- Audience
- Getting Started with Cisco ME 2600X
- Ethernet Virtual Circuit
- Quality of Service
- Resilient Ethernet Protocol
- Link Aggregation Group and Link Aggregation Control Protocol
- MAC Learning
- Multicast VLAN Registration
- IGMP Snooping
- Remote Network Monitoring and Alarm Troubleshooting
- Authentication, Authorization, and Accounting (AAA)
- Cisco Discovery Protocol
- SNMP
- IP Source Guard for Service Instance
- DHCP Snooping
- Dynamic ARP Inspection
- MAC Address Security
- Layer 2 Access Control Lists on EVCs
- Layer 3 Access Control Lists on EVCs
- Storm Control over EVC
- Control Plane Policing
- ICMP Unreachable Rate Limiting User Feedback
- IP Version 6 Support for the Management Port
- SSH
- PPPoE Intermediate Agent
- CFM over EVC
- Index
Cisco ME 2600X Series Ethernet Access Switch Software Configuration Guide
- Updated:
- September 3, 2014
Chapter: PPPoE Intermediate Agent
- PPPoE Intermediate Agent
- Prerequisites for PPPoE Intermediate Agent
- Restrictions for PPPoE Intermediate Agent
- Information About PPPoE Intermediate Agent
- How to Configure PPPoE Intermediate Agent
PPPoE Intermediate Agent
This chapter describes Point-to-point protocol over Ethernet intermediate agent (PPPoE IA) and the configuration examples.
- PPPoE Intermediate Agent
- Prerequisites for PPPoE Intermediate Agent
- Restrictions for PPPoE Intermediate Agent
- Information About PPPoE Intermediate Agent
- How to Configure PPPoE Intermediate Agent
- Verifying the PPPoE IA Configuration
- Clearing Packet Counters
- Troubleshooting Tips
- Additional References for PPPoE Intermediate Agent
PPPoE Intermediate Agent
Point-to-point protocol over Ethernet intermediate agent (PPPoE IA) is placed between a subscriber and broadband remote access server (BRAS). PPPoE IA helps the service provider BRAS to distinguish between end hosts connected over Ethernet and an access device. The topology of a typical PPPoE implementation is shown in the figure below.
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Toolkit and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Prerequisites for PPPoE Intermediate Agent
- Interface and Interface-EFP based PPPoE IA configurations take effect only when the PPPoE IA feature is enabled globally. Discovery packets are dropped if PPPoE IA is disabled globally.
- For EtherChannel, you must configure PPPoE IA on the port-channel interface. If a member port is removed from the EtherChannel, PPPoE IA configuration is also removed from the member port.
- PPPoE IA feature on Cisco ME 2600X supports global/per-port/per-EFP based format configuration for generating the circuit-id and remote-id. Choose the appropriate option to meet the requirements.
- To configure a large number of intermediate agent devices for PPPoE IA, use the pppoe intermediate-agent command for automatically generating subscriber-line information in the VSA tag by the feature.
Restrictions for PPPoE Intermediate Agent
- PPPoE IA is not supported on routed interfaces.
- More than 6000 PPPoE sessions are not supported through the Cisco ME 2600X device acting as an intermediate agent.
- Host connected ports configured as PPPoE IA trusted are not supported. Only BRAS connecting ports can be configured as trusted interfaces.
Information About PPPoE Intermediate Agent
On the access switch, PPPoE IA enables subscriber line identification by appropriately tagging Ethernet frames of different users. The tag contains specific information such as, which subscriber is connected to the switch and ethernet flow point (EFP).
PPPoE IA acts as mini security firewall between host and BRAS by intercepting all PPPoE Active Discovery (PAD) messages on a per-port per-EFP basis. It provides specific security feature such as, verifying the intercepted PAD message from untrusted port, performing per-port PAD message rate limiting, inserting and removing VSA Tags into and from PAD messages respectively.
How to Configure PPPoE Intermediate Agent
The following tasks describe how to configure PPPoE IA on the Cisco ME 2600X device:
- Enabling or Disabling PPPoE IA on a Device
- Configuring the Access Node Identifier for PPPoE IA
- Configuring the Generic Error Message for PPPoE IA
- Configuring the Identifier String, Option, and Delimiter for PPPoE IA
- Enabling or Disabling PPPoE IA on an Interface
- Configuring PPPoE IA Circuit-ID on an Interface
- Configuring PPPoE IA Remote-ID on an Interface
- Configuring PPPoE IA Rate Limiting Setting on an Interface
- Configuring the PPPoE IA Trust Setting on an Interface
- Configuring PPPoE IA Vendor-tag Stripping on an Interface
- Enabling or Disabling PPPoE IA on an EFP
- Configuring PPPoE IA Circuit-ID on an EFP
- Configuring PPPoE IA Remote-ID on an EFP
- Enabling or Disabling PPPoE IA on a Device
- Enabling or Disabling PPPoE IA on an Interface
- Enabling or Disabling PPPoE IA on an EFP
Enabling or Disabling PPPoE IA on a Device
To enable or disable PPPoE IA globally on the device, complete the following steps:
1.
