Hi there, all!
This post describes how to create and configure VLANs on the ONTs Ethernet ports. Please see the below-displayed information.
ISSUE DESCRIPTION
Based on the customer network topology, they want to create: <?xml:namespace prefix = "o" />:
one VLAN assigned to the LAN Ethernet Port 1/2;
one VLAN assigned to the LAN Ethernet Port 3.
If this is possible, would it also be possible to create a rule where one or few computers, based on MAC address, can have access from one VLAN to the other?
SOLUTION
For your scenario, you have to configure the ONT via the OLT CLI and the Web page.
On the OLT MA5600T CLI

Step 1: Create a service-port for each VLAN.
MA5600T(config)#service-port vlan 110 gpon 0/2/4 ont 4 gemport 12 multi-service user-vlan 105
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 110 gpon 0/2/4 ont 4 gemport 12 multi-service user-vlan 105
MA5600T(config)#service-port vlan 110 gpon 0/2/4 ont 4 gemport 13 multi-service user-vlan 110
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 110 gpon 0/2/4 ont 4 gemport 13 multi-service user-vlan 110
Step 2: Set the native-vlan value as the one you want for each ONT eth port.
MA5600T(config-if-gpon-0/2)#ont port native-vlan 4 4 eth 1 vlan 105
{ <cr>|priority<K> }:
Command:
ont port native-vlan 4 4 eth 1 vlan 105
MA5600T(config-if-gpon-0/2)#ont port native-vlan 4 4 eth 2 vlan 105
{ <cr>|priority<K> }:
Command:
ont port native-vlan 4 4 eth 2 vlan 105
MA5600T(config-if-gpon-0/2)#ont port native-vlan 4 4 eth 3 vlan 110
{ <cr>|priority<K> }:
Command:
ont port native-vlan 4 4 eth 3 vlan 110
MA5600T(config)#display service-port port 0/2/4 ont 4
{ <cr>|gemport<K>|sort-by<K> }:
Command:
display service-port port 0/2/4 ont 4
Switch-Oriented Flow List
-----------------------------------------------------------------------------
INDEX VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE
ID ATTR
TYPE TYPE PARA
-----------------------------------------------------------------------------
15 105 common gpon 0/2 /4 4 11 vlan 105 - - up
16 110 common gpon 0/2 /4 4 12 vlan 105 - - up
17 110 common gpon 0/2 /4 4 13 vlan 110 - - up
-----------------------------------------------------------------------------
Total : 3 (Up/Down : 3/0)
MA5600T(config-if-gpon-0/2)#display ont port attribute 4 4 eth 1
-------------------------------------------------------------------------
ONT ONT ONT Auto-neg Speed Duplex Port Flow Native Priority
port port-type (Mbps) switch control VLAN
-------------------------------------------------------------------------
4 1 ETH enable auto auto on off 105 0
------------------------------------------------------------------------
MA5600T(config-if-gpon-0/2)#display ont port attribute 4 4 eth 3
-------------------------------------------------------------------------
ONT ONT ONT Auto-neg Speed Duplex Port Flow Native Priority
port port-type (Mbps) switch control VLAN
-------------------------------------------------------------------------
4 3 ETH enable auto auto on off 110 0
-----------------------------------------------------------------------
MA5600T(config-if-gpon-0/2)#display ont port attribute 4 4 eth
{ <cr>|ont-portid<U><1,8> }:
Command:
display ont port attribute 4 4 eth
-------------------------------------------------------------------------
ONT ONT ONT Auto-neg Speed Duplex Port Flow Native Priority
port port-type (Mbps) switch control VLAN
------------------------------------------------------------------------
4 1 ETH enable auto auto on off 105 0
4 2 ETH enable auto auto on off 105 0
4 3 ETH enable auto auto on off 110 0
4 4 ETH enable auto auto on off 1 0
------------------------------------------------------------------------
Step 3: Apply the static mac-address:
MA5600T(config)#mac-address static service-port 15 40B0-34EA-36A6
MA5600T(config)#mac-address static service-port 16 40B0-34EA-36A7
On the ONT Web page
Step 1: Log in to the Web configuration page.
a) Configure the IP address of the PC network adapter to be in the same network segment with the IP address of the local maintenance Ethernet port on the ONT.
b) Open the Web browser and enter the IP address (HTTPS with high priority is recommended) of the local maintenance Ethernet port on the ONT. In the login window that is displayed, enter the user name and password of the administrator. After the password is authenticated, the web configuration window is displayed.
Step 2: Configure the working mode of a LAN port.

The LAN port bound to the WAN port must work in the Layer 3 mode. Therefore, set the working mode to Layer 3 for the LAN port connected to the PC.
Step 3: Configure parameters of a WAN port.

Step 4: Check the ONT connection status.

As I explained to you above, you also need to configure the VLANs on OLT to make this configuration work. Also, you need two WLAN IP addresses.
Thank you for reading!