This page provides information on configuring an Origo 8100 / 8400 ADSL modem router in half-bridge (also known as ZIPB, DHCP Spoofing, Transparent Bridging) mode with Smoothwall using an ISP that provides a single IP address whether static or dynamic. If you have arranged for your ISP to provide multiple fixed IP addresses you need to look elsewhere. The distinguishing feature of half-bridge is that your login details are entered on the modem and that the IP addresses provided to a DHCP connecting client are the ISP's provided IP addresses. The admin interface of the modem should still be available on another IP address.
|The Origo 8100 ADSL modem has a single 10/100Mbps auto-sensing duplex ethernet port for connectivity, as well as having a DHCP server, PPPoA and PPPoE clients, and a web interface for configuration and adminstration. The 8000 also has a single port but no power switch. The 8400 has 4 10/100Mbps ethernet ports on a built-in switch. The design of the cases has changed over time.|
|The Safecom SAMR-4110 ADSL modem has a single 10/100Mbps auto-sensing duplex ethernet port for connectivity, as well as having a DHCP server, PPPoA and PPPoE clients, and a web interface for configuration and adminstration. . The SAMR-4114 has 4 10/100Mbps ethernet ports on a built-in switch. Internally they are identical to the Origo modems.|
This is dealt with in the Origo forums and exact details depend on the firmware version the modem is running.
(If you are already using the Origo 8100 / 8400 to connect to the internet, then backup its settings using Neo's Backup Utility and ignore this lot.)
|Hard Reset the modem back to factory settings by inserting a pin in the hole at the back for 30 seconds, then remove it and wait 2 minutes, then power the modem off and on.|
The modem is now working as a NAT'ing router on http://10.0.0.2. The easiest way to talk to it is to plug a PC (set for DHCP) into any of the ports using a straight-through cable and power the PC on. It will get an address in the 10.0.0.4 - 10.0.0.15 range from the DHCP server and should let you talk to the modem.
Connect to http://10.0.0.2. (user admin / password epicrouter ).
|Put your ISP username and password into the boxes and then save and reboot.|
Now check, from the PC, if you can access the internet. If not you will need to configure the router using Advanced Settings on the same page.
Once the Router is connecting to the internet you can convert it to work with Smoothwall.
Conect to http://10.0.0.2 again
Choose Advanced Setup
Choose Admin Privilege / Misc Configuration
Set PPP Half Bridge to Enabled
Submit (button at bottom of page)
Set User Mode to Single User
Submit (button at bottom of page)
Choose Configuration / WAN
Select Pvc0 if not already selected
Set Encapsulation to PPPoA VC-Mux <- this is for most UK ISPs
Submit (button at bottom of page)
Choose Configuration / Save Settings / Reboot
Save & Reboot
Wait until Done appears.
Power off the modem, wait 10 seconds and power it back on.
The modem will now be working in half bridge mode. Once it has successfully authenticated to your ISP, it will pass your public IP address to Smoothwall's red interface via it's DHCP server.
Note that the modem's default management IP address is 10.0.0.2 with a netmask of 255.0.0.0, so if you want to talk to it through Smoothwall you need to ensure your green and orange networks do not use addresses that overlap this IP address or Smoothwall will not pass your management traffic to red and you will be unable to access the modem's web interface through your Smoothwall. This prevents you from using ANY network 10 addresses on green or orange. However the default for green is 192.168.1.1/255.255.255.0 so green will not be a problem.
Now would be a good time to change the admin password on the modem.
Configure Smoothwall as Green and Red
|Configure Smoothwall's red interface for DHCP|
Connect any of the modem's ethernet ports to your Smoothwall's red interface using a straight-through cat5 cable. Smoothwall should then pick up the an address for its red nic by asking the modem using DHCP and will get the ISP allocated address. The modem effectively disappears and looks like your ISP.
You can check that everything is working correctly from the "about your smoothie" "advanced" screen which will show the nics and the routing.
If you have a problem then turn off the modem, reboot the smoothie then turn the modem on again. The DHCP lease given by the modem is only one minute, so if the line drops and the modem reconnects with a new IP address, smoothie will pick up the new address within a minute. This is a good thing as modems with longer leases need extra mods in Smoothwall to check they are still alive.
Using a browser on a PC your green network, enter the address of the modem's web interface (http://10.0.0.2) and check that you can still see it. This will allow you to configure and monitor the modem from green without any extra plugging and unplugging of cabling
If you were previously using Smoothwall in Green and Red (Modem/ISDN) mode then you will need to tell it that ppp is no longer being used and eth0 or eth1 has taken over or you will still get the Dial Status on the control screen and the traffic graphs for red will stop recording. This can be fixed by logging on to the Smoothwall box as root, trashing your 5th ppp settings file and switching to it.
echo -n > /var/Smoothwall/ppp/settings-5
ln -f /var/Smoothwall/ppp/settings-5 /var/Smoothwall/ppp/settings
Now your modem is working correctly and you can access it, you can get Smoothwall to monitor it.
First Download the mod from http://community.Smoothwall.org/forum/viewtopic.php?t=10235 SCP it onto your Smoothwall and unpack it using the tar command shown.
Next Download my Origo_8000.pm file and SCP it into /usr/lib/perl5/site_perl/SRK/BMM/Modem/DSLModem/
Test it by typing /var/Smoothwall/mods/bmm/test/test_modems.pl Origo_8000 10.0.0.2 80 admin <password> .
