Location: Lahore, Pakistan.
Router: MikroTik L009UiGS.
isp1 : transworld static ip
isp2 : ptcl static ip
Use case: I already run one ISP (Transworld) in bridge mode with PPPoE on the MikroTik. Works perfectly. Now I want to add PTCL as a second WAN line.
ptcl usesu zte routers/ont devices, which are firmware locked and do not show bridgemode option.
I need the PTCL's ONT to run in true bridge mode with LOID authentication so that the MikroTik handles PPPoE directly and receives the public IP. An ex-PTCL employee told me only ZTE models work reliably and PTCL authenticates with LOID .
I’d like to hear from people who have real-world experience with this setup or someone ,somewhere who had the same issue?
my Requirements:
- Specific ports must be forwarded to specific machines (for example: TCP 3754 → 192.168.1.x). With double NAT this becomes a nightmare, so DMZ is not acceptable.
- Clean dual WAN failover / load-balancing. Both ISPs must hand off public IPs directly to the MikroTik so firewall rules and port forwards remain predictable.
Questions for anyone who has done this:
1.1 Which exact ZTE model(s) authenticated with PTCL using LOID and allowed true bridge mode? Please share hardware revision and firmware version if possible.
1.2 in your case, did you use a random ont ? did it authenticate ?
-
Did the OLT require whitelisting the GPON serial in addition to LOID, or was LOID alone enough? Did you have to clone a serial number from a PTCL ONT or your ISP's ont ?
-
Stability and performance: Any random LOS, throttling, or issues where the OLT forced router mode back via TR-069?
-
Public IP vs CGNAT: If you’re on a public IP, does failover and inbound NAT keep working reliably after reconnects?
-
Where did you source the working ONT? aliexpress is doable ?
Target topology:
- Transworld ONT in bridge mode → PPPoE on MikroTik → Public IP 1 → Port forwards.
- PTCL ONT in bridge mode with LOID auth → PPPoE on MikroTik → Public IP 2 → Same port forwards available during failover.
If you have a working PTCL GPON bridge setup, please share the exact model, firmware, VLAN settings, and any quirks you ran into. I’m not interested in DMZ workarounds — only true bridge mode for clean dual WAN operation.
OR if you faced this same situation in your country/isps
Thanks in advance to anyone who has already solved this.