Hello guys,
This is my first post here on Aruba Community, but you guys already help me a lot while setting up Aruba devices and software.
I'm trying to setup an Aruba AP-203R in Instant AP mode to dial up my ISP through PPPoE. In the past, I get it working successfully with another PPPoE provider, but I changed it to another ISP that requires a specific VLAN to DSL through PPPoE successfully.
It uses Fiber so I bought a GPON (Huawei EG8010H) to convert Fiber to Ethernet and connect it to AP-203R eth0 port and set up the PPPoE credentials at Configuration page of Instant AP, but it fails. I checked the GPON authentication at my GPON and it's password is correct, but my GPN do not allow set up a specific VLAN and I believe that I could not found a way to set up it at AP-203R neither. My ISP provider requires the Internet traffic to go through VLAN ID 600. I already tried to set up "Uplink switch VLAN" (enet-vlan) to VLAN ID 600 and set up it as a Admin UP and Native VLAN at "Wired Profile", but it still do not work. I believe it's not working because for some reason the Instant AP isn't tagging the traffic with VLAN ID 600, because if I set up my ISP router to Bridge mode (it has a Fiber port, so it has a built-in ONU) with VLAN 600 tagged and set up the PPPoE credentials from my ISP provider, it works just fine. It fails only when I use an external GPON.
If I try to use my external GPON and my Linux machine to connect through DSL PPPoE it fails too, even when I spoof the ISP router mac-address, but it also works just fine with my ISP router in bridge mode (instead of using my external GPON) when I DSL PPPoE through my Linux machine.
I noticed that every reboot it changes the "pppoe-password" hash every time the AP restart, but it doesn't seems to be an issue because it changes even when using my ISP router at bridge mode and it works just fine.
So I would like to know if it's possible to tag VLAN traffic at eth0 port. There's seems that TP-Link, ASUS and other home providers allows to setup a VLAN ID to Internet, Telephone (VoIP) and IPTV traffic, as most providers seems to offer those features through Fiber instead of Sattelite (TV) and ADSL/RJ-11 (Telephone). So it seems to be a great feature to be added at PPPoE mode at Aruba Instant AP and Aruba Instant On product line, so it could possibly replace the ISP router using a ONU.
A thing that I am willing to test into the future is to buy another GPON that offers VLAN tagging and Bridge mode if Instant AP do not allow VLAN tagging to PPPoE, so I could replace my ISP router using less Power (Watt) in comparision to my ISP router, and less space too.
Sorry for my bad english. English isn't my native language.
Here's the config that I tried to setup the eth0 to VLAN ID 600, but it fails to connect not PPPoE server (show pppoe status). The pppd debug log (show pppoe debug-log) seems to return empty even when I enable IAP debug logs.
20:4c:03:1a:fd:8c# show running-configversion 8.9.0.0-8.9.0virtual-controller-country BRvirtual-controller-key 008d4f0401adb6436e944042aff47409cd5ee2feb8cc8b08eename SetMeUp-1A:FD:8Cterminal-accessclock timezone none 00 00rf-band allallow-new-apsallowed-ap 20:4c:03:1a:fd:8carmwide-bands 24ghz,5ghz80mhz-supportmin-tx-power 12max-tx-power 127band-steering-mode prefer-higher-bandair-time-fairness-mode default-accesschannel-quality-aware-arm-disableclient-awarescanningclient-matchrf dot11g-radio-profilemax-distance 0max-tx-power 9min-tx-power 6disable-arm-wids-functions offfree-channel-index 40rf dot11a-radio-profilemax-distance 0max-tx-power 18min-tx-power 12disable-arm-wids-functions offsyslog-level warn ap-debugsyslog-level warn networksyslog-level warn securitysyslog-level warn systemsyslog-level warn usersyslog-level warn user-debugsyslog-level warn wirelessextended-ssidweb-serverssl-protocol tlsv1_2hash-mgmt-passwordhash-mgmt-user admin password hash 085a42f902590c789904ac2d639e6fa0dbc53ac183fc1 247227d7371206685b46303f63328wlan access-rule default_wired_port_profileindex 0rule any any match any any any permitwlan access-rule wired-SetMeUpindex 1rule masterip 0.0.0.0 match tcp 80 80 permitrule masterip 0.0.0.0 match tcp 4343 4343 permitrule any any match udp 67 68 permitrule any any match udp 53 53 permitwlan access-rule HOMEOLIVEIRAindex 2rule any any match any