You should get a response like this
Software Version: CX82xxx_220.127.116.11 + safecom.cn 10-07-04
Downstream S/N: 20.8 dB, Upstream S/N: 29.0 dB
Downstream Power Level: NaN dBmV, Upstream Power Level: 38 dBmV
Downstream Line Attenuation: 38.0 dB, Upstream Line Attenuation: 23.0 dB
Downstream Speed: 2272 kb/s, Upstream Speed: 288 kb/s
Install the mod.
Using vi, edit /etc/bmm.conf to set it up for the right modem
model = Origo_8000
and the right password, if it is not the default
ui_pass = someotherpassword
and if you are a bit sad, the modem name
modem_name = Origo 8400 (half-bridge)
and you can even change the picture of the modem that appears by copying page_bmm.png (or your own version) over /home/httpd/html/ui/assets/3.6/img/pagetitles/page-bmm.png
After some time has passed you will get graphs like these
The initial improvement in the Signal/Noise ratio visible on the graph was done by swapping some existing ADSL filters on the other phone lines with some spare filters and watching the graphs. All filters are not created equal.
The distinguishing feature of half-bridge is that your login details are entered on the modem and that the IP addresses provided to a DHCP connecting client are the ISP's provided IP addresses. The admin interface of the modem should still be available on another IP address.
+----------------+ +-------------------------------+ +---------------------+ | ISP | | Modem | | Smoothie RED | | 18.104.22.168 |----------| <-Userid /Password |---------| DHCP Client | | | | 22.214.171.124 / 126.96.36.199 | | 188.8.131.52 | | | | HALF-BRIDGE + 10.0.0.2 | | | +----------------+ +-------------------------------+ +---------------------+
The alternatives are RFC 1483 bridge mode, but if the modem is in bridge mode you lose access to the webadmin interface with its line stats,
+----------------+ +-------------------------------+ +---------------------+ | ISP | | Modem | | Smoothie RED | | 184.108.40.206 |----------| |---------| PPPoE | | | | ???? | | 220.127.116.11 | | | | RFC1483 | | <-Userid /Password | +----------------+ +-------------------------------+ +---------------------+
or using the router as a router, but if you use a router "out of the box" you get a double-NAT situation which can be a problem with port-forwarding.
+----------------+ +-------------------------------+ +---------------------+ | ISP | | Modem | | Smoothie RED | | 18.104.22.168 |----------| <-Userid /Password |---------| DHCP Client | | | | 22.214.171.124 / 10.0.0.2 | | 10.0.0.14 | | | | Router | | | +----------------+ +-------------------------------+ +---------------------+
Another explanation is available from here together with more about the way modems actually implement this and this thread is worth reading.
I need to think about the following !!
C:>tracert smoothwall.org Tracing route to smoothwall.org [126.96.36.199] over a maximum of 30 hops: 1 <1 ms <1 ms <1 ms smoothwall [192.168.1.1] 2 1 ms 1 ms 1 ms 10.0.0.2 3 11 ms 10 ms 22 ms esr15.kingston5.broadband.bt.net [188.8.131.52] 4 11 ms 10 ms 11 ms 184.108.40.206 5 12 ms 11 ms 10 ms 220.127.116.11 6 41 ms 22 ms 14 ms 18.104.22.168 7 11 ms 12 ms 11 ms 22.214.171.124 8 12 ms 12 ms 62 ms 126.96.36.199 9 69 ms 66 ms 138 ms core2-pos5-2.kingston.ukcore.bt.net [188.8.131.52] 10 13 ms 12 ms 12 ms core2-pos7-5.ilford.ukcore.bt.net [184.108.40.206] Smoothwall Routing: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 220.127.116.11 0.0.0.0 255.0.0.0 U 0 0 0 eth1 0.0.0.0 18.104.22.168 0.0.0.0 UG 0 0 0 eth1 Origo routing: 0.0.0.0 22.214.171.124 0.0.0.0 ppp1 10.0.0.0 10.0.0.2 255.0.0.0 br0 126.96.36.199 188.8.131.52 255.255.255.255 ppp1
Coming Soon / work in progress - a list of Modem / Routers that can be put into half-bridge / ZIPB mode and links to how-to.
|Modem||Instructions or hints||OK|
|BT Voyager 205||http://corz.org/comms/hardware/router/router.tricks.php#zipb|
|Solwise 130||page 163 of http://www.solwiseforum.co.uk/downloads/files/130quicksetup-versolwise.pdf (Globespan)|
|DSL-300T||http://community.smoothwall.org/forum/viewtopic.php?t=10423 (updated firmware)|
|Netcomm NB3||http://kb.netcomm.com.au/kb/redirfile.asp?id=201 (Globespan)|
|Netcomm NB 1300 /Plus 4||Is an Origo8400 under another name. Different web interface.
|Billion 5100 / 5102||http://community.smoothwall.org/forum/viewtopic.php?t=12260||Yes|
|ZyXEL Prestige 623||Set ZIPB|
|Origo 8100/8400||on this page|
|Solwise SAMR 4110/4114||on this page|
The Safecom 4112 does NOT do half-bridge.
With thanks to mpot at martybugs.net for the original DSL-300 version which inspired this page and scottknight for the Broadband Modem Monitor mod.
Last updated 17th June 2006