Explore Cisco
How to Buy

Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco ME 2600X Series Ethernet Access Switch Software Configuration Guide

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

Cisco ME 2600X Series Ethernet Access Switch Software Configuration Guide

Chapter Title

PPPoE Intermediate Agent

Results

Updated:
September 3, 2014

Chapter: PPPoE Intermediate Agent

PPPoE Intermediate Agent

This chapter describes Point-to-point protocol over Ethernet intermediate agent (PPPoE IA) and the configuration examples.

PPPoE Intermediate Agent

Point-to-point protocol over Ethernet intermediate agent (PPPoE IA) is placed between a subscriber and broadband remote access server (BRAS). PPPoE IA helps the service provider BRAS to distinguish between end hosts connected over Ethernet and an access device. The topology of a typical PPPoE implementation is shown in the figure below.

Figure 1. PPP in an Ethernet Scenario

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Toolkit and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.

Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http:/​/​www.cisco.com/​go/​cfn. An account on Cisco.com is not required.

Prerequisites for PPPoE Intermediate Agent

  • Interface and Interface-EFP based PPPoE IA configurations take effect only when the PPPoE IA feature is enabled globally. Discovery packets are dropped if PPPoE IA is disabled globally.
  • For EtherChannel, you must configure PPPoE IA on the port-channel interface. If a member port is removed from the EtherChannel, PPPoE IA configuration is also removed from the member port.
  • PPPoE IA feature on Cisco ME 2600X supports global/per-port/per-EFP based format configuration for generating the circuit-id and remote-id. Choose the appropriate option to meet the requirements.
  • To configure a large number of intermediate agent devices for PPPoE IA, use the pppoe intermediate-agent command for automatically generating subscriber-line information in the VSA tag by the feature.

Restrictions for PPPoE Intermediate Agent

  • PPPoE IA is not supported on routed interfaces.
  • More than 6000 PPPoE sessions are not supported through the Cisco ME 2600X device acting as an intermediate agent.
  • Host connected ports configured as PPPoE IA trusted are not supported. Only BRAS connecting ports can be configured as trusted interfaces.

Information About PPPoE Intermediate Agent

On the access switch, PPPoE IA enables subscriber line identification by appropriately tagging Ethernet frames of different users. The tag contains specific information such as, which subscriber is connected to the switch and ethernet flow point (EFP).

PPPoE IA acts as mini security firewall between host and BRAS by intercepting all PPPoE Active Discovery (PAD) messages on a per-port per-EFP basis. It provides specific security feature such as, verifying the intercepted PAD message from untrusted port, performing per-port PAD message rate limiting, inserting and removing VSA Tags into and from PAD messages respectively.

How to Configure PPPoE Intermediate Agent

The following tasks describe how to configure PPPoE IA on the Cisco ME 2600X device:

Enabling or Disabling PPPoE IA on a Device

To enable or disable PPPoE IA globally on the device, complete the following steps:

SUMMARY STEPS

    1.    enable

    2.    configure terminal

    3.    pppoe intermediate-agent

    4.    end


DETAILED STEPS
     Command or ActionPurpose
    Step 1enable


    Example: 
    Switch> enable
     

    Enables privileged EXEC mode.

    • Enter your password if prompted.
     
    Step 2configure terminal


    Example: 
    Switch# configure terminal
     

    Enters global configuration mode.

     
    Step 3pppoe intermediate-agent


    Example: 
    Switch(config)# pppoe intermediate-agent
     

    Enables PPPoE IA on the device.

    Note   

    To disable the PPPoE IA feature on the device, use the no pppoe intermediate-agent command.

     
    Step 4end


    Example:
    Switch(config)# end
     

    Returns to privileged EXEC mode.

     

    Configuring the Access Node Identifier for PPPoE IA


    Note

    If you do not specify the access node identifier of the switch, the value is automatically set as the IP address of the management interface.

    SUMMARY STEPS

      1.    enable

      2.    configure terminal

      3.    pppoe intermediate-agent format-type access-node-identifier string string_value

      4.    end


    DETAILED STEPS
       Command or ActionPurpose
      Step 1enable


      Example: 
      Switch> enable
       

      Enables privileged EXEC mode.

