Huawei OLT Complete Setup Guide — MA5683T, MA5608T & MA5800 [2026]

M
Madan KC — ISP Network Engineer
Daily hands-on experience with Huawei MA5683T, MA5608T & MA5800 series since 2017
Huawei OLT Expert GPON Field Engineer Updated 2026
⚡ Quick Answer

Huawei OLT setup order: Connect console → login root/admin → enable → config → set hostname → confirm boards → create VLANs → configure uplink → set management IP → create DBA/line/service profiles → enable GPON ports → add ONT by SN → create service-port → save.

Huawei OLT (MA5683T, MA5608T, MA5800 series) is the world’s most deployed GPON equipment. Configuring it from scratch requires precise steps in the right order — miss one and your ONTs won’t register or subscribers won’t get traffic. This guide covers every step from console login to live subscriber, written from real ISP deployment experience.

🔶

Huawei OLT Model Overview — Which One Do You Have?

Click your model for specific notes on defaults and quirks:

🏗️
MA5683T
Large chassis
📦
MA5608T
Mid-range
🚀
MA5800 Series
X2/X7/X15/X17
🔧
MA5600T
Older/legacy
⚡
EA5800
XGS-PON
🔑
Default Logins
All models
ModelPON PortsMax ONTsDefault ETH IPConsole Login
MA5683TUp to 112 GPON716810.11.104.2root / admin
MA5608TUp to 32 GPON204810.11.104.2root / admin
MA5800-X7Up to 112 GPON716810.11.104.2root / admin123
MA5800-X17Up to 272 GPON1740810.11.104.2root / admin123
MA5600TUp to 64 GPON409610.11.104.2root / admin
EA5800-X2Up to 32 XGS-PON2048192.168.100.1admin / Admin@123
🖥️

1. Login & Console Access

Use this for first-time setup — works even if IP is not configured.

  • Connect OLT CON (console) port to PC via RJ45-to-DB9 serial cable
  • Open PuTTY → Serial → COM port (check Device Manager) → Speed: 9600
  • Data bits: 8 | Parity: None | Stop bits: 1 | Flow: None → Open
  • Press Enter → login prompt appears
  • Username: root | Password: admin (or admin123 for MA5800)
Login: root
Password: admin
enable
config
! Prompt changes to: MA5683T(config)#

The meth0 (management Ethernet) port has a fixed default IP of 10.11.104.2/24. This is separate from all service ports.

  • Connect PC to OLT ETH/MGMT port with Ethernet cable
  • Set PC IP to 10.11.104.1 / mask 255.255.255.0
  • Open PuTTY → Telnet → Host: 10.11.104.2 → Port: 23
  • Username: root | Password: admin
📌 Note: The meth0 port is for management only — you cannot pass subscriber traffic through it.

Once management IP is configured (Section 7), connect remotely:

! Enable SSH (recommended over Telnet)
MA5683T(config)#ssh server
MA5683T(config)#ssh authentication-type default password
MA5683T(config)#save

! MA5800 series — enable Telnet first:
MA5800(config)#telnet server enable
MA5800(config)#save
⚙️

2. Hostname, Password & Auto-Save

MA5683T>enable
MA5683T#config

! ── Set hostname ──
MA5683T(config)#sysname ISP-Huawei-OLT-01

! ── Add admin user ──
ISP-Huawei-OLT-01(config)#aaa
ISP-Huawei-OLT-01(config-aaa)#local-user admin password irreversible-cipher YourPass@2026
ISP-Huawei-OLT-01(config-aaa)#local-user admin service-type terminal ssh telnet
ISP-Huawei-OLT-01(config-aaa)#local-user admin privilege level 15
ISP-Huawei-OLT-01(config-aaa)#quit

! ── Enable auto-save every 60 minutes ──
ISP-Huawei-OLT-01(config)#autosave interval 60

ISP-Huawei-OLT-01(config)#save
⚠️ Change the default password immediately. Default credentials root/admin are publicly known. Any device on your network can access your OLT with them.
🗂️

3. Confirm Service Boards

New or added GPON/EPON service boards appear as autofind — they must be confirmed before they become active.

