FTTH WAN-Interface with VLAN (Swisscom)

FTTH, Swisscom fiber-optic network

In the Swisscom fiber optic network, a VLAN separates the access points into the PPPoE or IPoE environment. Knowledge base article 3307 describes setting up a media converter.
Further configuration steps on the firewall with regard to VLAN are then omitted.
If the converter does not support a VLAN, this must be done by the firewall. The same applies to the
USG20-VPN with SFP slot and directly inserted SFP glass module.

The following applies in the Swisscom fiber-optic network:

- IPoE VLAN10

- PPPoE VLAN11

FTTH connection with IPoE

Configuration> Network> Interface> VLAN> Add

- Interface Type: external
- Interface Name: vlan10
- Zone: WAN
- Base Port: sfp
- VLAN ID: 10

The sfp setting for the base port applies to a USG20 VPN with a directly inserted SFP module. For a firewall in combination with a media converter without VLAN support,
select the WAN interface used for the connection.

FTTH connection with PPPoE

Configuration> Network> Interface> VLAN> Add

- Interface Type: external
- Interface Name: vlan11
- Zone: WAN
- Base Port: sfp
- VLAN ID: 11

The sfp setting for the base port applies to a USG20 VPN with a directly inserted SFP module. For a firewall in combination with a media converter without VLAN support, select the WAN interface used for the connection.

PPPoE requires a username and password to establish the connection, which stores the firewall in an ISP profile.

Configuration> Object> ISP Account> SFP_PPPoE_ACCOUNT> Edit

A new PPP profile merges the ISP object and the VLAN interface into a new PPPoE connection.

Configuration> Network> PPP> User Configuration> Add

KB-00353

DISCLAIMER:

Dear customer, please be aware that we will provide you with a translation of the article into your local language. Not all text may be translated accurately. If there are questions or discrepancies on the accuracy of information, please review the original article here: Original Version