interesting PPPoE Problem

[vertical]

Hi guys,

i am currently tasked to replace two firewalls we have in the company. The first is a small cisco ASA 5505 for client breakout and a MS TMG(yeah i hate,too) for publishing the Servers.

For the first step I am trying to replace the ASA. WAN connection is established via ADSL and PPPoE. The session is build just fine, traffic is allowed via accessrules and nat'ed correctly, but I just don't can't ping 8.8.8.8 or get any other traffic responses.

Something I've noticed so far is that our ASA always gets an IP from the 84.x.x.x - 86.x.x.x public ip range. The PA received ip like 188.110.x.x or 92.75.x.x. After the PA established the PPPoE Session i checked if it received the default route via CLI and it was there, NAT is source NAT+PAT of course. All interfaces are added in the virtual router and the correct access list has been hit, so i am quite clueless why it is so difficult to get the wan connection working. The other frustrating point is that i have very limited time windows for testing.

I'm grateful for ideas to solve this issue

Here are some screens from the log.

.

[panos]

better talk with isp seems to be wrong password

[mbutt]

Hi Vertical,

Like panos said you might want to talk to ISP. From the logs it seems like the pppoe connection is not being setup and everything is being dropped. Once the password and user name is confirmed than we will be able to move forward. Also in the mean time if you think you can not verify password with ISP then seutp a connection on laptop and see if the existing password and connection works. If it works then there might be something wrong with the firewall and you might need to open a support case. But make sure you validate the user name and password by setting up it on a laptop.

Hope this helps narrow down the issue.

Thanks

Numan

[vertical · Accepted solution]

Hi Guys,

i talked with the ISP and had them reset the password. This was the root cause as it now works as expected.