Table Of Contents
Restrictions for PPPoE Profiles
Information About PPPoE Profiles
PPPoE Circuit-ID Tag Processing
How to Configure PPPoE Profiles
Assigning a PPPoE Profile to an Ethernet Interface
Assigning a PPPoE Profile to an ATM PVC
Assigning a PPPoE Profile to an ATM PVC Range and PVC-in-Range
Assigning a PPPoE Profile to an ATM VC Class
Configuring PPPoE Circuit-ID Tag Processing
Monitoring and Maintaining PPPoE Profiles
Configuration Examples for PPPoE Profiles
PPPoE Profiles Configuration Example
PPPoE Profiles
First Published: 12.2(15)TLast Updated: February 28, 2006The PPPoE Profiles feature introduces PPP over Ethernet (PPPoE) profiles, which contain configuration information for a group of PPPoE sessions. Multiple PPPoE profiles can be defined on a device, allowing different virtual templates and other PPPoE configuration parameters to be assigned to different Ethernet interfaces, VLANs, and ATM permanent virtual circuits (PVCs).
History for the PPPoE Profiles Feature
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at the login dialog box and follow the instructions that appear.
Contents
•
Restrictions for PPPoE Profiles
•
Information About PPPoE Profiles
•
How to Configure PPPoE Profiles
•
Configuration Examples for PPPoE Profiles
Restrictions for PPPoE Profiles
The PPPoE Profiles feature separates the configuration of PPPoE from virtual private dial-up network (VPDN). The legacy method of configuring PPPoE in VPDN groups is still permitted, but you cannot configure PPPoE profiles and PPPoE in VPDN groups simultaneously.
If a PPPoE profile is assigned to a PPPoE port (Ethernet interface, VLAN, or PVC), virtual circuit (VC) class, or ATM PVC range and the profile has not yet been defined, the port, VC class, or range will not have any PPPoE parameters configured and will not use parameters from the global group.
PPPoE session limits cannot be configured both in PPPoE profiles and directly on PPPoE ports simultaneously.
Information About PPPoE Profiles
To configure the PPPoE Profiles feature, you should understand the following concepts:
•
PPPoE Circuit-ID Tag Processing
PPPoE Profiles
PPPoE profiles contain configuration information for PPPoE sessions. Once a profile has been defined, it can be assigned to a PPPoE port (Ethernet interface, VLAN, or PVC), a VC class, or an ATM PVC range. PPPoE profiles can also be used for PPPoE sessions established by PPPoA/PPPoE autosense. Multiple PPPoE profiles can be created and assigned to different ports. A global PPPoE profile can also be created; it serves as the default profile for any port that has not been assigned a specific PPPoE profile.
Benefits of PPPoE Profiles
Before the introduction of this feature, PPPoE parameters were configured within a VPDN group. Configuring PPPoE in a VPDN group limited PPPoE configuration options because only one PPPoE VPDN group with one virtual template is permitted on a device. The PPPoE Profiles feature provides simplicity and flexibility in PPPoE configuration by separating PPPoE from VPDN configuration. The PPPoE Profiles feature allows multiple PPPoE profiles, each with a different configuration, to be used on a single device.
PPPoE Circuit-ID Tag Processing
The PPPoE Circuit-ID Tag Processing feature enables Ethernet-based access network services by providing a mechanism for a PPPoE Broadband Remote Access Server (BRAS) to map a subscriber's circuit ID (that is, the line ID) to a specific Ethernet interface.
A Digital Subscriber Line Multiplexer (DSLAM) can be configured to insert a unique circuit-ID tag into a PPPoE Active Discovery Initiation/PPPoE Active Discovery Request (PADI/PADR) frame. You can create a PPPoE profile to enable the PPPoE BRAS to process the vendor tag to send the circuit-ID portion of the tag (as NAS-Port-ID attribute 87) to the RADIUS server in all authentication, authorization, and accounting (AAA) access and accounting requests. You can also create a PPPoE profile to strip the vendor tag from outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Session (PADS) frames.
How to Configure PPPoE Profiles
This section contains the following procedures. The first is required, and any one of the next four is required.
•
Defining a PPPoE Profile (required)
•
Assigning a PPPoE Profile to an Ethernet Interface (optional)
•
Assigning a PPPoE Profile to an ATM PVC (optional)
•
Assigning a PPPoE Profile to an ATM PVC Range and PVC-in-Range (optional)
•
Assigning a PPPoE Profile to an ATM VC Class (optional)
•
Configuring PPPoE Circuit-ID Tag Processing (optional)
•
Monitoring and Maintaining PPPoE Profiles (optional)
Defining a PPPoE Profile
Perform this task to define a PPPoE profile.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
bba-group pppoe {group-name | global}
4.
virtual-template template-number
5.
sessions max limit number-of-sessions [threshold threshold-value]
6.
sessions per-mac limit per-mac-limit
7.
