VPN Configurator - IP for PPPoE WAN

GiuseppeR

Hello everyone,

as you can see when you add a PPPoE connection for WAN1 (in my case it is GE1_PPP because of it is a PPPoE for a ge1 inside a H Flex series FW) the system records 2 different IPs:

It is strange because the only IP the firewall should see is the IP from PPPoE login/password

Zyxel_Melen

Hi @GiuseppeR

This is more likely your GE1 interface (not GE1_PPP) Address Assignment is configured use "Get Automatically (DHCP)". Please help to change to unassigned. Thanks.

GiuseppeR

Hi @Zyxel_Melen

yes it is so, because I did not know which was the IP assigned to my PPPoE WAN and if the IP could change in the future (it shouldn't). When I set the ge1_PPP it did not ask for the static IP, so I thought it could get it automatically updating also ge1 interface.

Should I copy that IP value into ge1 interface?

Zyxel_Melen

Hi @GiuseppeR

In your case, the ISP also accept DHCP discovery even the firewall doesn't negotiate with PPPoE. What we recommend is:

1. You don't need to copy anything to ge1 interface.
2. Please change ge1 interface to unassigned since the main interface should be ge1_PPP.

GiuseppeR

Hi @Zyxel_Melen

I tried to select "Unassigned" without reconfiguring PPPoE but Nebula shows errors:

Have I to erase VLAN value?

Of course VLAN for ge1 is the same of ge1_PPP as you can see blu values starting with 8xx:

Zyxel_Melen

Hi @GiuseppeR

This is an issue on Nebula, which is being processed for a fix.

Could you help use the device's local GUI to set unassigned for this interface?

GiuseppeR

Hi @Zyxel_Melen

I looked into VPN configurator and I see this situation:

As you can see I have the red IP 2.x.x.x into ge1 and ge2 on first firewall.

Same situation on ge1 on second firewall.

Same situation on ge1 on third firewall.

That IP is NOT linked anymore to any of those firewalls, also because in this moment first firewall has only ge1 PPPoE active, while the second and the third one have only the ge2 active.

Is this Nebula issue linked to that situation too?

Are the firewalls remembering last IP config also if that IP config was in DHCP?

I would like to leave these connections in DHCP, to be available for quick access if someone decides to plugin an emergency router: reverting to "Unassigned" will disable them, right?

Zyxel_Melen

Hi @GiuseppeR

Let me send you a private message to get the detailed info to check this issue.

GiuseppeR

Hi @Zyxel_Melen

Sent details via PM, with priviledges to that ORG.

Please consider that this post is linked to the same ORG with another issue that I have posted on this forum:

https://community.zyxel.com/en/discussion/31837/multiple-unknown-clients-via-vpn-listed-inside-another-fw-clients-list