PPPoE

PPPoE (Point-to-Point Protocol over Ethernet) is a network protocol that encapsulates PPP frames within Ethernet frames. It enables the creation of point-to-point connections over Ethernet networks.

PPPoE provides authentication through the underlying PPP protocol, while using Ethernet as the transport mechanism. This allows service providers to offer individual user authentication and billing for broadband connections.

The protocol consists of two main phases:

  • Discovery Phase: The client discovers available PPPoE servers and establishes a session

  • Session Phase: PPP frames are exchanged over the established session

PPPoE is particularly useful for:

  • Cable modem connections with user-specific access control

  • Service provider environments requiring per-user billing and access control

Configuration

PPPoE has specific configuration options available under interfaces pppoe <txt>. An explanation of each configurable parameter is provided below:

  • access-concentrator: Restrict the PPPoE session to a given Access Concentrator name.

  • base-interface: Select the base interface used by PPPoE.

    • ethernet: Reference an Ethernet interface as PPPoE base.

      • vif: Optional VLAN ID on the Ethernet base interface.

    • bridge: Reference a Bridge interface as PPPoE base.

      • vif: Optional VLAN ID on the Bridge base interface.

  • authentication: Configure PPPoE authentication.

    • protocol: Choose the authentication protocol.

      • pap: Password Authentication Protocol. Sends credentials during link establishment. Simple but less secure because the password can be exposed if the link is intercepted.

      • chap: Challenge-Handshake Authentication Protocol. Uses a challenge-response exchange and does not send the password directly. More secure than PAP and supports periodic re-authentication.

    • user: Configure user credentials.

      • password: Plain password for PPPoE authentication.

      • encrypted-password: Encrypted password for PPPoE authentication.

  • local-address: Local IPv4 address for the PPPoE interface. If not configured, the client will accept an IPv4 address assigned by the PPPoE server via IPCP.

  • local-identifier: Local IPv6 interface identifier for the PPPoE interface (must start with ::, e.g., ::1). If not configured, the client will accept an IPv6 identifier assigned by the PPPoE server via IPV6CP.

  • logging: Enable debug information for the PPPoE interface.

    • detailed: Enable detailed debug information.

Monitoring

To monitor PPPoE interfaces and sessions, use:

Examples

Here you can find examples related to PPPoE.

Command Summary

Configuration commands

Operational commands