Got it

Accounting of PPPoE using IPv6 IA_NA+IA_PD

Created: Apr 29, 2020 14:28:24Latest reply: Apr 29, 2020 15:08:55 376 3 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello all,


I'm with a NE20 router (V800R011C10SPC100) to provide PPPoE access to subscribers using DHCPv6 IA_NA + IA_PD.

All things are working well, the CPEs are getting the WAN/LAN address.


But I have some doubts about the radius accounting of the DHCP IA_NA.


Our freeradius is prepared to receive accounting from WAN/LAN with the following attributes:

- WAN: Framed-IPv6-Prefix 

- LAN: Delegated-IPv6-Prefix


But using IA_NA we are receiving only HW-Framed-IPv6-Address (158) for the WAN side (the LAN PD site is ok).


If I switch to NDRA+IA_PD, then the Framed-IPv6-Prefix is received.


Question:

- Is it possible to NE send IA_NA address to radius accounting using attribute Framed-IPv6-Prefix instead of HW-Framed-IPv6-Address?



Best Regards,


Rafael


Featured Answers
chenhui
Admin Created Apr 29, 2020 14:53:41

Hi,
From the documentation, the Framed-Ipv6-Prefix (97) carries the IPv6 prefix assigned to a user in NDRA mode. Currently, the attribute is valid only for ND users, and PPPv6 users whose addresses are allocated in stateless mode. While, HW-Framed-IPv6-Address (158) carries an address assigned by a DHCPv6 server using identity association for non-temporary addresses (IA_NA). According to this, I think it's not supported to do that.
View more
  • x
  • convention:

All Answers
Is it possible to assign it manually?
View more
  • x
  • convention:

Hi,
From the documentation, the Framed-Ipv6-Prefix (97) carries the IPv6 prefix assigned to a user in NDRA mode. Currently, the attribute is valid only for ND users, and PPPv6 users whose addresses are allocated in stateless mode. While, HW-Framed-IPv6-Address (158) carries an address assigned by a DHCPv6 server using identity association for non-temporary addresses (IA_NA). According to this, I think it's not supported to do that.
View more
  • x
  • convention:

Procedure:
1. Configure a VT.
<HUAWEI> system-view
[~HUAWEI] interface virtual-template 5
[*HUAWEI-Virtual-Template5] ppp authentication-mode chap
[*HUAWEI-Virtual-Template5] quit
[*HUAWEI] commit
2. Configure AAA schemes.
# Configure an authentication scheme.

[~HUAWEI] aaa
[~HUAWEI-aaa] authentication-scheme auth5
[*HUAWEI-aaa-authen-auth5] authentication-mode radius
[*HUAWEI-aaa-authen-auth5] quit
[*HUAWEI] commit
# Configure an accounting scheme.

[~HUAWEI-aaa] accounting-scheme acct5
[*HUAWEI-aaa-accounting-acct5] accounting-mode radius
[*HUAWEI-aaa-accounting-acct5] quit
[*HUAWEI-aaa] quit
[*HUAWEI] commit
3. Configure a RADIUS server group.
[~HUAWEI] radius-server group rd5
[*HUAWEI-radius-rd5] radius-server authentication 3001:0410::1:1 1645
[*HUAWEI-radius-rd5] radius-server accounting 3001:0410::1:1 1646
[*HUAWEI-radius-rd5] radius-server type standard
[*HUAWEI-radius-rd5] radius-server shared-key-cipher hello
[*HUAWEI-radius-rd5] quit
[*HUAWEI] commit
4. Configure a local IPv6 prefix pool.
[~HUAWEI] ipv6 prefix pre1 local
[~HUAWEI-ipv6-prefix-pre1] prefix 2001:2421::/64
[~HUAWEI-ipv6-prefix-pre1] quit
[~HUAWEI] commit
5. Configure a user-side local IPv6 address pool.
[~HUAWEI] ipv6 pool pool1 bas local
[~HUAWEI-ipv6-pool-pool1] prefix pre1
[~HUAWEI-ipv6-pool-pool1] dns-server 3001:0410::1:2
[~HUAWEI-ipv6-pool-pool1] quit
[~HUAWEI] commit
6. Configure a domain named isp5.
[~HUAWEI] aaa
[~HUAWEI-aaa] domain isp5
[*HUAWEI-aaa-domain-isp5] authentication-scheme auth5
[*HUAWEI-aaa-domain-isp5] accounting-scheme acct5
[*HUAWEI-aaa-domain-isp5] radius-server group rd5
[*HUAWEI-aaa-domain-isp5] commit
[~HUAWEI-aaa-domain-isp5] ipv6-pool pool1
[*HUAWEI-aaa-domain-isp5] commit
[~HUAWEI-aaa-domain-isp5] quit
[~HUAWEI-aaa] quit
[~HUAWEI] commit
7. Configure interfaces.
# Bind the VT to GE 0/1/2.1.

[~HUAWEI] interface gigabitethernet 0/1/2.1
[*HUAWEI-GigabitEthernet0/1/2.1] pppoe-server bind virtual-template 5
[*HUAWEI] commit
8. Verify the configuration.
# Check information about the prefix pool named pre1. The command output shows that the prefix pool is a local prefix pool and the prefix address is 2010:2021::/64.
https://support.huawei.com/enterprise/en/doc/EDOC1100058395/73be6e9f/example-for-configuring-pppoe-access-for-ipv6-users
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.