logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

How do I set up a VLAN for the Internet on the ZTE ZXHN F601 and H3640 from INEI?

twisteros2 27429 31
Best answers LABEL_AI_GENERATED

What VLAN should I configure for Internet on an INEA ZTE ZXHN F601/H3640 installation?

There is no single universal Internet VLAN for INEA/INEI; on some installations it is VLAN 20, while on others the Internet is untagged, so you have to verify your own line. In one case on the Światłowód Inwestycje network, VLAN 20 worked and was confirmed by Wireshark [#20941294] Another user in Poznań Rataje found the opposite: Internet ran without any VLAN tag, VoIP used VLAN 20, and TV used VLAN 350 [#21055438] The practical way to check is to sniff the traffic from the INEA router with Wireshark or tcpdump while it boots, ideally using a bridge/port-mirroring setup or two NICs [#20963294][#21055438] If you are trying your own router, some users also reported that MAC cloning was unnecessary and that simply power-cycling the ONT/router sequence could be enough on their setup [#20907675]
AI summary based on the discussion. May contain errors.
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
Report a violation of the law
Reply | New topic

  • Asking which VLAN carries internet service

    #1 20863595
    twisteros2
    Level 3  
    Posts: 20
    Rate: 4
    They connected my light from INEI (infrastructure ¶I). I got an ONT terminal ZTE ZXHN F601 (as pictured) and a ZTE ZXHN H3640 router. He wants to connect his router to the ONT. I found information on SAT Kurier that the internet is on VLAN 60. I cloned the MAC, set this VLAN, switched off the ONT for a few minutes and it does not work. INEA says it does not give customers such information. Which VLAN is the internet on? (the other two are VOIP/Management and IPTV)

    White ZTE ZXHN F601 ONT device with two ports and a power button. .
  • ADVERTISEMENT
  • #2 20863644
    Anonymous
    Level 1  
  • #3 20863655
    twisteros2
    Level 3  
    Posts: 20
    Rate: 4
    I have seen this topic and tried this VLAN (60), without success. I called INEA twice and they said they don't support bridge mode or connecting their router. But if it works for me, they don't mind. I found another post where TV does not work https://eko.one.pl/forum/viewtopic.php?id=23337 Supposedly giving INEA dns (dhcp list) helps. I'm going to try it right away.
  • #4 20900520
    prokimac13
    Level 4  
    Posts: 7
    Help: 2
    Rate: 8
    And how did you manage to do something?
  • ADVERTISEMENT

  • Suggests bridging the ONT and sniffing VLAN frames

    #5 20900765
    twisteros2
    Level 3  
    Posts: 20
    Rate: 4
    Unfortunately no. I tried different VLAN values that are used in other networks but none fit. Unfortunately it's not a standard and everyone chooses a different value. And the number as far as I know can be in the range 1-65535. And INEA said they don't share this data. There is an option to put a bridge between the ONT and their router, run tcpdump on it and analyze the frames. If you find out or come to anything let me know.
  • #6 20900769
    prokimac13
    Level 4  
    Posts: 7
    Help: 2
    Rate: 8
    They are supposed to install at my place after 20 January, then the fun will start 😎. If anything works out I'll be sure to let you know.

