Pppoe+ Overview; Pppoe+ Features Supported By The S9300; Configuring Pppoe; Establishing The Configuration Task - Huawei Quidway S9300 Configuration Manual

7 PPPoE+ Configuration

7.1 PPPoE+ Overview

This section describes the principle of PPPoE+.
Currently, PPPoE provides good authentication and security mechanism, but still has certain
disadvantages, for example, account embezzlement.
In common PPPoE dialup mode, when users dial up through PPPoE from different interfaces of
devices, they can access the newtork as long as their accounts are authenticated successfully on
the same RADIUS server. After PPPoE+ is enabled, you need to enter the user name and
password in authentication and the authentication packet carries information including the
interface. If the port number identified by the RADIUS server is different from the configured
one, the authentication fails. In this manner, unauthorized users cannot embezzle the accounts
of authorized users (mainly the company) to access the Internet.

7.2 PPPoE+ Features Supported by the S9300

This section describes the PPPoE+ features supported by the S9300.
The S9300 can add the device type and interface number to the received PPPoE packets. In this
manner, the PPPoE server can perform policy control flexibly for the client according to the
information in the received PPPoE packets, for example, IP address allocation control and
flexible accounting.

7.3 Configuring PPPoE+

This section describes how to configure PPPoE+.

7.3.1 Establishing the Configuration Task

7.3.2 Enabling PPPoE+ Globally
7.3.3 Configuring the Format and Contents of Fields to Be Added To PPPoE Packets
7.3.4 Configuring the Action for Processing Original Fields in PPPoE Packets
7.3.5 Configuring the PPPoE Trusted Interface
7.3.6 Checking the Configuration
7.3.1 Establishing the Configuration Task
Applicable Environment
To prevent the access of unauthorized users during PPPoE authentication, you need to configure
PPPoE+ on the S9300. In this case, interface information is added to the PPPoE packets. The
security of the network is thus ensured.
Pre-configuration Tasks
None.
7-2 Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 06 (2010–01–08)