl_attach('.', '$RG_IF');"
        echo "OK!"
    fi 

    echo "$(getTimestamp) building netgraph nodes..."

    echo -n "$(getTimestamp)   creating ng_one2many... "
    /usr/sbin/ngctl mkpeer $ONT_IF: one2many lower one
    /usr/sbin/ngctl name $ONT_IF:lower o2m
    echo "OK!"

    echo -n "$(getTimestamp)   creating vlan node and interface... "
    /usr/sbin/ngctl mkpeer o2m: vlan many0 downstream
    /usr/sbin/ngctl name o2m:many0 vlan0
    /usr/sbin/ngctl mkpeer vlan0: eiface vlan0 ether

    /usr/sbin/ngctl msg vlan0: 'addfilter { vlan=0 hook="vlan0" }'
    /usr/sbin/ngctl msg ngeth0: set $RG_ETHER_ADDR
    echo "OK!"

    echo -n "$(getTimestamp)   defining etf for $ONT_IF (ONT)... "
    /usr/sbin/ngctl mkpeer o2m: etf many1 downstream
    /usr/sbin/ngctl name o2m:many1 waneapfilter
    /usr/sbin/ngctl connect waneapfilter: $ONT_IF: nomatch upper
    echo "OK!"

    echo -n "$(getTimestamp)   defining etf for $RG_IF (RG)... "
    /usr/sbin/ngctl mkpeer $RG_IF: etf lower downstream
    /usr/sbin/ngctl name $RG_IF:lower laneapfilter
    /usr/sbin/ngctl connect laneapfilter: $RG_IF: nomatch upper
    echo "OK!"

    echo -n "$(getTimestamp)   bridging etf for $ONT_IF <-> $RG_IF... "
    /usr/sbin/ngctl connect waneapfilter: laneapfilter: eapout eapout
    echo "OK!"

    echo -n "$(getTimestamp)   defining filters for EAP traffic... "
    /usr/sbin/ngctl msg waneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }'
    /usr/sbin/ngctl msg laneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }'
    echo "OK!"

    echo -n "$(getTimestamp)   enabling one2many links... "
    /usr/sbin/ngctl msg o2m: setconfig "{ xmitAlg=2 failAlg=1 enabledLinks=[ 1 1 ] }"
    echo "OK!"

    echo -n "$(getTimestamp)   removing waneapfilter:nomatch hook... "
    /usr/sbin/ngctl rmhook waneapfilter: nomatch
    echo "OK!"

    echo -n "$(getTimestamp) enabling $RG_IF interface... "
    /sbin/ifconfig $RG_IF up
    echo "OK!"

    echo -n "$(getTimestamp) enabling $ONT_IF interface... "
    /sbin/ifconfig $ONT_IF up
    echo "OK!"

    echo -n "$(getTimestamp) enabling promiscuous mode on $RG_IF... "
    /sbin/ifconfig $RG_IF promisc
    echo "OK!"

    echo -n "$(getTimestamp) enabling promiscuous mode on $ONT_IF... "
    /sbin/ifconfig $ONT_IF promisc
    echo "OK!"

    echo "$(getTimestamp) ngeth0 should now be available to configure as your pfSense WAN"
    echo "$(getTimestamp) done!"
} >> $LOG