Cisco-AVPAIR IPv6 on freeradius not working

[sebastien3]

Hello,

I need a little help to enable IPv6 on my freeradius 3.0.
I use an ASR1001 as LNS, the IPv4 part is functional but on IPv6 the configuration does not work!

Cisco-AVPair = "lcp:interface-config#1=ip unnumbered Loopback10",
Cisco-AVPair = "lcp:interface-config#2=ipv6 enable",
Cisco-AVPair = "lcp:interface-config#3=ipv6 unnumbered Loopback10",
Cisco-AVPair = "lcp:interface-config#4=ipv6 mtu 1492",
Cisco-AVPair = "lcp:interface-config#5=no ipv6 nd suppress-ra",
Cisco-AVPair = "ipv6:prefix=2001:0db8:0014::/48"

Thanks !

[Harold Ritter]

Hi Sebastien,

Could you change the following:

Cisco-AVPair = "ipv6:prefix=2001:0db8:0014::/48"

to a /64 prefix.

Also make sure your lo10 has an IPv6 address assigned.

You might also want to check the following post on this community:

https://community.cisco.com/t5/xr-os-and-platforms/ipv6-configuration-via-radius-on-a-dialer-interface/td-p/2495105

Regards,

[sebastien3]

Hi Harold,

Thanks for your help !

lo10 does have an IPv6 address. Here is the configuration of the ASR1001. Are there any errors ??

no ipv6 source-route
ipv6 unicast-routing
ipv6 dhcp pool test
 dns-server 2001:DB8:1:1::1
!
interface Loopback10
 ip address A.B.C.D 255.255.255.255
 ipv6 address 2001:DB8:12FF::1/128
 ipv6 enable
!
interface Virtual-Template1
 description LNS IPv4-IPv6
 ip unnumbered Loopback10
 no ip redirects
 no ip proxy-arp
 ip verify unicast source reachable-via rx
 ip tcp adjust-mss 1460
 ipv6 unnumbered Loopback10
 ipv6 enable
 ipv6 nd other-config-flag
 no ipv6 nd ra suppress
 ipv6 dhcp server test
 peer default ipv6 pool test
 ppp authentication chap ppp-radius
 ppp authorization network-radius
 ppp multilink
 ppp multilink fragment disable
!
ipv6 local pool test 2001:DB8:12FF::/48 64

[Harold Ritter · Accepted solution]

Hi Sebastien,

- You need to change the ipv6 address on Lo10 so it does not conflict with the ipv6 pool. 

interface Loopback10
 ipv6 address 2001:DB8:12FE::1/128
!

 The rest of the configuration looks good.

Regards,

[sebastien3]

Thanks Harold !