Considering NBN with AussieBB but desire bridge-mode modem to own pfsense box (as router) PLUS want to keep VOIP whilst on a static IP.

[Gary Pope]

Fellow MLUGers:



Planning ahead for an NBN shift so time to reconsider my old ADSL2 modem
in bridge-mode to a FreeBSD packet-filter firewall.

But enter VOIP as a new requirement once PSTN land-line goes.

According to support at AussieBB 'their' modem does NOT support
bridge-mode. Fair enough, they're catering for the domestic
'all-in-one' no firewall customers.
So, I'd need to go 3rd party modem too (in bridge-mode) with a pfSense
64-bit box to support latest pFsense (no longer supporting 32-bit)....
but how to deal with VOIP in all this... Perhaps something else to
trick up the ATA settings for the old phone number.

But the $64 question I see on many forums for different
solutions/vendors of NBN, is that going bridge-mode will kill the VOIP
capabilities of the 'modem'. Some say that some modems can handle
'bridge-mode' for the DHCP throughput of the WAN, yet still cope with
VOIP processing at the modem level. Lot's of argument on this point.

I'm learning that even going static IP, the setting at the router end
is still 'dhcp-client' to fetch the IP (which for me will always be the
same static IP). Some set it to 'dynamic-IP'... but the main point
it, the router has to seek an IP from upstream, and if contracted for
static, then a static IP will come down the line.

So the VOIP aspect is the worry in all this.

As for the router for pfsense, looking for a low powered, but reasonable
64-bit CPU with multiple Intel Gigiabit NICs with USB ports and simple
VGA or HDMI for screen work if wirking locally. a NUC comes to mind.

Anybody tackled bridge-mode modem on NBN and retained VOIP ?

Cheers

Gary

[Malcolm Herbert]

... there are usually POTS-alike jacks on the NBN modems although not all ISPs can work with them ... ask yours, in which case you'll get a VOIP provisioned land-line, but the end-point will be the NBN modem ... job done?

Regards,
Malcolm

--
Malcolm Herbert
mj...@mjch.net

[Brian May]

On 2019-04-17 14:44, Gary Pope wrote:

Anybody tackled bridge-mode modem on NBN and retained VOIP ?

My understanding is that VOIP on NBN is just SIP over IP over NBN. So presumably any SIP phone or SIP ATA (for analog phones) should work. Or something like Asterisk/Freeswitch. This also explains why a bridge modem cannot provide VOIP, because it doesn't actually have access to the IP network layer.

This does require you have access to the SIP connection details, and some retailers may not give this information (???), especially if they configure the modem on your behalf. I think my ISP, Internode looks fine here, I don't know about anyone else.

You probably will need to take into account NAT and - if applicable any firewalls - however, which require some thought with SIP. SIP isn't exactly NAT friendly (although I believe there are solutions), or firewall friendly (depending on your firewall you might have SIP tracking support which helps considerably). If you have a fixed IP public address it will probably help considerably.

Disclaimer: I don't have NBN yet, so can't verify any of this.

[Michael Carmody]

Draytek 130 for FTTN

We use it to bridge a wide range of Ethernet routers (cisco, vyos, Sophos). It does vlans on WAN and vectoring. Been very reliable. 

-Michael 

 

---

From: mlu...@googlegroups.com on behalf of Gary Pope <g...@alchester.com.au>
Sent: Wednesday, April 17, 2019 14:44
To: mlu...@googlegroups.com
Subject: [MLUG] Considering NBN with AussieBB but desire bridge-mode modem to own pfsense box (as router) PLUS want to keep VOIP whilst on a static IP.

 

--
You received this message because you are subscribed to the Google Groups "mlug-au" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mlug-au+u...@googlegroups.com.
To post to this group, send email to mlu...@googlegroups.com.
Visit this group at https://groups.google.com/group/mlug-au.
For more options, visit https://groups.google.com/d/optout.

[Gary Pope]

Thanks to a few already replying - appreciated. I should add, we'll be
HFC connection out here in Boronia, Vic.
yawarra.com.au now owned by FastTrack, but with Paul O'Grady still
involved (nice0, declare that a pfsense box in the game would need to
have an added fpa112 type VOIP adapter, to which we'd need to add the
VOIP settings, which allegedly, AussieBB would be prepared to supply.
So that's 4 boxes in the loop. NTU, modem, pfsense box and the voip
adapter..... hmmmm.....

Gaz

On 17/04/19 16:21, Michael Carmody wrote:
> Draytek 130 for FTTN
>
> We use it to bridge a wide range of Ethernet routers (cisco, vyos,
> Sophos). It does vlans on WAN and vectoring. Been very reliable.
>
> -Michael
>
>

> ------------------------------------------------------------------------
> *From:* mlu...@googlegroups.com on behalf of Gary Pope
> <g...@alchester.com.au>
> *Sent:* Wednesday, April 17, 2019 14:44
> *To:* mlu...@googlegroups.com
> *Subject:* [MLUG] Considering NBN with AussieBB but desire bridge-mode

> <mailto:mlug-au+u...@googlegroups.com>.

> To post to this group, send email to mlu...@googlegroups.com

> <mailto:mlu...@googlegroups.com>.

> Visit this group at https://groups.google.com/group/mlug-au.
> For more options, visit https://groups.google.com/d/optout.

--
--
*Gary A. Pope*
B.Bus(ACC)
DIRECTOR
<http://www.alchester.com.au/reckon-accounts-clarified>

*Alchester Business Systems*
m: 0408-994799 anytime.
p: 03-97626293
e: g...@alchester.com.au <mailto:g...@alchester.com.au>
w: www.alchester.com.au <http://www.alchester.com.au>
Remote: Communications powered by ABSoutback3!
/_“We take care of everything!"_/
<http://www.linkedin.com/pub/gary-pope/2/550/822>

[Duncan Roe]

Hi Gary,

Are you looking at VOIP for your phone handsets or for other reasons?

