No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Configuration Guide - User Access 01

This is NE40E V800R010C10SPC500 Configuration Guide - User Access
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring a Delegating Router

Configuring a Delegating Router

The NE40E can be configured as a delegating router to allocate and recycle prefixes according to the requests of requesting routers.

Usage Scenario

DHCPv6 PD is used to manage and configure IPv6 network segments.

On an IPv4 network, the NE40E uses DHCPv4 to allocate IPv4 addresses to the CPE; the CPE allocates private IPv4 addresses to home users and forwards IPv4 packets through NAT.

On an IPv6 network, all users can obtain global unicast addresses. The CPE working in unnumbered mode uses DHCPv6 to obtain the prefixes from the NE40E and allocates IPv6 addresses to the host.

Figure 5-3 Networking diagram of the NE40E as a delegating router

Pre-configuration Tasks

Before configuring NE40E as a delegating router, enable IPv6 on interfaces

Configuration Procedures

Figure 5-4 Flowchart for configuring a delegating router

Configuring the DHCPv6 Server DUID

A DHCPv6 client uses a DHCPv6 server unique identifier (DUID) to identify the DHCPv6 server when the client communicates with the server.

Context

When the NE40E functions as a DHCPv6 server, DHCPv6 Server DUID should be configured .

When the NE40E functions as a DHCPv6 relay agent and encapsulates Options 37 to relay-forward packets, DHCPv6 Server DUID should be configured .

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run dhcpv6 duid { dhcpv6 duid | llt }

    A DUID is configured for a DHCPv6 server.

    When a DHCPv6 client interacts with a DHCPv6 server, each of the client and server is identified by a unique DUID. A DHCPv6 server identifies a DHCPv6 client with a client DUID and uses the client DUID in the local address allocation; a DHCPv6 client identifies a DHCPv6 server with a server DUID.

  3. Run commit

    The configuration is committed.

Configuring an IPv6 Delegation Prefix Pool

When the NE40E functions as a delegation router, an IPv6 delegation prefix pool needs to be configured to manage prefixes.

Context

  • Prefix configuration

    Only one prefix and one mask can be configured for a local prefix pool. The mask length ranges from 1 bit to 128 bits.

  • Prefix locking configuration

    After a prefix pool is locked, the leases of prefixes that have been allocated cannot be extended and new addresses cannot be allocated.

  • Address conflict resolution configuration

    If an IPv6 address status conflict is resolved, the address can be allocated to another user.

  • Binding an IPv6 prefix pool to a VPN instance

    After a prefix pool is bound to a VPN instance, prefixes in the prefix pool can be allocated to VPN users.

  • Prefix lease configuration

    A preferred prefix lifetime and valid prefix lifetime can be configured. The default value for the preferred prefix lifetime is 2 days, and the default value for the valid prefix lifetime is 3 days. The preferred prefix lifetime is used to limit the lease renewal time and rebinding time. By default, the lease renewal time accounts for 50% of the preferred prefix lifetime, and rebinding time accounts for 80% of the preferred lifetime. The valid prefix lifetime specifies the validity period in which an address can be used.

  • Address reservation configuration

    Addresses in the local prefix pool have four reservation types:
    • 1: MAC reservation

    • 2: MAC+lease-based reservation

    • 3: DUID reservation

    • 4: DUID+lease-based reservation

  • Address withdrawal

    The address of an offline user can be withdrawn using the command.

  • Exclusive prefix pool configuration

    The delegation prefix pool can be used to allocate unshared prefixes to ND users or prefixes only to DHCPv6 (IA_PD) users.

  • Prefix exclusion

    In complex network planning, some IPv6 prefixes cannot be allocated to users.

  • Address exclusion

    In complex network planning, some IPv6 addresses cannot be allocated to users.

Perform the following steps on the NE40E.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run ipv6 prefix prefix-name delegation

    An IPv6 address pool is created, and the IPv6 address pool view is displayed.

  3. Run prefix prefix-address/prefix-length [ delegating-prefix-length delegating-prefix-length ]

    The IPv6 address prefix is configured.

    prefix-length specifies the length of an address prefix to be assigned from a delegation prefix pool. The value is an integer ranging from 1 to 128.

    prefix-length specifies the length of an IPv6 prefix assigned by a delegating router to a requesting router. The configured length of prefixes to be assigned from a delegation prefix pool must be greater than the length of prefixes in the delegation prefix pool. Otherwise, the delegating router cannot assign prefixes from the delegation prefix pool to clients.