sessions per-vlan limit per-vlan-limit
8.
sessions per-vc limit per-vc-limit [threshold threshold-value]
9.
ac name name
10.
end
DETAILED STEPS
Assigning a PPPoE Profile to an Ethernet Interface
Perform this task to assign a PPPoE profile to an Ethernet interface.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
interface ethernet number
4.
pppoe enable [group group-name]
5.
end
DETAILED STEPS
Assigning a PPPoE Profile to an ATM PVC
Perform this task to assign a PPPoE profile to an ATM PVC.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
interface ATM number [point-to-point | multipoint]
4.
pvc vpi/vci
5.
protocol pppoe [group group-name]
or
encapsulation aal5autoppp virtual-template number [group group-name]
6.
end
DETAILED STEPS
Assigning a PPPoE Profile to an ATM PVC Range and PVC-in-Range
Perform this task to assign a PPPoE profile to an ATM PVC range and PVC within a range.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
interface atm number [point-to-point | multipoint]
4.
range [range-name] pvc start-vpi/start-vci end-vpi/end-vci
5.
protocol pppoe [group group-name]
or
encapsulation aal5autoppp virtual-template number [group group-name]
6.
pvc-in-range [pvc-name] [[vpi/]vci]
7.
protocol pppoe [group group-name]
or
encapsulation aal5autoppp virtual-template number [group group-name]
8.
end
DETAILED STEPS
Assigning a PPPoE Profile to an ATM VC Class
Perform this task to assign a PPPoE profile to an ATM VC class.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
vc-class atm vc-class-name
4.
protocol pppoe [group group-name]
or
encapsulation aal5autoppp virtual-template number [group group-name]
5.
end
DETAILED STEPS
Configuring PPPoE Circuit-ID Tag Processing
Perform this task to configure a PPPoE server to process the vendor tag in an incoming PADI/PADR frame. This configuration enables the PPPoE server to send the circuit-ID part of the tag to a remote RADIUS server in AAA access and accounting requests. Optionally, you can configure the PPPoE server to remove the vendor tag in outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Session (PADS) frames by using the vendor-tag circuit-id strip command.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
bba-group pppoe [group-name]
4.
vendor-tag circuit-id service
5.
vendor-tag circuit-id strip
6.
interface type number
7.
encapsulation dot1Q vlan-id
8.
pppoe-enable [group group-name]
9.
end
DETAILED STEPS
Monitoring and Maintaining PPPoE Profiles
Perform this task to monitor and maintain PPPoE profiles.
SUMMARY STEPS
1.
enable
2.
show pppoe session [all | packets]
3.
clear pppoe {interface type number [vc {[vpi/]vci | vc-name}] | rmac mac-addr [sid session-id ] | all}
4.
debug pppoe {data | errors | events | packets} [rmac remote-mac-address | interface type number [vc {[vpi/]vci | vc-name}]]
DETAILED STEPS
Configuration Examples for PPPoE Profiles
This section provides the following configuration example:
•
PPPoE Profiles Configuration Example
PPPoE Profiles Configuration Example
The following example shows the configuration of three PPPoE profiles: "vpn1", "vpn2", and a global PPPoE profile. The profiles "vpn1" and "vpn2" are assigned to PVCs, VC classes, VLANs, and PVC ranges. Any Ethernet interface, VLAN, PVC, PVC range, or VC class that is configured for PPPoE but is not assigned either profile "vpn1" or "vpn2" (such as VC class "class-pppoe-global") will use the global profile.
