iorewrace.blogg.se

1. #HOW TO ENABLE MAC FILTERING ON UVERSE ROUTER INSTALL#
2. #HOW TO ENABLE MAC FILTERING ON UVERSE ROUTER CODE#

(2) Allow the FreeBSD WAN interface to communicate on vlan 0 so that it can communicate with the ONT. (1) Make FreeBSD forward EAPOL traffic between the RG and the ONT. So there are two technical issues that need to be resolved:

#HOW TO ENABLE MAC FILTERING ON UVERSE ROUTER CODE#

(3) FreeBSD's vlan code does not allow you to create a virtual interface assigned to VLAN 0 because IEEE 802.1Q specifies that vlan 0 is reserved. Also, it requires installing python on your firewall, which you may not want to do for security reasons. (2) The EAP-Proxy Script that is circulating is pretty specific to Linux and requires a lot of massaging to work with FreeBSD. (1) The FreeBSD bridge code does not allow for EAPOL traffic to be forwarded across the bridge because this violates the IEEE 802.1D standard. However, FreeBSD is not Linux and there are some issues due to FreeBSD's undying commitment to standard's compliance: (2) Create a Virtual Interface for your WAN assigned VLAN 0 and assign your services to it. (1b) Run a Python script called EAP-Proxy that proxies EAPOL traffic in order to avoid creating the bridge (1a) Create a Bridge and enable the Bridge to Forward EAPOL traffic - Use ebtables (Linux layer 2 firewall) to filter what is forwarded across the bridge.

To summarize, there are two Linux approaches: Here's a summary so far of what I've done, and the issues I am encountering.įor background, here are links for Linux specific solutions: There's been a surprising amount of progress, although I've encountered some issues with PFSense specifically (vanilla FreeBSD and OPNSense work more smoothly). I'm going to go ahead and try compiling the this eapolproxy myself to see if I can get it working.

#HOW TO ENABLE MAC FILTERING ON UVERSE ROUTER INSTALL#

My gigapower install doesn't happen for another day or 2. i don't know if thats kernel or something that needs to be compiled specifically for freebsd… It would be good to have some others try this…Īs for pfring dependency. I will have to keep playing with it, but I feel like the solution is close. After getting some dependencies (libstdc++) onto pfsense, it does start and appears to be passing the EAP traffic from the RG on OPT1 up to the WAN interface where the ONT is, but nothing ever comes back - it just keeps spamming the EAPOL start and logoffs. I checked out the eapolproxy, and successfully compiled it on my freebsd dev box. I've heard someone got this working on a debian box running shorewall so maybe just adapting it for BSD could be the solution.Įap proxy sucessfully compiled and running on pfsense after installing some dependencies (libstdc++). See also since it seems PFRING is required but BSD doesn't have PFRING. Like it maybe more viable now with a python script: