Configuring PPPoE over Ethernet and IEEE 802.1Q VLAN

Table Of Contents

PPPoE over Ethernet and IEEE 802.1Q VLANs

PPPoE over Ethernet Feature

Restrictions

Prerequisites

Configuration Tasks

Configuring a Virtual Template Interface

Creating an Ethernet Interface and Enabling PPPoE

Configuring PPPoE in a VPDN Group

Configuration Example

PPPoE over IEEE 802.1Q VLANs Feature

Restrictions

Prerequisites

Configuration Tasks

Configuring a Virtual Template Interface

Creating an Ethernet 802.1Q Encapsulated Subinterface and Enabling PPPoE

Configuring PPPoE in a VPDN Group

Configuration Example

Verifying PPPoE over Ethernet and IEEE 802.1Q VLAN

Clearing PPPoE Sessions

PPPoE over Ethernet and IEEE 802.1Q VLANs

---

The Cisco 10000 series ESR supports the PPPoE over Ethernet (PPPoEoE) and PPPoE over IEEE 802.1Q VLANs feature in Cisco IOS Release 12.2(4)BZ1 or a later release. IEEE 802.1Q encapsulation is used to connect a VLAN-capable router with another VLAN-capable networking device.

This chapter discusses the PPPoE over Ethernet and IEEE 802.1Q VLANs features for the Cisco 10000 ESR. For more information, refer to the "Configuring Broadband Access: PPP and Routed Bridge Encapsulation" chapter in the Cisco IOS Wide-Area Networking Configuration Guide.

PPPoE over Ethernet Feature

The Cisco 10000 ESR supports a PPPoE over Ethernet connection. PPPoE over Ethernet enables direct connection to an Ethernet interface. The Cisco 10000 ESR supports PPPoE over Ethernet sessions to enable multiple hosts on a shared Ethernet interface to open PPP sessions to the PPPoE server.

Restrictions

The PPPoE over Ethernet feature has the following restriction:

•The Cisco 10000 ESR currently supports the PPPoE over Ethernet feature only on a Gigabit Ethernet interface.

---

Note The Cisco 10000 ESR supports a Fast Ethernet interface for management traffic only.

---

Prerequisites

The Cisco 10000 ESR must be running Cisco IOS Release 12.2(4)BZ1 or a later release that includes the broadband aggregation features.

Configuration Tasks

To configure the PPPoE over Ethernet feature, perform the following configuration tasks:

•Configuring a Virtual Template Interface

•Creating an Ethernet Interface and Enabling PPPoE

•Configuring PPPoE in a VPDN Group

Configuring a Virtual Template Interface

We recommend that you configure a virtual template before you configure the PPPoE or PPPoE over Ethernet feature. The virtual template interface is a logical entity that is applied dynamically as needed to an incoming PPP session request. To configure a virtual template interface, see the "Configuring a Virtual Template Interface" section on page 3-11.

Creating an Ethernet Interface and Enabling PPPoE

To create an Ethernet interface and enable PPPoE on it, use the following commands beginning in global configuration mode:

	Command	Purpose
Step 1	Router(config)# interface GigabitEthernet number	Creates an Ethernet interface and enters interface configuration mode.
Step 2	Router(config-if)# pppoe enable	Enables PPPoE and allows PPPoE sessions to be created through that interface.

Configuring PPPoE in a VPDN Group

To configure a virtual private dial network (VPDN) group for PPPoE and to link it to the appropriate virtual template interface, use the following commands beginning in global configuration mode:

	Command	Purpose
Step 1	Router(config)# vpdn enable	Enables VPDN configuration on the router.
Step 2	Router(config)# vpdn group name	Associates a VPDN group to a customer or VPDN profile.
Step 3	Router(config-vpdn)# accept dialin	Creates an accept dial-in VPDN group.
Step 4	Router(config-vpdn-acc-in)# protocol pppoe	Specifies the VPDN group to be used to establish PPPoE sessions.
Step 5	Router(config-vpdn-acc-in)# virtual-template template-number	Specifies the virtual template interface to use to clone virtual access interfaces (VAIs).
Step 6	Router(config-vpdn)# pppoe limit per-mac number	Specifies the maximum number of PPPoE sessions that can be sourced from a MAC address.
Step 7	Router(config-vpdn)# pppoe limit max-sessions number	Specifies the maximum number of PPPoE sessions that can be terminated on this router from all interfaces.

