Singtel internet with pfSense

[mrt4c_18]

Hello Members of the community,

I am trying out pfsense with my home network. The issue I have now is I am getting the "wrong" ip address from singtel. When i connect singtel's router the public ip address that i got was 115.X.X.X or something like that. The same goes when i tried with asus router. When i tried with pfsense, the ip address I got was 42.x.x.x

Is there something I'm missing?

Here are my interfaces: em0,em1,em2,em3,re0

WAN: VLAN10 on em0
LAN: re0

The thing with this ip address is that when I run a speedtest to singtel server, I get crazy fast speed (>800Mbps) but when i try a different server I get stupidly low speed like <1Mbps .
Servers I've tried includes: viewquest, newmedia express, starhub.

I hope somebody can help me with this. Thanks in advance.

 

[dryteletubby]

Try putting the Asus Mac address on the pfsense wan?

As for speed test it seems Singtel deliberately slowed down 3rd party servers.

 

[Singtel]

Hello Members of the community,

I am trying out pfsense with my home network. The issue I have now is I am getting the "wrong" ip address from singtel. When i connect singtel's router the public ip address that i got was 115.X.X.X or something like that. The same goes when i tried with asus router. When i tried with pfsense, the ip address I got was 42.x.x.x

Is there something I'm missing?

Here are my interfaces: em0,em1,em2,em3,re0

WAN: VLAN10 on em0
LAN: re0

The thing with this ip address is that when I run a speedtest to singtel server, I get crazy fast speed (>800Mbps) but when i try a different server I get stupidly low speed like <1Mbps .
Servers I've tried includes: viewquest, newmedia express, starhub.

I hope somebody can help me with this. Thanks in advance.

Hi mrt4c_18,

115.x.x.x. and 42.x.x.x are both Internet IP issued from broadband DHCP server. Speed test to different locations may get dfferent results.

Can you kindly share the setup of your router and which speed test site you go to?

Thanks.

 

[mrt4c_18]

Try putting the Asus Mac address on the pfsense wan?

As for speed test it seems Singtel deliberately slowed down 3rd party servers.

Hi, Ive tried spoofing both asus router and singtel aztech router. Both didn't do anything. I still got the same ip address.

 

[mrt4c_18]

Hi mrt4c_18,

115.x.x.x. and 42.x.x.x are both Internet IP issued from broadband DHCP server. Speed test to different locations may get dfferent results.

Can you kindly share the setup of your router and which speed test site you go to?

Thanks.

Hi,
If the ip addresses are valid, then why am i getting such weird speeds from speedtest? Im paying for 300mbps but now im getting over 800mbps. I have never gotten such speeds. The most i've got was 350. This can't be because im using pfsense right? That's just not scientific.

Im using speedtest.net

My current setup:
ont -> pfsense
Thats it.

 

[mrt4c_18]

This is what I've accomplished so far. I've connected miotv and wan to pfsense.
em0: WAN
em1: miotv

This is my pfsense config:
WAN: vlan10 on em0
LAN: re0
miotv_wan: vlan20 on em0
miotv_lan: em1
miotv_bridge: bridged(miotv_wan & miotv_lan)

I followed this guide to configure miotv
codesandbolts.com/pfsense-singtel-fibre-guide-part-2/

Right now the ip address is still 42.x.x.x but if it doesn't give me any issues then it doesn't matter what ip address i get.

But a new issue has risen. miotv does not seem to work. It works for 30 seconds then it says "singtel tv service is currently experiencing a system error."

 

[dryteletubby]

Credits to miloaisdino for the original post I copied below


Part of the reason why singtel force us to use onr now is that certain "services" on the mio stb do not work solely on vlan20 anymore, eg stingray music, netflix and probably many more to come. What the singtel provided ap does (ont days) is to assign a special address to your mio stb (typically 192.168.1.196) and static route all multicast, igmp and dns traffic destined for vlan20 while allowing internet traffic to enter vlan10 (netflix), all while being natted into the same subnet as your other devices (for the remote control feature of the singtel tv go app). 3rd party routers simply mapped lan ports to vlan20 on the wan trunk, causing these value added services not to work as mio stbs were assigned 'public' ips from singtel. So singtel came up with a sneaky solution -- the onr..

