| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:bras_bng:bras_pppoe:pppoe_conf [2025/09/29 16:20] – elena.krasnobryzh | en:dpi:bras_bng:bras_pppoe:pppoe_conf [2025/12/08 12:28] (current) – [Additional PPPoE settings] elena.krasnobryzh |
|---|
| <note tip>L2 PPPoE Mode Overview: {{youtube>ZmCvcSOg73k?}}</note> | <note tip>L2 PPPoE Mode Overview: {{youtube>ZmCvcSOg73k?}}</note> |
| |
| =====Enabling PPPoE Support===== | =====Enabling PPPoE support===== |
| - Activate BRAS. [[dpi:bras_bng:general_setup#configuring_bras_l2_in_fastdpi|More details]]. | - Activate BRAS. [[dpi:bras_bng:general_setup#configuring_bras_l2_in_fastdpi|More details]]. |
| - Configure parameters in ''fastdpi.conf'': | - Configure parameters in ''fastdpi.conf'': |
| bras_gateway_mac=aa:bb:cc:dd:ee:ff</code> | bras_gateway_mac=aa:bb:cc:dd:ee:ff</code> |
| |
| =====Authorization Configuration===== | =====Authorization configuration===== |
| The list of allowed authorization protocols is set by the ''bras_ppp_auth_list'' parameter in ''fastdpi.conf''.\\ | The list of allowed authorization protocols is set by the ''bras_ppp_auth_list'' parameter in ''fastdpi.conf''.\\ |
| Possible values: | Possible values: |
| <note>[[dpi:bras_bng:bras_pppoe:pppoe_pppol2tp_parameters:bras_pppoe_radius|Authorization of PPPoE sessions on a Radius server]]</note> | <note>[[dpi:bras_bng:bras_pppoe:pppoe_pppol2tp_parameters:bras_pppoe_radius|Authorization of PPPoE sessions on a Radius server]]</note> |
| |
| =====ARP Handling in PPPoE===== | =====ARP handling in PPPoE===== |
| In networks with PPPoE connections (point-to-point type), sending ARP requests from subscribers has no practical meaning. A subscriber can only send packets to the PPPoE server's address, whose MAC address is known to the subscriber within the established PPPoE connection. | In networks with PPPoE connections (point-to-point type), sending ARP requests from subscribers has no practical meaning. A subscriber can only send packets to the PPPoE server's address, whose MAC address is known to the subscriber within the established PPPoE connection. |
| |
| * [[dpi:bras_bng:bras_l2_options:bras_l2_vlan_local|Local traffic closure]], including traffic between different segment types (e.g., between PPPoE and DHCP networks) | * [[dpi:bras_bng:bras_l2_options:bras_l2_vlan_local|Local traffic closure]], including traffic between different segment types (e.g., between PPPoE and DHCP networks) |
| |
| =====Restoring PPPoE Sessions on SSG Restart===== | =====Restoring PPPoE sessions on SSG restart===== |
| Upon startup, fastDPI attempts to restore PPPoE subscriber sessions based on information saved in UDR. This ensures transparency of a brief service restart for subscribers. | Upon startup, fastDPI attempts to restore PPPoE subscriber sessions based on information saved in UDR. This ensures transparency of a brief service restart for subscribers. |
| |
| * When attempting to continue using an old session, SSG will send the subscriber a PADT (PPP Active Discovery Terminate) to terminate the session. | * When attempting to continue using an old session, SSG will send the subscriber a PADT (PPP Active Discovery Terminate) to terminate the session. |
| |
| =====Additional PPPoE Settings===== | =====Additional PPPoE settings===== |
| ^ Parameter ^ Description ^ Possible Values ^ | * ''bras_pppoed_timeout'' — sets the PPPoE session establishment timeout in seconds.\\ Since the PPPoE Discovery protocol is susceptible to DOS attacks, this parameter aims to limit the use of internal resources during a PPPoE DOS attack. Default value: 2 seconds. |
| | ''bras_pppoed_timeout'' | Sets the PPPoE session establishment timeout in seconds.\\ Since the PPPoE Discovery protocol is susceptible to DOS attacks, this parameter aims to limit the use of internal resources during a PPPoE DOS attack | Default value: 2 seconds. | | * ''bras_pppoe_ac_name'' — a string that defines the AC-Name tag value during PPPoE session establishment. If not set, fastDPI is used as the value. |
| | ''bras_pppoe_restore_on_startup'' | Allow or deny restoration of PPPoE sessions on SSG restart. For more details, see [[dpi:bras_bng:bras_pppoe:pppoe_conf#restoring_pppoe_sessions_on_scat_restart|Restoring PPPoE Sessions on SSG Restart]] | ''1'' — allow\\ ''2'' — deny | | =====CLI parameters===== |
| | |
| =====CLI Parameters===== | |
| ''pppoe term'' — termination of all PPPoE sessions. It is possible to specify parameters ''ip'', ''mac'', ''subs_id'', ''login'' or ''all'': | ''pppoe term'' — termination of all PPPoE sessions. It is possible to specify parameters ''ip'', ''mac'', ''subs_id'', ''login'' or ''all'': |
| <code bash>pppoe term [hard] [ip=X | mac=X | subs_id=X | login=X | all]</code> | <code bash>pppoe term [hard] [ip=X | mac=X | subs_id=X | login=X | all]</code> |
