Friday, March 24, 2023

Re: Possible to handle fiber WAN connection with OpenBSD using PCIe card?

Hello,

On 23/03/2023 19:44, Kaya Saman wrote:
> The ISP has not given me any information on connection type or even
> settings yet so I'm still quite in the dark with this and I'm still
> trying to get a hold of someone who actually can provide that
> information. Right now I'm basing what I have read in the Nokia models
> manual.

I am sorry to say this, but you can not guess your credentials, most
ISPs do not permit custom routers, as it infringes on their TOS and also
they are not able to track you. A lot of the filtering and port control
is actually done by the router, I know a few ISPs which do this, the
reason for it I assume is so that they do not waste their server
resources filtering traffic, they use the router in your home.

You will need to switch to a transparent ISP, they will openly tell you
the protocol they use for authentication, I believe there is a few, but
my ISP uses PPPoE, they will then tell you the authentication method (if
it is PPPoE), username and password. You then need to use pppoe
interface, you can use man to figure this one out, it is not complicated
(because I was able to do it :P).

As for fibre cables, you will still need an ONT, this is often provided
by your ISP. If you want to make your own ONT that is more complicated,
as you would need to find software which can convert the signals, and
also the hardware which supports it, can I highlight that the cisco gear
is proprietary, although would support this.

In my DSL setup, I have a black box modem (thanks Openreach, you could
at least release the source code or schematics for the old modems so
they do not get trashed, but no their intellectual property is more
important than the world we live in), connected to the modem is my
OpenBSD router, you plug the modem into your router.

There is two authentication methods normally, modem authentication (cant
remember the official name), this is where the modem acts as a very
basic router, it will do the authentication and maintain the connection
to the ISP, this is not flexible, and you are trusting a proprietary
black box to handle the data properly. The second choice is client
authentication, which is what I use, this is where the modem acts solely
as a modem, your router connected to it does the authentication and
maintains the connection to the ISP, and ONLY uses the modem to convert
from ethernet to whatever you are using, for me it is going from
ethernet to DSL.

Email your ISP, if they do not have an email address for support, you
need to find a better ISP because at this point they are useless.

Also bare in mind, fibre is not always the best choice, just a little
heads up, fibre has the biggest fluctuations in speed, which will
probably surprise you because fibre is the most stable, but its because
ISPs (for home systems) will split a 1gbps bearer with up to 32 others,
this means if all 32 during peak hours want bandwidth, you will get just
32mbps each, and that is at best. This is just a random fact I am
throwing in, this is how ISPs make fibre so affordable, big promises,
but overallocation of the bearer.

Unless you are able to get the authentication details, don't bother
planning or wasting any money, if you can guess the authentication
details, then others can and it is not secure.

Good luck.
--
Polarian
GPG signature: 0770E5312238C760
Website: https://polarian.dev
JID/XMPP: polarian@polarian.dev

No comments:

Post a Comment