Own router on Sky (ER110 to OpenWRT)

Hello, I signed up for Sky about a week ago, but just yesterday received their 'Sky Q Hub' (ER110) through the post. It only has a 2 port switch, no good for my setup.

I then went on a search on what the login details are for Sky's network, expecting them to be the same as BT's who I am currently with, but it appears Sky use a different authentication method.

I would like to use my OpenWRT'd WR1043ND and HG612 on Sky, but I am only able to find guides on moving away from older Sky routers such as the SR102 where people use Wireshark to sniff the initial connection in order to get the login information.

What do I do to avoid using this ER110, help would be appreciated
Also, if possible, I would like to continue to have IPv6, do Sky use a special configuration for that?

you could stay with the sky router and use an extra switch

https://www.amazon.co.uk/TP-LINK-TL-SF1008D-TP-Link-...

This 10/100 8 port switch costs £9 plus postage, or you could get

https://www.amazon.co.uk/NETGEAR-GS208-100UKS-Gigabi...

This 10/100/1000 8 port switch costs £14 plus postage.

I stopped worrying about the number of ports on the Router years ago and just bought an 8 port 10/100/1000 device. All of my kit is plugged into that and I just plug 1 connection into the router.

yes sky do have some specific IP6V settings.

I think the choice of using your own router got a lot more difficult due to not all of other 3rd party routers fully supporting sky's IPV6 settings. for example some of the merlin forks still don't fully support ipv6 for sky yet they can authenticate with sky servers for general internet access.

You have a few choices. Use a switch and stick with sky's router. I use pfsense which supports ipv6 and the option 61 settings sky need.

You don't need to get the login details any more - you just need the format to be

xxxxx@skydsl|xxxxxxxx - this needs to be in the option 61 box

I also enter the mac address of the sr102 I had in the mac address clone field. Some say you don' need it but thats your choice.

3rd party routers that support both requirements include the rt-ac87u, but you have to flash it with a specific fork to get the IPV6 to work properly.
The netgear r7000 using another fork of ddwrt will support both requirements but needs specific settings - I guess the R8000 would as well if configured properly and using the correct build etc..

I would have a look at www.skyuser.co.uk for further info as there is some shared info on there for the netgears.

If you want to try pfsense - pm me and I will share my setttings..
my results
Test with IPv4 DNS record
ok (0.081s) using ipv4
Test with IPv6 DNS record
ok (0.082s) using ipv6
Test with Dual Stack DNS record
ok (0.105s) using ipv6
Test for Dual Stack DNS and large packet
ok (0.056s) using ipv6
Test IPv4 without DNS
ok (0.070s) using ipv4
Test IPv6 without DNS
ok (0.089s) using ipv6
Test IPv6 large packet
ok (0.119s) using ipv6
Test if your ISP's DNS server uses IPv6
ok (0.096s) using ipv6
Find IPv4 Service Provider
ok (0.487s) using ipv4 ASN 5607
Find IPv6 Service Provider
ok (0.422s) using ipv6 ASN 5607

my setup is modem>pfsense box>switch>wap & lan

Edited by choppersrock (Sat 22-Oct-16 17:50:40)

Looks like I've picked a very bad ISP in the aim of saving some money, damn.

Right, so OpenWRT supports the DHCP options apparently.

What do you mean when you say I don't need the login details, what exactly do I put in the DHCP settings? I thought the "*@skydsl|*" was the login details.

If it's only Ethernet ports you need have you considered getting an Ethernet switch?

The wireless on your WR1043ND is a significant downgrade to the sky q hubs wifi in terms of speed.

Hi.

What I meant was originally you needed to obtain the actual login username and password in full, now you can put what you like before and after the @skydsl part.
Hope that makes sense

In reply to a post by choppersrock:

Hi.

What I meant was originally you needed to obtain the actual login username and password in full, now you can put what you like before and after the @skydsl part.
Hope that makes sense

That's interesting! When I get the changeover to Sky I'll try that then, just all x's with the @skydsl part in the middle right?

You guys are right though, I should probably just give it up and get a switch and deal with the Q Hub for a bit. The main concern is for Ethernet ports, I don't like using wireless where possible.

Equally I would quite like to use my own kit so I can see the detailed stats, and have the extra features OpenWRT provides.

Edited by deleted (Sat 22-Oct-16 19:54:53)

Check out pfsense. It free. Firewall and router plus vpn and works with sky's requirements for ipv6 plus if you have a spare pc lying about you can install it on that for testing if you want, will need 2 nics though.
I use it as I have a static ip from sky fibre pro days so I can vpn to home when away. Still need a switch and wap but I just prefer to run my own stuff.
anything@skydsl|shouldwork (remember the sign after the dsl"|")

Right, so I've now got the Sky 'enabled'.

