Configuring and Verifying Lockout for PPPoE Clients

To configure and verify encapsulation type lockout for a PPPoE client:

1. Configure the underlying physical interface.

   For example, the following commands configure a static ATM 1483 subinterface and corresponding ATM PVC.

   host1(config)#interface atm 3/0

   host1(config-if)#interface atm 3/0.101

   host1(config-subif)#atm pvc 10 10 20 aal5snap

2. Create a static PPPoE major interface.

   host1(config-subif)#encapsulation pppoe

3. Configure the PPPoE major interface to detect and accept dynamic PPPoE subinterfaces. Use the lockout-time keyword to configure a nondefault lockout time range for the PPPoE clients associated with the dynamic PPPoE subinterface column.

   For example, the following command configures a lockout time in the range 5–60 seconds for the PPPoE clients associated with the dynamic PPPoE subinterface column on the PPPoE major interface.

   host1(config-subif)#pppoe auto-configure lockout-time 5 60

4. Assign a profile to the PPPoE major interface.

   host1(config-subif)#pppoe profile pppoeLockoutProfile

   For information about creating and using profiles, see Configuring a Dynamic Interface from a Profile .

5. (Optional) Verify the lockout configuration by using either of the following commands.
   • To display summary information about the lockout configuration, use the show pppoe interface command. (The following example shows only the portion of the command display relevant to the PPPoE lockout configuration.)

     host1#show pppoe interface atm 3/0.101
     PPPoE interface ATM 3/0.101 is operStatusUp (dynamic)
     . . .

     Lockout Configuration (seconds): Min 5, Max 60
      Total clients in active lockouts: 0
      Total clients in lockout grace period: 0

   • To display detailed information about the current lockout condition for each PPPoE client associated with a specific source media access control (MAC) address, use the show pppoe interface lockout-time command.

     host1#show pppoe interface atm 3/0.101 lockout-time
     PPPoE interface ATM 3/0.101
     Lockout Configuration (seconds): Min 5, Max 60
      Total clients in active lockout: 0
      Total clients in lockout grace period: 0
     Client Address Current Elapsed Next
     -------------- ------- ------- ----
     0090.1a10.165e       0       0    5 

     For a description of the fields in the command display, see show pppoe interface and show pppoe interface lockout-time.

pppoe auto-configure lockout-time

• Use to specify the lockout time range for the PPPoE clients associated with the dynamic PPPoE subinterface column on the static PPPoE major interface.
• Dynamic encapsulation type lockout is disabled for PPPoE clients by default.
• Configuring dynamic encapsulation type lockout temporarily prevents the static PPPoE major interface from detecting, accepting, and creating dynamic PPPoE subinterface columns until the lockout time expires.
• Use the lockout-time keyword to set the minimum lockout time and maximum lockout time, each of which can be in the range 1–86400 seconds (24 hours).
• Use the none keyword to disable lockout for the PPPoE clients associated with the dynamic PPPoE subinterface column on the static PPPoE major interface.
• For information about the rules that apply when you configure the lockout time for dynamic encapsulation type lockout, see Guidelines for Configuring Encapsulation Type Lockout.
• Example 1—Enables dynamic creation of PPPoE subinterfaces on the static PPPoE major interface using a nondefault lockout time range, 10–120 seconds

  host1(config-subif)#pppoe auto-configure lockout-time 10 120

• Example 2—Disables dynamic encapsulation type lockout for any PPPoE clients associated with the dynamic PPPoE subinterface column on the static PPPoE major interface

  host1(config-subif)#pppoe auto-configure lockout-time none

• Example 3—Terminates dynamic creation of PPPoE subinterfaces on the static PPPoE major interface and, by extension, disables dynamic encapsulation type lockout for this interface

  host1(config-subif)#no pppoe auto-configure

• Use the no pppoe auto-configure command to terminate dynamic creation of PPPoE subinterfaces on the static PPPoE major interface.
• See pppoe auto-configure.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.