[Fiber.nl] Information needed for DSL connection

[TheProxyOne]

Hello Tweakers,

I have 100/30Mbps internet form Fiber Nederland through VDSL2.

Later I'd like to switch my Fritzbox to different modem with openwrt or ddwrt capabilities, becouse of this I did contact customer service of Fiber.nl to get my DSL login data (VPI, VCI, username and password) but they told me that they cannot provide this information, because my preconfigured fritzbox contains this information and they don't have this data in other places, only in preconfigured modems, I've tried to retrieve this data from backuped configfile of Fritzbox, but all passwords in this file are encrypted.

My question is from where to get information I need, maybe some smart people here already got the same problem, or maybe you know how to solve it

(sorry for my English, but my Dutch is even worse)

Please help me, also I am open for further questions.

Greetings
TheProxyOne

[luxan]

VPI/VCI are used in ADSL connections. VDSL from KPN (which fiber uses) makes use of VLAN's. The ID's I've found on the internet and in config files for store bought Fritzboxes are:

Internet: VLAN ID 2
VoIP: VLAN ID 4
IPTV: VLAN ID 6

I've also found references to GRE tunneling in the config files I've examined. It seems they configure the FritzBox as a GRE endpoint and then use DHCP to acquire an IP address on the GRE interface. This is an approach that is not taken by other internet providers I've encountered. I've never had an internet subscription through Fiber so I'm afraid I am unable to confirm any of this.

I did encounter some comments related to fiber in a blog post. That user has so far not reported a successful connection using a Draytek/Mikrotik combination.
I'd personally advise you to select a Mirkotik or Ubiquiti router as their GRE implementation is much easier to configure then DD-WRT or OpenWRT.

If you could provide an export of your config, I might be able to provide some feedback on it.

[TheProxyOne]

https://drive.google.com/...VYr_UcPVCVQVBYNEk0SGxfNUU this is backup of settings form router, every time I export those settings Fritzbox ask me to protect it by password I used 1234 as password for this one

[ Voor 5% gewijzigd door TheProxyOne op 24-05-2017 14:36 . Reden: removed sensitive data ]

[luxan]

The password is not needed to read the file.

The files look very similar to the files I've been able to export from FritzBoxes with a Fiber profile. Based on this config file, I suspect they've got a VLAN containing a GRE tunnel. The connection is run over this GRE tunnel. I've never seen the [gre_server_cfg] section in the profile for any other provider. That leads me to believe they need it to setup the connection. GRE itself does not use authentication so there's no username/password for that.

It then seems that they have a DHCP client running on the dsliface. I base this on conclusion on the fact that the [dsl_encap] is set to {dslencap_ether} in your config file and this config is similar to how xs4all sets up their IPTV interface.
I'm not 100% certain though as the DHCP section (which can be found in [etherencapcfg]) is included in all configs I've examined so your mileage may vary.

I would like to point out a few additional things here though:

Your config file contains some information you might not want to expose to the public like the hashes for the username/password of the two users who have access to your device (in the section [boxusers].) In addition, you've got hashes for your WLAN key and some information for WDS in the section [wlancfg]. Both these sections are not needed to answer the questions you have so you might want to remove them from the file you're sharing.

It's also important to note that dd-wrt/openwrt distributions generally don't support VDSL modems. So if you want to replace your FritzBox with something else, it's unlikely that you'll be able to use a store-bought VDSL router with an dd-wrt/openwrt firmware.
You might want to check out ASUS and asuswrt-merlin. This is a wrt version supported by the manufacturer and it's therefore much more likely that it will include VDSL support.

The blog post I talked about earlier contains some info (in Dutch) about Fiber in the comment section.

I'm afraid that getting your own modem/router to work with Fiber will involve some experimentation. I hope that the information I've given here can be of some assistance to you.

[TheProxyOne]

Thank You luxan for your exhaustive answer! I really astonished by this level of details you provide in your reply , and thanks for security tips about configfile

If is so much trouble to switch fritzbox for something else, I consider now using it as modem only and connect some good router like asus RT-AC5300 but how to switch this fritzbox to modem only mode, because I did read somewhere that this option is not included in recent firmwares? Maybe I should make new topic for that?

[luxan]

Using your FritzBox as a modem (which, as you have discovered, is no longer a trivial action) will require you to configure your router to make the connection to Fiber. This in turn will require you to figure out whether they use a GRE tunnel in the internet VLAN and whether they require a DHCP client.

But let's step back for a minute and answer this question:

Why do you want to trade in your FritzBox's router functionality for an ASUS RT-AC5300 router.

Answering that question will help you select the best solution for your situation and might save you time, effort and even money in implementing that solution.

[TheProxyOne]

Few things I'm interested in:

• Adjustable antenna power to increase wireless spectrum.

• Advanced QoS (Quality of Service) controls for bandwidth allocation to various network connections.

• Set up a router-level filter to block ads for every device on your home network

• Built-in DNS (Domain Name System) caching - speeds up connection to an array of sites.

• Later on to configure a router as VPN passthrough

And also Im not sure how much power my internet provider have over my router, I think they can see/do remote to much things with fritzbox

[TheProxyOne]

Ok so I checked some settings and internet is working with setup like on this printscreen: https://drive.google.com/...VYr_UcPVCVc0pLMWtORGtkMUU

What this all mean for me? What DSL modems and/or routers can I use for this? I think we are geting closer to solution

[ Voor 35% gewijzigd door TheProxyOne op 24-05-2017 16:04 . Reden: correction of typos ]

[luxan]

TheProxyOne schreef op woensdag 24 mei 2017 @ 15:21:
Few things I'm interested in:

• Adjustable antenna power to increase wireless spectrum.

