Fortinet black logo

Handbook

PPPoE  addressing mode on an interface

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:495735
Download PDF

PPPoE addressing mode on an interface

If you configure the interface to use PPPoE, the FortiGate automatically broadcasts a PPPoE request from the interface.

FortiGate devices support many PPPoE RFC features (RFC 2516) including unnumbered IPs, initial discovery timeout and PPPoE Active Discovery Terminate (PADT).

PPPoE is only configurable in the GUI on desktop FortiGate devices. 1U FortiGate devices and up must be configured in the CLI.

To configure PPPoE - CLI:

config system interface

edit <port name>

set mode pppoe

set username <ISP username>

set password <ISP password>

set idle-timeout <seconds>

set distance <integer>

set ipunnumbered <unumbered IP>

set disc-retry-timeout <seconds>

set padt-retry-timeout <seconds>

set lcp-echo-interval <seconds>

set dns-server-override {enable | disable}

next

end

To configure PPPoE - GUI:

Configure PPPoE on an interface in Network > Interfaces. The following table describes the PPPoE status information when PPPoE is configured for an interface.

Field

Description

Status

Displays PPPoE status messages as the FortiGate connects to the PPPoE server and gets addressing information. Select Status to refresh the addressing mode status message.

The status is only displayed if you selected Edit.

Status can be any one of the following 4 messages.

Initializing

No activity.

Connecting

The interface is attempting to connect to the PPPoE server.

Connected

The interface retrieves an IP address, netmask, and other settings from the PPPoE server.

When the status is connected, PPPoE connection information is displayed.

Failed

The interface was unable to retrieve an IP address and other information from the PPPoE server.

Reconnect

Select to reconnect to the PPPoE server.

Only displayed if Status is connected.

Username

The username for the PPPoE account.

Password

The password for the PPPoE account.

Unnumbered IP

Specify the IP address for the interface. If your ISP has assigned you a block of IP addresses, use one of them. Otherwise, this IP address can be the same as the IP address of another interface or can be any IP address.

Initial Disc Timeout

Enter Initial discovery timeout. Enter the time to wait before starting to retry a PPPoE discovery.

Initial PADT Timeout

Enter Initial PPPoE Active Discovery Terminate (PADT) timeout, in seconds. Use this timeout to shut down the PPPoE session if it's idle for the specified number of seconds. PADT must be supported by your ISP. Set the Initial PADT timeout to 0 to disable.

Retrieve default gateway from server

Enable to retrieve a default gateway IP address from a PPPoE server. The default gateway is added to the static routing table.

Distance

Enter the administrative distance for the default gateway retrieved from the PPPoE server. The administrative distance, an integer from 1‑255, specifies the relative priority of a route when there are multiple routes to the same destination. A lower administrative distance indicates a more preferred route. The default distance for the default gateway is 1.

Override internal DNS

Enable to replace the DNS server IP addresses on the System DNS page with the DNS addresses retrieved from the PPPoE server.

When VDOMs are enabled, you can override the internal DNS only on the management VDOM.

PPPoE addressing mode on an interface

If you configure the interface to use PPPoE, the FortiGate automatically broadcasts a PPPoE request from the interface.

FortiGate devices support many PPPoE RFC features (RFC 2516) including unnumbered IPs, initial discovery timeout and PPPoE Active Discovery Terminate (PADT).

PPPoE is only configurable in the GUI on desktop FortiGate devices. 1U FortiGate devices and up must be configured in the CLI.

To configure PPPoE - CLI:

config system interface

edit <port name>

set mode pppoe

set username <ISP username>

set password <ISP password>

set idle-timeout <seconds>

set distance <integer>

set ipunnumbered <unumbered IP>

set disc-retry-timeout <seconds>

set padt-retry-timeout <seconds>

set lcp-echo-interval <seconds>

set dns-server-override {enable | disable}

next

end

To configure PPPoE - GUI:

Configure PPPoE on an interface in Network > Interfaces. The following table describes the PPPoE status information when PPPoE is configured for an interface.

Field

Description

Status

Displays PPPoE status messages as the FortiGate connects to the PPPoE server and gets addressing information. Select Status to refresh the addressing mode status message.

The status is only displayed if you selected Edit.

Status can be any one of the following 4 messages.

Initializing

No activity.

Connecting

The interface is attempting to connect to the PPPoE server.

Connected

The interface retrieves an IP address, netmask, and other settings from the PPPoE server.

When the status is connected, PPPoE connection information is displayed.

Failed

The interface was unable to retrieve an IP address and other information from the PPPoE server.

Reconnect

Select to reconnect to the PPPoE server.

Only displayed if Status is connected.

Username

The username for the PPPoE account.

Password

The password for the PPPoE account.

Unnumbered IP

Specify the IP address for the interface. If your ISP has assigned you a block of IP addresses, use one of them. Otherwise, this IP address can be the same as the IP address of another interface or can be any IP address.

Initial Disc Timeout

Enter Initial discovery timeout. Enter the time to wait before starting to retry a PPPoE discovery.

Initial PADT Timeout

Enter Initial PPPoE Active Discovery Terminate (PADT) timeout, in seconds. Use this timeout to shut down the PPPoE session if it's idle for the specified number of seconds. PADT must be supported by your ISP. Set the Initial PADT timeout to 0 to disable.

Retrieve default gateway from server

Enable to retrieve a default gateway IP address from a PPPoE server. The default gateway is added to the static routing table.

Distance

Enter the administrative distance for the default gateway retrieved from the PPPoE server. The administrative distance, an integer from 1‑255, specifies the relative priority of a route when there are multiple routes to the same destination. A lower administrative distance indicates a more preferred route. The default distance for the default gateway is 1.

Override internal DNS

Enable to replace the DNS server IP addresses on the System DNS page with the DNS addresses retrieved from the PPPoE server.

When VDOMs are enabled, you can override the internal DNS only on the management VDOM.