ASUS DSL-AC68VG bridge mode issues

[czaki]

I have tried the above recommended setting on the DSL-AC68VG but no success. I am only able to access that device if I log onto the separate wireless network it has.

 

[Grumpy_Geoff]

On the DSL-AC68VG, correct?

No, on the RT-AC86U (as that's the device with the WAN connection )

The "plan b.ii" ifconfig method was originally from here - https://www.snbforums.com/threads/access-modem-configuration-page.11957/
I've never needed to do the "iptables" command shown in that thread but perhaps you need it for PPPoE?
The "Get the WAN IP automatically: No" idea is also from that thread.

 

[Grumpy_Geoff]

Here is the full picture after the route command to the RT-AC86U.

Having had a think about it, since your (PPPoE) WAN interface, your ISP's Gateway and DNS addresses are going via "ppp0", then perhaps we should specify that interface instead in the "ifconfig" command. To that end, if you wish, try this in an RT-AC86U telnet/SSH session -

ifconfig ppp0:0 192.168.0.2 netmask 255.255.255.0

Then attempt access to the bridged modem via a browser from your desktop PC.

 

[czaki]

Having had a think about it, since your (PPPoE) WAN interface, your ISP's Gateway and DNS addresses are going via "ppp0", then perhaps we should specify that interface instead in the "ifconfig" command. To that end, if you wish, try this in an RT-AC86U telnet/SSH session -

ifconfig ppp0:0 192.168.0.2 netmask 255.255.255.0

Then attempt access to the bridged modem via a browser from your desktop PC.

Thanks, I am now at work but I will give it a go this evening. In case it fails, with a simple reboot of the RT-AC86U I can revert all the changes, right?

 

[Grumpy_Geoff]

In case it fails, with a simple reboot of the RT-AC86U I can revert all the changes, right?

Yep!

 

[czaki]

Yep!

Well I appreciate your efforts but none of the solutions worked. I have read through the other topic you linked in, all of the users there have their modems set to bridge mode. The thing is, in my case the DSL-AC68VG bridge mode did not work and I only had to disable the 802.11Q function to be able to establish a PPPoE connection through the RT-AC86U. I wonder if this is causing the troubles for me...

 

[Grumpy_Geoff]

Well I appreciate your efforts but none of the solutions worked. I have read through the other topic you linked in, all of the users there have their modems set to bridge mode. The thing is, in my case the DSL-AC68VG bridge mode did not work and I only had to disable the 802.11Q function to be able to establish a PPPoE connection through the RT-AC86U. I wonder if this is causing the troubles for me...

Okay. I didn't realise you failed to bridge the DSL-AC68VG, as I thought you achieved that in post #7. So you're running with double-NAT then.
I guess it's see how you go with the RT-AC86U running a VPN on it as you intend.

 

[czaki]

Okay. I didn't realise you failed to bridge the DSL-AC68VG, as I thought you achieved that in post #7. So you're running with double-NAT then.
I guess it's see how you go with the RT-AC86U running a VPN on it as you intend.

I do not think that I have double NAT. The RT-AC86U connects to the internet via PPPoE connection and gets a WAN IP from the ISP, see below (I have hidden some details but you can see what I am talking about).

If I do a traceroute I cannot see any intermediate LAN IP in the list. I believe this confirm that double NAT is not affecting me. I can also easily connect to my VPN server running in a remote location both by using the OpenVPN Connect on the computer and by having the RT-AC86U set up as a client.

 

[Grumpy_Geoff]

I do not think that I have double NAT. The RT-AC86U connects to the internet via PPPoE connection and gets a WAN IP from the ISP

Okay, but you stated -

The thing is, in my case the DSL-AC68VG bridge mode did not work

So I assumed the DSL-AC68VG was still NATing. Perhaps it's because you removed the VLAN ID from the DSL-AC68VG that the WAN IP is passed through (it's as if NAT is disabled on the DSL-AC68VG)?

 

[czaki]

Okay, but you stated -


So I assumed the DSL-AC68VG was still NATing. Perhaps it's because you removed the VLAN ID from the DSL-AC68VG that the WAN IP is passed through (it's as if NAT is disabled on the DSL-AC68VG)?

It seems that the DSL-AC68VG is bridged in function but on the admin page it does not it show like that. If you remember the only way forward was to disable 802.11Q because selecting the bridge function brought no joy. A weird way to make it work, but it seems that was the only solution to trigger the modem only mode.

Still it is unclear why no solution works for accessing the modem directly other than keeping separate wireless networks alive on that device.

 

[Grumpy_Geoff]

Still it is unclear why no solution works for accessing the modem directly other than keeping separate wireless networks alive on that device.

Yep, but I'm sure you could get it to work using the "Plan a) Same subnet" method.

 

[czaki]

Yep, but I'm sure you could get it to work using the "Plan a) Same subnet" method.

Yes, this works. It is easier to temporarily switch the cable from the WAN to the LAN port on the RT-AC86U than enabling the wireless radio by hand on the DSL-AC68VG.

Thank you very much again for taking the time in helping me!

 

[Grumpy_Geoff]

Yes, this works. It is easier to temporarily switch the cable from the WAN to the LAN port on the RT-AC86U than enabling the wireless radio by hand on the DSL-AC68VG.

Get your timing right so as to not drop internet access to the rest of the household when you do that

I've no idea if the DSL-AC68VG is continually attempting to connect/authenticate with your ISP, or chewing up CPU - perhaps check its log and also with top.
Up to you of course, but if budget permits perhaps buy another modem/router that's easy to bridge. A second-hand Technicolor modem/router would suit well as they're very easy to bridge.
I don't know where you're located, but do you have the Draytek Vigor167 available? It comes with bridge mode set as its default - it couldn't be any more "plug 'n play".

 

[czaki]

Get your timing right so as to not drop internet access to the rest of the household when you do that

I've no idea if the DSL-AC68VG is continually attempting to connect/authenticate with your ISP, or chewing up CPU - perhaps check its log and also with top.
Up to you of course, but if budget permits perhaps buy another modem/router that's easy to bridge. A second-hand Technicolor modem/router would suit well as they're very easy to bridge.
I don't know where you're located, but do you have the Draytek Vigor167 available? It comes with bridge mode set as its default - it couldn't be any more "plug 'n play".

My connection is rather stable despite that I am located in Germany, so I consider myself lucky. I hope I will not really need to use the administration surface of the modem that often, my household is very much internet dependent.

The Draytek Vigor167 is available here but relatively expensive compared to what I have today, as a new one is 100+ EUR depending on the source and excluding shipping. I got the current setup with the DSL-AC68VG plus the two RT-AC86Us for a very good price I believe, as these devices costed me 145 EUR all together with shipping included. All were second hand but in great condition and all factory accessories in the box. My plan was to get rid of the ISP provided device that not only was not the best, but also I had to pay a monthly rental fee for it. There is an ongoing fiberglass development around the area where I live and I hope in the next 1-2 years I will able to move that technology with higher speeds. Now I only wanted to cover the time until that with the current layout. I do not really see that an AX setup is justified with having only 175 Mbps theoretical speed available on a good day.