Using Router behind CGNAT, behind ONR (Double NAT), ONR bridging, ONR replacement with ONU or PON Stick

[prince_fan]

Yes for M1.

Singtel ONT (only for legacy 500Mbps/1Gbps plans) --> you can use your own router as long as it supports Singtel VLAN

Singtel ONR (unbridged) --> you have to set up your wireless router in AP mode. Or you have to live with Double NAT if you want to use your own router in router mode.

thanks for the reply, after researching seems the benefit of getting rid of ONT is not significant comparing to the trouble, good that M1 is still using ONT, i will get a good router to future proof for 10G home network while majority of the device at home is prolly only on 2.5G. is BE86/BE88 from Asus a good choice?

 

[xiaofan]

thanks for the reply, after researching seems the benefit of getting rid of ONT is not significant comparing to the trouble, good that M1 is still using ONT, i will get a good router to future proof for 10G home network while majority of the device at home is prolly only on 2.5G. is BE86/BE88 from Asus a good choice?

RT-BE88U is a good choice.

RT-BE86U is not a good choice as it has only single 10G port. It also has only 1GB RAM compared to 2GB RAM of RT-BE88U.

If you do not plan to have 5Gbe/10Gbe wired device, then RT-BE86U can still be used for 10Gbps plan, but I think it is not worth the saving to put yourself into such limitations.

 

[xiaofan]

Interestingly Nokia calls an ONR as ONT.

This is Nokia's latest WiFi 7 "ONT". It is actually an ONR.
https://www.nokia.com/networks/fixed-networks/ont-xs-2437x-b/

Nokia ONT
XS-2437X-B
XGS-PON speed to the home
Wi-Fi 7 hyper-speed in the home

Overview
The true Wi-Fi 7 tri-band fiber gateway (ONT)
XGS-PON speed to the home (10 Gbps symmetrical)
Hyper-speed in the home (1x10 and 3x1 Gbps LAN ports and Wi-Fi capacity of up to 19 Gbps)
Tri-band: leverage the 2.4, 5 and 6 GHz bands with 4x4 MIMO each
Support for multi-link operation (MLO)
Extend coverage with up to five Beacons
Corteca-powered mesh creates a seamless Wi-Fi 7 network throughout the home
Managed through TR-369/USP
Simple, app-based setup and management.

 

[xiaofan]

Nokia XS-2426X-A (as well as the above XS-2437X-B) ONR is able to mesh with Nokia Beacons.

Starhub has only issued the lowest end Nokia Beacon 1 (AC1200, very lousy) and Beacon 2 (AX1800) for the Fibre internet service.

Actually Nokia has many higher end Nokia Beacon models, for example, Beacon 6/10/19/24.
https://www.nokia.com/networks/fixed-networks/home-wi-fi/

Let's see if Starhub will change to WiFi 7 ONR and offer high end WiFi 7 Beacon 19 as mesh node in the future.

Examples:
1) Still low end but better than Nokia Beacon 1/2: Nokia Beacon 3.1 AX3000
https://www.nokia.com/networks/fixed-networks/home-wi-fi/wifi-beacon-3-1/

2) Mid-range: Nokia Beacon 6, AX4200
https://www.nokia.com/networks/fixed-networks/home-wi-fi/wifi-beacon-6/

3) Mid-range: Nokia Beacon G6, AX6000
https://www.nokia.com/networks/fixed-networks/home-wi-fi/wifi-beacon-g6/

2.5 Gbps WAN port
2.5 Gbps LAN port
4x4 MIMO on 2.4 GHz
4x4 MIMO on 5 GHz
Supporting 160 MHz channels
PHY rate of AX6000

3) High end, 10G capable: Nokia Beacon 19: WiFi 7 triband BE19000

10 Gbps WAN port
1x10 Gbps and 2x1 Gbps LAN ports
Tri-band with 4x4 MIMO on each band
Higher throughput (4K QAM, 320MHz channel width, MLO)
Lower latency (MLO, tri-band radios to separate backhaul traffic from fronthaul to client devices)
PHY rate of BE19000

4) Highest end, 10G capable, Nokia Beacon 24: WiFi 7 quad-band BE24000

10 Gbps WAN port
1x10 Gbps and 2x2.5 Gbps LAN ports
Quad-band with 4x4 MIMO on each band
Higher throughput (4K QAM, 320MHz channel width, MLO)
Lower latency (MLO, quad-band radios to separate backhaul traffic from fronthaul to client devices)
PHY rate of BE24000

 

[xiaofan]

Detailed guide for Singtel/WC GPON ONR replacement from the WC thread, using VSOL V2802RH.
https://forums.hardwarezone.com.sg/threads/whizcomms-new-fibre-broadband-provider.5494964/page-138

Guide for For VSOL V2802RH.

