5.4. PPP Command Reference

This command enables the context to configure subscriber management parameters.

This command configures a PPP policy. These policies are referenced from interfaces configured for PPP. Multiple PPP policies may be configured.

This default policy cannot be modified nor deleted.

This command configures the default PAP password for RADIUS authentication when the Password-Length=0 in the PAP Authenticate-Request.

RADIUS authentication cannot be initiated when the Password-Length=0 in the PAP Authenticate-Request and no default-pap-password is configured. The PPP session terminates in this case.

This command configures the default username for authentication when not provided in PAP/CHAP authentication (no Name field in CHAP Response message or Peer-Id-Length=0 in PAP Authenticate-Request).

The PPP session terminates when no username is provided in PAP/CHAP authentication and no default-user-name is configured.

This command disables the use of cookies.

The no form of this command enables cookies.

This command enables PPPoE Maximum-Receive-Unit (MRU) negotiations greater than 1492 bytes without the need to receive a “PPP-Max-Payload” tag in PADI/PADR from the client as defined in RFC 4638, Accommodating a Maximum Transit Unit/Maximum Receive Unit (MTU/MRU) Greater Than 1492 in the Point-to-Point Protocol over Ethernet (PPPoE).

The MRU send in the initial LCP Config Request is determined by the port mtu and ppp-policy ppp-mtu parameters.

This command defines the keepalive interval and the number of keepalives that can be missed before the session is declared down for this PPP policy.

The no form of this command reverts to the default value.

This command enables subnet negotiation using PPP IPCP Subnet-Mask option (0x90) if requested by the client. The subnet can be obtained from RADIUS (Framed-IP-Netmask attribute) or local user database. The subnet is installed as a managed route of the PPP session. This requires the anti-spoof type on the SAP to be configured to nh-mac.

By default, an IPCP Config Request with IPCP Subnet-Mask option (0x90) is rejected.

This command enables the PPP session to stay established when an LCP peer magic number mismatch is detected.

By default, the PPP session is terminated when an LCP peer magic number mismatch is detected.

This command sets the maximum PPP sessions that can be opened for a given MAC address.

To enable IPv4 address allocation using the internal DCHCPv4 client for multiple PPPoE sessions on a single SAP and having the same MAC address and circuit-ID, the optional CLI parameter allow-same-circuit-id-for-dhcp should be added. The SR OS local DHCP server detects the additional vendor-specific options inserted by the internal DCHCPv4 client and use an extended unique key for lease allocation.

The no form of this command reverts to the default value.

This command configures the Access Concentrator name that is used in the PPPoE PADO message.

By default, the system name or if not configured, the chassis Serial Number is used.

This command configures the delay timeout before sending a PPP Active Discovery Offer (PADO) packet.

This command configures the PPP protocol used to authenticate the PPP session.

This command configures the minimum and maximum length of a PPP Chap Challenge.

When the Chap Challenge is exactly 16 bytes, it is send in the [60] CHAP-Challenge RADIUS attribute and copied in the RADIUS Authenticator field from the RADIUS Access Request.

This command delays the sending of an LCP-configure request after the discovery phase by 40 – 60 milliseconds.

This command configures the maximum PPP MTU size.

This command enables the context to configure PPP options.

This command provides the ability to configure custom PPP options.

Note: Standard options such as the DNS name is returned from DHCP or RADIUS and be converted to PPP automatically. Compression is not supported.

The no form of this command removes the custom options from the configuration.

This command enables host to reconnect and override existing session.

If disabled and a subscriber abruptly terminates a PPP sessions without sending a PADT to the BNG, the BNG denies any reconnect attempts until the stale PPP session has expired. With this, enabled re-establish-session eliminates the waiting period by allowing immediate PPP reconnection attempts.

The no form of this command reverts to the default.

This command forces an LCP Protocol Reject when receiving an IPv6CP Configure Request message while IPv6 is not configured or when receiving an IPv4CP Configure Request message and no local IPv4 address is assigned.

By default, an IPv4CP/IPv6CP Configure Request message is silently ignored when IPv4/IPv6 is not configured.

This command forces an LCP Protocol Reject when receiving an IPv6CP Configure Request message while IPv6 is not configured.

By default, an IPv6CP Configure Request message is silently ignored when IPv6 is not configured.

This command enables replying to PPPoE Active Discovery Terminate (PADT) packets. Some of the PPPoE clients expect reply on PADT message before the context of the session is cleared up. To support such client, a command enabling reply to PADT is provided.

The no form of this command reverts to the default.

This command defines the time before the PPP session is terminated.

A RADIUS specified session-timeout (attribute [27] Session-Timeout) overrides the CLI configured value.

The no form of this command reverts to the default.

This command assigns a unique session ID to each PPPoE session with different MAC addresses that are active on a single SAP.

On a capture SAP, a unique session ID is assigned per capture SAP: multiple sessions with different MAC addresses that are active on the same or different MSAP have a unique session ID per capture SAP.

With the optional parameter per-msap, a unique session ID is assigned per MSAP:

The maximum session ID range is 1 to 8191.

