SNR S2989G-48TX-DC [353/553] Pppoe intermediate agent configuration task

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-80

to server, PADO and PADS packets sent by server to client, PADT packet can be sent by

server or client.

In PPPoE IA, for security and reduce traffic, set a port connected server as trust port,

set ports connected client as untrust port, trust port can receive all packets, untrust port

can receive only PADI, PADR and PADT packets which are sent to server. To ensure client

operation is correct, it must set the port connected server as trust port, each access

device has a trust port at least.

PPPoE IA vendor tag can not exist in PPPoE packets sent by server to client, so we

can strip and forward these vendor tags if they exist in PPPoE packets. Strip function must

be configured on trust port, enabling strip function is not take effect on untrust port.

6.10.2

PPPoE Intermediate Agent Configuration Task

List

1. Enable global PPPoE Intermediate Agent

2. Enable port PPPoE Intermediate Agent

Command

Explanation

Global Mode

pppoe intermediate-agent

no pppoe intermediate-agent

Enabel global PPPoE Intermediate

Agent function.

pppoe intermediate-agent type tr-101

circuit-id access-node-id <string>

no pppoe intermediate-agent type tr-101

circuit-id access-node-id

Configure access node ID field value of

circuit ID in added vendor tag.

pppoe intermediate-agent type tr-101

circuit-id identifier-string <string>

option {sp | sv | pv | spv} delimiter

<WORD> [delimiter <WORD> ]

no pppoe intermediate-agent type tr-101

circuit-id identifier-string option

delimiter

Configure circuit-id in added vendor

tag.