topic PAN-OS 10.2 PPPoE on Layer 3 Sub-Interface? in General Topics

PAN-OS 10.2 PPPoE on Layer 3 Sub-Interface?

ClimbingColorado — Wed, 25 Oct 2023 03:24:37 GMT

Is there any way to get PPPoE working on a Layer 3 sub-interface in Pan-OS v10.2? I recently purchased a PA-220 for personal/study use. My ISP, Century Link, provides Internet access via VLAN 201/PPPoE. I'm currently running an ASA 5506 at the edge, which handles this configuration just fine. I'd like to swap it for the PA-220 but it seems like this capability isn't (officially?) supported pre Pan-OS v11. I'm hoping there's some kind of work around since the PA-220 can't run Pan-OS 11...

Thanks in advance,

Rob

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-networking-admin/configure-interfaces/configure-a-pppoe-client-on-a-subinterface

Re: PAN-OS 10.2 PPPoE on Layer 3 Sub-Interface?

JayGolf — Wed, 25 Oct 2023 05:30:37 GMT

Hi @ClimbingColorado ,

Unfortunately, there is no other workaround other than to upgrade to a PA-410. It looks like there was a feature request placed a while back, but there was no traction for it.

Re: PAN-OS 10.2 PPPoE on Layer 3 Sub-Interface?

zkay — Sun, 14 Jul 2024 21:00:11 GMT

Im surprised no one here mentioned it, and it certainly isn’t perfect, but you can use a managed switch to tag vlan 201 on an uplink to your ISP and then use an untagged port in vlan 201 for the uplink to your Palo. Pretty easy way to strip off the 802.1q tag. Just make sure no other devices are in vlan 201 and never put an IP on your switch in vlan 201.