      • Enter your password if prompted.
       
      Step 2configure terminal


      Example: 
      Switch# configure terminal
       

      Enters global configuration mode.

       
      Step 3pppoe intermediate-agent format-type access-node-identifier string string_value


      Example: 
      Switch(config)# pppoe intermediate-agent format-type access-node-identifier string switch123
       

      Specifies the ASCII string value for the access node identifier.

      Note   

      To disable the access node identifier string for PPPoE IA, use the no pppoe intermediate-agent format-type access-node-identifier string command.

       
      Step 4end


      Example:
      Switch(config)# end
       

      Returns to privileged EXEC mode.

       

      Configuring the Generic Error Message for PPPoE IA


      Note

      PPPoE IA sends a generic error message only on a specific error condition. If you do not specify string {message}, the error message is not added.

      SUMMARY STEPS

        1.    enable

        2.    configure terminal

        3.    pppoe intermediate-agent format-type generic-error-message string message

        4.    end


      DETAILED STEPS
         Command or ActionPurpose
        Step 1enable


        Example: 
        Switch> enable
         

        Enables privileged EXEC mode.

        • Enter your password if prompted.
         
        Step 2configure terminal


        Example: 
        Switch# configure terminal
         

        Enters global configuration mode.

         
        Step 3pppoe intermediate-agent format-type generic-error-message string message


        Example: 
        Switch(config)# pppoe intermediate-agent format-type generic-error-message string packet_length>1484
         

        Specifies the ASCII string value for the generic error message.

        By default the generic-error-message is not set. The string value is converted to UTF-8 before it is added to the response. A message similar to the following displays:

        PPPoE Discover packet too large to process. Try reducing the number of tags added.
        Note   

        This TAG (0x0203 Generic-Error) indicates an error. It can be added to PPPoE Active Discovery Offer (PADO) or PPPoE Active Discovery Session-confirmation (PADS) packets generated by PPPoE IA. The tag can then be sent back to the user in response to PPPoE Active Discovery Initiation (PADI) or PPPoE active discovery request (PADR), when a PPPoE discovery packet received by PPPoE IA with PPPoE payload is greater than 1484 bytes. Error data must be a UTF-8 string.

        Note   

        To disable the generic error message on the device, use the no pppoe intermediate-agent format-type generic-error-message string command.

         
        Step 4end


        Example:
        Switch(config)# end
         

        Returns to privileged EXEC mode.

         

        Configuring the Identifier String, Option, and Delimiter for PPPoE IA


        Note

        By default, the circuit-ID is automatically generated by the device.

        SUMMARY STEPS

          1.    enable

          2.    configure terminal

          3.    pppoe intermediate-agent format-type identifier-string string string_value option sp | sv | pv | spv delimiter type

          4.    end


        DETAILED STEPS
           Command or ActionPurpose
          Step 1enable


          Example: 
          Switch> enable
           

          Enables privileged EXEC mode.

          • Enter your password if prompted.
           
          Step 2configure terminal


          Example: 
          Switch# configure terminal
           

          Enters global configuration mode.

           
          Step 3pppoe intermediate-agent format-type identifier-string string string_value option sp | sv | pv | spv delimiter type


          Example: 
          Switch(config)# pppoe intermediate-agent format-type identifier-string string circuit1 option spv delimiter :
           

          Specifies the ASCII string value for the circuit-ID.

          Specify an option value:

          • sp—slot + port
          • sv—slot + BD-VLAN
          • pv—port + BD-VLAN
          • spv—slot + port + BD-VLAN

          Specify the delimiter between slot/port/BD-VLAN.

          Values for delimiter include: #|,|.|;|/|space.|

          This command does not affect the circuit-ID configured explicitly per-interface or per-interface per-EFP with the pppoe intermediate-agent format-type circuit-id or pppoe intermediate-agent vlan num format-type circuit-id commands.