My HG612 claims to be connected to the cab, but I can't authenticate with my router.

I've got it set to DHCP Client, and I wrote xxxx@skydsl|xxxxx in the Client ID field, I even added in the WAN MAC address of the ER110 as I thought that was the point of MER authentication.

Any ideas?

EDIT: It appears Sky aren't giving me an IPv6 address either, even their own s*** router isn't getting an address.

Edited by deleted (Thu 27-Oct-16 19:51:35)

Well your wan port should be configured to automatic ip if you are using a 3rd party router.

I assume you are not using pfsense. Ipv6 needs to be enabled. Its not immediate far as I know. The only way to check is to see if sky q or sr102 shows a valid ip6 config then you can use your own. I would disable your ipv6 config for now then once you get the wan port connected properly re-enable it.
What are you using router wise now.

Maybe this might help
http://www.skyuser.co.uk/forum/sky-broadband-fibre-h... if you are still isimg the wr1043?

In reply to a post by choppersrock:

Well your wan port should be configured to automatic ip if you are using a 3rd party router.

I assume you are not using pfsense. Ipv6 needs to be enabled. Its not immediate far as I know. The only way to check is to see if sky q or sr102 shows a valid ip6 config then you can use your own. I would disable your ipv6 config for now then once you get the wan port connected properly re-enable it.
What are you using router wise now.

I've currently got the "Sky Q Hub" (ER110) plugged in, still no IPv6. I also rang Sky to get it enabled but they said it's a rollout and they can't enabled it manually.

Could it have actually been because I had IPv6 with no support stopping the IPv4 connection?

In reply to a post by choppersrock:

Maybe this might help
http://www.skyuser.co.uk/forum/sky-broadband-fibre-h... if you are still isimg the wr1043?

That guy puts information into some password generator from his router, but it's an older model than the one they sent me, so I'm not entirely sure it'd work.

I also a bit hesitant to go back to DD-WRT because of this: http://www.skyuser.co.uk/forum/sky-broadband-fibre-h...

It will just enable at some point. If this is a new service give it a day or 2. I think my sr102 updated overnight then it was enabled. If you are using the q hub with the modem then you could just reboot the router each morning to see if its gets enabled when it authenticates.

In reply to a post by choppersrock:

It will just enable at some point. If this is a new service give it a day or 2. I think my sr102 updated overnight then it was enabled. If you are using the q hub with the modem then you could just reboot the router each morning to see if its gets enabled when it authenticates.

Right, I'll have to wait for that to happen then with the ER110 plugged in. Quite annoying, can't connect the Sky box anymore as I don't have a spare switch.

I dont know your router etc if it can run as an access point connected to the sky hub that would give you some extra ports for now..

In reply to a post by choppersrock:

I dont know your router etc if it can run as an access point connected to the sky hub that would give you some extra ports for now..

Didn't cross my mind for some reason, of course it can, there's a Dumb AP guide on the OpenWRT Wiki!

I use LEDE (based on Openwrt) with Sky via an HG612 modem without issue, even with IPv6 and get a full /56 delegated to me to do as I see fit.

Possibly some of that trick is that the 'option 61' DHCPv4 request has to be entered as a HEX string, so user/pass combo of '7c4ca2d3a9b8@skydsl|d45f8a77' (made up but of the usual form) would be entered as '37633463613264336139623840736b7964736c7c6434356638613737'

Concentrate on getting IPv4 up first, then IPv6. A suitable extract (and slightly tweaked) from my own working /etc/config/network

config interface 'lan'
option force_link '1'
option type 'bridge'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '64'
option _orig_ifname 'eth1 wlan0 wlan1'
option _orig_bridge 'true'
option ifname 'eth1'
option ip6hint 'dd'

config interface 'wan'
option ifname 'eth0'
option proto 'dhcp'
option release '0'
option clientid '37633463613264336139623840736b7964736c7c6434356638613737'
option peerdns '0'
option dns '8.8.8.8 8.8.4.4'

config interface 'wan6'
option _orig_ifname 'eth0'
option _orig_bridge 'false'
option proto 'dhcpv6'
option ifname 'eth0'
option reqprefix '56'
option peerdns '0'
option norelease '1'
option dns '2001:4860:4860::8888 2001:4860:4860::8844'
option reqaddress 'none'

Note that on my device eth0 is connected to the WAN and eth1 forms part of the internal LAN bridge, often routers use eth0 for LAN and eth1 for WAN.

