topic Re: Firepower 2110 - PPPOE in Network Security

Firepower 2110 - PPPOE

Xividar — Wed, 18 Mar 2020 14:56:53 GMT

Hi all,

I have just booted up my FirePower 2110 Appliance, on my WAN interface, I can't seem to find anything with regards to PPPOE authentiation, is this a supported feature?

Thank you.

Re: Firepower 2110 - PPPOE

Cristian Matei — Wed, 18 Mar 2020 15:08:01 GMT

Hi,

When you configure/edit the physical interface, for IPv4 for example, under IPv4 choose "PPPoE" and you should see the authentication parameters, see attached:

Re: Firepower 2110 - PPPOE

Xividar — Wed, 18 Mar 2020 15:44:32 GMT

Hi Christian,

I'm using On Box Management, so my GUI looks nothing like that?

Cheers

Re: Firepower 2110 - PPPOE

Xividar — Wed, 18 Mar 2020 18:24:22 GMT

Okay, going to use a DIA, so no PPPOE to worry about. I'm using sub interface on the core side, however, I can't get ICMP to the PE. Laptop with VLAN tagging worked fine.

interface Ethernet1/1

nameif outside

cts manual

propagate sgt preserve-untag

policy static sgt disabled trusted

security-level 0

no ip address

interface Ethernet1/1.3061

vlan 3061

nameif outside_sub

cts manual

propagate sgt preserve-untag

policy static sgt disabled trusted

security-level 0

ip address x.x.x.x 255.255.255.248

Re: Firepower 2110 - PPPOE

Marius Gunnerud — Thu, 19 Mar 2020 20:14:45 GMT

Are you trying to ping from the Firepower 2110 device to the PE or from a client behind the device to the PE? If from a client, have you checked if inspect icmp is configured on the policy-map on the device? If you are pinging from the Firepower device check the port configuration on the switch it is connected to. Make sure it is a trunk port and that VLAN 3061 is allowed on the trunk.