Our Optus modem has an analogue phone connection so with a splitter we use
the old house wiring and handsets as before.

(HFC connection)

Cheers ... Duncan.

[Andrew McGlashan]

Hi Gary,

On 17/4/19 2:44 pm, Gary Pope wrote:
> Planning ahead for an NBN shift so time to reconsider my old ADSL2 modem
> in bridge-mode to a FreeBSD packet-filter firewall.

I couldn't imagine NOT being able to do bridge mode; but it is not the
standard setup by an ISP.

A new thing to look out for is that some ISP's are defaulting to carrier
grade NAT -- you DO NOT WANT that if you are going to host anything.

Exetel did this to a friend of mine, but he was able to get an ordinary
IPV4 back and has since setup rDNS. I am trying to help him get a /29
ip block, but I'm not sure they'll provide one without jumping through
hoops. It's good if you already have a block, but getting IPV4 blocks
these days is harder.

There looks to be an IPV6 option for my friend too.

As for VoIP.... I have a customer with the Exetel supplied modem/router
doing the VoIP and then DHCP to a different router that does his WiFi
and other networking. We could have removed the separate router, but it
is a good one and it is all setup well.

I'm running HFC (same with the two above). My connection come through
about 27 months ago now. I've always ran bridge mode directly to an
Ethernet port on an OPNSense firewall (fork / alternative to pfSense,
much more recommended by me over pfSense -- think back to the days of
Smoothwall vs IPCop ... SW was more commercial and so too is pfSense.
So, when you want to support the community and have more without paying
for extras, then you go with the alternatives; I had IPCop for years,
but moved to OPN Sense in favour of pfSense.

Now, I do have an IP block and I've got that all setup with a new
instance of 3CX running VoIP for me, I'm still in trial mode and trying
things out, but it looks awesome so far.

If you use the VoIP ports on the ISP supplied device, then forget about
bridge mode. My VoIP server (3CX) is a KVM VM (Debian based, just for
3CX). There was one special NAT Outbound rule that I needed above the
usual port forwarding, which is the same with pfSense ... without that
extra rule, the 3CX firewall tests failed.

Now with 3CX you can run an ATA on your network and plug an ordinary
phone in to that or you can run IP phones; you can even run a SIP phone
directly from your mobile and forget about any ordinary telephone corded
or cordless handsets.

> But enter VOIP as a new requirement once PSTN land-line goes.

Correct, you can keep PSTN, but for a limited time; it makes no sense to
keep it as PSTN though. The idea is that you get HFC fully operational,
then you port your PSTN to VoIP and once that is working, cancel the
original DSL -- you shouldn't cancel the DSL until the number is ported,
unless you don't care to keep the original PSTN number.

> According to support at AussieBB 'their' modem does NOT support
> bridge-mode. Fair enough, they're catering for the domestic
> 'all-in-one' no firewall customers.

I would say that is BS, what is the make/model that they are offering?

> So, I'd need to go 3rd party modem too (in bridge-mode) with a pfSense
> 64-bit box to support latest pFsense (no longer supporting 32-bit)....
> but how to deal with VOIP in all this... Perhaps something else to
> trick up the ATA settings for the old phone number.

Depending on how complicated or flexible you want your phone setup, you
may or may not need any physical phones. You will need the "modem" that
connects the HFC to your address, an Ethernet cable to your
firewall/router, whatever you end up choosing and then normal other
networking from the firewall device.

> But the $64 question I see on many forums for different
> solutions/vendors of NBN, is that going bridge-mode will kill the VOIP
> capabilities of the 'modem'. Some say that some modems can handle
> 'bridge-mode' for the DHCP throughput of the WAN, yet still cope with
> VOIP processing at the modem level. Lot's of argument on this point.

I would forget about using the VoIP port on the modem if you wish to do
bridge mode. At worst, just get an ATA for the network and use your
standard phone with that.

> I'm learning that even going static IP, the setting at the router end
> is still 'dhcp-client' to fetch the IP (which for me will always be the
> same static IP). Some set it to 'dynamic-IP'... but the main point
> it, the router has to seek an IP from upstream, and if contracted for
> static, then a static IP will come down the line.

It is very usual for the ISP to supply all networking via PPPoE and that
means a login that is provided with details via DHCP.

> So the VOIP aspect is the worry in all this.

Is it just one plain old telephone? Just use an ATA (analogue telephone
adapter).

> As for the router for pfsense, looking for a low powered, but reasonable
> 64-bit CPU with multiple Intel Gigiabit NICs with USB ports and simple
> VGA or HDMI for screen work if wirking locally. a NUC comes to mind.

Yeah, just make sure you have enough networking ports of the right type,
typically all GB these days. I had a customer early on who was lucky
enough to get a fibre connection, but she only wanted 25/5 connection
then and whilst I could reconfigure her old Billion 7404VGP device to
work with Ethernet WAN in place of the usual DSL port, the throughput
was woeful -- a cheap and new replacement router got full speeds without
any trouble.

> Anybody tackled bridge-mode modem on NBN and retained VOIP ?

Yep, as detailed above, but most of my VoIP before this new 3CX setup
has all been via plain old ATA units, ie, just another network device.