enable
2.
configure terminal
3.
pppoe intermediate-agent
4.
end
DETAILED STEPS
Configuring the Access Node Identifier for PPPoE IA
 Note | If you do not specify the access node identifier of the switch, the value is automatically set as the IP address of the management interface. |
1.
enable
2.
configure terminal
3.
pppoe intermediate-agent format-type access-node-identifier string string_value
4.
end
DETAILED STEPS
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||
| Step 3 | pppoe intermediate-agent format-type access-node-identifier string string_value
Example: Switch(config)# pppoe intermediate-agent format-type access-node-identifier string switch123
|
Specifies the ASCII string value for the access node identifier.
| ||
| Step 4 | end Example: Switch(config)# end
| Returns to privileged EXEC mode. |
Configuring the Generic Error Message for PPPoE IA
Note | PPPoE IA sends a generic error message only on a specific error condition. If you do not specify string {message}, the error message is not added. |
1.
enable
2.
configure terminal
3.
pppoe intermediate-agent format-type generic-error-message string message
4.
end
DETAILED STEPS
| Command or Action | Purpose | |||||
|---|---|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||||
| Step 3 | pppoe intermediate-agent format-type generic-error-message string message
Example: Switch(config)# pppoe intermediate-agent format-type generic-error-message string packet_length>1484
|
Specifies the ASCII string value for the generic error message. By default the generic-error-message is not set. The string value is converted to UTF-8 before it is added to the response. A message similar to the following displays: PPPoE Discover packet too large to process. Try reducing the number of tags added.
| ||||
| Step 4 | end Example: Switch(config)# end
| Returns to privileged EXEC mode. |
Configuring the Identifier String, Option, and Delimiter for PPPoE IA
Note | By default, the circuit-ID is automatically generated by the device. |
1.
enable
2.
configure terminal
3.
pppoe intermediate-agent format-type identifier-string string string_value option sp | sv | pv | spv delimiter type
4.
end
DETAILED STEPS
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||
| Step 3 | pppoe intermediate-agent format-type identifier-string string string_value option sp | sv | pv | spv delimiter type
Example: Switch(config)# pppoe intermediate-agent format-type identifier-string string circuit1 option spv delimiter :
|
Specifies the ASCII string value for the circuit-ID. Specify an option value: Specify the delimiter between slot/port/BD-VLAN. Values for delimiter include: #|,|.|;|/|space.| This command does not affect the circuit-ID configured explicitly per-interface or per-interface per-EFP with the pppoe intermediate-agent format-type circuit-id or pppoe intermediate-agent vlan num format-type circuit-id commands.
| ||
| Step 4 | end Example: Switch(config)# end
| Returns to privileged EXEC mode. |
Enabling or Disabling PPPoE IA on an Interface
Note | This setting applies to all frames passing through this interface, regardless of the EFP to which they belong. By default the PPPoE IA feature is disabled on all interfaces. You need to run this command on every interface that requires this feature. |
You must enable PPPoE IA on the device in the global configuration mode. See Enabling or Disabling PPPoE IA on a Device.
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
pppoe intermediate-agent
5.
end
DETAILED STEPS
| Command or Action | Purpose | |||||
|---|---|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||||
| Step 4 | pppoe intermediate-agent
Example: Switch(config-if)# pppoe intermediate-agent
|
Enables PPPoE IA on the interface.
| ||||
| Step 5 | end Example: Switch(config-if)# end
| Returns to privileged EXEC mode. |
Configuring PPPoE IA Circuit-ID on an Interface
You can configure the circuit-ID on a physical interface. The PADI, PADR, and PADT packets (belonging to PPPoE discovery stage) that are received on this physical interface are tagged with either one of these IDs. These packets are tagged regardless of their VLAN if PPPoE is not enabled for that VLAN.
Set the circuit-ID on an interface to override the automatic generation of the circuit-ID by the switch.
