Telekom

Telekom delivers internet with PPPoE over VLAN 7 on the WAN port, on DSL and on fibre. The mechanics are simple enough; the username is not. At Telekom it is a run of numbers glued together, and one digit wrong gives the same picture as a wrong VLAN: no connection and no explanation.

What the preset fills in

Pick Telekom from the provider list at the top of the WAN / internet section:

• Type PPPoE.
• VLAN id on the WAN port set to 7.
• The PPPoE interface keeps the name pppoe-out1.
• The MTU field is cleared, so RouterOS works out the PPPoE MTU itself.
• A comment Telekom on the uplink.
• IPv6 is turned on with prefix delegation at a requested length of /56, on pppoe-out1, with the IPv6 firewall on.

The username and password stay empty. Unlike KPN, this preset fills in no credentials, because at Telekom they belong to your line. Both fields are required: fill them in before you generate the script.

Your username

The details are in your access-data letter. The username is three parts run together, with no spaces or dashes: the Anschlusskennung, the T-Online-Nummer and the Mitbenutzernummer, followed by @t-online.de. The password is the personal password from that same letter. If you cannot find the letter, ask Telekom for the details; we cannot work them out for you.

What you still do yourself

The WAN port. The preset leaves the port that was already set and otherwise takes your model's default WAN port. That is where the cable from the wall socket goes.

TCP MSS. With PPPoE the clamp TCP MSS switch appears and it should stay on. With it off, most sites load and the occasional one stalls, which is the fault you spend the longest looking for.

The rest of your network. LAN, Wi-Fi, VLANs, firewall and admin password stay yours. The preset only touches the first uplink and IPv6.

The box on the wall

PPPoE means your MikroTik does the login. Everything in front of it therefore has to pass the traffic through untouched, VLAN tag included. If you are using a Telekom router now, it goes out of the chain or into bridge mode, otherwise you are behind two routers and port forwarding and VPN stop working. Ask Telekom what exactly is installed at your address and what it needs.

Television

MagentaTV runs over the ordinary internet connection. There is nothing to do for it in the configurator: no second uplink, no VLAN of its own, and IPTV does not have to be on. The IPTV switch is there for providers that push TV into your network as multicast.

If your recorder or TV box turns out to need something else, check with Telekom before you start changing firewall rules.

IPv6

The preset asks for a /56 through DHCPv6 prefix delegation on pppoe-out1. Your LAN and VLANs each get a /64 out of it, the router advertises them and the IPv6 firewall is on. The length is a hint: if you get something else, change it in the IPv6 section.

A fixed address

The preset only knows the ordinary consumer case. If your subscription includes a fixed address or block, set the type to Static IP address and fill in the address, gateway and DNS as Telekom gave them to you. The VLAN number stays where it is. See Recipe: fixed addresses.

Checking that it works

1. /interface vlan print shows the VLAN interface with id 7 on your WAN port.
2. /interface pppoe-client print should say running: yes, on that VLAN interface.
3. /ip address print shows a public address on pppoe-out1.
4. If the connection never comes up, look at /log print: it says whether the other end is silent or the login is refused.

What usually goes wrong

• A mistake in the username. The three numbers belong glued together, followed by @t-online.de.
• No VLAN 7. Without the VLAN nothing happens, and it looks like a wrong password.
• Empty credentials. The preset deliberately leaves them blank; the script only generates once you have filled them in.
• Double NAT. The provider's device is still configured as a router.
• Sites that stall. MSS; see MTU.

Read on: Provider presets, WAN and internet and IPv6.