Related Documents - Cisco Catalyst 4500 series Administration Manual

Related Documents

Related Documents
Related Topic
PPPoE Circuit-Id Tag Processing
RADIUS attributes
DSL Forum Line-ID tag solution
Migration to Ethernet-based DSL aggregation
RFCs
RFC
RFC 2516
About PPPoE Intermediate Agent
PPPoE Intermediate Agent (PPPoE IA) is placed between a subscriber and BRAS to help the service
provider BRAS distinguish between end hosts connected over Ethernet to an access switch. On the
access switch, PPPoE IA enables Subscriber Line Identification by appropriately tagging Ethernet
frames of different users. (The tag contains specific information such as which subscriber is connected
to the switch and VLAN.) PPPoE IA acts as mini security firewall between host and BRAS by
intercepting all PPPoE Active Discovery (PAD) messages on a per-port per-VLAN basis. It provides
specific security feature such as verifying the intercepted PAD message from untrusted port, performing
per-port PAD message rate limiting, inserting and removing VSA Tags into and from PAD messages,
respectively.
Enabling PPPoE IA on a Switch
This functionality allows you to enable or disable PPPoE IA globally on the switch:
Switch> enable
Switch# configure terminal
Switch(config)# pppoe intermediate-agent
By default, PPPoE IA is disabled globally.
Configuring the Access Node Identifier for PPPoE IA on a Switch
This functionality allows you to set the Access Node Identifier of the switch. If unspecified, this
parameter is derived automatically with the IP address of the management interface.
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
47-2
Chapter 47
Document Title
Refer to the PPoE Circuit-Id Tag Processing chapter
Refer to the Cisco IOS Security Configuration Guide, Release 12.4
DSL Forum 2004-71: Solution for Remote-ID in PPPoE Discovery
Phase
DSL Forum Technical Report 101
Title
A Method for Transmitting PPP over Ethernet (PPPoE)
Configuring the PPPoE Intermediate Agent
OL_28731-01