Got it

GPON - IPv6 dual stack

Created: Jun 1, 2021 08:16:41Latest reply: Jan 3, 2022 06:47:58 890 18 0 0 0
  Rewarded HiCoins: 5 (problem resolved)

Hi All,


We are using Ne40e BNG and Ea5800 OLT and EG8247W ONT. We need to test dual stack (ipv4+ipv6). 

We tried enable ipv6 on ONT. If we enable IPv6 on ONT, can ont trigger to get ipv6 ip address?


Is there a misconfiguration that we overlooked?


We configured BNG side like this;


ne40e;


I'm not sharing the radius config. We use a third party radius server and this server controls the authentication.


ip pool public-dynamic bas local

 gateway a.b.c.f 255.255.255.0

 section 0 a.b.c.g  a.b.c.z



ipv6 prefix pre1 local

 prefix bbbb:aaaa:yyyy:xxx::/56

#

ipv6 pool ipv6-pool bas local 

 dns-server bbbb:aaaa:yyyy:D::D 

 prefix pre1

#

aaa

 domain domainname

  authentication-scheme gpon

  authorization-scheme gpon

  accounting-scheme gpon

  radius-server group rd1

  ip-pool public-dynamic

  ipv6-pool ipv6-pool

  user-max-session 1

  dns primary-ip a.b.c.d 

  dns primary-ipv6 bbbb:aaaa:yyyy:D::D 

  ipv6 nd autoconfig managed-address-flag


----------------------------------------------

interface Eth-Trunk6.1000

 ipv6 enable

 ipv6 address auto link-local

 statistic enable

 user-vlan 1 4000 qinq 1000 1001

pppoe-server bind Virtual-Template 2

 bas

 #

   access-type layer2-subscriber default-domain authentication domainname

-------------------------------------------------------------------------------------


display aaa online-fail-record


  User name          : test@domainname

  Domain name        : domainname

  User MAC           : ------

  User access type   : PPPoE

  User interface     : Eth-Trunk6.1000

  User access PeVlan/CeVlan    : 1000/101

  User IP address    : a.b.c.h

  User ID            : 954187

  User authen state  : Authened

  User acct state    : AcctIdle

  User author state  : AuthorIdle

  User login time    : 2021-06-01 02:37

  Online fail reason : Add nat user data fail(Search Public Addr Fail)



but user couldnt be online, and there is online fail reason; Add nat user data fail(Search Public Addr Fail)


and ONT VAS Profile settings; 


ipv6 enabled




image

wan settings -1wan settings 2


image

image


Featured Answers
Chenxintao
Admin Created Jun 2, 2021 02:03:21

Hello, friend!


Thank you for providing the device information. After the ONT configuration is checked, the configuration of the EG8247W takes effect.


ONT


About your question: We tried enable ipv6 on ONT. If we enable IPv6 on ONT, can ont trigger to get ipv6 ip address?


Yes. Currently, the ONT can use some IPv6 functions. Therefore, the ONT can obtain an IPv6 address.


After reading all your information, do you find that the ONT cannot obtain an IPv6 address during the test?


For Add nat user data fail(Search Public Addr Fail), it is confirmed that the ONT configuration takes effect. If the ONT cannot obtain an IPv6 address, you need to check the upper-layer device configuration.


Thanks!

View more
  • x
  • convention:

KorayK.
KorayK. Created Jun 2, 2021 06:28:17 (0) (0)
Hi My friend,



Thanks your answer. You said, ONT configuration is correct? But our problem still is unsolved. Upper layer device also Huawei device which is NE40E Router as a BNG. Why nat user data fail occurs? Is there a problem with the ipv6 pool config on BNG?  
KorayK.
KorayK. Reply KorayK.  Created Jun 2, 2021 06:31:16 (0) (0)
Sorry i forgot OLT. OLT is also Huawei EA5800 device. But that device working Layer 2. After that device, upper layer device BNG.  
Chenxintao
Chenxintao Reply KorayK.  Created Jun 2, 2021 06:40:49 (0) (0)
Hi, my friend!
The file shows that the ONT configuration takes effect. As a Layer 2 device, the OLT establishes only service transmission channels. I think the problem may lie with the NE40E.  
Hi All,

Forgive me, I forgot to mention, problem solved. Thanks for all. Our ONT-OLT-BNG configs are correct, user setting was wrong in Radius server. When the user settings were corrected, the user was online.
View more
  • x
  • convention:

Chenxintao
Chenxintao Created Jan 3, 2022 10:08:49 (0) (0)
 
All Answers

Hello, KorayK!
It's nice to meet you in the community.
We're working on your problem. Please be patient.
View more
  • x
  • convention:

Hello, friend!

How do you configure the ONT dual-stack?

Can you export the ONT configuration information by referring to it?

How do export ONT files on NCE

Thanks!


View more
  • x
  • convention:

KorayK.
KorayK. Created Jun 1, 2021 09:56:16 (0) (0)
Hi Chenxintao,
I configured ONT using Vas profile on NCE. I also exported ONT config file. But I couldn't find a way to upload it to the forum and post it to you.  
Chenxintao
Chenxintao Reply KorayK.  Created Jun 1, 2021 09:57:07 (0) (0)
Please check the private message box  

Hello, friend!


