cisco asr pppoe

!
! Last configuration change at 12:18:46 MSK Tue Apr 25 2017
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no platform punt-keepalive disable-kernel-core
!
hostname asr
!
boot-start-marker
boot system flash bootflash:asr1001x-universalk9.03.16.03.S.155-3.S3-ext.SPA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
logging buffered 32768
enable password 7 XXXXXXXXXXXXX
!
aaa new-model
!
!
aaa group server radius PPPoE
 server-private 10.100.236.163 auth-port 1812 acct-port 1813 key 7 XXXXXXXXXXXXXXXXX
!
aaa authentication login default local
aaa authentication ppp PPPoE group PPPoE
aaa authorization network PPPoE group PPPoE
aaa authorization subscriber-service PPPoE group PPPoE
aaa accounting delay-start
aaa accounting update periodic 5
aaa accounting network PPPoE start-stop group PPPoE
!
aaa nas port extended
!
!
!
aaa server radius dynamic-author
 client 10.100.236.163 server-key 7 XXXXXXXXXXX
 server-key 7 XXXXXXXXXXXXXX
 auth-type any
!
aaa session-id common
aaa policy interface-config allow-subinterface
clock timezone MSK 3 0
!
!
!
!
!
!


ip name-server 8.8.8.8

!
!
!
!
!
!
!
!
!
!
subscriber templating
subscriber authorization enable
multilink bundle-name authenticated
!
!
username admin privilege 15 password 7 XXXXXXXXXXXXXXX
!
redundancy
 mode none
!
!
!
!
!
!
bba-group pppoe PPPoE
 virtual-template 1
 sessions per-mac limit 2
 sessions auto cleanup
!
!
!
interface Loopback0
 ip address 10.0.0.1 255.255.255.255
!
interface Loopback1
 no ip address
!
interface TenGigabitEthernet0/0/0
 no ip address
!
interface TenGigabitEthernet0/0/0.24
 encapsulation dot1Q 24
 ip address 10.100.216.254 255.255.255.0
!
interface TenGigabitEthernet0/0/0.436
 encapsulation dot1Q 436
 ip address 10.100.236.104 255.255.255.0
!
interface TenGigabitEthernet0/0/0.1416
 encapsulation dot1Q 1416
 ip address XXX.XXX.18.189 255.255.255.248
 ip nat outside
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
!
!
interface GigabitEthernet0/0/3
 no ip address
 negotiation auto
 pppoe enable group PPPoE
 ip subscriber interface
!

!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 no ip address
 shutdown
 negotiation auto
!
interface Virtual-Template1
 mtu 1492
 ip unnumbered Loopback0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip tcp adjust-mss 1420
 no peer default ip address
 ppp authentication chap ms-chap-v2 callin PPPoE
 ppp authorization PPPoE
 ppp accounting PPPoE
 ppp ipcp dns 8.8.8.8
 ppp ipcp address required
 ppp timeout idle 3600
!
!
ip nat pool NATPOOL XXX.XXX.18.189 XXX.XXX.18.189 netmask 255.255.255.0
ip nat inside source list 100 pool NATPOOL
ip forward-protocol nd


no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 XXX.XXX.18.185
ip ssh version 2
!
!
access-list 100 permit ip 10.0.0.0 0.255.255.255 any
access-list 100 permit ip 172.16.0.0 0.15.255.255 any
access-list 100 permit ip 192.168.0.0 0.0.255.255 any
!
!
!
radius-server attribute nas-port format e UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
radius-server key 7 XXXXXXXXXXXXXXXXX
radius-server vsa send cisco-nas-port
!
radius server BILLRADIUS
 key 7 XXXXXXXXXXXX