 

[mrt4c_18]

Credits to miloaisdino for the original post I copied below


Part of the reason why singtel force us to use onr now is that certain "services" on the mio stb do not work solely on vlan20 anymore, eg stingray music, netflix and probably many more to come. What the singtel provided ap does (ont days) is to assign a special address to your mio stb (typically 192.168.1.196) and static route all multicast, igmp and dns traffic destined for vlan20 while allowing internet traffic to enter vlan10 (netflix), all while being natted into the same subnet as your other devices (for the remote control feature of the singtel tv go app). 3rd party routers simply mapped lan ports to vlan20 on the wan trunk, causing these value added services not to work as mio stbs were assigned 'public' ips from singtel. So singtel came up with a sneaky solution -- the onr..

Hi,
Ok i understand that singtel is going towards a plug-n-play setup but that is not applicable to me as im not using their onr. Im still using the ont. mioTv is working with my asus setup (ont -> asus ->miotv) but it is not working with my pfsense setup.

The reason why i went with a pfsense setup was because i wanted a router that can handle a vpn connection at 300mbps. My pfsense router has a quad core processor and aes-ni therefore it can achieve higher speeds than my asus router.

 

[dryteletubby]

Hi,
Ok i understand that singtel is going towards a plug-n-play setup but that is not applicable to me as im not using their onr. Im still using the ont. mioTv is working with my asus setup (ont -> asus ->miotv) but it is not working with my pfsense setup.

The reason why i went with a pfsense setup was because i wanted a router that can handle a vpn connection at 300mbps. My pfsense router has a quad core processor and aes-ni therefore it can achieve higher speeds than my asus router.

There are some poeple on other thread claiming miotv netflix ect won't work with their Asus routers.

I cant answer what's causing the miotv to not work on pfsense but openVPN is single threaded and currently no CPU seems to be able to do gigabit via openVPN. Maybe try wireguard? It's claimed to be able to route at gigabit running on a rock64 (raspberry pi like board)

 

[mrt4c_18]

nordvpn hasn't implemented wireguard into their vpn service. So i can't try it out.

I guess for now ill stick to using the asus router as the main router. I was think of using the pfsense as a vpn router where devices can connect to it and go through the vpn without a native app. I don't know if this will work. ont -> asus(main router) -> pfsense(vpn client) -> xbox. I see how it goes tomorrow.

 

[dryteletubby]

I guess for now ill stick to using the asus router as the main router. I was think of using the pfsense as a vpn router where devices can connect to it and go through the vpn without a native app. I don't know if this will work. ont -> asus(main router) -> pfsense(vpn client) -> xbox. I see how it goes tomorrow.

you can use the PC originally for pfsense as a VPN server. You don't have to specifically run pfsense, any linux distribution will be able to be configured as a openVPN server.

also have you fully tested your asus router with the services from miotv?

I think singtel just recently added some "features" that further complicate their setup. resulting in many 3rd party routers like asus default singtel preset not to work with miotv netflix app etc

 

[mrt4c_18]

you can use the PC originally for pfsense as a VPN server. You don't have to specifically run pfsense, any linux distribution will be able to be configured as a openVPN server.

also have you fully tested your asus router with the services from miotv?

I think singtel just recently added some "features" that further complicate their setup. resulting in many 3rd party routers like asus default singtel preset not to work with miotv netflix app etc

Thats true. I don't have to use pfsense. I dont think pivpn would work. I have a nordvpn account and i was thinking that pfsense would connect to nordvpn and other devices would connect to pfsense to use the vpn connection.

Ive test my asus router with miotv. Its working flawlessly. Not lagging or anything like that. Don't really know why its not working with pfsense.

