13 d up · CPU 20% · RAM 44% · Storage 20% All systems operational 99.79% uptime (30 days) View status →
Guides

KPN: using your own router instead of the Experia Box

With KPN fibre you can replace the Experia Box with your own router. That is mostly useful if you want a firewall, vpn or VLANs. First read Your own router behind your provider for the background, such as CGNAT and IPv6.

What you need

  • A router that can handle VLAN tagging and PPPoE, such as a MikroTik, a router with OpenWrt, pfSense or OPNsense, or a UniFi router.
  • The KPN connection with the fibre modem (the place where the fibre enters your home).
  • For KPN TV: a router that supports IGMP proxy and DHCP options.

Setting up internet

  1. Connect the WAN port of your router to the fibre modem.
  2. Create a VLAN with ID 6 on the WAN port.
  3. Create a PPPoE connection on it. According to many users KPN does not check the username and password, so enter anything.
  4. Set the MTU to 1492.
  5. Restart the router and check your address with curl https://geekstation.nl/ip.

Setting up KPN TV

With KPN, TV works separately from internet. If you have no TV box, skip this.

  1. Create a second VLAN with ID 4.
  2. Let the router get an address on it via DHCP, with vendor class (option 60) IPTV_RG.
  3. Turn on an IGMP proxy, with VLAN 4 as the upstream side.
  4. Make sure the classless static routes from the DHCP reply are used, and that traffic to 213.75.112.0/21 goes over VLAN 4 with NAT.
  5. Do you have a managed switch? Then set the port of the TV box as untagged on VLAN 4.

If it does not work

  • No address on VLAN 4: check that the vendor class is really sent. Some DHCP programs have a separate setting for it.
  • Internet works, TV does not: usually the IGMP proxy or the route to the TV servers is missing.
  • No internet: restart the fibre modem too.

These settings are widely tested by users, but KPN can change them. Always test with the Experia Box nearby first, so you can fall back. Want to open ports? First check whether you have a public IPv4 address, following the general guide.