VPN Configurator - IP for PPPoE WAN

Options
GiuseppeR
GiuseppeR Posts: 581 image  Master Member
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
in Nebula

Hello everyone,

as you can see when you add a PPPoE connection for WAN1 (in my case it is GE1_PPP because of it is a PPPoE for a ge1 inside a H Flex series FW) the system records 2 different IPs:

immagine.png

It is strange because the only IP the firewall should see is the IP from PPPoE login/password

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,367 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @GiuseppeR

    This is more likely your GE1 interface (not GE1_PPP) Address Assignment is configured use "Get Automatically (DHCP)". Please help to change to unassigned. Thanks.

    Zyxel Melen


  • GiuseppeR
    GiuseppeR Posts: 581 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hi @Zyxel_Melen

    yes it is so, because I did not know which was the IP assigned to my PPPoE WAN and if the IP could change in the future (it shouldn't). When I set the ge1_PPP it did not ask for the static IP, so I thought it could get it automatically updating also ge1 interface.

    Should I copy that IP value into ge1 interface?

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,367 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @GiuseppeR

    In your case, the ISP also accept DHCP discovery even the firewall doesn't negotiate with PPPoE. What we recommend is:

    1. You don't need to copy anything to ge1 interface.
    2. Please change ge1 interface to unassigned since the main interface should be ge1_PPP.
    Zyxel Melen


  • GiuseppeR
    GiuseppeR Posts: 581 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
    edited December 2025

    Hi @Zyxel_Melen

    I tried to select "Unassigned" without reconfiguring PPPoE but Nebula shows errors:

    immagine.png

    Have I to erase VLAN value?

    Of course VLAN for ge1 is the same of ge1_PPP as you can see blu values starting with 8xx:

    immagine.png
  • Zyxel_Melen
    Zyxel_Melen Posts: 4,367 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @GiuseppeR

    This is an issue on Nebula, which is being processed for a fix.

    Could you help use the device's local GUI to set unassigned for this interface?

    Zyxel Melen


  • GiuseppeR
    GiuseppeR Posts: 581 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hi @Zyxel_Melen

    I looked into VPN configurator and I see this situation:

    immagine.png

    As you can see I have the red IP 2.x.x.x into ge1 and ge2 on first firewall.

    Same situation on ge1 on second firewall.

    Same situation on ge1 on third firewall.

    That IP is NOT linked anymore to any of those firewalls, also because in this moment first firewall has only ge1 PPPoE active, while the second and the third one have only the ge2 active.

    Is this Nebula issue linked to that situation too?

    Are the firewalls remembering last IP config also if that IP config was in DHCP?

    I would like to leave these connections in DHCP, to be available for quick access if someone decides to plugin an emergency router: reverting to "Unassigned" will disable them, right?

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,367 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @GiuseppeR

    Let me send you a private message to get the detailed info to check this issue.

    Zyxel Melen


  • GiuseppeR
    GiuseppeR Posts: 581 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hi @Zyxel_Melen

    Sent details via PM, with priviledges to that ORG.

    Please consider that this post is linked to the same ORG with another issue that I have posted on this forum:

    https://community.zyxel.com/en/discussion/31837/multiple-unknown-clients-via-vpn-listed-inside-another-fw-clients-list

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）