TalkTalk HG635 on VDSL with multiple static IP addresses

Post by Abandoned Trolley
hi there

Hi,

Post by Abandoned Trolley
If there's anybody out there using the TalkTalk business service on VDSL
with MORE THAN ONE static IP address, then I would be interested to hear
from you if you have managed to separate them in any way using the
supplied "super" router - which appears to be a Huawei HG635 with custom
firmware.

Does TalkTalk give out an 8 block (/27) with 6 usable IPs, one of which
will be for the router? Or do they do something else?

What do you mean by "separate them"? What are you wanting to do?

Post by Abandoned Trolley
Alternatively, if you fancy having a rant about TalkTalk, Huawei or
Openreach, or giving me a lecture about how I don't need the static IP
addresses in the first place then maybe you could give this one a miss.

Last time I checked, you are a paying customer and can request what ever
you want, for what ever reason you want it. Who would try to tell you
otherwise or say that you don't need a static IP? It doesn't matter if
you need it or not. If you want it and are willing to pay for it,
that's sufficient.

--
Grant. . . .
unix || die

Abandoned Trolley

2019-02-20 11:00:44 UTC

Post by Grant Taylor

Post by Abandoned Trolley
hi there

Hi,

Post by Abandoned Trolley
If there's anybody out there using the TalkTalk business service on
VDSL with MORE THAN ONE static IP address, then I would be interested
to hear from you if you have managed to separate them in any way using
the supplied "super" router - which appears to be a Huawei HG635 with
custom firmware.

Does TalkTalk give out an 8 block (/27) with 6 usable IPs, one of which
will be for the router? Or do they do something else?
What do you mean by "separate them"? What are you wanting to do?

I have separate unix boxes for mail server and web server so I would
like different port forwarding rules within the router. I think its
either a question of router functionality or .. maybe they have sent me
the wrong router. I was hoping that an existing TalkTalk business
customer might have trodden this path before.

FWIW I believe its a block of 4 addresses, 2 of which are usable - I am
only paying for 2

AT

---
This email has been checked for viruses by AVG.
https://www.avg.com

Richard Tobin

2019-02-20 12:49:54 UTC

Post by Grant Taylor
Does TalkTalk give out an 8 block (/27) with 6 usable IPs

That would be /29.

-- Richard

Grant Taylor

2019-02-21 04:45:24 UTC

Post by Richard Tobin
That would be /29.

*FACEPALM*

I spend too much time working with /27s at work that this was habitual.

Thank you for the correction Richard.

Now where did I put the towel to wipe the egg off.

--
Grant. . . .
unix || die

Johann Beretta

2019-02-21 07:34:52 UTC

Post by Grant Taylor
It doesn't matter if
you need it or not. If you want it and are willing to pay for it,
that's sufficient.

I think you'll find, that as IPV4 space continues to dwindle, many
companies are requiring justification for this diminishing resource.

Took me nearly a month to get another Class C block and I own an ISP...
_and_ I'm paying for the block. Simply wanting to pay for addresses is
not enough reason when plenty of other people will pay for it as well
and can demonstrate a need.

Paul Cummins

2019-02-21 13:44:00 UTC

Post by Johann Beretta
IPV4 space continues to dwindle,

You mean continues to fill. IP4 is a finite, constant space.

--
Paul Cummins - Always a NetHead
Wasting Bandwidth since 1981

Graham.

2019-02-21 14:15:40 UTC

Post by Paul Cummins

Post by Johann Beretta
IPV4 space continues to dwindle,

You mean continues to fill. IP4 is a finite, constant space.

Next you'll be telling us that disk partitions are the demarcations,
and not the volumes they encompass :)

--
Graham.

%Profound_observation%

Johann Beretta

2019-02-21 07:37:39 UTC

Post by Grant Taylor
Does TalkTalk give out an 8 block (/27) with 6 usable IPs, one of which
will be for the router? Or do they do something else?

A /27 is 255.255.255.224

That's 32 hosts, not 8.

