Using an Origo 8000 / 8100 / 8400 ADSL modem router with Smoothwall

This page provides information on configuring an Origo 8100 / 8400 ADSL modem router in half-bridge (also known as ZIPB, DHCP Spoofing, Transparent Bridging) mode with Smoothwall using an ISP that provides a single IP address whether static or dynamic. If you have arranged for your ISP to provide multiple fixed IP addresses you need to look elsewhere. The distinguishing feature of half-bridge is that your login details are entered on the modem and that the IP addresses provided to a DHCP connecting client are the ISP's provided IP addresses. The admin interface of the modem should still be available on another IP address.

Origo 8000 / 8100 / 8400

The Origo 8100 ADSL modem has a single 10/100Mbps auto-sensing duplex ethernet port for connectivity, as well as having a DHCP server, PPPoA and PPPoE clients, and a web interface for configuration and adminstration. The 8000 also has a single port but no power switch. The 8400 has 4 10/100Mbps ethernet ports on a built-in switch. The design of the cases has changed over time.

Safecom SAMR-4110 / SAMR-4114

The Safecom SAMR-4110 ADSL modem has a single 10/100Mbps auto-sensing duplex ethernet port for connectivity, as well as having a DHCP server, PPPoA and PPPoE clients, and a web interface for configuration and adminstration. . The SAMR-4114 has 4 10/100Mbps ethernet ports on a built-in switch. Internally they are identical to the Origo modems.

Configuring the Origo 8000 / 8100 / 8400 to connect to the internet

This is dealt with in the Origo forums and exact details depend on the firmware version the modem is running.

(If you are already using the Origo 8100 / 8400 to connect to the internet, then backup its settings using Neo's Backup Utility and ignore this lot.)

Hard Reset the modem back to factory settings by inserting a pin in the hole at the back for 30 seconds, then remove it and wait 2 minutes, then power the modem off and on.

The modem is now working as a NAT'ing router on http://10.0.0.2. The easiest way to talk to it is to plug a PC (set for DHCP) into any of the ports using a straight-through cable and power the PC on. It will get an address in the 10.0.0.4 - 10.0.0.15 range from the DHCP server and should let you talk to the modem.

Connect to http://10.0.0.2. (user admin / password epicrouter ).

Put your ISP username and password into the boxes and then save and reboot.

Now check, from the PC, if you can access the internet. If not you will need to configure the router using Advanced Settings on the same page.

Once the Router is connecting to the internet you can convert it to work with Smoothwall.

Configuring the Origo 8100 / 8400 ADSL modem to work with Smoothwall

Conect to http://10.0.0.2 again

Choose Advanced Setup

Choose Admin Privilege / Misc Configuration

Set PPP Half Bridge to Enabled

Submit (button at bottom of page)

Choose LAN

Set User Mode to Single User

Submit (button at bottom of page)

Choose Configuration / WAN

Select Pvc0 if not already selected

Set Encapsulation to PPPoA VC-Mux <- this is for most UK ISPs

Submit (button at bottom of page)

Choose Configuration / Save Settings / Reboot

Save & Reboot

Wait until Done appears.

Power off the modem, wait 10 seconds and power it back on.

The modem will now be working in half bridge mode. Once it has successfully authenticated to your ISP, it will pass your public IP address to Smoothwall's red interface via it's DHCP server.

Note that the modem's default management IP address is 10.0.0.2 with a netmask of 255.0.0.0, so if you want to talk to it through Smoothwall you need to ensure your green and orange networks do not use addresses that overlap this IP address or Smoothwall will not pass your management traffic to red and you will be unable to access the modem's web interface through your Smoothwall. This prevents you from using ANY network 10 addresses on green or orange. However the default for green is 192.168.1.1/255.255.255.0 so green will not be a problem.

Now would be a good time to change the admin password on the modem.

Configuring Smoothwall to work with the Origo 8100 / 8400 ADSL modem

Configure Smoothwall as Green and Red

Configure Smoothwall's red interface for DHCP

Connect any of the modem's ethernet ports to your Smoothwall's red interface using a straight-through cat5 cable. Smoothwall should then pick up the an address for its red nic by asking the modem using DHCP and will get the ISP allocated address. The modem effectively disappears and looks like your ISP.