Do a hard reset and enter the login from the back sticker of the ONR. Save ONR Mac address, need later.

Note FTTH ID and SN.

Note VLAN

Note highlighted data



Huawei

Setup > GPON Settings
LOID: Put your account number(billing email)
LOID Password: Don't care
PLOAM Password: FTTH ID from the ONR
OMCI OLT Mode: Huawei OLT Mode

Setup > OMCI Information
OMCI Vendor ID: HWTC
OMCI software version 1: V3R017C00S100
OMCI software version 2: V3R017C00S100
Traffic Management option: 2 (Dont set this here, there is a bug)
OMCC version: 0x80 (Try others if you get bad speed)
CWMP Product Class: HGU
HW version: 714.E


Nokia(I do not have this)
Setup > GPON Settings
OMCI OLT Mode: Customized OLT Mode

Setup > OMCI Information
OMCI Vendor ID: ALCL
OMCI software version 1: 3FE49025JJII03
OMCI software version 2: 3FE49025JJII03
Traffic Management option: 2
OMCC version: 0x80
CWMP Product Class: G-2425G-A
HW version: 3FE48299BFAA


Firewall > ACL
Add rule
Direction Select: LAN
IP Address: 0.0.0.0
Services Allowed: Tick


telnet 192.168.1.1:23
Same login with webui

If you still don't know your VLAN

Omcicli mib get 84

Flash set GPON_SN HWTCXXXXXXXX
Flash set ELAN_MAC_ADDR (See back of ONR)
Flash set VALIDATE_CODE_SWITCH 0
Cfgmib set OMCI_TM_OPT 2
Cfgmib save
restart

Log back into webui

Setup > WAN > WAN
Channel mode: Bridge

VLAN
(Can try both disable and enable, cause we used Huawei OLT Mode, the vlan is already in the profile. If you get alert that vlan is reserved, just use "10,". )

VLAN: Enable
VLAN ID(1-4095): 10,
VLAN Cos(0-7): 0
Application Mode: TR069_INTERNET
DNS: Enable (Better to set custom dns in router)
LAN: Tick LAN2
<Add>


Maintenance > reboot
Check ONU Status: O5 = success
Check wifirouter/softrouter for dhcp ip address

Speedtest
If you upload speed sux, you may need to try changing OMCC version.
Telnet

Cfgmib set OMCC_VER 132
Cfgmib save
restart

Hexadecimal (0x)	Decimal	ITU-T Version
80	128	G.984.4 (June 2004)
81	129	G.984.4 Amd.1 (June 2005)
82	130	G.984.4 Amd.2 (March 2006)
83	131	G.984.4 Amd.3 (December 2006)
84	132	G.984.4 (February 2008)
85	133	G.984.4 2009 Amd.1 (June 2009)
86	134	G.984.4 2009 Amd.2 (Basic message set, no extended message support)
96	150	G.984.4 2009 Amd.2 (with extended message set support)
A0	160	G.988 (2010), basic message set only
A1	161	G.988 Amd.1 (2011), basic message set only
B0	176	G.988 (2010), entry-level and extended message support
B1	177	G.988 Amd.1 (2011), entry-level and extended message support

 

[cyberet]

Successful story from the WC thread.

Reference for the Nokia G240 GPON ONR.
1) Configure the GPON ONR in ONT mode.
https://forums.hardwarezone.com.sg/...band-provider.5494964/page-115#post-153190390



2) Configure the GPON ONR in another mode where he can get two IPv4 addresses.
https://forums.hardwarezone.com.sg/...band-provider.5494964/page-115#post-153223908

it seems that the Connection Mode option is removed. No longer able to bridge.

 

[xiaofan]

it seems that the Connection Mode option is removed. No longer able to bridge.

Are you able to share the screenshot? Thanks.
Please also share the FW version, thanks.

There is also a recent report that the user could not log in with the known super-admin password for Nokia G-240 GPON ONR.

https://forums.hardwarezone.com.sg/...band-provider.5494964/page-115#post-153190390

Good News, I manage to bridge the Nokia G-240G-E. We should do the bridge in WAN Section like below:

Once we setup the brigde in WAN, the bridge in LAN is missing.

Now the other port does not able to connect to internet except port 1.
Next step is to try out dual bridge port to AX86U in dual WAN load balance,
but now i don't have any device to see the max speed.