Cheers
AndrewM

[Michael Trifilo]

I've had HFC on the west side of town for a while now. I'm with Telstra but don't have a static IP address.
I have found the NBN Co supplied, Arris DOCSIS cable modem, seems to give out a DHCP assigned address to what ever is plugged into it. That solved the problem of shitty carrier routers, for internet at least.
The next problem was VOIP, unlike Aussie Broadband (https://www.aussiebroadband.com.au/support/knowledge-base/home-phone-voip/byovoipsettings/) Telstra won't provide these details.
I ended up setting up a separate subnet on my pfsense router and hooking it into the Telstra WAN port. I allowed the required ports through the pfsense router and hey presto VOIP was working. In your case Gaz, I think you'll have no problem BYOD with Aussie Broadband. Not sure how they configure the static IP. I imagine they will give you a set IP to hook into the Arris Cable Modem.

[Brian May]

Andrew McGlashan <andrew.m...@affinityvision.com.au> writes:

> A new thing to look out for is that some ISP's are defaulting to carrier
> grade NAT -- you DO NOT WANT that if you are going to host anything.

Yuck. Although hardly surprising. IPv4 are in short supply...

Is there any way of telling which ISPs do this before purchasing a plan?
I am assuming anybody that says that they will give you a static IP is
going to be OK.
--
Brian May <br...@linuxpenguins.xyz>
https://linuxpenguins.xyz/brian/

[Brian May]

Michael Trifilo <leahc...@gmail.com> writes:

> The next problem was VOIP, unlike Aussie Broadband
> (https://www.aussiebroadband.com.au/support/knowledge-base/home-phone-voip/byovoipsettings/)
> Telstra won't provide these details.

Good to know. So it does seem choice of provider is important here.

[Gary Pope]

Thanks for everyone's input so far, and particularly Andrew, who has shared some terrific insights.  Some questions need my clarification on all this.

1.  This is for my home, so just the one old phone number we've had for 35 years needs retaining and perhaps something like a spa112 phone adaptor will do.
      I had a really great talk to with some people who package pfsense boxes we all know:  yawarra.com.au (now part of FastTrack but same Melbourne players we know).
      PLUS I spoke with AussieBB.
      a)   Aussie supply all the necessary ATA codes needed to setup our own VOIP  on say a spa112 on the side.
      b)   AussieBB on HFC supply a Netcomm nf18acv modem with their contracts

2.  so one approach could be: 
      HFC --->   NTU --->  pfsense box    (as router to the LAN)
                                             --->  One LAN device could be the NF18ACV     for VOIP


3. I don't need a block of IP's.  All that is in my cloud resources for business matters and remains outside all this.

4.  I like STATIC IP at home for VPN/remote access etc etc  rather than dyndns approach.  It helps me lock down who can access all my remote sites/servers/clouds based on my static IP
     A lot of discussion on the net about how to get your IP from AussieBB.  They run IPoE  on NBN HFC.    Even with static IP,  we still get the modem site to seek a DHCP (client-dhcp) to fetch the IP from AussieBB.
     Most likely they just supply a common static IP, down the dhcp request.  
      A lot of people have issues getting that bit right because they thing they need to set their routers to static Ip or they incorrectly stay on PPoE,  whereas the solution i DHCP on IPoE.


5.  So that's where we're at.


Gaz

--

--
Gary A. Pope
B.Bus(ACC)
DIRECTOR


Alchester Business Systems

m: 0408-994799 anytime.
p: 03-97626293
e: g...@alchester.com.au

w: www.alchester.com.au

Remote: Communications powered by ABSoutback3!

“We take care of everything!"

[Gary Pope]

Yes - the freedom of BYOD VOIP settings, plus the offer of Static IP,
is setting AussieBB apart from many other.

[Andrew McGlashan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 18/4/19 8:55 am, Gary Pope wrote:
> Yes - the freedom of BYOD VOIP settings, plus the offer of Static
> IP, is setting AussieBB apart from many other.

Yes, well those are usually two standard features of Exetel (for which
I am an agent btw). Along with low price and overall very good
performance.

The bad thing now though is the carrier grade NAT, but probably only
for us IT people and it is something you can avoid if you need to.

Cheers
A.

-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXLi6+QAKCRCoFmvLt+/i
++nPAQC4f0P/SVNH/P91xvKbwlT4GeEsb3FN+QXc03ltLNOEdgD8DkSD5xRkSRb2
HhAMCjggwCLYoLUM8XSByoGNqBM5Xcc=
=jseg
-----END PGP SIGNATURE-----

[Andrew McGlashan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

On 18/4/19 8:50 am, Gary Pope wrote:
> Thanks for everyone's input so far, and particularly Andrew, who
> has shared some terrific insights. Some questions need my
> clarification on all this.
>
> 1. This is for my home, so just the one old phone number we've
> had for 35 years needs retaining and perhaps something like a
> spa112 phone adaptor will do. I had a really great talk to with
> some people who package pfsense boxes we all know: yawarra.com.au
> (now part of FastTrack but same Melbourne players we know). PLUS I
> spoke with AussieBB. a) Aussie supply all the necessary ATA codes
> needed to setup our own VOIP on say a spa112 on the side.

Exetel provide the VoIP details as well, nothing to hide here.

> b) AussieBB on HFC supply a Netcomm nf18acv modem with their
> contracts
>

> 2. so one approach could be: *HFC ---> NTU ---> pfsense box

> (as router to the LAN) ---> One LAN device could be the NF18ACV

> for VOIP *

Sounds good, you are likely to get the same NF18ACV (or similar) from
Exetel as well, free on the right contract and with up to 2 months free
NBN access depending on the chosen plan options.**

> **3. I don't need a block of IP's. All that is in my cloud

> resources for business matters and remains outside all this.

Yep, but I, myself, much prefer to self host everything and not rely on
any cloud providers whim to change costs or have any kind of wide outage
that I can do nothing about.

