The customer premises equipment (CPE) for a GPON connection can use one o these formats:
This device includes:
All these LAN interfaces are bridged together, and share the same IP, generally 192.168.0.1
The Optical Network Terminal just takes care of the authentication in the OLT, and the conversion to ethernet. Both interfaces (GPON, eth) are bridged and have a private IP for management.
The public IP is transferred to the the router.
The GPON authentication uses the ONU management and control interface (OMCI) specification:
When the authentication is correct, the ONT changes to operation state “5”.
The connection needs a received optical power between -16 dBm and -25 dBm. The connection becomes intermitent below -25 dBm. This means that the distance from the CTO to your appartment (PAU) can be up to 500 meters.
More info: GPON FTTH networks (in)security
These too, can be altogether or separate items.
In the picture, the ONT is connected to the red WAN port. This router contains ATA, but you could use a router + ata separately:
The ATA goes connected to a LAN port in the router.
CPE GPON / FTTH (“Gigabit Pasive Optical Network” / “Fibre to the Home”). Contiene: