ASA 5505 PPPoE via DSL

ognetadmin · ‎02-10-2009

Having trouble getting a public IP on the outside interface.

ASA 5505 running 8.0(2)

Westell E90610030-06 DSL box running current firmware.

Service provider is AT&T (Bellsouth)

DSL modem is in bridge mode.

Outside interface of 5505 is set to PPPoE with known good credentials.

I've tried CHAP and PAP authentication.

Last attempt, using MAC cloning, showed a PPPoE address of 0.0.0.0 255.255.255.255 in the client monitor in ASDM. Authentication is still set to CHAP.

I've read that AT&T does a 2-hour IP lease, so my next step is to shut down the DSL router for 2 hours and try again.

I believe PPPoE debug is still broken in this ASA version, unfortunately.

TIA

ognetadmin · ‎02-10-2009

I am troubleshooting remotely via the end-user.

ognetadmin · ‎02-10-2009

interface Ethernet0/0

nameif Outside

security-level 0

pppoe client vpdn group

ip address pppoe setroute

<--->

vpdn group request dialout pppoe

vpdn group localname

vpdn group ppp authentication chap

vpdn username password ******** store-local

ognetadmin · ‎02-10-2009

...plus this line under interface Ethernet0/0

mac-address nnnn.nnnn.nnnn

ognetadmin · ‎02-10-2009

The "known good" credentials, weren't.

Testing the new config....

ognetadmin · ‎02-10-2009

It works, using PAP authentication.

It was a bad PPPoE username.