Community discussions

MikroTik App
 
term0r
just joined
Topic Author
Posts: 6
Joined: Mon Dec 12, 2005 5:51 am

IPv6 + PPPoE + RADIUS

Wed Jul 28, 2010 9:12 am

I've been using Mikrotik PPPoE with Radius for a couple of years now and am now finally testing IPv6 over PPPoE.

I'm running 5.0beta5.

I'm struggling to work out what syntax I need to use when specifying Framed-IPv6-Prefix in my Radius reply. Does anyone have any examples of doing this? My googling doesn't seem to find me any example RADIUS replies that use Framed-IPv6-Prefix.

The RFC seems to dictate that we send something like Zero/Length/Prefix, whilst other guides seem to suggest that you just specific the address like Framed-IPv6-Prefix = "2404:1800:300::/56". I've tried many things and nothing really seems to work.

I tend to either get the Mikrotik seeing the address as a hex number, e.g.:
15:00:05 radius,debug,packet Framed-IPv6-Prefix = 0x413132333a423435363a433738393a44
15:00:05 radius,debug,packet 4538303a3a2f3537

Or, sometimes it comes through as a bogus IPv6 address, e.g.:
15:08:34 radius,debug,packet Framed-IPv6-Prefix = 3034:3a31:3830:303a:3130:303a:3a2f:3536/52
15:08:34 radius,debug received reply for 1b:175

Other than this part, the PPPoE IPv6 all seems to work nicely. Just want the Mikrotik to automatically add the IPv6 route side of things.

So, an example of an IPv6 Radius reply would be really useful. I'm guessing my RADIUS server (Radiator) may also be causing the issue but its dictionary does at least seem to be aware of the Framed-IPv6-Prefix attribute.

Cheers
Dave
 
User avatar
omidkosari
Trainer
Trainer
Posts: 640
Joined: Fri Sep 01, 2006 4:18 pm
Location: Canada, Toronto

Re: IPv6 + PPPoE + RADIUS

Tue Jun 28, 2011 6:42 pm

I have same problem and posted a mail to support with supout and debug logs , no answer yet .
 
mpoisel
just joined
Posts: 9
Joined: Fri Sep 09, 2011 12:59 pm
Location: Unin, CZ

Re: IPv6 + PPPoE + RADIUS

Fri Sep 09, 2011 2:40 pm

I have same problem with Microsoft NPS (radius on win server 2008). I think, the problem is, that radius server sends atribute in hexa, but Mikrotik wants string (see here: http://forum.mikrotik.com/viewtopic.php?f=1&t=48171)
 
mpoisel
just joined
Posts: 9
Joined: Fri Sep 09, 2011 12:59 pm
Location: Unin, CZ

Re: IPv6 + PPPoE + RADIUS

Fri Sep 09, 2011 7:03 pm

... 4 hours later, I found solution. Configure your framed-ipv6-prefix attribute hexa and code your configuration this way:

30402A010430000206660000000000000000

hexa - description
30 - in ascii 0 should be zero because of rfc
40 - in decimal 64 your prefix size

and rest:
2A010430000216660000000000000000 - 2a01:430:2:1666:: - your prefix
 
User avatar
omidkosari
Trainer
Trainer
Posts: 640
Joined: Fri Sep 01, 2006 4:18 pm
Location: Canada, Toronto

Re: IPv6 + PPPoE + RADIUS

Sun Sep 11, 2011 12:16 pm

Thanks but unfortunately does not work for me.

i tried in radius server
Framed-IPv6-Prefix="30402A010430000206660000000000000000"
but routeros logging shows
Framed-IPv6-Prefix.PNG
in my radius server dictionary
ATTRIBUTE	Framed-IPv6-Prefix	97	octets	# stupid format
You do not have the required permissions to view the files attached to this post.
 
User avatar
omidkosari
Trainer
Trainer
Posts: 640
Joined: Fri Sep 01, 2006 4:18 pm
Location: Canada, Toronto

Re: IPv6 + PPPoE + RADIUS

Sun Sep 11, 2011 6:37 pm

even changing octets to string did not help
ATTRIBUTE   Framed-IPv6-Prefix   97   string   # stupid format
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26387
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: IPv6 + PPPoE + RADIUS

Fri Nov 25, 2011 3:00 pm

we have updated the mikrotik radius vendor dictionary http://wiki.mikrotik.com/wiki/Manual:RA ... dictionary
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: IPv6 + PPPoE + RADIUS

Fri Nov 25, 2011 5:12 pm

hm... why two places for the same data?
http://wiki.mikrotik.com/wiki/Manual:RA ... ric_Values
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26387
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: IPv6 + PPPoE + RADIUS

Mon Nov 28, 2011 10:36 am

hm... why two places for the same data?
http://wiki.mikrotik.com/wiki/Manual:RA ... ric_Values
thanks for noticing, we will fix it

Who is online

Users browsing this forum: ryba84 and 30 guests