PPPoE with VX-160CE on not working CRS125

RouterOS Beginner Basics
1

Hi all,

I’m trying to get the SFP VX-160CE https://shop.meconet.de/Hardware-Einzelteile/Netzwerkkarten/SFP-Module/VX-160CE-VDSL2-SFP-Modem-Remote-Telco-Grade::117361.html working on a CRS125 model.

Configuration seemed straight forward (https://www.meconet.de/meconet_news_8.html):

  • add VLAN 7
/interface vlan
add interface=sfp1 name=sfp1-v7 vlan-id=7



  • add PPPoE
/interface pppoe-client
add add-default-route=yes disabled=no interface=sfp1-v7 max-mru=1492 max-mtu=1492 name=pppoe-out1 password=PWD use-peer-dns=yes user=USER

However, the DSL link doesn’t work.

14:11:43 pppoe,ppp,info pppoe-out1: connecting... 
14:11:53 pppoe,ppp,info pppoe-out1: terminating... - disconnected 
14:11:53 pppoe,ppp,info pppoe-out1: disconnected

This is the configuration:

# sep/13/2019 14:04:59 by RouterOS 6.45.3
# model = CRS125-24G-1S-2HnD
/interface bridge
add igmp-snooping=yes name=bridge-lan
/interface ethernet
set [ find default-name=ether1 ] name=ether1-Fritzbox speed=100Mbps
set [ find default-name=sfp1 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface vlan
add interface=sfp1 name=sfp1-v7 vlan-id=7
/interface pppoe-client
add add-default-route=yes disabled=no interface=sfp1-v7 max-mru=1492 max-mtu=\
    1492 name=pppoe-out1 password=PWD use-peer-dns=yes user=\
    AnschlusskennungZugangsnummer0001@t-online.de
/ip dhcp-server
add address-pool=dhcp_lan disabled=no interface=bridge-lan lease-time=3d10m \
    name=dhcp-lan
/interface bridge port
add bridge=bridge-lan interface=ether1-Fritzbox trusted=yes
/ip neighbor discovery-settings
set discover-interface-list=none
/ip address
add address=192.168.178.2/24 interface=bridge-lan network=192.168.178.0
/ip cloud
set update-time=no
/ip dhcp-server network
add address=192.168.178.0/24 dns-server=192.168.178.97,192.168.178.1,1.1.1.1 \
    gateway=192.168.178.1 ntp-server=197.168.178.1,194.25.134.196,217.91.44.17
/ip dns
set servers=192.168.178.97,192.168.178.1,1.1.1.1
/ip firewall address-list
add address=192.168.178.27 list=allowed_to_router
add address=192.168.178.23 list=allowed_to_router
add address=0.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=172.16.0.0/12 comment=RFC6890 list=not_in_internet
add address=192.168.0.0/16 comment=RFC6890 list=not_in_internet
add address=10.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=169.254.0.0/16 comment=RFC6890 list=not_in_internet
add address=127.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=224.0.0.0/4 comment=Multicast list=not_in_internet
add address=198.18.0.0/15 comment=RFC6890 list=not_in_internet
add address=192.0.0.0/24 comment=RFC6890 list=not_in_internet
add address=192.0.2.0/24 comment=RFC6890 list=not_in_internet
add address=198.51.100.0/24 comment=RFC6890 list=not_in_internet
add address=203.0.113.0/24 comment=RFC6890 list=not_in_internet
add address=100.64.0.0/10 comment=RFC6890 list=not_in_internet
add address=240.0.0.0/4 comment=RFC6890 list=not_in_internet
add address=192.88.99.0/24 comment="6to4 relay Anycast [RFC 3068]" list=\
    not_in_internet
/ip firewall filter
add action=accept chain=input comment="default configuration" connection-state=\
    established,related
add action=accept chain=input src-address-list=allowed_to_router
add action=accept chain=input protocol=icmp
add action=drop chain=input
add action=fasttrack-connection chain=forward comment=FastTrack \
    connection-state=established,related
add action=accept chain=forward comment="Established, Related" \
    connection-state=established,related
add action=drop chain=forward comment="Drop invalid" connection-state=invalid \
    log=yes log-prefix=invalid
add action=drop chain=forward comment=\
    "Drop tries to reach not public addresses from LAN" dst-address-list=\
    not_in_internet in-interface=bridge-lan log=yes log-prefix=!public_from_LAN \
    out-interface=!bridge-lan
add action=drop chain=forward comment=\
    "Drop incoming packets that are not NATted" connection-nat-state=!dstnat \
    connection-state=new in-interface=bridge-lan log=yes log-prefix=!NAT
add action=drop chain=forward comment=\
    "Drop incoming from internet which is not public IP" disabled=yes \
    in-interface=bridge-lan log=yes log-prefix=!public src-address-list=\
    not_in_internet
add action=drop chain=forward comment=\
    "Drop packets from LAN that do not have LAN IP" in-interface=bridge-lan \
    log=yes log-prefix=LAN_!LAN src-address=!192.168.178.0/24
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge-lan
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add distance=1 gateway=192.168.178.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh address=192.168.178.27/32,192.168.178.23/32,192.168.178.189/32 port=\
    2200
set www-ssl address=192.168.178.27/32,192.168.178.189/32 certificate=\
    zuhause.crt_0 disabled=no
set api disabled=yes
set winbox address=192.168.178.27/32,192.168.178.189/32
set api-ssl disabled=yes
/ip ssh
set forwarding-enabled=remote strong-crypto=yes
/lcd pin
set hide-pin-number=yes pin-number=7412
/lcd interface pages
set 1 interfaces=\
    ether13,ether14,ether15,ether16,ether17,ether18,ether19-Galerie-links
/system clock
set time-zone-name=Europe/Berlin
/system logging
set 0 topics=info,!firewall
add action=remote topics=critical
add action=remote topics=error
add action=remote topics=firewall
/system ntp client
set enabled=yes primary-ntp=192.168.178.1 secondary-ntp=194.25.134.196
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=none
/tool mac-server ping
set enabled=no

