Enrique Alfaro

2022-03-10 08:06:43 By : Ms. Ivy Liu

Community of fiber, mobile and ADSL usersLast month (December 2021) I replaced my FTTH connection with Movistar, with which I had been using for several years, for a lower cost alternative.My installation was pre-HGU with an Alcatel-Lucent i240 ONT and a Comtrend WAP-5813n router.The latter was replaced by a Mikrotik RB951G-2HnD that has withstood all the speed increases until it ended with 1 Gbps symmetrical fiber.With the change of company, I thought that Digi would continue to offer two individual devices (ONT + router), so it would be enough to just replace the router they installed to have all the functionality I need (and solve some problems) that the other routers do not offer. operator equipment.I read several tutorials about how to extract the PPPoE credentials from the ONT and the bridge mode configuration of the ONT in anticipation of the change.Also the differences between resold fiber (NEBA) and direct fiber (Smart, in the case of Digi).To my surprise, it seems that since mid-2021, Digi has started to replace the equipment supplied to the customer (a ZTE ONT and a router that I do not know) with an all-in-one equipment, the Huawei OptiXstar HG8147X6.If you were caught up in the change at the beginning of this happening, you could request to replace this all-in-one kit with two separate ones.But now, it seems that Digi is forcing technicians to install this Huawei solution, which although it has better wireless performance, it has even less configuration possibilities than previous equipment.The HG8147X6 cannot be configured in bridge mode, so its internal ONT cannot be used to directly connect another router to one of its Ethernet ports.It is possible that this functionality will be added later via a firmware update, but for now (January 2022) this is not the case.There is also no possibility to modify Digi's DNS (which causes me problems with some of the services that I have running at home) and to create custom routes.Therefore, I decided to investigate how to switch to two neutral equipment, ONT and router, in order to have all the configuration possibilities that I had before the change of operator.This tutorial is focused on the replacement of equipment with a Digi Smart fiber supply, not resold by third parties (since for these it is possible to reuse other equipment such as Movistar's HGU reconfiguring its idONT).As a reference, this tutorial is motivated by the one found in this link: How to change the ZTE F601 v7 ONT for a Ufiber Loco over Digi fiber, which contemplates the substitution of one ONT for another in case of already having two independent devices.We need an ONT compatible with the Digi OLTs used for the service.There are several Huawei or ZTE devices that are compatible with the process (and can be purchased second-hand), but I am going to focus on two Ubiquiti models that can serve this purpose, due to their availability and price:Both devices have practically the same technical characteristics, differing only in the power supply mode (PoE vs. micro-USB) and aesthetics (one has a screen showing the bandwidth used and the other only has light indicators).For this tutorial, the UFiber Loco, purchased from Amazon Spain, has been used.In this case we have a wide variety of compatible equipment on the market (we can even take advantage of some old ones that we have).We just have to make sure that it has support for VLANs and has a configurable PPPoE client.There may be incompatibilities with some of the devices, but it's hard to cover all the variables.In my case, I am going to reuse my old Mikrotik RB951G-2HnD, which still meets my needs, although it is not mandatory to stay with this manufacturer.I have also personally tested others from Mikrotik such as the RB750Gr2 (discontinued) and the RB750Gr3 (recommended), both of which are sufficient to handle a symmetrical 1 Gbps connection.1- We plug in the power of our ONT and wait about a minute for it to boot.Check that the activity indicators light up.2- Now, we will have to connect by Ethernet to the ONT.For this, it is necessary to manually configure the IP address of our network adapter, since the ONT does not assign one automatically.The default address of the ONT is 192.168.1.1, so we will choose one within that range for our equipment (for example, 192.168.1.2).Remember to disable other network adapters that you have in use (both wired and wireless) to avoid connection problems to the equipment.2- Once connected to the ONT, we open a web browser and enter the address 192.168.1.1.We will find a login page.The default credentials are:3- Once authenticated, we proceed to update the device's firmware to the latest version (v.4.3.1) since it may come from the factory with v.3.XX. You can check it on the initial loaded page (Dashboard ).You can find the downloads and documentation of the equipment on the official Ubiquiti website or on the following links:Once the firmware image (*.img file, for example UF-ONU.UF-LOCO.v4.3.1.2036-c1f.210421.0703.img) has been downloaded, we will proceed to update it.Accessing the System tab, we click on the Upload link to the right of Upload firmware and perform the update.The computer will restart after it, give it some time to respond and reload the page.Check if the firmware version is correct in the Dashboard tab.4- We go to the Services tab and activate, at least, the SSH Server in case it is deactivated, saving changes.This step may require a computer restart.5- We access the GPON tab and modify the OLT profile value in the drop-down menu, selecting Profile 4 in our case.We can leave the default values ​​in the LOID Authentication and PLOAM Password Authentication sections.This is because Digi