vyos@r14# run show conf com | match haproxy
set load-balancing haproxy backend bk01 server 192.0.2.5 address '192.0.2.5'
set load-balancing haproxy backend bk01 server 192.0.2.5 port '993'
set load-balancing haproxy service wan-993 listen-address 192.0.2.2
set load-balancing haproxy service wan-993 port '993'
[edit]
vyos@r14# 
[edit]
vyos@r14# set  load-balancing haproxy service wan-993 listen-address 192.168.122.14
[edit]
vyos@r14# commit
[ load-balancing haproxy ]
{'backend': {'bk01': {'balance': 'round-robin',
                      'mode': 'http',
                      'server': {'192.0.2.5': {'address': '192.0.2.5',
                                               'port': '993'}}}},
 'global_parameters': {'ssl_bind_ciphers': ['ecdhe-ecdsa-aes128-gcm-sha256',
                                            'ecdhe-rsa-aes128-gcm-sha256',
                                            'ecdhe-ecdsa-aes256-gcm-sha384',
                                            'ecdhe-rsa-aes256-gcm-sha384',
                                            'ecdhe-ecdsa-chacha20-poly1305',
                                            'ecdhe-rsa-chacha20-poly1305',
                                            'dhe-rsa-aes128-gcm-sha256',
                                            'dhe-rsa-aes256-gcm-sha384'],
                       'tls_version_min': '1.3'},
 'pki': {},
 'service': {'wan-993': {'listen_address': {'192.0.2.2': {},
                                            '192.168.122.14': {}},
                         'mode': 'http',
                         'port': '993'}},
 'timeout': {'check': '5', 'client': '50', 'connect': '10', 'server': '50'}}

sudo netstat -tulpn | grep 993

vyos@r14# run show haproxy 
Proxy name            Role       Status    Req rate    Resp time    Last change
--------------------  ---------  --------  ----------  -----------  -------------
web                   FRONTEND   OPEN      4
buildin_acme_certbot  BACKEND    UP                    0 ms         3m24s
bk01                  BACKEND    UP                    1 ms         1m8s
buildin_acme_certbot  localhost  no check              0 ms         3m24s
bk01                  srv01      UP                    1 ms         1m8s
bk01                  srv02      UP                    1 ms         1m3s
[edit]
vyos@r14# run show ver
Version:          VyOS 2025.10.10-0733-integration
Release train:    current
Release flavor:   generic

vyos@VyOS-for-Smoke-Tests# delete vpp 
[edit]
vyos@VyOS-for-Smoke-Tests# commit
[ vpp ]
Traceback (most recent call last):
  File "/usr/libexec/vyos/services/vyos-configd", line 156, in run_script
    script.apply(c)
  File "/usr/libexec/vyos/conf_mode/vpp.py", line 660, in apply
    initialize_interface(
  File "/usr/libexec/vyos/conf_mode/vpp.py", line 594, in initialize_interface
    iface_new_name: str = control_host.get_eth_name(iface_config['dev_id'])
                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/vyos/vpp/control_host.py", line 227, in get_eth_name
    raise FileNotFoundError(
FileNotFoundError: A device with ID 0000:00:05.0 not found in ethernet interfaces

set resource group 
set resource local-users username user1 password user1
set resource radius server 192.0.2.1 key vyos-secret

DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_interfaces_pppoe.py
DEBUG - test_pppoe_authentication (__main__.PPPoEInterfaceTest.test_pppoe_authentication) ... ok
DEBUG - test_pppoe_client (__main__.PPPoEInterfaceTest.test_pppoe_client) ... FAIL
DEBUG - test_pppoe_client_disabled_interface (__main__.PPPoEInterfaceTest.test_pppoe_client_disabled_interface) ... ok
DEBUG - test_pppoe_dhcpv6pd (__main__.PPPoEInterfaceTest.test_pppoe_dhcpv6pd) ... ok
DEBUG - test_pppoe_mtu_mru (__main__.PPPoEInterfaceTest.test_pppoe_mtu_mru) ... ok
DEBUG - test_pppoe_options (__main__.PPPoEInterfaceTest.test_pppoe_options) ... ok
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_pppoe_client (__main__.PPPoEInterfaceTest.test_pppoe_client)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG -   File "/usr/libexec/vyos/tests/smoke/cli/test_interfaces_pppoe.py", line 179, in test_pppoe_client
DEBUG -     self.assertTrue(any(iface == interface for (iface, _) in tmp))
DEBUG - AssertionError: False is not true
DEBUG -
DEBUG - ----------------------------------------------------------------------
DEBUG - Ran 6 tests in 77.628s

Oct 07 12:36:52 r14 staticd[2000]: [PNYPZ-BCP8Y] Static Route using pppoe20 interface not installed because the interface does not exist in specified vrf

vyos@r14:~$ show version 
Version:          VyOS 1.5-stream-202510060458
Release train:    circinus
Release flavor:   generic

set container name radius allow-host-networks
set container name radius image 'dchidell/radius-web'
set container name radius volume accel destination '/usr/share/freeradius/dictionary.accel'
set container name radius volume accel source '/usr/share/accel-ppp/radius/dictionary.accel'
set container name radius volume clients destination '/etc/raddb/clients.conf'
set container name radius volume clients source '/config/containers/radius/clients'
set container name radius volume dictionary destination '/usr/share/freeradius/dictionary'
set container name radius volume dictionary source '/config/containers/radius/dictionary'
set container name radius volume users destination '/etc/raddb/users'
set container name radius volume users source '/config/containers/radius/users'
set service pppoe-server access-concentrator 'ACN'
set service pppoe-server authentication mode 'radius'
set service pppoe-server authentication radius server 192.168.122.14 key 'vyos-secret'
set service pppoe-server client-ip-pool FIRST range '100.64.0.0/18'
set service pppoe-server client-ipv6-pool IPv6-POOL delegate 2001:db8:8003::/48 delegation-prefix '56'
set service pppoe-server client-ipv6-pool IPv6-POOL prefix 2001:db8:8002::/48 mask '64'
set service pppoe-server default-ipv6-pool 'IPv6-POOL'
set service pppoe-server default-pool 'FIRST'
set service pppoe-server gateway-address '100.64.0.1'
set service pppoe-server interface eth1 combined
set service pppoe-server interface eth1.23
set service pppoe-server log level '5'
set service pppoe-server name-server '1.1.1.1'
set service pppoe-server name-server '1.0.0.1'
set service pppoe-server ppp-options disable-ccp
set service pppoe-server ppp-options ipv6 'allow'
set service pppoe-server session-control 'disable'

client-1	Cleartext-Password := "client-1"
    Service-Type = Framed-User,
    Accel-VRF-Name = "red",
    Framed-IP-Address = 10.0.0.11,
    Stateful-IPv6-Address-Pool = "IPv6-POOL",
    Delegated-IPv6-Prefix-Pool = "IPv6-POOL",
    Framed-Route = "100.64.0.11/32 10.0.0.11 1",
    Framed-Protocol = PPP

Other nodes the config is similar, but without NAT
Show neighbors: