IDS and PPPoE?

Started by dragon2611, July 05, 2016, 12:05:34 PM

Previous topic - Next topic
Can someone confirm the correct config for IDS on PPPoE?

If i set the interface to the PPPoE interface I don't get any errors but I'm not sure if it's working as I've not seen any alerts for that wan.

If I set it to the physical (well virtual) NIC that the PPPoE is on it tends to break my access to the internet (badly)

The other WAN (ISP uses DHCP) seems to work and generate alerts.

I think the problem was I had 2 Virtual interfaces that were bridged to the same physical interface  :-[

I've sorted that now, also the IDS looks like it can decode PPP packets if you have it monitor the raw ethernet port that the PPPoE sits ontop of.