topic PPPoE Support on a Subinterface (VDSL VLAN Tagging) in General Topics

PPPoE Support on a Subinterface (VDSL VLAN Tagging)

ADK999 — Wed, 10 Apr 2019 08:47:39 GMT

here there,

little question: any known plan's to support PPPoE on a subinterface?

reason:

since fiber to the building (FTTB) isn't something usual over here, we are stuck with xDSL (FTTC) for the years to come.

and this is where we have a problem with our pa2x0 installations right now, because pan-os doesn't support PPPoE on a subinterface (a common thing with VDSL).

right now there are 4 possible solutions for this missing feature (as far as i know)

1) waste a few interfaces (http://www.limvuihan.com/2018/06/palo-alto-pppoe-with-vlan-tag-its.html)

2) let a switch do the tagging (kinda like 1)

3) get a xdsl modem that is able to do the tagging

4) get a router that does all the internet connection stuff (downside: public ip is on the routers side and one more nat router-> pa)

all those workarounds are kinda meeee... with 3 being the most common one, but this also includes the need to configure the vlan tag on the modems side (different vlan tags depending on the isp)

thanks in advance,

andy

Re: PPPoE Support on a Subinterface (VDSL VLAN Tagging)

reaper — Wed, 10 Apr 2019 12:44:32 GMT

hi @ADK999 (Andy)

there's a feature request for this: FR ID: 3183

if you reach out to your sales team, you can have them add your vote and then they can keep you posted on any news regarding this

Re: PPPoE Support on a Subinterface (VDSL VLAN Tagging)

greg_murphy — Fri, 27 Sep 2019 17:15:16 GMT

I voted for this feature request: FR ID: 3183 with my sales manager 2 or 3 years ago. I would really like to use a Palo Alto for my use case but I couldn't wait. It seems like a simple enough request for a common issue. If Network Engineers have to use a different solution when configuring VDSL they may find that other solution acceptable for their other use cases as well. I see potential in not addresses this request leading to lost business.

Scenario:

A business with branch offices in areas where the only option is VDSL have to use a firewall at that branch that isn't a PA. The business makes a decision to standardize on one platform. At this point PA is out of the running. To standardize all the firewalls would be a vendor other than PAN.

Re: PPPoE Support on a Subinterface (VDSL VLAN Tagging)

HolgerKrause — Fri, 20 Mar 2020 21:40:24 GMT

Hi,

is still the same situation? I am also facing this issue and all soloutions so far are not really satisfying. Thanks.

Re: PPPoE Support on a Subinterface (VDSL VLAN Tagging)

ADK999 — Sun, 22 Mar 2020 11:41:44 GMT

hey holger,

nothing changed. it's one of the things where pan is a bit out of touch with reality, also ipv6 dhcp client on a interface is to new...

i migrated the small office branches partial to sophos and if not possible to paloalto and a draytek vigor 165 vdsl modem.

servus,

andy

Re: PPPoE Support on a Subinterface (VDSL VLAN Tagging)

JH123 — Mon, 18 Jul 2022 12:47:30 GMT

3 years later, still no vlan tagging + PPPoE possible on a Palo Alto. 😞

Re: PPPoE Support on a Subinterface (VDSL VLAN Tagging)

scott.laws — Mon, 24 Oct 2022 14:25:06 GMT

Disappointing for sure, most of Bell Canada fiber to the premise is PPPoE over VLAN35, Bell Multicast over VLAN36... Basically unable to use a brand new PA-460.

Edit: potential work around? Will give this a try...

https://www.bitstrom.nl/post/paloalto-pppoe/

Re: PPPoE Support on a Subinterface (VDSL VLAN Tagging)

bgre033 — Tue, 04 Apr 2023 02:49:33 GMT

I'll post an update here as it's the first search result, but it looks like this feature is available from PAN-OS 11.0.

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/features-introduced-in-pan-os/networking-features#idf9feab55-ad90-46a0-ad3e-9297409b1c28