A10E/A28E/A28F Configuration Guide
Configuring PPPoE trusted interface
PPPoE trusted interface can be used to prevent PPPoE server from being cheated and avoid
security problems because PPPoE packets are forwarded to other non-service interfaces. In
general, the interface connected to the PPPoE server is set to the trusted interface. PPPoE
packets from the PPPoE client to the PPPoE server are forwarded by the trusted interface only.
In addition, only PPPoE received from the trusted interface can be forwarded to the PPPoE
client.
Configure PPPoE trusted interface for the A10E/A28E as below.
Enter global configuration mode.
Alpha-
A28E(config)#interface port
port-id
Enter physical layer interface configuration
mode.
Alpha-A28E(config-
port)#pppoeagent trust
Configure PPPoE trusted interfaces.
Because PPPoE+ is designed for the PPPoE client instead of the PPPoE server,
downlink interfaces of the device cannot receive the PADO and PADS packets. It
means that interfaces, where PPPoE+ is enabled, should not receive PADO and
PADS packet. If there interfaces receive these packets, it indicates that there are
error packets and the packets should be discarded. However, these interfaces can
forward PADO and PADS packets of trusted packet. In addition, PADI and PADR
packets are forwarded to the trusted interface only.
6.9.5 Configuring PPPoE+ packet information
PPPoE is used to process a specified Tag in the PPPoE packet. This Tag contains Circuit ID
and Remote ID.
Circuit ID: is padded with the VLAN ID, interface ID, and host name of request packets
at the RX client.
Remote ID: is padded with the MAC address of the client or the switch.
Configuring Circuit ID
The Circuit ID has 2 padding modes: Switch mode and ONU mode. By default, Switch mode
is adopted. In ONU mode, the Circuit ID has a fixed format. The following commands are
used to configure the padding contents of the Circuit ID in Switch mode.
In switch mode, the Circuit ID supports 2 padding modes:
Default mode: when customized Circuit ID is not configured, the padding content is the
VLAN ID, interface ID, or the attached string. If the attached string is not defined, it is
set to hostname by default.
Customized mode: when customized Circuit ID is configured, the padding content is the
Circuit IS string.
Configure Circuit ID for the A10E/A28E as below.
To Next Page
Loading...