  • ONT power-cycle avoids VLAN and MAC cloning

    #7 20907675
    krzemunio
    Level 1  
    Posts: 1
    You don't need to set anything or clone the MAC. Disconnect the router from the ONT, turn off the ONT (I think 1 min is enough) and connect your router. Start up the ONT and your router. I did this at my place and everything is working with my Archer C7. As for bridge mode - during a conversation with a technician I heard info that it can be set but you have to contact INEA support as only they can change it. INEA support, on the other hand, says that they do not have the option of setting bridge with these routers.
  • #8 20908281
    twisteros2
    Level 3  
    Posts: 20
    Rate: 4
    What company and model of ONT did you get?
  • #9 20939576
    prokimac13
    Level 4  
    Posts: 7
    Help: 2
    Rate: 8
    They installed my services yesterday, ONT I got from Huawei, router also H3640. After connecting the Tplink AX55 same as you, it doesn't assign an address. I'll try with tcpdump tomorrow to capture something and let you know.
  • Helpful post
    #10 20941294
    prokimac13
    Level 4  
    Posts: 7
    Help: 2
    Rate: 8
    A screenshot from Wireshark showing a VLAN 802.1Q packet with ID: 20. .
    We got it, dear. VLAN 20 worked for me. Inea on the Światłowód Inwestycje network. Intercepted by Wireshark.
  • ADVERTISEMENT
  • #11 20962294
    twisteros2
    Level 3  
    Posts: 20
    Rate: 4
    Congrats. I didn't have the patience and said goodbye. Maybe I will come back. Are you happy with transfers and pings?
  • ADVERTISEMENT
  • #12 20962342
    prokimac13
    Level 4  
    Posts: 7
    Help: 2
    Rate: 8
    Yes, with a tariff of 1000/300 the real download comes out around 920 and upload around 280. Ping to Poland around 4-6 ms. Tests done on speedtest.pl. I have purchased a variable public IP, set Wireguard, everything works without any problems. So far, I have no complaints when it comes to technical matters.

  • Need the ISP VLAN ID for WAN setup

    #13 20963282
    Breethagh
    Level 2  
    Posts: 2
    Hi.
    prokimac13

    Need help setting up Inea for fibre investment 1000/300.

    I have received.
    ONT : Huawei echolife HG8010Hv3
    Router : ZTE ZXHN H3640.

    Please help to configure this as I have 2 weeks left to terminate my contract.
    my router is an Asus GTAX6000. Config wan as in the screenshot .

    How to check what VLAN and how to do it HELP PLIX.

    Screenshot of network configuration for Asus GTAX6000 router showing WAN, VLAN, and DNS settings. .

    Added after 1 [minute]:
  • Helpful post

    Wireshark reveals required WAN VLAN tag

    #14 20963294
    prokimac13
    Level 4  
    Posts: 7
    Help: 2
    Rate: 8
    Hi, it is possible that they are running on a different VLAN in your region. I'm not an expert so I don't know how this should be done according to the art, however I did the following:

    - Downloading WireShark
    - Connecting the INEA router (ZTE) to the power supply, without ONT.
    - Waiting a while for it to boot
    - Connecting the computer via ethernet to the ZTE to the WAN port
    - Start WireShark

    And in WireShark I found out what VLAN it was calling for.
    Screenshot of IPTV/VLAN configuration settings on a router. .

  • VLAN 20 and DNS settings for Asus internet access

    #15 20963306
    Breethagh
    Level 2  
    Posts: 2
    Colleague orbit is not upset, I am still in the process of configuring, network iot etc. and in euphoria that I do not have to terminate the contract :) .

    My configuration on the Asus:
    Screenshot of the ASUS router configuration interface showing WAN settings. .

    Brwinów near Warsaw / 05-840
    Vlan 20
    DNS (all available ones work for me)
    Mac address I cloned, but it worked without the clone.
    -----------
    We have this Mordo!!!!

    I took 4gsm (porting)+ Fibre from them.

    I've already walked on knives with them today, either they give data or out and I go to orange.
    Contract just signed.

    I was worried about PPPOE and here I didn't even clone Mac.
  • #16 20963318
    prokimac13
    Level 4  
    Posts: 7
    Help: 2
    Rate: 8
    There goes the guitar. What VLAN were you using?
  • #17 20963340
    Anonymous
    Level 1  

  • VLAN 20 works; asks VoIP VLAN

    #18 20968015
    dipalomeri
    Level 4  
    Posts: 5
    My location is Zgierz near Lodz. After setting vlan 20 it worked straight away. I also set the MAC just in case, but I do not know if this was necessary. It works great on my redmi AX5. This router is a bit over the top. The fact that it consumes 3 times more power than my router is the least of the problems. It turns out their router can't see my smart switches from sonoff to wifi - despite changing all the settings. Does anyone know what the vlan for VoIP is?
  • #19 21000251
    Daro6602
    Level 5  
    Posts: 32
    Rate: 2
    >>20963306 .
    Hi I understand you took internet alone without TV? What pings in games do you have CS:GO VALORANT? Have you checked the routing perhaps?

