help with PPPoE connection

[andresmorago]

Hello all.

I was hoping you could provide me some help with an issue im having.

Long story short:
New fiber ISP
FIber terminal has PPPoE pass-trough enabled
ASUS AC68U running 386.1_2. Completely wiped several times.

I have configured PPPoE with ISP credentials. I get a public IP from ISP and im able to both ping and do name resolution from router itself and clients.
MTU and MRU are configured same than ISP fiber terminal and i have confirmed it with ping google.com -f -l 1452

At the end, websites dont load at all. Neither in wired or wired connections

Log here

https://codeshare.io/G7v0rL

Spoiler: DNS

nslookup
Default Server:  RT-AC68U-5358
Address:  10.0.4.1

> espn.com
Server:  RT-AC68U-5358
Address:  10.0.4.1

Non-authoritative answer:
Name:    espn.com
Addresses:  2600:9000:21de:d800:d:ac18:e2c0:93a1
          2600:9000:21de:aa00:d:ac18:e2c0:93a1
          2600:9000:21de:7c00:d:ac18:e2c0:93a1
          2600:9000:21de:d200:d:ac18:e2c0:93a1
          2600:9000:21de:5800:d:ac18:e2c0:93a1
          2600:9000:21de:7a00:d:ac18:e2c0:93a1
          2600:9000:21de:f400:d:ac18:e2c0:93a1
          2600:9000:21de:1e00:d:ac18:e2c0:93a1
          13.227.29.42
          13.227.29.29
          13.227.29.59
          13.227.29.117

 

[el pescador]

DNS.....

 

[andresmorago]

DNS.....

thanks. as i mentioned, name resolutions are working ok as im able to ping websites normally

 

[AndreiV]

The correct MTU for PPOE is 1492 , try playing with that setting , I would also try another DNS provider just to prove a point. Ping doesn't mean your DNS is 100% .

 

[andresmorago]

The correct MTU for PPOE is 1492 , try playing with that setting , I would also try another DNS provider just to prove a point. Ping doesn't mean your DNS is 100% .

thanks. i have tried several MTU/MRU. 1380, 1400, 1452, 1480, 1492. So far, nothing. websites dont load and all.

ISP ONT has 1480 as MTU

I have configured google dns for some peace of mind testing. Again, name resolution does work as im getting ip addresses when asking for websites and pings work everywhere. i dont think this is a dns issue

 

[el pescador]

My setup is semi bridge with vlan....2 services running off the original 3 in one box and the asus running the internet van.
Even with this setup and "ONT" with DNS set , i cant surf....

 

[andresmorago]

My setup is semi bridge with vlan....2 services running off the original 3 in one box and the asus running the internet van.
Even with this setup and "ONT" with DNS set , i cant surf....

what can you recommend me to check then? i have tried full bridge and cant get a public ip on the router. i would only require internet as phone is still managed by ONT and i dont have IPTV

 

[AndreiV]

PPOE Passthrough ....... On ?

 

[andresmorago]

yeah. that was my initial goal but didnt work. router was getting an IP but websites werent loading.
i tried full bridge again (pppoe pt off) but this time i didnt configure the VLAN portion (i thought it was neccesary). Now i was able to get an ISP IP address and web navigation

 

[el pescador]

Thats how my isp do it.Movistar...the configuration ONT side means you dont need to set the vlan instructions on the router...only issue i had was if i used the automatic DNS it wouldnt work...odd as the ONT clearly has the DNS set for that vlan to the router lol

 

[envyapple]

turn off the guest network you have one. try guest network on next fw.