Point-to-Point Protocol over Ethernet Intermediate Agent Overview

Point-to-Point Protocol over Ethernet Intermediate Agent (PPPoE IA) acts as another level of security between the host and the broadband remote access server by intercepting all PPPoE Active Discovery (PAD) messages on a per-port basis.

This feature is supported on RUCKUS ICX 8200 devices only.

The PPPoE IA intercepts each PAD message coming from a PPPoE client or a PPPoE server, checking for a vendor-specific tag.

Depending on the policy configured for vendor-specific tag processing, the vendor-specific tag may be stripped, kept, or replaced, and the packet forward or dropped.

PPPoE IA manages the PPPoE clients based on their location information. You can configure PPPoE IA on a per-port basis for the PPPoE client interface:

  • Specify a circuit ID to be included in the vendor tag.
  • Define a remote ID to be included in the vendor tag.

These both put the vendor-specific tag in the configured format, replacing the original vendor-specific tag with the new vendor-specific tag, before forwarding the packets.

You can configure PPPoE IA on a per-port basis for the PPPoE server interface:

  • Specify to strip the vendor-specific tag from the packets. This removes the vendor-specific tag from the packets before forwarding to the client.
  • Specify the port as trusted. If a port is not configured as trusted towards the server, all PPPoE Discovery packets will be dropped.