Configuration Example

The following example shows a PPPoE over Ethernet configuration. In the example, the virtual-template 1 virtual template is linked to the VPDN group. The configuration also specifies the number of sessions allowed on the VPDN group.

!Creates a VPDN session group and links it to a virtual template.

vpdn-group 1

accept-dialin

protocol pppoe

virtual-template 1

pppoe limit per-mac 10

pppoe limit max-sessions 32000

interface Loopback0

ip address 172.16.0.1 255.255.255.255

!Enables PPPoE and allows PPPoE sessions to be created through this subinterface.

interface GigabitEthernet1/0/0

no ip address

negotiation auto

pppoe enable

!Configures the virtual template interface.

interface Virtual-Template1

ip unnumbered loop 0

mtu 1492

peer default ip address pool pool1

ppp authentication chap

!Specifies the IP local pool to use for address assignment.

ip local pool pool1 192.168.0.1 192.168.0.100

PPPoE over IEEE 802.1Q VLANs Feature

The PPPoE over IEEE 802.1Q VLANs feature, available in Cisco IOS Release 12.2(4)BZ1 or a later release, enables the Cisco 10000 ESR to support PPPoE over IEEE 802.1Q encapsulated VLANs using Gigabit Ethernet. IEEE 802.1Q encapsulation is used to interconnect a VLAN-capable router with another VLAN-capable networking device. The packets on the 802.1Q link contain a standard Ethernet frame and the VLAN information associated with that frame.

Restrictions

The PPPoE over IEEE 802.1Q VLANs feature has the following restrictions:

•Supported on Gigabit Ethernet.

•Supported for PPPoE dial-in only. PPPoE dial-out (client) is not fully supported.

•PPPoE is disabled by default on a VLAN.

Prerequisites

The Cisco 10000 ESR must be running Cisco IOS Release 12.2(4)BZ1 or a later release that has the broadband aggregation features.

Configuration Tasks

To configure the PPPoE over IEEE 802.1Q VLANs feature, perform the following configuration tasks:

•Configuring a Virtual Template Interface

•Creating an Ethernet 802.1Q Encapsulated Subinterface and Enabling PPPoE

•Configuring PPPoE in a VPDN Group

The following sections describe how to perform these configuration tasks. For more information, refer to the "Configuring Broadband Access: PPP and Routed Bridge Encapsulation" chapter in the Cisco IOS Wide-Area Networking Configuration Guide.

Configuring a Virtual Template Interface

We recommend that you configure a virtual template interface before you configure the PPPoE over IEEE 802.1Q VLANs feature. The virtual template interface is a logical entity that is applied dynamically as needed to a serial interface. To configure a virtual template interface, see the "Configuring a Virtual Template Interface" section on page 3-11.

Creating an Ethernet 802.1Q Encapsulated Subinterface and Enabling PPPoE

To create an Ethernet 802.1Q encapsulated subinterface and enable PPPoE on it, use the following commands on the Cisco 10000 ESR beginning in global configuration mode:

	Command	Purpose
Step 1	Router(config)# interface GigabitEthernet slot/module/port.subinterface-number	Creates a Gigabit Ethernet subinterface and enters subinterface configuration mode.
Step 2	Router(config-subif)# encapsulation dot1q vlan-id	Enables IEEE 802.1Q encapsulation on a specified subinterface in VLANs.
Step 3	Router(config-subif)# pppoe enable	Enables PPPoE and allows PPPoE sessions to be created through the specified subinterface.
Step 4	Router(config-subif)# pppoe max-session number	(Optional) Specifies the maximum number of PPPoE sessions under a VLAN.