> 4. I like STATIC IP at home for VPN/remote access etc etc rather
> than dyndns approach. It helps me lock down who can access all my
> remote sites/servers/clouds based on my static IP A lot of
> discussion on the net about how to get your IP from AussieBB. They
> run IPoE on NBN HFC. Even with static IP, we still get the
> modem site to seek a DHCP (client-dhcp) to fetch the IP from
> AussieBB. Most likely they just supply a common static IP, down the
> dhcp request. A lot of people have issues getting that bit right
> because they thing they need to set their routers to static Ip or
> they incorrectly stay on PPoE, whereas the solution i DHCP on
> IPoE.

I think static IP is a definite plus and aside from the carrier grade
NAT situation (due to low availability of new IPV4 addresses), which
again, can be avoided if you have good reasons, it should be the default
for all ISPs as these kinds of services are online 24/7 anyway.

Cheers

A.


-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXLi8wAAKCRCoFmvLt+/i
+3mpAP4gJ42F5aZjpiljGGHLG0GyMvf8Bd/vegeq2jA/0KaJzwD/bq002q1YteTd
cNfoTIABpK5pHKNIIt96tV55ZHkYy0M=
=KyIL
-----END PGP SIGNATURE-----

[Andrew McGlashan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

On 18/4/19 8:24 am, Brian May wrote:
> Andrew McGlashan <andrew.m...@affinityvision.com.au> writes:
>
>> A new thing to look out for is that some ISP's are defaulting to
>> carrier grade NAT -- you DO NOT WANT that if you are going to
>> host anything.
>
> Yuck. Although hardly surprising. IPv4 are in short supply...

Yes, my thoughts exactly.

> Is there any way of telling which ISPs do this before purchasing a
> plan? I am assuming anybody that says that they will give you a
> static IP is going to be OK.

Unfortunately I don't know the answer just yet, but I would bet that
those that aren't doing it yet, will be doing so soon. Perhaps a
better question for Whirlpool ..... and if you do that, please let us
know the thread.

Cheers
A.
-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXLi9uwAKCRCoFmvLt+/i
+wcJAQDApfdG6br217qql89JMuQtO/fLI7t6Za4HFKjddBfumAEA14ePidchAJo5
DryYDNrYyCA0faKfnsyIDFSfbO01P4o=
=HSBf
-----END PGP SIGNATURE-----

[Darren Wurf]

On Thu., 18 Apr. 2019, 08:49 Gary Pope, <g...@alchester.com.au> wrote:

Thanks for everyone's input so far, and particularly Andrew, who has shared some terrific insights.  Some questions need my clarification on all this.

1.  This is for my home, so just the one old phone number we've had for 35 years needs retaining and perhaps something like a spa112 phone adaptor will do.
      I had a really great talk to with some people who package pfsense boxes we all know:  yawarra.com.au (now part of FastTrack but same Melbourne players we know).
      PLUS I spoke with AussieBB.
      a)   Aussie supply all the necessary ATA codes needed to setup our own VOIP  on say a spa112 on the side.
      b)   AussieBB on HFC supply a Netcomm nf18acv modem with their contracts

2.  so one approach could be: 
      HFC --->   NTU --->  pfsense box    (as router to the LAN)
                                             --->  One LAN device could be the NF18ACV     for VOIP


3. I don't need a block of IP's.  All that is in my cloud resources for business matters and remains outside all this.

4.  I like STATIC IP at home for VPN/remote access etc etc  rather than dyndns approach.  It helps me lock down who can access all my remote sites/servers/clouds based on my static IP
     A lot of discussion on the net about how to get your IP from AussieBB.  They run IPoE  on NBN HFC.    Even with static IP,  we still get the modem site to seek a DHCP (client-dhcp) to fetch the IP from AussieBB.
     Most likely they just supply a common static IP, down the dhcp request.  
      A lot of people have issues getting that bit right because they thing they need to set their routers to static Ip or they incorrectly stay on PPoE,  whereas the solution i DHCP on IPoE.


5.  So that's where we're at.


Gaz

Hi Gaz,

I got something like this working for my mother a couple of months ago, minus the pfSense and static IP. I used a cheapish ADSL router with VoIP for the phone connection. For some reason it failed to get a connection to Aussie by itself so I stuck a spare router running OpenWRT between the HFC box and the VoIP router.

Old number ported over just fine. Aussie do provide the VoIP details - took me a bit to figure out what goes where. The audio was cutting out a bit on the VoIP at first but the problem seems to have gone away after a reset.

Best of luck!

Darren

[Rick Miles]

Sorry to come late to the party, didn't do much but netflick and some coding over the holiday.

We to have had the same telephone number for a long time and did not want to lose it. Before changeover I was told we had to go VOIP and there was no certainty that we would have the same telephone number. For us that was bot the case. 

We have FTTP (fibre to the premises) and the NBN connection box inside our house has two RJ-11 (Voice (UNI-V) Ports) and 4 RJ-45 (Data (UNI-D) Ports) ports. Most people don't realise that these RJ-11 ports can be used for legacy hardware such as security systems, health monitoring gear as well as legacy telephone gear. ISPs usually will not tell you about this and indeed some will outright say they do not offer the ability to use legacy gear . We wanted to retain the use of our base with its three remotes plus our existing landline telephone number. Our ISP's (IINet) market/sales people said it couldn't be done but I got clever and called the technical help line and hooked up with someone that said it could be done with the retention of our existing phone number. I had him send me an email confirming this and ven gave me the name of the best person to talk to in sales. The cost for using legacy our legacy base station connected to the NBN connection box was and additional 5 dollars per month above our old plan.

[Andre Vidic]

Hi Gary,

To answer your question everything you want can be done. 