  4. (Optional) Run lock

    The IPv6 prefix pool is locked.

    No prefix in the locked IPv6 prefix pool can be allocated, preventing new users from getting online using the IPv6 prefix pool.

    This command applies to a scenario where the IPv6 prefix pool cannot be deleted because it is being used by online users. Lock the IPv6 prefix pool first to stop it from allocating prefixes. The prefixes in the IPv6 prefix pool will be released when the users get offline. Then the IPv6 prefix pool can be deleted.

  5. (Optional) Run vpn-instance vpn-instance-name

    The VPN instance is configured for the prefix pool.

  6. (Optional) Run lifetime preferred-lifetime { days days-value [ hours hours-value [ minutes minutes-value ] ] | infinite } valid-lifetime { days days-value [ hours hours-value [ minutes minutes-value ] ] | infinite }

    The preferred lifetime and valid lifetime of IPv6 prefixes are configured.

    preferred-lifetime of the IPv6 prefixes in the command is used by the system to calculate the lease renewal time and rebinding time of the IPv6 prefix pool. The time must be no less than 1 minute. The default value is 2 days.

    valid-lifetime specifies the validity period of the prefixes. The users using the prefixes will be logged off after the validity period expires. The valid-lifetime must be no less than 1 minute, nor less than the preferred prefix lifetime. The default value is 3 days.

  7. (Optional) Run reserved prefix { duid | mac } [ lease ]

    The reservation type of user prefixes in the prefix pool is configured.

  8. (Optional) Run recycle prefix start-prefix [ end-prefix ]

    The prefix status is set to idle.

  9. (Optional) Run pd-unshare-only

    After the pd-unshare-only command is run for a delegation prefix pool, this prefix pool can be used only for DHCPv6 IA_PD prefix allocation and is preferred in DHCPv6 IA_PD prefix allocation.

    The delegation prefix pool is configured only for DHCPv6 IA_PD prefix allocation.

  10. (Optional) Run dhcpv6-unshare-only

    The prefix pool is configured to assign only IPv6 addresses not prefixes to users.

    NOTE:
    The dhcpv6-unshare-only command is mutually exclusive with the following commands:
    • slaac-unshare-only
    • pd-unshare-only
    • client-duid client-duid bind prefix prefix-address

  11. (Optional) Run frame-ipv6 lease manage

    The NE40E is enabled to manage the leases of RADIUS-delivered IPv6 addresses that are in the supported address pools.

    NOTE:

    To enable the NE40E to manage the leases of RADIUS-delivered IPv6 addresses that are not in the supported address pools, run the access frame-ipv6 lease manage pool-exclude command in the system view.

  12. Run commit

    The configuration is committed.

Configuring an IPv6 Delegation Address Pool

Configuring an IPv6 delegation address pool involves configuring the prefix pool to which the address pool is bound, setting the preference value of the address pool, and configuring other services such as a DNS or a DNS suffix.

Context

  • Prefix binding

    A prefix pool can be bound to only one address pool. Similarly, an address pool can be bound to only one prefix pool. Table 5-1 shows the binding between address pools and prefix pools.

    Table 5-1 Binding between address pools and prefix pools

    Address Pool Type

    Prefix Pool for Binding

    User-side local address pool

    Local prefix pool

    User-side delegation address pool

    Delegation prefix pool

    User-side relay address pool

    Local prefix pool

    User-side remote address pool

    Remote prefix pool

  • Priority configuration

    Among address pools of the same type, the greater the value of pool, the higher its priority.

    In NDRA address allocation mode, BAS local address pools are used to allocate shared prefixes, while BAS delegation address pools are used to allocate unshared prefixes. A BAS delegation address pool configured with slaac-unshare-only takes precedence over other BAS delegation address pools.

  • Address pool binding configuration

    An IPv6 address pool whose addresses are in use cannot be deleted. To delete an IPv6 address pool, first run the lock command in the IPv6 address pool view to lock the pool and then delete it after all online users have logged out.

  • DNS suffix configuration

    Only one domain name suffix can be set for an IPv6 address pool.

  • DNS server configuration

    A maximum of two DNS servers can be bound to an IPv6 address pool.

  • Address lease configuration

    If an IPv6 address pool has been bound to a domain, the address lease cannot be changed.

