FTTH Spain, provider router configured into ONT (bridge) mode

I'm attempting to get my apu2 running with my newly installed FTTH line in Spain (Provider: Simyo, an Orange subsidiary). I've received a Livebox Fibra (all-in-one with ONT+ router) which I've configured into ONT (bridge) mode.

According to the various posts, I need to use vlan 832 to get my dhcp address. My configuration looks thusly:

config device
        option type '8021q'
        option ifname 'eth0'
        option vid '832'
        option name 'eth0.832'
        option macaddr 'de:ad:be:ef'

config interface 'wan'
        option proto 'dhcp'
        option device 'eth0.832'
        option clientid '01deadbeef'
        option vendorid 'sagem'
        option hostname 'Livebox'
        option broadcast '1'

Alas, I get no reply to the dhcp requests, which I can see going out. I'm at a complete loss as to what I might be doing wrong; there's a post here Help Configuring ISP VLAN from someone who got this working with the exact provider.

Any help appreciated.

I've already quoted this, but this particular user has a device with a built in switch, and I just have a vlan interface on top of one of the physical ports on the apu2, although topologically this should make no difference.

I've confirmed that the dhcp requests are tagged correctly, by plugging into the wan port and looking at the dhcp requests and seeing that they are properly in vlan 832. But I get no replies, which is a bit odd.

In fact, it looks as if all ingess packets are dropped:

eth0.832  Link encap:Ethernet  HWaddr 00:0D:B9:41:69:64                         
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1                    
          RX packets:137 errors:0 dropped:137 overruns:0 frame:0                
          TX packets:46 errors:0 dropped:0 overruns:0 carrier:0                 
          collisions:0 txqueuelen:1000                                          
          RX bytes:8768 (8.5 KiB)  TX bytes:15732 (15.3 KiB)           

I don't think the device stanza is needed. You can directly add the vlan subinterface in the wan interface configuration as you have it.

Sorry, but there's no difference. In any case the device section gets "recreated" whenever anything is changed in the UI.

Can you connect it somehow to the internet and install tcpdump to capture some packets?
opkg update; opkg install tcpdump; tcpdump -i eth0 -vn

I've got tcpdump installed. I can see the outbound DHCP request, but nothing gets back. I also confirmed that the DHCP requests are being tagged properly (832) by attaching my laptop to the router wan port and capturing with wireshark

Can you let it run for a minute and post the output here?

Pretty much this over and over...

18:33:19.480444 IP (tos 0x0, ttl 64, id 0, offset 0, flags [none], proto UDP (1)
    0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 94:3c:96:3d:8f:00]
          Client-Ethernet-Address 94:3c:96:3d:8f:00                             
          Vendor-rfc1048 Extensions                                             
            Magic Cookie 0x63825363                                             
            DHCP-Message Option 53, length 1: Discover                          
            MSZ Option 57, length 2: 576                                        
            Parameter-Request Option 55, length 8:                              
              Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname        
              Domain-Name, BR, NTP, Classless-Static-Route                      
            Vendor-Class Option 60, length 5: "sagem"                           
            Hostname Option 12, length 7: "Livebox"                             
            Client-ID Option 61, length 7: ether 94:3c:96:3d:8f:00              
18:33:19.857321 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f 7054  ....vo......./pT      
        0x0010:  825d 0000 0000 0000 0226 0000 0003 be02  .].......&......      
        0x0020:  0000 0000 0000 0000 0000 0000 1122 cb37  .............".7      
        0x0030:  b8c6 2882 207e e095 d4fd 3095 ddd3 4d76  ..(..~....0...Mv     

tcpdump -i eth0 -evn -c 10
let it capture 10 packets and post them here.

tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bys
18:45:52.452414 94:3c:96:3d:8f:00 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100)
    0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 94:3c:96:3d:8f:00]
          Client-Ethernet-Address 94:3c:96:3d:8f:00                             
          Vendor-rfc1048 Extensions                                             
            Magic Cookie 0x63825363                                             
            DHCP-Message Option 53, length 1: Discover                          
            MSZ Option 57, length 2: 576                                        
            Parameter-Request Option 55, length 8:                              
              Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname        
              Domain-Name, BR, NTP, Classless-Static-Route                      
            Vendor-Class Option 60, length 5: "sagem"                           
            Hostname Option 12, length 7: "Livebox"                             
            Client-ID Option 61, length 7: ether 94:3c:96:3d:8f:00              
18:45:53.152051 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f fcac  ....vo......./..      
        0x0010:  2dee 0000 0000 0000 0226 0000 0003 be54  -........&.....T      
        0x0020:  0000 0000 0000 0000 0000 0000 0000 3081  ..............0.      
        0x0030:  ab02 0101 0407 4d4d 5472 6170 73a7 819c  ......MMTraps...      
18:45:54.148194 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f d85c  ....vo......./.\      
        0x0010:  10f7 0000 0000 0000 0226 0000 0003 be02  .........&......      
        0x0020:  0000 0000 0000 0000 0000 0000 1122 cb37  .............".7      
        0x0030:  b8c6 2882 207e e095 d4fd 3095 ddd3 4d76  ..(..~....0...Mv      
18:45:55.148389 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f 3b22  ....vo......./;"      
        0x0010:  35fd 0000 0000 0000 0226 0000 0003 be54  5........&.....T      
        0x0020:  0000 0000 0000 0000 0000 0000 0000 3081  ..............0.      
        0x0030:  ab02 0101 0407 4d4d 5472 6170 73a7 819c  ......MMTraps...      
18:45:55.480418 94:3c:96:3d:8f:00 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100)
    0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 94:3c:96:3d:8f:00]
          Client-Ethernet-Address 94:3c:96:3d:8f:00                             
          Vendor-rfc1048 Extensions                                             
            Magic Cookie 0x63825363                                             
            DHCP-Message Option 53, length 1: Discover                          
            MSZ Option 57, length 2: 576                                        
            Parameter-Request Option 55, length 8:                              
              Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname        
              Domain-Name, BR, NTP, Classless-Static-Route                      
            Vendor-Class Option 60, length 5: "sagem"                           
            Hostname Option 12, length 7: "Livebox"                             
            Client-ID Option 61, length 7: ether 94:3c:96:3d:8f:00              
18:45:56.154681 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f ab4f  ....vo......./.O      
        0x0010:  f11d 0000 0000 0000 0226 0000 0003 be54  .........&.....T      
        0x0020:  0000 0000 0000 0000 0000 0000 0000 3081  ..............0.      
        0x0030:  ab02 0101 0407 4d4d 5472 6170 73a7 819c  ......MMTraps...      
18:45:57.155670 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f b894  ....vo......./..      
        0x0010:  1ffb 0000 0000 0000 0226 0000 0003 be54  .........&.....T      
        0x0020:  0000 0000 0000 0000 0000 0000 0000 3081  ..............0.      
        0x0030:  ab02 0101 0407 4d4d 5472 6170 73a7 819c  ......MMTraps...      
18:45:58.156658 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f ea8e  ....vo......./..      
        0x0010:  7e78 0000 0000 0000 0226 0000 0003 be02  ~x.......&......      
        0x0020:  0000 0000 0000 0000 0000 0000 1122 cb37  .............".7      
        0x0030:  b8c6 2882 207e e095 d4fd 3095 ddd3 4d76  ..(..~....0...Mv      
18:45:58.508429 94:3c:96:3d:8f:00 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100)
    0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 94:3c:96:3d:8f:00]
          Client-Ethernet-Address 94:3c:96:3d:8f:00                             
          Vendor-rfc1048 Extensions                                             
            Magic Cookie 0x63825363                                             
            DHCP-Message Option 53, length 1: Discover                          
            MSZ Option 57, length 2: 576                                        
            Parameter-Request Option 55, length 8:                              
              Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname        
              Domain-Name, BR, NTP, Classless-Static-Route                      
            Vendor-Class Option 60, length 5: "sagem"                           
            Hostname Option 12, length 7: "Livebox"                             
            Client-ID Option 61, length 7: ether 94:3c:96:3d:8f:00              
18:45:59.154958 fc:bc:d1:8b:76:6f > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100 
        0x0000:  fcbc d18b 766f ffff fffe 0000 002f a667  ....vo......./.g      
        0x0010:  8b55 0000 0000 0000 0226 0000 0003 2d98  .U.......&....-.      
        0x0020:  3a98 0a00 0000 0000 0000 0000 0000 0000  :...............      
        0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................      
10 packets captured                                                             
10 packets received by filter                                                   
0 packets dropped by kernel                                                     

Like I said.....

The output of this tcpdump looks like -xvn and not -evn
It's anyway strange, maybe the ONT router is keeping the vlan in the bridging mode. Did you try without the vlan 832?

Not until now, but just using the native interface (eth0) the behavior is the same.

You have to use ethernet port 4 in the livebox.

This I know, its clearly shown in the Livebox "advanced" section. There's something else amiss. I'm almost certain that I have a direct fibre (not NEBA) as this is what the technician who came to install the line told me. And indeed if I use the NEBA parameters (vlan 20 or 24), I do not get ANY inbound packets at all, whereas with the direct configuration (vlan 832) I do at least receive packets inbound.