UniFi Gateway + Luleey LL-XS2510: Accessing the Web UI

I purchased a Luleey LL-XS2510 a while ago. This SFP module acts as a fiber modem in GPON-based networks and has some creature comforts like configurable GPON serial numbers, vendor ID or MAC – essentially allowing you to “clone” your existing fiber modem to have a failover backup device ready, should your primary modem malfunction.

I wanted to use the module in a UniFi Gateway Fiber, simply to see whether or not the hype around Ubiquity UniFi was justified or not.

However, after configuring the Luleey with a media converter and pushing it into its own subnet, I came across a silly issue: I could not longer access the SFP module’s built-in web UI.

So, what is the situation?

  • The Luleey SFP module has a static IP address of 192.168.10.1
  • The default network of the UniFi Gateway Fiber is 192.168.1.0/24

Clearly, we need some routing here. The following instructions should get you up and running.

Note: This guide assumes that the port used for the Luleey SFP module is initially set to a LAN port. Please make sure it is not set to WAN!

Step 1: Create a new network

Go to Settings – Networks and create a new Virtual Network.

Set “Gateway Fiber” as the router and the zone to “Internal”.

Leave “Auto Internet Source IP / NAT” ticked but remove the checkbox for “Auto-Scale Network”.

Set the IPv4 address to 192.168.10.254 and the netmask to 24.

Set the VLAN ID to an unused VLAN.

Leave all checkboxes except mDNS unticked and set DHCP Mode to “None”.

Since the Luleey module does not seem to have IPv6 support, set the IPv6 Interface Type to “None” as well.

Save the network.

Step 2: Assign the network

Now open your port overview, select the port with the SFP module and set the native VLAN / Network to the network created during step 1.

Step 3: Create Policy Engine rules

Open System – Policy Engine – Policy Tables and create a new NAT Policy named “Translate Traffic to Luleey”.

Set the Type to “Masquerade” and the Interface/VPN Tunnel to the network created during step 1.

Keep the Source and Port to “Any”.

Set Destination to “Network” and select the network created during step 1. Keep the Port to “Any”.

Save the policy.

Step 4: Test it

You should now be able to open the Luleey web interface by opening http://192.168.10.1.

Caveats

As mentioned before starting, this only works for LAN ports. As soon as you assign the port to a WAN interface, the policy will no longer work.

However, unassigning a WAN interface from the port immediately restores access.

This is quite handy if you ran tests and want to check PON parameters or statistics about HEC errors. Since the module does not reset, the existing values from your prior tests will still be visible – giving you some indications about the quality of the connection.

Of course, console access works as well.

UniFi Caveats

There is one big UniFi-specific caveat: Just plugging in the SFP module will not bring it online in UniFi Gateway. Instead, the port will report failure due to signal problems.

To solve this, please connect a live fiber connection to the module. UniFi should stop throwing fits afterwards and allow operation of the module.

Published by

tsukasa

The fool's herald.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.