Equipment Support > Hardware By Brand > ZyXEL > Using USG with an ONT modem

Using USG with an ONT modem

Interesting setup with VLANs on the WAN interface. I've never done this but it should be possible with USG. Here is what I think you should do:

1) On the Interface/VLAN tab, setup vlan35 interface using WAN zone. Let it obtain IP via DHCP.

2) On the Zone tab, you should see the vlan35 along with your existing ge? interface. Remove the ge? from the WAN zone.

3) (Optional) If you want to access the ONT diagnostic pages etc. that happens to use non-tagged packets, you can create a new zone and add the interface you have removed in previous step to that zone and you will probably need to configure static IP for that interface (unless ONT implements a DHCP server using non-tagged packets). You will probably need to enter some firewall rules to let the packets flow between this ZONE and the LAN.

reply to Anav
Okay I had mixed results.

I was able to pull an IP on the VLAN interface but I could not get data on any computers.

I cloned the mac address on the wan2 ethernet interface
I put wan as the zone and wan2 as the base on the vlan settings and get IP automatically. I think these parts worked.

The hard part was the wan 2 ethernet other settings.
I put in for static ip of 0.0.0.0 I had to fill a mask for this and ended up using 0.0.0.0
I am hoping this is where I went wrong as an explanation. I also tryed unchecking block intra zone traffic to see if that was interfering but no change.

half way there what else do I need to do.
by the way I have a second wan1 with cable on it, and I do not remember how I tell the router that wan2 is the primary.

THeir are metric settings for each interface but i seem to recall perhaps its an order thing on a list??
--
Ain't nuthin but the blues! "Albert Collins".
Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner"

LlamaWorks Equipment

Bump, need help getting this working.
(figured out my dual wan setup, via trunk, no worries there).

Concur dual wan is not the issue. NO I did not check logs lol. I dont have any firewall rules that would pertain here. Not sure but will check if there needs to be some firewall rules for vlan interfaces I didnt think about that or know if there are any.

Can you confirm if the mask 0.0.0.0 is okay legit to put with the ip of 0.0.0.0 as a static address for the ethernet interface??

reply to Anav
Tried again same results, nothing untoward in the logs. It shows vlan 35 becoming active, and router recreates dual wan rules. But I only have access to WAN1. When I remove WAN1, I have no internet access.

I checked my WAN to zywall rules and basically I have before the default rule one that blocks https. Then the default rule and then I added one after that blocks everything. This works fine all the time.
In other words,
the router works (fibre op on WAN2) with or without cable(wan1) enabled, when using the actioin tech in bridge mode to the USG.
Yes there are lots of packets both wan to zywall and wan to lan1 that are dropped in the logs but so what, the router works fine.

The issue has to be something else. I setup the vlan with the correct tag and it happily pulls an IP from the ONT (its in the WAN zone and affiliated correctly with WAN2.

Is there an additional policy route to make??
Is there an additional zone or trunk rule to make??
Do I have to use bridge to get vlan and ethernet interfaces connected?
Grasping at straws but maybe there is an issue with DNS in this configuration???

Where is bbarrera when you need him LOL.

--
Ain't nuthin but the blues! "Albert Collins".
Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner"

LlamaWorks Equipment

Anav:

There may be clues in the support notes. In particular, the ZLD 2.21 Support Notes, starting on page 12. Frankly, I haven't internalized these or your present architecture, so I can't be too helpful, but one possible cause of your problem might be the manner in which load balancing is performed vis a vis the present naming conventions you have had to adopt.

kirby

I will have a re-look as I perused the support notes this morning and did not see anything particular and then read thru the UG again and have a few idea.

A VLAN to the WAN (there is a song waiting to be born here) is not something I've ever read about before, so you may be a pioneer of sorts.

kirby

No what it is doing is ensuring the WAN port or interface is part of the VLAN35 that the ISP has running on their fibreop for internet. They have another VLAN running for IPTV (vlan33).
Hmm maybe its because IM using open dns servers those are delineated on the lan1 page though.

Im thinking on the ethernet interface of wan2, that although 0.0.0.0 works for IP address I have to either put something diff than 0.0.0.0 for the mask or ignore the mask entry and put something in the for the gateway??

Thanks will give trunk idea a go. I do have a configured Trunk already for my spillover dual wan setup but it includes wan 2 and not specifically vlan 35.......... hopefully thats the golden ticket.

Okay I stuck the VLAN in the truck (replaced the WAN2 with VLAN35). Still had no problems pulling an IP and noticed in the vlan traffic stats that it talked to the DNS servers I have entered in the lan1 side. BUT NO JOY for internet traffic.

For some reason there is a disconnect between LAN side and WAN2 - VLAN side.

Not sure what you mean by see default route for vlan35.

In the vlan setting I state that the VLAN interface belongs to the WAN zone.
I state that the ethernet interface it runs (base port) on is wan2.
Im thinking maybe I should select LAN1 for zone????

Note on the Wan Ethernet interface, the type External is automatically selected. The manual states tthat the zywall automatically assigns snat settings and default route for traffic it routes from internal interfaces to external interfaces

--
Ain't nuthin but the blues! "Albert Collins".
Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner"

LlamaWorks Equipment

reply to Anav