No Internet connectivity when using Advanced DMZ

[brandon1]

This morning I noticed that my UDM Pro showed a no internet connectivity and my WAN IP being my external IP. After restarting my Bell modem, toggling advanced DMZ, and restarting my UDM Pro, I still had no internet connectivity (and my WAN IP being my external IP). Should I turn off Advance DMZ and allow my UDM Pro to get an internal IP, I am able to connect to the internet. 

Did something change on the Bell side? Why would I get no internet connectivity using Advance DMZ?

[Dns]

Same issue here, Toronto, since 10:30pm. Device under ADMZ gets assigned an internal IP 169.1.1.1 rather than the public IP. I’m using a UDM-SE as gateway/router behind the Gigahub.

[BellPatricia]

Good day @Amaury & @Dns,

Thank you for testing out our suggestions above.

We recommend that you try and put a VIP on your WAN interface with address 169.1.1.1, so that the firewall responds to ARP request from the modem at it's WAN for that address. If this fails, then try additionally unblocking bogons at the WAN interface.

- Patricia
 

[Etienne T]

Hi there,

I have similar issues, it seems to happen when Bell changes my public IP. Then for some reason the Hub seems unable to assign the new one to my router and gives it the 169.1.1.1 instead. 
Deactivating the DMZ, rebooting and reactivating the ADMZ fixes it. But it isn’t optimal. 
No way to have a permanent bridge option?

I’ve tried several routers in the past and it happened with all of them.
Now that I am about to get a UDM-Pro, is it possible to plug the Bell fiber directly in the UDM-Pro using a SFP/SFP+ module and avoid all this?

[Vanadiel]

No, you would need the home hub 3000 for that, as it has a separate GPON module. The home hub 4000 has it soldered to the board. There is a way of doing it, but it's complicated and not worth the time as the UDM-PRO cannot sync at anything else besides 1 or 10 gig on the SFP+ port.

You would be limited to 1/1 regardless of your profile speed. You would need something like the Mikrotik RB5009 to sync the SFP+ module properly with Bell.

[Etienne T]

@Vanadiel, thanks. 🙂
So I guess it will be from the Hub4000 10G port to the 2.5G wan port of the UDM. 

But I’ll still have to deal with the ADMZ loss of IP assignment issues. 

[Vanadiel]

I would use the 10 gig port on the UDM rather than the 2.5 G port.

[Etienne T]

You mean the SFP+ wan port? So with a RJ45 to SFP+ adapter. 
Looking at the specs, the only two WAN ports on the UDM are a 1G/2.5G RJ45 (depending on version) and a 10G SFP+ port. 

[Vanadiel]

Yes, I connected mine to my main switch with the SFP+ port. You can buy them directly from Ubiquiti as a patch cord with the modules attached to it, and they are guaranteed to work properly with the UDM.

[Etienne T]

Perfect. I’ll do that. 🙂
I guess I was stuck on: it’s either 1 or 10G with this port. 
(I’ll buy their RJ45 to SFP patch cable if they have one, and use it between the H4000 and the UDM-Pro)

I’ll also try and compare performances between using the ADMZ vs PPPoE approach. 
Hopefully we will get true bridge capacity at some point. 

[Vanadiel]

UDM will struggle with PPPOE. The Mikrotik RB5009 will struggle less as it supports hardware offloading. However it uses Mikrotik's own Router OS for configuration and can be very overwhelming if not familiar with the options. There's a lot of options, like a lot.

You can try the online Router OS demo here. No password needed.

[maxrob]

So I use the TPlink Deco router mesh thing and have the Gigahub. Would this work for me too? And do I need any credentials to get the SFP to work?

[Vanadiel]

That is a completely different topic that ADMZ and PPPOE. The mesh setups usually work well, and if you follow the manufacturers instructions should be easy to set up. You would not need to worry about SFP modules.

[maxrob]

Oh, no no, I'm also having the ADMZ issue. 169.1.1.1 all the time.

[Vanadiel]

Would have to know a little bit more about your setup. You would not need ADMZ for a mesh network under normal circumstances, unless for some reason you absolutely need an external IP for your mesh network.

[maxrob]

Thanks.

Bell Gigahub to TP-Link Deco mesh system, so I'm double natted. Put the Deco system as the ADMZ device and it gets 169.1.1.1. I once got the external IP but it wouldn't actually connect to the net. I have some issues because of the double network.

So I was reading this and thought the SFP+ you were mentioning might work for me.