- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
03-PPPoE commands | 232.53 KB |
Contents
display pppoe-server packet statistics
display pppoe-server session packet
display pppoe-server session summary
display pppoe-server throttled-mac
pppoe-server access-line-id bas-info
pppoe-server access-line-id circuit-id parse-mode
pppoe-server access-line-id circuit-id trans-format
pppoe-server access-line-id content
pppoe-server access-line-id remote-id trans-format
pppoe-server access-line-id trust
pppoe-server session-limit per-mac
pppoe-server session-limit per-vlan
pppoe-server session-limit total
pppoe-server tag ppp-max-payload
pppoe-server virtual-template va-pool
reset pppoe-server packet statistics
display pppoe-client session packet
display pppoe-client session summary
reset pppoe-client session packet
PPPoE commands
PPPoE server commands
display pppoe-server packet statistics
Use display pppoe-server packet statistics to display PPPoE server negotiation packet statistics.
Syntax
display pppoe-server packet statistics [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays PPPoE server negotiation packet statistics for all cards.
Examples
# Display PPPoE server negotiation packet statistics for the specified slot.
<Sysname> display pppoe-server packet statistics slot 2
PPPoE Server packet statistics in slot 2:
RECV_PADI_PKT : 10 DISCARD_PADI_PKT : 0
SEND_PADO_PKT : 10
RECV_PADR_PKT : 10 DISCARD_PADR_PKT : 0
SEND_PADS_PKT : 10
RECV_PADT_PKT : 9 DISCARD_PADT_PKT : 0
SEND_PADT_PKT : 9
Table 1 Command output
Field |
Description |
RECV_PADI_PKT |
Number of received PADI packets. |
DISCARD_PADI_PKT |
Number of discarded PADI packets. |
SEND_PADO_PKT |
Number of sent PADO packets. |
RECV_PADR_PKT |
Number of received PADR packets. |
DISCARD_PADR_PKT |
Number of discarded PADR packets. |
SEND_PADS_PKT |
Number of sent PADS packets. |
RECV_PADT_PKT |
Number of received PADT packets. |
DISCARD_PADT_PKT |
Number of discarded PADT packets. |
SEND_PADT_PKT |
Number of sent PADT packets. |
Related commands
reset pppoe-server packet statistics
display pppoe-server session packet
Use display pppoe-server session packet to display packet statistics for PPPoE sessions.
Syntax
display pppoe-server session packet { slot slot-number | interface interface-type interface-number }
Views
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays packet statistics for PPPoE sessions on all cards.
Examples
# Display packet statistics for PPPoE sessions on GigabitEthernet 1/0/1.
<Sysname> display pppoe-server session packet interface gigabitethernet 1/0/1
Total PPPoE sessions: 2
Ethernet interface: GE1/0/1
Session ID: 1
InPackets: 37
OutPackets: 38
InBytes: 390
OutBytes: 406
InDrops: 0
OutDrops: 0
Ethernet interface: GE1/0/1
Session ID: 2
InPackets: 67
OutPackets: 48
InBytes: 490
OutBytes: 806
InDrops: 1
OutDrops: 2
Table 2 Command output
Field |
Description |
Ethernet interface |
Interface where the PPPoE session is present. |
Session ID |
PPPoE session ID. |
InPackets |
Number of packets received. |
OutPackets |
Number of packets transmitted. |
InBytes |
Number of bytes received. |
OutBytes |
Number of bytes transmitted. |
InDrops |
Number of discarded incoming packets. |
OutDrops |
Number of discarded outgoing packets. |
Related commands
display interface virtual-access
display pppoe-server session summary
Use display pppoe-server session summary to display summary PPPoE session information.
Syntax
display pppoe-server session summary { slot slot-number | interface interface-type interface-number }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays summary PPPoE session information for all cards.
Usage guidelines
Summary PPPoE session information on a physical interface can be displayed only on the card where the interface resides. Summary PPPoE session information on a logical interface can be displayed on all cards.
