Superhub Virgin Business Superhub now has Modem Mode - Page 5

nickgoldman · 07-01-2015, 17:23

I am also facing issues with the Superhub crashing regularly. Has anyone tried enabling modem mode and then setup a PPPoE connection with the VM username and passsword on the router behind it?

pip08456 · 07-01-2015, 18:52

There are hundreds if not thousands using (especially the SH1) superhubs in modem mode.

There's no setup involved. You should be able to plug the router into the Sh and it should work.

nickgoldman · 07-01-2015, 19:14

I am using the service with a routed subnet hence the need to establish the L2TP tunnel on top of modem mode.

ccarmock · 07-01-2015, 20:51

I don't see why forming an L2Tp tunnel on your own router behind a Business SH1 in modem mode shouldn't work. I've not tried it myself, but then haven't had the reboot/lockout issues people have reported on the .13 firmware.

It would be interesting to see how you get on if you try.

nickgoldman · 07-01-2015, 22:13

I will need to keep it as is for now as it will require me to visit on-site just to test. My concern would be that does modem mode give full bridge mode.
However if I continue to get the freezing issue then I may well give it a go.

qasdfdsaq · 07-01-2015, 22:51

Quote:

Originally Posted by nickgoldman

I will need to keep it as is for now as it will require me to visit on-site just to test. My concern would be that does modem mode give full bridge mode.

Yes - although the business service may still be expecting the MAC of the SH and not your router for DHCP client purposes. I dunno how much security they've layered on the business service...

ccarmock · 07-01-2015, 23:21

The way the fixed IP addresses are secured is via a username/password on the L2TP tunnel.

Though the Business SH does get a standard address from DHCP also. The original business firmware would reveal what that was also. However it wasn't used for true data purposes on a routed subnet installation

qasdfdsaq · 08-01-2015, 11:03

Quote:

Originally Posted by ccarmock

The way the fixed IP addresses are secured is via a username/password on the L2TP tunnel.

Though the Business SH does get a standard address from DHCP also. The original business firmware would reveal what that was also. However it wasn't used for true data purposes on a routed subnet installation

Indeed, but that standard DHCP address would be seen as the source address for the tunnel - and it's possible (though rather unlikely) that there is security enforced on that - say, your login credentials can only be used from your original device's allocated address.

ccarmock · 09-01-2015, 00:13

yes that's a very good point. Now they have removed the option in the web interface I don't think I can find out what my DHCP allocated IP address is any longer.

As you say this was the source address of the tunnel.

There is a good chance extra reliance was placed on that as I do remember this IP address had a reverse DNS of a form similar to
cust01.static.<cmts>.virginmediabusiness.com

the static reference there was the format used in the old 10 Mb/s modem based DHCP allocated 'sticky static' IP addresses

johnnyboyleeds · 21-01-2015, 10:25

Hi all and especially nickgoldman, do any of you have any information regarding the l2tp tunnel.

I am in a similar boat, I have the VM business hub and a static IP. I have switched it to modem mode. I have a cisco 2821 plugged into it on fa0.

I get a public IP and gateway via dhcp, but this IP doesn't have a route to the internet. I have been on and off the phone with VMBusiness for over a week and eventually I got someone who knows a little.

He says that the SH creates a L2TP tunnel to get the correct external static IP that has been assigned to me. He said that If I use modem mode with a static IP (and I guess it is the same with a routed subnet) that whatever device I use as a router will need a similar tunnel.

I'm reasonably handy with cisco devices. I've never created a L2tp tunnel though, but I assume it needs a peer IP address as an endpoint for the tunnel like the other VPN's I've created previously.

The guy on the phone got very frustrated when I explained that a username and password simply weren't enough to create the tunnel. He said using another router with modem mode and static IP's was not supported and if I could get it working, it was allowed, but he couldn't help any more. He said to create a tunnel and if the tunnel is up, he might be able to help with any further issues.

Does anyone have any information regarding the L2tp tunnel?

I'll be happy to share my config if I get it working.

Thanks

John

ccarmock · 25-01-2015, 11:52

You know I have a feeling that the original firmware did show the IP address of the tunnel destination, I have looked to see if I kept a screen shot but can't find one.

I am referring to the original firmware not the .06 release prior to the bugged .13

The config .cfg file is a binary file so no clue in there.

On the subject of Fixed IP address on the 152 Mb/s business service. I called sales again on Friday and was told they are still being told Q1 this year.

He didn't have full details but said while a compatibility issue was being worked on. I suspect this is the same issue Igni referred to with a PPP session at higher speeds causing CMTS problems?

Does anyone know if the SH2AC firmware is also ready for this? As it seems there are two issues at the moment - no released business firmware for the SH2AC to support the fields required for fixed IP services and also the CMTS / PPP speed issue.

qasdfdsaq · 25-01-2015, 23:32

Quote:

Originally Posted by ccarmock

He didn't have full details but said while a compatibility issue was being worked on. I suspect this is the same issue Igni referred to with a PPP session at higher speeds causing CMTS problems?

If the CMTS has issues passing PPP traffic through at high speed, everyone using a PPP VPN would be having issues...

ccarmock · 25-01-2015, 23:38

If I recall Ingi mentioned that there are issues with the Virgin media equipment when running PPP /L2TP at 152 Mb/s that are not a problem at 50 Mb/s ....

I assume this isn't PPP in general but the specific configuration VMB use to deliver the fixed IP address service

qasdfdsaq · 26-01-2015, 00:01

I may be missing something here but I see no reason the VMB PPP and any other customer's VPN PPP would be treated any differently by the CMTS. In both cases it is simply encapsulated in IP packets that are destined for somewhere else and are thus passed somewhere else. The CMTS neither knows nor cares if it's PPP or what's in it.

If PPP traffic formulated in a certain way can disrupt VM's CMTS that makes for a glaring denial-of-service vulnerability.

ccarmock · 26-01-2015, 00:12

Quote:

Originally Posted by Ignitionnet

PPP appears to do some rather bad things to some VM CPE when running at the higher data rates right now, so a few issues to iron out.

This was the reference I was looking for., and note it's CPE not CMTS as I thought