Enabling Pppoe - Cisco FirePOWER ASA 5500 series Configuration Manual

Chapter 35 Configuring the PPPoE Client

Enabling PPPoE

You must complete the configuration using the vpdn command, described in
Note
Client Username and
The PPPoE client functionality is turned off by default. To enable PPPoE, perform the following steps:
Enable the PPPoE client by entering the following command from interface configuration mode:
Step 1
hostname(config-if)# ip address pppoe [setroute]
The setroute option sets the default routes when the PPPoE client has not yet established a connection.
When using the setroute option, you cannot have a statically defined route in the configuration.
PPPoE is not supported in conjunction with DHCP because with PPPoE the IP address is assigned by
PPP. The setroute option causes a default route to be created if no default route exists. The default router
is the address of the access concentrator. The maximum transmission unit (MTU) size is automatically
set to 1492 bytes, which is the correct value to allow PPPoE transmission within an Ethernet frame.
Reenter this command to reset the DHCP lease and request a new lease.
Note
For example:
hostname(config)# interface gigabitethernet 0/0
hostname(config-if)# ip address pppoe
Specify a VPDN group for the PPPoE client to use with the following command from interface
Step 2
configuration mode (optional):
hostname(config-if)# pppoe client vpdn group grpname
grpname is the name of a VPDN group.
Note If you have multiple VPDN groups configured, and you do not specify a group with the pppoe client
vpdn group command, the security appliance may randomly choose a VPDN group. To avoid this,
specify a VPDN group.
Using PPPoE with a Fixed IP Address
You can also enable PPPoE by manually entering the IP address, using the ip address command from
interface configuration mode in the following format:
hostname(config-if)# ip address ipaddress mask pppoe
OL-10088-01
Password," before enabling PPPoE.
If PPPoE is enabled on two interfaces (such as a primary and backup interface), and you do not
configure dual ISP support (see the
then the security appliance can only send traffic through the first interface to acquire an
IP address.
"Configuring Static Route Tracking" section on page
Cisco Security Appliance Command Line Configuration Guide
Enabling PPPoE
"Configuring the PPPoE
9-3),
35-3