Nick Leverton

2019-02-21 09:36:29 UTC

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.

You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.

Nick

--
"The Internet, a sort of ersatz counterfeit of real life"
-- Janet Street-Porter, BBC2, 19th March 1996

Abandoned Trolley

2019-02-21 19:47:59 UTC

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.
You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.
Nick

I have a particular reason for not wishing to contact the ISP about this
issue for the time being, but ...

I have to say that I am astonished at the difficulty in getting any kind
of sensible solution for this

AT

---
This email has been checked for viruses by AVG.
https://www.avg.com

Graham J

2019-02-21 20:12:36 UTC

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.
You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.
Nick

I have a particular reason for not wishing to contact the ISP about this
issue for the time being, but ...
I have to say that I am astonished at the difficulty in getting any kind
of sensible solution for this

You're making a rod for your own back!

Get a proper ISP and a sensible router - but then you specifically
discounted that line of advice in your initial post.

Begs the question - why?

--
Graham J

Abandoned Trolley

2019-02-21 20:19:23 UTC

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.
You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.
Nick

I have a particular reason for not wishing to contact the ISP about
this issue for the time being, but ...
I have to say that I am astonished at the difficulty in getting any
kind of sensible solution for this

You're making a rod for your own back!
Get a proper ISP and a sensible router - but then you specifically
discounted that line of advice in your initial post.
Begs the question - why?

I am open to any suggestions about any router which will actually do the
job ..

AT

---
This email has been checked for viruses by AVG.
https://www.avg.com

Char Jackson

2019-02-22 01:30:44 UTC

On Thu, 21 Feb 2019 20:19:23 +0000, Abandoned Trolley

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.
You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.
Nick

I have a particular reason for not wishing to contact the ISP about
this issue for the time being, but ...
I have to say that I am astonished at the difficulty in getting any
kind of sensible solution for this

You're making a rod for your own back!
Get a proper ISP and a sensible router - but then you specifically
discounted that line of advice in your initial post.
Begs the question - why?

I am open to any suggestions about any router which will actually do the
job ..

Actually, you've also been vague about what "the job" is. You apparently
have two servers on which you've configured publicly routable IPs, even
though the two servers run completely different services. With what
you've provided so far, a single routable IP would be fine and you'd
steer traffic based on its destination port. Also, any run of the mill
NAT router would then work.

It seems, though, that there might be more to the story. Hence, the
"vague" part.

Abandoned Trolley

2019-02-22 08:54:55 UTC

Post by Char Jackson
On Thu, 21 Feb 2019 20:19:23 +0000, Abandoned Trolley

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.
You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.
Nick

I have a particular reason for not wishing to contact the ISP about
this issue for the time being, but ...
I have to say that I am astonished at the difficulty in getting any
kind of sensible solution for this

You're making a rod for your own back!
Get a proper ISP and a sensible router - but then you specifically
discounted that line of advice in your initial post.
Begs the question - why?

I am open to any suggestions about any router which will actually do the
job ..

Actually, you've also been vague about what "the job" is. You apparently
have two servers on which you've configured publicly routable IPs, even
though the two servers run completely different services. With what
you've provided so far, a single routable IP would be fine and you'd
steer traffic based on its destination port. Also, any run of the mill
NAT router would then work.
It seems, though, that there might be more to the story. Hence, the
"vague" part.
---
This email has been checked for viruses by AVG.
https://www.avg.com

"or giving me a lecture about how I don't need the static IP addresses
in the first place then maybe you could give this one a miss" ...

AT

Graham J

2019-02-22 09:36:28 UTC

Post by Char Jackson
On Thu, 21 Feb 2019 20:19:23 +0000, Abandoned Trolley

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable
configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.
You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.
Nick

I have a particular reason for not wishing to contact the ISP about
this issue for the time being, but ...
I have to say that I am astonished at the difficulty in getting any
kind of sensible solution for this

You're making a rod for your own back!
Get a proper ISP and a sensible router - but then you specifically
discounted that line of advice in your initial post.
Begs the question - why?

