| 11.4 |  | PPPoE and the PIX Security Appliance |
| 11.4.3 |  | Configuring the PIX Security Appliance to support PPPoE |

| Five steps are needed to configure the PIX PPPoE client. The first four steps require the use of the vpdn command and are used to configure a VPDN group for PPPoE. The fifth step is then used to enable the PPPoE session. The five steps are as follows:

Step 1 Use the vpdn group command to define a VPDN group to be used for PPPoE.

Step 2 If the ISP requires authentication, use the vpdn group command to select one of the following authentication protocols:

- Password Authentication Protocol (PAP)
- Challenge Handshake Authentication Protocol (CHAP)
- Microsoft Challenge Handshake Authentication Protocol (MS-CHAP)

ISPs that use CHAP or MS-CHAP may refer to the username as the remote system name and may refer to the password as the CHAP secret.

Step 3 Use the vpdn group command to associate the username assigned by the ISP to the VPDN group.

Step 4 Use the vpdn username command to create a username and password pair for the PPPoE connection. This username and password combination is used to authenticate the PIX Security Appliance to the AC. The username must be a username that is already associated with the VPDN group specified for PPPoE.

The clear vpdn command removes all vpdn commands from the configuration. The clear vpdn group command removes all vpdn group commands from the configuration. The clear vpdn username command removes all vpdn username commands from the configuration.

Step 5 Use the ip address pppoe command to enable PPPoE on the PIX Security Appliance. PPPoE client functionality is disabled by default. To clear and restart a PPPoE session, reenter the ip address pppoe command. This shuts down the current session and starts a new one.