There seems to be some good suggestions so far.

My two cents worth is I have setup similar at my parents place three times. Once with optus using ADSL, once with IINet ADSL and once with AussieBB NBN - where the connection still is.

Additionaly at my current premisies i have IINet cable internet which will be pretty much like your NBN connection over HFC (modem wise).

The requirments my parents (I) had were:

1. Keep analogue cordless phones

2. Keep same phone number

(As Andrew suggested port your number over to VOIP and reiterate you want to keep the same number)

3. Get the analogue phone service working using VOIP over NBN

4. NBN service is a FTTC (so it uses an NBN fibre modem set in bridge mode)

The network diagram implemented is as follows:

NBN

|->Modem(Fibre/ HFC /Cable)

  |->pfsense box

      |->switch

           |->Cisco Linksys 2102 VOIP phone 

                Adapter&Route

               |-Analogue phone 1

                  |-Analogue phone 2

           |->Wifi Router

           |-> all other wired devices

AussieBB doesnt need a login & password authentication, which removes a step. You will need to configure pfsense with a WAN set to your static ip, username & password fields remain blank and LAN/port forwarding settings as you desire. 

For the VOIP component i used the cisco linksys 2102, which you can find on ebay for $45 second hand inc postage. You could use another VOIP modem of course. However, I did find the Cisco Linksys to have a very very comprehensive configuration ability so it works pretty much at any telco and the telco techs know the settings that are needed for the device as it is a previously well supported VOIP modem. 

I am happy to send you my Cisco Linksys 2102 settings which should allow you to easily setup your choice of VOIP modem.  

Let us know how you go!

Andrè

[Gary Pope]

Onya Andre - sounds a good approach! Thanks for confirming you've had
success with your drawing. And the 'Cisco' commonality aspect makes
sense too. Be another month before we attempt anything but wanted to
plan it.

Gaz

> <mailto:g...@alchester.com.au>> wrote:
>
> Thanks to a few already replying - appreciated. I should add,
> we'll be
> HFC connection out here in Boronia, Vic.

> yawarra.com.au <http://yawarra.com.au> now owned by FastTrack,

> but with Paul O'Grady still
> involved (nice0, declare that a pfsense box in the game would need to
> have an added fpa112 type VOIP adapter, to which we'd need to add the
> VOIP settings, which allegedly, AussieBB would be prepared to
> supply.
> So that's 4 boxes in the loop. NTU, modem, pfsense box and the voip
> adapter..... hmmmm.....
>
> Gaz
>
> On 17/04/19 16:21, Michael Carmody wrote:
> > Draytek 130 for FTTN
> >
> > We use it to bridge a wide range of Ethernet routers (cisco, vyos,
> > Sophos). It does vlans on WAN and vectoring. Been very reliable.
> >
> > -Michael
> >
> >
> >
> ------------------------------------------------------------------------
> > *From:* mlu...@googlegroups.com

> <mailto:mlu...@googlegroups.com> on behalf of Gary Pope
> > <g...@alchester.com.au <mailto:g...@alchester.com.au>>

> > *Sent:* Wednesday, April 17, 2019 14:44

> > *To:* mlu...@googlegroups.com <mailto:mlu...@googlegroups.com>

> <mailto:mlug-au%2Bunsu...@googlegroups.com>.

> > To post to this group, send email to mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>.
> > Visit this group at https://groups.google.com/group/mlug-au.
> > For more options, visit https://groups.google.com/d/optout.
> > --
> > You received this message because you are subscribed to the Google
> > Groups "mlug-au" group.
> > To unsubscribe from this group and stop receiving emails from
> it, send
> > an email to mlug-au+u...@googlegroups.com

> <mailto:mlug-au%2Bunsu...@googlegroups.com>
> > <mailto:mlug-au+u...@googlegroups.com
> <mailto:mlug-au%2Bunsu...@googlegroups.com>>.

> > To post to this group, send email to mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>

> > <mailto:mlu...@googlegroups.com <mailto:mlu...@googlegroups.com>>.

> > Visit this group at https://groups.google.com/group/mlug-au.
> > For more options, visit https://groups.google.com/d/optout.
>
>
> --
> --
> *Gary A. Pope*
> B.Bus(ACC)
> DIRECTOR
> <http://www.alchester.com.au/reckon-accounts-clarified>
>
> *Alchester Business Systems*
> m: 0408-994799 anytime.
> p: 03-97626293
> e: g...@alchester.com.au <mailto:g...@alchester.com.au>

> <mailto:g...@alchester.com.au <mailto:g...@alchester.com.au>>

> w: www.alchester.com.au <http://www.alchester.com.au>
> <http://www.alchester.com.au>
> Remote: Communications powered by ABSoutback3!
> /_“We take care of everything!"_/
> <http://www.linkedin.com/pub/gary-pope/2/550/822>
>
> --
> You received this message because you are subscribed to the Google
> Groups "mlug-au" group.
> To unsubscribe from this group and stop receiving emails from it,
> send an email to mlug-au+u...@googlegroups.com

> <mailto:mlug-au%2Bunsu...@googlegroups.com>.

[Andrew McGlashan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

Anybody lucky enough to have FTTP /may/ be able to get their VOICE via
the UNI-A ports -- not all ISPs support that port. If you do have
support for the port, then there will be a separate bandwidth
allocation for it's usage (it will still be VoIP, but more transparent).

Given how badly the NBN has been vandalized by LNP, well, as I said,
not many people are going to have this option as a consideration at all.

Kind Regards
AndrewM
-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXMD1UwAKCRCoFmvLt+/i
+xwBAQCEfideL0XJ7IlET6EAuXZ1DqHLppPxmR+pmQWJYEegKwD/VysI0/akHRhn
wVi6jUXxsQ9X7c7VXqbCA6SE9RloUME=
=x9Ud
-----END PGP SIGNATURE-----

[Andrew McGlashan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

UNI-V ...

On 25/4/19 9:46 am, Andrew McGlashan wrote:
> Hi,
>
> Anybody lucky enough to have FTTP /may/ be able to get their VOICE
> via the UNI-A ports -- not all ISPs support that port. If you do
> have support for the port, then there will be a separate bandwidth
> allocation for it's usage (it will still be VoIP, but more
> transparent).
>
> Given how badly the NBN has been vandalized by LNP, well, as I
> said, not many people are going to have this option as a
> consideration at all.
>
> Kind Regards AndrewM
-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXMD1gQAKCRCoFmvLt+/i
+45AAP9NKUNgtrRWvs4KXlazHgZjWg6KxT+JUCRnr+IM4BzIigD9EjZyu/32+ifP
zTbpTN/aBEs1gWJ36F9YOfLdLqrYiAo=
=ymkr
-----END PGP SIGNATURE-----

[Gary Pope]

TO: Andre - love your suggestions. Makes sense, and gives me
(over)confidence.

All good except I fell for the buyer-beware trick of picking up a couple
of Linksys/cisco 2102 voip adapters at a price too good to be true. 2
for $20. But turns out they were locked units. Spent a good afternoon
trying to unlock them. Obviously have too much time on my hands. Will
go find some unlocked ones elsewhere. Seems there are some VOIP ISPs
that set some obsure unique customer password on the devices. Even a
phone handset "user reset" command is of no avail. And any attempt to
do a factory reset will leave the device unusable if the unique admin
password is not known. (Ouch - did that on one of the pair I
bought.... seeing as I'd run out of other options)..... All good usual
learning curve stuff!

Anyway, your concept/working approach is making sense, I just need to
get the right units. Thanks for the tips though on all this.

Been a good week otherwise. Put pfsense (be it all the last of the
32-bit 2.3.5_2 version before needing some 64-bit hardware for
latest)... into action here and is running really well, and has given
me a chance to get my head around all those settings I'd forgotten from
3 years ago.

Got a guest lan, WAN and Private LAN nicely separated and all the
production systems in swing. I see where the WAN settings in 'dhcp'
mode will allow me to pick up NBN with the supplied static IP later.

And I'll ensure everything is a go with old phone numbers before
allowing AussieBB to relinquish anything from the ADSL/PSTN setup with
Telstra...... So we have taken on board all those suggestions from
others too.

So - off to get an 'unlocked' VOIP adapter and a 2nd for potential
spares, just to keep the warehouse filled outside as usual.

Cheers,

Gaz




On 23/04/19 12:30, Andre Vidic wrote:

> <mailto:g...@alchester.com.au>> wrote:
>
> Thanks to a few already replying - appreciated. I should add,
> we'll be
> HFC connection out here in Boronia, Vic.

> yawarra.com.au <http://yawarra.com.au> now owned by FastTrack,

> but with Paul O'Grady still
> involved (nice0, declare that a pfsense box in the game would need to
> have an added fpa112 type VOIP adapter, to which we'd need to add the
> VOIP settings, which allegedly, AussieBB would be prepared to
> supply.
> So that's 4 boxes in the loop. NTU, modem, pfsense box and the voip
> adapter..... hmmmm.....
>
> Gaz
>
> On 17/04/19 16:21, Michael Carmody wrote:
> > Draytek 130 for FTTN
> >
> > We use it to bridge a wide range of Ethernet routers (cisco, vyos,
> > Sophos). It does vlans on WAN and vectoring. Been very reliable.
> >
> > -Michael
> >
> >
> >
> ------------------------------------------------------------------------
> > *From:* mlu...@googlegroups.com

> <mailto:mlu...@googlegroups.com> on behalf of Gary Pope
> > <g...@alchester.com.au <mailto:g...@alchester.com.au>>

> > *Sent:* Wednesday, April 17, 2019 14:44

> > *To:* mlu...@googlegroups.com <mailto:mlu...@googlegroups.com>

> <mailto:mlug-au%2Bunsu...@googlegroups.com>.

> > To post to this group, send email to mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>.
> > Visit this group at https://groups.google.com/group/mlug-au.
> > For more options, visit https://groups.google.com/d/optout.
> > --

> > You received this message because you are subscribed to the Google
> > Groups "mlug-au" group.
> > To unsubscribe from this group and stop receiving emails from
> it, send
> > an email to mlug-au+u...@googlegroups.com

> <mailto:mlug-au%2Bunsu...@googlegroups.com>
> > <mailto:mlug-au+u...@googlegroups.com
> <mailto:mlug-au%2Bunsu...@googlegroups.com>>.

> > To post to this group, send email to mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>

> > <mailto:mlu...@googlegroups.com <mailto:mlu...@googlegroups.com>>.

> > Visit this group at https://groups.google.com/group/mlug-au.
> > For more options, visit https://groups.google.com/d/optout.
>
>
> --
> --
> *Gary A. Pope*
> B.Bus(ACC)
> DIRECTOR
> <http://www.alchester.com.au/reckon-accounts-clarified>
>
> *Alchester Business Systems*
> m: 0408-994799 anytime.
> p: 03-97626293
> e: g...@alchester.com.au <mailto:g...@alchester.com.au>

> <mailto:g...@alchester.com.au <mailto:g...@alchester.com.au>>

> w: www.alchester.com.au <http://www.alchester.com.au>
> <http://www.alchester.com.au>
> Remote: Communications powered by ABSoutback3!
> /_“We take care of everything!"_/
> <http://www.linkedin.com/pub/gary-pope/2/550/822>
>
> --
> You received this message because you are subscribed to the Google
> Groups "mlug-au" group.
> To unsubscribe from this group and stop receiving emails from it,
> send an email to mlug-au+u...@googlegroups.com

> <mailto:mlug-au%2Bunsu...@googlegroups.com>.

[Gary Pope]

Andre

After buying a bad LOCKED pair of units, I've just received a pair of
new Linksys PAP2T units. oddly labelled manufactured in March
2019!! I thought they were EOL ages ago, so I'm already suspicious.
Anyway I'd appreciate thos settings you have put into your 2102 model
to see if I can line them up. Email here if you're happy or privately
to g...@alcheter.com.u if anything personal.

Thanks Andre

Gary

On 23/04/19 12:30, Andre Vidic wrote:

> <mailto:g...@alchester.com.au>> wrote:
>
> Thanks to a few already replying - appreciated. I should add,
> we'll be
> HFC connection out here in Boronia, Vic.

> yawarra.com.au <http://yawarra.com.au> now owned by FastTrack,

> but with Paul O'Grady still
> involved (nice0, declare that a pfsense box in the game would need to
> have an added fpa112 type VOIP adapter, to which we'd need to add the
> VOIP settings, which allegedly, AussieBB would be prepared to
> supply.
> So that's 4 boxes in the loop. NTU, modem, pfsense box and the voip
> adapter..... hmmmm.....
>
> Gaz
>
> On 17/04/19 16:21, Michael Carmody wrote:
> > Draytek 130 for FTTN
> >
> > We use it to bridge a wide range of Ethernet routers (cisco, vyos,
> > Sophos). It does vlans on WAN and vectoring. Been very reliable.
> >
> > -Michael
> >
> >
> >
> ------------------------------------------------------------------------
> > *From:* mlu...@googlegroups.com

> <mailto:mlu...@googlegroups.com> on behalf of Gary Pope
> > <g...@alchester.com.au <mailto:g...@alchester.com.au>>

> > *Sent:* Wednesday, April 17, 2019 14:44

> > *To:* mlu...@googlegroups.com <mailto:mlu...@googlegroups.com>

> <mailto:mlug-au%2Bunsu...@googlegroups.com>.

> > To post to this group, send email to mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>.
> > Visit this group at https://groups.google.com/group/mlug-au.
> > For more options, visit https://groups.google.com/d/optout.
> > --

> > You received this message because you are subscribed to the Google
> > Groups "mlug-au" group.
> > To unsubscribe from this group and stop receiving emails from
> it, send
> > an email to mlug-au+u...@googlegroups.com

> <mailto:mlug-au%2Bunsu...@googlegroups.com>
> > <mailto:mlug-au+u...@googlegroups.com
> <mailto:mlug-au%2Bunsu...@googlegroups.com>>.

> > To post to this group, send email to mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>

> > <mailto:mlu...@googlegroups.com <mailto:mlu...@googlegroups.com>>.

> > Visit this group at https://groups.google.com/group/mlug-au.
> > For more options, visit https://groups.google.com/d/optout.
>
>
> --
> --
> *Gary A. Pope*
> B.Bus(ACC)
> DIRECTOR
> <http://www.alchester.com.au/reckon-accounts-clarified>
>
> *Alchester Business Systems*
> m: 0408-994799 anytime.
> p: 03-97626293
> e: g...@alchester.com.au <mailto:g...@alchester.com.au>

> <mailto:g...@alchester.com.au <mailto:g...@alchester.com.au>>

> w: www.alchester.com.au <http://www.alchester.com.au>
> <http://www.alchester.com.au>
> Remote: Communications powered by ABSoutback3!
> /_“We take care of everything!"_/
> <http://www.linkedin.com/pub/gary-pope/2/550/822>
>
> --
> You received this message because you are subscribed to the Google
> Groups "mlug-au" group.
> To unsubscribe from this group and stop receiving emails from it,
> send an email to mlug-au+u...@googlegroups.com

> <mailto:mlug-au%2Bunsu...@googlegroups.com>.

[Andre Vidic]

Hi Gary,

Sounds like a tough time with a few false starts. 

Will send over the config by Saturday.

Regards,

Andre

To unsubscribe from this group and stop receiving emails from it, send an email to mlug-au+u...@googlegroups.com.
To post to this group, send email to mlu...@googlegroups.com.

Visit this group at https://groups.google.com/group/mlug-au.

To view this discussion on the web visit https://groups.google.com/d/msgid/mlug-au/5CF0D6E4.20907%40alchester.com.au.

[Gary Pope]

Onya Andre! No hurry, I'm not contracted to NBN yet - this is just
prep work and a nice learning experience.

Gaz

On 03/06/19 10:10, Andre Vidic wrote:
> Hi Gary,
>

> > <mailto:mlu...@googlegroups.com

> <mailto:mlu...@googlegroups.com>> on behalf of Gary Pope
> > > <g...@alchester.com.au <mailto:g...@alchester.com.au>

> <mailto:g...@alchester.com.au <mailto:g...@alchester.com.au>>>

> > > *Sent:* Wednesday, April 17, 2019 14:44
> > > *To:* mlu...@googlegroups.com

> <mailto:mlu...@googlegroups.com> <mailto:mlu...@googlegroups.com

> > <mailto:mlug-au%2Bunsu...@googlegroups.com
> <mailto:mlug-au%252Buns...@googlegroups.com>>.

