Pppoe Intermediate-Agent Trust - Edge-Core ECS3510-28T Management Manual

pppoe
intermediate-agent
trust
C U
OMMAND SAGE
◆ The PPPoE server extracts the Line-ID tag from PPPoE discovery stage
messages, and uses the Circuit-ID field of that tag as a NAS-Port-ID
attribute in AAA access and accounting requests.
The switch intercepts PPPoE discovery frames from the client and
◆
inserts a unique line identifier using the PPPoE Vendor-Specific tag
(0x0105) to PPPoE Active Discovery Initiation (PADI) and Request
(PADR) packets. The switch then forwards these packets to the PPPoE
server. The tag contains the Line-ID of the customer line over which the
discovery packet was received, entering the switch (or access node)
where the intermediate agent resides.
Outgoing PAD Offer (PADO) and Session-confirmation (PADS) packets
◆
sent from the PPPoE Server include the Circuit-ID tag inserted by the
switch, and should be stripped out of PADO and PADS packets which
are to be passed directly to end-node clients using the
intermediate-agent vendor-tag strip
E
XAMPLE
Console(config)#interface ethernet 1/5
Console(config-if)#pppoe intermediate-agent port-format-type circuit-id
ECS4500-28
Console(config-if)#
This command sets an interface to trusted mode to indicate that it is
connected to a PPPoE server. Use the no form to set an interface to
untrusted mode.
S
YNTAX
[no] pppoe intermediate-agent trust
D S
EFAULT ETTING
Untrusted
C M
OMMAND ODE
Interface Configuration (Ethernet, Port Channel)
C U
OMMAND SAGE
Set any interfaces connecting the switch to a PPPoE Server as trusted.
◆
Interfaces that connect the switch to users (PPPoE clients) should be
set as untrusted.
At least one trusted interface must be configured on the switch for the
◆
PPPoE IA to function.
– 861 –
| Authentication Commands
C 23
HAPTER
PPPoE Intermediate Agent
pppoe
command.