Thank you for providing the device information. After the ONT configuration is checked, the configuration of the EG8247W takes effect.


ONT


About your question: We tried enable ipv6 on ONT. If we enable IPv6 on ONT, can ont trigger to get ipv6 ip address?


Yes. Currently, the ONT can use some IPv6 functions. Therefore, the ONT can obtain an IPv6 address.


After reading all your information, do you find that the ONT cannot obtain an IPv6 address during the test?


For Add nat user data fail(Search Public Addr Fail), it is confirmed that the ONT configuration takes effect. If the ONT cannot obtain an IPv6 address, you need to check the upper-layer device configuration.


Thanks!

View more
  • x
  • convention:

KorayK.
KorayK. Created Jun 2, 2021 06:28:17 (0) (0)
Hi My friend,



Thanks your answer. You said, ONT configuration is correct? But our problem still is unsolved. Upper layer device also Huawei device which is NE40E Router as a BNG. Why nat user data fail occurs? Is there a problem with the ipv6 pool config on BNG?  
KorayK.
KorayK. Reply KorayK.  Created Jun 2, 2021 06:31:16 (0) (0)
Sorry i forgot OLT. OLT is also Huawei EA5800 device. But that device working Layer 2. After that device, upper layer device BNG.  
Chenxintao
Chenxintao Reply KorayK.  Created Jun 2, 2021 06:40:49 (0) (0)
Hi, my friend!
The file shows that the ONT configuration takes effect. As a Layer 2 device, the OLT establishes only service transmission channels. I think the problem may lie with the NE40E.  
Hello,
The error indicates that your might have errors configuration in your NAT address pool, can you please check that?
View more
  • x
  • convention:

Hi Chenhui,

Sorry my ipv6 knowledge is a bit weak. I don't quite understand what you mean? Actually we dont apply Nat for dual/stack. We create ipv4 public pool as you can see above post. And create ipv6 pool. And dual stack test user is public user for ipv4.

domain domainname
authentication-scheme gpon
authorization-scheme gpon
accounting-scheme gpon
radius-server group rd1
ip-pool public-dynamic
ip-pool cgnat
ip-pool public-static
ipv6-pool ipv6-pool
user-max-session 1
dns primary-ip x.x.x.x
dns primary-ipv6 y:z:x:q::q
user-group smtp-close-cgnat bind nat instance 8
ipv6 nd autoconfig managed-address-flag
undo public-address nat enable

display aaa online-fail-record



 User name          : test@domainname

 Domain name        : domainname

 User MAC           : --------

 User access type   : PPPoE

 User interface     : Eth-Trunk6.1000

 User access PeVlan/CeVlan    : 1000/101

 User IP address    : a.b.c.h       normally, this address is Public IP address, I kept it for privacy.

 User ID            : 954187

 User authen state  : Authened

 User acct state    : AcctIdle

 User author state  : AuthorIdle

 User login time    : 2021-05-31 18:37

 Online fail reason : Add nat user data fail(Search Public Addr Fail)

View more
  • x
  • convention:

Posted by KorayK. at 2021-06-02 09:15 Hi Chenhui,Sorry my ipv6 knowledge is a bit weak. I don't quite understand what you mean? Actually w ...
The DHCP configuration seems fine. And the error indicates the NAT address pool incorrect, can you please check if the ONT could get online normally while not enable the IPv6?
View more
  • x
  • convention:

KorayK.
KorayK. Created Jun 2, 2021 13:47:17 (0) (0)
Yes, i tested when ipv6 not enable, user get online with ipv4 address.  
chenhui
chenhui Reply KorayK.  Created Jun 2, 2021 14:00:57 (0) (0)
Can you please trying a PC dialer, whether the PC could get the IP address correctly.
From your provided configuration(BNG device), it should be OK.  

Hi,

@chenhui @Chenxintao That Add nat user data fail(Search Public Addr Fail), is that about following picture settings in ONT config?


nat enable

nat mode


View more
  • x
  • convention:

Posted by KorayK. at 2021-06-03 07:24Hi,@chenhui @Chenxintao That Add nat user data fail(Search Public Addr Fail), is that about followi ...

Yes, I see this information from the file you provided. I think as Chen Hui said, the problem may be caused by the IPv6 address pool. Of course, the best location is to capture packets.@chenhui

View more
  • x
  • convention:

Hi, friend!

If you can, can you help us capture packets on the PON port?


The detailed operations are as follows:


  1. Modify the WAN configuration to IPv4 & IPv6

    ONT

  2. Connect the PC to ONT LAN por

  3. Telnet to the ONT, run the following command:

    WAP>set ethportmirror sourceport 10 destport X mirrordate 2 enable 1

    (the “destport X” is the LAN port that your PC connected with)

  4. Open the wireshark on your PC and start capture

  5. Disable the WAN

    ONT

  6. Enable the WAN

    ONT

  7. Wait for about 2 or 3 minutes,stop and save the capture,and execute below command:

    WAP>set ethportmirror sourceport 10 destport 1 mirrordate 2 enable 0

    WAP>display current-configuration

    WAP>collect debug info     //// need to wait for about 5 minutes till the command complete



View more
  • x
  • convention:

12
Back to list

Comment

You need to log in to comment to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.