Examples
# Display summary PPPoE session information on GigabitEthernet 1/0/1.
<Sysname> display pppoe-server session summary interface gigabitethernet 1/0/1
Total PPPoE sessions: 2
Ethernet interface: GE1/0/1
Session ID: 1
PPP interface: VA1
State: PADR_RCVD
Remote MAC: 00e0-1500-7100
Local MAC: 00e0-1400-7300
Service VLAN: N/A
Customer VLAN: N/A
Ethernet interface: GE1/0/1
Session ID: 2
PPP interface: VA2
State: OPEN
Remote MAC:00e0-1600-7200
Local MAC: 00e0-1400-7400
Service VLAN: 2
Customer VLAN: 155
# Display summary PPPoE session information on slot 2.
<Sysname> display pppoe-server session summary slot 2
Total PPPoE sessions on slot 2: 2
Local PPPoE sessions on slot 2: 1
Ethernet interface: GE1/0/2
Session ID: 1
PPP interface: VA1
State: OPEN
Remote MAC: 0000-0000-0005
Local MAC: 0000-5e00-0101
Service VLAN: N/A
Customer VLAN: N/A
Ethernet interface: RAGG1
Session ID: 1
PPP interface: VA0
State: OPEN
Remote MAC: 0050-56c0-0005
Local MAC: 0000-5e00-0102
Service VLAN: N/A
Customer VLAN: N/A
Table 3 Command output
Field |
Description |
Total PPPoE sessions |
Total number of PPPoE sessions on physical interfaces and logical interfaces. |
Local PPPoE sessions |
Total number of PPPoE sessions on physical interfaces. When an interface is specified, this field is not displayed. |
Ethernet interface |
Interface where the PPPoE session is present. |
Session ID |
PPPoE session ID. |
PPP interface |
Virtual access interface created for the PPPoE session. |
State |
PPPoE session state: · PADR RCVD—The PPPoE session is being negotiated. · Open—The PPPoE session has been successfully established. |
RemoteMAC |
MAC address of the remote end. |
LocalMAC |
MAC address of the local end. |
Service VLAN |
Service provider VLAN. N/A means no service provider VLAN is available. |
Customer VLAN |
Customer VLAN. N/A means no customer VLAN is available. |
display pppoe-server throttled-mac
Use display pppoe-server throttled-mac to display information about blocked users.
Syntax
display pppoe-server throttled-mac { slot slot-number | interface interface-type interface-number }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays information about blocked users on all cards.
Examples
# Display information about blocked users on GigabitEthernet 1/0/1.
<Sysname> display pppoe-server throttled-mac interface gigabitethernet 1/0/1
Total 3 client MACs:
Interface Remote MAC Start time Remaining time(s)
GE1/0/1 00e0-1500-4100 2019-12-01,12:10:30 55
GE1/0/1 00e0-1500-4000 2019-12-01,12:10:40 65
GE1/0/1 00e0-1500-3300 2019-12-01,12:10:50 75
Table 4 Command output
Field |
Description |
Interface |
Interface at which the user is blocked. |
Remote MAC |
MAC address of the user. |
Start time |
Time to start blocking users. |
Remaining time(s) |
Time left for blocking users, in seconds. |
Related commands
pppoe-server throttle per-mac
display pppoe-server va-pool
Use display pppoe-server va-pool to display information about VA pools.
Syntax
display pppoe-server va-pool
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display information about VA pools.
<Sysname> display pppoe-server va-pool
Location VT interface Size Unused/State
Virtual-Template1 1000 900
0/cpu1 Virtual-Template2 1000 1000
Table 5 Command output
Field |
Description |
Location |
IRF member device, card, and CPU where the VA pool resides. When the field displays a hyphen (-), it indicates a global VA pool. If the device cannot display the CPU, an asterisks (*) is displayed, for example, 1/0/*. |
VT interface |
Virtual-Template interface that uses the VA pool. |
Unused/State |
VA pool capacity available for PPP users/current state of the VA pool. · Creating—The VA pool is being created. · Destroying—The VA pool is being removed. |
Related commands
pppoe-server virtual-template va-pool
ppp lcp echo mru verify
Use ppp lcp echo mru verify to enable maximum receive unit (MRU) verification for PPPoE on a VT interface.
Use undo ppp lcp echo mru verify to disable MRU verification for PPPoE.
Syntax
ppp lcp echo mru verify [minimum value ]
undo ppp lcp echo mru verify
Default
MRU verification for PPPoE is disabled on a VT interface.
Views
VT interface view
Predefined user roles
network-admin
Parameters
minimum value: Specifies the minimum MRU in the range of 64 to 1500 bytes.
Usage guidelines
To support an MTU larger than 1492, PPPoE adds the PPP-Max-Payload option during PPPoE negotiation. This option identifies the MTU for the current PPPoE session. If the MTU is larger than 1492, PPP uses the MTU as the MRU during LCP negotiation, and reports the MTU after negotiation.
MRU verification prevents the negotiated MRU from exceeding the receiving and sending capabilities of the interface. If the negotiated MRU is larger than 1492, the PPPoE server sends an echo request that has the same size as the negotiated MRU. If the PPPoE server receives a reply, it uses the MRU as the MTU. If the PPPoE server fails to receive a reply, the following situations occur:
· If the minimum MRU is configured, the PPPoE server sends a packet that has the same size as the minimum MRU.
· If the minimum MRU is not configured, the PPPoE server sends a packet that has the same size as the negotiated MRU.
If the second verification still fails, the PPPoE server tears down the link.
NCP negotiation starts after the MRU verification succeeds.
Examples
# Enable MRU verification for PPPoE and set the minimum MRU to 1200 bytes on Virtual-Template 10.
<Sysname> system-view
[Sysname] interface virtual-template 10
[Sysname-Virtual-Template10] ppp lcp echo mru verify minimum 1200
pppoe-server access-delay
Use pppoe-server access-delay to set the response delay time on an interface.
Use undo pppoe-server access-delay to restore the default.
Syntax
pppoe-server access-delay delay-time
undo pppoe-server access-delay
Default
No response delay time is set on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
delay-time: Specifies the response delay time, in the range of 10 to 25500 milliseconds.
Usage guidelines
The system responds to the first packet of a PPP connection on the interface after the configured delay time elapses.
Examples
# Set the response delay time to 100 milliseconds on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server access-delay 100
pppoe-server access-line-id bas-info
Use pppoe-server access-line-id bas-info to configure the NAS-Port-ID attribute to automatically include BAS information on an interface.
