BiTel

set ipcp ranges XXX.XXX.XXX.XXX/32 ippool ine

 set ippool add ine 191.206.254.100 191.206.254.200

startup:
        # configure mpd users
        set user username secretpass admin
        # configure the console
        set console self 127.0.0.1 5005
        set console open
        # configure the web server
        set web self 127.0.0.1 5006
        set web open
#CoA
        set radsrv peer Y.Y.Y.Y secretword
        set radsrv open


default:
        load pppoe_server

.
.
.


pppoe_server:
        set ippool add stat X.X.X.1 X.X.X.100
# Create clonable bundle template
        create bundle template B
        set global max-children 2120
# Set IP addresses. Peer address will be later replaced by RADIUS.
        set ipcp ranges 10.10.10.13/32 ippool stat
        set ipcp dns Y.Y.Y.Y Z.Z.Z.Z
        set ipcp no vjcomp
        set ipcp no req-pri-dns
        set ipcp no req-sec-dns
        set ipcp no req-pri-nbns
        set ipcp no req-sec-nbns

# Create link template with common info
        create link template common pppoe
        set link no check-magic
        set link no magicnum
        set link max-children 2120
        set link disable multilink
        set link action bundle B
        set link enable chap pap eap
        set link enable chap-msv1
        set link enable chap-msv2
        set pppoe acname internet
        load radius

# Create templates for ifaces to listen using 'common' template and let them go
        create link template v26 common
        set pppoe iface vlan26
        set link enable incoming

        create link template v27 common
        set pppoe iface vlan27
        set link enable incoming
.
.
.


radius:
        set radius server Y.Y.Y.Y anothersecretword 1812 1813
        set radius retries 3
        set radius timeout 3
# send the given IP in the RAD_NAS_IP_ADDRESS attribute to the server.
        set radius me Y.Y.Y.Y
        set auth acct-update 300
        set auth enable radius-auth
        set auth enable radius-acct
# protect our requests with the message-authenticator
        set radius enable message-authentic

gateway_enable="YES"