I was wrong above.
1. eth0 is the SFP+ and is on the outside of the board. It takes SFP or SFP+ modules. Both seem to work.
2. eth2 can either be the SFP to the right of the POE power supply or the copper RJ-45 to the left of the POE power supply (WAN port). If an SFP transceiver is plugged in (whether or not a fiber is plugged in), the RJ-45 seems to be disabled even if it has a cable plugged in.
3. The default configuration in Ubuntu and OpenWRT bond eth0 and eth2 making both fiber ports and one WAN port all be the same logical connection.