Hi
Im setting up a new PPPoE network, based on RB1100AH as PPPoE concentrator and Usermanager, with RB1200 as routers on each site.
see the attached image.
Do I have to route public subnets to each site (for clients), and assign users on each site to these.
Example if user1 is connected at site A, he belongs to pool_A, user2 is connected at site B, belongs to pool_B and so on.
Or will it be routed automatically, so I do not have to assign subnets to each site, just one big pool?
You should route the IP networks that the PPPoE servers are to give to users via their IP pools to the PPPoE servers.
If you will use RB1100AH as PPPoE server/concentrator then you don’t need to route public subnets anywhere beyond it. But the question is how you will pass PPPoE through your RB1200 routers? PPPoE is layer 2 protocol so it is not going to pass through routers. What is the reason of these RB1200 (isolating IP networks or just providing link failover)?
If you need only link failover, may be it is better to use STP aware switches instead of those RB1200 routers?
Another option, of course, is to configure each RB1200 as PPPoE server and route a public IP range to it.
how users connect to rb1200?
Thank you for replys.
The reason for the RB1200s is to not have a to large L2 network, witch I have bad experience with 
I did not think about the PPPoE not passing through the routers.
Guess this mean that I have to segment and route to each site then.
Any other ideas/input?
just set up a routed and meshed network like you wish between all your routers (RB1100AH & RB1200).
then you easily can span EoIP-tunnels or VPLS-tunnels from your PPPoE access concentrator (RB1100AH) to your customer edge ports.
this way you’ll completely hide your routed network from the customer.
also you can just set up a big ip-pool of public IPs without any site related overheads.
I’d rather use the RB1200s as PPPoE servers, authenticating users via a central RADIUS solution (maybe UserManager, if you want). Then I’d just route between the RB1100 and the RB1200s.
Thanks for more input here.
Using EoIP or VPLS, would this not also just create a big L2 network, and the troubles that comes with it?
no, using eoip or vpls does not create a big L2 network.
the network is all routed.
in the concentrator, if you create a pppoe server for each tunnel, you have only single segments L2 not broadcasting each other
Thanks, but L2 broadcasts will travel all the way to the core PPPoE concentrator?
As with regular routing it will stop at the sites local router…
If I use the RB1200s as PPPoE servers, authenticating users via a central Usermanager, do I still have to route public subnets to each site, or will this be taken care of between the routers automatically?
The reason I ask is that if I have to route a subnet to each site, much overhead in used public IPs is created.
Yes if you use the RB1200 as PPPoE servers you will have to route public IPs to each site, but this can be taken care of automatically with OSPF. You probably want to setup route summaries in OSPF so you don’t have a bunch of /32 routes.
Ok, thanks, how would this OSPF setup be, do you have an example?
L2 tunnels, connect only one interface of rb1200 with pppoe server to your concentrator then the broadcast stop, it will not travel everywhere.
having a single concentrator coud be more secure for your network
But, still it will go across all links, and in to where the concentrator is (core).
When using routed network, the broadcast etc will not leave the site, right?
If I can achieve this using L2 links, I will rather do that than setting up OSPF etc, as it will be a simpler setup.
If you use tunneling to transport PPPoE from a central PPPoE access concentrator to your distant sites, of course there will be broadcast traffic from these sites to the central station.
But this is VERY limited broadcast traffic, because:
In addition to what sup5 said you can disable ARP on the PPPoE interface(s).
hi , can anybody help me as im a begginner, i got some basic network & mikrotik skills
i already setup a pppoe server , ip-pool, firewall, mangle etc…
pppoe server works fine
i just need advise on what extras are there or changes i can do to make my network
more secure protecting my network & router from bad stuff, clients & internet
There is no need to disable ARP on the PPPoE Interfaces of the access concentrator, because you don’t want to setup IP adresses here.
That’s exactly the reasoning for disabling arp on the pppoe interface, is because there is no need for it. That gives you one less security concern.