Use undo pppoe-server access-line-id bas-info to restore the default.
Syntax
pppoe-server access-line-id bas-info [ cn-163 ]
undo pppoe-server access-line-id bas-info
Default
The NAS-Port-ID attribute does not automatically include BAS information on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
cn-163: Specifies the China Telecom 163 format for the BAS information. If you do not specify this keyword, BAS information in the China Telecom format is included.
Usage guidelines
The bas-info formats include China Telecom and China Telecom 163.
The China Telecom format is {atm|eth|trunk} NAS_slot/NAS_subslot/NAS_port:XPI.XCI. The format refers to the user access interface information on the BAS device, including upstream interface, VLAN, and VPI/VCI information:
· When ATM/DSL is used, XPI.XCI refers to VPI/VCI information.
· When Ethernet/DSL is used, XPI.XCI refers to VLAN information.
For example, eth 1/0/1:4096.2345 includes the following user access interface information:
· The type of the upstream interface is Ethernet interface.
· The interface is located at slot 1, subslot 0, and port 1.
· The outer VLAN ID is 4096 (which means an invalid VLAN), and the inner VLAN ID is 2345.
Table 6 shows the China Telecom 163 format, where:
· NAS_slot, NAS_subslot, and NAS_port refer to the numbering information of the PPPoE user access interface on the BAS device.
· vpi and vci refer to VPI and VCI information.
· vlanid and vlanid2 refer to inner VLAN and outer VLAN, respectively. The value for the vlanid of the primary interface is fixed at 0.
Table 6 BAS information in China Telecom 163 format
Interface type |
Format |
ATM interface |
slot=NAS_slot;subslot=NAS_subslot;port=NAS_port;vpi=XPI;vci=XCI; |
Primary interface or interface that does not carry inner VLAN or outer VLAN information. |
slot=NAS_slot;subslot=NAS_subslot;port=NAS_port;vlanid=VLAN id; |
Interface that carries inner VLAN and outer VLAN information. |
slot=NAS_slot;subslot=NAS_subslot;port=NAS_port;vlanid=VLAN id;vlanid2=VLAN id2; |
This command determines the content of the NAS-Port-ID attribute that the PPPoE server delivers to the RADIUS server.
· If the cn-163 keyword is specified, the PPPoE server automatically inserts the corresponding BAS information before the parsed circuit-id. Then it sends the combination of the bas-info and circuit-id as the NAS-Port-ID attribute to the RADIUS server.
· If the cn-163 keyword is not specified, the PPPoE server creates a new circuit-id in China Telecom format. Then it sends the new circuit-id as the NAS-Port-ID attribute to the RADIUS server. The new circuit-id contains the corresponding BAS information and the DSLAM user access information in the original circuit-id.
If this command is not executed, the NAS-Port-ID attribute that the PPPoE server delivers to the RADIUS server is determined by the pppoe-server access-line-id content command.
The RADIUS server cannot correctly parse a NAS-Port-ID attribute that includes the remote-id and BAS information. When you configure this command together with the pppoe-server access-line-id trust command, make sure the NAS-Port-ID attribute sent to the RADIUS sever does not include the remote-id.
Examples
# Configure the NAS-Port-ID attribute to automatically include BAS information on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server access-line-id bas-info
Related commands
pppoe-server access-line-id circuit-id parse-mode
pppoe-server access-line-id content
pppoe-server access-line-id trust
pppoe-server access-line-id circuit-id parse-mode
Use pppoe-server access-line-id circuit-id parse-mode to configure the format that an interface uses to parse the circuit-id in the access line ID.
Use undo pppoe-server access-line-id circuit-id parse-mode to restore the default.
Syntax
pppoe-server access-line-id circuit-id parse-mode { cn-telecom | tr-101 }
undo pppoe-server access-line-id circuit-id parse-mode
Default
An interface uses the TR-101 format to parse the circuit-id.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
cn-telecom: Specifies China Telecom format.
tr-101: Specifies TR-101 format.
Usage guidelines
The circuit-id formats include TR-101 and China Telecom.
The TR-101 format is Access-Node-Identifier atm frame/slot/subslot/port:vpi.vci for ATM/DSL, and is Access-Node-Identifier eth frame/slot/subslot/port[:vlan-id] for Ethernet/DSL. The entire ID refers to the user access information on the DSLAM, where:
· Access-Node-Identifier refers to the identifier of the DSLAM.
· The remainder refers to information about the user access interface on the DSLAM (where the frame field represents the chassis number).
The China Telecom format is AccessNodeIdentifier/ANI_rack/ANI_frame/ANI_slot/ANI_subslot/ANI_port[:ANI_XPI.ANI_XCI]. The format refers to user access information on the DSLAM, including DSLAM identifier and user access interface.
For example, the circuit-id guangzhou001/1/31/63/31/127 includes the following information:
· The identifier of the access node DSLAM is guangzhou001.
· The rack number of the DSLAM is 1.
· The user access interface is located at port 127, subslot 31, slot 63, and frame 31.
Examples
# Configure GigabitEthernet 1/0/1 to use China Telecom format to parse the circuit-id.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server access-line-id circuit-id parse-mode cn-telecom
Related commands
pppoe-server access-line-id circuit-id trans-format
pppoe-server access-line-id circuit-id trans-format
Use pppoe-server access-line-id circuit-id trans-format to configure the transmission format for the circuit-id in access line ID on an interface.
Use undo pppoe-server access-line-id circuit-id trans-format to restore the default.
Syntax
pppoe-server access-line-id circuit-id trans-format { ascii | hex }
undo pppoe-server access-line-id circuit-id trans-format
Default
The transmission format for the circuit-id in access line ID is a string of characters on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
ascii: Specifies the character string format. For example, the circuit-id 00010002 is transmitted in the form of 01 08 30 30 30 31 30 30 30 32.
hex: Specifies the hexadecimal format. For example, the circuit-id 00010002 is transmitted in the form of 01 04 00 01 00 02.
Examples
# Configure GigabitEthernet 1/0/1 to use the hexadecimal format to transmit the circuit-id.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server access-line-id circuit-id trans-format hex
pppoe-server access-line-id content
Use pppoe-server access-line-id content to configure the content of the NAS-Port-ID attribute delivered to the RADIUS server on an interface.
Use undo pppoe-server access-line-id content to restore the default.
Syntax
pppoe-server access-line-id content { all [ separator ] | circuit-id | remote-id }
undo pppoe-server access-line-id content
Default
The NAS-Port-ID attribute contains only the circuit-id on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
all: Sends both the circuit-id and remote-id.
separator: Specifies a separator that is one character long. By default, the value is a blank space. The circuit-id and remote-id are connected by the separator.
circuit-id: Sends only the circuit-id.
remote-id: Sends only the remote-id.
Usage guidelines
The PPPoE server on a BAS device uses the RADIUS NAS-Port-ID attribute to send the access line ID received from a DSLAM device to the RADIUS server. The access line ID contains the circuit-id and remote-id. The RADIUS server compares the received NAS-Port-ID attribute with the local line ID information to verify the location of the user.
For more information about the circuit-id, see the pppoe-server access-line-id circuit-id parse-mode command.
For more information about the remote-id, see pppoe-server access-line-id remote-id trans-format the command.
Do not use a character that exists in the circuit-id or remote-id as the separator. Otherwise, the RADIUS server might fail to parse the ID information.
This command determines the content of the NAS-Port-ID attribute only when the pppoe-server access-line-id bas-info command is not configured. Otherwise, the pppoe-server access-line-id bas-info command determines the content of the NAS-Port-ID attribute.
Examples
# Configure GigabitEthernet 1/0/1 to deliver only the circuit-id to the RADIUS server.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server access-line-id content circuit-id
Related commands
pppoe-server access-line-id bas-info
pppoe-server access-line-id circuit-id parse-mode
pppoe-server access-line-id remote-id trans-format
pppoe-server access-line-id remote-id trans-format
Use pppoe-server access-line-id remote-id trans-format to configure the transmission format for the remote-id in the access line ID on an interface.
Use undo pppoe-server access-line-id remote-id trans-format to restore the default.
Syntax
pppoe-server access-line-id remote-id trans-format { ascii | hex }
undo pppoe-server access-line-id remote-id trans-format
Default
The transmission format for the remote-id is a string of characters on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
ascii: Specifies the character string format.
hex: Specifies the hexadecimal format.
Usage guidelines
The remote-id is the system MAC address of a PPPoE relay device (for example, DSLAM). It can be transmitted in character strings or hexadecimal format.
Examples
# Configure GigabitEthernet 1/0/1 to use the hexadecimal format to transmit the remote-id.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server access-line-id remote-id trans-format hex
pppoe-server access-line-id trust
Use pppoe-server access-line-id trust to configure the PPPoE server to trust the access line ID in received packets on an interface.
Use undo pppoe-server access-line-id trust to restore the default.
Syntax
pppoe-server access-line-id trust
undo pppoe-server access-line-id trust
Default
The PPPoE server does not trust the access line ID in received packets on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Usage guidelines
This command enables the PPPoE server to parse the circuit-id and remote-id in a received packet, and creates a new circuit-id and remote-id. If the PPPoE server fails to parse the circuit-id or remote-id in a PADR packet, it discards the packet and does not return a PADS packet.
If this command is not executed, the PPPoE server does not parse the circuit-id and remote-id in a received packet. The contents of both the new circuit-id and the remote-id are null.
Examples
# Configure GigabitEthernet 1/0/1 to trust the access line ID in received packets.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server access-line-id trust
Related commands
pppoe-server access-line-id circuit-id parse-mode
pppoe-server bind
Use pppoe-server bind to enable the PPPoE server on an interface and bind the interface to a VT interface.
Use undo pppoe-server bind to disable the PPPoE server on an interface.
Syntax
pppoe-server bind virtual-template number
undo pppoe-server bind
Default
The PPPoE server is disabled on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
virtual template number: Specifies a VT interface by its number. The value range for the number argument is 0 to 1023.
Usage guidelines
A PPPoE server-enabled interface can be bound to a nonexistent VT interface.
If the interface has been bound to a VT interface, you cannot use this command to bind the interface to another VT interface. To do that, disable the PPPoE server on the interface first.
