Overview

Configuring VLAN trunking on an ONT LAN port requires understanding the bridge between GPON access and Ethernet switching domains. This FAQ addresses the critical pre-sales sizing questions and post-sales CLI troubleshooting steps that network engineers and procurement teams ask when integrating ONTs with managed switches in enterprise and MSP environments.

Frequently Asked Questions

Q1: How do I configure VLAN trunking on an ONT LAN port using the CLI?

The standard CLI method is to set the ONT UNI port mode to trunk or transparent via the OLT or ONT management interface, allowing all tagged VLANs to pass. For example, on many GPON platforms, you enter the ONT profile or UNI interface context and issue a command such as portvlan eth 1 mode trunk or set the Ethernet port to switchport mode trunk with the required allowed VLAN list . On the connected managed switch, configure the corresponding port as a trunk with matching native VLAN and allowed VLAN ranges. Always verify that the ONT service profile maps the GEM port to the correct Ethernet UNI and that the OLT service-port is configured with the appropriate tag-transform operation (translate or transparent).

Q2: What is the maximum throughput or switching capacity of a typical ONT LAN port for trunking?

Most current GPON ONTs provide 1 Gbps line-rate LAN ports, while XGS-PON models offer 2.5G or 10G RJ45 ports for higher backplane capacity. GPON physical layer limits are 2.488 Gbps downstream and 1.244 Gbps upstream, so a single 1GbE LAN port cannot exceed 1 Gbps of bidirectional Ethernet throughput regardless of trunk configuration . For 10G-capable ONTs such as XGS-PON SFU models, the LAN port supports 10GBASE-T, enabling full line-rate trunking to a managed switch without oversubscription at the ONT Ethernet interface. Check the ONT datasheet for the specific Ethernet port speed and internal switching architecture before deploying high-density VLAN trunks.

Q3: Are third-party SFP optical modules supported on ONT LAN/SFP ports for trunk uplinks?

Compatibility varies by ONT vendor; many enterprise-grade ONTs support standard MSA-compliant SFP/SFP+ modules, but some lock to vendor-coded optics. For the LAN-side Ethernet SFP cage (if present, distinct from the GPON uplink), generic 1000BASE-LX or 1000BASE-SX modules generally work if the ONT firmware does not enforce OEM coding. However, GPON uplink optics are typically fixed or vendor-specific. Procurement teams should request the ONT's transceiver compatibility matrix or test a sample third-party module before bulk ordering . For trunking to a managed switch via fiber, using the ONT's RJ45 copper port with a copper SFP on the switch side is often the lowest-risk compatibility path.

Q4: What is the difference between VLAN trunking and stacking interfaces on an ONT?

VLAN trunking is a Layer 2 tagging mechanism on a single physical port; stacking is a control-plane technology that aggregates multiple physical switches into one logical chassis. An ONT does not participate in switch stacking protocols (such as IRF, VSS, or Virtual Chassis) because it is a CPE/access device, not a stackable enterprise switch . The confusion arises because both use the word "trunk" — VLAN trunking carries multiple VLAN tags over one link, while a stacking link (often called a stack port or VSF link) carries control and data traffic between switch members. When connecting an ONT trunk port to a switch stack, configure the switch port as a standard trunk and ensure the stack's inter-switch links (ISLs) are separate from the ONT-facing ports.

Q5: How does redundant power failover work on an ONT, and how do I troubleshoot it?

ONT redundant power failover typically switches from AC mains to a backup battery or dual DC feed, with the ONT generating an alarm (such as ALM-5000783) when external power is lost . To troubleshoot failover: (1) verify the backup power source is connected and charged; (2) check the ONT alarm log for power-state transitions; (3) confirm that the ONT's service ports remain active or gracefully degrade per design during the backup window. Unlike enterprise switches with dual hot-swappable PSUs, most ONTs use a single external adapter with an optional battery backup, so "failover" is battery-based rather than load-sharing PSU redundancy. If the ONT drops all services immediately on power loss, the backup battery is likely depleted or the ONT model lacks battery support.

Q6: How does ONT VLAN trunking differ from previous-generation access devices?

Previous-generation ONT/ONU devices often supported only access (untagged) mode or a single tagged VLAN per LAN port, requiring external switches for any multi-VLAN segmentation . Modern ONTs now support full 802.1Q trunking, Q-in-Q VLAN stacking, and per-port VLAN translation, enabling direct Layer 2 trunk connections to managed switches without an intermediate access device. This reduces CPE count and simplifies branch topologies. Additionally, current enterprise ONTs may offer configurable VLAN ID ranges from 1 to 4094, support for up to 25 VLANs per Ethernet port on some models, and IGMP snooping for multicast VLAN handling .

Q7: What CLI mode and syntax should I use to verify VLAN trunking status on an ONT?

Use the ONT's privileged EXEC mode to run show vlan, show interface ethernet [port], or the vendor-specific equivalent such as show onu portvlan to confirm the port mode is trunk and allowed VLANs are programmed. On OLT-managed ONTs, the effective configuration is often set via ONU profiles; you can verify from the OLT with commands like show onu profile or show service-port to confirm the tag-transform mapping . If the managed switch reports the trunk as up but VLAN traffic is not passing, check that the OLT service-port's user-vlan and tag-transform settings match the VLAN IDs expected on the trunk, and that the ONT UNI port is not silently dropping tagged frames due to an access-mode default.