This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do I create a Bridge, LTE (4G) to Ethernet?

I have been using a Dovado Pro (in bridge mode) with a Huawei E3276 for some years and my internet connection use to drop up to 10 times/day.
Reconnecting took up to 10 min.

I just changed to UTM 9 and now my USB modem is quite stable.
Reconnecting only takes a couple of sec.

Next step is to bridge my Huawei E3276 to an Ethernet interface.
I can't seem to find a guide for this.

Just to clarify; the LTE connection is my only internet connection. This is not to be used as fail-over.

I have 2 unused Ethernet interfaces available thanks to the upgrade the other day.
StarTech.com part# USB31000SW
USB-to-Ethernet Gigabit based on ASIX AX88179.

Anyone?



This thread was automatically locked due to age.
  • So you are trying to get your LTE USB dongle to work as an ethernet device on the UTM?

    --------------------
    Private: 1 Mini ITX (EMB-CV1), Atom D2550 1.86 GHz Dual Core CPU, 8GB RAM, UTM 9.3 Home License, AP100
    Business: 2 UTM320 in HA (Active/Passive), Full Guard, 7 AP50's, 1 AP100

  • Correct!
    Same functionality as in the Dovado router.
  • You have it plugged in and it's working, set up as an interface, right? I'm confused then why you need to bridge it. It will be the WAN interface, then your clients would connect via an ethernet LAN interface.

    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • The Dovado was used ONLY to enable the use of an LTE modem.
    I have a Palo Alto taking care of firewall/routing and I also have published services.
    That's why the Dovado was set up in Bridge Mode.

    I replaced the Dovado due to the instability of the LTE modem ...and that's why I need the UTM in Bridge Mode.
    I might remove my PaloAlto in the future but for now, I really need Bridge Mode.
  • Good enough. The context helps. Fairly easy to create a bridge. It's done at Interfaces & Routing > Bridging > Status. Enable bridging, select the interfaces that will be part of the bridge, then click the create bridge button. If you select an already configured interface for Convert Interface, the bridge will inherit the settings of that interface. I've never tried this and don't have an LTE USB to test with.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • I don't have the menu section "Bridging" under "Interfaces & Routing".
    Is this something not available in v. 9.351-3 (Home use only license)?

    Sub-sections under "Interfaces & Routing" are:
    Interfaces
    Quality of Service (QoS)
    Uplink Monitoring
    IPv6
    Static Routing
    Dynamic Routing (OSPF)
    Border Gateway Protocol
    Multicast Routing (PIM-SM)
  • Sorry, I was using an older version for the path. It's now built into interfaces. From the built-in help:

    To configure a Ethernet Bridge, proceed as follows:

    On the Interfaces tab, click New Interface.
    The Add Interface dialog box opens.

    Make the following settings:
    Name: Enter a descriptive name for the interface.

    Type: Select Ethernet Bridge from the drop-down list.

    Note – If you edit an existing interface you can change the type and convert the interface into an Ethernet Bridge. After the conversion a note will be displayed under the changed interface in the interface overview. An converted Ethernet Bridge can also be converted back to an Ethernet interface.

    Bridge selected NICs: You can select individual NICCloseds that should form the bridge. This requires that there are unused network interface cards available. Select one or more of them to form the bridge. It is also possible to specify a Convert Interface that will be copied to the new bridge.

    Dynamic IP Activate if you want to use a dynamic IP address.

    IPv4 Address: Enter the IP address of the interface.

    Note – IP address 0.0.0.0 is possible in Ethernet Bridge. In this case you have an bridge without address.

    Netmask: Select a network mask (IPv4) and/or enter an IPv6 network mask.

    IPv4/IPv6 default GW (optional): Select this option if you want to use a statically defined default gateway.

    Default GW IP (optional): Enter the IP address of the default gateway.

    Note – You can configure an interface to have an IPv4 and an IPv6 address simultaneously.

    Comment (optional): Add a description or other information.

    Optionally, make the following advanced settings:
    MTU: Enter the maximum transmission unit for the interface in bytes. You must enter a value fitting your interface type here if you want to use traffic management. A sensible value for the interface type is entered by default. Changing this setting should only be done by technically adept users. Entering wrong values here can render the interface unusable. An MTU size greater than 1500 bytes must be supported by the network operator and the network card (e.g., Gigabit interface).By default, an MTUClosed of 1500 bytes is set for the Ethernet interface type.

    Default route metric: Enter the default route metric for the interface. The metric value is used to distinguish and prioritize routes to the same destination and is valid for all interfaces.

    Proxy ARP: To enable the function, select the checkbox. By default, the Proxy ARP function is disabled (Off).This option is available on broadcast-type interfaces. When you switch it on, UTM will "attract" traffic on that interface for hosts "behind" it and pass it on. It will do that for all hosts that it has a direct interface route for. This allows you to build "transparent" network bridging while still doing firewalling. Another use for this feature is when your ISPClosed's router just puts your "official" network on its Ethernet interface (does not use a host route).

    Optionally, make the following advanced bridge settings:
    Allow ARP broadcasts: This function allows you to configure whether global ARP broadcasts should be forwarded by the bridge. If enabled, the bridge will allow broadcasts to the MAC destination address FF:FF:FF:FF:FF:FF. This, however, could be used by an alleged attacker to gather various information about the network cards employed within the respective network segment or even the security product itself. Therefore, the default setting is not to let such broadcasts pass the bridge.

    Spanning Tree Protocol: Enabling this option will activate the Spanning Tree Protocol (STP). This network protocol detects and prevents bridge loops.

    Caution – Be aware that the Spanning Tree Protocol is known to provide no security, therefore attackers may be able to alter the bridge topology.

    Ageing timeout: The amount of time in seconds after which an inactive MAC address will be deleted. The default time is 300 seconds.

    Allow IPv6 pass through: Enabling this option will allow IPv6 traffic to pass the bridge without any inspection.

    Virtual MAC address: Here you can enter a static MAC address for the bridge. By default (and as long as the entry is 00:00:00:00:00:00), the bridge uses the lowest MAC address of all member interfaces.

    Forwarded EtherTypes: By default, a bridge configured on the Sophos UTM only forwards IP packets. If you want additional protocols to be forwarded, you have to add their EtherType to this box. The types have to be entered as four-digit hexadecimal numbers. Popular examples are AppleTalk (type 809B), Novell (type 8138), or PPPoE (types 8863 and 8864). A typical use case would be a bridge between your REDClosed interfaces which should forward additional protocols between the connected networks.

    Click Save.
    The system will now check the settings for validity. After a successful check the new interface will appear in the interface list. The interface is not yet enabled (toggle switch is gray).

    Enable the interface.
    Click the toggle switch to activate the interface.

    The interface is now enabled (toggle switch is green). The interface might still be displayed as being Down. The system requires a short time to configure and load the settings. Once the Up message appears, the interface is fully operable.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • Already tried that.
    With an unused USB modem, I can't create a bridge. The modem does not show in the list of free NICs ("Bridge Selected NICs").

    Editing an already setup USB modem works better. I change Type to Ethernet Bridge and the modem is available in the list.
    However, when I try to save, I get error: "Invalid convert interface on bridge".

    Tested another thing: If I try to alter "type" to Ethernet on the already setup USB modem. I get error:
    "The ethernet standard interface object cannot use USB serial interface objects for the interface hardware attribute."