Skip to content

IPoE and DHCP

IPoE access driven by DHCP, with MAC, IP or Option-82 identity toward RADIUS. Configuration lives in the dhcp view. The access serve-set is an explicit list and is VLAN-aware — with no interface listed, nothing is served.

Configuration

The serve-set is an explicit list. Names are physical interfaces or VLAN sub-interfaces and are VLAN-aware. add and remove stage into the candidate, commit applies live, save persists, and several names may be given per command, space- or comma-separated.

cli
system-view
dhcp mode off|dhcp|ipoe|both             # default off = PPPoE only
dhcp interface add <name> [<name>...]
dhcp interface remove <name> [<name>...]
dhcp auth mac|ip|option82|none           # default mac
dhcp auth-password <secret>              # MAC-auth password
dhcp mac-format colon|hyphen|bare        # default colon
dhcp pool <name>                         # fallback address pool
dhcp lease-time <secs>                   # default 600
dhcp netmask <mask>                      # default 255.255.255.0
dhcp undo <mode|auth|mac-format|pool|lease-time|netmask>

dhcp mode ipoe
dhcp interface add access2
dhcp auth option82
dhcp lease-time 3600
commit ; save

DHCP mode

both serves DHCP and IPoE-authenticated subscribers together. dhcp and ipoe restrict to one or the other. off disables IPoE entirely, leaving PPPoE only, and is the default — so a fresh box serves nothing on the IPoE side until you set a mode and list an interface.

Subscriber identity

dhcp auth selects what becomes the RADIUS User-Name: the client MAC, which is the default; the IP; the DHCP Option-82 circuit and remote ID inserted by the access node; or none. MAC format is configurable because RADIUS realms differ on colon, hyphen and bare forms — getting this wrong presents as every subscriber failing authentication with a valid secret, so check it against what your realm expects before blaming the server. auth-password sets the password used for MAC authentication.

Subscriber DNS

DNS is shared by every framed-IP pool, so it is configured globally rather than per pool. Both families apply live on commit and are persisted by save. IPv4 DNS is handed out in IPCP and in DHCP option 6. IPv6 DNS is delivered both as the RA RDNSS option, for SLAAC clients, and via DHCPv6, so any CPE learns it either way.

cli
ip dns <primary> [secondary]      # IPCP + DHCP option 6
ip dns none
ipv6 dns <primary> [secondary]    # RA RDNSS + DHCPv6
ipv6 dns none

ip dns 203.0.113.53 198.51.100.53
commit
show ip dns  |  show ipv6 dns