  • MAC cloning still gets no DHCP on VLAN 20 and 350

    #20 21000637
    bernanio
    Level 14  
    Posts: 83
    Help: 6
    Rate: 15
    INEA, VLAN 20 and VLAN 350, does not allocate IPs after MAC cloning, has anyone reworked this? I know there are a couple of other parameters, but would rather not play around with it.
    802.1Q Virtual LAN, PRI: 4, DEI: 0, ID: 20
    Client MAC address: zte_xx:xx:xx (cc:29:bd:xx:xx:xx)
    Client hardware address padding: 00000000000000000000
    Server host name not given
    Boot file name not given
    Magic cookie: DHCP
    Option: (53) DHCP Message Type (Discover)
    Length: 1
    DHCP: Discover (1)
    Option: (60) Vendor class identifier
    Length: 15
    Vendor class identifier: ZXHN_H3640-mngt
    Option: (12) Host Name
    Length: 26
    Host Name: atadevicecc:29:bd:xx:xx:xx
    Option: (61) Client identifier
    Length: 7
    Hardware type: Ethernet (0x01)
    Client MAC address: zte_xx:xx:xx (cc:29:bd:xx:xx:xx)
    Option: (55) Parameter Request List
    Length: 8
    Parameter Request List Item: (1) Subnet Mask
    Parameter Request List Item: (3) Router
    Parameter Request List Item: (6) Domain Name Server
    Parameter Request List Item: (51) IP Address Lease Time
    Parameter Request List Item: (54) DHCP Server Identifier
    Parameter Request List Item: (121) Classless Static Route
    Parameter Request List Item: (43) Vendor-Specific Information
    Parameter Request List Item: (42) Network Time Protocol Servers
    Option: (255) End
    Option End: 255

    Similarly on VLAN 350



    Has anyone wrapped up a TR-069 at INEA?

  • Requesting help finding VLAN IDs in Wireshark

    #21 21009016
    dipalomeri
    Level 4  
    Posts: 5

    >>20963294 .
    As I wrote in a previous post VLAN 20 works perfectly for me. However, out of curiosity, following your instructions, I plugged in the Inea router and enabled Wireshark. I should add that I have not used this tool before, but after running it nowhere do I see where you extracted the no. VLAN.
    Could you please guide me where to find it, as I would also like to extract the VLAN for VoIP and TV. Thank you in advance.
    Attachments:
    • How do I set up a VLAN for the Internet on the ZTE ZXHN F601 and H3640 from INEI? Bez tytułu.jpg (401.01 KB) You must be logged in to download this attachment.

  • Using two NICs and Wireshark to capture startup traffic

    #22 21009396
    bernanio
    Level 14  
    Posts: 83
    Help: 6
    Rate: 15
    You need to use 2 Ethernet cards, you make a bridge connection (that's what it was called in windows somehow) and run Wireshark on that interface, for simplicity you turn off the devices, plug in through wireshark, turn on the devices and you have everything to read from startup.
    You can save the file from the scan and analyse it later, or send it to someone for analysis. In the case I am working on, there is also TR-068 support, apparently additional parameters are provided via this protocol, including SIP configuration for VoIP

  • VLAN setup still needs login and SIP credentials

    #23 21009877
    dipalomeri
    Level 4  
    Posts: 5
    Let's just say I'm at a moderately higher level in these topics but I didn't understand your statement in the part where you write about 2 cards and how to connect this with the router. Also, it deviates a bit from the instructions given in your previous posts. As for the second part of your post, I share your concerns. The VLAN alone won't help if I don't have login credentials. I read on some forum that after a reset to factory settings you can quickly go into the settings and disable this TR 069 protocol. But this probably also does not solve the problem because you also do not have the data to run VoIP. PS I have read the Wireshark documentation and more or less know what it is all about, but it is a bit too much work. Success still depends on the type of network cards you have and I don't really want to wrestle with the drivers. Let me know if you manage to extract the SIP data.
  • #24 21011382
    kokosoft
    Level 15  
    Posts: 99
    Help: 8
    Rate: 23

    Instead of a computer with 2 cards, you can use a router with the port mirroring option
  • #25 21011566
    Anonymous
    Level 1  
  • #26 21012972
    kemus
    Level 10  
    Posts: 46
    Rate: 6

    Anyone know what is the VLAN for VOIP? And how to read this VoIP password from this H3640 router from inei? And how do you embrace it on the Mikrotik?

