UDM Pro as a router without a bridge/modem - call again

Hello dear community,

At the beginning of the year the question was asked whether you can operate a UDM Pro as a router without a bridge/modem. At the beginning of the year, this was not possible due to a lack of certified SFP+ modules. My question is, is there anything new here so that this is possible as of today (or in the near future)?

Thank you very much and kind regards

Dennis

Show original language (German)

Hello @Stupacheid26

You have to get the manufacturer to certify your router with Swisscom.

I don’t know whether Unifi does that for a market as small as Switzerland.

Since only an extremely small part would benefit from this.

Greetings Lorenz

Show original language (German)

@Stupacheid26 certified SFP’s are available for XGS-PON. The problem is usually that the driver software (encryption software) for the certified SFPs is installed on the router.

Alternative: Nokia or Zyxelbridge.

Here is the current equipment list from Swisscom, perhaps a listed SFP will work with the USG.

[https://www.swisscom.ch/dam/swisscom/en/ws/documents/E\_BBCS-Documents/e\_bbcs\_supporting-documentprovedequipment.pdf](https://www.swisscom.ch/dam/ swisscom/en/ws/documents/E_BBCS-Documents/e_bbcs_supporting-documentprovedequipment.pdf)

Show original language (German)
8 days later

I still have hope that this module will also work with other routers.

As already described here, Swisscom states that this SFP+ module only works with Mikrotik routers.

According to Init7 the module is also compatible with other routers: “Compatible with various manufacturers (MikroTik, Ubiquiti, etc.)”. Does that also depend on the technology/encryption used?

Show original language (German)
  • fmcbr has responded to this post.

    fmcbr

    My optimism is increasing, I have just installed the module in my DM Pro Max:

    IMG_0653.jpeg

    End result: After configuration (VLAN & DHCP option 60), the Dream Machine receives an IP address and I can access Swisscom.ch/access:

    IMG_0062.jpeg

    Unfortunately, I now have to wait until the previous tenant transfers my subscription to me so that I can register the router. After that I can hopefully finally confirm that it works.

    EDIT: According to my understanding, the bridge was integrated into the SFP+ module. The module is also described as a bridge modem at the link above. I.e. Technically speaking, you continue to operate the DM with a bridge, but then directly on the SFP+ interface.

    EDIT2: FYI: By the way, the module gets extremely hot.

    Show original language (German)

    I am happy to confirm that the AllNET module, which is officially certified by Swisscom, works successfully in a UDM-SE.

    In my case, a Zyxel 7501-BO was previously installed in bridge mode. This means that all I did was plug in the module, restart the UDM and the connection was established immediately without any problems. The operating temperature of the module is unremarkable, which is also supported by the larger built-in heat sink.

    Module

    module

    The MAC address of the SFP connection was already registered with Swisscom because, as in my case, it was already in use. I previously used an SFP+ to RJ45 module to transfer the full 10Gb capacity to the UDM.

    This also allowed me to solve the NAT problem so that both the public IPv4 and IPv6 addresses arrive directly on the UDM.

    Connection is there

    Connection is there

    Swisscom TV also works perfectly and without delays. It is recommended to create your own VLAN and assign it in the configuration under “IPTV Streaming”.

    The other required settings can also be seen in the attached image.

    Internet Settings

    Internet settings

    By the way, the module can be purchased from [digitec](https://www.digitec.ch/de/s1/product/allnet-z-allnet-isp-bridge-modem-xgspon-gbic-all-bm410-xgspon-gbic-router -47227851?ip=bm410).

    Show original language (German)

    Thank you for your great answer!

    However, I am debating whether I still want the DM or whether I would rather have a cloud gateway.

    Nevertheless, your WA is an excellent job!

    Thank you very much!

    Show original language (German)

    @bosi Hey great, I’m getting a 10GBit Anschluss from Green in 3 weeks (Swisscom is behind it) and I’ve been looking for days how I can get a Dream Machine SE directly attached to it. I had already given up hope.

    Maybe a slightly stupid question:

    - Allnet says the following: “SFP+ based 10GBase-X GbE interface”

    - Do I understand correctly that an RJ45 cable must be used for the OTO socket?

