Scope — Product-Line Decisions

These are intentional edges of the product, not gaps to be closed:

• IPoE only. No PPPoE anywhere in the product line, and no 802.1X/EAP. Subscribers are IP-over-Ethernet, relayed to the BNG by the edge router.
• L3-routed access, no per-subscriber VLANs. Subscribers are keyed by their assigned IP; the edge router is a true routing hop that relays DHCP and inserts Option 82. There is no VLAN-per-subscriber or QinQ model.
• Notifications are pull-based. Prometheus gauges + Alertmanager replace SNMP traps in the default deployment. SNMP and syslog-over-TLS to a SIEM are per-deployment add-ons, not part of the default design.
• Policing, not shaping. Rate control is RFC 2698 two-rate three-colour policing (drop on red). Queue-based shaping / AQM tiers are out of scope for the product line and would be additive on top of the policer.
• No hard data-plane volume cap. RADIUS remains the authority for subscriber policy; the BNG reports usage and honours CoA-driven enforcement. Small cycle-aligned overage is expected and acceptable by design.