Impossible to get a public IP/connectivity with Orange FR FAI

[kemedo]

Hello everyone,

I'm looking for some help/advice, as I can't seem to get a public IP address with OPNsense.
On the rare occasion that I do get a public IP, I have no connectivity. Pinging from the OPNsense box itself gets no reply.

Context:
I've just migrated from Bouygues to Sosh (Orange) using the same hardware setup: Fiber -> ONT -> Router.
During the fiber installation, I specifically requested an external ONT so I could move my router in the future.
Therefore, I'm confident my ONT is working correctly, as it always has.

Configuration & Attempts:
I have configured the WAN interface with VLAN 832 and all the required "Send Options" and "Request Options".

Send Options:
dhcp-client-identifier 01:XX:XX:XX:XX:XX:XX,dhcp-class-identifier "sagem",user-class "+FSVDSL_livebox.Internet.softathome.Livebox5",option-90 XX:XX (hex code retrieved in different ways)

I have tried several different hex codes for Option 90, specifically:

    The one from the Jsfiddle Script with the "Byte A" option

    The one from the Jsfiddle Script with the "Byte B" option

    The hex code retrieved from the Liveboxinfo app

    The hex code retrieved from a Wireshark packet capture

All four codes are different, but none of them have successfully allowed me to receive a public IP.

After these attempts, I tried redoing the configuration on a fresh, fully updated, clean install of OPNsense.
Still nothing.

The Strange Behavior:
There is a weird issue: sometimes, when I start a Packet Capture under the "Diagnostics" menu, I manage to get a public IP address (screenshot attached). The IP seems correct—it's a 90.x.x.x address, not a 172.x.x.x one.
However, I have zero connectivity. If I try to ping from OPNsense, it fails.



I don't believe this is a firewall issue, because I have no connectivity even on a fresh, default setup, and there are no blocking rules in place.

Do you have any ideas?
Is there something I've missed?

[Maurice]

In the packet capture, did you check the destination MAC address of packets coming from your ISP (e. g. DHCP Offers)? Does it match the OPNsense WAN MAC address?

Cheers
Maurice

[vasawar]

Is there something I've missed?

Use VLAN priority = 6 in the DHCP section of your WAN interface ?

[kemedo]

Thanks for the replies.

@Maurice, yes it does match my WAN MAC address.

@vasawar, yes, I'm using the VLAN Priority option for the DHCP and DHCPv6