Manual

KPN

PPPoE over VLAN 6, with internet/internet as the login. What the preset covers and what it does not.

On KPN the router logs in itself. The connection is PPPoE and it runs over VLAN 6 on the WAN port. That holds for fibre and for DSL, and for XS4ALL, which sits on the same network. Two numbers, nothing more, but get one of them wrong and precisely nothing happens: the PPPoE client keeps trying and no error appears anywhere.

What the preset fills in

Pick KPN from the provider list at the top of the WAN / internet section. The first uplink is then filled in:

  • Type PPPoE.
  • VLAN id on the WAN port set to 6.
  • Username and password internet / internet, but only if those fields were still empty. KPN accepts any combination, so there is nothing to look up.
  • The PPPoE interface keeps the name pppoe-out1, and that is the interface the rest of the configuration points at.
  • The MTU field is cleared, so RouterOS works out the 1492 of PPPoE by itself.
  • A comment KPN on the uplink, so you can see in the script which line belongs to what.
  • IPv6 is turned on with prefix delegation at a requested length of /48, on pppoe-out1, with the IPv6 firewall on.

What you still do yourself

The preset only touches the first uplink and IPv6. The rest of the configuration stays yours: LAN address, Wi-Fi, VLANs, firewall and admin password. Two things are worth checking deliberately.

The WAN port. The preset leaves the port that was already there and only picks your model's default WAN port when nothing usable was set. On most models that is ether1, so that is where the cable from KPN goes, unless you choose a different port yourself.

TCP MSS. With PPPoE the clamp TCP MSS switch appears, and it belongs on. Turn it off and you get the most annoying kind of fault there is: most sites load, some stall halfway.

The box on the wall

PPPoE means your router sets up the connection. Everything between the wall socket and your MikroTik therefore has to pass the traffic through unchanged, VLAN tag included. If a provider router is still in the chain doing its own routing, you are behind two routers: you get internet, but port forwarding and VPN stop working. Put that device in bridge mode, or take it out of the chain. If you are not sure what is installed at your address, ask KPN before you start moving cables.

Television

TV is not in the preset. At KPN, TV runs over VLAN 4 and telephony over VLAN 7, separate from the internet VLAN. If you want TV through your MikroTik, add an uplink of its own with that VLAN number and turn IPTV on in the same section; the router then acts as an IGMP proxy. Turn on IGMP snooping on the bridge as well, otherwise the TV stream is sent to every port at once. The whole route is in Recipe: IPTV.

IPv6

The preset asks for a /48 through DHCPv6 prefix delegation on pppoe-out1. Your LAN and your VLANs each get a /64 out of it, the router advertises them, and the IPv6 firewall is on. If you end up with a different block in practice, change the requested length in the IPv6 section. The length is a hint, not a guarantee.

A fixed address

The preset only knows the ordinary case, where the address comes with the connection. If your subscription includes a fixed address or a fixed block, set the uplink type to Static IP address and fill in the address, the gateway and optionally your provider's DNS. The VLAN number stays where it is. Ask KPN for the exact details, because they differ per subscription; see also Recipe: fixed addresses.

Checking that it works

  1. /interface vlan print shows the VLAN interface on your WAN port, with id 6.
  2. /interface pppoe-client print should say running: yes, and the client should sit on that VLAN interface, not on the bare port.
  3. /ip address print shows a public address on pppoe-out1.
  4. /ipv6 dhcp-client print shows the delegated prefix, /ipv6 address print the addresses on your LAN.

What usually goes wrong

  • No VLAN 6. Without the VLAN nothing happens at all, and that looks exactly like a wrong password: silence.
  • The PPPoE client on the wrong interface. It belongs on the VLAN interface, not on ether1.
  • Double NAT. The provider's router is still configured as a router.
  • Sites that stall. Almost always MSS; see MTU.
  • TV does not work. That needs an uplink of its own plus IPTV; the preset does not do it.

Read on: Provider presets, WAN and internet and Example: replacing the provider's router.

Want to try it right away? Open the configurator