To configure the circuit-ID on an interface, complete the following steps:
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
pppoe intermediate-agent format-type circuit-id string circuit_id_name
5.
end
DETAILED STEPS
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||
| Step 4 | pppoe intermediate-agent format-type circuit-id string circuit_id_name
Example: Switch(config-if)# pppoe intermediate-agent format-type circuit-id string root
|
Configures the circuit-ID. This command overrides the automatic generation of circuit-id by the device.
| ||
| Step 5 | end Example: Switch(config-if)# end
| Returns to privileged EXEC mode. |
Configuring PPPoE IA Remote-ID on an Interface
You can configure the remote-ID on a physical interface. The PADI, PADR, and PADT packets (belonging to PPPoE discovery stage) that are received on this physical interface are tagged with either one of these IDs. These packets are tagged regardless of their VLAN if PPPoE is not enabled for that VLAN.
Set the remote-ID for subscriber link identification. Configure the remote-ID on every interface in which you enabled PPPoE IA. Otherwise, the default value for remote-ID is the switch MAC address.
To configure the remote-ID on an interface, complete the following steps:
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
pppoe intermediate-agent format-type remote-id string remote_id_name
5.
end
DETAILED STEPS
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||
| Step 4 | pppoe intermediate-agent format-type remote-id string remote_id_name
Example: Switch(config-if)# pppoe intermediate-agent format-type remote-id string granite
|
Configures the remote-ID. This command overrides the automatic generation of circuit-id by the device.
| ||
| Step 5 | end Example: Switch(config-if)# end
| Returns to privileged EXEC mode. |
Configuring PPPoE IA Rate Limiting Setting on an Interface
You can limit the rate (packets per second) at which PPPoE discovery packets (PADI, PADO, PADR, PADS, and PADT) are received on an interface. When the incoming packet rate achieves or exceeds the configured limit, a port enters an error-disabled state and shuts down.
Note | This limit applies to the physical interface to counter misbehaving hosts. Even if a single EFP misbehaves on an interface in trunk mode, the entire interface is shut down (error-disabled), bringing down other EFP traffic on the interface. |
If you set the limit on the interface that connect the access switch to BRAS, use a higher value since the BRAS aggregates all the PPPoE traffic to the access switch through this interface.
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
pppoe intermediate-agent limit rate packets-per-second
5.
end
DETAILED STEPS
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||
| Step 4 | pppoe intermediate-agent limit rate packets-per-second
Example: Switch(config-if)# pppoe intermediate-agent limit rate 30
|
Sets the limit rate in packets per second. By default no rate limit is set. To throttle the PPPoE discovery packets, set the explicit limit.
| ||
| Step 5 | end Example: Switch(config-if)# end
| Returns to privileged EXEC mode. |
Configuring the PPPoE IA Trust Setting on an Interface
Interfaces that connect the device to the PPPoE server are configured as trusted. Interfaces that connect the device to users (PPPoE clients) are untrusted.
This setting is disabled by default.
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
pppoe intermediate-agent
5.
pppoe intermediate-agent trust
6.
end
DETAILED STEPS
| Command or Action | Purpose | |||||
|---|---|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||||
| Step 4 | pppoe intermediate-agent
Example: Switch(config-if)# pppoe intermediate-agent
|
Enables PPPoE IA for an EFP on the interface.
| ||||
| Step 5 | pppoe intermediate-agent trust Example: Switch(config-if)# pppoe intermediate-agent trust
|
Sets the interface as trusted.
| ||||
| Step 6 | end Example: Switch(config-if)# end
| Returns to privileged EXEC mode. |
Configuring PPPoE IA Vendor-tag Stripping on an Interface
Vendor-specific tags (VSAs) carry subscriber and line identification information in the packets.
Vendor-tag stripping involves removing the VSAs from PADO, PADS, and PADT packets that are received on an interface before forwarding them to the user.
You can configure vendor-tag stripping on interfaces connected to the PPPoE server.
This setting is disabled by default.
Note | BRAS automatically strips the vendor-specific tag off of the PPPoE discovery packets before sending them downstream to the access switch. To operate with older BRAS which does not possess this capability, use the pppoe intermediate-agent vendor-tag strip command on the interface connecting the access switch to BRAS |
To enable stripping on an interface , complete the following steps:
- Enable PPPoE on an interface. See Enabling or Disabling PPPoE IA on an Interface.
- Set the PPPoE interface to trust. See Configuring the PPPoE IA Trust Setting on an Interface.
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
pppoe intermediate-agent vendor-tag strip
5.
end
DETAILED STEPS
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||
| Step 4 | pppoe intermediate-agent vendor-tag strip Example: Switch(config-if)# pppoe intermediate-agent vendor-tag strip
|
Enables vendor tag stripping on the trusted interface.
| ||
| Step 5 | end Example: Switch(config-if)# end
| Returns to privileged EXEC mode. |
Enabling or Disabling PPPoE IA on an EFP
To enable or disable PPPoE IA on an EFP, complete the following steps:
You must enable PPPoE IA on the device in the global configuration mode. See Enabling or Disabling PPPoE IA on a Device.