identifies the client ONT by its serial number, not by using an idONT or access passwords.These changes will require a computer restart.6- For this step we need the serial number (SN) of the Huawei HG8147X6 supplied by Digi.You can find this number on the packaging box or on the equipment label (in the attached image the values ​​are modified for security reasons).Write down this number along with the MAC of your device because we will need them again later in the process.In the System tab, we will enter the serial number in the Device name field, but making some modifications.Let's say our SN is 4857544361DE3C1A.If we look at the first 4 pairs of hexadecimal digits (48 57 54 43) and convert them to ASCII, we get HWTC, which identifies the equipment manufacturer (in this case Huawei) to the OLT.Therefore, we will write in the field HWTC61DE3C1A, which is the same SN but with its first half converted to text.This is a common practice, as can be seen in the Dashboard tab with the SN UBNT54A231EF, which is the default SN of the ONT.7- In the previous step, we commented that Digi uses the SN of the ONT to authenticate us before the OLT.That is why we must also change this in our UFiber.The problem is that Ubiquiti does not support the web interface to make this change, so we will have to resort to a utility called UFiber.Configurator for it.You can download the latest version of the tool (v0.1.3 at the time of writing this tutorial) from here.Once downloaded (UFiber.Configurator-Windows.zip) we will unzip it using 7-Zip (there must be some problem in the compression of this version and it does not unzip with the native Windows utility).You can get 7-Zip (free) here.Once the compressed file is opened, you will find another internal directory without an extension.If you enter it (or add the .zip extension) you can see the content (another directory called win-x64).Extract the same to a folder to be able to run the utility later.8- Once the tool has been prepared, we open a command console (cmd or PowerShell) and try to enter the following command with our ONT still connected by Ethernet and with the SSH service activated:Note that the command has as an argument --serial the SN that we noted in step 6, as well as the MAC of the device.It is important to use the --dry-run argument to test the operation of the command before writing to the ONT memory.If we have not obtained any error and we have reached a message similar to this......then the command test will have been successful.If so, we can run the command again, this time without the --dry-run attribute to patch the ONT with our configuration.If we have not obtained any error and we have reached a message similar to this...…then the ONT has been successfully patched and we will only need to restart it from the web interface for the changes to finish applying.The advantage of using this tool instead of modifying the parameters directly from SSH is that it allows the changes to persist after a reboot or loss of power to the ONT, something that is not achieved by changing the SN of the ONT from the console.9- We enter the ONT web interface again and check in the Dashboard section that the Serial number has changed from UBNTXXXXXXXXX to our HWTC61DE3C1A.10- If everything has gone correctly, we can now plug the fiber patch cord into the equipment.After about 20-30 seconds, we should be able to see in that same tab the State connected at the top, indicating that the ONT has successfully authenticated with the OLT.This can also be easily checked through the indicator lights on the device.You can find the meaning of the Uf Loco LEDs here.11- With this, the ONT is fully configured for the service and we won't have to touch it anymore.In the event that no connection is achieved, we must check if we have made a mistake when copying the SN or MAC of the Huawei equipment, if we have entered it wrong in the web interface or in the executed commands.It is possible that Digi is using OLTs from another manufacturer in your area, so the "Profile 4" defined in step 5 may not be valid.In these cases, in some forums the following relationships are indicated:Some users in this forum have not been able to make their connection work (the ONT marked State connected but they could not get an Internet connection) with Profile 4. I strongly recommend, if you reach this point, try profiles 3 or 2 and go back to check if we have connection.Remember that after changing the connection profile, we must apply the SN and MAC patch again with the UFiber Configurator utility, as indicated in step 7 of this tutorial.You can get more information about it in this post and on this other page.In order for Digi to assign us an IP to navigate with and the DNS addresses, we must configure a PPPoE client with the credentials that they provide us.In the HG8147X6 the user can be extracted for the connection, but the password is encrypted.That is why, as holders of the line, we must contact Digi so that they provide us with the data for the connection.I recommend using the "Chat on the web" to make the request, since in less than 5 minutes they can send you an email resolving your request without unnecessary waiting for a call.With these credentials we configure our router:TODO - Add configuration section for Mikrotik router.01/16/2022 - Extended section of point 11 commenting on the possibility of trying different connection profiles in case of Internet connectivity problems.It seems that I am not very good with the editor to format the text and I can no longer modify the post.If any moderator gives me a hand I would appreciate it, to make it easier to follow.You did great crack, don't worry.I no longer see the message from the moderator that he was going to edit the tutorial