Cisco - Configuring the PPPoE Client on a Cisco Secure PIX Firewall

<strong>Configuring</strong> <strong>the</strong> <strong>PPPoE</strong> <strong>Client</strong> on a <strong>Cisco</strong> SecurePIX FirewallDocument ID: 22855IntroductionPrerequisitesRequirementsComponents UsedConventionsConfigureNetwork DiagramConfigurationsVerifyTroubleshootTroubleshooting InformationTroubleshooting CommandsKnown Caveats in PIX OS Version 6.2 and 6.3Known Caveats in PIX OS Version 6.3NetPro Discussion Forums − Featured ConversationsRelated InformationIntroductionThis document describes how to configure <strong>the</strong> PPP over E<strong>the</strong>rnet (<strong>PPPoE</strong>) <strong>Client</strong> on <strong>the</strong> <strong>Cisco</strong> Secure PIXFirewall. This function was introduced with PIX OS version 6.2 and is targeted for <strong>the</strong> low−end PIX(501/506). Currently, it is only supported on <strong>the</strong> outside interface of <strong>the</strong> PIX. Once <strong>the</strong> configuration is also on<strong>the</strong> outside interface, all traffic will be encapsulated with <strong>PPPoE</strong>/PPP headers. The default au<strong>the</strong>nticationmechanism for <strong>PPPoE</strong> is Password Au<strong>the</strong>ntication Protocol (PAP). The user has <strong>the</strong> option to configureChallenge Handshake Au<strong>the</strong>ntication Protocol (CHAP) or MS−CHAP manually. Layer 2 Tunneling Protocol(L2TP) and Point−to−Point Tunneling Protocol (PPTP) are not supported with <strong>PPPoE</strong> in PIX OS version 6.2and 6.3.PrerequisitesRequirementsThere are no specific requirements for this document.Components UsedThe information in this document is based on <strong>the</strong>se software and hardware versions:• PIX 501 with PIX OS version 6.3(4)• <strong>Cisco</strong> 1721 router with <strong>Cisco</strong> IOS® Software Release 12.3(10) configured as a <strong>PPPoE</strong> serverThe information in this document was created from <strong>the</strong> devices in a specific lab environment. All of <strong>the</strong>devices used in this document started with a cleared (default) configuration. If your network is live, make surethat you understand <strong>the</strong> potential impact of any command.<strong>Cisco</strong> − <strong>Configuring</strong> <strong>the</strong> <strong>PPPoE</strong> <strong>Client</strong> on a <strong>Cisco</strong> Secure PIX Firewall