Deutsche Telekom FTTH Access with OpenWRT

ftth_openwrt.md

Configuring Deutsche Telekom FTTH Access with OpenWRT

After looking for alternatves to the suggested Router from Telekom (AVM FritzBox and HUawei Speedport), I've discovered the possibility of configuring my existing OpenWRT Router to act as gateway to the Telekom FTTH (Fiber To The Home) Magenta Zuhause package.

TL;DR

The WAN interface must be configured as follows (see your Telekom letter):

• Protocol: PPPoE
• PAP/CHAP username:
  • Zugangsnummern with 12+ Digits/Chars: AnschlusskennungZugangsnummerMitbenutzernummer@t-online.de
  • Zugangsnummern with less than 12 Digits/Chars: AnschlusskennungZugangsnummer#Mitbenutzernummer@t-online.de
• PAP/CHAP password: Zugangskenntwort
• VLAN: 7

Requirements

Access Data

It's important to know the following information, before attempting any connection:

• Anschlusskennung
• Zugangsnummer
• Mitbenutzernummer
• Zugangskenntwort

All the above information are typically sent by Telekom at home, when activating the Internet Access.

Hardware

You need a OpenWRT-capable router (e.g. TP-Link Archer C7 works really well), see here for an exhaustive list of supported devices.

Make sure your Telekom Fiber Modem is working properly.

Configuration

Enable VLAN

The Telekom PPPoE access requires the VLAN-ID to be set to 7. In order to do so, you have to configure the Router Ethernet interface that refers to WAN. The configuration panel can be found under the Menu entry Network->Switch (on OpenWRT 22.03 is Network -> Devices -> Add Device Config)

In this panel, you can see a table showing the VLAN(s) configured for your Router (typically 2) and they have some comboboxes with status tagged/untagged/off. One of the VLANs configured should be configured with the following information:

Port Status	CPU (eth0)	LAN1	LAN2	LAN3	LAN4	WAN
1	tagged	untagged	untagged	untagged	untagged	off
7	tagged	off	off	off	off	tagged

In case of Routers with multiple Ethernet interfaces (e.g. TP-Link Archer C7), the panel should look like this:

Port Status	CPU (eth0)	CPU (eth0)	LAN1	LAN2	LAN3	LAN4	WAN
1	tagged	tagged	untagged	untagged	untagged	untagged	off
7	tagged	tagged	off	off	off	off	tagged

Setup WAN Interface

In the Menu entry Network->Interfaces, select the WAN interface and set the following information in the General Setup tab:

• Protocol: PPPoE
• PAP/CHAP username: AnschlusskennungZugangsnummerMitbenutzernummer@t-online.de
• PAP/CHAP password: Zugangskenntwort

In the tab Physical Settings, select the interface Switch VLAN eth0.7 (the one corresponding to the VLAN-ID 7).

Beware: in case your "Zugangsnummer" has less than 12 digits, the PAP/CHAP username is in the form AnschlusskennungZugangsnummer#Mitbenutzernummer@t-online.de (see https://telekomhilft.telekom.de/t5/Telefonie-Internet/PPPOE-Einwahl-ueber-einen-Router-herstellen/ta-p/3654990 for further details)

Happy surfing!

Well that’s because your Zugangsnummer has 12 digits. Am 18. September 2021 10:07:35 MESZ schrieb Michele Adduci ***@***.***>:

…

Hi, Thanks for the message and kind feedback. That's interesting, since in my actual modem I haven't the hash character '#' and it just works fine -- You are receiving this because you commented. Reply to this email directly or view it on GitHub: https://gist.github.com/8b8637b922e433d617261373220be44c#gistcomment-3897211

Ah gotcha! Thanks for the remark, I have missed the detail in your previous message

I have the Linksys 3200ACM and running [OpenWrt 22.03.2]. Note that in favor of DSA, this menu has since been removed. Is there "like" instructions for setting up FTTH with Telekom using the modified interface and latest kernel?

Dumb question? Yes probably. But seems to be a project that has me flailing about in Luci just now for the last few days.
Thank you in advance!

Hi

Thanks for the feedback. I haven't used the newest OpenWRT yet unfortunately (meanwhile I am using a Ubiquity router). I will update this guide as soon as I can.

with the latest interface (v22.03.3),

First navigate to Network -> Devices -> Add Device Config, config something like this,

Second go back to Interface tab, Add new interface, choose the Device you just created:

Enter the username / password as described in the main article, and don't forgot to choose WAN in firewall settings:

It takes me some hours to figure that out, hope this information can help you landing here by Google Search.

thank you very much!

hey @kebot thank you for your info! I tried to follow your steps for 22.03.3 but I get a "connection error" on the pppoe_telekom interface.

In your third screenshot you show the firewall settings for the "WAN" interface. Should that also be set in the created pppoe_telekom interface?
The physical wan interfaces are configured as "DHCP server" by default in the overview for me. Is that correct or should they be something else?
I also have a "bridge interface" that seems to connect all the normal LAN ports on my device. Does these somehow need to be connected to the vlan or the eth0/eth1 base device?

In general it would be cool if you could share more screenshots of all the things in the device/interface lists and screenhots of the configuration of the interfaces/devices (without the username/pass ofc)!

while trying random things I got a connection when I created the vlan device based on the wan port. Not sure if that is correct at all. It showed a plausible ip address in the routing overview, but I could not figure out how to get the normal lan ports to use that connection (if even possible)

Okay through lots of tinkering an reading forum posts I figured out a solution that works for me (belkin rt3200):

1. go to network -> interfaces -> devices

• create a new device, type vlan 802.1q, base device: wan

2. goto network -> interfaces

• change the default wan interface like this with the credentials explained in the OP:
  
  

Apply the changes and it should work \o/

Thanks! Helped me a lot!
Telekom is not very clear about what settings one need to use....

@madduci
Thank you so much for the documentation! You have saved from being offline multiple days.

Thanks, for information above, that helps a lot!

does anyone of you experience significantly lower speed comparing to contractual one (20Mbps instead of 200Mbps) as result of using PPPoE?

In my case its gigabit switch (Zyxel GS1900-10HP) with no significant CPU load and Gigabit GPON SFP-Type SFU (PMG3000-D20B) and I'm trying to understand where is speed "bottle-neck" coming from

will appreciate any advice/hint that could help

You are welcome!

@v01t I have a Magenta Zuhause M (50 MBit/s) Package and I get ~55 MBit/s. I have an Ubiquiti Edge Router at the moment (without OpenWRT) and i don't see any load. Have you tried other Routers?

@v01t
i have the "telekom speedport" fiber modem and using this config on a Fritz!Box 5590 connected by wan to the modem. my speeds are about the same of @madduci

@v01t
Yes, my 10 year old router is not able to exceed ~300 Mbps but I can see that the CPU is pinned > 90%.
If you do not use SQM, you can enable "Software flow offloading" in the Network->Firewall settings within Luci. If your router is mt7621 based, you could also enable "Hardware flow offloading". That should increase your speeds if the router itself is the bottleneck.

@v01t The hardware in these switches is designed for switching ethernet packets on L2. That means that the traffic does not pass through the CPU under normal circumstances, it is all handled by the switch fabric. While it certainly is possible to turn them into routers, the performance is very low as the packets now need to pass the CPU. In addition, the CPU does not have any optimizations for packet processing - something that router SoCs usually include.

Source: https://openwrt.org/supported_devices/openwrt_on_switches_faq