GPON with LOID in true bridge mode for dual WAN on MikroTik

Location: Lahore, Pakistan.
Router: MikroTik L009UiGS.
isp1 : transworld static ip
isp2 : ptcl static ip

Use case: I already run one ISP (Transworld) in bridge mode with PPPoE on the MikroTik. Works perfectly. Now I want to add PTCL as a second WAN line.

ptcl usesu zte routers/ont devices, which are firmware locked and do not show bridgemode option.

I need the PTCL's ONT to run in true bridge mode with LOID authentication so that the MikroTik handles PPPoE directly and receives the public IP. An ex-PTCL employee told me only ZTE models work reliably and PTCL authenticates with LOID .

I’d like to hear from people who have real-world experience with this setup or someone ,somewhere who had the same issue?

my Requirements:

  • Specific ports must be forwarded to specific machines (for example: TCP 3754 → 192.168.1.x). With double NAT this becomes a nightmare, so DMZ is not acceptable.
  • Clean dual WAN failover / load-balancing. Both ISPs must hand off public IPs directly to the MikroTik so firewall rules and port forwards remain predictable.

Questions for anyone who has done this:

1.1 Which exact ZTE model(s) authenticated with PTCL using LOID and allowed true bridge mode? Please share hardware revision and firmware version if possible.

1.2 in your case, did you use a random ont ? did it authenticate ?

  1. Did the OLT require whitelisting the GPON serial in addition to LOID, or was LOID alone enough? Did you have to clone a serial number from a PTCL ONT or your ISP's ont ?

  2. Stability and performance: Any random LOS, throttling, or issues where the OLT forced router mode back via TR-069?

  3. Public IP vs CGNAT: If you’re on a public IP, does failover and inbound NAT keep working reliably after reconnects?

  4. Where did you source the working ONT? aliexpress is doable ?

Target topology:

  • Transworld ONT in bridge mode → PPPoE on MikroTik → Public IP 1 → Port forwards.
  • PTCL ONT in bridge mode with LOID auth → PPPoE on MikroTik → Public IP 2 → Same port forwards available during failover.

If you have a working PTCL GPON bridge setup, please share the exact model, firmware, VLAN settings, and any quirks you ran into. I’m not interested in DMZ workarounds — only true bridge mode for clean dual WAN operation.

OR if you faced this same situation in your country/isps
Thanks in advance to anyone who has already solved this.