Loading ...
Loading ...
Loading ...
User Guide 506
Configuring PPPoE ID Insertion (Only for Certain Devices) Overview
1
Overview
Note:
PPPoE ID Insertion is only available on certain devices. To check whether your device supports this
feature, refer to the actual web interface. If PPPoE ID Insertion is available, there is L2 FEATURES >
PPPoE in the menu structure.
In common PPPoE dialup mode, when users dial up through PPPoE, they can access the
network as long as their accounts are authenticated successfully on the RADIUS server. As
a result, the illegal users can embezzle the accounts to access the Internet.
PPPoE ID Insertion provides a way to resolve this problem. With this feature enabled, the
switch attaches a tag to the PPPoE Active Discovery packets received from the client,
and sends it to the BRAS (Broadband Remote Access Server). The tag records the client
information, such as the connected port number and the MAC address of the client. The
BRAS uses the tag as a NAS-Port-ID attribute in the RADIUS packet and send it to the
RADIUS server for PPP (Point-to-Point Protocol) authentication. If the tag information is
different from the configured one, the authentication will fail. In this way, the illegal users
cannot embezzle the accounts of legal users to access the Internet.
Additionally, after receiving the PPPoE Active Discovery Offer packet or Session-
confirmation packet from the BRAS, the switch will remove the tag in the packet and send it
to the client.
Figure 1-1 Network Topology of PPPoE ID-Insertion
Switch
RADIUS Server
Client
BRAS
PPPoE Server
Loading ...
Loading ...
Loading ...