In reply to a post by kevindb:

I use LEDE (based on Openwrt) with Sky via an HG612 modem without issue, even with IPv6 and get a full /56 delegated to me to do as I see fit.

Possibly some of that trick is that the 'option 61' DHCPv4 request has to be entered as a HEX string, so user/pass combo of '7c4ca2d3a9b8@skydsl|d45f8a77' (made up but of the usual form) would be entered as '37633463613264336139623840736b7964736c7c6434356638613737'

Concentrate on getting IPv4 up first, then IPv6. A suitable extract (and slightly tweaked) from my own working /etc/config/network

config interface 'lan'
option force_link '1'
option type 'bridge'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '64'
option _orig_ifname 'eth1 wlan0 wlan1'
option _orig_bridge 'true'
option ifname 'eth1'
option ip6hint 'dd'

config interface 'wan'
option ifname 'eth0'
option proto 'dhcp'
option release '0'
option clientid '37633463613264336139623840736b7964736c7c6434356638613737'
option peerdns '0'
option dns '8.8.8.8 8.8.4.4'

config interface 'wan6'
option _orig_ifname 'eth0'
option _orig_bridge 'false'
option proto 'dhcpv6'
option ifname 'eth0'
option reqprefix '56'
option peerdns '0'
option norelease '1'
option dns '2001:4860:4860::8888 2001:4860:4860::8844'
option reqaddress 'none'

Note that on my device eth0 is connected to the WAN and eth1 forms part of the internal LAN bridge, often routers use eth0 for LAN and eth1 for WAN.

Thanks for that, I will try again tomorrow with your config.

I see your client ID is hex, mine wasn't like that.

EDIT: So the numbers you have converted into hex, "7c4ca2d3a9b8@skydsl|d45f8a77", did you get them from a Sky router or are they random?

Edited by deleted (Thu 27-Oct-16 23:30:13)

In reply to a post by choppersrock:

It will just enable at some point. If this is a new service give it a day or 2. I think my sr102 updated overnight then it was enabled. If you are using the q hub with the modem then you could just reboot the router each morning to see if its gets enabled when it authenticates.

Just a quick update, the Q hub is now showing a 'Global IPv6 Address'. Interestingly, just like BT, Sky appear to have no IPv6 DNS servers, and the Q hub has no options to change DNS.

When I get back later I will retry the OpenWRT box

In reply to a post by choppersrock:

xxxxx@skydsl|xxxxxxxx - this needs to be in the option 61 box

Doesn't even need to be in that format I sent the word bacons and it worked

Note some routers will require you to convert it into HEX yourself first you may also need to prefix the hex with 0x

I got them from sniffing a DHCP discovery packet from my redundant SR101. The codes I've posted here are NOT the ones I actually use.

My install seems to require a sensible dhcp client request otherwise it doesn't give me an address...however that was only very quickly tested and I've a suspicion that some sort of timeout needs to occur on a line before it'll give an address to a 'different' client.

In reply to a post by kevindb:

I got them from sniffing a DHCP discovery packet from my redundant SR101. The codes I've posted here are NOT the ones I actually use.

My install seems to require a sensible dhcp client request otherwise it doesn't give me an address...however that was only very quickly tested and I've a suspicion that some sort of timeout needs to occur on a line before it'll give an address to a 'different' client.

They used to check the string, but at somepoint they stopped validating it as such, no idea when, now it seemingly will accept anything as long as you send something in option 61 and that something encodes nicely into hex.

At Least that was the case with my Sky FTTC line (which sadly I had to ditch due to openreach's inability to fix it)

So, quite a happy update.

It's working. Even IPv6.

Thanks @kevindb for the config files, they came in very handy as I basically copied them. (Including the Hexadecimal DHCP option, the random one you put in the post worked).
I will add, I also put in the MAC address of the Sky router I was provided, not sure if it matters.

Thanks folks, the help was much appreciated.
Let's see how long this lasts!

Also if you are interested, you can see my modem stats on the link in my sig, one main reason I was desperate to use my own kit!

Edited by deleted (Fri 28-Oct-16 19:11:13)

That's good news. MyDSLWebStats says you're on BT

Any chance for a quick run down how to setup pfsence with this config.

I have the sr102 put the pfsence box in the dmz ipv4 works but no ipv6

Matt

My pfsense works fine but I don't have it in a dmz. Why not ditch the sr102 and get a modem.

I use a vmg8324 in Bridge mode. My pfsense is on 2.4 with Sky pro with a fixed ip. I can provide you non dmz setup I guess it might work. My ipv6 works fine

If you pm me your email address I will send you screen shots...

Edited by choppersrock (Fri 06-Jan-17 21:50:39)