The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Contents
The PPP over Ethernet (PPPoE) Session Limit Local Override feature enables the session limit configured locally on the broadband remote access server (BRAS) or Layer2 Tunneling Protocol (L2TP) access concentrator (LAC) to override the per-NAS-port session limit downloaded from the RADIUS server when the preauthorization is enabled.
Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
PPPoE session limits are downloaded from the RADIUS server when you enable preauthorization on the LAC using the subscriber access pppoe pre-authorize nas-port-id command. By enabling preauthorization, you limit the number of PPPoE sessions on a specific permanent virtual circuit (PVC) or VLAN; that is, the PPPoE per-NAS-port session limit downloaded from the RADIUS server takes precedence over locally configured (port-based) session limits, such as per-VC and per-VLAN session limits.
The PPPoE Session Limit Local Override feature enables the local session limit configured at the BRAS to override the per-NAS-port session limit configured at the RADIUS server when preauthorization is configured.
Note | The PPPoE Session Limit Local Override feature is useful only when you have configured preauthorization on the BRAS or LAC. |
To enable the PPPoE Session Limit Local Override feature, configure the sessions pre-auth limit ignore command under the broadband access (BBA) group associated with the interface. When the PPPoE Session Limit Local Override feature is enabled, the locally configured session limit is applied before PPP is started; that is before the BRAS sends out a PPPoE Active Discovery Offer (PADO) packet to the client, advertising a list of available services.
When preauthorization is configured without the PPPoE Session Limit Local Override feature enabled, the client receives an authentication failure response from the BRAS when there is no session limit downloaded from the RADIUS server and the locally configured session limit is exceeded. The BRAS waits to apply locally configured limits until PPP negotiation is completed. When a call is finally rejected, the client receives the authentication failure response, resulting in session failure, with no ability to distinguish whether the session failure results from a Challenge Handshake Authentication Protocol (CHAP) authentication failure or a PPPoE session limit having been exceeded. The PPPoE Session Limit Local Override feature allows for differentiation between the handling of per-NAS-port failures and session limiting failures.
If you enable the PPPoE Session Limit Local Override feature, but there are no locally configured per-port session limits, then per-NAS-port session limits downloaded from the RADIUS server are applied.
For more information on how to configure preauthorization and per-NAS-port session limit, see the Establishing PPPoE Session Limit per NAS Port document.
Enable the PPPoE Session Limit Local Override feature to allow the local session limit configured on the BRAS to override the per-NAS-port session limit downloaded from the RADIUS server.
The sessions pre-auth limit ignore command should have been configured under the broadband access (BBA) group associated with the interface.
Note | If there are no locally configured per-port session limits, then per-NAS port session limits downloaded from the RADIUS server are applied. > |
1.
enable
2.
configure
terminal
3.
bba-group
pppoe
group-name
4.
sessions
per-vc
limit
per-vc-limit
5.
sessions
pre-auth
limit
ignore
6.
end
The following example creates a PPPoE group named test, configures a limit of three sessions per VC, and enables the PPPoE Session Limit Local Override feature in bba-group configuration mode. The running configuration shows that the sessions pre-auth limit ignore command was used to enable this feature.
Router(config)# bba-group pppoe test Router(config-bba-group)# sessions per-vc limit 3 Router(config-bba-group)# sessions pre-auth limit ignore . . ! bba-group pppoe test virtual-template 2 sessions per-vc limit 3 sessions pre-auth limit ignore ! .
The following sections provide references related to the PPPoE Session Limit Local Override feature.
Related Topic |
Document Title |
---|---|
Establishing PPPoE Session Limits per NAS Port |
Cisco IOS Broadband Access Aggregation and DSL Configuration Guide |
Standard |
Title |
---|---|
None |
-- |
MIB |
MIBs Link |
---|---|
None |
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: |
Description |
Link |
---|---|
The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. |
The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
Feature Name |
Releases |
Feature Information |
---|---|---|
PPPoE Session Limit Local Override
|
12.4(15)T 12.2(33)SB 15.0(1)M 12.2(33)SRE |
The PPPoE Session Limit Local Override feature enables the local session limit configured on the BRAS or LAC to override the per-NAS-port session limit downloaded from the RADIUS server when preauthorization is configured. The following command was introduced by this feature: sessions pre-auth limit ignore In Cisco IOS Release 12.2(33)SB, support was added for the Cisco 10000 router. |