I am open to any suggestions about any router which will actually do the
job ..

Actually, you've also been vague about what "the job" is. You apparently
have two servers on which you've configured publicly routable IPs, even
though the two servers run completely different services. With what
you've provided so far, a single routable IP would be fine and you'd
steer traffic based on its destination port. Also, any run of the mill
NAT router would then work.
It seems, though, that there might be more to the story. Hence, the
"vague" part.
---
This email has been checked for viruses by AVG.
https://www.avg.com

"or giving me a lecture about how I don't need the static IP addresses
in the first place then maybe you could give this one a miss" ...

He does need ONE static IP address, but for what he has described any
basic NAT router will be fine.

So we really do need to know why the OP has made these arbitrary
restrictions. Otherwise we're going to suggest a big Cisco router
running BGP and costing several £1000.

--
Graham J

Abandoned Trolley

2019-02-22 10:09:31 UTC

Post by Char Jackson
On Thu, 21 Feb 2019 20:19:23 +0000, Abandoned Trolley

Few if any ISP supplied routers seem to recognise in their GUIs that
one might have more than one external IP address. Usually it would need
command line configuration of the firewall, via telnet or ssh. I gather
though that the Talktalk Business router has different firmware from their
domestic ones. Searching suggests there are uploadable
configurations
for the domestic ones to enable ssh access, but it wasn't clear whether
they also worked on the business firmware.
You've probably tried already, but does their business support line
have sufficient clue to help ? Surely someone else must have asked them
how to do this.
Nick

I have a particular reason for not wishing to contact the ISP about
this issue for the time being, but ...
I have to say that I am astonished at the difficulty in getting any
kind of sensible solution for this

You're making a rod for your own back!
Get a proper ISP and a sensible router - but then you specifically
discounted that line of advice in your initial post.
Begs the question - why?

I am open to any suggestions about any router which will actually do the
job ..

Actually, you've also been vague about what "the job" is. You apparently
have two servers on which you've configured publicly routable IPs, even
though the two servers run completely different services. With what
you've provided so far, a single routable IP would be fine and you'd
steer traffic based on its destination port. Also, any run of the mill
NAT router would then work.
It seems, though, that there might be more to the story. Hence, the
"vague" part.
---
This email has been checked for viruses by AVG.
https://www.avg.com

"or giving me a lecture about how I don't need the static IP addresses
in the first place then maybe you could give this one a miss" ...

He does need ONE static IP address, but for what he has described any
basic NAT router will be fine.
So we really do need to know why the OP has made these arbitrary
restrictions. Otherwise we're going to suggest a big Cisco router
running BGP and costing several £1000.

Thanks for the suggestion, but as you have no idea what I "need" and
clearly have no intention of answering the original question I am not
sure of the value of your input.

AT

Johann Beretta

2019-02-22 19:51:06 UTC

Post by Graham J
He does need ONE static IP address, but for what he has described any
basic NAT router will be fine.
So we really do need to know why the OP has made these arbitrary
restrictions. Otherwise we're going to suggest a big Cisco router
running BGP and costing several £1000.

MikroTik has any number of routers that are far more affordable and just
as powerful as anything Cisco offers in the same class.

Just as an example, they offer a 72 core rackmount that will push 80
Gbps for around $3K.

Of course there are ones that are much less than that, but they all
share the same OS.. So a $50 MT has the same capabilities as a $3K one,
as far as functionality, if not raw CPU power.

Nick Leverton

2019-02-22 09:31:29 UTC

I am open to any suggestions about any router which will actually do the
job ..

Last time I needed multiple public IPs the routing was done by an old
Pentium with a DSL adaptor, running Debian and Shorewall, so apols but
I can't help on that one ... Unfortunately the HG635 isn't supported
by OpenWRT either (which I am currently getting to grips with to expand
the capabilities of my current router) so no help to be had there.

