topic Re: PANOS 9.0 DDNS PPPoE in General Topics

PANOS 9.0 DDNS PPPoE

Marc_T — Sat, 23 Mar 2019 18:23:57 GMT

Hi.

Can anyone tell me if they have had any sucess using the DDNS feature in PAN OS v 9.0 when using a PPPoE connection.

The only option I have is DHCP and this throws an error when commiting the rule base to the firewall, looking at the runtime stats there is no ip information.

Re: PANOS 9.0 DDNS PPPoE

BizBo — Mon, 25 Mar 2019 10:27:58 GMT

Hi, I have got it to work. Make sure you have the correct cert from the DDNS provider. I public IP is provided by DHCP by my ISP.

Darren

Re: PANOS 9.0 DDNS PPPoE

Marc_T — Mon, 25 Mar 2019 10:40:38 GMT

That seems to be the issue, I do not get an IP via DHCP from the interface directly when connecting to the CPE, I have to initiate a PPPOE connection which does not seem to pass the IP address back unless I have a configuration error somehwere.

Can you share some of your configuration, I have tried both NO-IP as well as DuckDNS

Re: PANOS 9.0 DDNS PPPoE

BizBo — Tue, 26 Mar 2019 13:00:37 GMT

which part?

I get the DHCP from my ISP or the DDNS config?

Re: PANOS 9.0 DDNS PPPoE

Marc_T — Tue, 26 Mar 2019 13:07:12 GMT

I would be interested to know which DDNS provier you are using and the required certs, it would help with with a known workling config to ensure I have that setup correctly before I run down other rabbit holes.

Many Thanks

Re: PANOS 9.0 DDNS PPPoE

Marc_T — Sun, 31 Mar 2019 10:21:29 GMT

It would appear that PPPoE interface connections are not supported for the DDNS configuration.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/dynamic-dns-overview.html

Re: PANOS 9.0 DDNS PPPoE

rmcrae — Mon, 02 Mar 2020 00:37:14 GMT

This is unfortunate. It would seem that it should be something that can technically be supported and other lesser FWs do support it. A PPPoE assigned IP address basically a DHCP address with authentication. This seems like it was intentionally decided to not support this configuration.

Another issue I've noticed is with Policy Based Forwarding. If your Egress interface is assigned a dynamic IP (DHCP or PPPoE) then you can't select that as an next hop address. You have to assign it a static address for the hop. Lets just hope the ISP doesn't assign an new IP address with different next hop address for people in this situation.