PPPoE on 7600

[Yasir Ashfaque]

I need little confirmation, has any one tested the PPPoE, BRAS functionality on CISCO 7600 with SUP720+12.2SRC+SIP-400 topology, does it really work and does it really give some practical difference from 7200 NPE-G2.

[Yasir Ashfaque]

Ok No One Answered, but our ISP has successfully deployed PPPoE Termination on 7609, and it is giving mind blowing performance and 100 times better than 7200.. we have almost terminated more than 2.5k sessions on it, and shifting more traffic gradually..

[devang_etcom]

Yasir,

It will be great if you can share your deployment scenario for PPPoE in your network? I am looking for good configuration template as well as some guide line.

thanks,

Devang Patel

[Yasir Ashfaque]

Hello Devan, sorry i never checked my msg again, tell me if you are stil interested, i will

share the configurations.

[ilirnako1]

Hello

I am too,interested in this topic .

Now I am migrating pppoe services fro 7200 to 7600.

At the cisco 7600 I have SIP 400 and am taking a 2xGBE -SPA card for it .   I have an another  5xGE SPA but this is not supported at my SIP 400  (the card read V2 but i do not anderstend the reason that is not supported from SIp 400)

Is the card 2xGbe Spa OK for the pppoe service?

Regards

Ilir

[Yasir Ashfaque]

Well 2*Gbe must work, you must confirm it from CISCO TAC, beside that i dont see any issue, make sure you will use IOS greater than 12.2SRC and note it that policy-routing doesnt work on virtual-access interface. beside that it works gr8

[ilirnako1]

Hi Yasir

I have configured at the sip400 Ge port the pppoe options but no success .At the interface the only option is vlan-id :

interface GigabitEthernet3/1/0
ip address 192.168.60.1 255.255.255.0
negotiation auto
!
vlan-id dot1q 60
  pppoe enable group vlan60
  exit-vlan-config

There is not option of the pppoe in subinterface :  (pppoe enable bba-group)

My question is : Is the pppoe suported with supervisor Sup 720  or is needed RSP-720 card ?

At my router I have Sup720 and the version Version 12.2(33)SRC4

Regards

Ilir

[Yasir Ashfaque]

Yes it is supported on SUP-720, you will have to connect it on either main physical port or under vlan-id it must work on both, try debugging and see if it can receive packets from client or not ??

for vlan-id use vlan1 for untagged packets.

[ilirnako1]

Your router is with SUP720 ?

[ilirnako1]

I have these logs:

Feb 13 13:20:22.572: AAA/AUTHEN/PPP (0000015F): Pick method list 'default'
Feb 13 13:20:22.572: RADIUS/ENCODE(0000015F):Orig. component type = PPoE
Feb 13 13:20:22.572: RADIUS:  AAA Unsupported Attr: interface         [194] 7  
Feb 13 13:20:22.572: RADIUS:   33 2F 31 2F 30             [ 3/1/0]
Feb 13 13:20:22.572: RADIUS:  AAA Unsupported Attr: client-mac-address[43]  14 
Feb 13 13:20:22.572: RADIUS:   30 30 31 63 2E 37 65 36 30 2E 62 38      [ 001c.7e60.b8]
Feb 13 13:20:22.572: RADIUS(0000015F): Config NAS IP: 0.0.0.0
Feb 13 13:20:22.572: RADIUS/ENCODE(0000015F): acct_session_id: 341
Feb 13 13:20:22.572: RADIUS(0000015F): sending
Feb 13 13:20:22.572: RADIUS/ENCODE: Best Local IP-Address 80.78.66.245 for Radius-Server 80.78.66.72
Feb 13 13:20:22.572: RADIUS(0000015F): Send Access-Request to 80.78.66.72:1812 id 1645/71, len 91
Feb 13 13:20:22.572: RADIUS:  authenticator D1 6A A9 97 1F 2E E2 A8 - 14 E1 15 64 EC AD F8 D3
Feb 13 13:20:22.572: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
Feb 13 13:20:22.572: RADIUS:  User-Name           [1]   14  "ilir-optimal"
Feb 13 13:20:22.572: RADIUS:  User-Password       [2]   18  *
Feb 13 13:20:22.572: RADIUS:  NAS-Port-Type       [61]  6   Virtual                   [5]
Feb 13 13:20:22.572: RADIUS:  NAS-Port            [5]   6   0                        
Feb 13 13:20:22.572: RADIUS:  NAS-Port-Id         [87]  9   "3/1/0/1"
Feb 13 13:20:22.572: RADIUS:  Service-Type        [6]   6   Framed                    [2]
Feb 13 13:20:22.572: RADIUS:  NAS-IP-Address      [4]   6   80.78.66.245             
Feb 13 13:20:22.576: RADIUS: Received from id 1645/71 80.78.66.72:1812, Access-Accept, len 66
Feb 13 13:20:22.576: RADIUS:  authenticator 87 68 42 F1 C6 86 2D 73 - 00 E6 B1 F4 B0 CE 9D D5
Feb 13 13:20:22.576: RADIUS:  Class               [25]  7  
Feb 13 13:20:22.576: RADIUS:   53 76 63 3D 31             [ Svc=1]
Feb 13 13:20:22.576: RADIUS:  Idle-Timeout        [28]  6   7200                     
Feb 13 13:20:22.576: RADIUS:  Service-Type        [6]   6   Framed                    [2]
Feb 13 13:20:22.576: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
Feb 13 13:20:22.576: RADIUS:  Framed-IP-Address   [8]   6   255.255.255.254          
Feb 13 13:20:22.576: RADIUS:  Reply-Message       [18]  15 
Feb 13 13:20:22.576: RADIUS:   41 63 63 65 73 73 20 41 63 63 65 70 74     [ Access Accept]
Feb 13 13:20:22.576: RADIUS(0000015F): Received from id 1645/71
Feb 13 13:20:22.576: RADIUS/DECODE: Reply-Message fragments, 13, total 13 bytes
Feb 13 13:20:22.588: [333]PPPoE 330: State LCP_NEGOTIATION    Event SSS CONNECT LOCAL
Feb 13 13:20:22.592: [333]PPPoE 330: Segement (SSS class): UPDATED
Feb 13 13:20:22.596: [333]PPPoE 330: Segment (SSS class): BOUND
Feb 13 13:20:22.596: [333]PPPoE 330: data path set to Virtual Acess
Feb 13 13:20:22.596: [333]PPPoE 330: State LCP_NEGOTIATION    Event SSM UPDATED
Feb 13 13:20:22.596: AAA/BIND(0000015F): Bind i/f Virtual-Access2.1
Feb 13 13:20:22.596: [333]PPPoE 330: O
contiguous pak, size 20

[Yasir Ashfaque]

seems like authentication issue, try to authenticate with local database and see if it works.

[ilirnako1]

Under :

interface GigabitEthernet3/1/0
ip address 192.168.60.1 255.255.255.0
negotiation auto
pppoe enable group vlan60

It works OK  .The session is created .

But with vlan-i does not work  .

vlan-id dot1q 60
  pppoe enable group vlan60
  exit-vlan-config

In this scenario I connect with trunk connection at the switch .With debug no packets are seen

Regards

ilir

[ilirnako1]

Is there someone form Cisco that can response about these issues ?

We pay a lot of money for the routers and do not find the right solution for our needs .I have tryed to find the solutions in the web but there are always only part of solutions ,

.

regards

ilir

[Yasir Ashfaque]

Ok, half of the problem is solved, check if Switch is statically configure for trunk or not, then configure switch with static trunk commands and see if it works, try to connect wireshark with switch and see if switch is sending the pppoe discovery packets with TAG 60 or not.

you can open a ticket with Cisco tac if you have their support contract, they will help you because they are paid for this