You can check that everything is working correctly from the "about your smoothie" "advanced" screen which will show the nics and the routing.

If you have a problem then turn off the modem, reboot the smoothie then turn the modem on again. The DHCP lease given by the modem is only one minute, so if the line drops and the modem reconnects with a new IP address, smoothie will pick up the new address within a minute. This is a good thing as modems with longer leases need extra mods in Smoothwall to check they are still alive.

Using a browser on a PC your green network, enter the address of the modem's web interface (http://10.0.0.2) and check that you can still see it. This will allow you to configure and monitor the modem from green without any extra plugging and unplugging of cabling

If you were previously using Smoothwall in Green and Red (Modem/ISDN) mode then you will need to tell it that ppp is no longer being used and eth0 or eth1 has taken over or you will still get the Dial Status on the control screen and the traffic graphs for red will stop recording. This can be fixed by logging on to the Smoothwall box as root, trashing your 5th ppp settings file and switching to it.

echo -n > /var/Smoothwall/ppp/settings-5
ln -f /var/Smoothwall/ppp/settings-5 /var/Smoothwall/ppp/settings

Broadband Modem Monitoring in Smoothwall

Now your modem is working correctly and you can access it, you can get Smoothwall to monitor it.

First Download the mod from http://community.Smoothwall.org/forum/viewtopic.php?t=10235 SCP it onto your Smoothwall and unpack it using the tar command shown.

Next Download my Origo_8000.pm file and SCP it into /usr/lib/perl5/site_perl/SRK/BMM/Modem/DSLModem/

Test it by typing /var/Smoothwall/mods/bmm/test/test_modems.pl Origo_8000 10.0.0.2 80 admin <password> .

You should get a response like this

[root@Smoothwall DSLModem]# /var/Smoothwall/mods/bmm/test/test_modems.pl Origo_8000
Software Version: CX82xxx_4.1.0.21 + safecom.cn 10-07-04
Downstream S/N: 20.8 dB, Upstream S/N: 29.0 dB
Downstream Power Level: NaN dBmV, Upstream Power Level: 38 dBmV
Downstream Line Attenuation: 38.0 dB, Upstream Line Attenuation: 23.0 dB
Downstream Speed: 2272 kb/s, Upstream Speed: 288 kb/s
[root@Smoothwall DSLModem]#

Install the mod.

Using vi, edit /etc/bmm.conf to set it up for the right modem

model = Origo_8000

and the right password, if it is not the default

ui_pass = someotherpassword

and if you are a bit sad, the modem name

modem_name = Origo 8400 (half-bridge)

and you can even change the picture of the modem that appears by copying page_bmm.png (or your own version) over /home/httpd/html/ui/assets/3.6/img/pagetitles/page-bmm.png

After some time has passed you will get graphs like these

The initial improvement in the Signal/Noise ratio visible on the graph was done by swapping some existing ADSL filters on the other phone lines with some spare filters and watching the graphs. All filters are not created equal.

Half Bridge, ZIPB, DHCP Spoofing

The distinguishing feature of half-bridge is that your login details are entered on the modem and that the IP addresses provided to a DHCP connecting client are the ISP's provided IP addresses. The admin interface of the modem should still be available on another IP address.

+----------------+          +-------------------------------+         +---------------------+
| ISP            |          |          Modem                |         | Smoothie RED        |
|  86.133.117.15 |----------| <-Userid /Password            |---------| DHCP Client         |
|                |          | 86.113.117.14 / 86.133.117.15 |         | 86.113.117.14       |
|                |          | HALF-BRIDGE        + 10.0.0.2 |         |                     |
+----------------+          +-------------------------------+         +---------------------+ 

The alternatives are RFC 1483 bridge mode, but if the modem is in bridge mode you lose access to the webadmin interface with its line stats,

+----------------+          +-------------------------------+         +---------------------+
| ISP            |          |          Modem                |         |  Smoothie RED       |
| 86.133.117.15  |----------|                               |---------|  PPPoE              |
|                |          |          ????                 |         |  1.1.1.1            |
|                |          | RFC1483                       |         |  <-Userid /Password |
+----------------+          +-------------------------------+         +---------------------+

or using the router as a router, but if you use a router "out of the box" you get a double-NAT situation which can be a problem with port-forwarding.

