Auteur Sujet: XGS-PON remplacement/bypass de la livebox 7 (10Gbe) - Discussions (Lu 112527 fois)

Milhooz · « **Réponse #372 le:** **Aujourd'hui** à 10:06:00 »

Je n’ai pas de routeur Mikrotik donc je ne saurai te dire si c’est encore valide mais à priori ça se fait en tapant la commande suivante

Code: [Sélectionner]

/interface ethernet set sfp1 mac-address=AA:AA:AA:AA:AA:AA
https://forum.mikrotik.com/t/change-sfp-mac/94842/2

redblood · « **Réponse #373 le:** **Aujourd'hui** à 12:42:45 »

J'avais fais ça, j'obtiens une adress IP locale du CGNAT orange, mais les ping 1.1.1.1 dns et autres sont en timeout.

J'ai essayé de ping le serveur DNS d'orange qui m'a donné l'adresse IP à savoir 80.10.5.213 et ça timeout aussi.

Des idées?

Voici ma config mikrotik pour référence:

Code: [Sélectionner]


# 2025-09-11 12:05:00 by RouterOS 7.19.6
# software id = 994A-GLIP
#
# model = RB5009UPr+S+
# serial number = REDACTED
/interface bridge
add name=bridge-lan
add admin-mac=REDACTED auto-mac=no name=bridge-wan port-cost-mode=short protocol-mode=none
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] mac-address=REDACTED name=sfp-WAN
/interface vlan
add interface=sfp-WAN name=vlan832-orange vlan-id=832
/interface list
add name=WAN
add name=LAN
/ip dhcp-client option
add code=60 name=vendorclass value="'sagem'"
add code=77 name=userclass value="'+FSVDSL_livebox.Internet.softathome.Livebox6'"
add code=90 name=authsend value=0xREDACTED
/ip ipsec proposal
set [ find default=yes ] disabled=yes
/ip pool
add name=default-dhcp ranges=192.168.88.11-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge-lan name=defconf
/ip smb users
set [ find default=yes ] disabled=yes
/ipv6 dhcp-client option
add code=6 name=request value=0x000b001100170018
add code=11 name=auth value=0xREDACTED
add code=15 name=userclass value="'+FSVDSL_livebox.Internet.softathome.Livebox6'"
add code=16 name=classidentifier value=0x0000040e0005736167656d
/ip smb
set enabled=no
/interface bridge filter
add action=set-priority chain=output dst-port=547 ip-protocol=udp mac-protocol=ipv6 new-priority=6 out-interface=vlan832-orange
add action=set-priority chain=output dst-port=67 ip-protocol=udp mac-protocol=ip new-priority=6 out-interface=vlan832-orange
/interface bridge port
add bridge=bridge-lan interface=ether1
add bridge=bridge-lan interface=ether3
add bridge=bridge-lan interface=ether4
add bridge=bridge-lan interface=ether5
add bridge=bridge-lan interface=ether6
add bridge=bridge-lan interface=ether7
add bridge=bridge-lan interface=ether8
add bridge=bridge-lan interface=ether2
add bridge=bridge-wan interface=vlan832-orange
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ipv6 settings
set accept-router-advertisements=yes
/interface list member
add interface=bridge-wan list=WAN
add interface=bridge-lan list=LAN
/ip address
add address=192.168.88.1/24 interface=bridge-lan network=192.168.88.0
add address=192.168.11.2/24 interface=sfp-WAN network=192.168.11.0
/ip dhcp-client
add dhcp-options=vendorclass,userclass,authsend,clientid interface=bridge-wan
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan type=A
/ip firewall filter
add action=drop chain=input comment="drop invalid input" connection-state=invalid
add action=drop chain=forward comment="drop invalid forward" connection-state=invalid
add action=drop chain=forward comment="block external DNS" dst-address=!192.168.88.1 dst-port=53 in-interface-list=LAN protocol=udp
add action=drop chain=forward comment="drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=!LAN
add action=accept chain=input comment="accept established,related input" connection-state=established,related
add action=accept chain=forward comment="accept established,related forward" connection-state=established,related
add action=accept chain=input comment="accept LAN input" in-interface-list=LAN
add action=accept chain=forward comment="accept LAN forward" in-interface-list=LAN
add action=accept chain=input comment="accept icmp mgmt" dst-address=192.168.11.2 protocol=icmp
add action=accept chain=input comment="accept icmp" in-interface-list=LAN protocol=icmp
add action=accept chain=input comment="accept dhcp" dst-port=67 in-interface=bridge-wan protocol=udp
add action=accept chain=input comment="accept ntp" dst-port=123 in-interface=bridge-wan protocol=udp
add action=drop chain=input comment="drop everything else input"
add action=drop chain=forward comment="drop everything else forward"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge-wan src-address=192.168.88.0/24
/ip service
set www-ssl disabled=no
/ipv6 dhcp-client
add dhcp-options=auth,classidentifier,userclass interface=bridge-wan pool-name=pool_FT_6 request=prefix
/ipv6 firewall address-list
add address=::/128 list=bad_ipv6
add address=::1/128 list=bad_ipv6
add address=fec0::/10 list=bad_ipv6
add address=::ffff:0.0.0.0/96 list=bad_ipv6
add address=::/96 list=bad_ipv6
add address=100::/64 list=bad_ipv6
add address=2001:db8::/32 list=bad_ipv6
add address=2001:10::/28 list=bad_ipv6
add address=3ffe::/16 list=bad_ipv6
/ipv6 firewall filter
add action=drop chain=input connection-state=invalid
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward src-address-list=bad_ipv6
add action=drop chain=forward dst-address-list=bad_ipv6
add action=drop chain=forward hop-limit=equal:1 protocol=icmpv6
add action=accept chain=input connection-state=established,related,untracked
add action=accept chain=forward connection-state=established,related,untracked
add action=accept chain=input in-interface-list=LAN
add action=accept chain=forward in-interface-list=LAN
add action=accept chain=input protocol=icmpv6
add action=accept chain=input port=33434-33534 protocol=udp
add action=accept chain=input dst-port=546 in-interface=bridge-wan protocol=udp src-address=fe80::/10
add action=drop chain=input
add action=drop chain=forward
/system clock
set time-zone-name=Europe/Paris
/system identity
set name=mikrotik