By default, all PPPoE sessions with different MAC address on a given SAP or MSAP have session-id 1.

The no form of this command reverts to the default.

This command is applicable only to LAC. MRRU option is an indication that the session is of MLPPPoX type. The 7750 SR LAC never initiates the MRRU option in LCP negotiation process. However, it responds to MRRU negotiation request by the client.

This command provides an option to specifically enable or disable negotiation of MLPPPoX on a capture SAP level or on a group interface level.

The no form of this command causes the MRRU option in LCP to not be negotiated by LAC.

This command enables MLPPP for this tunnel group and is applicable only to LNS.

The tunnel can be explicitly activated (if the parent group is in a no shutdown state) or deactivated by the up and down keywords.

If there the admin state is not configured, the tunnel inherits its administrative state from its parent (group).

The no form of this command causes the tunnel administrative state to be inherited from the group.

When configured under the l2tp hierarchy, this command is applicable to LNS.

Within the ppp-policy, this command is applicable only to LAC.

The endpoint, according to RFC 1990, represents the system transmitting the packet. It is used during MLPPPoX negotiation phase to distinguish this peer from all others.

In the case that the client rejects the endpoint option during LCP negotiation, the LAC and the LNS must be able to negotiate the LCP session without the endpoint option.

The no form of this command disables sending endpoint option in LCP negotiation.

This command is applicable only to LNS. Interleaving is supported only on MLPPPoX bundles that contain a single member link. If more than one link is present in the MLPPPoX bundle, interleaving is automatically disabled and a TRAP/log (tmnxMlpppBundleIndicatorsChange) is generated.

The minimum supported rate of the link on which interleaving is performed is 1 kb/s.

If configured at this level, interleaving is enabled on all tunnels within the group, unless it is explicitly disable per tunnel.

The no form of this command reverts to the default.

This command configures the user of link fragmentation and interleaving and is applicable only to LNS. Interleaving is supported only on MLPPPoX bundles that contain a single member link. If more than one link is present in the MLPPPoX bundle, interleaving is automatically disabled and a TRAP/log (tmnxMlpppBundleIndicatorsChange) is generated.

The minimum supported rate of the link on which interleaving is performed is 1 kb/s.

Interleaving configured on this level overwrites the configuration option under the group hierarchy. If the no form of this command is configured for interleaving at this level, the interleaving configuration inherits the configuration option configured under the L2TP group.

The no form of this command reverts to the default.

This command is applicable only to LNS. By default traffic load balancing between the BB-ISAs is based on sessions. Each session is individually assigned to an BB-ISA during session establishment phase.

By introducing MLPPPoX, all sessions of a bundle must be terminated on the same LNS BB-ISA. This is necessary for two reasons:

Therefore, if fragmentation is enabled, load-balancing per tunnel must be configured. In the per tunnel load-balancing mode, all sessions within the same tunnel are terminated on the same LNS BB-ISA.

In the case that we have MLPPPoX sessions with a single member link, both load-balancing methods are valid.

The no form of this command reverts to the default.

This command is applicable only to LNS. It determines the maximum fragment delay caused by the transmission that is imposed on a link.

Fragmentation can be used to interleave high priority packet in-between low priority fragments on a MLPPPoX session with a single link or on a MLPPPoX session with multiple links to better load balance traffic over multiple member links.

This command is applicable only to LNS. It determines the maximum number of links that can be put in a bundle.

Any attempt of a session to join a bundle that is above the max-link limit is rejected.

If interleaving is configured, it is recommended that max-links be set to 1 or a version of the command is used (no max-links). Both have the same effect.

The configuration under the tunnel hierarchy overrides the configuration under the group hierarchy.

The no form of this command reverts to the default.

This command is applicable only to LNS. It determines the time during which the LNS keeps fragments of the same packet in the buffer before it discards them. The assumption is that if the fragments do not arrive within certain time, the chance is that they were lost somewhere in the network. In this case the partial packet cannot be reassembled and all fragments that has arrived up to this point and are stored in the buffer IS discarded to free up the buffer. Otherwise, a condition arises in which partial packets are held in the buffer until the buffer is exhausted.

The configuration under the tunnel hierarchy overrides the configuration under the group hierarchy.

The no form of this command reverts to the default.

This command enables a peer request to send short sequence numbers. This command is applicable to LAC and LNS. By default, MLPPPoX negotiates 24bit long sequence numbers. This command allows this to be changed to shorter, 12-bit sequence numbers.

The no form of this command reverts to the default.

This command configures PPP parameters.

The no form of this command reverts all PPP parameters from the PPP context to their defaults.

This command enables the context to configure PPPoE parameters.

The no form of this command reverts all PPPoE parameters from the PPPoE context to their defaults.

This command specifies the type of PPPoE anti-spoof filtering to use.

The no form of this command reverts to the default.

This command enables the context to configure the PPPoE-to-DHCP options.

This command inserts a DHCP client identifier option 61 in DHCP client messages for PPPoE sessions that obtain IPv4 addresses from a third party DHCP server. By default, a DHCP client identifier option 61 is not included.