Yeah, I manage to make the Dual WAN work by changing the another WAN2 Mac address to other than WAN1. The Nokia must reboot in oder to get both WAN detect public IP(it's take some time for it to get IP).

 

[xiaofan]

From the VQ thread: why BPI-R4 does not work with Huawei OptiXstar S800E XGS-PON SFP+ ONU Stick.
https://forums.hardwarezone.com.sg/...dband-official-thread-part-6.6473287/page-111

I believe there is no successful report of using other XGS-PON ONU to replace the Huawei XGS-PON ONU stick for VQ. No point as well since S$99 top-up is a very reasonable price to pay for this use case.

BTW, there is also no successful report of using other XGS-PON ONU to replace the ONR used by Singtel/WC or the ONR used by Starhub. On the other hand, there are quite some successful stories of using GPON ONU to replace the GPON ONR used by Singtel/WC. So I guess XGS-PON ONR may be more difficult to replace than GPON ONR.

It's absolutely true that $99 is a reasonable price.

But if someone already had another XGSPON module for some reason, perhaps they could just try it.

Also, the s800e ONU doesn't work with the BPI-R4. So if someone had another ONU, it's worth trying it rather than adding a "media converter".

Not very compelling use cases to be sure, but it is there.

if you still have your soldering iron around there is a hardware workaround to the xgspon sfp+ module issue on the bpi-r4.
check bpi-r4's forum. From what I am aware of software workaround is not possible.

actually just don't use bpi-r4 if you want to use s800e. why need to look for alternate xgspon? where support is highly unlikely

it is just because the stick boots too slow so that when the stick is inserted, the system hasn’t completed its startup process and cannot pull down the mod-def0 voltage, resulting in the absence of a 3.3V power supply.

Easy solution: by using tweezers to short the stick and manually supply power, the 3.3V line becomes active. Once the stick has started up, you can remove the tweezers. The BPI R4 will then continue providing power until the next shutdown and restart.

Hardware mod solution: replace the bpi-r4's MOSFET with a zero-ohm resistor, or alternatively, just use a jumper wire.

 

[cyberet]

Are you able to share the screenshot? Thanks.
Please also share the FW version, thanks.

There is also a recent report that the user could not log in with the known super-admin password for Nokia G-240 GPON ONR.

https://forums.hardwarezone.com.sg/...band-provider.5494964/page-115#post-153190390

Software Version is 3FE46606BGCB46

As you can see, Connection Mode is missing.

 

[xiaofan]

Successful story for Nokia XS-240X-A ONR (Singtel) bridging from Singtel 3Gbps/5Gbps/10Gbs thread.

https://forums.hardwarezone.com.sg/...-gbps-enhanced.7030365/page-17#post-154679820

I recently got the 3gbps plan. Was issued with Nokia XS-240X-A ONR and installed 2 days ago.

Followed the guide found in the forum to set to bridge for LAN1 (10G) port and connected my OPNsense router. So far, very stable, didn't notice any issues. My OPNsense router only has 2.5G, and speedtest showing about 2.1Gbps speed, which is normal.

For setting the LAN port as bridge, I also login to superadmin using "support" as username, and the password is the reverse of what was printed on the label at the bottom of the ONR.
Selected "Create a new Connection" in the Network->WAN page, Connection mode set as "Bridge mode", "Enable/Disable" is ticked.
I also set the VLAN according to what was shown for the original WAN connection, which is in my case: "Enable VLAN" is ticked and the "IP mode" set to "Add svlan", with "VLAN ID" as 10, didn't change the "VLAN PRI" which is default 0. And just tick the LAN port to bind, which in my case is LAN 1, only. My OPNsense router did not need to set any VLAN on the WAN side, just normal DHCP client on WAN side.

YMMV, I do not have any other services connected to the ONR, such as TV box or phone line. Not sure if this settings will affect those or not.
Bridge at your own risk.
Just wanted to update the forum, since I am very grateful to achieve this bridging setup with Singtel's ONR due to reading these forums.

 

[xiaofan]

The above bridging method for Nokia XS-240X-A XGS-PON ONR is actually quite similar to the reported bridging method for Nokia G240 GPON ONR.
https://forums.hardwarezone.com.sg/...band-provider.5494964/page-115#post-153190390

Good News, I manage to bridge the Nokia G-240G-E. We should do the bridge in WAN Section like below:

Once we setup the brigde in WAN, the bridge in LAN is missing.

Now the other port does not able to connect to internet except port 1.
Next step is to try out dual bridge port to AX86U in dual WAN load balance,
but now i don't have any device to see the max speed.

