Point-to-Point Protocol over Ethernet, commonly referred to as PPPoE, is a network protocol used to connect a vast number of computer users on an Ethernet network to a single broadband modem simultaneously. It essentially encapsulates PPP frames inside Ethernet frames, allowing the older Point-to-Point Protocol, originally designed for dial-up connections, to transport data over modern Ethernet infrastructures. This method is particularly prevalent in homes and small office environments where Digital Subscriber Line (DSL) or certain cable services require a user authentication layer before granting internet access.
How PPPoE Works Under the Hood
The process of establishing a PPPoE connection involves a distinct discovery phase followed by a standard PPP session. Unlike a direct Ethernet connection where devices communicate immediately, PPPoE requires a client and an access concentrator to find each other first. This discovery stage uses a series of special packets to identify a unique session between the user's computer and the service provider's equipment. Once the discovery is complete and a session ID is assigned, the protocol transitions into the PPP phase, where the familiar login credentials are exchanged to authenticate the user and establish the data link.
The Discovery Stage
During the discovery phase, the client computer sends a PADI (PPPoE Active Discovery Initiation) frame broadcast into the network. This broadcast searches for any access concentrators capable of offering service. These concentrators, typically located at the ISP's central office or within a residential gateway, respond with a PADO (PPPoE Active Discovery Offer) packet. The client then selects one of these offers and sends a PADR (PPPoE Active Discovery Request) to the chosen concentrator. Finally, the concentrator confirms the session with a PADS (PPPoE Active Discovery Session-Confirmation) packet, assigning a unique Session ID that will be used for the duration of the connection.
Authentication and the PPP Phase
With the session established, the protocol moves to the authentication phase, which is the primary reason PPPoE exists on modern networks. This stage uses the PPP Link Control Protocol (LCP) to handle the authentication process. The most common methods are PAP (Password Authentication Protocol), which sends passwords in plain text, and CHAP (Challenge Handshake Authentication Protocol), which uses a challenge-response mechanism to securely verify identity without transmitting the password directly. Only after successful authentication does the network layer protocol, such as IP, begin to function.
IP Configuration and Session Maintenance
Following authentication, the connection utilizes the Internet Protocol Control Protocol (IPCP) to negotiate the IP addresses for both ends of the link. This step dynamically assigns an IP address to the client, often via DHCP, allowing the computer to communicate on the internet. Throughout the session, PPPoE maintains the link, handling errors and managing the flow of data. When the user disconnects, a PADT (PPPoE Active Discovery Termination) packet is sent to gracefully close the session, freeing up resources on the network.