+----------------+          +-------------------------------+         +---------------------+
| ISP            |          |          Modem                |         |  Smoothie RED       |
| 86.133.117.15  |----------| <-Userid /Password            |---------|  DHCP Client        |
|                |          | 86.113.117.14 /      10.0.0.2 |         |  10.0.0.14          |
|                |          | Router                        |         |                     |
+----------------+          +-------------------------------+         +---------------------+

Another explanation is available from here together with more about the way modems actually implement this and this thread is worth reading.

I need to think about the following !!

C:>tracert smoothwall.org
Tracing route to smoothwall.org [83.136.68.62]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  smoothwall [192.168.1.1]
  2     1 ms     1 ms     1 ms  10.0.0.2
  3    11 ms    10 ms    22 ms  esr15.kingston5.broadband.bt.net [217.47.66.146]
  4    11 ms    10 ms    11 ms  217.47.66.13
  5    12 ms    11 ms    10 ms  217.41.217.1
  6    41 ms    22 ms    14 ms  217.41.171.114
  7    11 ms    12 ms    11 ms  217.41.171.50
  8    12 ms    12 ms    62 ms  217.47.88.49
  9    69 ms    66 ms   138 ms  core2-pos5-2.kingston.ukcore.bt.net [62.6.40.70]
 10    13 ms    12 ms    12 ms  core2-pos7-5.ilford.ukcore.bt.net [62.6.204.246]

Smoothwall Routing:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
86.0.0.0        0.0.0.0         255.0.0.0       U     0      0        0 eth1
0.0.0.0         86.133.117.15   0.0.0.0         UG    0      0        0 eth1

Origo routing:
0.0.0.0         217.47.66.146   0.0.0.0               ppp1  
10.0.0.0        10.0.0.2        255.0.0.0             br0  
217.47.66.146   86.133.117.14   255.255.255.255       ppp1  

Other Modems / Routers that will work in half-bridge mode

Coming Soon / work in progress - a list of Modem / Routers that can be put into half-bridge / ZIPB mode and links to how-to.

Modem Instructions or hints OK
BT Voyager 205 http://corz.org/comms/hardware/router/router.tricks.php#zipb  
Solwise 130 page 163 of http://www.solwiseforum.co.uk/downloads/files/130quicksetup-versolwise.pdf (Globespan)  
Solwise 715 http://community.smoothwall.org/forum/viewtopic.php?p=24813&sid=1f85baa534f62caddbb6ba593546ee02 Yes
DSL-300G http://martybugs.net/smoothwall/dsl300g.cgi Yes
DSL-300+ http://martybugs.net/smoothwall/dsl300plus.cgi Yes
DSL-300T http://community.smoothwall.org/forum/viewtopic.php?t=10423 (updated firmware)  
DSL-302g http://community.smoothwall.org/forum/viewtopic.php?p=82167 Yes
Netcomm NB3 http://kb.netcomm.com.au/kb/redirfile.asp?id=201 (Globespan)  
Netcomm NB 1300 /Plus 4 Is an Origo8400 under another name. Different web interface.
http://kb.netcomm.com.au/kb/default.asp?id=772&Lang=1
 
Billion 5100 / 5102 http://community.smoothwall.org/forum/viewtopic.php?t=12260 Yes
ZyXEL Prestige 623 Set ZIPB  
Origo 8100/8400 on this page  
Solwise SAMR 4110/4114 on this page  
Conexant AMX-CA64E http://community.smoothwall.org/forum/viewtopic.php?t=10595
http://www.adslnation.com/downloads/Configuring%20HalfBridge%20Mode.pdf
 

The Safecom 4112 does NOT do half-bridge.

With thanks to mpot at martybugs.net for the original DSL-300 version which inspired this page and scottknight for the Broadband Modem Monitor mod.

Last updated 17th June 2006

home