[BPI-R3] My ONU MA5671A doesn't work, but works on Mikrotik RB4011

shdf · August 21, 2023, 5:25pm

Hi !
i just bought a BPI-R3 and finished the configuration.
I have actualy an external ONT connected to the wan RJ45 port of the BPI and it works OK with my ISP. i can get IPV4/IPV6.
But when i try to use the SFP ONU MA5671A (which is flashed with the FS.com modded firmware by a friend) it doesn't work. The ONU is working well, because i can use it in a Mikrotik RB4011.

The BPI-R3 IP has the default ip : 192.168.1.1
The ONU ip address is : 192.168.20.10

So i created a new interface to access it :

I can ping the BPI on 192.168.20.1, but i can't ping the ONU at 192.168.20.10...
when i do this for my external ONT, it works.

when i run ethtool eth1 :

root@OpenWrt:~# ethtool eth1
Settings for eth1:
        Supported ports: [ FIBRE ]
        Supported link modes:   1000baseX/Full
        Supported pause frame use: Symmetric Receive-only
        Supports auto-negotiation: Yes
        Supported FEC modes: Not reported
        Advertised link modes:  1000baseX/Full
        Advertised pause frame use: Symmetric Receive-only
        Advertised auto-negotiation: Yes
        Advertised FEC modes: Not reported
        Link partner advertised link modes:  1000baseX/Full
        Link partner advertised pause frame use: No
        Link partner advertised auto-negotiation: Yes
        Link partner advertised FEC modes: Not reported
        Speed: 1000Mb/s
        Duplex: Full
        Auto-negotiation: on
        Port: FIBRE
        PHYAD: 0
        Transceiver: internal
        Current message level: 0x000000ff (255)
                               drv probe link timer ifdown ifup rx_err tx_err
        Link detected: no
root@OpenWrt:~#

This output is without the fiber cable connected, as i'm using my external ONT to write.

so i can see the ONU, but there is no traffc between my PC and the ONU ? what's wrong ?

AndrewZ · August 21, 2023, 6:16pm

192.168.20.10 (ONU) has no idea how to reach 192.168.1.x (PC)

See Mikrotik Router device switch ports - #6 by trendy and below.

shdf · August 21, 2023, 6:24pm

But that's how i'm actualy doing to access my external ONT at 192.168.4.254 and it works. so i did the same with the ONU...

with this trick i access my external ONT, why it wouldn't work for the ONU ??

AndrewZ · August 21, 2023, 6:40pm

Please show your configuration

/etc/config/network
/etc/config/firewall

shdf · August 21, 2023, 6:44pm

and now accessing the ONU when it is in my Mikrotik RB4011.

Btw in the ONU settings the gateway is set :

shdf · August 21, 2023, 6:46pm

give me a few minutes, i'll post it asap

shdf · August 21, 2023, 7:37pm

NETWORK


config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fdba:84cf:4435::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'
	list ports 'sfp2'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config device
	option name 'br-wan'
	option type 'bridge'
	list ports 'eth1'
	list ports 'wan'

config device
	option name 'eth1'
	option macaddr 'XXXXXXXXXXX'

config device
	option name 'wan'
	option macaddr 'XXXXXXXXXXX'

config interface 'wan'
	option device 'br-wan'
	option proto 'dhcp'
	option vendorid 'neufbox_BANANAPI-R3'
	option reqopts '1 3 6 12 14 15 17 28 40 42'
	option ipv6 '1'
	option peerdns '0'
	list dns '1.1.1.1'
	list dns '8.8.8.8'

config interface 'wan6'
	option device 'br-wan'
	option proto 'dhcpv6'
	option peerdns '0'
	option reqaddress 'try'
	option defaultreqopts '0'
	option reqopts '23 25 26'
	option noclientfqdn '1'
	option noacceptreconfig '1'
	option vendorclass '0000a00c00XXXXXXXXXXXXXXXXXXXX'
	option clientid '00030001XXXXXXXXXXX'
	list dns '2606:4700:4700::1111'
	list dns '2606:4700:4700::1001'
	option reqprefix 'auto'
	
config interface 'ONTSFR'
	option proto 'static'
	option device 'br-wan'
	option netmask '255.255.255.0'
	option ipaddr '192.168.4.1'
	
config interface 'SFPSFR'
	option proto 'static'
	option device 'br-wan'
	option netmask '255.255.255.0'
	option ipaddr '192.168.20.1'

FIREWALL (all by default, i didn't touch anything here)

config defaults
	option syn_flood	1
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
# Uncomment this line to disable ipv6 rules
#	option disable_ipv6	1

config zone
	option name		lan
	list   network		'lan'
	option input		ACCEPT
	option output		ACCEPT
	option forward		ACCEPT

config zone
	option name		wan
	list   network		'wan'
	list   network		'wan6'
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
	option masq		1
	option mtu_fix		1

config forwarding
	option src		lan
	option dest		wan

# We need to accept udp packets on port 68,
# see https://dev.openwrt.org/ticket/4108
config rule
	option name		Allow-DHCP-Renew
	option src		wan
	option proto		udp
	option dest_port	68
	option target		ACCEPT
	option family		ipv4

# Allow IPv4 ping
config rule
	option name		Allow-Ping
	option src		wan
	option proto		icmp
	option icmp_type	echo-request
	option family		ipv4
	option target		ACCEPT

config rule
	option name		Allow-IGMP
	option src		wan
	option proto		igmp
	option family		ipv4
	option target		ACCEPT

# Allow DHCPv6 replies
# see https://github.com/openwrt/openwrt/issues/5066
config rule
	option name		Allow-DHCPv6
	option src		wan
	option proto		udp
	option dest_port	546
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-MLD
	option src		wan
	option proto		icmp
	option src_ip		fe80::/10
	list icmp_type		'130/0'
	list icmp_type		'131/0'
	list icmp_type		'132/0'
	list icmp_type		'143/0'
	option family		ipv6
	option target		ACCEPT

# Allow essential incoming IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Input
	option src		wan
	option proto	icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	list icmp_type		router-solicitation
	list icmp_type		neighbour-solicitation
	list icmp_type		router-advertisement
	list icmp_type		neighbour-advertisement
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

# Allow essential forwarded IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Forward
	option src		wan
	option dest		*
	option proto		icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-IPSec-ESP
	option src		wan
	option dest		lan
	option proto		esp
	option target		ACCEPT

config rule
	option name		Allow-ISAKMP
	option src		wan
	option dest		lan
	option dest_port	500
	option proto		udp
	option target		ACCEPT

AndrewZ · August 21, 2023, 7:51pm

Add SFPSFR to wan zone.

Sailor · August 21, 2023, 7:52pm

You try to address it via br-wan, which is a bridged interface, that can ether acces the 1gb/s Ethernet wan-Port, or an sfp in the eth1 cage. You should try to address it directly via the eth1 interface. In case, that doesn’t work either, try using the second sfp-Cage, next to the ethernetports. Acces via sfp2 interface, after removing it from the br-lan interface in Lucis interfaces tab. I read some reports, having problems in the eth1-cage.

shdf · August 21, 2023, 7:55pm

like this ?

config zone
option name wan
list network 'wan'
list network 'wan6'
list network 'SFPSFR '
option input REJECT
option output ACCEPT
option forward REJECT
option masq 1
option mtu_fix 1

AndrewZ · August 21, 2023, 7:56pm

Yes, but consider using lowercase for interface names.

shdf · August 21, 2023, 7:58pm

if i remember well i tried already, it's the first thing i tried.

Lets try the SFP 2 cage, but not tonight, as my wife is watching TV now so i'm stuck with the Mikrotik
i'll do this tomorow morning, and give feedback

shdf · August 21, 2023, 7:59pm

OK, I'll resume my tests tomorrow morning

shdf · August 21, 2023, 9:37pm

I was able to take advantage of the TV commercial to carry out the tests.

i replaced "SFPSFR" and "ONTSFR" with lowercase text, so i renamed to "onu" and "ont".
i added both in the wan zone
restarted network and firewall. No change.
i replaced the "br-wan" with "eth1" for the "onu" interface.
No change.
i removed "eth1" from wan and added it in "br-lan"
i removed "sfp2" from lan and added it in "br-wan"
i set the "onu" interface on sfp2
i inserted the ONU Stick in sfp2
NO CHANGE !!

shdf · August 21, 2023, 9:44pm

i did some search and i found thid post :

looks like depending on the snapshots, sometimes it works, sometimes not...
actually i'm using the 23.05.0 RC3, maybe i should try a snapshot ??

shdf · August 21, 2023, 10:15pm

i flashed the snapshot...no change.

and looks like if i set the interface "ont" with "wan" instead of "br-wan", i can't ping the device anymore. i have to set it with "br-wan".

So i guess i should have the same behavior with the interface "onu" and "eth1"...

so actualy i am like this, with the external ONT working, and the SFP ONU plugged in but unreachable.

HolgerHees · August 22, 2023, 7:41am

Hi, I'm using 23.05.0 RC2 and it works stable for me.

shdf · August 22, 2023, 7:48am

are you using an SFP ONU ? if yes then which one ?

HolgerHees · August 22, 2023, 7:54am

I'm using this one

shdf · August 22, 2023, 8:45am

this is not a GPON ONU, it's a SFP Transceiver. i'm speaking about the SFP stick connectected to your ISP.