Lucy-Han · « **Réponse #374 le:** **Aujourd'hui** à 16:05:30 »

@redblood

Et dans les log dhcp du Mikrotik quelle option 125 reçois-tu ?

redblood · « **Réponse #375 le:** **Aujourd'hui** à 16:28:41 »

Citation de: Lucy-Han le Aujourd'hui à 16:05:30

@redblood

Et dans les log dhcp du Mikrotik quelle option 125 reçois-tu ?

Tu fais comment pour récupérer l’option 125 brute depuis les logs dhcp? Je ne la vois pas.

Lucy-Han · « **Réponse #376 le:** **Aujourd'hui** à 16:36:47 »

System --> Logging --> + --> Topics : dhcp, Action : memory
Puis à gauche : Log

redblood · « **Réponse #377 le:** **Aujourd'hui** à 18:00:29 »

Finalement je l'ai eu en passant par le terminal, je voyais toujours rien sur l'UI:

Option 125:
000005580C010A00010002010000000000

Orange accepte l'authent des options 60 77 90 etc et me retourne ça:
Authentication =
00-00-00-00-00-00-00-00-00-00-00-64-68-63-70-6C-69-76-65-62-6F-78-66-72-32-35-30

Converti en ASCII j'ai: dhcpliveboxfr250

Le dhcp ipv6 est toujours en Searching... mais ipv4 est en Bound.

Des idées?

Voici les logs dhcp durant un release/renew puis disable/enable (si je ne fais pas le disable/enable c'est coincé en "binding...")