    My OTO box isn’t there yet, but until now I thought that you had to connect glass cables to the OTO box.

    I want to go online with the Dream Machine SE right from the start, without first connecting the Zyxel router to it.

    Show original language (German)
    • bosi has responded to this post.

      Hello @kaetho

      Well, landlines are not an issue for me. This environment is my “laboratory environment” in which I test configurations that I then implement in our company network, in other words.. my playground 🙂

      What Swisscom also provides are the SIP Credentials which can then be set up on any IP device. .

      We [phone over Teams]. gnid=11995561613&adgroupid=118426361200&gad_source=1&gbraid=0AAAAADEc1yeAMqV-czNkwx-P Aiwd9edku&gclid=EAIaIQobChMIpOKOxfCoiQMVZpqDBx0XHifhEAAYASAAEgI6KPD_BwE&gclsrc=aw.ds) and can therefore also be reached via a “classic” landline number.

      Show original language (German)

      Hello @Stupacheid26

      Depending on the hardware provider, significant outages can occur if the cloud gateway is unavailable.

      If DHCP, DNS, guest WLAN and special WLAN configurations do not play a central role, there is basically nothing to say against it.

      However, an on-premise infrastructure directly on the device opens up numerous other possibilities. Modern Ubiquiti gateways, for example, offer reliability through shadowing and similar technologies.

      Show original language (German)

      bosi wrote:

      Hello @Meudaulo48

      No, the module has a normal fiber Anschluss, so you can use the cable from the ODO socket directly to the module

      See left side.. is green 😉

      Module

      Module


      Which Swisscom fiber optic cable is the socket on the module for?

      For the normal XGS-PON-FTTH cable from Swisscom, i.e. the one with the red plug, or for another plug?

      Show original language (German)

      Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

      @Werner sieht eher nach SC/APC aus.

      Technical Details:

      Installation* SFP+ Interface
      PON Interface* Compliant with ITU-T G.9807 XGS-PON standards* SFF type laser, SC/APC connector* 10G bps Burst Mode Upstream Transmitter* 10G bps Downstream Receiver* Compliant with ITU-T G.9807 Class N1 * APD receiver and DFB transmitter * 4~+9dBm launch power, -28dBm sensitivity, and -9dBm overload* Wavelengths: * US 1260nm to 1280nm, DS 1575nm to 1580nm* Laser compliant with FCC 47 CFR Part 15, Class B, and FDA 21 CFR 1040.10 and 1040.11, Class I, ONT support Class C or Class C+ optics as an option
      PON QoS* Multiple T-CONTs per device* Multiple GEM Ports per device* Flexible mapping between GEM Ports and T- CONT* Activation with automatic discovered SN and password in conformance with ITU-T G.984.3* AES-128 Decryption with key generation and switching* FEC (Forward Error Correction)* DBA reporting by piggyback reports in the DBRu (mode 0)* 802.1p mapper service profile on U/S* Mapping of GEM Ports into a T-CONT with priority queues based scheduling* Support Multicast GEM port and incident broadcast GEM port.
      Ethernet Interface* SFP+ based 10GBase-X GbE interface* Hardware priority queues on the downstream direction in support of CoS* 802.1D bridging* Virtual switch based on 802.1q VLAN* VLAN tagging/detagging* VLAN stacking (Q-in-Q) and VLAN Translation* IP ToS/DSCP to 802.1p mapping* Class of Service based on VLAN-ID, 802.1p bit, ToS/DSCP* Marking/remarking of 802.1p* Broadcast/Multicast rate limiting
      OAM* Standard compliant OMCI (the embedded operations channel) interface as defined by ITU-T G.988* Alarming and AVC report, performance monitoring* Remotely software image download over OMCI, as well as activation and rebooting* Hold two software sets with software image integrity checking and automatic rollback
      Power Supply* Power Consumption: < 2.8W
      Dimensions* 87.5 mm x 15.6 mm x 13.75 mm (L x W x D)
      Working Environment* case operating temperature: -40~+85 °C* Humidity: 5 ~ 95% relative humidity, non- condensed
      Safety & EMI* CE compliant* FCC/UL compliant