! ── Check all boards in chassis ──
MA5683T(config)#display board 0

! ── Confirm all boards in slot 0 at once ──
MA5683T(config)#board confirm 0

! ── Or confirm individual slots ──
MA5683T(config)#board confirm 0/1
MA5683T(config)#board confirm 0/5

! ── Manually add a board (if not auto-detected) ──
MA5683T(config)#board add 0/6 H805GPFD

! ── Verify boards are Active_normal ──
MA5683T(config)#display board 0
MA5683T(config)#save
✅ Target status: All service boards should show Normal or Active_normal. If a board shows autofind after board confirm, wait 30 seconds and run display board 0 again.
🔀

4. VLAN Configuration

Create a management VLAN and separate subscriber VLANs. Each GPON port typically gets its own VLAN for traffic isolation.

! ── Create management VLAN 10 ──
MA5683T(config)#vlan 10 smart
MA5683T(config)#vlan desc 10 description "Management"

! ── Create subscriber VLANs (e.g. 101–108 for 8 PON ports) ──
MA5683T(config)#vlan 101 smart
MA5683T(config)#vlan 102 smart
MA5683T(config)#vlan 103 smart
MA5683T(config)#vlan 104 smart

! ── Verify VLANs ──
MA5683T(config)#display vlan all
MA5683T(config)#save

The uplink port connects the OLT to your upstream router or aggregation switch. It must carry all VLANs as a trunk.

On MA5683T, the uplink port is on the SCUN/GIU card. Assign all VLANs to it:

! Uplink port on SCUN card, slot 8, port 0
MA5683T(config)#port vlan 10 0/8 0
MA5683T(config)#port vlan 101 0/8 0
MA5683T(config)#port vlan 102 0/8 0
MA5683T(config)#port vlan 103 0/8 0
MA5683T(config)#port vlan 104 0/8 0
MA5683T(config)#save

On MA5608T, uplink is on the MCU card at slot 2:

! Uplink: MCU card slot 0/2, port 2
MA5608T(config)#port vlan 10 0/2 2
MA5608T(config)#port vlan 101 0/2 2
MA5608T(config)#port vlan 102 0/2 2
MA5608T(config)#save

MA5800 uses interface-based uplink configuration:

MA5800(config)#interface giu 0/8
MA5800(config-if-giu-0/8)#network-role 0 uplink
MA5800(config-if-giu-0/8)#quit
MA5800(config)#port vlan 10 0/8 0
MA5800(config)#port vlan 101 0/8 0
MA5800(config)#save
🌐

6. Management IP & Default Route

! ── Assign IP to management VLAN 10 ──
MA5683T(config)#interface vlanif 10
MA5683T(config-if-vlanif10)#ip address 192.168.1.100 255.255.255.0
MA5683T(config-if-vlanif10)#quit

! ── Set default gateway (upstream router IP) ──
MA5683T(config)#ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

! ── Test connectivity ──
MA5683T(config)#ping 192.168.1.1

MA5683T(config)#save
📡
ISP Field Note

After setting the management IP, immediately change from the meth0 cable to SSH over the network. Always keep the console cable nearby as a backup — if you make a routing mistake, the console is the only way back in.

📐

7. DBA Profile → Line Profile → Service Profile

These 3 profiles are the core of Huawei GPON — they define bandwidth allocation, GEM port mapping, and ONT port VLAN assignment. They must be created in order.

DBA (Dynamic Bandwidth Allocation) defines the maximum bandwidth each ONT can use on the PON port.

! ── Check existing DBA profiles ──
MA5683T(config)#display dba-profile all

! ── Create DBA profile: 1 Gbps max (type4) ──
MA5683T(config)#dba-profile add profile-id 10 profile-name maxbw-1G type4 max 1024000

! ── 100 Mbps package ──
MA5683T(config)#dba-profile add profile-id 20 profile-name plan-100M type4 max 102400

! ── 50 Mbps package ──
MA5683T(config)#dba-profile add profile-id 30 profile-name plan-50M type4 max 51200

! Speed reference: 1Mbps = 1024 Kbps
!   10M=10240  25M=25600  50M=51200  100M=102400  1G=1024000

Line profile maps GEM ports to VLANs and binds the DBA profile. Create one per service VLAN.

