Page 1 of 1

PPPoE transparent mode

Posted: Thu Oct 11, 2007 7:50 pm
by cpresto
Hi all,
it it possible to use MT based wireless CPE in nat/router mode transparent to PPPoE?

PPPoE authentication might be closed at CPE or at Customer's devices (PC, Ethernet router, firewall). In first case (auth on CPE) PPPoE client will be added to MT and NAT will be enabled on this "virtual" interface, in the second one PPPoE server will be enabled, with "single user" option, on MT ethernet interface so user will authenticate on CPE itself. This solution has a main drawback: bandwidth shaping profiles need to be applied at PPPoE server (if RADIUS is not used); this means that PPPoE profiles need to be defined on every single CPE installed!! :( A solution might be to configure MT CPE in bridge mode, but in this way my network and Customer's one will be in the same broadcast domain... not safe !!! :(

Is there a way to let PPPoE data flow accross MT router?

Rgds

Re: PPPoE transparent mode

Posted: Fri Oct 12, 2007 12:28 am
by jowi007
with bridge u can filter , allow mac protocol pppoe discovery and pppoe protocol and drop all the rest

also there is an option witch might help on cpe , let cpe dial the main server and make srcnat for the client on his lan interface

Re: PPPoE transparent mode

Posted: Fri Oct 26, 2007 9:52 pm
by cpresto
Thank you jowi007,
I'm trying to do sobut probably I'm doing something wrong: I've enabled bridge filters accepting into input and forward chains arp, pppoe-discovery and pppoe-session protocols, all the rest will be dropped.
With such a configuration I'm not able to do PPPoE authentication behind the CPE...
:?