want to allow only pppoe session and drop anything else

Unanswered Question
Dec 29th, 2009
User Badges:

i have a cisco router working as NAS for pppoe sessions this router is connected to dslam that works as bridge to connect the clients to the pppoe NAS server the problem is when ever a clinet add static ip address it can communcate directly to the router without needing to be authenticated i want the router to allow only the pppoe traffic and drop other traffic thanks alot.....

here is my config

Current configuration : 2136 bytes
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Superlink_47
enable secret 5 $1$VqFK$NHgEqVGi7CfQ.jJYYe4I/0
aaa new-model
aaa authentication login default enable
aaa authentication ppp adsl group radius
aaa authorization network adsl group radius
aaa accounting delay-start
aaa accounting update newinfo
aaa accounting network adsl start-stop group radius
aaa session-id common
ip cef
ip name-server
ip name-server
multilink bundle-name authenticated

log config

bba-group pppoe xxxx
virtual-template 2
vendor-tag circuit-id service
vendor-tag circuit-id strip
sessions per-vlan limit 10000

interface FastEthernet0/0
description To up link
ip address
ip broadcast-address
duplex auto
speed auto

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion