Setting up BSNL FTTH with ONU(Bridge) + Router(OpenWRT)

  • Thread starter Thread starter sayantan45
  • Start date Start date
  • Replies Replies 47
  • Views Views 439
Solution
Some ONTs have bridge issues where it won't work when the bridge profile mac on ONT and the PPPOE wan mac on the router are same. To bypass it, follow the ONT bridge configuration steps (Non Alphion Based):

Note: Do not DELETE other profiles until you create Bridge profile and save/add it.

1. Take Backup of ONT in working state.

2. Take screenshot of WAN status Page with PPPOE and Voice (if you use then don't delete it). Make sure to include your PPPOE WAN MAC from that status page in screenshot as you need to enter it on the router.

3. Create Bridge profile with MTU 1500, Enter your PPPOE vlan, Service mode Internet, 802.1p (null), Disable the LAN DHCP and bind the LAN ports with the bridge profile.
Hit add/save

4. Delete...
@sayantan45

I see you have already resolved your issue but here is my /etc/config/network that I was using with BSNL Fiber back in February 2024 (ONT: Netlink HG323RGW in Bridge Mode, Router: Belkin RT3200 running OpenWrt 23.05.x). I later switched to Airtel Fiber when it became available.

/etc/config/network
Code:
config interface 'loopback'
    option device 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fd22:ede1:9a2d::/48'
    option packet_steering '1'

config device
    option name 'br-lan'
    option type 'bridge'
    list ports 'lan1'
    list ports 'lan2'
    list ports 'lan3'
    list ports 'lan4'

config interface 'lan'
    option device 'br-lan'
    option proto 'static'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'
    option delegate '0'
    option defaultroute '0'
    option ip6assign '64'
    option ip6ifaceid '::1'

config interface 'wan'
    option device 'wan'
    option proto 'pppoe'
    option username '[email protected]'
    option password 'REDACTED'
    option keepalive '5 5'
    option keepalive_adaptive '1'
    option pppd_options 'debug show-password'
    option ipv6 '1'
    option defaultroute '1'
    option peerdns '0'
    option delegate '0'
    list dns '1.1.1.2'
    list dns '1.0.0.2'

config interface 'wan6'
    option device '@wan'
    option proto 'dhcpv6'
    option reqaddress 'try'
    option reqprefix '56'
    option defaultroute '1'
    option peerdns '0'
    option delegate '1'
    list dns '2606:4700:4700::1112'
    list dns '2606:4700:4700::1002'
 
Last edited:
Upvote 0
@sayantan45

/etc/config/sqm
Code:
config queue
    option enabled '1'
    option interface 'wan'
    option download '95000'
    option upload '95000'
    option debug_logging '1'
    option verbosity '5'
    option qdisc 'cake'
    option script 'layer_cake.qos'
    option qdisc_advanced '1'
    option squash_dscp '0'
    option squash_ingress '0'
    option ingress_ecn 'ECN'
    option egress_ecn 'NOECN'
    option qdisc_really_really_advanced '1'
    option iqdisc_opts 'ingress mpu 84 noatm diffserv4 nat dual-dsthost'
    option eqdisc_opts 'egress mpu 84 noatm diffserv4 nat dual-srchost'
    option linklayer 'ethernet'
    option overhead '44'

config queue
    option enabled '1'
    option interface 'pppoe-wan'
    option download '95000'
    option upload '95000'
    option debug_logging '1'
    option verbosity '5'
    option qdisc 'cake'
    option script 'layer_cake.qos'
    option qdisc_advanced '1'
    option squash_dscp '0'
    option squash_ingress '0'
    option ingress_ecn 'ECN'
    option egress_ecn 'NOECN'
    option qdisc_really_really_advanced '1'
    option iqdisc_opts 'ingress mpu 84 noatm diffserv4 nat dual-dsthost'
    option eqdisc_opts 'egress mpu 84 noatm diffserv4 nat dual-srchost'
    option linklayer 'ethernet'
    option overhead '44'
 
Upvote 0
Here again to seek some advice regarding to DNS. as of now using default dns servers from bsnl 218.xx.xx.xx, tested them with DNSBench tool they were unreliable and other than cached lookups had high variance.

so decided to go with unbound + dnsmasq setup but could find any proper guide for this. Most of the documention are for desktops/servers. Anyone have good knowledge about thoose? Help needed here.
 
Upvote 0
For unbound you can try the instructions here: Oh noes!

I have never used unbound myself but I am using odhcpd (full) + https_dns_proxy setup. I have removed dnsmasq from my OpenWrt image. odhcpd acts as the DHCPv4 and DHCPv6 Server but does not act as DNS Server. https_dns_proxy acts as the sole DNS Server (bind to port 53 on the LAN side). I find DOH to be generally more stable compared to DOT.

Disable dnsmasq DNS Server functionality: Oh noes!

Replace dnsmasq with odhcpd: Oh noes!

Setup https_dns_proxy: Oh noes!
 
Upvote 0
Recently having a lot of problems of sites not opening on BSNL FTTH. Like Zerodha console and account opening page used for esign, digilocker , SBI card, also got problem with Hacker rank being not able to establish webrtc, showed an error saying not able to establish a webrtc connection.
Most common including govt websites are not opening at times.
@!!..PD..!! Noticed anything like this? First i thought bcz of dns maybe but changing that didn't solved the problem.
 
Upvote 0
Back