> > > To post to this group, send email to
> mlu...@googlegroups.com <mailto:mlu...@googlegroups.com>
> > <mailto:mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>>.
> > > Visit this group at https://groups.google.com/group/mlug-au.
> > > For more options, visit https://groups.google.com/d/optout.
> > > --

> > > You received this message because you are subscribed to
> the Google
> > > Groups "mlug-au" group.
> > > To unsubscribe from this group and stop receiving emails from
> > it, send
> > > an email to mlug-au+u...@googlegroups.com
> <mailto:mlug-au%2Bunsu...@googlegroups.com>

> > <mailto:mlug-au%2Bunsu...@googlegroups.com
> <mailto:mlug-au%252Buns...@googlegroups.com>>
> > > <mailto:mlug-au+u...@googlegroups.com
> <mailto:mlug-au%2Bunsu...@googlegroups.com>
> > <mailto:mlug-au%2Bunsu...@googlegroups.com
> <mailto:mlug-au%252Buns...@googlegroups.com>>>.

> > <mailto:mlug-au%2Bunsu...@googlegroups.com
> <mailto:mlug-au%252Buns...@googlegroups.com>>.

> To view this discussion on the web visit
> https://groups.google.com/d/msgid/mlug-au/5CF0D6E4.20907%40alchester.com.au.
> For more options, visit https://groups.google.com/d/optout.
>

> --
> You received this message because you are subscribed to the Google
> Groups "mlug-au" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to mlug-au+u...@googlegroups.com
> <mailto:mlug-au+u...@googlegroups.com>.
> To post to this group, send email to mlu...@googlegroups.com
> <mailto:mlu...@googlegroups.com>.
> Visit this group at https://groups.google.com/group/mlug-au.

> To view this discussion on the web visit

> https://groups.google.com/d/msgid/mlug-au/CA%2B%2Bsop%3Djn0Xz7h3UDHY0unbaoowdeyiTzjZcDKy-u6qhX_VseQ%40mail.gmail.com
> <https://groups.google.com/d/msgid/mlug-au/CA%2B%2Bsop%3Djn0Xz7h3UDHY0unbaoowdeyiTzjZcDKy-u6qhX_VseQ%40mail.gmail.com?utm_medium=email&utm_source=footer>.

[Gary Pope]

**THANKS ANDRE !! **


Been a long time,  but we went onto NBN this week with the VoIP going live today.  'd like to thank Andre Vidic for his clues on the LinkSYS (CISCO equivalent) ATA settings for AussieBB  NBN + VoIP


Definitely been a great experience working with AussieBB for implementation.  The timing, feedback and alerts along the process were 100%.

Result was:  HFC  (coax all the way from Ringwood Exchange over to Boronia!)  with Arris CM8200 modem connected to Telstra COAX cable already in the building from 27 years ago.
We were able to run in parallel on ADSL2+  + PSTN landline until the cutover.

WE put pfSense box in as the router.

NBN went live on 16th Sept and we moved the pfSense box over to link the LAN from the NBN connection using 'DHCP' setting in pfSense to discover our contracted STATIC IP from AussieBB.
(The PAP2T VoIP adapter is just another device on the LAN,  with the firewall permitting port 5060  NAT Port forwarding to that device  ....   on the same LAN subnet as our network.)

NBN HFC --->  NBN Co supplied: Arris CM8200 modem     -->  pfSense firewall  as ROUTER   -->  LAN  (with workstations and servers, and PAP2T VoIP adapter etc ....  )

Only thing we had to change with our NEW STATIC IP  was our nameserver,   and   fail2ban permission rules and various WordPress firewall white list settings around the world on other VM's and Websites we handle.

As for the landline,  it was churned from Telstra sometime today before 2:30PM,  and by 4PM we had a TXT saying it had been cutover to VoIP at 4PM.

WE moved one cable to link the LinkSYS ATA Adapter to the phone in the property.....  and immediately received calls.    We had changed the DIAL OPTION at a suggestion from AussieBB,  but couldnt' place outbound calls.  So we reverted to the LinkSYS PAP2T  default setting for that feature, and we could place outbound calls.

So,  STATIC IP,  BYO pfSense router and a really low cost LinkSYS PAP2T for VoIP handling....  ALL good.

e don't stream video or use netflix or anything heavy like that.  IN fact we're lucky to use much more than about 20Gb a .month.  So we just wen to the NBn  25Mbit   10GB monthly plan PLUS Static IP for extra $10  and the  $0  VoIP retaining existing landline phone number (calls cost extra,  but we won't use it....  just wanted it for incoming calls for anybody who's known us her for 33 years!!!)....  all up only $65/mth.    

Very happy.

Thanks again to the MLUG team and particularly Andre Vidic for encouraging us to choose the selection of products and implementation path....    all worked a treat!


So,  goodbye to ADSL2+ at only 5Mbit/ssec  out here 3.5kms from Boronia Exhange,  and now on NBN  for $20/mth less cost  running  21.9Mbits/sec per ozspeedtest.com


**TIP** If using any legacy type software or requiring email or website ports opened,  you just have to ask AussieBB to stop blocking ports.  Then let your firewall become the protector.

( Sorry for the AussieBB commercial amongst all this - but they were somewhat unique in letting us as a customer setup our own BUY firewall router and VoIP adapters - an provided help to do so!   But many MLUG people are across this!)


Cheers!

Gary

To view this discussion on the web visit https://groups.google.com/d/msgid/mlug-au/CA%2B%2Bsop%3Djn0Xz7h3UDHY0unbaoowdeyiTzjZcDKy-u6qhX_VseQ%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

--

--

Gary A. Pope
B.Bus(ACC)
DIRECTOR


Alchester Business Systems

m: 0408-994799 anytime.
p: 03-97626293
e: g...@alchester.com.au

w: www.alchester.com.au

Remote: Communications powered by ABSoutback3!

“We take care of everything!"