Code: [Sélectionner]

2025-09-11 17:19:24 dhcp,debug,state dhcp-client on bridge-wan entering <selecting...> state 
2025-09-11 17:19:24 dhcp,debug dhcp-client on bridge-wan sending discover with id 2976842122 from 0.0.0.0:68 ([REDACTED_MAC]) to 255.255.255.255:67 (FF:FF:FF:FF:FF:FF) 
2025-09-11 17:19:24 dhcp,debug,packet     flags = broadcast 
2025-09-11 17:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0 
2025-09-11 17:19:24 dhcp,debug,packet     chaddr = [REDACTED_MAC] 
2025-09-11 17:19:24 dhcp,debug,packet     Msg-Type = discover 
2025-09-11 17:19:24 dhcp,debug,packet     Parameter-List = Subnet-Mask,Classless-Route,Router,Static-Route,Domain-Server,NTP-Server,CAPWAP-Server,Vendor-Specific 
2025-09-11 17:19:24 dhcp,debug,packet     Class-Id = "sagem" 
2025-09-11 17:19:24 dhcp,debug,packet     Client-Id = 01-[REDACTED_MAC_DASHED] 
2025-09-11 17:19:24 dhcp,debug,packet     User-Class = 2B-46-53-56-44-53-4C-5F-6C-69-76-65-62-6F-78-2E-49-6E-74-65-72-6E-65-74-2E-73-6F-66-74-61-74-68-6F-6D-65-2E-4C-69-76-65-62-6F-78-36 
2025-09-11 17:19:24 dhcp,debug,packet     Authentication = [REDACTED_AUTH_OPTION_90] 
2025-09-11 17:19:24 dhcp,debug,packet dhcp-client on bridge-wan received offer with id 2976842122 from 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     flags = broadcast 
2025-09-11 17:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0 
2025-09-11 17:19:24 dhcp,debug,packet     yiaddr = [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,packet     siaddr = 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     giaddr = 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     chaddr = [REDACTED_MAC] 
2025-09-11 17:19:24 dhcp,debug,packet     Subnet-Mask = 255.255.0.0 
2025-09-11 17:19:24 dhcp,debug,packet     Router = [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,packet     Domain-Server = 81.253.149.13,80.10.246.5 
2025-09-11 17:19:24 dhcp,debug,packet     Broadcast-Address = [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,packet     Address-Time = 50400 
2025-09-11 17:19:24 dhcp,debug,packet     Msg-Type = offer 
2025-09-11 17:19:24 dhcp,debug,packet     Server-Id = 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     Renewal-Time = 25200 
2025-09-11 17:19:24 dhcp,debug,packet     Rebinding-Time = 40320 
2025-09-11 17:19:24 dhcp,debug,packet     Client-Id = 01-[REDACTED_MAC_DASHED] 
2025-09-11 17:19:24 dhcp,debug,packet     Authentication = 00-00-00-00-00-00-00-00-00-00-00-64-68-63-70-6C-69-76-65-62-6F-78-66-72-32-35-30 
2025-09-11 17:19:24 dhcp,debug,packet     Domain-Search = 03-4E-43-59-06-61-63-63-65-73-73-11-6F-72-61-6E-67-65-2D-6D-75-6C-74-69-6D-65-64-69-61-03-6E-65-74-00 
2025-09-11 17:19:24 dhcp,debug,packet     Unknown(125) = 00-00-05-58-0C-01-0A-00-01-00-02-01-00-00-00-00-00 
2025-09-11 17:19:24 dhcp,debug,state dhcp-client on bridge-wan entering <requesting...> state 
2025-09-11 17:19:24 dhcp,debug dhcp-client on bridge-wan sending request with id 2976842122 from 0.0.0.0:68 ([REDACTED_MAC]) to 255.255.255.255:67 (FF:FF:FF:FF:FF:FF) 
2025-09-11 17:19:24 dhcp,debug,packet     flags = broadcast 
2025-09-11 17:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0 
2025-09-11 17:19:24 dhcp,debug,packet     chaddr = [REDACTED_MAC] 
2025-09-11 17:19:24 dhcp,debug,packet     Address-Request = [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,packet     Msg-Type = request 
2025-09-11 17:19:24 dhcp,debug,packet     Server-Id = 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     Parameter-List = Subnet-Mask,Classless-Route,Router,Static-Route,Domain-Server,NTP-Server,CAPWAP-Server,Vendor-Specific 
2025-09-11 17:19:24 dhcp,debug,packet     Class-Id = "sagem" 
2025-09-11 17:19:24 dhcp,debug,packet     Client-Id = 01-[REDACTED_MAC_DASHED] 
