Skip to main content
argst
argst
New Member
October 3, 2015
Solved

vlan 100 for WAN port fortiwifi 30d

  • October 3, 2015
  • 2 replies
  • 18370 views

hi all

still feeling very new to the world of routing, switching etc so please forgive me if my question isnt clear.

 

i have a nice new shiny fortiwifi 30d for my home FW/Router. The sad news is that my ISP, being cheap and nasty, have hard coded requirement for PPPoE traffic to be tagged with VLAN 100.

 

ive had a bit of a play but i cant for the life of me figure out how to tag the physical interface. I created a sub interface and tagged this with VLAN 100 however this wont connect as the physical WAN with appears to take precedent.

 

To rehash; need to tag all WAN interface traffic with VLAN 100? any help would be great.

 

thanks.

Best answer by emnoc

What are  you doing specifically and how?

 

You would need something similar to below;

 

config system interface     edit "vlan124interface"         set vdom "CNN45"         set mode pppoe         set snmp-index 60         set username "TRONCD4hjWEk01"         set password ENC GPPyOLfRw5SB/BeYIy0aLDH3e+2imYG6V07qc9N6r0rhaFoUY20ERKMfFbAkn2CdIn+b0CXQhBSjVgdUhDQhJRsFir4lqXF6YKp5+ijDAD1MCc7CF0EpQy22VQYBF2eFIjWnIgBlkwAdlP30FZItmlSBqYyE7RWAsTcF9Vm7reDe9jfFANSlWp6qwFvJ2Dbar4rbfQ==         set interface "port12"         set vlanid 124     next end

2 replies

emnoc
emnocAnswer
New Member
October 4, 2015

What are  you doing specifically and how?

 

You would need something similar to below;

 

config system interface     edit "vlan124interface"         set vdom "CNN45"         set mode pppoe         set snmp-index 60         set username "TRONCD4hjWEk01"         set password ENC GPPyOLfRw5SB/BeYIy0aLDH3e+2imYG6V07qc9N6r0rhaFoUY20ERKMfFbAkn2CdIn+b0CXQhBSjVgdUhDQhJRsFir4lqXF6YKp5+ijDAD1MCc7CF0EpQy22VQYBF2eFIjWnIgBlkwAdlP30FZItmlSBqYyE7RWAsTcF9Vm7reDe9jfFANSlWp6qwFvJ2Dbar4rbfQ==         set interface "port12"         set vlanid 124     next end

ede_pfau
SuperUser
ede_pfau
SuperUser
October 4, 2015

Adding to emnoc's post:

- of course you don't need to use VDOMs; just ignore the "set vdom" line.

The main thing is that

- you enable PPPoE on the VLAN interface

- you don't enable PPPoE on the WAN interface - set it to MANUAL, IP=0.0.0.0/0

- both interfaces use the same physical port which is fine

 

Outgoing traffic will be tagged, incoming tagged traffic will be stripped of the VLAN tag.

argst
argstAuthor
New Member
October 4, 2015
Thanks for the suggestions. Looked pretty similar to what I'd done. Went through and did it again. Status shows "failed" when looking at the interface. Config system interface Edit vlan100 Set mode pppoe Set username "username@isp.com" Set password "password" Set interface wan Set vlanid 100 Next End Wan interface is set to manual with no ip as suggested. All logs are empty. Where would I find the failure reason?
emnoc
emnoc
New Member
October 4, 2015

I would start with diagnostics

 

diag debug  application pppoed -1

 

 

Validate any errors and warnings.  One more items you should consider is to set the  mtu size and ensure tcp-mss is set for SYN or SYN/ACKs

 

        set mtu-override enable         set mtu 1472

 

 

 

 

argst
argstAuthor
New Member
October 5, 2015

hey thanks again for the advice. still havent got there but surely learning. Pretty confident that they use a default mtu. Hadnt even considered the tcp-mss... i will look at trying these next.

 

outputs are below. Doesnt give me much to work with

 

diagnose debug info debug output:        disable console timestamp:    disable console no user log message:    disable zebos debug level:    306783954 (0x124926d2) pppoed debug level:    -1 (0xffffffff) CLI debug level:    3 diagnose debug enable parameters passed to pppd: pppd 0 pppoed vlan100 noipdefault noauth default-asyncmap defaultroute hide-password nodetach mtu 1492 mru 1492 noaccomp noccp nobsdcomp nodeflate nopcomp novj novjccomp user fibre12037834@dodo.com.au lcp-echo-interval 5 lcp-echo-failure 3 sync plugin /bin/pppoe.so     pppoe_retry_time 1 pppoe_padt_time 1 vlan100 ipunnumbered 0.0.0.0 idle 0 unnumbered-negotiate enable      child_exit()-461: A child process exits pppoed_main()-576: PID 2132 exit pppoed_main()-583: Interface vlan100 exit pppoed_main()-560: Start PPPoE interface vlan100 pppoed_main()-563: PID of vlan100 is 2145

emnoc
emnoc
New Member
October 5, 2015

Okay so your details are good and it looks like the far end is not answering. is the interface that carries vlan100 actually up?

 

On the default mtu that will not work, you you have  the overhead of the PPPoE protocols and the 802.1q tag of 8bytes for the latter.

 

I would triple check your details for the user/pass and then ensure the interface is up  and validate packets are arrive from the PPPoE server

 

e.g ( check for packets with ethernet headers )

 

diag sniffer packet wan1 '' 3

 

Terms & ConditionsAccessibility statement