Just in case someone else wants to get a static IP working:

Check out the configured broadband networks in your Zyxel routers (Network Setting/Broadband). You will find two networks there: One labelled MANAGEMENT and the other one labelled INTERNET. One of them has a VLAN assigned (in my case 36). Take note of that VLAN ID.

Next, go to the "System Info" from the router homepage and note down the MAC Address of the INTERNET WAN.

In your UDM, go to "Settings"/"Internet". Select your WAN port and select Manual settings. Enable the VLAN ID and set it to the one you wrote down earlier. Then enable MAC Address Clone and set it to the MAC Address you noted down earlier. Disable IPv6 Connection and set the IPv4 Connection to DHCPv4.

That's it. You should now have access to your static IP.

Sorry I was away for the weekend, you’ve already worked out the steps needed.

Hi
I just joined grain and despise using ISP routers, I want to switch to using my own router. I have an Asus Router AX82U and plan on getting the SFP converter. when using the SFP converter do you just connect the ethernet to the WAN port? Also does it work right away or are there any configurations needed on the WAN settings? Does Zyxel router need to be set to bridge mode too?

Edited by Shader123 (Fri 07-Nov-25 14:49:59)

In reply to a post by Shader123:

Hi
I just joined grain and despise using ISP routers, I want to switch to using my own router. I have an Asus Router AX82U and plan on getting the SFP converter. when using the SFP converter do you just connect the ethernet to the WAN port? Also does it work right away or are there any configurations needed on the WAN settings? Does Zyxel router need to be set to bridge mode too?

??? A little confused by your question I think you have this:

Grain Fibre -> SFP -> Zyxel -> Your LAN

and you are looking at doing this:

Grain Fibre-> SFP -> SFP Converter -> Your ASUS AX82U -> Your LAN

In which case you just unplug the Zyxel and keep it safe in a cupboard, where it doesn't need to be in bridge mode. Or are you intending to do this, in which case you wouldn't need the SFP converter:

Grain Fibre -> SFP -> Zyxel in bridge mode-> Your ASUS AX82U -> Your LAN

Has anyone who has removed the monstrosity of the zyxel router and used their own router has any issues with Grain Support? They had been trying to contact me repeatedly and finally left a message about an update, and that they couldn't see my router (of course - it's connected to my UDR7). I contacted them to advise they wouldn't be able to see it and they quoted T/C's and security risk (standard speil). It is true in the T/C's it does mention not to connect your own equipment. Anyone else had the same, I really don't want to be using their router in bridge mode as I have no space for it.

In reply to a post by Tupe:

the monstrosity of the zyxel router

I know nothing about Grain, but yes, it is a monstrosity, especially if you want it in bridge mode and you compare it with an ONT. I wouldn't want to give it house room either. The security risk thing is rubbish. Their network is probably safer with a diversity of routers with no single vulnerability to exploit.

I was using my UDR7 via the SFP module without any issues.

I’m currently using the grain router (with dual NAT) as I moved to the 2Gbit product. At some point I’ll remove the grain router and go back to the previous setup, but wanted to be “normal’ for when I got upgraded as it needs an engineer visit.

Whilst it’s an extra box to power, I don’t see a huge issue with security as your UDR7 will be managing your network.

Thought I would update, well after 3 days grain just switched me off 🤣. Then sent me an email and hour later saying they had deactivated the connection due to a breach in terms and conditions, and they wouldn't reactivate me until I connected their equipment back up, then had a right faff getting it reactivated as it wouldn't get an IP from them, but got it sorted eventually with support.

Anyhoo. I have ended up using their router as a modem. They put it into bridge mode, it's still single NAT and get my dedicated and I had to give them my UDR7's MAC for them to allow it their side.

This has actually turned out positively in one way as I now get much better WiFi and wired throughput from devices. E.g I could only get 500 or so max throughput on any device wirwd/wireless and now I can max out the full 900 (the router itself would always test fine directly at the full 900). I assume this is because the wan routing is offloading onto the zyxel allowing the UDR7 to just deal with the LAN/WLANs

Have to put up with the 2 devices and bulky zyxel but I have managed to hide it away somewhere.