Any limits on the number of PPPoE interfaces?



  • Hello,

    I posted earlier in great length about my issue but I'll make this question simple.

    Is there a limit on the number of active PPPoE interfaces that can exist on pfsense? I am trying to make 3 PPPoE interfaces work but only 2 of 3 are working at a time.

    For example I have PPPoE interfaces A, B and C but at any given time only two work:

    A & B and not C
    A & C and not B
    B & C and not A

    Thank you,

    Rizwan



  • They have to have unique gateways on each, I'm guessing one of the three probably gets the same gateway as one of the other two, which makes the connection fail. Posting the mpd logs would show for sure.



  • @cmb:

    They have to have unique gateways on each, I'm guessing one of the three probably gets the same gateway as one of the other two, which makes the connection fail. Posting the mpd logs would show for sure.

    Hi Chris,

    I am not sure where to get the MPD logs because I am new to pfsense; I'm assuming its through SSH login. Let me know.

    See below for the PPP logs from STATUS > SYSTEM LOGS > PPP.

    I disabled interface "WANB" and cleared the logs; then enabled "WANB" and here is what is generated in the PPP log. Please also see attached the STATUS > INTERFACES screen captures.

    –-

    Last 200 PPP log entries
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: state change Closed –> Initial
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: Down event
    Nov 30 10:07:20 ppp: [opt1_link0] Link: DOWN event
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: LayerFinish
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: state change Closing –> Closed
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: rec'd Terminate Ack #2 (Closing)
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: LayerDown
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: SendTerminateReq #2
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Closed –> Initial
    Nov 30 10:07:20 ppp: [opt1] IPCP: Down event
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Stopped –> Closed
    Nov 30 10:07:20 ppp: [opt1] IPCP: Close event
    Nov 30 10:07:20 ppp: [opt1] Bundle: Status update: up 0 links, total bandwidth 9600 bps
    Nov 30 10:07:20 ppp: [opt1_link0] Link: Leave bundle "opt1"
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: state change Opened –> Closing
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: Close event
    Nov 30 10:07:20 ppp: [opt1_link0] Link: CLOSE event
    Nov 30 10:07:20 ppp: [opt1] Bundle: closing link "opt1_link0"…
    Nov 30 10:07:20 ppp: [opt1] Bundle: No NCPs left. Closing links…
    Nov 30 10:07:20 ppp: [opt1] IPCP: LayerFinish
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Stopping –> Stopped
    Nov 30 10:07:20 ppp: [opt1] IPCP: rec'd Terminate Ack #4 (Stopping)
    Nov 30 10:07:20 ppp: [opt1] IPCP: LayerDown
    Nov 30 10:07:20 ppp: [opt1] IPCP: SendTerminateReq #4
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Opened –> Stopping
    Nov 30 10:07:20 ppp: [opt1] IPCP: parameter negotiation failed
    Nov 30 10:07:20 ppp: [opt1] IFACE: IfaceChangeAddr() error, closing IPCP
    Nov 30 10:07:20 ppp: [opt1] IFACE: Adding IPv4 address to pppoe1 failed: File exists
    Nov 30 10:07:20 ppp: [opt1] 63.230.195.61 -> 67.40.227.237
    Nov 30 10:07:20 ppp: [opt1] IPCP: LayerUp
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Ack-Sent –> Opened
    Nov 30 10:07:20 ppp: [opt1] IPADDR 63.230.195.61
    Nov 30 10:07:20 ppp: [opt1] IPCP: rec'd Configure Ack #3 (Ack-Sent)
    Nov 30 10:07:20 ppp: [opt1] IPADDR 63.230.195.61
    Nov 30 10:07:20 ppp: [opt1] IPCP: SendConfigReq #3
    Nov 30 10:07:20 ppp: [opt1] 63.230.195.61 is OK
    Nov 30 10:07:20 ppp: [opt1] IPADDR 63.230.195.61
    Nov 30 10:07:20 ppp: [opt1] IPCP: rec'd Configure Nak #2 (Ack-Sent)
    Nov 30 10:07:20 ppp: [opt1] IPADDR 0.0.0.0
    Nov 30 10:07:20 ppp: [opt1] IPCP: SendConfigReq #2
    Nov 30 10:07:20 ppp: [opt1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
    Nov 30 10:07:20 ppp: [opt1] IPCP: rec'd Configure Reject #1 (Ack-Sent)
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Req-Sent –> Ack-Sent
    Nov 30 10:07:20 ppp: [opt1] IPADDR 67.40.227.237
    Nov 30 10:07:20 ppp: [opt1] IPCP: SendConfigAck #1
    Nov 30 10:07:20 ppp: [opt1] 67.40.227.237 is OK
    Nov 30 10:07:20 ppp: [opt1] IPADDR 67.40.227.237
    Nov 30 10:07:20 ppp: [opt1] IPCP: rec'd Configure Request #1 (Req-Sent)
    Nov 30 10:07:20 ppp: [opt1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
    Nov 30 10:07:20 ppp: [opt1] IPADDR 0.0.0.0
    Nov 30 10:07:20 ppp: [opt1] IPCP: SendConfigReq #1
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Starting –> Req-Sent
    Nov 30 10:07:20 ppp: [opt1] IPCP: Up event
    Nov 30 10:07:20 ppp: [opt1] IPCP: LayerStart
    Nov 30 10:07:20 ppp: [opt1] IPCP: state change Initial –> Starting
    Nov 30 10:07:20 ppp: [opt1] IPCP: Open event
    Nov 30 10:07:20 ppp: [opt1] Bundle: Status update: up 1 link, total bandwidth 64000 bps
    Nov 30 10:07:20 ppp: [opt1_link0] Link: Join bundle "opt1"
    Nov 30 10:07:20 ppp: [opt1_link0] Link: Matched action 'bundle "opt1" ""'
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: authorization successful
    Nov 30 10:07:20 ppp: [opt1_link0] PAP: rec'd ACK #1 len: 5
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: LayerUp
    Nov 30 10:07:20 ppp: [opt1_link0] PAP: sending REQUEST #1 len: 39
    Nov 30 10:07:20 ppp: [opt1_link0] PAP: using authname "getinetservices@qwest.net"
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: auth: peer wants PAP, I want nothing
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: state change Ack-Sent –> Opened
    Nov 30 10:07:20 ppp: [opt1_link0] MAGICNUM 2fa53bf6
    Nov 30 10:07:20 ppp: [opt1_link0] MRU 1492
    Nov 30 10:07:20 ppp: [opt1_link0] PROTOCOMP
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: rec'd Configure Ack #1 (Ack-Sent)
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: state change Req-Sent –> Ack-Sent
    Nov 30 10:07:20 ppp: [opt1_link0] MAGICNUM 28ec1965
    Nov 30 10:07:20 ppp: [opt1_link0] AUTHPROTO PAP
    Nov 30 10:07:20 ppp: [opt1_link0] MRU 1492
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: SendConfigAck #1
    Nov 30 10:07:20 ppp: [opt1_link0] MAGICNUM 28ec1965
    Nov 30 10:07:20 ppp: [opt1_link0] AUTHPROTO PAP
    Nov 30 10:07:20 ppp: [opt1_link0] MRU 1492
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: rec'd Configure Request #1 (Req-Sent)
    Nov 30 10:07:20 ppp: [opt1_link0] MAGICNUM 2fa53bf6
    Nov 30 10:07:20 ppp: [opt1_link0] MRU 1492
    Nov 30 10:07:20 ppp: [opt1_link0] PROTOCOMP
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: SendConfigReq #1
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: state change Starting –> Req-Sent
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: Up event
    Nov 30 10:07:20 ppp: [opt1_link0] Link: UP event
    Nov 30 10:07:20 ppp: [opt1_link0] PPPoE: connection successful
    Nov 30 10:07:20 ppp: PPPoE: rec'd ACNAME "phnx-dsl-gw45.phnx.qwest.net"
    Nov 30 10:07:20 ppp: [opt1_link0] PPPoE: Connecting to ''
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: LayerStart
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: state change Initial –> Starting
    Nov 30 10:07:20 ppp: [opt1_link0] LCP: Open event
    Nov 30 10:07:20 ppp: [opt1_link0] Link: OPEN event
    Nov 30 10:07:20 ppp: [opt1] Bundle: Interface ng0 created
    Nov 30 10:07:20 ppp: web: web is not running
    Nov 30 10:07:20 ppp: process 56794 started, version 5.5 (root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org 13:56 11-Aug-2011)
    Nov 30 10:07:20 ppp: 
    Nov 30 10:07:20 ppp: Multi-link PPP daemon for FreeBSD
    –-