But then interestingly that Singtel seems to push new FW update to Nokia G240G-E GPON ONR to remove the "Connection Mode" option in the Nokia GPON ONR.

Software Version is 3FE46606BGCB46

As you can see, Connection Mode is missing.

 

[xiaofan]

Sucessful story to replace MyRepublic Nokia XGS-PON ONT with Maxlinear XGSPON ONU stick.

Reference:
https://forums.hardwarezone.com.sg/threads/how-to-bypass-xgs-pon-was-110-sfp-sfu.7054150/
https://forums.hardwarezone.com.sg/...itch-and-vq-xgs-pon-onu-stick.7047645/page-21

just buy one of the maxlinear XGSPON ONU sticks and put the 8311 firmware on it and chances are that you'd be good to go (though of course I can't speak for every XGS-PON ISP in Singapore...)

price is probably one of the bigger blockers but it is what it is

Have you tried it alr? What I was referring to is exactly the XGSPON stick with PRX126 chip, it is not working for Nokia with default profile. If you have succeeded, could you elaborate more on your set up?

install 8311 firmware, fill in everything you need to get O5 status (probably s/n and slid at minimum, and possibly the hw/fw versions, can't quite remember), then get internet through vlan 1494 (or whatever vlan your ISP uses)

myrepublic (apparently) uses a combined pptp/veip setup, but you can skip the veip part if you don't care about the voip/management network

where are you stuck?

I see. I disabled ISP VLAN Fix, turn it back and it works great. Thanks!

 

[xiaofan]

Successful story for Nokia XS-240X-A ONR (Singtel) bridging from Singtel 3Gbps/5Gbps/10Gbs thread.

https://forums.hardwarezone.com.sg/...-gbps-enhanced.7030365/page-17#post-154679820

I recently got the 3gbps plan. Was issued with Nokia XS-204X-A ONR and installed 2 days ago.

Followed the guide found in the forum to set to bridge for LAN1 (10G) port and connected my OPNsense router. So far, very stable, didn't notice any issues. My OPNsense router only has 2.5G, and speedtest showing about 2.1Gbps speed, which is normal.

For setting the LAN port as bridge, I also login to superadmin using "support" as username, and the password is the reverse of what was printed on the label at the bottom of the ONR.
Selected "Create a new Connection" in the Network->WAN page, Connection mode set as "Bridge mode", "Enable/Disable" is ticked.
I also set the VLAN according to what was shown for the original WAN connection, which is in my case: "Enable VLAN" is ticked and the "IP mode" set to "Add svlan", with "VLAN ID" as 10, didn't change the "VLAN PRI" which is default 0. And just tick the LAN port to bind, which in my case is LAN 1, only. My OPNsense router did not need to set any VLAN on the WAN side, just normal DHCP client on WAN side.

YMMV, I do not have any other services connected to the ONR, such as TV box or phone line. Not sure if this settings will affect those or not.
Bridge at your own risk.
Just wanted to update the forum, since I am very grateful to achieve this bridging setup with Singtel's ONR due to reading these forums.

With more details.

Standard disclaimer:
YMMV. Proceed at your own risk. You may brick the ONR and then you may need to pay Singtel to recover.

++++++++++++++++++++++++++++
That "IPTV" checkbox no need to tick, you should tick the checkbox "Enable/Disable".

You should also tick "Enable VLAN" checkbox.

IP mode --> Add svlan

VLAN ID --> 10

VLAN Pri --> 0

LAN Port binding --> Tick "LAN1" checkbox (10G LAN port).

Then click "SAVE" and see how it goes.
+++++++++++++++++++++++++++

 

[xiaofan]

Previously it was easy to bridge Singtel ZTE F8648P ONR.

1. Did you log in the super-admin account?

User name --> support
Password --> reverse of the root password printed on the ONR.

Hardware Version V2.1
Software Version V2.1.10P5N19
Boot Version V2.1.10P10N5

2. ONR bridging method

Bridging method has not been changed from the very beginning.

Log in the super-admin account:

User name --> support​

Password --> reverse of the root password printed on the ONR.​

Once you log in, click "FastSetting" on the top right to access the briging page.

Set your router in router mode and connect to LAN5 (10G LAN port) and make sure you have internet access in this case (Double NAT).

Click the checkbox LAN5 to bridge the 10G LAN port.

If you lose internet access immediately, bridging failed. Reboot your router to see if it helps. If not, bridging confirm failed. Uncheck the "LAN5" checkbox to recover.