  • Internet untagged, VoIP on VLAN 20, TV on VLAN 350

    #27 21055438
    sawik_7BF
    Level 12  
    Posts: 28
    Rate: 5
    Using the switch method with port mirroring, I have established that the Internet is running without a VLAN tag, VoIP on VLAN 20, and TV on VLAN 350. INEA, Poznań Rataje, router H3640, and ONT I cannot remember. As for VoIP, it is the most popular SIP. Unfortunately, the registration password after SIP is sitting in the router and I don't really know how to extract it, and at the helpline they told me that they don't share such data with individual customers. Therefore the option with my own ATA gateway, IP phone or mobile app is out :( A big minus in my opinion.
  • #28 21058750
    dipalomeri
    Level 4  
    Posts: 5
    I don't know. I had to set vlan 20 to wan for the internet to work. Without setting vlan 20 the internet does not work. As for vlan on voip I don't know because without passwords nothing can be done anyway. Perhaps voip also works on vlan 20. By the way, have you checked on another router whether the internet works without setting vlan 20?
  • #29 21060363
    sawik_7BF
    Level 12  
    Posts: 28
    Rate: 5
    For the time being, I was only doing a passive analysis, just eavesdropping on the existing transmission. Eventually, INEA can use different VLANs in different locations, why not. In a while, I'll probably also have data from another Ratai location.
  • #30 21187772
    donat2000
    Level 11  
    Posts: 19
    Rate: 4
    My question is, what router do you recommend instead of what INEA gives? Second question, has anyone figured out the VoIP gateway, login and password?
Reply | New topic
Report a violation of the law

Topic summary

LABEL_AI_GENERATED
The discussion focuses on configuring VLAN settings for Internet access on INEA's fiber optic service using ZTE ZXHN F601 ONT and ZTE ZXHN H3640 router. Users report that the Internet VLAN is typically VLAN 20, not VLAN 60 as initially assumed, with VLAN 20 required on the WAN interface for proper IP assignment and connectivity. VoIP and IPTV services use different VLANs, commonly VLAN 20 for VoIP and VLAN 350 for IPTV, but credentials for VoIP (SIP login and password) are not provided by INEA, limiting third-party VoIP device integration. Attempts to enable bridge mode on the ONT/router are generally unsupported or require INEA intervention. Some users successfully identified VLANs by capturing traffic with Wireshark or using port mirroring on switches. Cloning the MAC address is sometimes used but not always necessary. Alternative routers like Ubiquiti EdgeRouter-X and Asus GTAX6000 have been tested with VLAN 20 settings, with mixed stability results. The discussion also highlights regional VLAN variations and the challenge of extracting VoIP credentials from the ZTE H3640 router. Overall, VLAN 20 is the key setting for Internet on INEA's fiber infrastructure, with additional VLANs for VoIP and IPTV, but full configuration details and credentials remain restricted by the ISP.
AI summary based on the discussion. May contain errors.

FAQ LABEL_AI_GENERATED

TL;DR: If INEA fiber on Światłowód Inwestycje will not work with your own router, start with VLAN 20; one user on 1000/300 Mb/s reported 920/280 Mb/s and said, "everything works without any problems." This FAQ is for users replacing the ZTE H3640 behind a ZTE F601 or Huawei ONT and needing stable WAN settings. [#20962342]

Why it matters: INEA deployments in different locations can use different WAN behavior, so the right setup can be VLAN 20, auto-detect, or passive packet capture before you change hardware.