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
service instance id ethernet
5.
pppoe intermediate-agent
6.
end
DETAILED STEPS
| Command or Action | Purpose | |||||
|---|---|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||||
| Step 4 | service instance id ethernet Example: Switch(config-if)# service instance 1 ethernet
|
Configures an Ethernet service instance on an interface and enters Ethernet service configuration mode. | ||||
| Step 5 | pppoe intermediate-agent
Example: Switch(config-if-srv)# pppoe intermediate-agent
|
Enables PPPoE IA for an EFP on the interface.
| ||||
| Step 6 | end Example: Switch(config-if-srv)# end
| Returns to privileged EXEC mode. |
Configuring PPPoE IA Circuit-ID on an EFP
To configure the circuit-ID on an EFP, complete the following steps:
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
service instance id ethernet
5.
pppoe intermediate-agent format-type circuit-id string circuit_id_name
6.
end
DETAILED STEPS
| Command or Action | Purpose | |||||
|---|---|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||||
| Step 4 | service instance id ethernet Example: Switch(config-if)# service instance 1 ethernet
|
Configures an Ethernet service instance on an interface and enters Ethernet service configuration mode. | ||||
| Step 5 | pppoe intermediate-agent format-type circuit-id string circuit_id_name
Example: Switch(config-if-srv)# pppoe intermediate-agent format-type circuit-id string root
|
Sets the circuit-id for an EFP on this interface.
| ||||
| Step 6 | end Example: Switch(config-if-srv)# end
| Returns to privileged EXEC mode. |
Configuring PPPoE IA Remote-ID on an EFP
1.
enable
2.
configure terminal
3.
interface type slot/port
4.
service instance id ethernet
5.
pppoe intermediate-agent format-type remote-id string remote_id_name
6.
end
DETAILED STEPS
| Command or Action | Purpose | |||||||
|---|---|---|---|---|---|---|---|---|
| Step 1 | enable
Example: Switch> enable
|
Enables privileged EXEC mode. | ||||||
| Step 2 | configure terminal
Example: Switch# configure terminal
|
Enters global configuration mode. | ||||||
| Step 3 | interface type slot/port
Example: Switch(config)# interface GigabitEthernet 1/1
|
Specifies the interface to configure and enters interface configuration mode. | ||||||
| Step 4 | service instance id ethernet Example: Switch(config-if)# service instance 1 ethernet
|
Configures an Ethernet service instance on an interface and enters Ethernet service configuration mode. | ||||||
| Step 5 | pppoe intermediate-agent format-type remote-id string remote_id_name
Example: Switch(config-if-srv)# pppoe intermediate-agent format-type remote-id string root
|
Sets the remote-id for an EFP on this interface.
| ||||||
| Step 6 | end Example: Switch(config-if-srv)# end
| Returns to privileged EXEC mode. |
Verifying the PPPoE IA Configuration
Use the show pppoe intermediate-agent [info| statistics] [interface {interface}] command to display the various configuration parameters, statistics, and counters stored for PPPoE. This section contains examples of this command and sample data.
