Description

This article discusses PPPoE Service-Name-Table and its usage for enforcing PPPoE session limits.

Solution

The PPPoE Service-Name table feature provides a configuration attribute “max-sessions” that allows the user to configure a limit on the number of PPPoE subscribers associated with a specific Service-Name tag. Every Service-Name table by default includes an <empty> Service-Name entry which would always provide a matching entry for PPPoE subscribers sending a zero-length Service-Name tag and prevent these subscribers from using configurations provided by the <any> Service-Name entry. This means that the <any> Service-Name entry can only be used by PPPoE subscribers with nonzero-length Service-Name tags and its max-sessions limit would only control this subset of subscribers while the <empty> Service-Name entry max-sessions would control the other group of subscribers.

Example

Zero-Length Service Name :00:13:01:00:00:01 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 28: vlan 100, p 0, ethertype PPPoE D, PPPoE PADI

jtac@ERX-MX960-II-RE0# run show subscribers
Interface           IP Address/VLAN ID                      User Name                      LS:RI
pp0.3221225472      20.0.0.1                                [email protected]          default:default      


jtac@ERX-MX960-II-RE0# run show pppoe interfaces pp0.3221225472
pp0.3221225472 Index 536874524
  State: Session Up, Session ID: 1, Type: Dynamic,
  Service name: <empty> , Remote MAC address: 00:13:01:00:00:01,
  Session AC name: ERX-MX960-II-RE0,
  Session uptime: 00:00:31 ago,
  Dynamic Profile: PPPOE,
  Underlying interface: demux0.100 Index 325

Limiting PPPoE Session

Configuration

jtac@ERX-MX960-II-RE0# show interfaces demux0
unit 100 {
    vlan-id 100;
    demux-options {
        underlying-interface ae1;
    }
    family pppoe {
        duplicate-protection;
        dynamic-profile PPPOE;
        service-name-table test ;
    }
}

jtac@ERX-MX960-II-RE0#show protocols pppoe
service-name-tables test {
    service any {
        terminate;
        max-sessions 10;
 
00:13:01:00:00:01 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 32: vlan 100, p 0, ethertype PPPoE D, PPPoE PADI [Service-Name "TEST"]

jtac@ERX-MX960-II-RE0# run show pppoe interfaces pp0.3221225475
pp0.3221225475 Index 536874528
  State: Session Up, Session ID: 1, Type: Dynamic,
  Service name: TEST , Remote MAC address: 00:13:01:00:00:01,
  Session AC name: ERX-MX960-II-RE0,
  Session uptime: 00:00:39 ago,
  Dynamic Profile: PPPOE,
  Underlying interface: demux0.100 Index 325

jtac@ERX-MX960-II-RE0# run show subscribers summary

Subscribers by State
   Active: 10
   Total: 10

Subscribers by Client Type
   PPPoE: 10
   Total: 10

Jun  3 15:17:48.546332 Dropping PADI due to Service Name (TEST)   <-- PPPoE session exceeding 10 will be dropped

Starting from 16.1 , the default <empty> Service-Name entry will be eliminated from the Service-Name table, allowing for the possibility that PPPoE subscribers with a zero-length Service-Name tag can use the configuration provided by the <any> Service-Name entry and additionally be limited by its max-session value.The Service-Name table will be configured with only the “any” Service-Name and the required max-session value. This forces all PPPoE subscribers to be included in a single session count for the “any” Service-Name entry and restricted by its max-sessions limit.

Without the default “empty” Service-Name entry, all PADI/PADR control packets with a zero-length Service-Name tag will no longer have a default match in the Service-Name table and the behavior in the absence of explicit user configuration is then controlled by the “any”, or wildcard, Service-Name entry of the Service-Name table.

Example

00:13:01:00:00:0b > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 28: vlan 100, p 0, ethertype PPPoE D, PPPoE PADI  <-- No Service-Name

jtac@ERX-MX960-II-RE0# run show subscribers summary

Subscribers by State
   Active: 10
   Total: 10

Subscribers by Client Type
   PPPoE: 10
   Total: 10

jtac@ERX-MX960-II-RE0> show pppoe interfaces pp0.3221225483
pp0.3221225483 Index 536874539
  State: Session Up, Session ID: 2, Type: Dynamic,
  Service name: <empty> , Remote MAC address: 00:13:01:00:00:01,
  Session AC name: ERX-MX960-II-RE0,
  Session uptime: 00:00:14 ago,
  Dynamic Profile: PPPOE,
  Underlying interface: demux0.100 Index 2134

jtac@ERX-MX960-II-RE0> show pppoe service-name-tables test    
Service Name Table: test
  Service Name: <any> ,
    Action: Terminate
    Max Sessions: 10
    Active Sessions: 10


Jun  3 15:43:25.263818 Dropping PADI due to Service Name ()  <-- PPPoE session exceeding 10 will be dropped

Related Information