FTTH Network Architecture Explained: A Complete Guide for ISPs

What is FTTH Network Architecture?

Fibre to the Home (FTTH) is a broadband network architecture that delivers fibre optic connectivity directly to a residential or business subscriber's premises. Unlike older copper-based technologies such as DSL or ADSL, FTTH provides ultra-high-speed internet access with significantly lower latency, higher bandwidth capacity, and greater reliability.

For ISPs in India, FTTH has become the gold standard for last-mile connectivity — especially as demand for high-speed internet surges across Tier 1, Tier 2, and even Tier 3 cities.

---

Core Components of an FTTH Network

Understanding FTTH architecture starts with knowing its building blocks. Here is a breakdown of the key components:

1. Optical Line Terminal (OLT)

The OLT is the heart of the FTTH network. It sits at the ISP's central office or data centre and acts as the starting point of the fibre optic distribution network.

• Manages downstream and upstream data transmission
• Communicates with multiple Optical Network Units (ONUs) or Optical Network Terminals (ONTs)
• Controls bandwidth allocation using Dynamic Bandwidth Allocation (DBA)
• Connects to the internet backbone via uplink ports

The OLT is responsible for multiplexing data from hundreds or thousands of subscribers onto a single fibre strand using Passive Optical Network (PON) technology.

2. Optical Distribution Network (ODN)

The ODN is the passive infrastructure that carries the optical signal from the OLT to the subscriber's premises. It includes:

• **Feeder fibre**: The primary fibre cable running from the OLT to the distribution point
• **Optical Splitters**: Passive devices that split the fibre signal to multiple subscribers (typically 1:8, 1:16, 1:32, or 1:64 split ratios)
• **Distribution fibre**: Cables running from the splitter to the drop points in a neighbourhood or building
• **Drop fibre**: The final fibre cable running from the distribution point to the subscriber's home

3. Optical Network Terminal (ONT) or ONU

The ONT (also called ONU — Optical Network Unit) is installed at the subscriber's premises. It converts the optical signal from the fibre into electrical signals that end devices like routers, PCs, and smart TVs can use.

• Acts as a modem/gateway for the subscriber
• Supports Ethernet, VoIP, and sometimes CATV ports
• Authenticates with the ISP's network using protocols like PPPoE or IPoE
• Managed remotely using TR-069 or OMCI protocols

---

FTTH Network Topologies

FTTH networks can be designed using different topologies depending on the ISP's scale, geography, and budget.

Point-to-Point (P2P) Topology

In a P2P topology, each subscriber has a dedicated fibre strand running directly from the OLT to the ONT. This offers:

• Maximum bandwidth per subscriber
• No shared medium — highest security
• Higher infrastructure cost due to more fibre and OLT ports

This is typically used in enterprise FTTH or high-end residential deployments.

Point-to-Multipoint (P2MP) — PON Topology

The most common FTTH deployment uses Passive Optical Network (PON) technology in a P2MP topology:

• A single OLT port serves multiple subscribers through passive splitters
• Bandwidth is shared among subscribers on the same PON port
• More cost-effective for large-scale ISP deployments
• Variants include GPON, EPON, XGS-PON, and 10G-EPON

---

GPON vs EPON — Which PON Technology Should ISPs Choose?

Two dominant PON technologies are used in India's FTTH ecosystem:

GPON (Gigabit Passive Optical Network)

• Downstream speed: **2.488 Gbps**
• Upstream speed: **1.244 Gbps**
• Split ratio: Up to **1:128**
• Protocol: ITU-T G.984
• Widely adopted by ISPs in India
• Better suited for mixed traffic including voice, video, and data

EPON (Ethernet Passive Optical Network)

• Downstream speed: **1 Gbps**
• Upstream speed: **1 Gbps**
• Split ratio: Up to **1:32**
• Protocol: IEEE 802.3ah
• Simpler Ethernet-based architecture
• Commonly used in smaller ISP networks

XGS-PON and 10G-EPON

Next-generation PON technologies now support 10 Gbps symmetric speeds and are increasingly being deployed by forward-looking ISPs preparing for future bandwidth demands.

---

FTTH Network Architecture: End-to-End Signal Flow

Here is how data flows through a complete FTTH network from the internet to the subscriber:

1. **Internet Backbone** — The ISP connects to the internet via upstream providers or IXPs (Internet Exchange Points)
2. **Core Router / BRAS** — Handles routing and is the termination point for PPPoE sessions; interacts with RADIUS for authentication
3. **OLT (Optical Line Terminal)** — Converts electrical signals to optical and manages PON traffic
4. **Feeder Fibre** — Carries the optical signal toward the distribution area
5. **Optical Splitter** — Passively splits the signal to multiple subscribers
6. **Drop Fibre** — Final fibre run to the subscriber's home
7. **ONT (Optical Network Terminal)** — Converts optical signal back to electrical; connects to the subscriber's router or device
8. **Subscriber Device** — PC, mobile, smart TV, etc. receives internet access

---

The Role of AAA RADIUS in FTTH Networks

Authentication, Authorisation, and Accounting (AAA) is a critical layer in any FTTH deployment. This is where a robust RADIUS server like OneRADIUS becomes essential for ISPs.