If both the PPPoE client and PPPoE server are enabled on an interface, the PPPoE client feature does not take effect.
Examples
# Enable the PPPoE server on GigabitEthernet 1/0/1 and bind the interface to Virtual-Template 1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server bind virtual-template 1
pppoe-server session-limit
Use pppoe-server session-limit to set the maximum number of PPPoE sessions on an interface.
Use undo pppoe-server session-limit to restore the default.
Syntax
pppoe-server session-limit number
undo pppoe-server session-limit
Default
The number of PPPoE sessions on an interface is not limited.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
number: Specifies the maximum number of PPPoE sessions on an interface, in the range of 1 to 65534.
Usage guidelines
PPPoE can establish a session when none of the following limits are reached:
· Limit for a user on an interface.
· Limit for a VLAN on an interface.
· Limit on an interface.
· Limit on a card.
New maximum number settings only apply to subsequently established PPPoE sessions.
Examples
# Set the maximum number of PPPoE sessions on GigabitEthernet 1/0/1 to 50.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server session-limit 50
Related commands
pppoe-server session-limit per-mac
pppoe-server session-limit per-vlan
pppoe-server session-limit total
pppoe-server session-limit per-mac
Use pppoe-server session-limit per-mac to set the maximum number of PPPoE sessions for a user on an interface.
Use undo pppoe-server session-limit per-mac to restore the default.
Syntax
pppoe-server session-limit per-mac number
undo pppoe-server session-limit per-mac
Default
A user can create a maximum of 100 PPPoE sessions on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
number: Specifies the maximum number of PPPoE sessions for a user, in the range of 1 to 65534.
Usage guidelines
A user is identified by a MAC address.
PPPoE can establish a session when none of the following limits are reached:
· Limit for a user on an interface.
· Limit for a VLAN on an interface.
· Limit on an interface.
· Limit on a card.
New maximum number settings only apply to subsequently established PPPoE sessions.
Examples
# Set the maximum number of PPPoE sessions for a user on GigabitEthernet 1/0/1 to 50.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server session-limit per-mac 50
Related commands
pppoe-server session-limit
pppoe-server session-limit per-vlan
pppoe-server session-limit total
pppoe-server session-limit per-vlan
Use pppoe-server session-limit per-vlan to set the maximum number of PPPoE sessions for a VLAN on an interface.
Use undo pppoe-server session-limit per-vlan to restore the default.
Syntax
pppoe-server session-limit per-vlan number
undo pppoe-server session-limit per-vlan
Default
The number of PPPoE sessions for a VLAN on an interface is not limited.
Views
Layer 3 Ethernet subinterface view
Layer 3 aggregate subinterface view
Predefined user roles
network-admin
Parameters
number: Specifies the maximum number of PPPoE sessions for a VLAN, in the range of 1 to 65534.
Usage guidelines
PPPoE can establish a session when none of the following limits are reached:
· Limit for a user on an interface.
· Limit for a VLAN on an interface.
· Limit on an interface.
· Limit on a card.
New maximum number settings only apply to subsequently established PPPoE sessions.
Examples
# Set the maximum number of PPPoE sessions for a VLAN on GigabitEthernet 1/0/1.1 to 50.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1.1
[Sysname-GigabitEthernet1/0/1.1] pppoe-server session-limit per-vlan 50
Related commands
pppoe-server sessions limit
pppoe-server sessions limit per-mac
pppoe-server sessions limit total
pppoe-server session-limit total
Use pppoe-server session-limit total to set the maximum number of PPPoE sessions on a device.
Use undo pppoe-server session-limit total to restore the default.
Syntax
pppoe-server session-limit slot slot-number total number
undo pppoe-server session-limit slot slot-number total
Default
The number of PPPoE sessions on a card is not limited.
Views
System view
Predefined user roles
network-admin
Parameters
number: Specifies the maximum number of PPPoE sessions on a device, in the range of 1 to 65534.
slot slot-number: Specifies a card by its slot number.
Usage guidelines
PPPoE can establish a session when none of the following limits are reached:
· Limit for a user on an interface.
· Limit for a VLAN on an interface.
· Limit on an interface.
· Limit on a card.
The maximum number of PPPoE sessions on a device or on a card is also limited by the device specification. If the configured number is larger than the device specification, the device specification applies. The device specification varies by device model.
New maximum number settings only apply to subsequently established PPPoE sessions.
Examples
# Set the maximum number of PPPoE sessions for slot 2 to 3000.
<Sysname> system-view
[Sysname] pppoe-server session-limit slot 2 total 3000
Related commands
pppoe-server session-limit
pppoe-server session-limit per-mac
pppoe-server session-limit per-vlan
pppoe-server tag ac-name
Use pppoe-server tag ac-name to set the access concentrator (AC) name for the PPPoE server on an interface.
Use undo pppoe-server tag ac-name to restore the default.
Syntax
pppoe-server tag ac-name name
undo pppoe-server tag ac-name
Default
The AC name for the PPPoE server is the device name on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
name: Specifies an AC name, a case-sensitive string of 1 to 64 characters.
