pfSense Support Subscription

Author Topic: ATT Uverse RG Bypass (0.2 BTC)  (Read 2502 times)

0 Members and 1 Guest are viewing this topic.

Offline dc81

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
ATT Uverse RG Bypass (0.2 BTC)
« on: April 29, 2016, 02:30:43 pm »
I'm trying to avoid using the gateway provided by ATT. It seems like it's been solved for EdgeRouter and *nix based routers (https://www.dslreports.com/forum/r29903721-AT-T-Residential-Gateway-Bypass-True-bridge-mode~start=264). Hopefully someone will be able to get this working on pfsense too.

0.2 Bitcoins (~$90) to anyone that can get it done.

Offline zevlag

  • Jr. Member
  • **
  • Posts: 26
  • Karma: +2/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #1 on: May 09, 2016, 06:28:02 pm »
i'm willing to talk about this and help if you want.

But first we need to define the problem, and the desired solution.

Having read the linked thread, there are two options:
  • Bridge the ONT and RG interfaces filtering to allow only 802.1X packets
  • Run an application to Proxy 802.1X packets that are received between the interfaces
Which are you hoping for?

I think the first can be done with a kernel patch.  The latter would be more difficult for me.

Also, if I understand the thread correctly, this solves only the authentication issue, it isn't any configuration for TV or phone services.

Offline dc81

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #2 on: May 10, 2016, 01:11:22 pm »
Goal is for my traffic to bypass the RG. I have a pfsense box with multiple gigabit ports. I want to connect the ONT and RG to the pfsense box and have LAN traffic on the remaining ports.

Currently:

ONT > RG > pfSsense > LAN

Want:
Code: [Select]
ONT > pfSense
      |    |
      RG   LAN

So I'm not really concerned with any specific option, but I would want to be able to keep my gigabit speed. My box has an Atom C2558 if that matters.

Offline zevlag

  • Jr. Member
  • **
  • Posts: 26
  • Karma: +2/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #3 on: May 10, 2016, 01:23:59 pm »
If I provide a kernel patch, are you familiar with compiling kernels in FreeBSD?

Offline dc81

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #4 on: May 10, 2016, 02:04:43 pm »
I have not, but it seems fairly straightforward. I have a backup pfsense in a vm so the downtime is not an issue.

Offline dc81

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #5 on: June 02, 2016, 10:36:28 am »
any progress?

Offline dc81

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #6 on: April 26, 2017, 02:08:49 pm »
bump... anyone?

Offline ermax

  • Newbie
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #7 on: May 11, 2017, 07:43:00 am »
I would love to see this too.

Offline pyrodex

  • Jr. Member
  • **
  • Posts: 30
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #8 on: September 21, 2017, 01:07:26 pm »
Looks like it maybe more viable now with a python script:

https://github.com/jaysoffian/eap_proxy

See https://github.com/jaysoffian/eap_proxy/issues/2 also since it seems PFRING is required but BSD doesn't have PFRING.

I've heard someone got this working on a debian box running shorewall so maybe just adapting it for BSD could be the solution.

Offline variance

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #9 on: October 24, 2017, 05:00:15 pm »
Looks like it maybe more viable now with a python script:

https://github.com/jaysoffian/eap_proxy

See https://github.com/jaysoffian/eap_proxy/issues/2 also since it seems PFRING is required but BSD doesn't have PFRING.

I've heard someone got this working on a debian box running shorewall so maybe just adapting it for BSD could be the solution.

I've seen a report of this solution (https://github.com/kuwerty/eapolproxy)
eap proxy sucessfully compiled and running on pfsense after installing some dependencies  (libstdc++).
and it passing packets.


Quote
I checked out the eapolproxy, and successfully compiled it on my freebsd dev box.  After getting some dependencies (libstdc++) onto pfsense, it does start and appears to be passing the EAP traffic from the RG on OPT1 up to the WAN interface where the ONT is, but nothing ever comes back - it just keeps spamming the EAPOL start and logoffs.  I will have to keep playing with it, but I feel like the solution is close.  It would be good to have some others try this...


Source: (http://www.dslreports.com/forum/r31632582-)


as for pfring dependency.. i don't know if thats kernel or something that needs to be compiled specifically for freebsd...
my gigapower install doesn't happen for another day or 2. I'm going to go ahead and try compiling the this eapolproxy myself to see if I can get it working.
« Last Edit: October 24, 2017, 05:03:47 pm by variance »

Offline rajl

  • Jr. Member
  • **
  • Posts: 26
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #10 on: November 21, 2017, 01:11:42 pm »
If this feature bounty still open?  I may have an elegant FreeBSD solution to the problem.

Offline random003

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Re: ATT Uverse RG Bypass (0.2 BTC)
« Reply #11 on: December 08, 2017, 06:48:03 am »
I'll give you $100 in bitcoin for a set-and-forget solution that works on pfsense.
« Last Edit: December 08, 2017, 07:10:58 am by random003 »