The no form of this command reverts to the default.

This command specifies the PPPoE policy on this interface.

The no form of this command reverts to the default.

This command specified the python-policy for Diameter messages received or transmitted on the diameter peers defined in the diameter-peer-policy.

The no form of this command reverts to the default.

This command specifies the number of PPPoE hosts per SAP allowed for this group-interface.

The no form of this command reverts to the default.

This command specifies the number of PPPoE hosts allowed for this group interface.

The no form of this command reverts to the default.

This command configures the local user database to use for PPP PAP/CHAP authentication

The no form of this command reverts to the default.

This command enables the generation of the acct-authentic RADIUS attribute.

The no form of this command reverts to the default.

This command enables the generation of the acct-delay-time RADIUS attribute.

The no form of this command reverts to the default.

This command includes called station id attributes.

The no form of this command reverts to the default.

This command enables the inclusion of the calling-station-id attribute in RADIUS authentication requests and RADIUS accounting messages. The value inserted is set at the SAP level. If no calling-station-id value is set at the SAP level, the calling-station-id attribute is not sent.

The no form of this command reverts to the default.

This command enables the generation of the agent-circuit-id for RADIUS.

The no form of this command reverts to the default.

This command enables the generation of the delegated-ipv6-prefix RADIUS attribute.

The no form of this command disables the generation of the delegated-ipv6-prefix RADIUS attribute.

This command enables the generation of the framed-interface-id RADIUS attribute.

The no form of this command disables the framed-interface-id RADIUS attribute.

This command enables the inclusion of the framed-ip-addr attribute.

The no form of this command disables the inclusion of the framed-ip-addr attribute.

This command enables the inclusion of the framed-ip-netmask attribute.

The no form of this command disables the inclusion of the framed-ip-netmask attribute.

This command enables the generation of the framed-ipv6-prefix RADIUS attribute.

The no form of this command disables the generation of the framed-ipv6-prefix RADIUS attribute.

This command enables the generation of the ipv6-address RADIUS attribute.

The no form of this command disables the generation of the ipv6-address RADIUS attribute.

This command enables the generation of the client MAC address RADIUS attribute.

The no form of this command disables the generation of the client MAC address RADIUS attribute.

This command enables the generation of the nas-identifier RADIUS attribute.

The no form of this command disables the generation of the nas-identifier RADIUS attribute.

This command enables the generation of the nas-port RADIUS attribute. You enter decimal representation of a 32-bit string that indicates your port information. This 32-bit string can be compiled based on different information from the port (data types). By using syntax number-of-bits data-type you indicate how many bits from the 32 bits are used for the specific data type. These data types can be combined up to 32 bits in total. In between the different data types 0's and/or 1's as bits can be added.

The no form of this command disables the nas-port configuration.

This command enables the generation of the nas-port-id RADIUS attribute. Optionally, the value of this attribute (the SAP ID) can be prefixed by a fixed string and suffixed by the circuit-id or the remote-id of the client connection. If a suffix is configured, but no corresponding data is available, the suffix used is 0/0/0/0/0/0.

The no form of this command disables the generation of the nas-port-id RADIUS attribute.

This command enables the generation of the nas-port-type RADIUS attribute. If set to nas-port-type, the following is sent: values: 32 (null-encap), 33 (dot1q), 34 (qinq), 15 (DHCP hosts). The nas-port-type can also be set as a specified value, with an integer from 0 to 255.

The no form of this command disables the generation of the nas-port-type RADIUS attribute

This command enables the generation of the of nat-port-range attribute.

The no form of this command disables the generation of the nat-port-range attribute.

This command enables the generation of the agent-remote-id for RADIUS.

The no form of this command disables the generation of the agent-remote-id for RADIUS.

This command includes sap-session-index attributes.

The no form of this command excludes sap-session-index attributes.

This command specifies that SLA profile attributes should be included into RADIUS accounting messages.

The no form of this command excludes SLA profile attributes into RADIUS accounting messages.

This command specifies that subscriber profile attributes should be included into RADIUS accounting messages.

The no form of this command excludes subscriber profile attributes into RADIUS accounting messages.

This command specifies that subscriber ID attributes should be included into RADIUS accounting messages.

The no form of this command excludes subscriber ID attributes into RADIUS accounting messages.

This command creates the context for defining RADIUS accounting server attributes under a given session authentication policy.

This command configures the algorithm used to access the list of configured RADIUS servers.

This command configures the number of times the router attempts to contact the RADIUS server for authentication.

The no form of this command reverts to the default.

Note: The retry count includes the first attempt.

This command specifies the number of times the router attempts to contact the RADIUS server for authentication, if not successful the first time.

The no form of this command reverts to the default value.

This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.

Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.

The no form of this command removes the server from the configuration.

This command configures the source address range of the RADIUS messages.

The no form of this command reverts to the default value.

This command configures the number of seconds the router waits for a response from a RADIUS server.

The no form of this command reverts to the default value.