Usage guidelines
The PPPoE server sends its AC name in PADO packets. PPPoE clients choose a PPPoE server by AC name. The PPPoE clients on H3C devices cannot identify PPPoE servers by AC name.
The device does not support an AC name comprised of all blank spaces.
Examples
# Specify the AC name for the PPPoE server on GigabitEthernet 1/0/1 as pppoes.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server tag ac-name pppoes
pppoe-server tag ppp-max-payload
Use pppoe-server tag ppp-max-payload to enable the PPPoE server to support the ppp-max-payload tag and set a range for the tag on an interface.
Use undo pppoe-server tag ppp-max-payload to restore the default.
Syntax
pppoe-server tag ppp-max-payload [ minimum min-number maximum max-number ]
undo pppoe-server tag ppp-max-payload
Default
The PPPoE server does not support ppp-max-payload tag on an interface. The PPPoE server ignores the ppp-max-payload tag in PADI or PADS packets from clients, and returns a PADO or PADS packets without the ppp-max-payload tag.
Views
Layer 3 Ethernet interface/subinterface view
VEth interface/subinterface view
VLAN interface view
Layer 3 aggregate interface/subinterface view
L3VE interface/subinterface view
EFM interface/subinterface view
Reth interface/subinterface view
Predefined user roles
network-admin
Parameters
minimum min-number: Specifies the minimum value for the PPP maximum payload, in the range of 64 to 4470 bytes. The default value is 1492 bytes.
maximum max-number: Specifies the maximum value for the PPP maximum payload, in the range of 64 to 4470 bytes. The default value is 1500 bytes. The max-number argument must be equal or greater than the min-number argument.
Usage guidelines
This command enables the PPPoE server to forward large PPP packets with a payload larger than 1492 bytes and reduces fragmentation. If the ppp-max-payload tag sent by the PPPoE client is within the tag range, the PPPoE server returns a PADO or PADS packet that includes the tag. If not, the PPPoE server considers the received packets invalid, and it does not return a PADO or PADS packet.
The jumboframe enable command can change the size of jumbo frames supported by the interface. The maximum size of the jumbo frames configured by the jumboframe enable command should be larger than the maximum value configured by the pppoe-server tag ppp-max-payload command.
Examples
# Enable the PPPoE server to support the ppp-max-payload tag and set the value for the PPP maximum payload to be in the range of 1494 to 1580 bytes on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server tag ppp-max-payload minimum 1494 maximum 1508
Related commands
jumboframe enable (Interface Command References)
pppoe-server tag service-name
Use pppoe-server tag service-name to set a service name for a PPPoE server on an interface.
Use undo pppoe-server tag service-name to restore the default.
Syntax
pppoe-server tag service-name name
undo pppoe-server tag service-name
Default
A PPPoE server does not have a service name.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
name: Specifies a service name, a case-sensitive string of 1 to 64 characters.
Usage guidelines
Service names identify the traffic destined for PPPoE servers when multiple PPPoE servers are providing services on the network. A PPPoE client establishes a session with the target PPPoE server by using the following process:
1. The client broadcasts a PADI packet.
2. The server compares its service name with the service-name tag field of the PADI packet. The server sends a PADO packet to the client if either of the following conditions exists:
¡ The field matches the service name.
¡ No service name is configured.
3. The client sends a PADR packet to the server.
4. The server compares its service name with the service-name tag field of the PADR packet. The server sends a PADS packet and sets up a session with the client if either of the following conditions exists:
¡ The field matches the service name.
¡ No service name is configured.
Examples
# Set the service name to pppoes for the PPPoE server on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server tag service-name pppoes
pppoe-server throttle per-mac
Use pppoe-server throttle per-mac to set the PPPoE access limit on an interface.
Use undo pppoe-server throttle per-mac to restore the default.
Syntax
pppoe-server throttle per-mac session-requests session-request-period blocking-period
undo pppoe-server throttle per-mac
Default
The PPPoE access rate is not limited on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
session-requests: Specifies the maximum number of PPPoE session requests from a user within the monitoring time. The value range is 1 to 100000.
session-request-period: Specifies the monitoring time in the range of 1 to 3600 seconds.
blocking-period: Specifies the blocking time in the range of 1 to 3600 seconds.
Usage guidelines
This command limits the rate at which a user (identified by MAC address) can create PPPoE sessions on an interface. If the number of PPPoE requests within the monitoring time exceeds the configured threshold, the device discards the excessive requests, and outputs log messages. If the blocking time is set to 0, the device does not block any requests, and it only outputs log messages.
The device uses a monitoring table and a blocking table to control PPP access rates.
· Monitoring table—Stores a maximum of 8000 monitoring entries. Each entry records the number of PPPoE sessions created by a user within the monitoring time. When the monitoring entries reach the maximum, the system stops monitoring and blocking session requests from new users. The aging time of monitoring entries is determined by the session-request-period argument. When the timer expires, the system starts a new round of monitoring for the user.
· Blocking table—Stores a maximum of 8000 blocking entries. The system creates a blocking entry if the access rate of a user reaches the threshold, and blocks requests from that user. When the blocking entries reach the maximum, the system stops blocking session requests from new users and it only outputs log messages. The aging time of the blocking entries is determined by the blocking-period argument. When the timer expires, the system starts a new round of monitoring for the user.
