Use TP-Link XC220-G3v for Timbl instead of TurboFi after MAC Clone

[kuduku]

Hi guys
Needed help to change ONT after MAC cloning
made a thread at broadband.forum also - https://broadband.forum/threads/use...bl-instead-of-turbofi-after-mac-clone.227374/

Took new Timbl FTTH with 300Mbps plan . Getting 290-300 Mbps on LAN port
I want to remove ISP TurboFi ONT to TP-Link XC220-G3v by MAC Cloning . I have cloned it and setup connection on TP-Link XC220-G3v . PPPoE connects fine but cant open any websites . It can ping google DNS perfectly fine . I have tested with ISP DNS , Google DNS and Adguard DNS . No websites open
ISP has got Double NAT and DNS server IP hardcoded in ONT which reverts on every reboot . I am using Adguard DNS

I has 3 WIFI router Mesh system so my intended configuration is
Pigtail - TP-Link XC220-G3v - WAN of Mesh router which has static IP of same subnet of ONT/TP-Link XC220-G3v
I cant even give Static IP to my devices or even see LAN Hosts with ISP ONT

Bridge Mode did not work on ONT
ONT is hard coded with email address for PPPoE and ISP DNS address
Details about ONT
TurboFi

Model Name:	CPE4600
MAC:	B4-XX-XX-XX-XX-XX
Hardware Version:	TURBOFI-CPE-V2.0

Now Pics of TP-Link XC220-G3v with DNS server error after cloning

And to check the network heres TCP PING and traceroute to Google and Adguard DNS as advised by @vivek.krishnan
D:\Downloads>tcping 94.140.14.49
Probing 94.140.14.49:80/tcp - Port is open - time=94.091ms
Probing 94.140.14.49:80/tcp - Port is open - time=80.687ms
Probing 94.140.14.49:80/tcp - Port is open - time=92.401ms
Probing 94.140.14.49:80/tcp - Port is open - time=91.318ms

Ping statistics for 94.140.14.49:80
4 probes sent.
4 successful, 0 failed. (0.00% fail)
Approximate trip times in milli-seconds:
Minimum = 80.687ms, Maximum = 94.091ms, Average = 89.624ms

D:\Downloads>tcping -4 www.google.com
Probing 216.239.38.120:80/tcp - Port is open - time=16.256ms
Probing 216.239.38.120:80/tcp - Port is open - time=13.516ms
Probing 216.239.38.120:80/tcp - Port is open - time=12.201ms
Probing 216.239.38.120:80/tcp - Port is open - time=12.877ms

Ping statistics for 216.239.38.120:80
4 probes sent.
4 successful, 0 failed. (0.00% fail)
Approximate trip times in milli-seconds:
Minimum = 12.201ms, Maximum = 16.256ms, Average = 13.713ms

Traceroute - NO TTL being shown
yesterday night
D:\Downloads\tcproute\tcproute>tcproute -i 6 www.google.com
Ensuring gateway address (192.168.1.1) is in arp... OK!
Using the following values:
---------------------------
Local IP: 192.168.1.2
Local MAC:
Gateway MAC: B4:XX:XX:XX:XX:XX (Mac of ONT)
Remote IP: 142.250.207.228

Tracing route to www.google.com:80
1 53 ms 192.168.1.1 TimeExceeded
2 12 ms 100.64.0.1 TimeExceeded
3 13 ms 172.22.20.33 TimeExceeded
4 13 ms 172.22.20.161 TimeExceeded
5 14 ms as15169.del.extreme-ix.net [45.120.248.10] TimeExceeded
6 13 ms 192.178.83.251 TimeExceeded
7 13 ms 142.251.76.175 TimeExceeded
8 15 ms del12s11-in-f4.1e100.net [142.250.207.228]:80 Synchronize, Acknowledgment (port open)

Today Morning
D:\Downloads\tcproute\tcproute>tcproute -i 4 www.google.com
Ensuring gateway address (192.168.2.1) is in arp... OK!

Using the following values:
---------------------------
Local IP: 192.168.2.196
Local MAC:
Gateway MAC:
Remote IP: 216.239.38.120

Tracing route to www.google.com:80
1 36 ms 192.168.2.1 TimeExceeded
2 13 ms 192.168.1.1 TimeExceeded
3 14 ms 100.64.0.1 TimeExceeded
4 77 ms 172.22.20.33 TimeExceeded
5 30 ms 172.22.20.161 TimeExceeded
6 14 ms as15169.del.extreme-ix.net [45.120.248.10] TimeExceeded
7 13 ms 192.178.83.251 TimeExceeded
8 30 ms 142.251.54.101 TimeExceeded
9 30 ms any-in-2678.1e100.net [216.239.38.120]:80 Synchronize, Acknowledgment (port open)


Few Speedtests yesterday night from LAN port
Plan 300 Mbps UL with some FUP , not known . Getting 35-37 MBps download speed on LAN port . Downloaded Windows 11 DVD from MS

@vivek.krishnan @vishalrao @rahuljawale @burntwingzZz
Shoutout for help to any network geeks

 

[vishalrao]

I'm far from a network geek lol but first thing comes to mind is reducing MTU number from 1480 to say 1400 and other 2 things to try are disable ipv6 checkbox and disable full cone nat option.

Other things to try look at the DHCP server settings for the DNS options set to 8888 and 8844 so that your PC picks up else manually set DNS in your PC side settings and post your observations here...
.

@kuduku change ip mode drop-down in your first screenshot from ipv4+ipv6 to only ipv4?

