Configuration Examples
PPPoE
The following example shows a PPPoE configuration for VLAN mode 1:1 with IPv4 and IPv6 enabled, authenticated via RADIUS.
{
"ietf-restconf:data": {
"rtbrick-config:access": {
"aaa-profile": [
{
"profile-name": "aaa-radius",
"session-timeout": 0,
"idle-timeout": 0,
"aaa-radius-profile": "radius-default",
"authentication": {
"order": "RADIUS"
},
"accounting": {
"order": "RADIUS",
}
}
],
"radius-profile": [
{
"profile-name": "radius-default",
"nas-identifier": "BNG",
"nas-port-type": "Ethernet",
"authentication": {
"radius-server-profile-name": [
"radius-server-1",
"radius-server-2"
]
},
"accounting": {
"radius-server-profile-name": [
"radius-server-1",
"radius-server-2"
],
"stop-on-reject": "true",
"stop-on-failure": "true",
"accounting-on-off": "true",
"accounting-on-wait": "true",
"accounting-backup": "true",
"accounting-backup-max": 86400
}
}
],
"radius-server": [
{
"server-name": "radius-server-1",
"address": "198.51.100.101",
"source-address": "198.51.100.200",
"secret-encrypted-text": "$21e4946e31b406de98b3077aef03ed5a7",
"authentication": {
"enable": "true"
},
"accounting": {
"enable": "true"
},
"coa": {
"enable": "true"
}
},
{
"server-name": "radius-server-2",
"address": "198.51.100.102",
"source-address": "198.51.100.200",
"secret-encrypted-text": "$21e4946e31b406de98b3077aef03ed5a7",
"authentication": {
"enable": "true"
},
"accounting": {
"enable": "true"
},
"coa": {
"enable": "true"
}
}
],
"access-profile": [
{
"profile-name": "pppoe-dual",
"protocol": {
"pppoe": {
"enable": "true",
"session-protection": {
"enable": "true"
},
"vlan-priority": 6
},
"ppp": {
"lcp": {
"authentication-protocol": "PAP_CHAP",
"echo-interval": 30,
"echo-max-retransmit": 3,
"echo-enable": "true"
},
"ipcp": {
"enable": "true",
"source-ifl": "lo-0/0/0/1"
},
"ip6cp": {
"enable": "true"
}
},
"ra": {
"enable": "true",
"interval": 60
},
"dhcpv6": {
"enable": "true"
},
"l2tp": {
"tunnel-profile": "l2tp-default"
}
},
"address-family": {
"ipv4": {
"enable": "true",
"primary-dns": "198.51.100.103",
"secondary-dns": "198.51.100.104",
"instance": "default"
},
"ipv6": {
"enable": "true",
"primary-dns": "2001:db8:0:100::",
"secondary-dns": "2001:db8:0:104::",
"instance": "default"
}
}
}
],
"interface": {
"double-tagged": [
{
"interface-name": "ifl-0/0/1",
"outer-vlan-min": 1,
"outer-vlan-max": 4094,
"inner-vlan-min": 7,
"inner-vlan-max": 7,
"access-type": "PPPoE",
"access-profile-name": "pppoe-dual",
"aaa-profile-name": "aaa-radius"
}
]
},
"l2tp-profile": [
{
"profile-name": "l2tp-default",
"session-limit": 4000,
"client-name": "BNG",
"client-ipv4": "198.51.100.200",
"hide-authentication": true
}
]
},
"rtbrick-config:interface": [
{
"name": "ifl-0/0/1",
"description": "Access",
"host-if": "eth0"
},
{
"name": "ifl-0/0/2",
"description": "Core",
"host-if": "eth1",
"unit": [
{
"unit-id": 1,
"address": {
"ipv4": [
{
"prefix4": "198.51.100.33/24"
}
],
"ipv6": [
{
"prefix6": "2001:db8:0:32::/32"
}
]
}
}
]
},
{
"name": "lo-0/0/0",
"unit": [
{
"unit-id": 1,
"address": {
"ipv4": [
{
"prefix4": "198.51.100.200/24"
}
]
}
}
]
}
]
}
}
IPoE
The following example shows an IPoE configuration for VLAN mode 1:1 with IPv4 and IPv6 enabled, authenticated via RADIUS.
