Advice Regarding PPPoE Server & External UserManager

RouterOS Beginner Basics
1

Hello, this is my first time post and part of my self diy learning about mikrotik and networking in general. But for non english speaking person, sometimes, reading and understanding wiki is hard work. So, I hope you guys can help me a little bit.

This is my network:

              WAN
               |
        ===============
        |     R0      |
        | UserManager |
        ===============
               |
           2.2.2.1/30
               |
               |
           2.2.2.2/30
               |
==============================    ================         ================
|      R1      |  BridgeE25  |    |    AP 1-4    |         |     CPE      |
|    RADIUS    | 3.3.3.1/24  |----| 3.3.3.2-5/24 |--< ~ >--|  3.3.3.6/24  |----User
| PPPoE-Server | E2-E3-E4-E5 |    |              |         |              |
==============================    ================         ================

Additional info:
* R1 add route from BridgeE25 to R0
* AP 1-4 and CPE : static/dhcp addressing (?) (add-arp & default-route = yes) (undecided)
* CPE as PPPoE client and in router mode (bridge ether1 and wlan1)

R1 configuration:
/ip pool print detail
    name="pool-PPPoE" ranges=5.5.5.1-5.5.5.250

/interface pppoe-server server print detail
    service-name="pppoe-server-basic" interface=BridgeE25 max-mtu=auto max-mru=auto mrru=disabled 
    authentication=pap,chap,mschap1,mschap2 keepalive-timeout=10 one-session-per-host=yes 
    max-sessions=unlimited pado-delay=0 default-profile=profile-basic

/ppp profile print detail
    name="profile-basic" local-address=??????? remote-address=pool-PPPoE use-mpls=default 
    use-compression=default use-encryption=default only-one=yes change-tcp-mss=default use-upnp=default 
    rate-limit="" address-list=user-basic dns-server=??????? on-up="" on-down=""

/ppp aaa print
    use-radius: yes
    accounting: yes
    use-circuit-id-in-nas-port-id: no
    interim-update: 0s

/radius print detail 
    service=ppp called-id="" domain="" address=2.2.2.1  secret="SECRET"
    authentication-port=1812 accounting-port=1813 timeout=300ms 
    accounting-backup=no realm=""

/radius incoming print    
    accept: no
    port: 3799

Question:

  1. Overall, am I doing it right?
  2. BridgeE25 as PPPoE Interface, is this correct? (related to question no. 3)
  3. What makes me so confuse is about /ppp profile on this example http://wiki.mikrotik.com/wiki/User_Manager/PPP_Example#PPP_server_configuration

Set IP address of the PPPoE server, IP address might not be assigned to the interface of PPPoE server (> How do I assign IP to the AP & CPE if BridgeE25 doesn’t have IP?> ). Moreover static IP address or DHCP should not be used on the same interfaces as the PPPoE server for security reasons. (> So, no. 2 is incorrent?> )

  • What does it mean?
  • What IP should I fill this local-address? R0 IP (2.2.2.1)? BridgeE25 IP? or outside pool-PPPoE IP (like 5.5.5.251)?
  • I think I break my logic, I don’t even know what the ‘correct’ question shoud I ask.. :frowning:
  1. Should I create dhcp for pool-PPPoE?
  2. Last, what am I missing here? (related to this setup)

Sorry for asking to much question guys, hope you can give me answers in plain english. Thank you.