Nick

--
"The Internet, a sort of ersatz counterfeit of real life"
-- Janet Street-Porter, BBC2, 19th March 1996

Abandoned Trolley

2019-02-22 10:13:58 UTC

I am open to any suggestions about any router which will actually do the
job ..

I would be interested to know if OpenWRT provides support for multiple
WAN IPs ( preferably via GUI ?) as I have a couple of suitable router
hosts. I have tried on the DD-WRT forum but cannot find any clear
answers there.

AT

---
This email has been checked for viruses by AVG.
https://www.avg.com

Andy Burns

2019-02-22 10:31:12 UTC

Post by Abandoned Trolley
I would be interested to know if OpenWRT provides support for multiple
WAN IPs ( preferably via GUI ?)

yes it does.

Abandoned Trolley

2019-02-22 13:27:09 UTC

Post by Andy Burns

Post by Abandoned Trolley
I would be interested to know if OpenWRT provides support for multiple
WAN IPs ( preferably via GUI ?)

yes it does.
---
This email has been checked for viruses by AVG.
https://www.avg.com

Thanks for that.
I had been thinking about it anyway for a wireless bridge, but fixed
that problem using DD-WRT.
I managed to download the OpenWRT binary and load it in to an old
router. Its looking quite promising, although there appears to be a bit
of a learning curve :-\

AT

Nick Leverton

2019-02-22 14:55:48 UTC

Post by Andy Burns

Post by Abandoned Trolley
I would be interested to know if OpenWRT provides support for multiple
WAN IPs ( preferably via GUI ?)

yes it does.
---
This email has been checked for viruses by AVG.
https://www.avg.com

Good luck, hope it gets you somewhere. This link looks as though it may
be helpful, although it's confusing that you have to add extra interfaces
to your WAN interface. That's not how iptables/nftables does it under
the bonnet, it has very little concept of interfaces ...
https://forum.openwrt.org/t/solved-how-to-configure-static-block-multiple-static-ips-on-wan/13815/14

Nick

--
"The Internet, a sort of ersatz counterfeit of real life"
-- Janet Street-Porter, BBC2, 19th March 1996

Grant Taylor

2019-02-22 19:37:09 UTC

This post might be inappropriate. Click to display it.

Johann Beretta

2019-02-22 19:28:55 UTC

Post by Abandoned Trolley
I have a particular reason for not wishing to contact the ISP about this
issue for the time being, but ...
I have to say that I am astonished at the difficulty in getting any kind
of sensible solution for this
AT
---
This email has been checked for viruses by AVG.
https://www.avg.com

Mikrotik routers can handle any number of IP addresses being assigned to
any particular port you want. Be warned, there is a bit of a learning
curve, but it's not horrible. RouterOS (the OS for Mikrotik) is well
documented. If you can't quite figure it out, there's plenty of folks
on Upwork.com who sell their expertise for reasonable rates.

Tim Chick

2023-06-21 14:25:35 UTC

Post by Abandoned Trolley
hi there
If there's anybody out there using the TalkTalk business service on VDSL
with MORE THAN ONE static IP address, then I would be interested to hear
from you if you have managed to separate them in any way using the
supplied "super" router - which appears to be a Huawei HG635 with custom
firmware.
Alternatively, if you fancy having a rant about TalkTalk, Huawei or
Openreach, or giving me a lecture about how I don't need the static IP
addresses in the first place then maybe you could give this one a miss.
AT
---
This email has been checked for viruses by AVG.
https://www.avg.com

Yes, I have this setup. You get 4 ip addresses in a block. Any openwrt router can do the port forward based on destination ip address. I'm using a Asus router which I've stuck my own firmware on. Now have FTTP, but when I had VSDL, used a Broadcom router in bridged mode - gave me 10% more throughput compared to talk talk router.

Abandoned_Trolley

2023-06-21 15:55:11 UTC

Post by Tim Chick

interesting

although I am not sure why you have responded to a thread that's more
than 4 years old, and still made no attempt to answer the original question.

All part of the enduring charm of the internet ...

--
random signature text inserted here

2023-07-03 03:11:50 UTC