PPPoE Server to emulate an ISP Problem.

[nellson]

I use Palo Alto Firewalls with the PPPoE client and I now have 3 ISP's globally that are doing something with their PPPoE proposal that the Palo Alto doesn't like.

I hacked together the rp-pppoe server in my lab on a Gentoo Server. When It supplies PPPoE to my Palo, it works fine.

What I notice in the ISP's PADO packet is that it has PPPoE Tags of:

Host-Uniq: 0b67e44b
AC-Name: DG-HL-BAS-1.MAN.SE800-B2234310702536
Service-Name: wlan.sck.chntel.com
(and 84 more service names to complete the options list)

I would like to see if the Palo is having an issue with the number of Service-Name: options perhaps, so how might I inject a boat load of Service-Names:?

[nellson]

So I figured out how to add -S <service name> to the PPPoE-Server command:

Turns out the Palo Alto PANOS has an issue with PPPoE Offers with packets larger that 1464 bytes. My ISP was sending 1487 after they added a new customer with a new Service Name that pushed my working firewall in China, over the edge to no working.

The command below is 1465 bytes, and a Windows 7 laptop has no issue getting logged in and functioning, but the Palo Alto just sits there...