          Note   

          To revert back to default automatic generation of circuit-ID, use the no pppoe intermediate-agent format-type identifier-string command without WORD, options, and delimiters.

           
          Step 4end


          Example:
          Switch(config)# end
           

          Returns to privileged EXEC mode.

           

          Enabling or Disabling PPPoE IA on an Interface


          Note

          This setting applies to all frames passing through this interface, regardless of the EFP to which they belong. By default the PPPoE IA feature is disabled on all interfaces. You need to run this command on every interface that requires this feature.

          Before You Begin

          You must enable PPPoE IA on the device in the global configuration mode. See Enabling or Disabling PPPoE IA on a Device.

          SUMMARY STEPS

            1.    enable

            2.    configure terminal

            3.    interface type slot/port

            4.    pppoe intermediate-agent

            5.    end


          DETAILED STEPS
             Command or ActionPurpose
            Step 1enable


            Example: 
            Switch> enable
             

            Enables privileged EXEC mode.

            • Enter your password if prompted.
             
            Step 2configure terminal


            Example: 
            Switch# configure terminal
             

            Enters global configuration mode.

             
            Step 3interface type slot/port


            Example: 
            Switch(config)# interface GigabitEthernet 1/1
             

            Specifies the interface to configure and enters interface configuration mode.

            • type—Type of interface to be configured
            • slot —Chassis slot number
            • /port—Port or interface number
             
            Step 4pppoe intermediate-agent


            Example: 
            Switch(config-if)# pppoe intermediate-agent
             

            Enables PPPoE IA on the interface.

            Note   

            Enabling PPPoE IA on an interface does not ensure that incoming packets are tagged. For this to happen PPPoE IA must be enabled globally, and at least one interface that connects the device to PPPoE server has a trusted PPPoE IA setting.

            Note   

            To disable the PPPoE IA feature on the interface, use the no pppoe intermediate-agent command.

             
            Step 5end


            Example:
            Switch(config-if)# end
             

            Returns to privileged EXEC mode.

             

            Configuring PPPoE IA Circuit-ID on an Interface

            You can configure the circuit-ID on a physical interface. The PADI, PADR, and PADT packets (belonging to PPPoE discovery stage) that are received on this physical interface are tagged with either one of these IDs. These packets are tagged regardless of their VLAN if PPPoE is not enabled for that VLAN.

            Set the circuit-ID on an interface to override the automatic generation of the circuit-ID by the switch.

            To configure the circuit-ID on an interface, complete the following steps:

            SUMMARY STEPS

              1.    enable

              2.    configure terminal

              3.    interface type slot/port

              4.    pppoe intermediate-agent format-type circuit-id string circuit_id_name

              5.    end


            DETAILED STEPS
               Command or ActionPurpose
              Step 1enable


              Example: 
              Switch> enable
               

              Enables privileged EXEC mode.

              • Enter your password if prompted.
               
              Step 2configure terminal


              Example: 
              Switch# configure terminal
               

              Enters global configuration mode.

               
              Step 3interface type slot/port


              Example: 
              Switch(config)# interface GigabitEthernet 1/1
               

              Specifies the interface to configure and enters interface configuration mode.

              • type—Type of interface to be configured
              • slot —Chassis slot number
              • /port—Port or interface number
               
              Step 4pppoe intermediate-agent format-type circuit-id string circuit_id_name


              Example: 
              Switch(config-if)# pppoe intermediate-agent format-type circuit-id string root
               

              Configures the circuit-ID. This command overrides the automatic generation of circuit-id by the device.

              Note   

              To disable the circuit-ID on an interface, use the no pppoe intermediate-agent format-type circuit-id string root command.

               
              Step 5end


              Example:
              Switch(config-if)# end
               

              Returns to privileged EXEC mode.

               

              Configuring PPPoE IA Remote-ID on an Interface

              You can configure the remote-ID on a physical interface. The PADI, PADR, and PADT packets (belonging to PPPoE discovery stage) that are received on this physical interface are tagged with either one of these IDs. These packets are tagged regardless of their VLAN if PPPoE is not enabled for that VLAN.

