IPv6 + PPPoE + RADIUS

RouterOS General
1

I’ve been using Mikrotik PPPoE with Radius for a couple of years now and am now finally testing IPv6 over PPPoE.

I’m running 5.0beta5.

I’m struggling to work out what syntax I need to use when specifying Framed-IPv6-Prefix in my Radius reply. Does anyone have any examples of doing this? My googling doesn’t seem to find me any example RADIUS replies that use Framed-IPv6-Prefix.

The RFC seems to dictate that we send something like Zero/Length/Prefix, whilst other guides seem to suggest that you just specific the address like Framed-IPv6-Prefix = “2404:1800:300::/56”. I’ve tried many things and nothing really seems to work.

I tend to either get the Mikrotik seeing the address as a hex number, e.g.:
15:00:05 radius,debug,packet Framed-IPv6-Prefix = 0x413132333a423435363a433738393a44
15:00:05 radius,debug,packet 4538303a3a2f3537

Or, sometimes it comes through as a bogus IPv6 address, e.g.:
15:08:34 radius,debug,packet Framed-IPv6-Prefix = 3034:3a31:3830:303a:3130:303a:3a2f:3536/52
15:08:34 radius,debug received reply for 1b:175

Other than this part, the PPPoE IPv6 all seems to work nicely. Just want the Mikrotik to automatically add the IPv6 route side of things.

So, an example of an IPv6 Radius reply would be really useful. I’m guessing my RADIUS server (Radiator) may also be causing the issue but its dictionary does at least seem to be aware of the Framed-IPv6-Prefix attribute.

Cheers
Dave

2

I have same problem and posted a mail to support with supout and debug logs , no answer yet .

3

I have same problem with Microsoft NPS (radius on win server 2008). I think, the problem is, that radius server sends atribute in hexa, but Mikrotik wants string (see here: http://forum.mikrotik.com/t/pppoe-ipv6/43702/1)

4

… 4 hours later, I found solution. Configure your framed-ipv6-prefix attribute hexa and code your configuration this way:

30402A010430000206660000000000000000

hexa - description
30 - in ascii 0 should be zero because of rfc
40 - in decimal 64 your prefix size

and rest:
2A010430000216660000000000000000 - 2a01:430:2:1666:: - your prefix

5

Thanks but unfortunately does not work for me.

i tried in radius server

Framed-IPv6-Prefix="30402A010430000206660000000000000000"

but routeros logging shows
Framed-IPv6-Prefix.PNG
in my radius server dictionary

ATTRIBUTE	Framed-IPv6-Prefix	97	octets	# stupid format
6

even changing octets to string did not help

ATTRIBUTE   Framed-IPv6-Prefix   97   string   # stupid format
7

we have updated the mikrotik radius vendor dictionary http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client/vendor_dictionary

8

hm… why two places for the same data?
http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client#Attribute_Numeric_Values

9

thanks for noticing, we will fix it