topic SSL-VPN gateway problem on PPPoE enabled interface in General Topics

SSL-VPN gateway problem on PPPoE enabled interface

migration — Thu, 12 Aug 2010 19:59:50 GMT

Hi,

I have a PAN behind the ADSL modem. ADSL modem is configured in bridge mode.

I configured ethernet1/6 interface to get IP address via PPPoE with a static IP address specification.

But I see the IP address of this interface as dynamic (PPPoE).

When I want to configure SSL-VPN, I can't select etherne1/6 as a gateway interface

How can I solve this problem? Why does PAN consider IP address as dynamic (PPPoE) with a static IP configuration?

Thanks.

Re: SSL-VPN gateway problem on PPPoE enabled interface

jnguyen — Fri, 13 Aug 2010 18:10:04 GMT

in the advance settings there should be an area to set up static ip address for pppoe, if this is configured and you still see the palo alto device showing dynamic please call into support to further investigate.

Re: SSL-VPN gateway problem on PPPoE enabled interface

migration — Fri, 13 Aug 2010 21:08:01 GMT

Hi,

I opened a ticket about this issue.

I will keep the pan community updated.

Thanks.

Re: SSL-VPN gateway problem on PPPoE enabled interface

migration — Fri, 13 Aug 2010 21:17:13 GMT

Hi again,

I made a workaround by configuring an interface1/2 in trust zone as a gateway of SSL-VPN.

And I create a destination NAT for port 8443 on untrust ethernet1 to ethernet1/2 port 443

and create a source NAT for trust zone.

Then I can able to access my internal network. But i think this is not a good solution. I should be able to create a ssl-vpn directly on untrust interface.

Thanks.

Re: SSL-VPN gateway problem on PPPoE enabled interface

migration — Tue, 31 Aug 2010 05:22:50 GMT

I created a ticket about this issue.

Engineering said that SSL-VPN on PPPoE interface is not supported.

Just, I wanted to inform the community.

Thanks.