              Set the remote-ID for subscriber link identification. Configure the remote-ID on every interface in which you enabled PPPoE IA. Otherwise, the default value for remote-ID is the switch MAC address.

              To configure the remote-ID on an interface, complete the following steps:

              SUMMARY STEPS

                1.    enable

                2.    configure terminal

                3.    interface type slot/port

                4.    pppoe intermediate-agent format-type remote-id string remote_id_name

                5.    end


              DETAILED STEPS
                 Command or ActionPurpose
                Step 1enable


                Example: 
                Switch> enable
                 

                Enables privileged EXEC mode.

                • Enter your password if prompted.
                 
                Step 2configure terminal


                Example: 
                Switch# configure terminal
                 

                Enters global configuration mode.

                 
                Step 3interface type slot/port


                Example: 
                Switch(config)# interface GigabitEthernet 1/1
                 

                Specifies the interface to configure and enters interface configuration mode.

                 
                Step 4pppoe intermediate-agent format-type remote-id string remote_id_name


                Example: 
                Switch(config-if)# pppoe intermediate-agent format-type remote-id string granite
                 

                Configures the remote-ID. This command overrides the automatic generation of circuit-id by the device.

                Note   

                To disable the remote-ID on an interface, use the no pppoe intermediate-agent format-type remote-id string command.

                 
                Step 5end


                Example:
                Switch(config-if)# end
                 

                Returns to privileged EXEC mode.

                 

                Configuring PPPoE IA Rate Limiting Setting on an Interface

                You can limit the rate (packets per second) at which PPPoE discovery packets (PADI, PADO, PADR, PADS, and PADT) are received on an interface. When the incoming packet rate achieves or exceeds the configured limit, a port enters an error-disabled state and shuts down.


                Note

                This limit applies to the physical interface to counter misbehaving hosts. Even if a single EFP misbehaves on an interface in trunk mode, the entire interface is shut down (error-disabled), bringing down other EFP traffic on the interface.

                If you set the limit on the interface that connect the access switch to BRAS, use a higher value since the BRAS aggregates all the PPPoE traffic to the access switch through this interface.

                SUMMARY STEPS

                  1.    enable

                  2.    configure terminal

                  3.    interface type slot/port

                  4.    pppoe intermediate-agent limit rate packets-per-second

                  5.    end


                DETAILED STEPS
                   Command or ActionPurpose
                  Step 1enable


                  Example: 
                  Switch> enable
                   

                  Enables privileged EXEC mode.

                  • Enter your password if prompted.
                   
                  Step 2configure terminal


                  Example: 
                  Switch# configure terminal
                   

                  Enters global configuration mode.

                   
                  Step 3interface type slot/port


                  Example: 
                  Switch(config)# interface GigabitEthernet 1/1
                   

                  Specifies the interface to configure and enters interface configuration mode.

                  • type—Type of interface to be configured
                  • slot —Chassis slot number
                  • /port—Port or interface number
                   
                  Step 4pppoe intermediate-agent limit rate packets-per-second


                  Example: 
                  Switch(config-if)# pppoe intermediate-agent limit rate 30
                   

                  Sets the limit rate in packets per second.

                  By default no rate limit is set. To throttle the PPPoE discovery packets, set the explicit limit.

                  Note   

                  To disable rate limit on an interface, use the no pppoe intermediate-agent limit rate command.

                   
                  Step 5end


                  Example:
                  Switch(config-if)# end
                   

                  Returns to privileged EXEC mode.

                   

                  Configuring the PPPoE IA Trust Setting on an Interface

                  Interfaces that connect the device to the PPPoE server are configured as trusted. Interfaces that connect the device to users (PPPoE clients) are untrusted.

                  This setting is disabled by default.

                  SUMMARY STEPS

                    1.    enable

                    2.    configure terminal

                    3.    interface type slot/port

                    4.    pppoe intermediate-agent

                    5.    pppoe intermediate-agent trust

                    6.    end


                  DETAILED STEPS
                     Command or ActionPurpose
                    Step 1enable


                    Example: 
                    Switch> enable
                     

                    Enables privileged EXEC mode.

