I currently have a fiber optic internet connection at home. My ISP uses GPON where the ONU acts as a gateway device which has a direct fiber optic connection to it. ONU is a Huawei HG8145V5.
I understand that downstream network traffic in a GPON splitter network is broadcast to all ONUs simultaneously,and each ONU does the filtering for the GEM packets relevant to the specific ONU and discards the rest. Hence, I have three parts to the question:
- how is this filtering done?
- can the downstream traffic to all ONUs be sniffed from a specific ONU connected to the same splitter network?
- Some ISPs encrypt the downstream traffic. In that case, what information would a potential attacker/sniffer see? I.e. Would they be able to see my router's public IP or MAC address for instance? Lastly, with the information obtained from the above, would it be sufficient to locate my router/devices on the network to launch an attack?
I'm trying to secure my network, and have been seeing multiple attempts to breach my network. And frequently see that there have been configuration changes made to my router (which I have not made, checked with ISP and they have not made any changes either).
Appreciate any insights to this, particularly for means to hide my IP address from neighbouring ONUs connected to the same splitter network.