Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX PPPOE Question

I am planning on setting up a PIX 501 for PPPOE and have run into a couple questions. I am looking at documentation at http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_configuration_example09186a00801055dd.shtml

The reason I wanted PPPOE setup is that the modem my DSL provider supplied won't pass through the traffic to setup VPN on the PIX device. The option they give is that you can setup the DSL Modem as a transparent bridge and then setup the router with PPPOE or PPPOA to authenticate instead of using the modem.

In looking at the link I provided there is a line, "PIX OS versions 6.2 and 6.3

do not support Layer 2 Tunneling Protocol (L2TP) and Point−to−Point Tunneling Protocol (PPTP) with

PPPoE." Does this mean I couldn't setup VPN if I setup PPPOE on the Pix 501? Also for PPPOE you need a group name. I have a username and password but not a group name that I see. Is that something the ISP would have or just something I make up?

5 REPLIES
New Member

Re: PIX PPPOE Question

I have a PIX 501 with a verizon provided Westel DSL modem. I am required to use PPPOE and use the PIX for remote VPN access. I have a dynamic IP addres so I use DYNDNS.com and a domain name for VPN connections.

You need a username and password. Here is an example of my confguration. I am running OS 6.3(5).

ip address outside pppoe setroute

vpdn group pppoex request dialout pppoe

vpdn group pppoex localname namexxx

vpdn group pppoex ppp authentication pap

vpdn username namexxx password *********

HTHs

Curt

Gold

Re: PIX PPPOE Question

vpdn group pppoe_group request dialout pppoe

vpdn group pppoe_group localname company@static.bigpond

vpdn group pppoe_group ppp authentication chap

vpdn username company@static.bigpond password *********

the group name "pppoe_group" is only local significant, thus you can create whatever you prefer.

with pppoe running on the pix, i'm not sure about l2tp and pptp, but for sure ipsec does work.

New Member

Re: PIX PPPOE Question

I've got a pretty much identical configuration (authentication is pap on mine) trying to connect to a Verizon DSL connection and I can't get the interface to come up. When you do a show vpdn session I get:

PPPoE Session Information (Total tunnels=1 sessions=0)

Remote MAC is 00:00:00:00:00:00

Session state is PADI_SENT

Time since event change 755 secs, interface outside

0 packets sent, 0 received, 0 bytes sent, 0 received

Any ideas on where I'm going wrong?

Thanks,

Jim

Gold

Re: PIX PPPOE Question

just wondering if the outside interface is configured for pppoe as well.

e.g.

ip address outside pppoe setroute

New Member

Re: PIX PPPOE Question

I had several sites using SBC DSL and terminated the PPPoE connections on the PIX (501). They also were able to use PPTP on the PIX as well without issue...

436
Views
0
Helpful
5
Replies
CreatePlease login to create content