This is a great idea until you realize that increasing power on the router (or access point) side is only half the story. You would also need to increase the power on the client side to get increased coverage as all network communication is two-way. An additional access point would be a better solution for this problem.

TheProxyOne schreef op woensdag 24 mei 2017 @ 15:21:

• Advanced QoS (Quality of Service) controls for bandwidth allocation to various network connections.

The FritzBox offers a wide variety of QoS options in the [Internet]->[Filters]->[Prioritization] page.

TheProxyOne schreef op woensdag 24 mei 2017 @ 15:21:

• Set up a router-level filter to block ads for every device on your home network

The FritzBox offers some options for this but you would be better served with a PiHole solution. There's also the option of installing Freetz to accomplish a similar setup but as some of the FritzBox models have relatively limited hardware resources, your mileage may vary with this solution.

TheProxyOne schreef op woensdag 24 mei 2017 @ 15:21:

• Built-in DNS (Domain Name System) caching - speeds up connection to an array of sites.

The FritzBox has DNS caching built-in but the speed increase is limited, a proxy server would be a better solution. This could be accomplished through a Raspberry Pi based solution or, again, Freetz. Depending on your expectations with regards to cache size, you might want to add an external storage medium like a USB stick or a USB hard drive to your FritzBox with Freetz installed.

TheProxyOne schreef op woensdag 24 mei 2017 @ 15:21:

• Later on to configure a router as VPN passthrough

A FritzBox is well suited for VPN passthrough. It can even serve as a VPN end-point or a VPN server.

TheProxyOne schreef op woensdag 24 mei 2017 @ 15:21:

And also Im not sure how much power my internet provider have over my router, I think they can see/do remote to much things with fritzbox

Control by your provider over your FritzBox is usually arranged through TR069. You can disable this in [Internet]->[Account Information]->[Provider Services] or through the appropriate configuration section in the configuration file.

Looking at your list of requirements, I can only see the last point, not knowing how much control your provider has over your modem, as a possible justification for using your own router in place of the FritzBox.

Opting for a solution with your own router and a separate modem would provide even more control but would involve introducing more complexity to your home network setup. It's a great learning experience but it does not offer better security unless you invest the time and energy to learn. You can limit the amount of time and energy invested by throwing money at the problem. A Draytek 130 in combination with a router would be a great alternative for your FritzBox but the Draytek alone would cost you € 100,-. You could turn your FritzBox into a VDSL bridge but that would involve hacking the FritzBox, something that would likely cost you an afternoon. Here's an article on how to do that.

In addition, the only way for you to prevent your internet provider from tracking your online activity is by using a VPN. The downside of a VPN is that you will run into issues with services like Netflix. In addition, your VPN provider will then be able to track your activity. You could decide to move to TOR but I would say that's a bit overkill for the average consumer.

TheProxyOne schreef op woensdag 24 mei 2017 @ 15:59:
Ok so I checked some settings and internet is working with setup like on this printscreen: https://drive.google.com/...VYr_UcPVCVc0pLMWtORGtkMUU

What this all mean for me? What DSL modems and/or routers can I use for this? I think we are geting closer to solution

The above screenshot suggests they are using VLAN ID 2 with RFC1483/RFC2684. A most VDSL modems support this out of the box and should work fine on your connection. But please consider the points I highlighted above before opting to buy a new device.

[ Voor 8% gewijzigd door luxan op 24-05-2017 16:10 ]

[TheProxyOne]

Does switching FritzBox into bridge mode require using telnet? Because they blocked this option few firmwares ago.

[ Voor 40% gewijzigd door TheProxyOne op 24-05-2017 16:14 ]

[luxan]

TheProxyOne schreef op woensdag 24 mei 2017 @ 16:12:
Does switching FritzBox require using telent? Because they blocked this option few firmwares ago.

Please check printscreen from my prevoius post , thanks for your patience luxan are You not tired of explaining this all to me?

Yes it does and yes I know they turned off the option to enable telnet. The post I linked to in my previous answer provides some alternatives (installing Freetz or connecting to the serial console on the PCB) that would allow you to gain access to the running firmware. The article is in Dutch but Google Translate will allow you to get the gist of it.

I've looked at your screenshot and I'm afraid there's no way to configure the FritzBox as a modem (a bridge) through the web interface for your particular situation. A Draytek 130 would be able to function as a bridge and would allow you to use any router that uses an ethernet port as internet input.
You could also select an ASUS xDSL device as your main router. As long as they support VLAN's and RFC 1483, you should be good.

[TheProxyOne]

Ok I think my last question for today is:

Is there some way to check if they're using RFC1483 or RFC2684? And of course what this would mean to noob like me

[luxan]

There is no need to determine which of those two they are using as RFC2684 replaces RFC1483. For the purpose of our discussion we can consider them equal.

[TheProxyOne]

Ok, Thank You sir again for your big help, I don't know how to return the favor

[Verwijderd]

Hey @TheProxyOne did you perhaps complete your Jedi Training and get this configuration right? If so, could you give us all (i am sure there are many fiber.nl people) a overview of the settings used? so we are not forced to use the silly little fritz!box that fiber.nl issue to.

Jimmy