PPPoE IA Information for All Interfaces
Use the following command to show the interfaces and VLANs on which PPPoE is configured:
Switch# show pppoe intermediate-agent information
PPPoE Intermediate-Agent is enabled Global access-node-id is default Global generic error msg is not set Global identifier-string and delimiter are not set PPPoE Intermediate-Agent trust/rate is configured on the following Interfaces: Interface IA Trusted Vsa Strip Rate limit (pps) ----------------------- -------- ------- --------- ---------------- GigabitEthernet0/33 yes no no unlimited PPPoE Intermediate-Agent is configured on following bridge domains: 40,50
PPPoE Information for an Interface
Use the following command to show PPPoE information for a specified interface:
Switch# show pppoe intermediate-agent information interface GigabitEthernet 0/10
Interface IA Trusted Vsa Strip Rate limit (pps) ----------------------- -------- ------- --------- ---------------- Gi 0/33 yes no no unlimited PPPoE Intermediate-Agent is configured on following bridge domains: 40,50
Statistics-All Interfaces
Use the following command to show the number of PADI/PADR/PADT packets received, and the time the last packet was received on all interfaces and on all VLANs pertaining to those interfaces:
Switch# show pppoe intermediate-agent statistics
PPPOE IA Per-Port Statistics ---- ----------------- Interface : GigabitEthernet0/33 Packets received All = 53 PADI = 17 PADO = 0 PADR = 17 PADS = 0 PADT = 19 Packets dropped: Rate-limit exceeded = 0 Server responses from untrusted ports = 0 Client requests towards untrusted ports = 0 Malformed PPPoE Discovery packets = 0 BD 40: Packets received PADI = 8 PADO = 0 PADR = 8 PADS = 0 PADT = 9 BD 50: Packets received PADI = 9 PADO = 0 PADR = 9 PADS = 0 PADT = 10
Statistics-Specific Interface
Use the following command to show statistics for a specified interface:
Switch# show pppoe intermediate-agent statistics interface GigabitEthernet 0/10
Interface : Gi 0/10 Packets received All = 3 PADI = 0 PADO = 0 PADR = 0 PADS = 0 PADT = 3 Packets dropped: Rate-limit exceeded = 0 Server responses from untrusted ports = 0 Client requests towards untrusted ports = 0 Malformed PPPoE Discovery packets = 0 BD 40: Packets received PADI = 6 PADO = 0 PADR = 6 PADS = 0 PADT = 6 BD 50: Packets received PADI = 4 PADO = 0 PADR = 4 PADS = 0 PADT = 4
Clearing Packet Counters
Use the following command to clear packet counters for all PPPoE discovery packets (PADI,PADO,PADR,PADS,PADT) on all interfaces (per-port and per-port-per-EFP):
Switch# clear pppoe intermediate-agent statistics
Use the following command to view the statistics of all the interfaces on which PPPoEIA is enabled:
Switch# show pppoe intermediate-agent statistics
PPPOE IA Per-Port Statistics ---- ----------------- Interface : GigabitEthernet0/33 Packets received All = 53 PADI = 17 PADO = 0 PADR = 17 PADS = 0 PADT = 19 Packets dropped: Rate-limit exceeded = 0 Server responses from untrusted ports = 0 Client requests towards untrusted ports = 0 Malformed PPPoE Discovery packets = 0 BD 40: Packets received PADI = 8 PADO = 0 PADR = 8 PADS = 0 PADT = 9 BD 50: Packets received PADI = 9 PADO = 0 PADR = 9 PADS = 0 PADT = 10 Interface : GigabitEthernet0/34 Packets received All = 59 PADI = 0 PADO = 19 PADR = 0 PADS = 26 PADT = 14 Packets dropped: Rate-limit exceeded = 0 Server responses from untrusted ports = 0 Client requests towards untrusted ports = 0 Malformed PPPoE Discovery packets = 0 BD 40: Packets received PADI = 0 PADO = 12 PADR = 0 PADS = 15 PADT = 7 BD 50: Packets received PADI = 0 PADO = 7 PADR = 0 PADS = 11 PADT = 7
Use the following command to clear packet counters on a selected interface:
Switch# clear pppoe intermediate-agent statistics interface type port/slot
Example:
Switch# clear pppoe intermediate-agent statistics interface gigabitEthernet 0/3
Use the following command to view the packet details on an interface:
Switch# show pppoe intermediate-agent statistics interface type port/slot
Example:
Switch# show pppoe intermediate-agent statistics interface gigabitEthernet 0/3
Interface : Gi 0/3 Packets received All = 0 PADI = 0 PADO = 0 PADR = 0 PADS = 0 PADT = 0 Packets dropped: Rate-limit exceeded = 0 Server responses from untrusted ports = 0 Client requests towards untrusted ports = 0 Malformed PPPoE Discovery packets = 0 BD 40: Packets received PADI = 0 PADO = 0 PADR = 0 PADS = 0 PADT = 0 BD 50: Packets received PADI = 0 PADO = 0 PADR = 0 PADS = 0 PADT = 0
Troubleshooting Tips
- debug pppoe intermediate-agent packet—Displays the contents of a packet received in the software: source and destination MAC address of Ethernet frame, code, version and type of PPPoE Discovery packet and a list of TAGs present.
- debug pppoe intermediate-agent event—Provides debugging information about PPPoE events.
- debug radius—Generates a report that includes information about the incoming access interface, where discovery frames are received, and about the session being established in PPPoE extended NAS-Port format (format d).
Additional References for PPPoE Intermediate Agent
The following sections provide references related to the PPPoE IA feature.
MIBs
| MIB | MIBs link |
|---|---|
None. |
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: |
RFCs
| RFC | Title |
|---|---|
No new or modified RFCs are supported, and support for existing RFCs has not been modified. |
— |
Technical Assistance
| Description | Link |
|---|---|
The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. |
http://www.cisco.com/cisco/web/support/index.html |
Feedback