VPN setup between Mikrotik and SmartOLT

A secure encrypted VPN tunnel can be configured between your Mikrotik router and the SmartOLT cloud servers. The VPN tunnel is mandatory for the TR069 ONT configuration. This is the network path that the ONTs will use to get the configuration from the ACS.

With TR069 enabled you can provision Dual Stack IPv4+IPv6 configuration, WI-FI settings and many more settings.

1Create a new VPN tunnel

Go to the menu Settings → VPN & TR069 in your SmartOLT dashboard, to create a new VPN tunnel. You can start with the default settings or fill in with your private connected subnets.

2Apply the configuration on the Mikrotik

Click the button Mikrotik VPN config. Press Copy to clipboard and paste the clipboard into your Mikrotik → New terminal.

Refresh the site a few times, and once the VPN is up, you can use this new network path for the following purposes:

• connecting OLTs to SmartOLT using the OLT private IP addresses, without port forwarding
• configuring ONTs over the TR069 protocol

3Add the OLT to your account

At this point you are ready to add the OLT to your account. Go to Settings → OLTs → Add OLT, fill in all the required details, and use the OLT private IP address with the default ports (TCP 23 for telnet, and UDP 161 for SNMP).

Setup configuration for TR069 communication

4Verify the SmartOLT TR069 profile

Go to Settings → VPN & TR069, click the TR069 Profiles and verify that the SmartOLT TR069 profile exists and it is attached to the OLTs.

5Add a Management/VoIP VLAN

On the OLT settings page (Settings → OLTs → View → VLANs), add a new Management/VoIP VLAN. Add this VLAN to the OLT Uplink port, create the VLAN on Mikrotik and configure in Mikrotik an IP address for that VLAN (this Mikrotik IP will be the gateway for the management of the ONTs).

6Define the ONU management IP pool

On the tab named ONU Mgmt IPs define the pool of mgmt IPs, these addresses will be used for ONTs management and TR069. You can also use a DHCP server on Mikrotik to assign Management IPs.

7Enable TR069 on each ONT

On each ONT you need to assign a management IP address mentioned above, click the Mgmt IP, assign a static IP or DHCP and enable the TR069 profile. A new button TR069 Stat will appear that will open all the ONT settings.

Once the Management IP and TR069 is enabled and you are able to ping the ONT Mgmt IP from Mikrotik, the ONT will start informing the ACS server to prepare its configuration.

8Choose the WAN configuration method

After the TR069 is enabled for an ONT, you can select in the WAN setup section which configuration method to be used for WAN settings: OMCI or TR069. The TR069 method has the advantage that it allows dual stack IPv4+IPv6.