PPPoE "Only one"

RouterOS General
1

I understand that the “only one” option in the pppoe profile settings should mean that each username is only allowed to login once when it is set to “yes”. I’m trying to figure out how to prevent multiple logins and the option doesn’t seem to be working for me. Am I missing something or is the feature broken?

Thanks,
Joe

2

Are you using RADIUS server?

3

Yeah, I’m using the User Manager as my radius server.

4

So does the setting not work when using a radius server or am I missing something obvious here??

Thanks,
Joe

5

I have noticed that User-Manager and the RouterOS radius client don’t always seem to handle this situation well.

My subscribers need unlimited permanent access but for a number of reasons - power-outages, manual power-downs of their CPEs, connection-dropping, etc - seemed to be creating multiple active sessions via PPPoE because the session that was in effect when the CPE went down wasn’t terminated by User-Manager even though session time-out was set to the default 10s, so that a new, parallel session was set-up when the CPE re-booted or the link was restored.

Setting the PPPoE server to accept ‘only one connection’ seemed to work in a lot of cases in that the log recorded the server closing an existing session when receiving a request from the applicant for a new one but I am still find the occasional multiple active sessions for subscribers with ‘only one’ ticked, and I haven’t yet been able to diagnose the situations these arise in.

I did, though, discover that ‘closing active sessions’ in User-Manager is only partially successful - it does close active sessions it is triggered for in User-Manager but doesn’t seem to instruct the RADIUS server to actually close the session at the CPE forcing the CPE to invoke a new one, as the next update from the CPE starts a new session in User-Manager with the cumulative uptime and data from the closed session included.

Which seems to make it a bit pointless.

6

Hi,

we have the same problem with multiple userlogins and “only-one” beeing active!

Currently it’s on a ROS 2.9.51 and i’m not sure if it’s working well with ROS 3.x

What Versions are you guys using?