2025-09-11 17:19:24 dhcp,debug,packet     User-Class = 2B-46-53-56-44-53-4C-5F-6C-69-76-65-62-6F-78-2E-49-6E-74-65-72-6E-65-74-2E-73-6F-66-74-61-74-68-6F-6D-65-2E-4C-69-76-65-62-6F-78-36 
2025-09-11 17:19:24 dhcp,debug,packet     Authentication = [REDACTED_AUTH_OPTION_90] 
2025-09-11 17:19:24 dhcp,debug,packet dhcp-client on bridge-wan received ack with id 2976842122 from 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     flags = broadcast 
2025-09-11 17:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0 
2025-09-11 17:19:24 dhcp,debug,packet     yiaddr = [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,packet     siaddr = 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     giaddr = 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     chaddr = [REDACTED_MAC] 
2025-09-11 17:19:24 dhcp,debug,packet     Subnet-Mask = 255.255.0.0 
2025-09-11 17:19:24 dhcp,debug,packet     Router = [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,packet     Domain-Server = 81.253.149.13,80.10.246.5 
2025-09-11 17:19:24 dhcp,debug,packet     Broadcast-Address = [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,packet     Address-Time = 50400 
2025-09-11 17:19:24 dhcp,debug,packet     Msg-Type = ack 
2025-09-11 17:19:24 dhcp,debug,packet     Server-Id = 80.10.5.213 
2025-09-11 17:19:24 dhcp,debug,packet     Renewal-Time = 25200 
2025-09-11 17:19:24 dhcp,debug,packet     Rebinding-Time = 40320 
2025-09-11 17:19:24 dhcp,debug,packet     Client-Id = 01-[REDACTED_MAC_DASHED] 
2025-09-11 17:19:24 dhcp,debug,packet     Authentication = 00-00-00-00-00-00-00-00-00-00-00-64-68-63-70-6C-69-76-65-62-6F-78-66-72-32-35-30 
2025-09-11 17:19:24 dhcp,debug,packet     Domain-Search = 03-4E-43-59-06-61-63-63-65-73-73-11-6F-72-61-6E-67-65-2D-6D-75-6C-74-69-6D-65-64-69-61-03-6E-65-74-00 
2025-09-11 17:19:24 dhcp,debug,packet     Unknown(125) = 00-00-05-58-0C-01-0A-00-01-00-02-01-00-00-00-00-00 
2025-09-11 17:19:24 dhcp,info dhcp-client on bridge-wan got IP address [REDACTED_WAN_IP] 
2025-09-11 17:19:24 dhcp,debug,state dhcp-client on bridge-wan entering <bound> state
2025-09-11 17:28:33 dhcp,debug defconf received request id 3552489246 from 192.168.88.254 '1:2c:f0:5d:3b:db:3c' 
2025-09-11 17:28:33 dhcp,debug,packet     ciaddr = 192.168.88.254 
2025-09-11 17:28:33 dhcp,debug,packet     chaddr = 2C:F0:5D:3B:DB:3C 
2025-09-11 17:28:33 dhcp,debug,packet     Host-Name = "DESKTOP-PCLVU7F" 
2025-09-11 17:28:33 dhcp,debug,packet     Msg-Type = request 
2025-09-11 17:28:33 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Domain-Server,Domain-Name,Router-Discovery,Static-Route,Vendor-Specific,NETBIOS-Name-Server,NETBIOS-Node-Type,NETBIOS-Sc
ope,Domain-Search,Classless-Route,MS-Classless-Route,Auto-Proxy-Config 
2025-09-11 17:28:33 dhcp,debug,packet     Class-Id = "MSFT 5.0" 
2025-09-11 17:28:33 dhcp,debug,packet     Client-Id = 01-2C-F0-5D-3B-DB-3C 
2025-09-11 17:28:33 dhcp,debug,packet     Client-FQDN = 00-00-00-44-45-53-4B-54-4F-50-2D-50-43-4C-56-55-37-46 
2025-09-11 17:28:33 dhcp,debug lease bound, extending 
2025-09-11 17:28:33 dhcp,debug defconf on bridge-lan sending ack with id 3552489246 from 192.168.88.1:67 (D0:EA:11:1D:18:E5) to 192.168.88.254:68 (2C:F0:5D:3B:DB:3C) 
2025-09-11 17:28:33 dhcp,debug,packet     ciaddr = 192.168.88.254 
2025-09-11 17:28:33 dhcp,debug,packet     yiaddr = 192.168.88.254 
2025-09-11 17:28:33 dhcp,debug,packet     siaddr = 192.168.88.1 
2025-09-11 17:28:33 dhcp,debug,packet     chaddr = 2C:F0:5D:3B:DB:3C 
2025-09-11 17:28:33 dhcp,debug,packet     Subnet-Mask = 255.255.255.0 
2025-09-11 17:28:33 dhcp,debug,packet     Router = 192.168.88.1 
2025-09-11 17:28:33 dhcp,debug,packet     Domain-Server = 192.168.88.1 
2025-09-11 17:28:33 dhcp,debug,packet     Address-Time = 1800 
2025-09-11 17:28:33 dhcp,debug,packet     Msg-Type = ack 
2025-09-11 17:28:33 dhcp,debug,packet     Server-Id = 192.168.88.1

