Routing

Hi all,

I now have a firm understanding of the NDRA process for IPv6 and have the following quesiton regarding the secondary CPE autoconfig phase of DHCPv6-PD.

I have a working configuration on some Cisco equipment but need to get this working on the MX240.....

LNS configuration (acting as the DHCPv6-PD Server - kind of)

R4(config)#Ipv6 local pool cust-pool1 2001:db8:2:8000::/49 56

R4(config)#Ipv6 dhcp pool ISP-pool

R4(config-dhcpv6)#Prefix-delegation pool cust-pool1 lifetime infinite infinite

R4(config)#int <interface required>

R4(config-if)#Mac-address xxxx.xxxx.xxxx     (Just use this if we want control rather than eui-64 controlling everything)

R4(config-if)#Ipv6 address 2001:db8:2:410::4/64

R4(config-if)#Ipv6 address fe80::4 link-local  (We use this if we want to control everything rather than eui-64)

R4(config-if)#Ipv6 dhcp server ISP-pool

CPE Configuration 

R10(config)#int g2/0

R10(config-if)#ipv6 enable

R10(config-if)#ipv6 address FROM-ISP ::0.0.0.0.1/64  (This means the /56 prefix (The first zero is the 8 bits this customer has to play with regarding subnets, if you like))

R10(config)#int g3/0

R10(config-if)#ipv6 enable

R10(config-if)#ipv6 address FROM-ISP ::1:0:0:0:1/64  (Notice that the leading zero is now a “1”…. If we wanted yet more subnets then that 1 would become a 2 and then 3 etc etc etc)

Could someone please let me know the same command structure to give the same results in Junos?

Also, please confirm if the configuration is on the CPE or the LNS and also the itnerface involved is the L2TP peer tunnel interface (I'm guessing it would be given that this is the only WAN link)....

The actual end result requirement would be that this is dealt with on the RADIUS via a PORTAL for the re-seller...... Again, guessing, this would involve us knowing wht the re-seller has sold the customer (in the way of IPv6) so that we can configure the CPE before shipping....

If anyone has any experience of configuring this on freeRADIUS, anyhelp would be greatly appreciated.

Thanks

Clive

Hi Clive,

Looking at your setup it will be DHCPv6 over PPP.

LNS will be providing IPv4 as well as IPv6 address.  For WAN i.e. NDRA and LAN DHCPv6 PD.

In case you want to assign NDRA/PD from radius, you need below attributes.

NDRA=Framed-IPv6-Pool/Framed-IPv6-Prefix

PD= ERX-ipv6-Delegated-Pool-Name

[root@JTAC-ERX-LINUX-2 raddb]# grep -i delega dictionary.erx
ATTRIBUTE       ERX-IPv6-Delegated-Pool-Name            161     string

Configuration on LNS

TEST# show system services

dhcp-local-server {

    dhcpv6 {

        group TEST {

            authentication {

                password test;

                username-include {

                    user-prefix test;

                }

            }

            dynamic-profile DHCP;

            overrides {

                delegated-pool IAPD-PPPOE-POOL;

            }

            interface si-1/0/0.0;

        }

    }

TEST# show access address-assignment pool IAPD-PPPOE-POOL

family inet6 {

    prefix XXXX:YYYY:AAAA::/40;

    range IAPD-RANGE prefix-length 56;

}

https://www.juniper.net/documentation/en_US/junos/topics/example/dual-stack-pppoe-ndra-dhcpv6-pd.html

https://www.juniper.net/documentation/en_US/junos/topics/concept/subscriber-management-dual-stack-ipv6-design-ndra-dhcpv6-pd.html

https://kb.juniper.net/InfoCenter/index?page=content&id=KB26579
Sample configuration of DHCPv6-PD over Dual Stack LNS (L2TP)

Regards,

Rahul

Hi Rahul,

Thank you for the configuraiton and links.... very much appreciated. I will configure and test...

Again, thanks

Clive

Hi Clive,

Please find few freeradius samples. Hope it helps.

test Cleartext-Password := "test"
     Framed-IP-Address := X.X.X.X,
     Framed-ipv6-Pool := "ipv6-iana-pool",
     ERX-ipv6-Delegated-Pool-Name := "ipv6-pd-pool"

test1 Cleartext-Password := "123"
      Framed-Pool := "IP-Pool",
      Framed-ipv6-Pool := "IPv6-WAN",
      ERX-ipv6-Delegated-Pool-Name := "IPv6-Pool",

test2 Cleartext-Password := "123"
      Framed-IP-Address := "X.Y.Z.X",
      Framed-IPv6-Prefix := "XXXX:YYYY:ZZZZ::/64"

test3 Cleartext-Password := "test"
      Framed-IP-Address := X.X.X.X,
      Framed-ipv6-Pool := "ipv6-iana-pool",
      ERX-ipv6-Delegated-Pool-Name := "ipv6-pd-pool",
      ERX-Ingress-Policy-Name = "16M",
      ERX-Egress-Policy-Name = "16M"

Regards,

Rahul

Hi Rahul,

Although I have closed this, there is one little question I would like to ask please.....

We are utilsing DaloRADIUS as a "mysql" DB. I can insert this into the "users" file with no problems at all, but we really need to know how to get this into the mysql database. I have kind of worked out how to do that from zero documentation but, even with the radius attributes listed here:

https://www.juniper.net/documentation/en_US/src4.9/topics/reference/general/radius-attributes-values.html

I still cannot work out what I can input per user on the VSA section.... Anyone know please?

Hi Clive, I would request you to open new thread.

Regards,

Rahul