Got it

Problem configuring dual-stack IPoE authentication

Created: Dec 6, 2019 07:58:27Latest reply: Dec 6, 2019 08:36:36 465 2 0 0 1
  Rewarded HiCoins: 0 (problem resolved)

Dear All,


I already configured my router NE20 with V800R010C10SPC500 version and V800R010SPH052 patch to use IPoE authentication with v4 only without problems.

But when I configure v6 to use in dual-stack, users are connected but v4 only and I receive this message on display aaa online-fail-record for all the users:


  -------------------------------------------------------------------

  User name          : 1001/2/13/485754439B219C9E@xxxx

  Domain name        : xxxx

  User MAC           : 48f8-dbad-dceb

  Stack type flag    : IPv6(NA+PD)

  User access type   : IPoE

  User interface     : GigabitEthernet0/3/2.1700

  User access PeVlan/CeVlan    : 1700/-

  User IP address    : 100.68.7.16

  User ID            : 8136

  User authen state  : Authened

  User acct state    : Accting

  User author state  : AuthorIdle

  User login time    : 2019-12-05 20:53

  Online fail reason : Not bind IPv6 pool or ip alloc fail

  -------------------------------------------------------------------


This user is connected but v4 only


dis access-user username 1001/2/13/485754439B219C9E

  ------------------------------------------------------------------------------

  UserID     Username                Interface      IP address       MAC

             Vlan          IPv6 address             Access type

  ------------------------------------------------------------------------------

  8136       1001/2/13/485754439...  GE0/3/2.1700   100.68.7.16      48f8-dbad-dceb

             1700/-        -                        IPOE

  ------------------------------------------------------------------------------

  Normal users                       : 1

  RUI Local users                    : 0

  RUI Remote users                   : 0

  Total users                        : 1


You can see that v6 is configured to be provided to user:


aaa

 domain xxxx

  authentication-scheme auth

  accounting-scheme acct1

  radius-server group rd1

  ip-pool pool_cgnat

  ip-pool pool_valido01

  ip-pool pool_valido02

  ipv6-pool lan_pppoe

  ipv6-pool wan_pppoe

  dns primary-ipv6 2001:4860:4860::8888

  dns second-ipv6 2001:4860:4860::8844

  ipv6 nd autoconfig managed-address-flag

  ipv6 nd ra unicast

  ipv6 pd-address-release separate user-type ipoe


dhcpv6 duid xxxx

#

ipv6 prefix prefixo_wan local

 prefix 2804:xxxx:10::/48

#

ipv6 prefix prefixo_lan delegation

 prefix 2804:xxxx:800::/40 delegating-prefix-length 56

 pd-unshare-only

#

ipv6 pool lan_pppoe bas delegation

 dns-server 2001:4860:4860::8888

 prefix prefixo_lan

#

ipv6 pool wan_pppoe bas local

 dhcpv6 rapid-commit

 dns-server 2001:4860:4860::8888

 prefix prefixo_wan

#


interface GigabitEthernet0/3/2.1700

 ipv6 enable

 ipv6 address auto link-local

 user-vlan 1700

 ipv6 nd autoconfig managed-address-flag

 ipv6 nd autoconfig other-flag

 bas

 #

  access-type layer2-subscriber default-domain authentication xxxx

  client-option82

  authentication-method bind

  authentication-method-ipv6 bind

  ip-trigger

  arp-trigger

  nd-trigger

  default-password-template PASS


Featured Answers

Best answer

Recommended answer

chenhui
Admin Created Dec 6, 2019 08:36:36

@LuizPuppin hello,
the configuration seems to be OK, how about trying to kick the user offline, then re-dialer again.
View more
  • x
  • convention:

LuizPuppin
LuizPuppin Created Dec 9, 2019 16:41:06 (0) (0)
Qe found problems on client side confiurations. Thanks.  
All Answers
@LuizPuppin hello,
the configuration seems to be OK, how about trying to kick the user offline, then re-dialer again.
View more
  • x
  • convention:

LuizPuppin
LuizPuppin Created Dec 9, 2019 16:41:06 (0) (0)
Qe found problems on client side confiurations. Thanks.  

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.