So I think it was mentioned already inside of an unrelated thread that Telus now offers hard coded static IP options on business plans. I recently had the opportunity to order and try out this service.
Static IP Subnet - 5 IP $15
Static IP Subnet - 1 IP $12
The older DHCP provided version is still available
5 Static-IP addresses $12 (lack of the word subnet here)
I have a customer who ordered a new service and we asked for the new version of the Static IP plan with 5 IPs. They use a pfSense router and assuming the 5IP package works I could probably get CARP failover working if we needed to setup a second router. For dual router failover on the DHCP plan I used to always use Watchguard devices which did allow dhcp on clusters and it worked really well.
So it's some good news and some bad news.
The good news, the order went smoothly. They emailed the static IP provisioning information ahead of the appointment and it worked right away.
Email came in from "noreply_business@telus.com"
subject: "TELUS Business - Static IP configuration information"
It listed all the relevant details to configure my equipment.
Gateway IP (which I now believe is the NAH20 acting as the router)
Subnet mask
IP subnet for customer (/29)
Usable IP (a list of each of the 5 IP addresses)
As soon as it was plugged in the assigned IP addresses worked. I created virtual IP's and NAT rules so that guest network traffic shows a different public IP than internal traffic. Installing at this location was trivial, fiber was already in place at the rack. The tech must have either set up the equipment ahead of time or someone gave it to him this way, because it has our Static IP hand written on the cover of the router in permanent marker. So something "special" was done to this NAH20 before it arrived.
Now the bad.
It appears to require the NAH20 router. They used the Nokia SFP ONT unit inside their router not the XGS-PON media converter since we only ordered 1Gbit service which I was hoping meant I could bypass their router.
I tried removing the SFP ONT module and it does work directly plugged into our router but the static IP's do not work, I was able to get a dynamic IP from the Telus DHCP server and verify it was working at the right speed, but none of the assigned static IP info was working until I put it back into the telus nah20 router. I tried running a packet capture to see if I could reverse engineer the routing protocol being used, but I got no inbound hints from the Telus side with the SFP module. I am guessing they do some sort of dynamic routing protocol like BGP or perhaps some GRE tunneling. I cannot sniff the GPON traffic and the NAH doesn't show me anything useful. Couldn't sit and play with it all day though, but I'm not sure what else I could try.
The annoying.
That NAH runs pretty hot, and after a week it is dead so tech is coming to replace it tomorrow. It was unusually hot too, so I think it likely was just a dud from the factory and it has cooked itself to death. Like it was uncomfortable to touch the top of the NAH20 not just the SFP module but the whole thing was crazy hot.
This client has Shaw connection as a backup, so not an emergency that it was down. In fact nobody noticed it was down except people working from home.
It takes up to 30 minutes to reconnect after the dynamic DNS updated the hostname their VPN client uses. If the router didn't email me notification it changed WAN gateways and updated dynamic DNS or if the one guy working from home didn't call me because he got kicked out I might not have know. So YAY for multi WAN failover on pfsense working as promised.
[att=1]
[att=2]
[att=3]
↧