Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[NCTarheel]

Hello,

I have a zyxel modem that I use on earthlink DSL.  This modem only has one output for WAN.  Previously I had it connected to a DLink DIR280 and was using that as a switch (the modem handled the PPPOE login). and that worked fine, but after I got a tablet I attempted to get the wireless part of the 280 working and never could, so I gave that up and got a new DIR-605L.

So, to get that working, I had to change the zyxel to bridge mode and enter my login info into the DIR-605, and then my wireless worked fine with my tablet and both PC's I had hard wired to the 605 as well, BUT....

About 4 or 5 times a day, I will suddenly start getting 404 errors for any connection to a web page.  This will last for about 1 minute, and then it will start working again.  This did not happen before I switched the equipment around.  I've got the lease time set to a very large number, so I don't think that's it.

I've gone round and round trying to see what this could be, but not having any luck.  Anybody have any suggestions?

Thanks.

[FurryNutz]

Link>Welcome!
What Hardware version is your router? Look at sticker under router.
Link>What Firmware version is currently loaded? Found on routers web page under status.
What region are you located?

What ISP Modem Mfr. and model # do you have?
Check ISP MTU requirements, Cable is usually 1500, DSL is around 1492 down to 1472. Call the ISP and ask. Link>Checking MTU Values
For DSL/PPPoE connections on the router, ensure that "Always ON" option is enabled.

Some things to try: - Log into the routers web page at 192.168.0.1. Use IE, Opera or FF to manage the router.
Turn off ALL QoS or Disable Traffic Shaping (DIR only) GameFuel (DGL only and if ON.) options. Advanced/QoS or Gamefuel.
Turn off Advanced DNS Services if you have this option under Setup/Internet/Manual or under Setup/PARENTAL CONTROL/Set to>None: Static IP or Obtain Automatically From ISP.
Enable Use Unicasting (compatibility for some ISP DHCP Servers) under Setup/Internet/Manual.
Turn on DNS Relay under Setup/Networking.
Setup DHCP reserved IP addresses for all devices ON the router. Setup/Networking. This ensures each devices gets its own IP address when turned on and connected, eliminates IP address conflicts and helps in troubleshooting.
Ensure devices are set to auto obtain an IP address.
If IPv6 is an option on the router, select Local Connection Only or Disable IPv6 options under Setup/IPv6.
Set Firewall settings to Endpoint Independent for TCP and UDP under Advanced/Firewall.
Enable uPnP and Multi-cast Streaming under Advanced/Networking. Disable uPnP for testing Port Forwarding rules. Disable IPv6 Multi-cast Streaming if IPv6 is not being used.
Turn off WISH, and WPS under Advanced.
WAN Port Speed set to Auto or specific speed? Some newer ISP modems support 1000Mb so manually setting to Gb speeds can be supported by the router. Advanced/Advanced Networking/WAN Port Speed
Set current Time Zone, Date and Time. Use an NTP server feature. Tools/Time.
 

Turn off all anti virus and firewall programs on PC while testing. 3rd party firewalls are not generally needed when using routers as they are effective on blocking malicious inbound traffic.
Turn off all devices accept for one wired PC while testing.

[NCTarheel]

The modem is a zyxel prestige 645-UHP.

Router 605L hardware is A1.  Firmware is 1.13

MTU is set at 1492 and connection is always on.

WAN port speed is set to  10/100 Auto

I checked off on the DNS Relay.  It was not checked before.

The other settings you mention either are set that way or I don't see listed.  I have no parental controls or software firewalls.

A note that when this happens, it effects all three devices connected at the same time so it is not specific to one PC or the tablet.

Thanks for your help.

[FurryNutz]

Also ensure that your phone lines are in good working condition and filtered correctly. Have the ISP phsycally check the lines. Disconnections can come from the phone lines not being filtered or in bad working condition causing noise or interference on the line. Check the logs on the 605L at the time you see the disconnection. Can you connect to the 605L's web page when this happens?

If this modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems:Double NAT
To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged.
If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ.

Keep us posted.

[NCTarheel]

Well, changing that DNS setting didn't fix it.  It happened again after I changed that.

Since this started happening exactly at the same time I changed routers, and I had not had any problems like this previously, I don't think it's my phone lines.

I'll keep looking at the other things you mentioned.

My logs show a constant stream of ACK flood and port scan attacks from various IP addresses (Every few seconds) so I don't have the latest drop out in the 20 pages so I'll have to wait for it to happen again and check them.

[NCTarheel]

This is my log when the problem occurred.

• 
  Apr 14 20:36:54
  
  Manual Hangup Disconnect PPPoE line
  
  
  Apr 14 20:37:27
  
  Whole System ACK Flood Attack from WAN Rule:Default deny
  
  
  Apr 14 20:37:27
  
  Per-source ACK Flood Attack Detect (ip=180.233.141.9) Packet Dropped
  
  
  Apr 14 20:37:27
  
  PPPoE: Sending PADI
  
  
  Apr 14 20:37:27
  
  WAN Dialup Try to establish PPPoE line
  
  
  Apr 14 20:37:27
  
  PPPoE: Sending PADR
  
  
  Apr 14 20:37:27
  
  PPPoE: Receive PADS
  
  
  Apr 14 20:37:29
  
  PAP authentication succeeded
  
  
  Apr 14 20:37:34
  
  IPCP: local IP address (209.179.60.104)
  
  
  Apr 14 20:37:34
  
  IPCP: remote IP address (209.179.0.1)
  
  
  Apr 14 20:37:34
  
  IPCP: primary DNS address (207.69.188.187)
  
  
  Apr 14 20:37:34
  
  IPCP: secondary DNS address (207.69.188.186)
  
  
  Apr 14 20:37:34
  
  PPPoE line connected
  
  
  Apr 14 20:37:37
  
  VPN (L2TP) Pass-Through enabled.
  
  
  Apr 14 20:37:37
  
  VPN (PPTP) Pass-Through enabled.
  
  
  Apr 14 20:37:37
  
  VPN (IPsec) Pass-Through enabled.
  
  
  Apr 14 20:37:37
  
  RTSP ALG enabled.
  
  
  Apr 14 20:37:37
  
  URL Blocking disabled.
  
  
  Apr 14 20:37:37
  
  Block WAN PING enabled.
  
  
  Apr 14 20:37:37
  
  Anti-spoofing enabled.
  
  
  Apr 14 20:37:38
  
  Remote management is disabled.

[FurryNutz]

Apr 14 20:36:54
Manual Hangup Disconnect PPPoE line
Apr 14 20:37:27
Whole System ACK Flood Attack from WAN Rule:Default deny

Something is causing the Manual Hangup Disconnect. I would recommend that you phone contact your ISP service and ask them about this time frame and have them look at your ISP modem logs or any logs they may have regarding this time frame or the next time it happens. It seems like the PPPoE is going gown due too this flood attack maybe.

[NCTarheel]

I ended up switching back to using the modem to do my PPPOE login, and set the router up as an AP (mentioned by you on another page on this site).  Have not had a disconnect since.

[FurryNutz]

Awesome.

Enjoy.