If you still get internet access, most likely your bridging is working. Double check your router WAN side gets public IPv4 address and not private IPv4 address (192.168.1.x). You may need to reboot the router to get the public IPv4 address. If that is the case, congratualtions, bridging is successful.

If bridging is successful, then you cannot access ONR's GUI 192.168.1.254 any more from your own router connect to the bridged LAN port. But you can connect your computer to the unbridged ONR LAN port to access the ONR Web UI at 192.168.1.254. The ONR itself actually still has internet access but somehow your computer cannot access the internet when connected to the unbridged LAN port.

3. ONR Bridging behaviour

1) Initially it was very easy to bridge, and the unbridged ports will still have Internet Access

2) Then with new FW, bridging became not working in August 2024, you would lose internet imediately.

Hardware Version V2.1​

Software Version V2.1.10P5N19​

Boot Version V2.1.10P10N5​

3) Then it became possible again for some users, the unbridged ports will not have internet access. Some users still can not bridge the ONR. No idea why the differences, even with the same ONR HW/FW revision.

But later it becomes more difficult after Singtel updated ZTE F8648P ONR and it no longer shows port bridging interface.

Noticed that there was firmware update waiting on the MySingtel App for the F8648P.

Pushed it to the router and it took about 5 - 6 minutes to update. It's now on the V2.1.10P5N20B firmware.

Quick check on the support login, and it seems that they removed the bridging ports on the Fast Setting page.

Luckily one forum user figured out the way.

Hi all, had a ZTE F8648P ONR with the latest firmware which did not show the port bridging options. However, I did manage to find it.

Following the instructions from here: https://forums.hardwarezone.com.sg/...8p-superadmin-password.6946718/post-154220874

Visting the FastSetting page does not show the LAN ports for bridging, however you can right click and inspect element, search for a HTML element with an id of "BridgePort"

Delete `display: none;` from the style attribute by clicking on the style attribute and just hitting backspace until it is gone, then hit Enter to save. After that, you should be able to see this:

You can then follow the same instructions in the attached post (e.g. tick LAN5, then submit and reboot).

Afterwards, it should look like this if you visit the same page and delete the `display: none;` again.

All should be good and you shouldn't have double NAT anymore.

 

[nabil996]

Hi there i facing sone issues with my new ONR.

The ONR that I am using is from Huawei HG8244H Optical Network Router (ONR). I cant key in primary and secondary DNS it is block off. Add on i am planning to add in Unifi network will i face any issue if i plug in after the Huawei HG8244H Optical Network Router (ONR)?

 

[xiaofan]

Hi there i facing sone issues with my new ONR.

The ONR that I am using is from Huawei HG8244H Optical Network Router (ONR). I cant key in primary and secondary DNS it is block off. Add on i am planning to add in Unifi network will i face any issue if i plug in after the Huawei HG8244H Optical Network Router (ONR)?

Just wondering why you get this ONR as "new"? This is an old ONR for Singtel 1Gbps/2Gbps plan. Which plan are you using now?

Singtel ONR is very bad for Ubiquiti Unifi Gateway users.

Anyway, you should search this thread for the method to bridge this Huawwei HG8244H ONR if you plan to use Ubiquiti Unifi Gateway.

 

[nabil996]

Just wondering why you get this ONR as "new"? This is an old ONR for Singtel 1Gbps/2Gbps plan. Which plan are you using now?

Singtel ONR is very bad for Ubiquiti Unifi Gateway users.

Anyway, you should search this thread for the method to bridge this Huawwei HG8244H ONR if you plan to use Ubiquiti Unifi Gateway.

“New” because my old ONT just not working the singtel just swapped it. Slowest speed and super outed 1Gbps

 

[xiaofan]

“New” because my old ONT just not working the singtel just swapped it

I see. Then you can try to bridge it by yourself.

Or prepare to leave SingTel and go with other ISPs when contract expires.

 

[nabil996]

I see. Then you can try to bridge it by yourself.

Or prepare to leave SingTel and go with other ISPs when contract expires.

Any advice for which telco service will have the least issues and be stable on the support hotline for homelab user plus affordable.

 

[xiaofan]

Any advice for which telco service will have the least issues and be stable on the support hotline for homelab user plus affordable.

I usually recommend M1 and Starhub. Their support may not be that good if you have more advanced technical questions though. But since they are usually stable so you do not really need to talk to the support.

But VQ is also worth considering for power users. You may need to add the static IPv4 add-on and then do not use FreeDOM DNS to have better stability. VQ is the only ISP with the SFP+ ONU option. VQ is also the only ISP to give static /56 IPv6 (need to request).