enable
configure terminal
no ip domain-lookup
hostname R3
banner motd #Unauthorized access prohibited#
int virtual-template1
ip address 203.0.113.18 255.255.255.248
ip unnumbered g0/0
ppp authentication chap ms-chap
ip virtual-reassembly
exit
int virtual-template2
ppp authentication chap ms-chap
ip address 203.0.113.25 255.255.255.252
ip unnumbered g0/1
ip virtual-reassembly
exit
bba-group pppoe BRANCH1
virtual-template 1 
sessions max limit 100
sessions per-mac limit 1
sessions auto cleanup
exit
bba-group pppoe BRANCH2
virtual-template 2
sessions max limit 100
sessions per-mac limit 1
sessions auto cleanup
exit
int g0/0
pppoe enable group BRANCH1
no shut
exit
int g0/1
pppoe enable group BRANCH2
no shut
exit
aaa new-model
aaa authentication ppp default local
aaa authorization network default local
aaa attribute list br1
attribute type addr 203.0.113.17 service ppp protocol ip
exit
aaa attribute list br2
attribute type addr 203.0.113.26 service ppp protocol ip
exit
username R2 privilege 0 password 123
username R2 aaa attribute list br1
username R4 privilege 0 password 456
username R4 aaa attribute list br2
int g0/2 
ip address 203.0.113.1 255.255.255.240
no shut
end
copy running-config startup-config