News for hackers. Stuff that matters.

A comment on AT&T Fiber in the SF Bay Area is flipping bits. Parent comment

Re:AT&T Fiber in the SF Bay Area is flipping bits by Shank on Monday December 07, 2020 @11:52PM (#25341991)
The 5268ac pace router is the worst ISP provided router I've ever had, and I've been an Xfinity/Comcast customer, and I've even had a connection in Wyoming. I detailed my experience with it in a review of a third-party router, and found numerous issues along the way [0]. My favorite is that DMZ+ mode, which is what they offer instead of a traditional DMZ mode, just has some weird MTU issue that leads git and other services to break horribly when running behind a third party router. The solution? Don't use DMZ+ mode. Instead, put the router into NAT mode, and then port forward all of the ports to one private IP address. Bonkers. This is sold as an official-looking solution on the AT&T website for a "speed issue." [1]

This is all because AT&T believes that the edge of their network is not the PON ONT/OLT, but rather, the router they issue you. If you want to be on their network, you have to use their router as some part of the chain.

My latest discovery is that in doing this, the router can actually get super hot operating at gigabit speeds for extended periods of time. When this happens, it magically starts dropping packets. Solution? Aim a fan at the router so it has "thermal management."

Total. Garbage. I'd switch to Spectrum if they had decent upload speed, but alas, they don't in my building.

[0]: https://particle17.xyz/posts/amplifi-alien-thoughts/#appendi...

[1]: https://www.att.com/support/article/u-verse-high-speed-inter...

[ Parent | on HN ]
Re:AT&T Fiber in the SF Bay Area is flipping bits by exged on Tuesday December 08, 2020 @12:39AM (#25342286)
If you have some time, you can MITM the 802.1x auth packets [1] and use a less crappy router. I run this with a VyOS router and the same 5268ac that you have, but it works with things like Ubiquiti routers too. The only catch is you need three NICs on your router, but a cheap USB 10/100 one will do for the port that connects to the 5268ac.

Another option is getting the 802.1x certificate out of a hacked router, but it's not possible as far as I know on the 5268ac. You could buy a hackable ATT router but they're not cheap. Some sellers even sell the key by itself.

Mysteriously, doing this fixed an issue I previously had where SSHing into AWS would fail.

[1] https://github.com/jaysoffian/eap_proxy

[ Parent | on HN ]
Re:AT&T Fiber in the SF Bay Area is flipping bits by ThatPlayer on Tuesday December 08, 2020 @01:48AM (#25342611)
There's also one for pfsense, which is what I used before I dumped my cert out of my router

https://github.com/MonkWho/pfatt

[ Parent | on HN ]
Re:AT&T Fiber in the SF Bay Area is flipping bits by stevencorona on Tuesday December 08, 2020 @01:55AM (#25342642)
Huge bummer but the next generation of ATT routers with onboard ONT don’t work this bypass :(
[ Parent | on HN ]
Re:AT&T Fiber in the SF Bay Area is flipping bits by Rychard on Tuesday December 08, 2020 @10:14AM (#25346217)
Do you know the model numbers and/or have any other information about these new routers?

I'm currently using eap_proxy with my BGW210, and it's been a huge improvement, but I fear the day the device needs to be replaced with a newer model.

[ Parent | on HN ]
Re:AT&T Fiber in the SF Bay Area is flipping bits by lights0123 on Tuesday December 08, 2020 @09:51PM (#25354751)
BGW320 is the new model, which I had installed about a month ago. It isn't a simple swap, as it uses a SFP module combined with the modem's internal ONT instead of a separate ONT, so I've heard it's only used in new installations. More about it: https://www.dslreports.com/forum/r32605799-BGW320-505-new-ga... (although theirs says 1550nm while mine says 1310nm)

However, it has 5Gbit Ethernet, hasn't re-enabled WiFi on automatic firmware updates, and has only screwed with my IP Passthrough configs once which was resolved with a router reboot. (that was possibly my router's fault, it seemed like it was unable to fetch a new DHCP lease)

[ Parent | on HN ]
Re:AT&T Fiber in the SF Bay Area is flipping bits by amluto on Tuesday December 08, 2020 @12:09AM (#25342107)
Apparently you can extract the 802.1x key from the router and then use your own router, and someone even has a script to MITM the connection between the router and ONT.
[ Parent | on HN ]