PPPoE Server for Router in LAN

My main internet service was recently changed to fiber and my new router is a MikroTik hEX S with a SFP fiber module. Works fine so far. In the LAN are two more Routers, that shall provide the subnets for two appartments. One of these routers is a Telekom Speedport W724v. Its VoIP telephones can only get activated, when WAN connetion is established and WAN setting only works with user/password creditentials. So I set up a PPPoE server (on ether3) in the MikroTik and it connects, however I do not get internet access from the net behind the Speedport (It worked for short time when I switched on Torch). What kind of NAT and Firewall setting are necessary in the MikroTik to pass through all Network traffic comming from the Speedport?

Internet → MikroTik → Speedport → Laptop/Mobile etc.

I am new to RouterOS, if you need data/logs please tell me how to get them. Thank you.

In the short term, it may be enough to add the LAN Interface list to the PPPoE profile being used.
Though this will allow clients behind pppoe to connect to all your other LAN devices.

Thank you for your advice. Today I found time to work on my problem again. But unfortunately I had to start all over with my config and somehow I’ve now miss another step. The remote router does not connect to the provided PPPoE server anymore.
Hardware setting is still the same: (internet) – MikroTik – Speedport …
The IP if my MicroTik hEX is 192.168.88.1, the SpeedPort behind it on ether3 has the fixed IP 192.168.2.1

Here is what I did as configuration now, I tried to note every step in terminal code:

/ip pool add name=my-ippool ranges=192.168.88.200-192.168.88.255
/ppp profile add name=my-profile local-address=192.168.88.1 remote-address=my-ippool dns-server=9.9.9.9 only-one=yes
/ppp secret add name=myuser password=mypswd service=pppoe profile=my-profile
/interface pppoe-server server add service-name=my-server interface=ether3 one-session-per-host=yes disabled=no max-mtu=1492 max-mru=1492
/ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade   

I have also checked that my ether3 is not part of any (LAN-) bridge any more

/interface bridge port print where interface=ether3

gives an empty return = should not be in a bridge.

Any idea whats wrong?

If you have a bridge that already uses the 192.168.88.0/24 subnet, don't assign the same subnet to the pool and PPP profile used by the PPPoE server, choose another address range if possible.

Here you've forgotten to set default-profile to my-profile, it's probably the root of your issues.

Also RouterOS supports RFC 4638 for the PPPoE server too. You can set max-mru=1500 max-mtu=1500 on the server instance.

Dear community,

I want to share my solution. It took a little longer, and finally I switched to other hardware components. It runs stable now and is probably a better solution that the old Speedport.

The general setup is similar Internet by fiber → SFP-module in MikroTik → Router 1 & 2 → Local network 1 & 2.

The hardware is:

  • SFP-module in sfp1 = Luleey LL-XS2510 (note an Telekom Digitalisierungsbox Zyxel PMG3000-D20B did not work!), with the cloned setting of the initial used Glasfaser Modem 2 and a fixed IP of 192.168.101.1 . The step-by-step instruction from Dirk Wouters worked for me. I’ve did all the settings in an separate switch with SFP-port. The active fiber needed to be in the SFP-module and initial boot takes 3-5 minutes. Be patient :slight_smile:
  • Mikrotik hEX S (2025) with following settings to allow access to the GUI of the SFP-module and for connection to the provider:
/interface vlan add interface=sfp1 name=vlan7 vlan-id=7
/interface pppoe-client add add-default-route=yes allow=pap,chap,mschap2 disabled=no interface=vlan7 name=pppoe-out1 use-peer-dns=yes user=**********
/ip address add address=192.168.101.2/24 comment="fixed IP of SFP-Modul" interface=sfp1 network=192.168.101.0
/ip firewall nat add action=src-nat chain=srcnat comment="for SFP access" dst-address=192.168.101.1 src-address=192.168.88.0/24 to-addresses=192.168.101.2
  • Router for appartments #1 on ether2: QNAP 301 running on OpenWRT firmware, providing local network and WLAN #1
  • Router for appartments #2 on ether3: Fritzbox 7490 running FritzOS firmware, providing local network and WLAN #2 and DECT telephony