StarHub MaxInfinity Fiber Optic - Experience

[MarkChenTW]

current possible connecting your own router and for those interested in using their own router.
Note: 1 to 4 is from easiest to hardest which require some technical knowledge in configuring

"Starhub CSO way"
1. TP -> NC ONT (aka huawei ONT) -> DMZ to your own router (aka starhub way of defining "bridging" which is not true true bridging) -> any router you prefer
DV still can be on fiber

using Vlan + Vlan priority capable switch (example Mikrotik RB250GS)
2. TP -> NC ONT (aka huawei ONT) -> Vlan + Vlan priority capable switch -> any router you prefer
DV still can be on fiber, the huawei or dlink router connected to the vlan switch for voice service

using Asus N56/N66
3. TP -> NC ONT (aka huawei ONT) -> Asus N56/N66 using special configuration in the setting to enable VLAN, you will lose some lan port and may encounter some problem with getting wifi to work
DV no confirmation will work

using custom firmware (ddwrt/openwrt) or router with vlan+vlan priority function. Note: Not all router support high vlan ID, starhub use vlanid 1071/1075/1078 for internet, 1095 for DV, 1099 for the starhub huawei/dlink router. all with vlan priority 1.
4. TP -> NC ONT (aka huawei ONT) -> any router capable of running custom firmware (ddwrt/openwrt) with vlan and vlan priority support or router with built-in support for vlan + vlan priority.
DV still can be bridge to the starhub huawei/dlink router

lastly, pure direct ONT connection, after enabling direct to ONT, DV cannot be on fiber, to use DV, it can only be on starhub cable network (aka need a cable modem with Voice service port)
5. TP -> NC ONT (aka huawei ONT) -> any router you desire, no mac address need to provide to starhub, no special configuration needed

thought 5. is the easiest in tech related. since u don't have to do anything just that SH new to accept your request :x

 

[SExiao]

just stick to whatever you are using now then. This is too in-depth for you and definitely not for you to try out.

Totally Agreed ....Kekeke

 

[stilnox]

u are still mid reading :x

let me clarify.

1) in the case if they allow u a direct to ont. they do not need to know your router Mac id as they will simply remove the vlan Tagging and u can do that. a downtime of several hours is expected. after which unless there is a outage they will not perform any troubleshoot for u at all.

2) in the case if u use n56 and n66 to by pass. for my case I lost the ability to use some of my LAN port on my n56 and n66. SH will not help in this either.

yup.. am aware of this.. thanks mark..

 

[stilnox]

No real issue as I do not have DV on the router... using the old Moto modem for that....

Edited.... NBCB... call the SH tech... tell me cannot use other router..... if want, must connect own router to their ** huawei router (believe you guys call it bypass)... wtf for.....

So I dont know how you guys manage to do it...

think i have a history with SH.. They dun really dare take my call.. if i talk to CSO A, 1-2 weeks down the road, i ask them back seldom can talk to same person.. really depends on the CSO's CS good or not.

 

[chaicka]

Hi All,

I have a quick clarification to make, from the netwrok diag below assuming that I want the Dlink 655 router to do the DHCP IP assignments, are the assignment of my internal network IPs to the individual PCs correct ?i.e. all the PCs should be in the 192.168.0.xxx range. Should the gateway and DNS be pointing to the Dlink 655 (192.168.0.1) router or the RG (192.168.1.1)? see green circle.

Also, PCs 1,2,3 and NAS IP should be assigned by the 655 (192.168.0.xxx) or the RG (192.168.1.xxx) ? I got confused here... I want PC 1,2,3,NAS to see the rest of the network as well. How do I do that?

Also, by setting DMZ at the RG would the network be vulnerable to attacks, if I do not set the DMZ does that mean my internal PCs cannot access the internet?

Many thanks.

What a mess and inefficiency in switching and routing.

 

[SExiao]

think i have a history with SH.. They dun really dare take my call.. if i talk to CSO A, 1-2 weeks down the road, i ask them back seldom can talk to same person.. really depends on the CSO's CS good or not.

yap.... like last time talk to 2 CSO over phone and 2 CSO at the counter.... imagine all gibe me diff answer with the sam e query...

 

[Gribber]

yap.... like last time talk to 2 CSO over phone and 2 CSO at the counter.... imagine all gibe me diff answer with the sam e query...

same here ma. Different people, different perspective and might churn different answer.

Some people agree to what lightning is doing some is hardcore not.
well that's beside the point.


The point i'm trying to say is.. everyone is different

 

[pIsangpIsang]

liberarted my connection from huawei crap
finally can utilize my pfsense back to the max. RTT to gateway seems not that accurate though

 

[AT]

I admit there are inefficiencies in the diagram. With the existing hardware I have that's the best I could come up with without having to purchase any new hardware.

Perhaps you can help to point out the "bottlenecks" and what I could invest in to make it as efficient as possible, let's say with a budget of say about $200? possible?

I have 10 PCs, 2 Macs, 1PS3, 1XBOX, NAS

Appreciate your inputs pls.

What a mess and inefficiency in switching and routing.

 

[epigram]

to my untrained eye, one obvious de-clutter at no cost is to connect the living room wall jack to port 2 of your 8 port router and get rid of the redundant 5 port router.

the next thing would be to get a 16 port router for the mbr.

 

[SExiao]

same here ma. Different people, different perspective and might churn different answer.

Some people agree to what lightning is doing some is hardcore not.
well that's beside the point.


The point i'm trying to say is.. everyone is different

But if it is about company policy, then cannot be different what?
E.g 2weeks left to contract, 1say no, 1say yes, but top up, 1say no. ..... problem ... Kekeke. .... can recontract.

 

[chaicka]

I admit there are inefficiencies in the diagram. With the existing hardware I have that's the best I could come up with without having to purchase any new hardware.

Perhaps you can help to point out the "bottlenecks" and what I could invest in to make it as efficient as possible, let's say with a budget of say about $200? possible?

I have 10 PCs, 2 Macs, 1PS3, 1XBOX, NAS

Appreciate your inputs pls.

As the information made available to me is only of those posted, I will point out based just on that.

1. I am unable to see the logic behind the segmentation of your network. The segmentation appears not designed out of concerns on security but appears to be based on using existing hardware available.

2. I am unable to determine if there is concerns on shaping of traffic within LAN.

3. I will assume the objectives are:
a. Ease of Use for entire household
b. Ease of Manage (whoever manage the infra and controls the access/etc)
c. Least Changes to Implement

Here are the bottlenecks and problematic areas:
1. D-Link DVG-N5402SP with current firmware B046 has 2 major bugs - DOS Protection and DMZ which affects connectivity behaviours (read the thread I posted about SH throttles non-BT)
2. D-Link DIR-655 as a router (despite connected to primary router as DMZ'ed)
3. 3 levels of interconnectivity of Switches/Router in MBR and Living Room
4. Current setup may not fully utilise the 100mbps fiber plan to its max, and may potentially hinders further speed upgrades (200mbps or higher plans).

Suggestions:
1. Get a 16-ports Gigabit Switch (for future proof and also existing performance boost even if it's slight boost. No need branded, some decent brands are under $200) for the MBR
2. Ditch the DIR-655, 3Com 5 port and 8 port switches in the MBR
3. Shift the 3Com 5 or 8 port switch to Living Room

 

[AT]

Hi

Thanks for your suggestions

1. You are right about using existing hardware for my home network

2. Everyone in the LAN has the same priority/bandwidth/access, so there was no consideration in shaping traffic

3 (a),(b) and (c)-- your observation is spot on.


On the bottlenecks:

1. I have read your thread on that, but how else do I connect up the network with disabling DMZ n DOS protection. I based the current set up on post 1-3 on this thread i.e. using DMZ etc, that's why I had a query on "attacks" from the outside into my LAN.

2. Dlink 655 was chosen to be my main router, because it all already setup with my virtual servers, port forwarding configurations etc etc. Also it has good WiFi coverage for my home config. So I am hoping to save some time/work here...