Setup path Reported result Notes
Manual WAN VLAN 20 Worked on several Światłowód Inwestycje installs Confirmed on Asus, TP-Link, Redmi, EdgeRouter cases
WAN on auto / no manual VLAN Worked on at least one UDM-Pro install Useful when manual VLAN trials fail
Passive capture with Wireshark / mirroring Revealed live VLANs Best when the ISP will not disclose settings
Reconnecting original ZTE router Restored service in one unstable EdgeRouter case Often gave a new IP afterward

Key insight: There is no single universal INEA VLAN recipe in the thread. VLAN 20 solved most custom-router internet cases, but at least one user reported internet without a VLAN tag and another succeeded by leaving WAN on auto. [#21060363]

Quick Facts

  • Reported real throughput on a 1000/300 Mb/s plan was about 920 Mb/s down and 280 Mb/s up, with 4-6 ms ping to Polish servers in Speedtest. [#20962342]
  • In one successful replacement, an ONT power cycle of about 1 minute was enough before connecting a third-party router directly. [#20907675]
  • Users explicitly noted that VLAN IDs can span 1-65535, which is why trial-and-error is slow without packet capture. [#20900765]
  • A forum user in Brwinów near Warsaw reported a working Asus setup on VLAN 20 and said MAC cloning was unnecessary. [#20963306]
  • One user complained that the ISP ZTE router drew about 3× the power of a Redmi AX5 and still had trouble with Sonoff Wi‑Fi switches. [#20968015]

How do I configure a third-party router to work with INEA fiber when the installation uses a ZTE ZXHN F601 ONT and ZTE ZXHN H3640 router?

Connect your router directly to the ONT, reboot the ONT, and start with DHCP on the WAN. If DHCP alone does not work, set WAN VLAN 20 and test again. Several users replaced the H3640 successfully this way on Asus, TP-Link, Redmi, and Ubiquiti hardware. MAC cloning was often unnecessary once the ONT restarted cleanly. [#20963306]

Which VLAN ID is used for Internet access on INEA over Światłowód Inwestycje infrastructure, and why do some users report VLAN 20 while others say no VLAN tag is needed?

VLAN 20 is the most frequently reported internet VLAN in the thread, but not every installation behaved the same. One user captured traffic in Poznań Rataje and reported internet without a VLAN tag, VoIP on VLAN 20, and TV on VLAN 350. Another user with a UDM-Pro said leaving WAN on auto worked immediately. The practical conclusion is regional or platform variation, not one universal tag. [#21055438]

What is bridge mode on an ONT or ISP router, and how does it help when replacing the INEA ZTE H3640 with your own router?

Bridge mode passes the WAN connection through without routing or NAT on the ISP router. "Bridge mode" is a network mode that forwards traffic transparently, without the router doing local routing, NAT, or Wi‑Fi gateway functions. It helps because your own router becomes the main edge device and avoids double-router behavior. In the thread, users heard bridge mode might exist, but support responses were inconsistent. [#20907675]

How can I use Wireshark or tcpdump to discover the WAN VLAN used by the INEA ZTE H3640 router?

Capture the H3640 startup traffic and inspect DHCP frames for 802.1Q tags. One workable method was to power the ZTE router without the ONT, connect a PC by Ethernet, start Wireshark, and watch what VLAN the router requests. Another user suggested inserting a bridge between the ONT and router and analyzing frames with tcpdump. The fastest clue is the VLAN number shown next to DHCP Discover traffic. [#20963294]

What is TR-069 and TR-068 in the context of ISP routers like the ZTE ZXHN H3640, and how do they affect internet and VoIP configuration?

They are remote-management mechanisms that can push settings to the ISP router. "TR-069" is a remote-management protocol that lets an ISP provision and control a customer router, including service parameters, after installation. In the thread, users suspected extra VoIP parameters arrived through TR-068 or related provisioning, which explains why knowing only the VLAN was not enough to recreate voice service on your own hardware. [#21009396]

Why doesn’t cloning the MAC address always make a custom router work on INEA fiber after disconnecting the original H3640?

Because the blocking factor may be VLAN or session state, not MAC alone. Several users reported success without cloning any MAC address once they used the correct WAN setup, especially VLAN 20 or auto-detect. One post also showed that reconnecting the original ZTE router could restore service and lead to a new IP later, which points to a DHCP or lease-state issue rather than pure MAC filtering. [#21320463]

What step-by-step method can I use with two Ethernet cards and a bridge connection in Windows to capture VLAN traffic between the ONT and the INEA router?

Use a transparent bridge between the ONT and H3640, then sniff the bridged interface. 1. Install two Ethernet adapters in a Windows PC and create a bridge between them. 2. Connect ONT -> PC card 1 and PC card 2 -> INEA router, then power both devices off. 3. Start Wireshark on the bridge interface, power devices on, and read VLAN tags from startup traffic. [#21009396]

How does port mirroring on a switch compare with using a PC and two network cards for analyzing INEA router traffic?