                    • Enter your password if prompted.
                     
                    Step 2configure terminal


                    Example: 
                    Switch# configure terminal
                     

                    Enters global configuration mode.

                     
                    Step 3interface type slot/port


                    Example: 
                    Switch(config)# interface GigabitEthernet 1/1
                     

                    Specifies the interface to configure and enters interface configuration mode.

                    • type—Type of interface to be configured
                    • slot —Chassis slot number
                    • /port—Port or interface number
                     
                    Step 4pppoe intermediate-agent


                    Example: 
                    Switch(config-if)# pppoe intermediate-agent
                     

                    Enables PPPoE IA for an EFP on the interface.

                    Note   

                    For pppoe intermediate-agent command to take effect, it is not required to enable PPPoE IA on the interface.

                    Note   

                    To disable the PPPoE IA feature for an EFP on the interface, use the no pppoe intermediate-agent command.

                     
                    Step 5pppoe intermediate-agent trust


                    Example: 
                    Switch(config-if)# pppoe intermediate-agent trust
                     

                    Sets the interface as trusted.

                    Note   

                    To disable a physical interface as trusted, use the no pppoe intermediate-agent trust command.

                     
                    Step 6end


                    Example:
                    Switch(config-if)# end
                     

                    Returns to privileged EXEC mode.

                     

                    Configuring PPPoE IA Vendor-tag Stripping on an Interface

                    Vendor-specific tags (VSAs) carry subscriber and line identification information in the packets.

                    Vendor-tag stripping involves removing the VSAs from PADO, PADS, and PADT packets that are received on an interface before forwarding them to the user.

                    You can configure vendor-tag stripping on interfaces connected to the PPPoE server.

                    This setting is disabled by default.


                    Note

                    BRAS automatically strips the vendor-specific tag off of the PPPoE discovery packets before sending them downstream to the access switch. To operate with older BRAS which does not possess this capability, use the pppoe intermediate-agent vendor-tag strip command on the interface connecting the access switch to BRAS

                    To enable stripping on an interface , complete the following steps:

                    Before You Begin
                    1. Enable PPPoE on an interface. See Enabling or Disabling PPPoE IA on an Interface.
                    2. Set the PPPoE interface to trust. See Configuring the PPPoE IA Trust Setting on an Interface.
                    SUMMARY STEPS

                      1.    enable

                      2.    configure terminal

                      3.    interface type slot/port

                      4.    pppoe intermediate-agent vendor-tag strip

                      5.    end


                    DETAILED STEPS
                       Command or ActionPurpose
                      Step 1enable


                      Example: 
                      Switch> enable
                       

                      Enables privileged EXEC mode.

                      • Enter your password if prompted.
                       
                      Step 2configure terminal


                      Example: 
                      Switch# configure terminal
                       

                      Enters global configuration mode.

                       
                      Step 3interface type slot/port


                      Example: 
                      Switch(config)# interface GigabitEthernet 1/1
                       

                      Specifies the interface to configure and enters interface configuration mode.

                       
                      Step 4pppoe intermediate-agent vendor-tag strip


                      Example: 
                      Switch(config-if)# pppoe intermediate-agent vendor-tag strip
                       

                      Enables vendor tag stripping on the trusted interface.

                      Note   

                      To disable the stripping on an interface, use the no pppoe intermediate-agent vendor-tag strip command.

                       
                      Step 5end


                      Example:
                      Switch(config-if)# end
                       

                      Returns to privileged EXEC mode.

                       

                      Enabling or Disabling PPPoE IA on an EFP

                      To enable or disable PPPoE IA on an EFP, complete the following steps:

                      Before You Begin

                      You must enable PPPoE IA on the device in the global configuration mode. See Enabling or Disabling PPPoE IA on a Device.