  • @cmb:

    They have to have unique gateways on each, I'm guessing one of the three probably gets the same gateway as one of the other two, which makes the connection fail. Posting the mpd logs would show for sure.

    To research the "same gateway" issue I disabled WANA (PPPoE0 interface) and rebooted pfsense. Now WANB & WANC are working and WANB has the same GATEWAY as WANA did earlier. So it does seem like pfsense does not like having the same gateways for PPPoE interfaces. See attached image.

    I did not know that.

    Now to try to convince CenturyLink to change that for me is going to be difficult to say the least; how am I going to explain to them what I am doing since they do not support PPPoE connections? This is a business DSL; I hope they have more support for business accounts.

    Rizwan




  • You can put in an additional router in front of pfsense for one WAN connection. Then both - your pfsense and the additional router should do NAT. Than you will have different gateways.



  • @Nachtfalke:

    You can put in an additional router in front of pfsense for one WAN connection. Then both - your pfsense and the additional router should do NAT. Than you will have different gateways.

    Hi,

    Well I am doing PPPoE so that I can eliminate a layer of NAT that is on the DSL modem. Putting an additional router defeats the purpose…



  • Any good DSL modem will let you do the PPPoE on it and passthrough the public IP via DHCP to the firewall. Though I have had luck in the past asking the ISP to put each connection on a separate gateway, at least for business class connections where they're assigning static IPs via PPPoE.


  • Rebel Alliance Developer Netgate

    We have also patched mpd to allow the same gateway on multiple interfaces in future versions and it's confirmed to work to allow this. It only works due to the nature of how PPP interfaces in general operate. So in the future you should be able to use this directly.



  • well im not trying to get back the values. i just dont want other people to be able to

    so maybe i should change values in the rng every round, and seed it every round, and only use 1 output number?


Log in to reply