! ── Create line profile for VLAN 101 ──
MA5683T(config)#ont-lineprofile gpon profile-id 10 profile-name line-vlan101
MA5683T(config-gpon-lineprofile-10)#tcont 1 dba-profile-id 10
MA5683T(config-gpon-lineprofile-10)#gem add 0 eth tcont 1
MA5683T(config-gpon-lineprofile-10)#gem mapping 0 0 vlan 101
MA5683T(config-gpon-lineprofile-10)#commit
MA5683T(config-gpon-lineprofile-10)#quit

MA5683T(config)#save

Service profile defines ONT UNI port count and VLAN translation for subscriber traffic.

! ── Create service profile for single-ETH ONT ──
MA5683T(config)#ont-srvprofile gpon profile-id 10 profile-name srv-vlan101
MA5683T(config-gpon-srvprofile-10)#ont-port eth 1
MA5683T(config-gpon-srvprofile-10)#port vlan eth 1 translation 101 user-vlan 101
MA5683T(config-gpon-srvprofile-10)#commit
MA5683T(config-gpon-srvprofile-10)#quit

! ── Verify profiles created ──
MA5683T(config)#display ont-lineprofile gpon all
MA5683T(config)#display ont-srvprofile gpon all
MA5683T(config)#save
💡

8. Enable GPON Ports & Auto-Find

! ── Enter GPON interface (slot 0, board 1) ──
MA5683T(config)#interface gpon 0/1

! ── Enable auto-find on all 8 ports (board with 8 ports) ──
MA5683T(config-if-gpon-0/1)#port 0 ont-auto-find enable
MA5683T(config-if-gpon-0/1)#port 1 ont-auto-find enable
MA5683T(config-if-gpon-0/1)#port 2 ont-auto-find enable
MA5683T(config-if-gpon-0/1)#port 3 ont-auto-find enable
MA5683T(config-if-gpon-0/1)#port 4 ont-auto-find enable
MA5683T(config-if-gpon-0/1)#port 5 ont-auto-find enable
MA5683T(config-if-gpon-0/1)#port 6 ont-auto-find enable
MA5683T(config-if-gpon-0/1)#port 7 ont-auto-find enable

! ── Check for discovered ONTs ──
MA5683T(config-if-gpon-0/1)#display ont autofind all

MA5683T(config-if-gpon-0/1)#quit
MA5683T(config)#save
🔌

9. Add ONT (Register Subscriber)

This is the full sequence to bring one subscriber online — find the ONT, add it by SN, assign VLAN, create service-port.

! ── Step 1: Find auto-discovered ONT on port 0 ──
MA5683T(config)#interface gpon 0/1
MA5683T(config-if-gpon-0/1)#display ont autofind 0
! Note the SN (e.g. 48575443XXXXXXXX)

! ── Step 2: Add ONT by serial number ──
MA5683T(config-if-gpon-0/1)#ont add 0 0 sn-auth 48575443522C499D omci ont-lineprofile-id 10 ont-srvprofile-id 10 desc Customer-Ram-Prasad
!  PortID 0 = GPON port, ONTID 0 = first ONT on this port

! ── Step 3: Set native VLAN on ONT ETH port ──
MA5683T(config-if-gpon-0/1)#ont port native-vlan 0 0 eth 1 vlan 101 priority 0
MA5683T(config-if-gpon-0/1)#quit

! ── Step 4: Create service-port (subscriber VLAN) ──
MA5683T(config)#service-port 100 vlan 101 gpon 0/1/0 ont 0 gemport 0 multi-service user-vlan 101 tag-transform translate

! ── Step 5: Verify ONT is online ──
MA5683T(config)#display ont info 0/1 0 0
! "Run state: online" = subscriber is live ✅

MA5683T(config)#save
✅ ONT LED indicator: After successful registration, the ONT’s PON LED turns solid green and LOS LED turns off. The subscriber can now connect their router/PC to the ONT’s LAN port.
📊

10. Optical Power Monitoring

Rx Power (dBm)StatusAction
-8 to -22✅ ExcellentNo action needed
-22 to -27✅ GoodNormal working range
-27 to -29⚠️ MarginalClean connectors, check splitter
-29 to -32🔴 CriticalFiber path issue — inspect splices
Below -32🔴 No SignalFiber break or wrong splitter
! ── Check ONT optical power (RX at OLT) ──
MA5683T(config)#interface gpon 0/1
MA5683T(config-if-gpon-0/1)#display ont optical-info 0 all