                      SUMMARY STEPS

                        1.    enable

                        2.    configure terminal

                        3.    interface type slot/port

                        4.    service instance id ethernet

                        5.    pppoe intermediate-agent

                        6.    end


                      DETAILED STEPS
                         Command or ActionPurpose
                        Step 1enable


                        Example: 
                        Switch> enable
                         

                        Enables privileged EXEC mode.

                        • Enter your password if prompted.
                         
                        Step 2configure terminal


                        Example: 
                        Switch# configure terminal
                         

                        Enters global configuration mode.

                         
                        Step 3interface type slot/port


                        Example: 
                        Switch(config)# interface GigabitEthernet 1/1
                         

                        Specifies the interface to configure and enters interface configuration mode.

                         
                        Step 4service instance id ethernet


                        Example: 
                        Switch(config-if)# service instance 1 ethernet
                         

                        Configures an Ethernet service instance on an interface and enters Ethernet service configuration mode.

                         
                        Step 5pppoe intermediate-agent


                        Example: 
                        Switch(config-if-srv)# pppoe intermediate-agent
                         

                        Enables PPPoE IA for an EFP on the interface.

                        Note   

                        For pppoe intermediate-agent command to take effect, it is not required to enable PPPoE IA on the interface.

                        Note   

                        To disable the PPPoE IA feature for an EFP on the interface, use the no pppoe intermediate-agent command.

                         
                        Step 6end


                        Example:
                        Switch(config-if-srv)# end
                         

                        Returns to privileged EXEC mode.

                         

                        Configuring PPPoE IA Circuit-ID on an EFP

                        To configure the circuit-ID on an EFP, complete the following steps:

                        SUMMARY STEPS

                          1.    enable

                          2.    configure terminal

                          3.    interface type slot/port

                          4.    service instance id ethernet

                          5.    pppoe intermediate-agent format-type circuit-id string circuit_id_name

                          6.    end


                        DETAILED STEPS
                           Command or ActionPurpose
                          Step 1enable


                          Example: 
                          Switch> enable
                           

                          Enables privileged EXEC mode.

                          • Enter your password if prompted.
                           
                          Step 2configure terminal


                          Example: 
                          Switch# configure terminal
                           

                          Enters global configuration mode.

                           
                          Step 3interface type slot/port


                          Example: 
                          Switch(config)# interface GigabitEthernet 1/1
                           

                          Specifies the interface to configure and enters interface configuration mode.

                           
                          Step 4service instance id ethernet


                          Example: 
                          Switch(config-if)# service instance 1 ethernet
                           

                          Configures an Ethernet service instance on an interface and enters Ethernet service configuration mode.

                           
                          Step 5pppoe intermediate-agent format-type circuit-id string circuit_id_name


                          Example: 
                          Switch(config-if-srv)# pppoe intermediate-agent format-type circuit-id string root
                           

                          Sets the circuit-id for an EFP on this interface.

                          Note   

                          The pppoe intermediate-agent format-type circuit-id string command overrides the circuit-id specified for the interface and the device uses the value of the circuit-id string to tag packets received on this EFP.

                          Note   

                          To disable the circuit-ID on an EFP, use the no pppoe intermediate-agent format-type circuit-id string command.

                           
                          Step 6end


                          Example:
                          Switch(config-if-srv)# end
                           

                          Returns to privileged EXEC mode.

                           

                          Configuring PPPoE IA Remote-ID on an EFP

                          SUMMARY STEPS

                            1.    enable

                            2.    configure terminal

                            3.    interface type slot/port

                            4.    service instance id ethernet

                            5.    pppoe intermediate-agent format-type remote-id string remote_id_name

                            6.    end


                          DETAILED STEPS
                             Command or ActionPurpose
                            Step 1enable


                            Example: 
                            Switch> enable
                             

                            Enables privileged EXEC mode.

                            • Enter your password if prompted.
                             
                            Step 2configure terminal


                            Example: 
                            Switch# configure terminal
                             

                            Enters global configuration mode.

                             
                            Step 3interface type slot/port


                            Example: 
                            Switch(config)# interface GigabitEthernet 1/1
                             

                            Specifies the interface to configure and enters interface configuration mode.