3. yeah I know... I guess I need the 16port GigaSwitch (TPLink good choice?)

4. Noted with thanks

On your suggestions:

1. Duly noted.

2. Noted on the 8 and 5 port switches. But the Dlink 655 in the MBR really give good WiFi coverage (for my iPhone, tablets etc)

3. Noted

I guess in the end of the day, if the D-Link DVG-N5402SP gives good WiFi coverage when place NOT in the MBR, i.e. place in the PC Cove/living room then the only adjustment I need would be to purchase a 16 port switch and ditch the Dlink 655.

Thanks again!

As the information made available to me is only of those posted, I will point out based just on that.

1. I am unable to see the logic behind the segmentation of your network. The segmentation appears not designed out of concerns on security but appears to be based on using existing hardware available.

2. I am unable to determine if there is concerns on shaping of traffic within LAN.

3. I will assume the objectives are:
a. Ease of Use for entire household
b. Ease of Manage (whoever manage the infra and controls the access/etc)
c. Least Changes to Implement

Here are the bottlenecks and problematic areas:
1. D-Link DVG-N5402SP with current firmware B046 has 2 major bugs - DOS Protection and DMZ which affects connectivity behaviours (read the thread I posted about SH throttles non-BT)
2. D-Link DIR-655 as a router (despite connected to primary router as DMZ'ed)
3. 3 levels of interconnectivity of Switches/Router in MBR and Living Room
4. Current setup may not fully utilise the 100mbps fiber plan to its max, and may potentially hinders further speed upgrades (200mbps or higher plans).

Suggestions:
1. Get a 16-ports Gigabit Switch (for future proof and also existing performance boost even if it's slight boost. No need branded, some decent brands are under $200) for the MBR
2. Ditch the DIR-655, 3Com 5 port and 8 port switches in the MBR
3. Shift the 3Com 5 or 8 port switch to Living Room

 

[AT]

Thank you for your inputs

You are right I will need a new 16 port switch (haven't seen any 16-port ROUTER).

thanks

to my untrained eye, one obvious de-clutter at no cost is to connect the living room wall jack to port 2 of your 8 port router and get rid of the redundant 5 port router.

the next thing would be to get a 16 port router for the mbr.

 

[supersteve3d]

need some help.

my ftp works on port 21.
but when i forward to other port, it doesn't work.

anyone have any idea ?

I have the opposite problem. Since using fibre / d-link DVG-N5402SP , I am unable to get port 21 to forward to my router DIR-655. I tried bridging just to get around the silly port 21 bug in the DVG. Anyone can explain how to get port 21 open? FTP works fine with other ports like 2100.

 

[epigram]

Thank you for your inputs

You are right I will need a new 16 port switch (haven't seen any 16-port ROUTER).

thanks

sorry. was researching dual/multi wan routers. it should be switch.
there are 16 port routers - e.g. cisco rv016

 

[randomforumer]

hey guys,
is it possible to use the airport extreme to connect to the hg256s ??
or if anyone tried doing that ?
thanks.

 

[Gribber]

I have the opposite problem. Since using fibre / d-link DVG-N5402SP , I am unable to get port 21 to forward to my router DIR-655. I tried bridging just to get around the silly port 21 bug in the DVG. Anyone can explain how to get port 21 open? FTP works fine with other ports like 2100.

google and you will know why. been discussed many times.

hey guys,
is it possible to use the airport extreme to connect to the hg256s ??
or if anyone tried doing that ?
thanks.

yes possible. but sorry I don't like apple products so will not help you further than that. most apple users can't be bothered helping other apple lovers which is kinda ironic.

you probably will get better answers at the apple clinic forum.

 

[Gribber]

Thank you for your inputs

You are right I will need a new 16 port switch (haven't seen any 16-port ROUTER).

thanks

there is though.

 

[strikeforcez]

Sorry to hijack this thread but i just bought an Asus N66u Router just now, I'mm allowed to use own router and i'm on the 200Mbps plan which is the Maxinfinity platinum but currently i only getting around 109mbps on speedtest is there any setting that need to configure ? Thanks !