! ── Check specific ONT optical power ──
MA5683T(config-if-gpon-0/1)#display ont optical-info 0 0

! ── Check OLT uplink SFP optical power ──
MA5683T(config)#interface scu 0/8
MA5683T(config-if-scu-0/8)#display port ddm-info 0

! ── MA5608T uplink port optical info ──
MA5608T(config)#interface mcu 0/2
MA5608T(config-if-mcu-0/2)#display port ddm-info 0

! ── View all active alarms ──
MA5683T(config)#display alarm active all
🔍

11. Essential Show Commands Reference

CommandWhat It Shows
display board 0All service boards and their status
display ont info 0/1 0 allAll ONTs on GPON port 0/1/0
display ont info 0/1 0 0Specific ONT info (online status, uptime)
display ont autofind allUndiscovered ONTs waiting to be added
display service-port allAll configured service ports
display ont optical-info 0 allOptical power for all ONTs on port
display mac-address port 0/1/0MAC addresses learned on GPON port
display mac-address vlan 101MACs learned on specific VLAN
display vlan allAll configured VLANs
display current-configurationFull running configuration
display versionOLT software version and uptime
display alarm active allAll current active alarms
display cpu-usage slot 0/8CPU load on control card
display ont register-info 0/1 0 0ONT registration history (up/down log)
display dba-profile allAll DBA profiles
display ont-lineprofile gpon allAll line profiles
display ont-srvprofile gpon allAll service profiles
display timeCurrent system time and timezone
display ntp-serviceNTP sync status
🔧

12. Troubleshooting

ONT connected but showing as autofind or offline:

  1. Confirm GPON port is enabled: display ont autofind all — does the ONT appear?
  2. Check optical power — must be above -29 dBm
  3. Verify board is confirmed: display board 0 → status must be Normal
  4. Re-add the ONT if it was deleted: check SN with display ont autofind 0 on the correct port
  5. Check for LOS alarm: display alarm active all
  6. Reboot ONT: ont reset 0/1 0 0

ONT is online but subscriber has no internet:

  1. Check service-port exists: display service-port port 0/1/0 ont 0
  2. Verify VLAN on uplink port: display port vlan 0/8 0 — VLAN 101 must be listed
  3. Check line profile GEM mapping matches subscriber VLAN
  4. Check MAC learning: display mac-address vlan 101 — should show ONT MAC
  5. Ping from subscriber PC to gateway — if no response, check service-port tag-transform setting

Poor or no optical signal (LOS alarm, ONT flapping):

  1. Clean OLT GPON SFP connector with optical cleaner pen
  2. Clean ONT optical connector at customer premises
  3. Inspect splitter connections — a loose APC connector causes 3–8 dBm loss
  4. Verify splitter ratio: 1:8 = ~10 dBm loss, 1:16 = ~13 dBm, 1:32 = ~16 dBm
  5. Calculate link budget: OLT Tx power (~+3 dBm) − path losses must be above −27 dBm at ONT
  6. Use OTDR to locate exact break or high-loss splice

Cannot SSH/Telnet to management IP:

  1. Connect via console cable and run: display current-configuration | include ip address
  2. Verify management VLAN IP: display interface vlanif 10
  3. Check route: display ip routing-table — default route must exist
  4. Verify management VLAN is assigned to uplink port: display port vlan 0/8 0
  5. For MA5800: verify Telnet is enabled: display telnet server
  6. Ping from OLT to gateway: ping 192.168.1.1 — if fails, check upstream physical link
💾

13. Save Configuration & Backup

⚠️ Always save after every change. Huawei OLT configuration is only written to NVRAM when you explicitly run save. A power cut without saving loses all unsaved changes permanently.
! ── Save to NVRAM ──
MA5683T(config)#save
! Wait for: "The current configuration will be saved..."