vpdn enable!vpdn-group 1request-dialinprotocol l2tpdomain vpn1initiate-to ip 10.12.1.64 priority 1local name NAS1-1!vpdn-group 2request-dialinprotocol l2tpdomain vpn2initiate-to ip 10.12.2.64 priority 1local name NAS1-2!virtual-template 1 pre-clone 20virtual-template 2 pre-clone 20!bba-group pppoe globalvirtual-template 1sessions max limit 8000sessions per-vc limit 8sessions per-mac limit 2!bba-group pppoe vpn1virtual-template 1sessions per-vc limit 2sessions per-mac limit 1!bba-group pppoe vpn2virtual-template 2sessions per-vc limit 2sessions per-mac limit 1!vc-class atm class-pppoe-globalprotocol pppoe!vc-class atm class-pppox-autoencapsulation aal5autoppp virtual-template 1 group vpn1!vc-class atm class-pppoe-1protocol pppoe group vpn1!vc-class atm class-pppoe-2protocol pppoe group vpn2!interface Loopback1ip address 10.1.1.1 255.255.255.0!interface ATM1/0.10 multipointrange range-pppoe-1 pvc 100 109protocol pppoe group vpn1!interface ATM1/0.20 multipointclass-int class-pppox-autopvc 0/200encapsulation aal5autoppp Virtual-Template1!pvc 0/201!pvc 0/202encapsulation aal5autoppp Virtual-Template1 group vpn2!pvc 0/203class-vc class-pppoe-global!!interface Ethernet2/3.1encapsulation dot1Q 1pppoe enable group vpn1!interface Ethernet2/3.2encapsulation dot1Q 2pppoe enable group vpn2!interface ATM6/0.101 point-to-pointip address 10.12.1.63 255.255.255.0pvc 0/101!interface ATM6/0.102 point-to-pointip address 10.12.2.63 255.255.255.0pvc 0/102!interface Virtual-Template1ip unnumbered loopback 1no logging event link-statusno keepalivepeer default ip address pool pool-1ppp authentication chap!interface Virtual-Template2ip unnumbered loopback 1no logging event link-statusno keepalivepeer default ip address pool pool-2ppp authentication chap!ip local pool pool-1 10.10.1.1 255.255.255.255ip local pool pool-2 10.10.2.1 255.255.255.255!Additional References
The following sections provide references related to PPPoE Profiles:
Related Documents
Related Topic Document TitlePPPoA/PPPoE configuration tasks
"Configuring Broadband Access: PPP and Routed Bridge Encapsulation" chapter in Cisco IOS Wide-Area Networking Configuration Guide, Release 12.2
PPPoA/PPPoE commands
"Broadband Access: PPP and Routed Bridge Encapsulation Commands" chapter in Cisco IOS Wide-Area Networking Command Reference, Release 12.2
PPPoA/PPPoE autosense configuration
"PPPoA/PPPoE Autosense for ATM PVCs" Cisco IOS Release 12.2(4)T feature module
ATM PVC range configuration tasks
"Configuring ATM" chapter in Cisco IOS Wide-Area Networking Configuration Guide, Release 12.2
ATM PVC range commands
"ATM Commands" chapter in Cisco IOS Wide-Area Networking Command Reference, Release 12.2
Standards
MIBs
MIBs MIBs LinkNone
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:
RFCs
Technical Assistance
Command Reference
This section documents modified commands.
•
vendor-tag circuit-id service
ac name
To specify the name of the access concentrator to be used in PPPoE Active Discovery Offers (PADO), use the ac name command in BBA group configuration mode. To remove this specification, use the no form of this command.
ac name name
no ac name name
Syntax Description
Defaults
If the name of the access concentrator is not specified, the name of the router is used as the access concentrator name.
Command Modes
BBA group configuration
Command History
Usage Guidelines
The ac name command allows you to advertise a unique access concentrator name other than the router name to PPPoE clients.
Examples
The following example shows the configuration of the name "region1" as the access concentrator name to be used in PADOs:
bba-group pppoe globalvirtual-template 1ac name region1Related Commands
bba-group pppoe
To create a PPP over Ethernet (PPPoE) profile, use the bba-group pppoe command in global configuration mode. To delete a PPPoE profile, use the no form of this command.
bba-group pppoe {group-name | global}
no bba-group pppoe {group-name | global}
Syntax Description
Defaults
A PPPoE profile is not configured.
Command Modes
Global configuration
Command History
Usage Guidelines
PPPoE profiles contain the configuration for a group of PPPoE sessions. Once a profile has been defined, it can be assigned to a PPPoE port (Ethernet interface, VLAN, or PVC), a virtual circuit (VC) class, or an ATM PVC range. PPPoE profiles can also be used with PPP over ATM (PPPoA)/PPPoE autosense. Multiple PPPoE profiles can be created and assigned to different ports.
The global PPPoE profile serves as the default profile for any port that has not been assigned a specific PPPoE profile.
Examples
The following example shows the configuration of a global PPPoE profile and a profile called "vpn1". PPPoE sessions established on PVCs that use the VC class "class-pppoe-global" will use the global profile. PVCs in the range "range-pppoe-1" will use the "vpn1" profile.
bba-group pppoe globalvirtual-template 1sessions max limit 8000sessions per-vc limit 8sessions per-mac limit 2!bba-group pppoe vpn1virtual-template 1sessions per-vc limit 2sessions per-mac limit 1!vc-class atm class-pppoe-globalprotocol pppoe!interface ATM1/0.10 multipointrange range-pppoe-1 pvc 100 109protocol pppoe group vpn1!interface ATM1/0.20 multipointclass-int class-pppoe-globalpvc 0/200Related Commands
debug pppoe
To display debugging information for PPP over Ethernet (PPPoE) sessions, use the debug pppoe command in privileged EXEC mode. To disable debugging output, use the no form of this command.
debug pppoe {data | errors | events | packets} [rmac remote-mac-address | interface type number [vc {[vpi/]vci | vc-name}] [vlan vlan-id]]
no debug pppoe {data | errors | events | packets} [rmac remote-mac-address | interface type number [vc {[vpi/]vci | vc-name}] [vlan vlan-id]]
Syntax Description