                            • type—Type of interface to be configured
                            • slot —Chassis slot number
                            • /port—Port or interface number
                             
                            Step 4service instance id ethernet


                            Example: 
                            Switch(config-if)# service instance 1 ethernet
                             

                            Configures an Ethernet service instance on an interface and enters Ethernet service configuration mode.

                             
                            Step 5pppoe intermediate-agent format-type remote-id string remote_id_name


                            Example: 
                            Switch(config-if-srv)# pppoe intermediate-agent format-type remote-id string root
                             

                            Sets the remote-id for an EFP on this interface.

                            Note   

                            The pppoe intermediate-agent format-type remote-id string command overrides the remote-id specified for the interface and the device uses the value of the remote-id string to tag packets received on this EFP.

                            Note   

                            The default value of remote-id is the device MAC address (for all vlans). To encode subscriber specific information, it is strongly recommended that you set this parameter.

                            Note   

                            To disable the remote-ID on an EFP, use the no pppoe intermediate-agent format-type remote-id string command.

                             
                            Step 6end


                            Example:
                            Switch(config-if-srv)# end
                             

                            Returns to privileged EXEC mode.

                             

                            Verifying the PPPoE IA Configuration

                            Use the show pppoe intermediate-agent [info| statistics] [interface {interface}] command to display the various configuration parameters, statistics, and counters stored for PPPoE. This section contains examples of this command and sample data.

                            PPPoE IA Information for All Interfaces

                            Use the following command to show the interfaces and VLANs on which PPPoE is configured:

                            Switch# show pppoe intermediate-agent information
                            PPPoE Intermediate-Agent is enabled

Global access-node-id is default
Global generic error msg is not set
Global identifier-string and delimiter are not set

PPPoE Intermediate-Agent trust/rate is configured on the following Interfaces:

Interface               IA         Trusted    Vsa Strip   Rate limit (pps)
----------------------- --------   -------    ---------   ----------------
GigabitEthernet0/33        yes        no         no          unlimited
PPPoE Intermediate-Agent is configured on following bridge domains:
40,50

                            PPPoE Information for an Interface

                            Use the following command to show PPPoE information for a specified interface:

                            Switch# show pppoe intermediate-agent information interface GigabitEthernet 0/10
                            Interface               IA         Trusted    Vsa Strip   Rate limit (pps)
----------------------- --------   -------    ---------   ----------------   
Gi 0/33         yes        no         no          unlimited
PPPoE Intermediate-Agent is configured on following bridge domains:
40,50

                            Statistics-All Interfaces

                            Use the following command to show the number of PADI/PADR/PADT packets received, and the time the last packet was received on all interfaces and on all VLANs pertaining to those interfaces:

                            Switch# show pppoe intermediate-agent statistics
                            PPPOE IA Per-Port Statistics
---- -----------------

Interface : GigabitEthernet0/33
Packets received
 All = 53
 PADI = 17 PADO = 0
 PADR = 17 PADS = 0
 PADT = 19
Packets dropped:
 Rate-limit exceeded = 0
 Server responses from untrusted ports = 0
 Client requests towards untrusted ports = 0
 Malformed PPPoE Discovery packets = 0
BD 40: Packets received PADI = 8 PADO = 0 PADR = 8 PADS = 0 PADT = 9
BD 50: Packets received PADI = 9 PADO = 0 PADR = 9 PADS = 0 PADT = 10

                            Statistics-Specific Interface

                            Use the following command to show statistics for a specified interface:

                            Switch# show pppoe intermediate-agent statistics interface GigabitEthernet 0/10
                            Interface : Gi 0/10
 Packets received
  All = 3
  PADI = 0 PADO = 0
  PADR = 0 PADS = 0
  PADT = 3
 Packets dropped:
  Rate-limit exceeded = 0
  Server responses from untrusted ports = 0
  Client requests towards untrusted ports = 0
  Malformed PPPoE Discovery packets = 0
BD 40: Packets received PADI = 6 PADO = 0 PADR = 6 PADS = 0 PADT = 6
BD 50: Packets received PADI = 4 PADO = 0 PADR = 4 PADS = 0 PADT = 4

