Pkt dump: 03060b0b0b02IPCP Opti<strong>on</strong>: C<strong>on</strong>fig IP, IP = 11.11.11.1Xmit IP C<strong>on</strong>trol Protocol pkt, Acti<strong>on</strong> code is: C<strong>on</strong>fig Request, len is: 6Pkt dump: 03060b0b0b02IPCP Opti<strong>on</strong>: C<strong>on</strong>fig IP, IP = 11.11.11.1PPP xmit, ifc = 0, len: 14 data: ff0380210102000a03060b0b0b02PPP rcvd, ifc = 0, pppdev: 1, len: 42, data:ff0380210202000a03060b0b0b0200000000000000000000000000000000000000000000000000000000Rcvd IP C<strong>on</strong>trol Protocol pkt, Acti<strong>on</strong> code is: C<strong>on</strong>fig ACK, len is: 6Pkt dump: 03060b0b0b02IPCP Opti<strong>on</strong>: C<strong>on</strong>fig IP, IP = 11.11.11.1PPP rcvd, ifc = 0, pppdev: 1, len: 42, data:ff03c0210901000c59f4cf2501592b7e0000000000000000000000000000000000000000000000000000Rcvd Link C<strong>on</strong>trol Protocol pkt, Acti<strong>on</strong> code is: Echo Request, len is: 8Pkt dump: 59f4cf2501592b7eXmit Link C<strong>on</strong>trol Protocol pkt, Acti<strong>on</strong> code is: Echo Reply, len is: 8Pkt dump: 3ff50e1801592b7ePPP xmit, ifc = 0, len: 16 data: ff03c0210a01000c3ff50e1801592b7eXmit Link C<strong>on</strong>trol Protocol pkt, Acti<strong>on</strong> code is: Echo Request, len is: 4Pkt dump: 3ff50e18PPP xmit, ifc = 0, len: 12 data: ff03c021090100083ff50e18PPP rcvd, ifc = 0, pppdev: 1, len: 42, data:ff03c0210a01000859f4cf25000000000000000000000000000000000000000000000000000000000000Rcvd Link C<strong>on</strong>trol Protocol pkt, Acti<strong>on</strong> code is: Echo Reply, len is: 4Pkt dump: 59f4cf25Known Caveats in <strong>PIX</strong> OS Versi<strong>on</strong> 6.2 and 6.3• If <str<strong>on</strong>g>the</str<strong>on</strong>g> default route is already c<strong>on</strong>figured, <strong>PIX</strong> does not establish <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> because it cannotoverwrite <str<strong>on</strong>g>the</str<strong>on</strong>g> existing default route with <str<strong>on</strong>g>the</str<strong>on</strong>g> supplied default route from <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g>. If you wish to use <str<strong>on</strong>g>the</str<strong>on</strong>g>default route from <str<strong>on</strong>g>the</str<strong>on</strong>g> server (setroute opti<strong>on</strong>), <str<strong>on</strong>g>the</str<strong>on</strong>g> user needs to erase <str<strong>on</strong>g>the</str<strong>on</strong>g> default route <strong>on</strong> <str<strong>on</strong>g>the</str<strong>on</strong>g>c<strong>on</strong>figurati<strong>on</strong>.• One defined username and <strong>on</strong>e <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> server <strong>on</strong>ly.Known Caveats in <strong>PIX</strong> OS Versi<strong>on</strong> 6.3• When <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> and OSPF are enabled and write memory is performed after an IP address is retrieved,<str<strong>on</strong>g>the</str<strong>on</strong>g> downloaded default route via <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> or DHCP is saved to <str<strong>on</strong>g>the</str<strong>on</strong>g> c<strong>on</strong>figurati<strong>on</strong>. The workaround is toperform write memory before <str<strong>on</strong>g>the</str<strong>on</strong>g> address is downloaded from <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> server.• The <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> setroute opti<strong>on</strong>, used to generate a default route, is not compatible with <str<strong>on</strong>g>the</str<strong>on</strong>g> OSPFdynamic routing protocol <strong>on</strong> <str<strong>on</strong>g>the</str<strong>on</strong>g> <strong>PIX</strong> firewall. The <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> generated default route is removed from <str<strong>on</strong>g>the</str<strong>on</strong>g>routing table when <str<strong>on</strong>g>the</str<strong>on</strong>g> "network" statement is c<strong>on</strong>figured under <str<strong>on</strong>g>the</str<strong>on</strong>g> OSPF process. The workaround isto use static routes.<str<strong>on</strong>g>Cisco</str<strong>on</strong>g> − <str<strong>on</strong>g>C<strong>on</strong>figuring</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> <str<strong>on</strong>g>Client</str<strong>on</strong>g> <strong>on</strong> a <str<strong>on</strong>g>Cisco</str<strong>on</strong>g> <strong>Secure</strong> <strong>PIX</strong> <strong>Firewall</strong>
NetPro Discussi<strong>on</strong> Forums − Featured C<strong>on</strong>versati<strong>on</strong>sNetworking Professi<strong>on</strong>als C<strong>on</strong>necti<strong>on</strong> is a forum for networking professi<strong>on</strong>als to share questi<strong>on</strong>s, suggesti<strong>on</strong>s,and informati<strong>on</strong> about networking soluti<strong>on</strong>s, products, and technologies. The featured links are some of <str<strong>on</strong>g>the</str<strong>on</strong>g>most recent c<strong>on</strong>versati<strong>on</strong>s available in this technology.NetPro Discussi<strong>on</strong> Forums − Featured C<strong>on</strong>versati<strong>on</strong>s for SecuritySecurity: Intrusi<strong>on</strong> Detecti<strong>on</strong> [Systems]Security: AAASecurity: GeneralSecurity: <strong>Firewall</strong>ingRelated Informati<strong>on</strong>• Using <strong>PIX</strong> <strong>Firewall</strong> in SOHO Networks• <strong>PIX</strong> Support Page• Documentati<strong>on</strong> for <strong>PIX</strong> <strong>Firewall</strong>• <strong>PIX</strong> Command Reference• Requests for Comments (RFCs)• Technical Support − <str<strong>on</strong>g>Cisco</str<strong>on</strong>g> SystemsAll c<strong>on</strong>tents are Copyright © 1992−2004 <str<strong>on</strong>g>Cisco</str<strong>on</strong>g> Systems, Inc. All rights reserved. Important Notices and Privacy Statement.Updated: Nov 01, 2004 Document ID: 22855<str<strong>on</strong>g>Cisco</str<strong>on</strong>g> − <str<strong>on</strong>g>C<strong>on</strong>figuring</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>PPPoE</str<strong>on</strong>g> <str<strong>on</strong>g>Client</str<strong>on</strong>g> <strong>on</strong> a <str<strong>on</strong>g>Cisco</str<strong>on</strong>g> <strong>Secure</strong> <strong>PIX</strong> <strong>Firewall</strong>