to format it correctly.In any case, thank you very much for the work.It has become much more readable and organized.Good content!I hope they install a WiFi 6 router with a separate ONT like the new one they brought to NEBA.You never know when they are going to change teams.Apparently this Huawei has already been deployed in Romania for a few months and in the end it has ended up arriving here.Hopefully in the future they add the option of putting it as a bridge to take advantage of the ONT.I don't know if it's a matter of the manufacturer not supporting it or if it's covered by Digi.At least we have some alternative (although with additional financial outlay).It is really well documented and the most interesting thing is the detail of how Digi authenticates over its own fiber, which serves to extrapolate it to other ONTs.Very good contribution.Thank you very much!The truth is that I have been visiting these forums for years and I have never found something useful to participate with, so I am glad that I started with something worthwhile.It is curious that they have the issue of ONT identification so controlled at Digi.Movistar does not hide much the issue of ONT credentials, it even continues to use the same ones for PPPoE as in ADSL times.We all owe you a few cases of Cruzcampo, man.Thank you, I hope it will be useful.I know that I still have to detail the router configuration part in more detail, but surely I can link some complete tutorial about it better than I can write.In our Digi FAQ there are many tutorials linked... and there it is explained how to use a neutral router in several of them)(The one that was missing is yours ;) )If you have not activated the aero theme, which is hidden in Windows 10, I will tell you long live Windows 8.1, which unfortunately ends shortly in 2023You got me, lol.In effect, it's a Windows 8.1 PC, a Dell Latitude E6230 that I've always taken with me on my adventures with networking, Wi-Fi, and more, and they're tough as hell.I have a dell latitude e6400Does Windows 10 have Aero?The one with transparencies type wvista and w7??I've been using it since 2015 until I changed to 11 a couple of months ago (I put a post here) and I never saw it 😮😮Yes.It can be activated with certain commands.The easiest way is with the winaero tweaker app which also lets you disable telemetry and more crap that comes with windowsWell, I didn't know.I'll check it out just out of curiosity.Regarding w8.1, horrible interface but stable as a rock, yes sir.Piece of tutorial man.My congratulations.Hello, thank you very much for the tutorial, does anyone know why in the UFiber Loco (recently purchased and updated to version 4.3.1) I get some fields disabled (and I can't configure them?) For example, in the "services" they all appear disabled… (I only have the ethernet cable connected, I haven't connected the fiber cable yet, but I don't think it has anything to do with it…)Nothing forget it, when changing the profile to Profile 4 it already allows me to change the fields correctly... how strange isn't it?This happened to me too when I was fiddling around with the setup for the first time.I think the fields were re-enabled when I saved pending changes in another tab.Something a bit confusing in the firmware, it looks like a bug.The same happened to me.I thought that the steps were changed in order, that is, we should first select profile 4 in GPON and then activate the ssh 🤔UFiber Loco + Asus AX82U working… not bad ;-)Thank you very much, actually with the factory router I was "pretty good" in terms of speeds, but the problem is that it has a series of "pre-fixed" things like the DNS server... with this I can have my DHCP with my DNS Servers , etc.etc.PS: Do you know if there is any tutorial to optimize the configuration of the Asus Router (I don't know if for Digi in particular or for any provider)?With the serial.It is not an accurate test either, it lasts too little to finish with the transients...Do you know if there is any tutorial to optimize the configuration of the Asus RouterI'm glad it served you!Hello, your message gives me hope that it can be configured with my Asus rt-ac5u, but I can't get internet with it.In the message below I comment what happens to me: Hello, thank you very much for the tutorial.I have bought the…Thanks for the tutorial, are you sure that the Nano G also works?I think I read in Amazon reviews that it didn't work for Digi.We cannot rely much on Amazon's comments because they do not specify if they are with a resold fiber service (with which they could use the ONT directly through the idONT) or if they are with Digi's direct fiber (with which they would have to carry out the entire process that is explained in the tutorial, and that in the comments they do not comment on having done it).Both the UFiber Loco and the Nano G have the same technical characteristics and compatibility.Only the inclusion of the PoE power supply changes in the case of the Nano G (with the removal of the microUSB port for power) and the inclusion of an interface with LEDs in the more complete device (with information on bandwidth, attenuation, etc. ).In any case, if someone goes through the tutorial and can't get it to work, it may be due to common errors such as the OLT of your panel being from another manufacturer and having to use another connection profile (instead of "Profile 4", use the 2 or 3) as it has happened to this user:Asus RT-AC5U B1 Router + ONT Ubiquiti Loco - Digi Smart Fiber.I can't get connection!Still, by buying from reputable stores with a decent return policy, you can always go back and not throw your money away in case we can't get the ONT to work with our service.Moderators |Standards |Legal information |We enter for affiliated purchases