2019051801AWStats

Use technicolor TG588v v2 as a VDSL modem to connect to Zen Internet fibre optic service by Cisco1801.

Just wanted to test whether TG588v can be used for modem disabling router function in it. Instead, PPP connection and the routing functions were done by Cisco1801. In addition, provide IPv6. Refer the filter settings for IPv6.
technicolor製 TG588v v2 をVDSL用のモデムとして使い、Cisco1801でZen Internetへ接続します。TG588v v2 のルーティング機能を停止してモデム単機能として使えるか、テストしたいだけでした。PPP接続とルーティングはCisco1801で行いました。加えて、IPv6へも対応しました。IPv6用のフィルタをご参照下さい。

Assumption: The test was done for ZEN Internet fibre optic broadband service.

Prepared a filter to connect to a BT's telephone socket (British Telecom distribution point). _{In the picture, the ADSL filter was used, but it was compatible with VDSL connection for fibre optic broadband service.}

TG588v was connected to the filter using a RJ11 telephon cable.

Cisco1801 is connected by a ethernet cable, the cable was between FastEthernet0 on Cisco1801 and port 2 on TG588v._{I recommend the port 2 or the port 3 on TG588v, because the port 1 had had special functions by much older firmware.}

technicolor TG588v v2 was configured as the picture.

Type: VDSL_{Because the service was ZEN Internet fibre optic broadband service by the VDSL technology via the British Telecom fibre optic networks.}

Routed Type: Bridge_{Use just as the VDSL modem.}

VLAN Enabled: ON_{British Telecom uses Vlan ID 101 for fibre optic broadband connection.}

VLAN ID: 101_{It must be absolutely 101.}

Cisco 1801 was configured as follows.

ip cef
ipv6 unicast-routing
ipv6 cef

interface FastEthernet0
no ip address
ip tcp adjust-mss 1452
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1

interface Vlan1
ip address 192.168.150.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
ipv6 address FE80::1 link-local
ipv6 address NDND:NDND:NDND:NDND::1/64_{In our office, the given NDND:NDND:NDND:NDND::/48 address range has been separated into 16 subnets.}
ipv6 enable
ipv6 nd prefix NDND:NDND:NDND:NDND::/64 no-advertise
ipv6 nd managed-config-flag
ipv6 nd other-config-flag

interface Dialer0
mtu 1492
ip address XXX.XXX.XXX.XXX 255.255.255.???_{XXX.XXX.XXX.XXX is fixed IPv4 address given by Zen Internet}
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
ipv6 address FE80::1 link-local
ipv6 address PDPD:PDPD:PDPD:PDPD::1/64_{PDPD:PDPD:PDPD:PDPD is fixed IPv6 prefix address given by Zen Internet}
ipv6 enable
ipv6 mtu 1454
ipv6 traffic-filter v6Di0InList in_{The filter must not be forgotten for IPv6 for incoming traffics.}
ipv6 traffic-filter v6Di0OutList out
ppp authentication chap callin
ppp chap hostname zen123456@zen_{Specify a connection ID given by Zen Internet}
ppp chap password HogeHoge_{Specify a password given by Zen Internet}

ip forward-protocol nd

ip nat pool NatOutsideAddress XXX.XXX.XXX.XXX XXX.XXX.XXX.XXX netmask 255.255.255.248
ip nat inside source list NatApplyList177 pool NatOutsideAddress overload

ip route 0.0.0.0 0.0.0.0 Dialer0

ip access-list extended NatApplyList177
deny ip 192.168.150.0 0.0.0.255 XXX.XXX.XXX.XXX 0.0.0.8
permit ip 192.168.150.0 0.0.0.255 any
deny ip any any

ipv6 route ::/0 Dialer0

ipv6 access-list v6Di0InList_{Specifying the filter for IPv6 incoming traffics.}
remark 1.============================================
remark 1. For RFC 4890, but echo-request is limited
remark 1.
permit icmp any any echo-reply
permit icmp any PDPD:PDPD:PDPD:PDPD::/64 echo-request
permit icmp any host NDND:NDND:NDND:NDND::1 echo-request
permit icmp any any 1 3
permit icmp any any 1 4
permit icmp any any packet-too-big
permit icmp any any time-exceeded
permit icmp any any parameter-problem
permit icmp any any mld-query
permit icmp any any mld-reduction
permit icmp any any mld-report
permit icmp any any nd-na
permit icmp any any nd-ns
permit icmp any any router-solicitation
remark 1..
remark 2.============================================
remark 2. To access to Internet
remark 2.
evaluate v6tmplist
remark 2..
remark 3.============================================
remark 3. The CE router accepts all ICMP
remark 3.
permit icmp any host NDND:NDND:NDND:NDND::1
remark 3..
remark 4.============================================
remark 4. To accept incoming connection
remark 4.
permit tcp any host NDND:NDND:NDND:NDND::10:F eq www_{If you have http server.}
permit tcp any host NDND:NDND:NDND:NDND::10:F eq 443_{If you have https server.}
remark 4..
remark 5.============================================
remark 5. To block unnesessary packets
remark 5.
deny ipv6 any any
remark 5..

ipv6 access-list v6Di0OutList
permit icmp any any reflect v6tmplist
permit tcp any any reflect v6tmplist
permit udp any any reflect v6tmplist
permit tcp host NDND:NDND:NDND:NDND::10:F eq www any_{If you have http server.}
permit tcp host NDND:NDND:NDND:NDND::10:F eq 443 any_{If you have https server.}