PPPoE configuration and commands [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
en:dpi:bras_bng:bras_pppoe:pppoe_conf [2025/09/29 16:20] – [Table] elena.krasnobryzhen:dpi:bras_bng:bras_pppoe:pppoe_conf [2025/09/29 16:21] (current) elena.krasnobryzh
Line 3: Line 3:
 <note tip>L2 PPPoE Mode Overview: {{youtube>ZmCvcSOg73k?}}</note> <note tip>L2 PPPoE Mode Overview: {{youtube>ZmCvcSOg73k?}}</note>
  
-=====Enabling PPPoE Support=====+=====Enabling PPPoE support=====
   - Activate BRAS. [[dpi:bras_bng:general_setup#configuring_bras_l2_in_fastdpi|More details]].   - Activate BRAS. [[dpi:bras_bng:general_setup#configuring_bras_l2_in_fastdpi|More details]].
   - Configure parameters in ''fastdpi.conf'':   - Configure parameters in ''fastdpi.conf'':
Line 13: Line 13:
 bras_gateway_mac=aa:bb:cc:dd:ee:ff</code> bras_gateway_mac=aa:bb:cc:dd:ee:ff</code>
  
-=====Authorization Configuration=====+=====Authorization configuration=====
 The list of allowed authorization protocols is set by the ''bras_ppp_auth_list'' parameter in ''fastdpi.conf''.\\ The list of allowed authorization protocols is set by the ''bras_ppp_auth_list'' parameter in ''fastdpi.conf''.\\
 Possible values: Possible values:
Line 26: Line 26:
 <note>[[dpi:bras_bng:bras_pppoe:pppoe_pppol2tp_parameters:bras_pppoe_radius|Authorization of PPPoE sessions on a Radius server]]</note> <note>[[dpi:bras_bng:bras_pppoe:pppoe_pppol2tp_parameters:bras_pppoe_radius|Authorization of PPPoE sessions on a Radius server]]</note>
  
-=====ARP Handling in PPPoE=====+=====ARP handling in PPPoE=====
 In networks with PPPoE connections (point-to-point type), sending ARP requests from subscribers has no practical meaning. A subscriber can only send packets to the PPPoE server's address, whose MAC address is known to the subscriber within the established PPPoE connection. In networks with PPPoE connections (point-to-point type), sending ARP requests from subscribers has no practical meaning. A subscriber can only send packets to the PPPoE server's address, whose MAC address is known to the subscriber within the established PPPoE connection.
  
Line 37: Line 37:
   * [[dpi:bras_bng:bras_l2_options:bras_l2_vlan_local|Local traffic closure]], including traffic between different segment types (e.g., between PPPoE and DHCP networks)   * [[dpi:bras_bng:bras_l2_options:bras_l2_vlan_local|Local traffic closure]], including traffic between different segment types (e.g., between PPPoE and DHCP networks)
  
-=====Restoring PPPoE Sessions on SSG Restart=====+=====Restoring PPPoE sessions on SSG restart=====
 Upon startup, fastDPI attempts to restore PPPoE subscriber sessions based on information saved in UDR. This ensures transparency of a brief service restart for subscribers. Upon startup, fastDPI attempts to restore PPPoE subscriber sessions based on information saved in UDR. This ensures transparency of a brief service restart for subscribers.
  
Line 50: Line 50:
   * When attempting to continue using an old session, SSG will send the subscriber a PADT (PPP Active Discovery Terminate) to terminate the session.   * When attempting to continue using an old session, SSG will send the subscriber a PADT (PPP Active Discovery Terminate) to terminate the session.
  
-=====Additional PPPoE Settings=====+=====Additional PPPoE settings=====
 ^ Parameter                          ^ Description                                                                                                                                                                                                        ^ Possible Values               ^ ^ Parameter                          ^ Description                                                                                                                                                                                                        ^ Possible Values               ^
 | ''bras_pppoed_timeout''            | Sets the PPPoE session establishment timeout in seconds.\\ Since the PPPoE Discovery protocol is susceptible to DOS attacks, this parameter aims to limit the use of internal resources during a PPPoE DOS attack  | Default value: 2 seconds.     | | ''bras_pppoed_timeout''            | Sets the PPPoE session establishment timeout in seconds.\\ Since the PPPoE Discovery protocol is susceptible to DOS attacks, this parameter aims to limit the use of internal resources during a PPPoE DOS attack  | Default value: 2 seconds.     |
 | ''bras_pppoe_restore_on_startup''  | Allow or deny restoration of PPPoE sessions on SSG restart. For more details, see [[en:dpi:bras_bng:bras_pppoe:pppoe_conf#restoring_pppoe_sessions_on_ssg_restart|Restoring PPPoE sessions on SSG restart]]        | ''1'' — allow\\ ''2'' — deny  | | ''bras_pppoe_restore_on_startup''  | Allow or deny restoration of PPPoE sessions on SSG restart. For more details, see [[en:dpi:bras_bng:bras_pppoe:pppoe_conf#restoring_pppoe_sessions_on_ssg_restart|Restoring PPPoE sessions on SSG restart]]        | ''1'' — allow\\ ''2'' — deny  |
  
-=====CLI Parameters=====+=====CLI parameters=====
 ''pppoe term'' — termination of all PPPoE sessions. It is possible to specify parameters ''ip'', ''mac'', ''subs_id'', ''login'' or ''all'': ''pppoe term'' — termination of all PPPoE sessions. It is possible to specify parameters ''ip'', ''mac'', ''subs_id'', ''login'' or ''all'':
 <code bash>pppoe term [hard] [ip=X | mac=X | subs_id=X | login=X | all]</code> <code bash>pppoe term [hard] [ip=X | mac=X | subs_id=X | login=X | all]</code>