Authentication

When a subscriber connects through their ONT and router, the BRAS or OLT initiates a PPPoE or IPoE session. The network equipment sends an Access-Request to the RADIUS server with the subscriber's credentials.

• **OneRADIUS** validates the username and password against the subscriber database
• If credentials match, it sends an **Access-Accept** response
• If not, it sends an **Access-Reject**, preventing unauthorised access

Authorisation

Once authenticated, OneRADIUS pushes subscriber-specific parameters:

• **IP address assignment** (static or dynamic from IP pools)
• **Bandwidth profile** (upload/download speed limits via rate-limiting attributes)
• **VLAN tagging** for traffic segmentation
• **Service plan mapping** based on the subscriber's active plan

Accounting

OneRADIUS tracks every subscriber session:

• Session start time, end time, and duration
• Data uploaded and downloaded
• IP address used during the session
• Disconnect reason codes

This accounting data is critical for billing integration, fair usage policy (FUP) enforcement, and network capacity planning.

---

FTTH OSS/BSS Integration with RADIUS

A modern FTTH ISP operation requires seamless integration between:

• **OSS (Operations Support Systems)**: Network management, fault management, provisioning
• **BSS (Business Support Systems)**: Billing, CRM, subscriber management
• **RADIUS Server**: Authentication and policy enforcement

OneRADIUS integrates with popular ISP billing platforms via standard APIs and RADIUS protocols, enabling:

• **Automatic subscriber provisioning** when a new plan is activated
• **Instant service suspension** when a subscriber's plan expires or payment is overdue
• **Plan upgrade/downgrade** applied in real-time without subscriber disconnection
• **Usage reports and analytics** fed back to the billing system

---

FTTH Network Management Best Practices for ISPs

Deploying FTTH is just the beginning. ISPs must follow best practices to ensure network reliability and subscriber satisfaction.

Proper Optical Power Budget Planning

• Calculate optical loss across the fibre span including connector losses, splice losses, and splitter insertion loss
• Ensure the received optical power at the ONT is within the acceptable range (typically -8 dBm to -27 dBm for GPON)
• Use OTDR (Optical Time Domain Reflectometer) for fibre testing and fault location

Redundancy and Failover

• Deploy redundant OLT uplinks to avoid single points of failure
• Use ring or dual-homing architectures for feeder fibre protection
• Ensure RADIUS server high availability with primary and secondary server configuration

Monitoring and Alerts

• Monitor OLT and ONT optical signal levels in real-time
• Set up alerts for ONT optical signal degradation before it causes subscriber complaints
• Monitor RADIUS server performance — response times, authentication success/failure rates, and session counts

Security Considerations

• Use **VLAN-based subscriber isolation** to prevent traffic sniffing
• Enable **MAC address binding** at the OLT level
• Configure RADIUS shared secrets securely and rotate them periodically
• Implement DDoS protection at the network edge

---

Common FTTH Deployment Challenges in India

Indian ISPs face unique challenges when deploying FTTH networks:

• **Right-of-Way (RoW) permissions**: Obtaining permissions from local municipal bodies for underground or aerial fibre laying
• **Last-mile connectivity in dense urban areas**: Navigating crowded building complexes and high-rise apartments
• **Power availability for active equipment**: Ensuring OLT and network equipment have reliable power including UPS and generator backup
• **Subscriber education**: Helping end users understand ONT maintenance and avoid accidental fibre damage
• **Scaling RADIUS infrastructure**: As subscriber counts grow, ISPs must scale their RADIUS servers to handle millions of authentication requests

---

Why Indian ISPs Choose OneRADIUS for FTTH Networks

OneRADIUS by ARCR Technologies, Hyderabad, is a purpose-built AAA RADIUS server solution designed specifically for the needs of Indian ISPs operating FTTH networks.

Key Features of OneRADIUS:

• **High performance**: Handles millions of authentication requests with sub-millisecond response times
• **Multi-NAS support**: Works with all major OLT vendors including ZTE, Huawei, Nokia, and Calix
• **PPPoE and IPoE support**: Compatible with both authentication methods used in FTTH deployments
• **Dynamic IP pool management**: Efficiently assigns IPs across large subscriber bases
• **FUP enforcement**: Real-time bandwidth throttling when data limits are reached
• **Billing system integration**: APIs for integration with popular ISP billing software
• **Web-based management console**: Easy-to-use dashboard for subscriber and session management
• **Detailed reporting**: Session logs, accounting reports, and usage analytics
• **India-specific compliance**: Designed keeping TRAI regulations and Indian ISP licensing requirements in mind

---

Conclusion

FTTH network architecture represents the future of broadband connectivity in India. From the OLT at the ISP's data centre to the ONT at the subscriber's home, every component plays a critical role in delivering fast, reliable, and secure internet access.

For ISPs, the success of an FTTH network depends not just on the physical infrastructure but also on the intelligence layer that manages subscriber access — and that is where AAA RADIUS authentication becomes indispensable.

OneRADIUS provides Indian ISPs with a battle-tested, scalable, and feature-rich RADIUS server solution that integrates seamlessly into FTTH network architectures, helping ISPs manage subscribers efficiently, enforce policies automatically, and scale their networks with confidence.