Configuring The Pppoe Trusted Interface - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
adopt a different action on an interface, run the pppoe intermediate-agent information
policy command in the interface view. In this case, the action for processing packets on the
interface depends on the configuration of the interface.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
pppoe intermediate-agent information policy { drop | keep | replace }
The action for all the interfaces to process original fields in PPPoE packets is configured.
l drop: removes the original fields from PPPoE packets.
l keep: reserves the contents and format of original fields in PPPoE packets.
l replace: replaces the original fields in PPPoE packets according to the set field format
By default, the user-side interface on the S2700 replaces the original fields in the received PPPoE
packets after PPPoE+ is enabled globally.
Step 3 (Optional) Run:
interface interface-type interface-number
The Ethernet interface view is displayed.
Then run:
pppoe intermediate-agent information policy { drop | keep | replace }
The action for all the interfaces to process original fields in PPPoE packets is configured.
By default, the interface on the S2700 replaces the original information fields in PPPoE packets.
----End

6.3.5 Configuring the PPPoE Trusted Interface

Context
To prevent bogus PPPoE servers and the security risk caused by PPPoE packets forwarded to
non-PPPoE service interfaces, you can configure the interface connecting the S2700 and the
PPPoE server as the trusted interface. After the trusted interface is configured, PPPoE packets
sent from the PPPoE client to the PPPoE server are forwarded through the trusted interface only.
In addition, only the PPPoE packets received from the trusted interface are forwarded to the
PPPoE client.
Issue 01 (2011-07-15)
regardless of whether the packets carry the fields.
NOTE
The trusted interface only controls protocol packets in PPPoE discovery period, and does not control service
packets in PPPoE session period.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 PPPoE+ Configuration
135