This is the log after a reboot:

13:47:39 system,info router rebooted 
13:47:42 pppoe,ppp,info pppoe-out1: initializing... 
13:47:42 pppoe,ppp,info pppoe-out1: connecting... 
13:47:42 bridge,info "bridge-lan" mac address changed to D4:CA:6D:0C:22:38 
13:47:43 bridge,info hardware offloading activated on bridge "bridge-lan" ports: e
ther1-Fritzbox 
13:47:43 interface,info sfp1-v7 link up 
13:47:43 pppoe,ppp,info pppoe-out1: terminating... 
13:47:43 pppoe,ppp,info pppoe-out1: disconnected 
13:47:43 pppoe,ppp,info pppoe-out1: initializing... 
13:47:43 pppoe,ppp,info pppoe-out1: connecting... 
13:47:43 pppoe,ppp,info pppoe-out1: terminating... 
13:47:43 pppoe,ppp,info pppoe-out1: disconnected 
13:47:44 interface,info sfp1 link up (speed 1G, full duplex) 
13:47:53 pppoe,ppp,info pppoe-out1: terminating... - disconnected 
13:47:53 pppoe,ppp,info pppoe-out1: disconnected 
13:47:53 pppoe,ppp,info pppoe-out1: initializing... 
13:47:53 pppoe,ppp,info pppoe-out1: connecting... 
13:48:03 pppoe,ppp,info pppoe-out1: terminating... - disconnected 
13:48:03 pppoe,ppp,info pppoe-out1: disconnected 
13:48:04 pppoe,ppp,info pppoe-out1: initializing... 
13:48:04 pppoe,ppp,info pppoe-out1: connecting...

Is there some more logging that might show a hint to the problem?

Any help is much appriciated!
Best,
Christian

2

Hi Christian,

What does the led on the side of the Modul indicates? Is the Sync complete?
Try to set SFP to 1GBit without auto Negotiation
What DSL Speed you Are getting?

3

The LED in the left side lights constantly. So the SFP has a connection on one end.

The other one is blinking (long - long - short). It seems that DSL training is running. Sync doesn’t complete.

The DSL line has 50+ Mbit with Fritz box 7590. I will try to set our top 1GBit without auto negotiation.

4

Hi,

I set sfp1 to 1Gbit. No success.

I think their might be two problems:

  • sfp1 has no link. I think it had a link once but I cannot reproduce it. I first have to fix this because if the SFP does not have a link no packages will go through.


  • DSL training does not complete. Maybe the Autonegotiation is the problem.

Any thoughts?

Best,
Christian

5

Looks like you don’t have Sync (Telekom Vectoring)??

6

Hi,

Finally I got a link again. However, only when I set sfp1 to autonegotiation :frowning:

[mikroroot@MikroTik] > /interface ethernet export 
# sep/21/2019 11:49:31 by RouterOS 6.45.3
# model = CRS125-24G-1S-2HnD
/interface ethernet
set [ find default-name=ether1 ] name=ether1-Fritzbox speed=100Mbps
set [ find default-name=sfp1 ] advertise=100M-half,100M-full,1000M-half,1000M-full

[mikroroot@MikroTik] > /interface ethernet monitor sfp1                           
                      name: sfp1
                    status: link-ok
          auto-negotiation: done
                      rate: 1Gbps
               full-duplex: yes

Without autonegotiation:

[mikroroot@MikroTik] > /interface ethernet export 
# sep/21/2019 11:52:49 by RouterOS 6.45.3
# model = CRS125-24G-1S-2HnD
/interface ethernet
set [ find default-name=ether1 ] name=ether1-Fritzbox speed=100Mbps
set [ find default-name=sfp1 ] advertise=100M-half,100M-full,1000M-half,1000M-full auto-negotiation=no
    
[mikroroot@MikroTik] > /interface ethernet monitor sfp1 
                    name: sfp1
                  status: no-link
        auto-negotiation: disabled

So at the moment I cannot try with manually set speed. :frowning:

I forgot to mention that my VDSL provider is Deutsche Telekom and that the line is capable of 100Mb.
Can someone confirm that VX-160CE is working with Deutsche Telekom?

Best,
Christian

7

I’m not really sure. This is what my FritzBox says:

DSL aktiv seit:
18 Minuten
VDSL2 17a G.Vector (ITU G.993.5)

Internet > DSL-Informationen

 		Empfangsrichtung 	Senderichtung
DSLAM-Datenrate Max.	kbit/s	63680	12736
DSLAM-Datenrate Min.	kbit/s	1152	-
Leitungskapazität	kbit/s	138444	39770
Aktuelle Datenrate	kbit/s	63678	12736
Nahtlose Ratenadaption		aus	aus
 			
Latenz		fast	fast
Impulsstörungsschutz (INP)		42	45
G.INP		an	an
 			
Störabstandsmarge	dB	29	28
Trägertausch (Bitswap)		aus	aus
Leitungsdämpfung	dB	11	8
ungefähre Leitungslänge	m	192	
 			
Profil	17a		
G.Vector		full	full
 			
Trägersatz		B43c	B43c
8

Hi,

If i remember right, Telekom Vectoring doesnt work,
I will try it Next week, we only Use this config with our own Hardware (DSLAM)

9

I have returned the SFP. I’m still searching for a SFP VDSL2 that works with Deutsche Telekom (incl. Vectoring). I’d appriciate any hint to other working products.