Port mirroring on a switch is simpler and cleaner if you already own the switch. It lets you copy live traffic from the ONT-router link to a monitoring port without building a Windows bridge or relying on NIC drivers. The thread explicitly recommended mirroring as a replacement for the two-card PC method, especially for passive analysis of VLANs and service traffic. [#21011566]

Why does my Asus GT-AX6000, TP-Link AX55, Archer C7, or Ubiquiti EdgeRouter need different WAN settings on INEA even though the ISP equipment is similar?

Because similar ONT and H3640 hardware did not guarantee identical provisioning in the field. In the thread, Archer C7 worked after a simple ONT restart, Asus GT-AX6000 and TP-Link AX55 users needed VLAN 20, and one UDM-Pro worked on auto. Different regions, access networks, or backend profiles can change whether WAN needs a tag, plain DHCP, or a clean lease reset. [#21353167]

What could cause Internet on an EdgeRouter-X to stop working every few days on INEA until the original ZTE router is reconnected and a new IP is assigned?

The most likely cause from the thread is a WAN lease or session problem on the provider side, not local Wi‑Fi or LAN settings. One EdgeRouter-X user reported that every few days the link died, reconnecting the original ZTE restored service, and the custom router then received a new IP. MAC cloning did not fix it, which narrows the issue to DHCP state, timeout handling, or ISP-side binding behavior. [#21320463]

How do I find the VoIP VLAN, SIP login, and password from an INEA ZTE ZXHN H3640 setup when the ISP does not provide those details?

You can usually find the VLAN by passive capture, but not the SIP password. A user who mirrored traffic reported VoIP on VLAN 20 and said the service used standard SIP, yet the registration password stayed inside the router and the helpline would not disclose it. That means your own ATA, IP phone, or softphone remains blocked unless you extract credentials from the H3640 itself. [#21055438]

Which VLANs are used by INEA for Internet, VoIP, management, and IPTV on ZTE or Huawei ONT installations, based on user reports from different regions?

The thread shows no single national map, only field reports. Multiple users on Światłowód Inwestycje got internet working on VLAN 20. One mirrored capture from Poznań Rataje reported internet untagged, VoIP on VLAN 20, and IPTV on VLAN 350. Management traffic also appeared in captures through DHCP vendor identification, but no single management VLAN ID was confirmed across all sites. [#21055438]

What WAN settings should I try first on a UDM-Pro, MikroTik, Asus, or TP-Link router when moving from the INEA H3640 to my own hardware?

Start with DHCP on WAN and auto VLAN detection. If that fails, set manual VLAN 20, reboot the ONT, and retry without PPPoE. On Asus and TP-Link, users reported working internet with VLAN 20 and no required MAC clone. On UDM-Pro, one user said auto worked with no manual VLAN at all. That gives you a low-risk two-step order: auto first, VLAN 20 second. [#21353167]

Why would a router work on INEA with WAN left on auto-detect while another setup requires manually setting VLAN 20?

Because the thread shows at least two live access profiles. One user with a UDM-Pro said auto WAN worked immediately, while several others needed VLAN 20 on Asus, TP-Link, Redmi, and EdgeRouter devices. The difference can come from regional provisioning or from how a router handles untagged versus tagged DHCP on the WAN. The safest reading is that both behaviors are real on INEA-related installs. [#21353167]

What router models are good replacements for the INEA-provided ZTE H3640 if I want stable internet, better Wi‑Fi, and support for features like WireGuard or public IP?

The strongest thread-backed replacements were TP-Link AX55, Asus GT-AX6000, Archer C7, Redmi AX5, UDM-Pro, and EdgeRouter-X. One user on a 1000/300 Mb/s plan reported about 920/280 Mb/s, 4-6 ms ping, a purchased public IP, and working WireGuard after replacing the ISP router. That makes modern Asus, TP-Link, or Ubiquiti hardware the best proven upgrade paths in this discussion. [#20962342]
AI summary based on the discussion. May contain errors.
ADVERTISEMENT