 

[dryteletubby]

Thats true. I don't have to use pfsense. I dont think pivpn would work. I have a nordvpn account and i was thinking that pfsense would connect to nordvpn and other devices would connect to pfsense to use the vpn connection.

Ive test my asus router with miotv. Its working flawlessly. Not lagging or anything like that. Don't really know why its not working with pfsense.

I misread your post. I thought you were going to connect back to your own network using openVPN.

Have you tried the other apps like netflix, music?
I think the default preset for Asus only covers just internet and basic miotv usage

Unless you want to figure out all the complexities of Singtel network you may want to leave it as is.

 

[mrt4c_18]

I misread your post. I thought you were going to connect back to your own network using openVPN.

Have you tried the other apps like netflix, music?
I think the default preset for Asus only covers just internet and basic miotv usage

Unless you want to figure out all the complexities of Singtel network you may want to leave it as is.

I've tried youtube and netflix. All seems to work fine. Still getting weird results from speedtest. But if nothing is wrong then i guess theres no problem.

Im still searching for a way to share my vpn connection without having double NAT.

I thank everyone for their response.

 

[xiaofan]

Interestingly I have the same issue.

From pfSense for new user thread here.
https://forums.hardwarezone.com.sg/...-4/starting-pfsense-new-users-6390714-12.html

I am getting a bit impatient today so I just use the pfSense as the main router and then use the Singtel Mesh Router and Asus RT-AX82U as the AP.

As I am a Singtel ONT user, I need to set up VLAN for Singtel Internet and Singtel TV. There is no issue with Internet, however, Singtel TV is not working. Actually it will work for like 30 seconds and then it will prompt error screen.

Guide: the following guide is supposed to work.
https://jefferytay.medium.com/adven...1-setting-up-internet-and-mio-tv-8474af46edcc

The above guide matches the previous success report here:
https://forums.hardwarezone.com.sg/...help-needed-pfsense-router-miotv-5432928.html

My error message is simiar to the following report.
https://forums.hardwarezone.com.sg/...linic-4/singtel-internet-pfsense-5830003.html

Basically Singtel TV Box does not get the private IP address from Singtel side.

Now need to start to troubleshoot. Luckily my Singtel TV box is not mission critical as the kids have migrated to Youtube. So I got time to trial and error.

I have set up vlan as per the guide.

On the WAN side, igb0.20 (VLAN ID 20, priority 4) is for SingTel TV VLAN. Igb0.10 (VLAN ID 10, priority 0) is for Internet.

On the LAN side, VLAN for SingTel TV is with igb3.20 (VLAN ID 20, priority 4). Then I followed the guide to create a bridge0 which covers igb0.20 (TV WAN VLAN), igb3.20 (TV LAN VLAN) and igb3. igb3 is needed as per the guide and successful report.

Internet is through bridge2 (igb1 and igb2).

Firewall rules are set.
1) allow all for the internet LAN bridge2. (Nothing for Internet WAN).
2) allow all for the SingTel TV bridge0.

 

[xiaofan]

Take note the one from miloasidino is a bit different.

Yes it is more difficult to get extra function like Netflix, Stingray music and remore paring with 3rd party routers, but there is no issue with plain Singtel TV with 3rd party routers.

https://forums.hardwarezone.com.sg/...clinic-4/singtel-onr-ap-issues-5778791-4.html

Part of the reason why singtel force us to use onr now is that certain "services" on the mio stb do not work solely on vlan20 anymore, eg stingray music, netflix and probably many more to come. What the singtel provided ap does (ont days) is to assign a special address to your mio stb (typically 192.168.1.196) and static route all multicast, igmp and dns traffic destined for vlan20 while allowing internet traffic to enter vlan10 (netflix), all while being natted into the same subnet as your other devices (for the remote control feature of the singtel tv go app). 3rd party routers simply mapped lan ports to vlan20 on the wan trunk, causing these value added services not to work as mio stbs were assigned 'public' ips from singtel. So singtel came up with a sneaky solution -- the onr..