{
"ietf-restconf:data": {
"rtbrick-config:access": {
"aaa-profile": [
{
"profile-name": "aaa-radius",
"session-timeout": 0,
"idle-timeout": 0,
"aaa-radius-profile": "radius-default",
"authentication": {
"order": "RADIUS"
},
"accounting": {
"order": "RADIUS",
}
}
],
"radius-profile": [
{
"profile-name": "radius-default",
"nas-identifier": "BNG",
"nas-port-type": "Ethernet",
"authentication": {
"radius-server-profile-name": [
"radius-server-1",
"radius-server-2"
]
},
"accounting": {
"radius-server-profile-name": [
"radius-server-1",
"radius-server-2"
],
"stop-on-reject": "true",
"stop-on-failure": "true",
"accounting-on-off": "true",
"accounting-on-wait": "true",
"accounting-backup": "true",
"accounting-backup-max": 86400
}
}
],
"radius-server": [
{
"server-name": "radius-server-1",
"address": "198.51.100.101",
"source-address": "198.51.100.200",
"secret-encrypted-text": "$21e4946e31b406de98b3077aef03ed5a7",
"authentication": {
"enable": "true"
},
"accounting": {
"enable": "true"
},
"coa": {
"enable": "true"
}
},
{
"server-name": "radius-server-2",
"address": "198.51.100.102",
"source-address": "198.51.100.200",
"secret-encrypted-text": "$21e4946e31b406de98b3077aef03ed5a7",
"authentication": {
"enable": "true"
},
"accounting": {
"enable": "true"
},
"coa": {
"enable": "true"
}
}
],
"access-profile": [
{
"profile-name": "ipoe-dual",
"protocol": {
"dhcp": {
"enable": "true",
"mode": "server"
},
"dhcpv6": {
"enable": "true",
"mode": "server"
},
},
"address-family": {
"ipv4": {
"enable": "true",
"pool-name":"ipoe",
"primary-dns": "198.51.100.103",
"secondary-dns": "198.51.100.104",
"instance": "default"
},
"ipv6": {
"enable": "true",
"pool-name":"ipoe-ia-na",
"prefix-delegation-pool-name":"ipoe-ia-pd",
"primary-dns": "2001:db8:0:100::",
"secondary-dns": "2001:db8:0:104::",
"instance": "default"
}
}
}
],
"interface": {
"double-tagged": [
{
"interface-name": "ifl-0/0/1",
"outer-vlan-min": 1,
"outer-vlan-max": 4094,
"inner-vlan-min": 7,
"inner-vlan-max": 7,
"access-type": "IPoE",
"access-profile-name": "ipoe-dual",
"aaa-profile-name": "aaa-radius",
"gateway-ifl": "lo-0/0/0/1"
}
]
},
"pool": [
{
"pool-name": "ipoe",
"ipv4-address": {
"low": "10.0.0.1",
"high": "10.0.255.255"
}
},
{
"pool-name": "ipoe-ia-na",
"ipv6-prefix": {
"low": "fc66::1/128",
"high": "fc66::ffff/128"
}
},
{
"pool-name": "ipoe-ia-pd",
"ipv6-prefix": {
"low": "fc66:0:100::/56",
"high": "fc66:0:1ff:ff00::/56"
}
}
],
},
"rtbrick-config:interface": [
{
"name": "ifl-0/0/1",
"description": "Access",
"host-if": "eth0"
},
{
"name": "ifl-0/0/2",
"description": "Core",
"host-if": "eth1",
"unit": [
{
"unit-id": 1,
"address": {
"ipv4": [
{
"prefix4": "198.51.100.33/24"
}
],
"ipv6": [
{
"prefix6": "2001:db8:0:6423::/32"
}
]
}
}
]
},
{
"name": "lo-0/0/0",
"unit": [
{
"unit-id": 1,
"address": {
"ipv4": [
{
"prefix4": "198.51.100.200/24"
}
]
}
}
]
}
]
}
}