PPPOE / RIPv2 / Security

Hi all,

We have a few MT Routerboards deployed around the network running Ripv2 which I then redistribute into our Cisco EIGRP network.
Works well.

We are basically a simple Ethernet network, with a lot of transparent Wireless points that our clients use to connect to us.

I’m looking at introducing PPPOE as the authentication method, backed into Radius for accounting and such.

I can get PPPOE working just fine following the documentation.

My questions are:

How do I deploy PPPOE on a MT that is already running RIPv2, in the documentation it states to not give the interface an IP address, of course in this case it needs to have one. Is i possible to do ? Or do I need another interface ?
I’m sure there is a simple answer but it is eluding me at the moment.
I mean if the MT does have an address on the interface what’s to stop the client from giving themselves a live IP address (if they guessed the address) and bypassing PPPOE altogethere ?

Also does anyone know of any good freeradius frontends specifically designed for PPPOE ? (other than dialup_admin)

My goal is to have a few Radius servers controlling PPPOE on all the MT’s so we can configure the clients speed (up & down) and have them authenticate via PPPOE.

actually I might try getting 1 thing at a time working.

I’m really mostly interested on how to run RIPv2 with the PPPOE server, seeing as it’s recommended that the interface of the pppoe server does not have an IP address.