 

[mrt4c_18]

Hi xiaofan,
Glad to see someone trying out pfsense with Singtel fibre. I've actually gave up on this project years ago. Couldn't figure out the miotv issue so i just settled with using an asus router. I do hope to tackle this project in the future though. Please do update me if you manage to get your setup working. Thanks in advance and all the best! &#55357;&#56833;

 

[xiaofan]

Other than Singtel TV, it actually works fine with the Celeron J4105 based mini PC (8GB RAM and 256GB SSD).

Wired speedtest result is the same as the wireless router (Asus RT-AX82U): Singtel Test server, an Acer Core i5-8250U laptop with Ugreen Gigabit Ethernet adapter.

 

[xiaofan]

Previously my Asus RT-AX82U's built-in iperf3 server can not run above 400Mbps. Now at least I can run iperf3 with good speed.

Wired speed: Ugreen USB3 gigabit Ethernet adapter
c:\work\iperf3\iperf3.9_64>iperf3 -c 192.168.55.1
Connecting to host 192.168.55.1, port 5201
[  5] local 192.168.55.131 port 9699 connected to 192.168.55.1 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec  94.6 MBytes   793 Mbits/sec
[  5]   1.00-2.00   sec   109 MBytes   913 Mbits/sec
[  5]   2.00-3.00   sec   108 MBytes   904 Mbits/sec
[  5]   3.00-4.00   sec   108 MBytes   905 Mbits/sec
[  5]   4.00-5.00   sec   110 MBytes   922 Mbits/sec
[  5]   5.00-6.00   sec   108 MBytes   904 Mbits/sec
[  5]   6.00-7.00   sec   108 MBytes   906 Mbits/sec
[  5]   7.00-8.00   sec   108 MBytes   904 Mbits/sec
[  5]   8.00-9.00   sec   108 MBytes   904 Mbits/sec
[  5]   9.00-10.00  sec   108 MBytes   903 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.00  sec  1.04 GBytes   896 Mbits/sec                  sender
[  5]   0.00-10.02  sec  1.04 GBytes   892 Mbits/sec                  receiver

iperf Done.

Wireless speed: Intel AX200 based cheap adapter
c:\work\iperf3\iperf3.9_64>iperf3 -c 192.168.55.1
Connecting to host 192.168.55.1, port 5201
[  5] local 192.168.55.118 port 12256 connected to 192.168.55.1 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec  37.9 MBytes   317 Mbits/sec
[  5]   1.00-2.00   sec  78.0 MBytes   655 Mbits/sec
[  5]   2.00-3.00   sec  83.9 MBytes   703 Mbits/sec
[  5]   3.00-4.00   sec  94.0 MBytes   788 Mbits/sec
[  5]   4.00-5.00   sec  92.0 MBytes   769 Mbits/sec
[  5]   5.00-6.00   sec  86.9 MBytes   729 Mbits/sec
[  5]   6.00-7.01   sec  80.5 MBytes   674 Mbits/sec
[  5]   7.01-8.00   sec  83.2 MBytes   701 Mbits/sec
[  5]   8.00-9.00   sec  72.1 MBytes   606 Mbits/sec
[  5]   9.00-10.00  sec  74.9 MBytes   627 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.00  sec   783 MBytes   657 Mbits/sec                  sender
[  5]   0.00-10.07  sec   782 MBytes   652 Mbits/sec                  receiver

iperf Done.

 

[TanKianW]

Hi xiaofan,
Glad to see someone trying out pfsense with Singtel fibre. I've actually gave up on this project years ago. Couldn't figure out the miotv issue so i just settled with using an asus router. I do hope to tackle this project in the future though. Please do update me if you manage to get your setup working. Thanks in advance and all the best! ******************

I am using Singtel fibre with my pfsense firewall on their Huawei ONR. My miotv connecting directly to the ONR.

Only difference. My ONR is bridged.