Link to home
Start Free TrialLog in
Avatar of matt
mattFlag for United States of America

asked on

Configure Juniper SSG5 for PPPOE with bellsouth router

I have a SSG5 juniper router and a Bellsouth Motorola DSL Wifi router. Bellsouth tells me it is running PPPOE for internet authentication and I need to put it in Ethernet Bridged mode to pass the internet traffic through the Juniper. I have the phone line into the DSL router (obviously), the ethernet line into eth0/0 on the Juniper and then eth0/2 (Trusted Zone) plugged into the switch.
Bellsouth geve me the steps to put the router in bridged mode, I did those. I configured a PPPOE name for the Juniper connection and once the router was in bridged mode the firewall did get the bellsouth IP address, it auto assigned a route from 0.0.0.0 to a public gateway 72.x.x.x, and the PPPOE connection said connected....
No internet access?
I added a blanket policy from untrust to trust ANY/ANY and trust to untrust ANY/ANY
Still no internet?
There was a PPPOE time out message in the event screen, I think it said PADI time out... I think it was PADI? fuzzy on that message.
I called juniper and they told me the router was PPPOA and I needed an ADSL firewall (SSG20). I have spoken to bellsouth again and they said it was in fact PPPOE. what can I look for to tell who is right/wrong, and get this internet connection working? If more info is needed just let me know what is needed and I will give it a shot.
Avatar of rfc1180
rfc1180
Flag of United States of America image

How was the Bellsouth modem configured before (PPPoE?), if so, then the SSG5 will need to be configured with a PPPoE Client and the Bellsouth modem configured in bridge mode. You will find that if Bellsouth has explained the auth is via PPPoE I would take their word for it (You can always escalate the issue with s supervisor).

However,

bellsouth IP address, it auto assigned a route from 0.0.0.0 to a public gateway 72.x.x.x, and the PPPOE connection said connected....
No internet access?

Authentication is working; are you able to post the config for the Juniper SSG5?

I added a blanket policy from untrust to trust ANY/ANY and trust to untrust ANY/ANY
ensure you are using NAT too!

Post the config and I am sure one of is will be able to assist

Billy

ASKER CERTIFIED SOLUTION
Avatar of matt
matt
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of matt

ASKER

one other question on the NAT - is that NAT for untrust interface or trust interface? Currently NAT is just on trust interface.
>set interface bgroup0 nat
nat is enabled, so you are set.

>the route 0.0.0.0 to Gateway 72.x.x.x is no longer in the routing rules as it was auto configured when connected to the clients network

this even further proves that the PPPoE is working; the config looks good. You you connect it to the clients network, basic troubleshooting will need to be done: ping trust gateway, ping ISP default gateway, etc.  What are you able to ping, etc.  

Billy