A subscriber login server is used for managing a subscriber login session. The login server is associated with a DHCP server for configuring a premise equipment device and operator-managed device. A subscriber login client at the premise equipment device securely communicates login username and password identifiers to the subscriber login server without using PPP technology. The login server retrieves matching identifiers from a RADIUS server and authorizes service with messages to the DHCP server and the CMTS.The login client can emulate a PPP login client so that a user's interface is similar to a PPPoE client. However, a layer-3 CMTS can be used instead of a layer-2 CMTS. In addition, subscriber authentication and accounting using RADIUS are preserved, positive network access control at the CMTS is maintained, and native IP traffic is routed or switched for maximum performance and QoS treatment.