Configure a PPPoE Client on a Subinterface (Strata Cloud Manager)

1. Create the sub-interface.

   1. Select ConfigurationNGFW and Prisma AccessDeviceInterfacesEthernet.
   2. Select an existing Layer 3 Ethernet interface and Add Sub Interface.
   3. (Mandatory) To the right of the Interface Name, enter the subinterface number.
   4. Enter the Tag provided by your ISP. This is the actual VLAN tag ID used to encapsulate and decapsulate traffic sent to the ISP network.
   5. Assign the interface to a Logical Router and a Zone.

2. Configure IPv4 PPPoE settings.

   1. Select IPv4.
   2. Set the Type to PPPoE. Use this setting when your ISP indicates that PPPoE over 802.1Q VLAN is required for internet access.
   3. Select Enable to activate the subinterface.
   4. (Mandatory) Enter the Username and Password (and Confirm Password) provided by your ISP. You must provide these credentials to successfully authenticate with the PPPoE server.

3. Configure Advanced Settings.

   1. Select Advanced Settings.
   2. Choose the Authentication method: Password Authentication Protocol (PAP) (default), Challenge Handshake Authentication Protocol (CHAP), or auto select CHAP or PAP.

      • PAP—Sends credentials in plain text and is considered less secure than CHAP.
      • CHAP—Provides a more secure authentication method.
      • auto select CHAP or PAP—Allows the firewall to negotiate the best available method with the PPPoE server.
   3. (Optional) To request that the PPPoE server assign a specific IPv4 address to this subinterface, specify a Static Address. The server may assign this requested address or a different one at its discretion.
   4. Set the Default Route Metric (default is 10). This value must be a non-negative integer and determines the priority of the route; a lower number signifies a higher priority during route selection.
   5. (Optional) Enter the Access Concentrator or Service name provided by your ISP to ensure the firewall connects to the correct server. These fields have a limit of 255 characters.
   6. Enable Passive mode if you want the firewall to wait for the PPPoE server to initiate the session. If this is not selected, the firewall is permitted to initiate the connection itself.
4. Save and push your changes.

   1. Select Save.
   2. Push Config to commit and push the updates to your firewalls.