If the access rate setting is changed, the system removes all monitoring and blocking entries, and uses the new settings to limit PPPoE access rates.
Examples
# Limit the rate at which a user can create PPPoE sessions on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-server throttle per-mac 100 100 5
Related commands
display pppoe-server throttled-mac
pppoe-server virtual-template va-pool
Use pppoe-server virtual-template va-pool to configure a VA pool.
Use undo pppoe-server virtual-template va-pool to remove a VA pool.
Syntax
pppoe-server virtual-template template-number [ slot slot-number ] va-pool va-volume
undo pppoe-server virtual-template template-number [ slot slot-number ] va-pool
Default
No VA pool is configured.
Views
System view
Predefined user roles
network-admin
Parameters
virtual-template template-number: Specifies an existing VT interface to use the VA pool.
va-pool va-volume: Specifies the maximum number of VA interfaces contained in the VA pool, in the range of 1 to 65534.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, a global VA pool is created.
Usage guidelines
The PPPoE server creates a VA interface for a PPPoE session to transmit packets between PPPoE and PPP, and removes the VA interface when the user goes offline. Creating and removing VA interfaces take time.
You can configure VA pools to improve the performance of PPPoE session establishment and termination. A VA pool contains a group of automatically numbered VA interfaces. The PPPoE server selects a VA interface from the pool for a requesting user and release the VA interface when the user goes offline. When a VA pool is exhausted, the system creates VA interfaces for new PPPoE sessions, and removes those VA interfaces when the users go offline.
On a VT interface, you can create one global VA pool and one regional VA pool per member device for interfaces bound with the VT interface.
· The global VA pool contains VA interfaces for logical interfaces that might span multiple devices, such as Ethernet aggregate interfaces.
· The regional VA pool contains VA interfaces for interfaces that do not span multiple devices, such as Ethernet interfaces.
When you configure a VA pool, follow these guidelines:
· To change the capacity of a VA pool, you must delete the previous configuration, and reconfigure the VA pool.
· Creating or removing a VA pool takes time. During the process of creating or removing a VA pool, users can go online or offline, but the VA pool does not take effect.
· If the system fails to create a VA pool because of insufficient resources, you can view the available resources by using the display pppoe-server va-pool command.
· VA pools are memory intensive. Set their capacity depending on your network requirements.
· Deleting a VA pool does not log off the users who are using VA interfaces in the VA pool.
Examples
# Create a VA pool with a capacity of 1000 VA interfaces on Virtual-Template 2.
<Sysname> system-view
[Sysname] pppoe-server virtual-template 2 va-pool 1000
Related commands
display pppoe-server va-pool
reset pppoe-server
Use reset pppoe-server to clear PPPoE sessions on the PPPoE server.
Syntax
reset pppoe-server { all | interface interface-type interface-number | virtual-template number }
Views
User view
Predefined user roles
network-admin
Parameters
all: Clears all PPPoE sessions.
interface interface-type interface-number: Specifies an interface by its type and number.
virtual-template number: Specifies a VT interface by its number.
Examples
# Clear established sessions on Virtual-template 1 on the PPPoE server.
<Sysname> reset pppoe-server virtual-template 1
reset pppoe-server packet statistics
Use reset pppoe-server packet statistics to clear PPPoE server negotiation packet statistics.
Syntax
reset pppoe-server packet statistics [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears PPPoE server negotiation packet statistics for all cards.
Examples
# Clear PPPoE server negotiation packet statistics for the specified slot.
<Sysname> reset pppoe-server packet statistics slot 2
Related commands
display pppoe-server packet statistics
PPPoE client commands
dialer diagnose
Use dialer diagnose to configure DDR to operate in diagnostic mode.
Use undo dialer diagnose to restore the default.
Syntax
dialer diagnose [ interval interval ]
undo dialer diagnose
Default
DDR operates in non-diagnostic mode.
Views
Dialer interface view
Predefined user roles
network-admin
Parameters
interval: Specifies the diagnostic interval in the range of 5 to 65535 seconds. The default is 120 seconds.
Usage guidelines
This command takes effect only when a dialer interface is used with PPPoE client applications.
In diagnostic mode, the device performs the following operations:
· Dials a PPPoE connection immediately after the device configurations are complete.
· Automatically terminates the connection.
· Starts the auto-dial timer after a configurable diagnostic interval.
· Redials a connection when the auto-dial timer expires.
By establishing and terminating PPPoE sessions periodically, you can monitor the operating status of the PPPoE link.
In diagnostic mode, the link idle-timeout timer is ignored.
Examples
# Configure Dialer 1 to operate in diagnostic mode, with a diagnostic interval of 300 seconds.
<Sysname> system-view
[Sysname] interface dialer 1
[Sysname-Dialer1] dialer diagnose interval 300
Related commands
dialer timer autodial
dialer timer idle
display pppoe-client session packet
Use display pppoe-client session packet to display the protocol packet statistics for a PPPoE session.
Syntax
display pppoe-client session packet [ dial-bundle-number number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session. The value range for the number argument is 0 to 1023. If you do not specify this option, the command displays the protocol packet statistics for all PPPoE sessions.
