If the subscriber in SSG UDR is "L3-auth" (meaning that in L3-authorization ''Access-Accept'' response previously indicated ''VasExperts-L2-User=1'', and the next L3 authorization does not contain this attribute), then DPI considers the subscriber cannot be terminated anymore and removes his L2-properties (MAC, VLAN) from the UDR.
If the subscriber in SSG UDR is "L3-auth" (meaning that in L3-authorization ''Access-Accept'' response previously indicated ''VasExperts-L2-User=1'', and the next L3 authorization does not contain this attribute), then DPI considers the subscriber cannot be terminated anymore and removes his L2-properties (MAC, VLAN) from the UDR.
+
+
===== PPPoE traffic termination =====
+
During the SSG operation in [[en:dpi:bras_bng:bras_pppoe|PPPoE server mode]] (''bras_pppoe_enable=1'') the following PPPoE packet manipulation are applied:
+
* towards LAN -> WAN: PPPoE/PPP headers are deleted from the packet, ''srcMAC := bras_arp_mac'', ''dstMAC := bras_gateway_mac''
+
* towards WAN -> LAN: PPPoE/PPP headers are added to the packet, ''srcMAC := bras_arp_mac'', ''dstMAC := subscriber's MAC address''. If the PPPoE session is not found by its IP address, the packet will be dropped.
+
+
All the traffic termination features are supported, including VLAN/Q-in-Q tags in PPPoE traffic along with its termination.
+
+
<note important>The option ''bras_terminate_l2=1'' is not applied to PPPoE sessions: L2 packet headers within the PPPoE-sessions are always manipulated as described above.</note>
+
+
The [[en:dpi:bras_bng:bras_l2_vlan_term:bras_l2_vlan_term_as|AS termination]] mode is not applied to PPPoE traffic, since the PPPoE packets don't alway contain the IP address, so generally the AS cannot be recognized.
