Re: PF ruleset stymying my PPPoE testing, or am I just confused?

[Claudio Jeker]

On Thu, Dec 30, 2010 at 09:48:52PM -0800, Jonathan Rogers wrote:
 Trying to set up a new telco fiber connection on my OpenBSD router/
 firewall (this is an OLD box with OpenBSD 3.8 on it...sorry). I can't
 put the new telco connection live as the default yet, because it will
 affect all users, and I need to do some testing first. But I'm not
 quite sure I (a) understand if I've got PPPoE set up correctly, or (b)
 if I do but my existing pf firewall rules are affecting the test. In
 any
 case, I can't get it to work.
 

 pppoe0: flags=8850POINTOPOINT,RUNNING,SIMPLEX,MULTICAST mtu 1492
 dev: xl2 state: session
 sid: 0xa2e9 PADI retries: 1 PADR retries: 0 time: 00:00:27
 groups: pppoe
 inet 215.34.235.30 -- 0.0.0.1 netmask 0x
 

Your pppoe0 is not functional. It did not correctly negotiate a session
and is not UP. Did you check with ifconfig pppoe0 debug that the IPCP
phase of ppp was successful? Normaly 0.0.0.1 should be changed to the real
destination IP when the connection is established also the interface
should be UP-ed by pppoe(4).
There were quite a few fixes in pppoe(4) and sppp(4) over the last 5
years.

-- 
:wq Claudio

PF ruleset stymying my PPPoE testing, or am I just confused?

[Jonathan Rogers]

Trying to set up a new telco fiber connection on my OpenBSD router/
firewall (this is an OLD box with OpenBSD 3.8 on it...sorry). I can't
put the new telco connection live as the default yet, because it will
affect all users, and I need to do some testing first. But I'm not
quite sure I (a) understand if I've got PPPoE set up correctly, or (b)
if I do but my existing pf firewall rules are affecting the test. In
any
case, I can't get it to work.

I have a simple, standard PPPoE (pppoe(4), in the kernel) setup using
XL2 as the outbound interface. (The existing outbound interface is
over xl0.)

# more hostname.xl2
up
# more hostname.pppoe0
pppoedev xl2
!/sbin/ifconfig xl2 up
!/usr/sbin/spppcontrol \$if myauthproto=chap myauthname...@me.net
myauthkey=xx
!/sbin/ifconfig \$if inet 0.0.0.0  0.0.0.1 netmask 0x
# following is  commented out for now, for this test
#!/sbin/route add default 0.0.0.1
up

# ifconfig (edited)
xl2: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:xx:04:81:39:50
media: Ethernet autoselect (100baseTX full-duplex)
status: active
pppoe0: flags=8850POINTOPOINT,RUNNING,SIMPLEX,MULTICAST mtu 1492
dev: xl2 state: session
sid: 0xa2e9 PADI retries: 1 PADR retries: 0 time: 00:00:27
groups: pppoe
inet 215.34.235.30 -- 0.0.0.1 netmask 0x

So far so good...but when I try to add a single route to a single host
to test it, I get...:
# route add 69.17.116.121 pppoe0
route: writing to routing socket: Network is unreachable
add host 69.17.116.121: gateway pppoe0: Network is unreachable

So I though maybe I needed to add some firewall rules, even though
pf.conf currently doesn't mention xl2 and pppoe0. So I added:

# more test.pppoe.conf
pass in quick on xl2 from any to any
pass out quick on xl2 from any to any
pass in quick on pppoe0 from any to any
pass out quick on pppoe0 from any to any
# pfctl -f test.pppoe.conf
#

Still no joy. Am I not understanding something basic here? (Likely.)
Please give me some more diagnostics to try, or point me in the right
direction...?

thankee much
/TSG/