PAN-OS 10.2 PPPoE on Layer 3 Sub-Interface?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

PAN-OS 10.2 PPPoE on Layer 3 Sub-Interface?

L1 Bithead

Is there any way to get PPPoE working on a Layer 3 sub-interface in Pan-OS v10.2?  I recently purchased a PA-220 for personal/study use.  My ISP, Century Link, provides Internet access via VLAN 201/PPPoE.  I'm currently running an ASA 5506 at the edge, which handles this configuration just fine.  I'd like to swap it for the PA-220 but it seems like this capability isn't (officially?) supported pre Pan-OS v11.  I'm hoping there's some kind of work around since the PA-220 can't run Pan-OS 11...

 

Thanks in advance,

 

Rob

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-networking-admin/configure-interfaces/configure...

1 accepted solution

Accepted Solutions

Community Team Member

Hi @ClimbingColorado ,

 

Unfortunately, there is no other workaround other than to upgrade to a PA-410. It looks like there was a feature request placed a while back, but there was no traction for it. 

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

View solution in original post

2 REPLIES 2

Community Team Member

Hi @ClimbingColorado ,

 

Unfortunately, there is no other workaround other than to upgrade to a PA-410. It looks like there was a feature request placed a while back, but there was no traction for it. 

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

L0 Member

Im surprised no one here mentioned it, and it certainly isn’t perfect, but you can use a managed switch to tag vlan 201 on an uplink to your ISP and then use an untagged port in vlan 201 for the uplink to your Palo. Pretty easy way to strip off the 802.1q tag. Just make sure no other devices are in vlan 201 and never put an IP on your switch in vlan 201. 

  • 1 accepted solution
  • 992 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!