Intel 82599ES, interfaces in RED with "no carrier"

[-Richard-]

Hello,

I've installed latest OPNsense version on my mini PC. I have an intel NIC 82599ES and the 2 ports are found but appear in red with this indication : "no carrier".



The leds from the SFP+ ports are not flashing and remain off...

Can you help me please ?

Thanks

Richard

[meyergru]

Obviously, the card is detected, but the SFP(+) modules are not or they have no link, i.e. they are not connected to anything. Which SFP modules do you use and how are they connected (to what)?

In rare circumstances, the SFP+ modules are coded to match only specfic brands of SFP+ slots.

[-Richard-]

The fiber cable from my ISP comes into this ONU :



which is inserted into my SFP+ port

Is it possible both are not compatible ?

[tuto2]

The system log (system -> log files -> general), under process "kernel" should reveal if the driver has anything to say about it. The fact that the LEDs are not coming up shows that this is a low level linking issue. Either there is no other end, or the module is not compatible with the intel chipset.

[Greg_E]

A third choice might be auto-negotiation problems where the card can't tell how fast the module wants to run. I'm not sure how you would get in to set this manually, but it's fixed a few problems on routers/switches to set the slot to a speed that works for both. In this case gigabit (1.25gbps) would most likely be the choice.

It's also possible that the card can not slow itself down to the gigabit speeds that this module can handle. While SFP+ is supposed to be backwards compatible, not in every way. I've seen some cards listed as 10/1gbps so a 2.5gbps module is not going to work.

The chipset for your card says it is 10/1gbps so if you can find a way to set the speed for 1gbps, it might start working.

[meyergru]

They should be compatible in theory, but there is something more to that:

That is a GPON ONT which AFAIK, happens to show a link online state on the SFP side only when the fibre status is "O5", which means active/connected. This somewhat depends on the SFP slot and the drivers as well.

Depending on your ISP, there must be a GPON signal first and more often than not, they check for PLOAM passwords and serial numbers of the ONT. I guess that this is not the ONT that your ISP provided, correct?

In that case, you either have to tell your ISP the ONTs S/N as written on the label to make this one work (and hope that they do not need a PLOAM password, as apparently, you cannot enter that now because of missing link state). Be aware, however, that the original ONT will not work any longer if they change the serial.

With that specific 5671MA ONT, you can also change the serial number, provided that:

a. You can access the telnet shell and/or the GUI - which without O5 state, is only possible with certain SFP equipment or hardware mods. I do not know if the 82599 can make a connection without GPON active state.

b. You have a firmware on it that allows such modifications in the first place (and for flashing, you need special equipment as well).

You can read more on this here: https://hack-gpon.org/ont-huawei-ma5671a/

Two side-notes:

1. Do not try to set the SFP link speed to HSGMII (2.5 Gbps) with your equipment - the 82559 can only handle 1 and 10 GBbps, so if you change the speed, you are disconnected until you happen to be able to use HSGMII-capable equipment.

2. What you could try is to set the speed of the 82599 port to 1 GBbps instead of auto-select. It could be possible that this already fixes your problem.

[-Richard-]

Thank you all for your help !

Here are logs when searching for ix0 :





The ONU has been configured by a friend to to be able to replace the box given by my ISP. It's working into a TP link MC220L but I also have SFP+ ports on my router and would prefer to use the ONU directly into the router.

Here's the link to the router : https://fr.aliexpress.com/item/1005006017135147.html?spm=a2g0o.order_list.order_list_main.4.7cf25e5bncU51o&gatewayAdapt=glo2fra

Can you tell me how to set the speed for the NIC to 1G ?

Thanks again

[-Richard-]

The result of ifconfig :

[meyergru]

You can call "ifconfig -m ix0" from the cli to list all available media types.

Then, you can set one of these options by something like: "ifconfig ix0 media 1000baseT mediaopt full-duplex".

Usually, the available media types are selectable also in the interface via the GUI ("Speed and duplex"), but only for physical interfaces, not for VLANs.

[Greg_E]

Would it be wise to delete any/all vlans on that interface until you can get the interface up?

Make a config backup first and then delete them?

[meyergru]

No, you can always configure the parent (physical) interface and leave IP unconfigured for that. However, you can try first via cli if it works at all.

[-Richard-]

Here are the results :

[meyergru]

You have no link and you cannot select the speed manually. Also, that MAC d4-20-00-b1-d6-85 is one from henzhen Volt IoT technology co.,ltd., so it is not the Huawei MA5671A MAC, but the one from the SFP slot manufacturer. I might even be a non-original chipset.

This can be for one of two reasons:

1. The GPON ONT status is not O5 - but you cannot see this because then, you get no link status on the SFP side with your 82559 SFP slot.

2. The 82599 does not connect to the ONT at all for whatever incompatibility reasons.

Is the ONT really detected and useable in the media converter? If so, what is the ONT status? This is independent of the SFP slot is is being used in. You said your friend has prepared the ONT to "be able" to replace the ISP ONT. Did you configure the PLOAM password and/or the S/N to the same as in your ISP's ONT or has your friend done that for you? Does he have HSGMII-capable equipment and has set the ONT to use that speed by any chance? You should ask him.

Obviously, this part of the ONT configuration is impossible in the 82599 slot, because you cannot reach the configuration interface from there. Have you done it in the media converter first or skipped that vital step altogether?

I think, once the relevant parameters (i.e. link speed, S/N and PLOAM password) have been set in your ONT module, it would work unless there is a problem with the "Intel" 82599.