Use case · Altnet FTTP
Terminate open-access FTTP on your own edge.
An open-access or altnet fibre network hands you subscriber circuits over an NNI, tagged per operator. Netavo BNG terminates them — PPPoE or IPoE, your choice per NNI — authenticates each line against your RADIUS, hands out a dual-stack address and accounts the session. The scarce IPv4 behind it is stretched by CG-NAT on the same box.
A national open-access or wholesale fibre provider delivers every subscriber circuit over a shared hand-off, each retail operator separated by an outer VLAN. You point an access NNI at that S-tag and terminate the C-VLANs inside it, so one physical hand-off carries your whole subscriber base.
Each line comes up as PPPoE or IPoE and is authenticated against your RADIUS or subscriber database. Addressing is dual-stack from named pools — an IPv4 lease, a routed IPv6 /64 and a delegated /56 — placed in a per-service VRF, with the subscriber's speed plan applied as QoS.
IPv4 scarcity is handled in place: the inside pool is a private range that CG-NAT on the same box translates to a small public block, and is never announced. Nothing about the model needs a second appliance.
Subscribers and the sessions they hold, addressed from the FTTP pools, in the management portal.
An access NNI names the hand-off interface and its S-tag; ipoe (or pppoe) terminates the circuits; auth points at RADIUS; the pools carry v4, a /64 WAN and a /56 PD in the service VRF; and a cgn IP group gives that VRF its public addresses.
This is an overlay on a working config — only the subscriber-facing sections are shown. The same schema terminates a directly-attached line; only the access NNI is specific to the wholesale hand-off.
An overlay on a working config: only the subscriber-facing sections are shown.
Live sessions across the hand-off — PPPoE and IPoE side by side, each addressed from the FTTP pool.
Pool utilisation, with the v6 WAN and PD prefixes announced into BGP and the v4 inside pool held back for CG-NAT.
One hand-off, your whole base.
A single access NNI terminates every operator C-VLAN inside the wholesale S-tag, so the subscriber edge scales with cores rather than line cards.
Dual-stack from day one.
Every subscriber gets IPv4 plus a routed IPv6 /64 and a delegated /56 from the pools, with no separate provisioning step.
IPv4 stretched on the box.
Integrated CG-NAT translates the private inside pool to a small public block, so a handful of public addresses serves thousands of lines.
Policy is yours.
RADIUS auth, accounting and CoA, per-subscriber QoS and per-service VRFs are all terminated here, not in the access provider's network.
Bring a test circuit up.
Start a free evaluation and terminate a test line, or read the access-NNI guide for the full hand-off and addressing reference.