Firewall/NAT

Hi,

My local telco has offered me an upgrade to fiber, as part of the installation they replace my existing ADSL router with a fiber termination device and a new router. In my current ADSL installation the router is configured as a bridge and I use my M0n0wall to do PPPoE.

With the fiber installation the termination device uses a VLAN and it appears that there is no way to change that. So my question is can I configure M0n0wall to use a VLAN on the WAN interface? M0n0wall is running on a PCEngines WRAP, which appears to have 802.1q support.

For me the router is redundant and I would prefer not to have another device consuming electricity and taking up space.

Any suggestions?

TIA

Alan

Yes, look at the assign interface option

Yes in the installation You're actually being prompted if You would like to assign VLAN interfaces first so I think it's doable that way, or by manually editing the configuration, You must be careful when using the second option.

OK, so finally the fiber was installed today. I tried assigning the VLAN to the WAN interface. Configured the WAN to PPPoE, reset M0n0wall and it doesn't work.

How can I check to see if my hardware PCEngines WRAP really supports 802.1q VLAN tagging? Also is there any way to see if the VLAN is actually configured?

Thx

Alan

Yes it is possible [maybe rarely nowadays] a NIC not to support VLAN tagging at all or maybe just not adding VLAN tags on outgoing packets.
In such scenario I usually use traffic analyzer tapped onto the connection to determine where is the problem.
In my situation I've noticed that the incoming packets are tagged and outgoing are not, that's how I've realized that I have a problem with the VLAN tags being not encapsulated in the packet from my side.
NIC change solved the problem once and for all.

I finally discovered what I was doing wrong; I ha not configured the WAN interface to use the VLAN instead of the SIS0 interface! (Found it after looking through many pages of google results). Once I did that everything worked perfectly. Also gained in response time (ping times are lower) once I eliminated the router.

If ping is lower it means that everything is working as expected.
An additional network device with lower processing capabilities is terminated and the link is chained directly to the more powerful one - m0n0.