My OpenWRT router has 192.168.1.1 on 192.168.1.0/24. Connected to eth2 (a part of br-wan) I have an XGS-PON ONT that runs OpenWRT and has IP 192.168.11.1.
It is detected:
[ 76.870842] sfp sfp1: module OEM XGSPONST2001 rev A-01 sn 092142509000169 dc 250902
[ 76.910754] hwmon hwmon2: temp1_input not attached to any thermal zone
[ 77.962226] mtk_soc_eth 15100000.ethernet eth2: Link is Up - 10Gbps/Full - flow control off
[ 77.962261] br-wan: port 2(eth2) entered blocking state
[ 77.975805] br-wan: port 2(eth2) entered forwarding state
and I patched the kernel to use the long startup quirk and the quirk to ignore TX_FAULT due to the UART on the same pin.
I’ve tried adding a static route to 192.168.11.1/32 on loopback and lan interfaces but I still can’t ping the IP. When I plug this ONT SFP into my PC, adding an IP on 192.168.11.0/24 lets me connect, so maybe it’s a LAN-WAN firewall issue on OpenWRT?
Thanks, so I added the static address interface like it mentions, but now something very weird happens. When I visit 192.168.11.1 it takes me to my OpenWRT router’s LuCI page instead of the webpage of the ONT.
Also for completeness, I will be using PPPoE on the WAN interface, the ONT SFP+ stick just communicates with the XGS-PON infrastructure at my ISP, but I haven’t configured the WAN interface to do that yet (or plugged in my ISPs fiber cable yet), if that matters.
You assigned the address of the ONT to the OpenWrt router, so it makes sense that you're seeing the LuCI interface when you enter that address.
Try setting the address to 192.168.11.2/24 (note that it is the .2 address and /24 such that it considers the .1 address within the same subnet).
If that doesn't fix the problem, let's see the output from:
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):
Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:
ubus call system board
cat /etc/config/network
cat /etc/config/firewall
Oh of course, thanks, I understand how that works now. I’m just adding the IP 192.168.11.2 to the WAN interface so the router’s WAN interface is on that subnet, and then LAN→WAN is always allowed so it can access it, and then my queries to 192.168.11.1 will hit the router and be forwarded to the ONT.
Out of curiosity, is this also possible to be done with just static routes? - Yes it can, I just had to have the interface as “wan”.
I guess I’ll mark the other reply as the solution since it would’ve been correct if I followed the steps correctly. Thanks