Lucy-Han · « **Réponse #378 le:** **Aujourd'hui** à 19:13:57 »

Ton 125 est en 02, pour moi un problème de fti et/ou d'option 90.

redblood · « **Réponse #379 le:** **Aujourd'hui** à 19:34:12 »

Si j'ai un problème de fti ou option 90. Le dhcp est coïncé sur 'STATUS:SEARCHING...' non?

Comment est le format d'entrée?

Code: [Sélectionner]

add code=90 name=authsend value=0x00000000000000000000001a0900000558010341010d6674692f6261727733623c1231633231646436343239366332373230031331b12322e12bb76f65c40d65bxxxxxxxx

Ou bien:

Code: [Sélectionner]

add code=90 name=authsend
value='00:00:00:00:00:00:00:00:00:00:00:1a:09:00:00:05:58:01:03:41:01:0C:66:74:69:2F:62:61:72:77:33:62:3c:12:31:32:33:34:35:36:37:38:39:30:31:32:33:34:35:36:03:13:41:72:79:ab:83:ca:8a:f8:4b:dc:06:c5:xx:xx:xx:xx:xx'

Lucy-Han · « **Réponse #380 le:** **Aujourd'hui** à 19:55:23 »

Non. Après de trop nombreuses tentatives, tu te retrouves parqué, c'est ta situation actuelle. Il y a donc un problème dans ta config du client dhcp ipv4 et à voir le code 02 dans la réponse 125, je soupçonne l'option 90. Pour le format j'utilise : 0x00000000000000000000001a0900000558010341010d6674692f667268766b33683c12653233363931383339666331363835640313659ddef7eb9005xxxxxxxxxxxxxxxxxxxx

redblood · « **Réponse #381 le:** **Aujourd'hui** à 19:57:38 »

Comment est-ce que je peux savoir si le souci vient de ma conf ou un blacklist d'orange?

Est-ce temporaire?

Quand je branche la prise de la fibre sur la livebox, j'ai internet de nouveau.

Lucy-Han · « **Réponse #382 le:** **Aujourd'hui** à 19:58:23 »

Oui c'est très temporaire.

redblood · « **Réponse #383 le:** **Aujourd'hui** à 20:01:59 »

Je suis comme ça depuis hier…..

Je n’ai plus de pistes. Une idée? Une conf a checker? Des logs?

Les pings depuis mikrotik routeur sont en timeout. Quand je ping depuis mikrotik. Le xgspon stick ne montre rien sur un tcpdump. C’est normal?

Mon abonnement est de 2.5Gb mais le xgspon est marqué en 10Gb. Ça peut changer quelque chose? J’ai une livebox6.

Je n'ai pas setup l'ipv6 c'est obligatoire?