 

[kuduku]

Tried all 3
MTU to 1400
DNS in Tplink ONT to 8888 and 8844 Did not work
Added 8888 and 8844 in PC manual DNS , did not work

Another thing observed -
while doing traceroute

tcproute -i 6 www.google.com
Ensuring gateway address (192.168.1.2) is in arp... OK!
Using the following values:
---------------------------
Local IP: 192.168.1.102
Local MAC: 04:92:
Gateway MAC: AC:XX:XX:XX:XX:XX - should be cloned ISP ONT but its of Tplink

Is cloning implementation incomplete in Tplink ? or it should be Tplink only

I'm far from a network geek lol but first thing comes to mind is reducing MTU number from 1480 to say 1400 and other 2 things to try are disable ipv6 checkbox and disable full cone nat option.

Other things to try look at the DHCP server settings for the DNS options set to 8888 and 8844 so that your PC picks up else manually set DNS in your PC side settings and post your observations here...
.

@kuduku change ip mode drop-down in your first screenshot from ipv4+ipv6 to only ipv4?

first PIC is ISP ONT , its working fine . Changing that will not affect tplink cloned ONT , will it ?

 

[vishalrao]

Kiduku I later post in ur new router first screenshot see drop-down change from ipv4+ipv6 to only ipv4 if possible?

 

[smnrock]

i guess MAC cloning is needed for EPON not for GPON. In any case, did you clone serial number of your ONT into Tp-link?

 

[kuduku]

i guess MAC cloning is needed for EPON not for GPON. In any case, did you clone serial number of your ONT into Tp-link?

no . Mine is EPON

Kiduku I later post in ur new router first screenshot see drop-down change from ipv4+ipv6 to only ipv4 if possible?

yes , will change it to ipv4 in Tplink and update
Update - TPlink WAN is now ipv4 only with Google as DNS


Traceroute to Google from ISP ONT

Traceroute from Tplink to Google with cloned MAC



Issue is Domain Name resolution not being done . Cant open any website but now will check by opening websites by IP address also

 

[smnrock]

DNS port blocked? 53?

 

[kuduku]

Checked opening websites with IP address
216.239.38.120 translates to google.com but doesn't open website
Probably DNS Port blocked by ISP . Port 80 is also blocked

 

[vishalrao]

I forgot - is there any option to clone serial number too?

 

[anmolbhard004]

but that's for gpon @vishalrao

 

[kuduku]

I forgot - is there any option to clone serial number too?

No , not in EPON

 

[vishalrao]

No , not in EPON

Apologies for not fully following this thread in detail LOL but which MAC address did you clone from your ISP EPON device? There are 2 of them , one for the WAN port and other for the PON port, if you have cloned one of them try using the other from your ISP device?

 

[rahuljawale]

GPONs are still an enigma to me and hence I dread the day when ACT decides to upgrade my 1gbps link to fiber.

However, @vishalrao's suggestion makes sense. Can you give it a try and see if that helps?

 

[kuduku]

Apologies for not fully following this thread in detail LOL but which MAC address did you clone from your ISP EPON device? There are 2 of them , one for the WAN port and other for the PON port, if you have cloned one of them try using the other from your ISP device?

I cloned WAN MAC
Let me check the other one

Checked - I can only see one MAC which is of WAN
Where can i get PON MAC ?
have these which are same , as in pic below

 

[vivek.krishnan]

@kuduku As I told you earlier, your issue is either the cloning is imperfect due to device problem OR the ISP is doing some additional checks. Until you know what that is, none of this will work. My guess is the latter.

Your ISP is blocking TCP traffic but allowing ICMP on the TPLink and the traceroute is needed to check with both the old and new hardware to ascertain where the issue is - at your end or ISP end. Hope you did this. Hence you need to give a traceroute for your ISP DNS servers and another like Google DNS to see where the issue originates.

The others pointed out are not your issue. Your ISP will mostly be doing only IPv4.

 

[kuduku]

@kuduku As I told you earlier, your issue is either the cloning is imperfect due to device problem OR the ISP is doing some additional checks. Until you know what that is, none of this will work. My guess is the latter.

Your ISP is blocking TCP traffic but allowing ICMP on the TPLink and the traceroute is needed to check with both the old and new hardware to ascertain where the issue is - at your end or ISP end. Hope you did this. Hence you need to give a traceroute for your ISP DNS servers and another like Google DNS to see where the issue originates.

The others pointed out are not your issue. Your ISP will mostly be doing only IPv4.

came back after 6 days , will check

 

[kuduku]

It was not working as they had something called Dual MAC verification.
It was successfully dialling PPPOE using device cloned MAC back but not authenticating second MAC so no internet

Finally rep came & informed that my device will work & have sent email for MAC change in their system of my Tplink original MAC
He sat for 30 min waiting for MAC approval by sys admin at Noida then left

As per him, in his control/Monitoring Panel new MAC is being shown trying to connect
Once its approved my Tplink should work perfectly

Crossed finger's, hope it end's well


Finally my MAC got added . Using Tplink modem now

 

[vivek.krishnan]

It was not working as they had something called Dual MAC verification.
It was successfully dialling PPPOE using device cloned MAC back but not authenticating second MAC so no internet

Finally rep came & informed that my device will work & have sent email for MAC change in their system of my Tplink original MAC
He sat for 30 min waiting for MAC approval by sys admin at Noida then left

As per him, in his control/Monitoring Panel new MAC is being shown trying to connect
Once its approved my Tplink should work perfectly

Crossed finger's, hope it end's well


Finally my MAC got added . Using Tplink modem now

Do you find out which was the second MAC and where it was on your system? I am a bit skeptical.

 

[kuduku]

Do you find out which was the second MAC and where it was on your system? I am a bit skeptical.

No , He did not do the second MAC thing in front of me . I was too , but it did not work . Traceroute were exact same with both ONU