! ── Backup config to TFTP server ──
MA5683T(config)#backup configuration tftp 192.168.1.10 huawei-backup-2026.cfg

! ── Reboot OLT (save first!) ──
MA5683T(config)#reboot
! Confirm: y

! ── Reboot a single ONT remotely ──
MA5683T(config)#ont reset 0/1 0 0

! ── Delete ONT from OLT ──
MA5683T(config)#interface gpon 0/1
MA5683T(config-if-gpon-0/1)#ont delete 0 0
MA5683T(config-if-gpon-0/1)#quit
MA5683T(config)#save
📚

14. All Huawei OLT Guides on This Site

Every Huawei OLT article on madankc.com.np — your complete reference library:

⌨️Useful Commands (Daily)Essential commands for ISP work 💾Auto-Save FunctionSet up automatic config saving 📡SNMP ConfigurationMonitor OLT via SNMP 🔀Native VLAN (MA5680)5680 OLT native VLAN setup ➕Add ONU to MA5683TStep-by-step ONU registration ✏️Rename Huawei OLTChange OLT hostname/sysname 🗑️Delete ONT from OLTRemove/deregister an ONT 🆕Add ONT with New VLANONT + fresh VLAN assignment 🔎View ONU Info (MA5600)Check ONT status and details 👤Create & Manage UsersAdmin user management on MA5683T 🔀Add VLANs to Active ONTAdd VLANs without deregistering 🌐ONT with Trunk PortAdd ONT in trunk mode (MA5683T) 📶Adding ONT on Huawei OLTGeneral ONT addition guide 📡BDCOM OLT GuideCompare with BDCOM OLT setup

Related ISP & Network Guides

📡BDCOM OLT Complete GuideFull EPON/GPON setup with commands ⚙️MikroTik GuidesConnect Huawei OLT to MikroTik router 🐌Why Is My Internet Slow?Diagnose ISP & last-mile issues 🌐ISP Help HubAll ISP configuration guides

Frequently Asked Questions — Huawei OLT

The default ETH management port (meth0) IP is 10.11.104.2/24 on all MA56xx and MA5800 models. Connect your PC to the ETH port, set your PC IP to 10.11.104.1/24, and Telnet to 10.11.104.2. Default login: username root, password admin (MA5683T/MA5608T) or admin123 (MA5800 series). Always change these immediately after first login.
DBA profile controls upstream bandwidth allocation per ONT on the PON port — it defines the maximum speed a subscriber can use. Line profile maps GEM ports to VLANs and binds the DBA profile — it defines how data flows between OLT and ONT. Service profile defines the ONT’s physical ports (ETH count) and VLAN assignment at the customer end. All three must be created and linked in this order before an ONT can pass traffic.
The ONT has been detected by the OLT but not yet confirmed/registered. You must manually add it with the ont add command using the ONT’s serial number. Run display ont autofind 0 on the correct GPON interface to see the SN, then add it with DBA, line profile, and service profile IDs. After adding, create a service-port entry — without this, no subscriber traffic will pass even if the ONT shows as online.
Enter the GPON interface: interface gpon 0/1, then run display ont optical-info 0 all to see all ONT RX power on port 0. For a specific ONT: display ont optical-info 0 0. Normal range is -8 to -27 dBm. Below -29 dBm is marginal; below -32 dBm means a serious fiber path issue. Note: there can be up to 2 dBm difference from actual measured power, so always verify with an optical power meter on-site for critical faults.
Run save from configuration mode. Wait for the prompt to confirm completion — do not power off or reboot until it’s done. For automated backups, set up autosave with autosave interval 60 (saves every 60 minutes). For off-box backups, use backup configuration tftp [server-ip] [filename.cfg].
When a new service board (GPON/EPON card) is inserted into the chassis, it appears as autofind in display board 0. Running board confirm 0 tells the OLT to activate all autofind boards in the chassis. Until confirmed, the board is detected but not operational — ONTs plugged into it won’t register. Always run display board 0 after confirming to verify boards show Normal or Active_normal.
Huawei GPON ports support up to 128 ONTs per PON port technically, but practical ISP deployment limits are 32–64 for quality broadband service. Beyond 64 ONTs per port, you risk bandwidth contention during peak hours. For services above 100 Mbps per subscriber, keep it under 32 ONTs per port. The total capacity of a single GPON port is 2.488 Gbps downstream shared across all ONTs on that port.
The MA5683T is a large chassis OLT supporting up to 14 service boards (112 GPON ports, up to 7168 ONTs) — designed for large ISPs or metro aggregation. The MA5608T is a mid-range model with 2 service board slots (up to 32 GPON ports, 2048 ONTs) — better for medium ISPs or campus deployments. The CLI commands are largely identical between models, but slot numbers and board types differ. The MA5683T uses SCUN control cards while MA5608T uses MCU cards.

Model Info