Usage guidelines
To display the data packet statistics for a PPPoE session, use the display interface virtual-access command to display information about the specified VA interface.
Examples
# Display the protocol packet statistics for all PPPoE sessions.
<Sysname> display pppoe-client session packet
Bundle: 1
Interface: GE1/0/1
InPackets: 19
OutPackets: 19
InBytes: 816
OutBytes: 816
InDrops: 0
OutDrops: 0
Bundle: 2
Interface: GE1/0/1
InPackets: 18
OutPackets: 18
InBytes: 730
OutBytes: 730
InDrops: 0
OutDrops: 0
Table 7 Command output
Field |
Description |
Bundle |
Dialer bundle to which a PPPoE session belongs. |
Interface |
Ethernet interface where the PPPoE session is present. |
InPackets |
Number of packets received. |
OutPackets |
Number of packets transmitted. |
InBytes |
Number of bytes received. |
OutBytes |
Number of bytes transmitted. |
InDrops |
Number of discarded incoming packets. |
OutDrops |
Number of discarded outgoing packets. |
Related commands
display interface virtual-access
reset pppoe-client session packet
display pppoe-client session summary
Use display pppoe-client session summary to display summary PPPoE session information.
Syntax
display pppoe-client session summary [ dial-bundle-number number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session. The value range for the number argument is 0 to 1023.If you do not specify this option, the command displays summary information for all PPPoE sessions.
Examples
# Display summary information for all PPPoE sessions.
<Sysname> display pppoe-client session summary
Bundle ID Interface VA RemoteMAC LocalMAC State
1 1 GE1/0/1 VA0 00e0-1400-4300 00e0-1500-4100 SESSION
2 1 GE1/0/2 VA1 00e0-1500-4300 00e0-1600-4100 SESSION
Table 8 Command output
Field |
Description |
Bundle |
Dialer bundle to which the PPPoE session belongs. |
Interface |
Ethernet interface where the PPPoE session is present. |
VA |
Virtual access interface created for the PPPoE session. |
RemoteMAC |
MAC address of the remote end. |
LocalMAC |
MAC address of the local end. |
State |
PPPoE session state: · IDLE—Initialization state. · PADI SENT—A PPPoE Active Discovery Initiation (PADI) packet has been sent, and a PPPoE Active Discovery Offer (PADO) packet is being expected. · PADR SENT—A PPPoE Active Discovery Request (PADR) packet has been sent, and a PPPoE Active Discovery Session-confirmation (PADS) packet is being expected. · SESSION—The PPPoE session has been successfully established. |
pppoe-client
Use pppoe-client to establish a PPPoE session and specify the dialer bundle corresponding to the session.
Use undo pppoe-client to remove a PPPoE session.
Syntax
pppoe-client dial-bundle-number number [ no-hostuniq ]
undo pppoe-client dial-bundle-number number
Default
No PPPoE session is established.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session. A dialer bundle number uniquely identifies a PPPoE session. It can also be used as a PPPoE session ID. The value range for the number argument is 0 to 1023.
no-hostuniq: Configures the client not to carry the Host-Uniq field in discovery packets. If you do not specify this keyword, the client carries the Host-Unique field. The Host-Unique field uniquely identifies a PPPoE client when an interface is configured with multiple PPPoE sessions. When the PPPoE server receives a packet with this field, it must include this field unmodified in the response packet. The device identifies the PPPoE client where the response packet belongs based on the Host-Unique field in the response packet.
Examples
# Establish a PPPoE session on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] pppoe-client dial-bundle-number 1
# Establish a PPPoE session on Virtual-Ethernet 0.
<Sysname> system-view
[Sysname] interface virtual-ethernet 0
[Sysname-Virtual-Ethernet0] pppoe-client dial-bundle-number 1
# Establish a PPPoE session on WLAN-Ethernet 1.
<Sysname> system-view
[Sysname] interface wlan-ethernet 1
[Sysname-WLAN-Ethernet1] pppoe-client dial-bundle-number 1
reset pppoe-client
Use reset pppoe-client to reset a PPPoE session corresponding to a dialer bundle.
Syntax
reset pppoe-client { all | dial-bundle-number number }
Views
User view
Predefined user roles
network-admin
Parameters
all: Resets all the PPPoE sessions.
dial-bundle-number number: Specifies a dialer bundle by its number. The value range for the number argument is 0 to 1023.
Usage guidelines
A PPPoE session in permanent mode and terminated by this command will be established again when the auto dial timer expires.
A PPPoE session in on-demand mode and terminated by this command will be established again only when there is a need for data transmission.
Examples
# Reset all PPPoE sessions.
<Sysname> reset pppoe-client all
Related commands
dialer timer autodial
reset pppoe-client session packet
Use reset pppoe-client session packet to reset the protocol packet statistics for a PPPoE session.
Syntax
reset pppoe-client session packet [ dial-bundle-number number ]
Views
User view
Predefined user roles
network-admin
Parameters
dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session. The value range for the number argument is 0 to 1023.If you do not specify this option, the command resets the protocol packet statistics for all PPPoE sessions.
Examples
# Reset the protocol packet statistics for all PPPoE sessions.
<Sysname> reset pppoe-client session packet
Related commands
display pppoe-client session packet