{{#EDIT}}Edit {{NEXT_PPPOE}}{{/EDIT}}{{^EDIT}}Add PPPoE client{{/EDIT}}

{{#EDIT}}

Change the settings of the {{NEXT_PPPOE}} PPPoE session. The stored PAP/CHAP password is never shown; leave the password field blank to keep it.

{{/EDIT}} {{^EDIT}}

Dial a PPPoE WAN session over a physical interface ({{NEXT_PPPOE}} is allocated automatically). The PAP/CHAP password is stored in the secret store and referenced by name — it is never shown again and never lands in the saved configuration.

{{/EDIT}}
{{#PARTIAL}}
{{ERROR}}
{{/PARTIAL}} {{#ERROR}}
{{ERROR}}
{{/ERROR}} {{#NO_SECRET}}
Storing the PPPoE password needs secret:*:write. Your account has interface write but not secret write — choose None for authentication, or ask an administrator for secret write (net-admin role).
{{/NO_SECRET}} {{#EDIT_PENDING}}
That line cannot be edited here. This form adds a new PPPoE client; open the line's own page to check it, or reload this page from its Edit link once it can be read.
{{/EDIT_PENDING}} {{#FORM}}
{{#EDIT}} {{/EDIT}} {{#MSS_CLAMP_CARRY}} {{/MSS_CLAMP_CARRY}}

The NIC connected to your DSL/fibre modem. The PPPoE session dials over this interface. Each entry shows its link state; a NIC with no carrier has no cable or no modem behind it.

{{#MGMT_CONFIRM}}

The interface marked carries your management session carries the default route, so the session you are using now may reach this router through it. Dialling PPPoE over it does not change its addresses, but when this line becomes the internet uplink the default route moves to the PPPoE session, and a management session from beyond the local network follows it. There is no confirm window for this kind.

{{/MGMT_CONFIRM}} {{^EDIT}}

Many fibre and DSL providers tag the WAN. Enter the tag to create the VLAN on the NIC chosen above and dial over it in one step; leave it blank to dial over the NIC directly, or choose an existing VLAN above.

{{/EDIT}}

Most ISPs use PAP. Choose None only if your provider authenticates without a username/password.

Printable characters only; no quotes, backslash or #.

Any printable character except a single quote (').

{{^CAN_SECRET}}

Your account can set up the line but cannot store a password (that needs secret:*:write, the net-admin role){{#EDIT}}: the stored password is kept{{/EDIT}}{{^EDIT}}: choose None for authentication, or ask an administrator{{/EDIT}}.

{{/CAN_SECRET}} {{#EDIT}}

Leave blank to keep the stored password. Type a new one to replace it; it is kept in this router's root-only secret store and never shown again. Secret store reference: pppoe.{{NEXT_PPPOE}}.authkey.

{{/EDIT}} {{^EDIT}}

Kept in this router's root-only secret store; never shown again and never written into the saved configuration. Secret store reference: pppoe.{{NEXT_PPPOE}}.authkey.

{{/EDIT}} {{#REUSE_NOTICE}}
{{#JUST_TYPED}}

A stored password for {{NEXT_PPPOE}} exists: it is the one you just typed (the create was refused after it was stored). Type it again above, or:

{{/JUST_TYPED}} {{^JUST_TYPED}}

A stored password for {{NEXT_PPPOE}} already exists (left behind by an earlier interface). Type the password for this line above, or:

{{/JUST_TYPED}}
{{/REUSE_NOTICE}}
Advanced options

MSS-clamp firewall rule

match on {{NEXT_PPPOE}} scrub (max-mss {{MSS_RULE}})

Paste this into the firewall rules to clamp TCP MSS on the PPPoE link (avoids black-holed large packets behind the 1492-byte PPPoE MTU). The value follows the MSS above; the interface page shows the rule for the stored value.

IPv6
{{#EDIT}}

Saving re-dials the session: {{NEXT_PPPOE}} is brought down and dialled again with the saved settings, and traffic over it pauses until the line reconnects. There is no automatic revert — if the new settings do not connect, come back here and correct them.

{{/EDIT}}
{{/FORM}}