Add PPPoE client

Dial a PPPoE WAN session over a physical interface ({{NEXT_PPPOE}} is allocated automatically). The PAP/CHAP password is stored in the secret store and referenced by name — it is never shown again and never lands in the saved configuration.

Storing the PPPoE password needs secret:*:write. Your account has interface write but not secret write — choose None for authentication, or ask an administrator for secret write (net-admin role).

Parent interface (pppoedev)

The NIC connected to your DSL/fibre modem. The PPPoE session dials over this interface.

Authentication

Most ISPs use PAP. Choose None only if your provider authenticates without a username/password.

Username (your ISP login)

Password

Stored in the secret store as pppoe.{{NEXT_PPPOE}}.authkey and never shown again. Leave blank when re-submitting to keep the stored password unchanged.

Advanced options

Service name (optional)

Access concentrator (optional)

Dial on demand — bring the link up only when traffic needs it (otherwise the session stays connected).

MSS (optional, 1280-1452)

I intend to clamp TCP MSS for this link (a hint — add the firewall rule below yourself).

MSS-clamp firewall rule

match on {{NEXT_PPPOE}} scrub (max-mss 1452)

Paste this into the firewall rules to clamp TCP MSS on the PPPoE link (avoids black-holed large packets behind the 1492-byte PPPoE MTU).

IPv6 Enable IPv6 (link-local inet6 eui64). Autoconfigure IPv6 via SLAAC (inet6 autoconf) — depends on your ISP advertising a prefix. Enables IPv6 automatically.