Configuring PPPoE in a VPDN Group

To configure a VPDN group for PPPoE and link it to the appropriate virtual template interface, use the following commands on the Cisco 10000 ESR beginning in global configuration mode:

	Command	Purpose
Step 1	Router(config)# vpdn enable	Enables VPDN configuration on the router.
Step 2	Router(config)# vpdn group name	Associates a VPDN group to a customer or VPDN profile.
Step 3	Router(config-vpdn)# accept dialin	Creates an accept dial-in VPDN group.
Step 4	Router(config-vpdn-acc-in)# protocol pppoe	Specifies the VPDN group to be used to establish PPPoE sessions.
Step 5	Router(config-vpdn-acc-in)# virtual-template template-number	Specifies the virtual template interface to use to clone virtual access interfaces (VAIs).
Step 6	Router(config-vpdn)# pppoe limit per-vlan number	(Optional) Specifies the maximum number of PPPoE sessions under each VLAN.
Step 7	Router(config-vpdn)# pppoe limit per-mac number	(Optional) Specifies the maximum number of PPPoE sessions that can be sourced from a MAC address.
Step 8	Router(config-vpdn)# pppoe limit max-sessions number	Specifies the maximum number of PPPoE sessions that can be terminated on this router from all interfaces.

Configuration Example

The following example shows a PPPoE over IEEE 802.1Q encapsulated VLAN configuration. In the example, the virtual-template 1 virtual template is linked to the VPDN group. The configuration also specifies the maximum number of sessions allowed on the VPDN group and the number of sessions allowed for each VLAN.

!Enables a virtual private dial-up network configuration on the router.

vpdn enable

!

!Creates a VPDN session group and links it to a virtual template.

vpdn-group 1

accept-dialin

protocol pppoe

virtual-template 1

pppoe limit per-mac 10

pppoe limit per-vlan 100

pppoe limit max-sessions 32000

interface Loopback0

ip address 172.16.0.1 255.255.255.255

interface GigabitEthernet1/0/0

no ip address

negotiation auto

!Enables PPPoE and allows PPPoE sessions to be created through this subinterface.

interface GigabitEthernet1/0/0.10

encapsulation dot1Q 20

pppoe enable

pppoe max-sessions 10

!Configures the virtual template interface.

interface Virtual-Template1

ip unnumbered loop 0

mtu 1492

peer default ip address pool pool1

ppp authentication chap

!Specifies the IP local pool to use for address assignment.

ip local pool pool1 192.168.0.1 192.168.0.100

Verifying PPPoE over Ethernet and IEEE 802.1Q VLAN

To verify PPPoE over Ethernet and IEEE 802.1Q VLAN, use the following commands in privileged EXEC mode:

Command	Purpose
Router# show vpdn	Displays information about active Level 2 Forwarding (L2F) Protocol tunnel and message identifiers in a VPDN.
Router# show vpdn session	Displays information about active Layer 2 Tunnel Protocol (L2TP) or Layer 2 Forwarding (L2F) sessions in a VPDN.
Router# show vpdn session packet	Displays PPPoE session statistics.
Router# show vpdn session all	Displays PPPoE session information for each session ID.
Router# show vpdn tunnel	Displays PPPoE session count for the tunnel.
Router# show pppoe session all	Displays PPPoE session information for each session ID.
Router# show pppoe session packets	Displays PPPoE session statistics.

Clearing PPPoE Sessions

To clear PPPoE sessions, use the following commands in privileged EXEC mode:

Command	Purpose
Router# clear pppoe all	Clears all PPPoE sessions.
Router# clear pppoe interface	Clears all PPPoE sessions on a physical interface or subinterface.
Router# clear pppoe rmac	Clears PPPoE sessions from a client host MAC address.

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

© 2007 Cisco Systems, Inc. All rights reserved.