BE88U Static Route

[Erah]

Hi,

I'm trying to set a static route to access the WAN web interface but it doesn't seem to work.

I can only get it to work by setting a static WAN IP.

Any ideas?

 

[ColinTaylor]

This makes no sense. You don't need any routes to access directly attached network interfaces.

If you want to access the router's web interface from the internet you use the option under Administration - System. This is strongly discouraged for security reasons. You should be using the router's VPN server instead.

 

[Erah]

Maybe I’m not explaining it properly. But I have a SFP+ ONT plugged into my BE88U. I’ve seen people access the ONTs web interface by setting a static route. So I was wondering why it wasn’t working for me.

 

[Justinh]

What does ipconfig show for default gateway when you do not have a static WAN IP set?

Your firmware is a bit different than mine, so you might have to interpret: What Profile and WAN Type does the router show (under WAN settings)?

 

[Jeffrey Young]

There are lots of examples and instructions in the forums here on how to do this.....

You have not given any real details to work with here so I'm going to make some assumptions and give an example. I am assuming that your ONT is on a different network than your router (I.E your ONT may be on network 192.168.0.0/24 while your router's network is 192.168.1.0/24).

If my assumption is right, let's say your ONT's address is 192.168.0.1, then SSH into your router and issue the following command

ifconfig $(nvram get wan0_ifname):0 192.168.0.2 netmask 255.255.255.0

now see if you can ping your ONT from the router.

 

[Erah]

What does ipconfig show for default gateway when you do not have a static WAN IP set?

Your firmware is a bit different than mine, so you might have to interpret: What Profile and WAN Type does the router show (under WAN settings)?

Default Gateway - 192.168.50.1
WAN Profile - Internet
WAN Type - PPPoE

 

[Erah]

There are lots of examples and instructions in the forums here on how to do this.....

You have not given any real details to work with here so I'm going to make some assumptions and give an example. I am assuming that your ONT is on a different network than your router (I.E your ONT may be on network 192.168.0.0/24 while your router's network is 192.168.1.0/24).

If my assumption is right, let's say your ONT's address is 192.168.0.1, then SSH into your router and issue the following command

ifconfig $(nvram get wan0_ifname):0 192.168.0.2 netmask 255.255.255.0

now see if you can ping your ONT from the router.

ONT address -192.168.11.1
Router address - 192.168.50.1

 

[Jeffrey Young]

ONT address -192.168.11.1
Router address - 192.168.50.1

So, in that case, you could use;

ifconfig $(nvram get wan0_ifname):0 192.168.11.2 netmask 255.255.255.0

You should be able to this too using a static route, but I suspect you are running into the firewall on the ONT.

 

[Erah]

So, in that case, you could use;

ifconfig $(nvram get wan0_ifname):0 192.168.11.2 netmask 255.255.255.0

You should be able to this too using a static route, but I suspect you are running into the firewall on the ONT.

That worked! I'm able to ping the ONT from the router and access the ONT web interface using a static route. Thank you very much for the help.

 

[Erah]

So, in that case, you could use;

ifconfig $(nvram get wan0_ifname):0 192.168.11.2 netmask 255.255.255.0

You should be able to this too using a static route, but I suspect you are running into the firewall on the ONT.

However after a reboot, I can no longer access the ONT web interface.

 

[Jeffrey Young]

No, it won't survive a reboot. When I sit down at my computer tomorrow, I will send instructions on how to add this to a Merlin script so it will servive a reboot. Working off of a tablet at moment.

 

[Erah]

No, it won't survive a reboot. When I sit down at my computer tomorrow, I will send instructions on how to add this to a Merlin script so it will servive a reboot. Working off of a tablet at moment.

Okay, sounds good!

 

[Jeffrey Young]

To make this survive a reboot, you will have to create or modify the want-event script in /jffs/scripts.

In the wan-event script, put the following code (adding the #!/bin/sh as the very first line only if you are creating the script for the first time, otherwise if there is already a wan-event script, the first line should already be there).

#!/bin/sh

if [ "$1" = "0" ] && [ "$2" = "connected" ];then
    ifconfig $(nvram get wan0_ifname):0 192.168.11.2 netmask 255.255.255.0
fi

if [ "$1" = "0" ] && [ "$2" = "stopping" ];then
    ifconfig $(nvram get wan0_ifname):0 down
fi

If you had to create the script, make sure you set the execute permission (chmod u+x /jffs/scripts/wan-event

 

[Erah]

To make this survive a reboot, you will have to create or modify the want-event script in /jffs/scripts.

Script wasn't there in jffs/scripts so I used nano to create the wan-event file. As for rights & permissions, what should I set it to? Currently it's on 0766 rwxrw-rw-.

 

[Jeffrey Young]

What it is set to is fine. Virtually everything that runs on the router is root anyway. But if you are concerned, 700 is good.

 

[Erah]

What it is set to is fine. Virtually everything that runs on the router is root anyway. But if you are concerned, 700 is good.

Okay. Just rebooted the router a few times to test the script and it survives. Everything works flawlessly. Thank you Jeffrey for your time and effort in making this work!

 

[bacon612]

Okay. Just rebooted the router a few times to test the script and it survives. Everything works flawlessly. Thank you Jeffrey for your time and effort in making this work!

@Erah can you test a theory with me? I'm also on a BE88u and had the issue with the GUI static route setting not allowing me to access the PON.

I also realized that my port forwarding cant be configured through the Asus GUI. I wonder if these two issues are related. Could you try to forward a random port and then check to see if it's working for you, please?

Edit: Also want to confirm if you're using Merlin 3006.102.3 like I am.

 

[Jeffrey Young]

@Erah can you test a theory with me? I'm also on a BE88u and had the issue with the GUI static route setting not allowing me to access the PON.

I also realized that my port forwarding cant be configured through the Asus GUI. I wonder if these two issues are related. Could you try to forward a random port and then check to see if it's working for you, please?

Edit: Also want to confirm if you're using Merlin 3006.102.3 like I am.

It is more than likely that your PON's firewall is getting in the way of the static route. The firewall is likely denying access from any other subnet then it's own. Creating the alias address on the Asus Router on the same subnet as the PON gets around the firewall issue.

 

[bacon612]

It is more than likely that your PON's firewall is getting in the way of the static route. The firewall is likely denying access from any other subnet then it's own. Creating the alias address on the Asus Router on the same subnet as the PON gets around the firewall issue.

This PON is more like a fancy swtich. It has no firewall.

WAS-110 - PON dot WIKI

We're unlocking the FTTP edge with the freedom of choice through shared knowledge and open standards while empowering SOHO operators by kicking the ISP CPE to the curb

pon.wiki

ifconfig $(nvram get wan0_ifname):0 192.168.0.2 netmask 255.255.255.0

This from your post above also allowed me to ping 192.168.11.1 and access the PON Web UI. Just like @Erah . Using the asus menu to put the static route in did nothing for me, either. I am also having issues with firewall settings in the Asus web ui having to manually script iptable rules. And so, i am wondering if @Erah and I are running the same firmware and maybe theres a bug in it.