                            Clearing Packet Counters

                            Use the following command to clear packet counters for all PPPoE discovery packets (PADI,PADO,PADR,PADS,PADT) on all interfaces (per-port and per-port-per-EFP):

                            Switch# clear pppoe intermediate-agent statistics

                            Use the following command to view the statistics of all the interfaces on which PPPoEIA is enabled:

                            Switch# show pppoe intermediate-agent statistics
                            PPPOE IA Per-Port Statistics
---- -----------------

Interface : GigabitEthernet0/33
Packets received
 All = 53
 PADI = 17 PADO = 0
 PADR = 17 PADS = 0
 PADT = 19
Packets dropped:
 Rate-limit exceeded = 0
 Server responses from untrusted ports = 0
 Client requests towards untrusted ports = 0
 Malformed PPPoE Discovery packets = 0
BD 40: Packets received PADI = 8 PADO = 0 PADR = 8 PADS = 0 PADT = 9
BD 50: Packets received PADI = 9 PADO = 0 PADR = 9 PADS = 0 PADT = 10
Interface : GigabitEthernet0/34
Packets received
 All = 59
 PADI = 0 PADO = 19
 PADR = 0 PADS = 26
 PADT = 14
Packets dropped:
 Rate-limit exceeded = 0
 Server responses from untrusted ports = 0
 Client requests towards untrusted ports = 0
 Malformed PPPoE Discovery packets = 0
BD 40: Packets received PADI = 0 PADO = 12 PADR = 0 PADS = 15 PADT = 7
BD 50: Packets received PADI = 0 PADO = 7 PADR = 0 PADS = 11 PADT = 7

                            Use the following command to clear packet counters on a selected interface:

                            Switch# clear pppoe intermediate-agent statistics interface type port/slot

                            Example:

                            Switch# clear pppoe intermediate-agent statistics interface gigabitEthernet 0/3

                            Use the following command to view the packet details on an interface:

                            Switch# show pppoe intermediate-agent statistics interface type port/slot

                            Example:

                            Switch# show pppoe intermediate-agent statistics interface gigabitEthernet 0/3
                            Interface : Gi 0/3
 Packets received
  All = 0
  PADI = 0 PADO = 0
  PADR = 0 PADS = 0
  PADT = 0
 Packets dropped:
  Rate-limit exceeded = 0
  Server responses from untrusted ports = 0
  Client requests towards untrusted ports = 0
  Malformed PPPoE Discovery packets = 0
BD 40: Packets received PADI = 0 PADO = 0 PADR = 0 PADS = 0 PADT = 0
BD 50: Packets received PADI = 0 PADO = 0 PADR = 0 PADS = 0 PADT = 0

                            Troubleshooting Tips

                            The following debug commands can help you troubleshoot an improper PPPoE intermediate agent configuration and its related features:
                            • debug pppoe intermediate-agent packet—Displays the contents of a packet received in the software: source and destination MAC address of Ethernet frame, code, version and type of PPPoE Discovery packet and a list of TAGs present.
                            • debug pppoe intermediate-agent event—Provides debugging information about PPPoE events.
                            • debug radius—Generates a report that includes information about the incoming access interface, where discovery frames are received, and about the session being established in PPPoE extended NAS-Port format (format d).

                            Additional References for PPPoE Intermediate Agent

                            The following sections provide references related to the PPPoE IA feature.

                            MIBs

                            MIB MIBs link

                            None.

                            To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:

                            http:/​/​tools.cisco.com/​ITDIT/​MIBS/​servlet/​index

                            RFCs

                            RFC Title

                            No new or modified RFCs are supported, and support for existing RFCs has not been modified.

                            		 —

                            Technical Assistance

                            Description Link

                            The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies.

                            To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds.

                            Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

                            		 http:/​/​www.cisco.com/​cisco/​web/​support/​index.html

                            Was this Document Helpful?

                            FeedbackFeedback

                            Contact Cisco