firewall layer2 pppoe detect enable

Function

The firewall layer2 pppoe detect enable command enables PPPoE packet detection in Layer 2 transparent deployment.

The undo firewall layer2 pppoe detect enable command disables PPPoE packet detection in Layer 2 transparent deployment.

Format

firewall layer2 pppoe detect enable

undo firewall layer2 pppoe detect enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, PPPoE packet detection in Layer 2 transparent deployment is disabled.

After you enable this function, PPPoE packets will be detected, and sessions be created when the FW works in transparent mode.

In certain attack defense scenarios, if the FW works in transparent mode, the blocking of certain PPPoE packets may be required. Therefore, you must enable PPPoE packet detection in Layer 2 transparent deployment to create sessions for PPPoE packets for session-based blocking.

After you disable this function, PPPoE packets in Layer 2 transparent deployment are transparently transmitted.

Example

# Enable PPPoE packet detection for the Layer 2 transparent deployment.

<sysname> system-view
[sysname] firewall layer2 pppoe detect enable