> Source: [sk176905](https://support.checkpoint.com/results/sk/sk176905)

# sk176905 - PPPoE connection cannot be established on Check Point appliance connected through modem as bridge to ISP

| Property | Value |
|----------|-------|
| Solution ID | sk176905 |
| Date Created | 2021-12-27 |
| Last Modified | 2022-01-13 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * After users establish a PPPoE connection between a Security Gateway and an ISP, the Security Gateway rejects the PAP authentication method.
* The */var/log/messages* log file shows:

  ```
  
  pppd[18204]: Timeout waiting for PADO packets
  pppd[18204]: Unable to complete PPPoE Discovery
  pppd[18204]: PPP session is 
  pppd[18204]: Using interface pppoe1 ...
  pppd[18204]: Connect: pppoe1 <-->  ...
  pppd[18204]: peer from calling number  authorized ...
  pppd[18204]: LCP terminated by peer
  pppd[18204]: Connection terminated. ...
  pppd[18204]: Modem hangup
  ```

* Disabling the SecureXL mechanism according to the procedure in sk32578 does not resolve the issue.
* Changing from User Space Firewall (USFW) to Kernel Space Firewall (KSFW) does not resolve the issue.

## Cause

The Security Gateway creates the */etc/ppp/peers* PPPoE configuration file with missing parameters and with a generic file name instead of the ISP gateway hostname.  

Example of a PPPoE interface that users created in Gaia Portal or in Gaia Clish with these GUI selections:  

`GW> add pppoe client id 1 interface eth1 user-name <ISP_PROVIDED_USERNAME> password <ISP_PROVIDED_PASSWORD> use-peer-dns on use-peer-as-default-gateway on`  

According to the executed command, the name of the peer configuration file created at */etc/ppp/peers* is *pppoe1* .  

The *pppoe1* configuration file (shown below) contains a generic name for the interface (*eth1* ): and does not contain the ISP password.  

```
[Expert@GW:0]# cat pppoe1

# �This file was AUTOMATICALLY GENERATED

# �Generated by pppoe_xlate on Thu Dec �9 11:25:31 2021

#

# �DO NOT EDIT

#

user <ISP_PROVIDED_USERNAME>

plugin rp-pppoe.so

eth1

noipdefault

usepeerdns

defaultroute

persist

maxfail 0

remotename pppoe1
```

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content