Support for PPP without authentication about bngblaster HOT 4 OPEN

I haven't expected this use case, since all customer I worked with using line based authentication (agent-remote-id, ...), they just ignore username/password but still negotiate authentication.

The main reason for ignoring authentication vs. disabled authentication is the better client compatibility, since some clients did not support PPPoE without authentication. Another reason for authentication is that a lot of providers pass some CPE parameters like shaping rate, ... using the authentication reply-message.

Anyhow, I can consider this as an option to disable authentication in the BNG Blaster.

from bngblaster.

Fixed in dev branch. As long as there is no authentication protocol explicitly configured in the BNG Blaster configuration, we will now accept to skip authentication phase.

from bngblaster.

Great, thank you! I will do some testing of this in the next couple of weeks when I am back in our test environment.

Re. your earlier comments, yes - this is an unusual case certainly.

BNG relevant information like shaping rate etc. in the reply messages still happens, as RADIUS still happens like normal. For this deployment model, we configured the BNG with a username/password to use in the RADIUS auth request, of course usually that would be provided by the RGW. We ignore that either way though, and only consider agent-remote-id etc.

You are right that some RGWs expect a specific textual message format in a PPP Authentication-ACK, for example Fritzbox uses this to provide TR069 server info as PPP/PPPoE has no mechanism to convey this like DHCP does. This is of course not possible if PPP does not attempt authentication.

from bngblaster.

This change is now available in version 0.9.3!

from bngblaster.