Routing

 View Only
last person joined: 6 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.

  • 1.  IPv6 dualstack BNG MX240

    This message was posted by a user wishing to remain anonymous
    Posted 06-13-2024 06:57
    This message was posted by a user wishing to remain anonymous

    Hello,

    I try to make dual stack IPv4/IPv6 on subscribers. 

    We are using MX240 as BNG. IP are given to subscriber by radius (no dhcp on BNG)

    IPv4 is working well for now,

    But IPv6 doesnt work for now, the CPE doesnt want to take the IPv6 sended by BNG. I don't know if the issue is BNG or CPE.

     
    Here the configuration:

    RADIUS:

    MariaDB [radius]> select * from radreply where username like "%CPE_IPv6%";
    +----------+----------------------+--------------------------+----+-----------------+
    | id       | UserName             | Attribute                | op | Value           |
    +----------+----------------------+--------------------------+----+-----------------+
    | 36722649 | CPE_IPv6@covage-bpea | Class                    | =  | 0               |
    | 36722650 | CPE_IPv6@covage-bpea | Service-Type             | =  | Framed-User     |
    | 36722651 | CPE_IPv6@covage-bpea | Framed-Routing           | =  | Listen          |
    | 36722652 | CPE_IPv6@covage-bpea | Framed-Protocol          | =  | PPP             |
    | 36722653 | CPE_IPv6@covage-bpea | Framed-IP-Address        | =  | XX.XXX.XXX.XXX   |
    | 36722654 | CPE_IPv6@covage-bpea | Framed-IP-Netmask        | =  | 255.255.255.255 |
    | 36789588 | CPE_IPv6@covage-bpea | Jnpr-CoS-Parameter-Type  | =  | T02 15243k      |
    | 36789803 | CPE_IPv6@covage-bpea | Unisphere-Virtual-Router | =  | PROD_TEST       |
    | 36859431 | CPE_IPv6@covage-bpea | Framed-IPv6-Prefix       | =  | 1234:1:2:3::/64 |
    | 36859432 | CPE_IPv6@covage-bpea | Framed-IPv6-Address      | =  | 1234::abcd/128  |
    +----------+----------------------+--------------------------+----+-----------------+ 

    I try to give a IPv6 address by /128 and /64 but neither work now

    dynamic profil:

    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" interface "$junos-interface-name"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options rib "$junos-ipv6-rib" access route $junos-framed-route-ipv6-address-prefix qualified-next-hop "$junos-interface-name"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options rib "$junos-ipv6-rib" access route $junos-framed-route-ipv6-address-prefix metric "$junos-framed-route-ipv6-cost"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options rib "$junos-ipv6-rib" access route $junos-framed-route-ipv6-address-prefix preference "$junos-framed-route-ipv6-distance"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix next-hop "$junos-framed-route-nexthop"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix preference "$junos-framed-route-distance"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix tag "$junos-framed-route-tag"
    set dynamic-profiles DP_PPPoE_L2_IPv6 routing-instances "$junos-routing-instance" routing-options access route $junos-subscriber-ip-address qualified-next-hop "$junos-interface-name"
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" actual-transit-statistics
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" ppp-options chap challenge-length maximum 16
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" ppp-options pap
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" ppp-options authentication pap
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" ppp-options authentication chap
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" ppp-options initiate-ncp ip
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" ppp-options mtu use-lower-layer
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" pppoe-options underlying-interface "$junos-underlying-interface"
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" pppoe-options server
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" keepalives interval 30
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface"
    set dynamic-profiles DP_PPPoE_L2_IPv6 interfaces pp0 unit "$junos-interface-unit" family inet6 unnumbered-address "$junos-loopback-interface"

    subscriber VRF:

    lo0 is used as gateway IPv4/IPv6

    set interfaces lo0 unit 1666 family inet6 address fc00::254/128
    set interfaces lo0 unit 1666 family inet address 10.254.254.254/32
    set routing-instances PROD_TEST interface lo0.1666

    I have these log in BNG:

    Jun 12 17:27:14.075195 radius-access-request: User-Name added: CPE_IPv6@covage-bpea
    Jun 12 17:27:14.075533 UserAccess:CPE_IPv6@covage-bpea session-id:5809 state:start ae10.4085:4085
    Jun 12 17:27:14.380776 radius-access-accept: Framed-IPv6-Prefix received: 1234:1:2:3::/64
    Jun 12 17:27:14.380845 radius-access-accept: Framed-IPv6-Address received: 1234::abcd
    Jun 12 17:27:14.381282 Using Framed-Ipv6-Prefix 1234::abcd as V6NA hint for session-id:5809
    Jun 12 17:27:14.381295 Using Framed-Ipv6-Prefix 1234:1:2:3::/64 as NDRA hint for session-id:5809

    CPE (audiocode):

    on pppoe 0 interface:

     interface pppoe 0
      firewall enable
      napt
      mtu 1452
      ppp user CPE_IPv6@covage-bpea obscured-pass $$$$$$$$$$$$
      ppp authentication chap
      ppp authentication ms-chap
      ppp authentication ms-chap-v2
      ppp authentication pap
      ppp lcp-echo 6 5
      no ppp compression
      ip address auto
      ipv6 enable
      ipv6 address autoconfig
      ip dns server static
      ip name-server 85.158.112.41 85.158.112.139
      underlying GigabitEthernet 0/0.4085
      no shutdown
     exit

    ipv6 is enabled + autoconfig (slaac)

    Thank you for your help!



  • 2.  RE: IPv6 dualstack BNG MX240

    Posted 06-14-2024 08:39

    Hi,

    I can't see your entire configuration, but it seems you're missing IPV6 NDRA configuration from dynamic profile.

    set dynamic-profiles DP_PPPoE_L2_IPv6 protocols router-advertisement interface "$junos-interface-name" prefix $junos-ipv6-ndra-prefix

    Reference link: https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-getting-started/topics/topic-map/dynamic-profiles-predefined-variables.html

    Also, as troubleshooting, I would try to remove "Framed-IPv6-Address" attribute from Radius and try only with "Framed-IPv6-Prefix".



    ------------------------------
    Eduardo Haro
    ------------------------------

    Original Message


  • 3.  RE: IPv6 dualstack BNG MX240

    Posted 06-17-2024 06:55

    I have deleted "Framed-IPv6-Address" from radius and added 

    set dynamic-profiles DP_PPPoE_L2_IPv6 protocols router-advertisement interface "$junos-interface-name" prefix $junos-ipv6-ndra-prefix

    IPv6 in now working well.

    Thank you a lot!



    ------------------------------
    NOC NETWORK
    ------------------------------

    Original Message


  • 4.  RE: IPv6 dualstack BNG MX240

    Posted 06-17-2024 09:27
    Edited by spuluka 06-17-2024 11:10

    I have now a other question, thanks to this Framed-IPv6-Prefix, my CPE have access to internet, but my LAN don't.

    I know that we can share a /56 or /48 from RADIUS Delegated-ipv6-Prefix. Then, we can try to "preconfigure" WAN interface to CPE to use one /64 that is in /48, and another /64 for LAN.

    The problem is "Delegated-ipv6-Prefix" is not in this page:

    https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-getting-started/topics/topic-map/dynamic-profiles-predefined-variables.html

    So i don't know if juniper know this attribute, and how to change my dynamic profil to test that.

    thank you!


    ------------------------------
    NOC NETWORK
    ------------------------------

    Original Message