any any permitwlan ssid-profile HOMEOLIVEIRAenableindex 0type employeeessid HOMEOLIVEIRAwpa-passphrase 8443743fc1848ba609a17d5d53f64a984a79d6c2da2faf19opmode wpa2-psk-aesmax-authentication-failures 0vlan guestrf-band allcaptive-portal disabledtim-period 1broadcast-filter arpdmo-channel-utilization-threshold 90local-probe-req-thresh 0max-clients-threshold 64enet-vlan 600auth-survivability cache-time-out 24wlan external-captive-portalserver localhostport 80url "/"auth-text "Authenticated"auto-whitelist-disablehttpsblacklist-time 3600auth-failure-blacklist-time 3600idswireless-containment nonewired-port-profile wired-SetMeUpswitchport-mode accessallowed-vlan allnative-vlan guestno shutdownaccess-rule-name wired-SetMeUpspeed autoduplex autono poetype guestcaptive-portal disableno dot1xwired-port-profile default_wired_port_profileswitchport-mode trunkallowed-vlan allnative-vlan 600no shutdownaccess-rule-name default_wired_port_profilespeed autoduplex fullno poetype employeeauth-server InternalServercaptive-portal disableno dot1xenet0-port-profile default_wired_port_profileuplinkpreemptionenforce nonefailover-internet-pkt-lost-cnt 10failover-internet-pkt-send-freq 30failover-vpn-timeout 180pppoe-uplink-profilepppoe-username cliente@clientepppoe-passwd 498241d46d7800940651d78e4a339875airgroupdisableairgroupservice airplaydisableairgroupservice airprintdisablecluster-securityallow-low-assurance-devices----------------------------------------------------------------------------------------------------------------------------------------
Here's the config that is working at Bridge mode:
version 8.9.0.0-8.9.0virtual-controller-country BRvirtual-controller-key f4f742b801f46824b50b250a6d5a7a024b68dd1ee9a4c50a10name SetMeUp-1A:FD:8Cterminal-accessclock timezone none 00 00rf-band allallow-new-apsallowed-ap 20:4c:03:1a:fd:8carmwide-bands 24ghz,5ghz80mhz-supportmin-tx-power 15max-tx-power 127band-steering-mode prefer-higher-bandair-time-fairness-mode default-accesschannel-quality-aware-arm-disableclient-awarescanningrf dot11g-radio-profilemax-distance 0max-tx-power 9min-tx-power 6disable-arm-wids-functions offfree-channel-index 40rf dot11a-radio-profilemax-distance 0max-tx-power 18min-tx-power 12disable-arm-wids-functions offsyslog-level warn ap-debug syslog-level warn network syslog-level warn security syslog-level warn system syslog-level warn user syslog-level warn user-debug syslog-level warn wireless extended-ssidweb-serverssl-protocol tlsv1_2hash-mgmt-passwordhash-mgmt-user admin password hash f064423f0262b5d11cc1fe0a84855f55ce137f21972a91a509cd9eafed398f3eed359c2bf2wlan access-rule default_wired_port_profileindex 0rule any any match any any any permitwlan access-rule wired-SetMeUpindex 1rule masterip 0.0.0.0 match tcp 80 80 permitrule masterip 0.0.0.0 match tcp 4343 4343 permitrule any any match udp 67 68 permitrule any any match udp 53 53 permitwlan access-rule HOMEOLIVEIRAindex 2rule any any match any any any permitwlan ssid-profile HOMEOLIVEIRAenableindex 0type employeeessid HOMEOLIVEIRAwpa-passphrase eb6be60185db83d0605bd65112f466f602376390b69375aeopmode wpa2-psk-aesmax-authentication-failures 0vlan guestrf-band allcaptive-portal disabledtim-period 1broadcast-filter arpdmo-channel-utilization-threshold 90local-probe-req-thresh 0max-clients-threshold 64auth-survivability cache-time-out 24wlan external-captive-portalserver localhostport 80url "/"auth-text "Authenticated"auto-whitelist-disablehttpsblacklist-time 3600auth-failure-blacklist-time 3600idswireless-containment nonewired-port-profile wired-SetMeUpswitchport-mode accessallowed-vlan allnative-vlan guestno shutdownaccess-rule-name wired-SetMeUpspeed autoduplex autono poetype guestcaptive-portal disableno dot1xwired-port-profile default_wired_port_profileswitchport-mode trunkallowed-vlan allnative-vlan 1shutdownaccess-rule-name default_wired_port_profilespeed autoduplex fullno poetype employeecaptive-portal disableno dot1xenet0-port-profile default_wired_port_profileuplinkpreemptionenforce nonefailover-internet-pkt-lost-cnt 10failover-internet-pkt-send-freq 30failover-vpn-timeout 180pppoe-uplink-profilepppoe-username cliente@clientepppoe-passwd fe343b7bb4c45c7ebf4ca722258b4834airgroupdisableairgroupservice airplaydisableairgroupservice airprintdisablecluster-securityallow-low-assurance-devices