Perform the following steps on the NE40E.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run ipv6 pool pool-name bas delegation

    An IPv6 address pool is created, and the view of the IPv6 address pool is displayed.

  3. Run prefix prefix-name

    The IPv6 address pool is bound to an IPv6 prefix pool.

  4. (Optional) Run preference preference-value

    A priority value is set for the IPv6 address pool.

    The default value is 255.

  5. (Optional) Run dns-search-list dns-search-list-name

    A DNS suffix is configured to perform domain name resolution.

  6. (Optional) Run dns-server ipv6-address &<1-2>

    A DNS server is specified for an IPv6 address pool. An IPv6 address is used to specify a DNS server.

  7. (Optional) Run renew-time-percent renew-time-percent rebind-time-percent rebind-time-percent

    A lease renewal time and rebinding time are set for the IPv6 address pool.

    By default, the renewal time for an IPv6 address pool is 50% of the preferred lifetime and the rebinding time is 80% of the preferred lifetime.

  8. (Optional) Run option code { ipv6-address ipv6-address & <1-2> | string string | hex hex-string | { suboption subcode { ipv6-address ipv6-address | string string | hex hex-string } } & <1-16> }

    A DHCPv6 user-defined option is configured.

  9. Run commit

    The configuration is committed.

Binding an IPv6 Delegation Address Pool to a Domain

After an IPv6 delegation address pool is bound to a domain, users in the domain can be assigned prefixes from the address pool.

Prerequisites

An IPv6 delegation address pool has been configured.

Context

Perform the following steps on router:

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run aaa

    The AAA view is displayed.

  3. Run domain domain-name

    A domain is created and the AAA domain view is displayed.

  4. Run ipv6-pool pool-name

    An IPv6 delegation address pool is bound to the domain.

  5. (Optional) Run ipv6-warning-threshold { upper-limit-value | lower-limit lower-limit-value }

    Threshold for the usage of IPv6 addresses and prefixes is configured.

  6. (Optional) Run prefix-assign-mode unshared

    IPv6 prefix allocation mode is set to unshared mode. IPv6 users do not share the same IPv6 prefix.

  7. (Optional) Configure different users of a home connected to the network through a hub to communicate with each other directly rather than through a BRAS.

    NOTE:
    You must run the dhcpv6-unshare-only command in the IPv6 prefix pool view before performing this step.
    1. Run ipv6-address assign { circuit-id | remote-id } *

      The device is configured to assign IPv6 addresses to users based on the Option 18 or Option 37 attribute.

    2. Run ipv6 nd ra link-prefix

      The device is configured to send RA packets carrying the first 64 bits of the addresses assigned to IPv6 users as on-link prefixes.

  8. Run commit

    The configuration is committed.

Verifying the Delegating Router Configuration

After configuring a delegating router, you can view the configurations of IPv6 address pool, the prefix pool, and statistics about the DHCPv6 server.

Procedure

  • Run the display ipv6 pool [ pool-name ] command to check the IPv6 address pool configurations.
  • Run the display ipv6 prefix [ prefix-name [ all | used | start-ipv6-prefix [ end-ipv6-prefix ] ] ] command to check the IPv6 prefix pool configurations.
  • Run the display dhcpv6 upgrade command to check the lease configuration for DHCPv6 users to determine the time when the device restarts.
  • Run the display dhcpv6-access user-table command to query the detailed information about online DHCPv6 users.
  • Run the display dhcpv6-access statistic command to check statistics about packets exchanged between users and the DHCPv6 server.
  • Run the display ipv6-pool max-ratio domain command to check information about IPv6 address pool or prefix pool usage in all domains on the device.
  • Run the display ipv6-pool pool-usage { upper-threshold | lower-threshold | all-threshold } command to check information about domains whose IPv6 address pool or prefix pool usage exceeds a specified threshold.

Example

Run the display ipv6 pool command, you can view brief information about all IPv6 address pools.
<HUAWEI> display ipv6 pool
 ----------------------------------------------------------------------
 Pool name          : lj                               
 Pool No            : 3     
 Pool constant index: -
 Pool type          : BAS LOCAL           
 RUI-Flag           : -                   
 Preference         : 255   
 Renew time         : 50    
 Rebind time        : 80    
 Status             : UNLOCKED  
 Refresh interval   : infinite
 Used by domain     : 0     
 Dhcpv6 Unicast     : disable
 Dhcpv6 rapid-commit: disable
 Dns list           : -
 Dns server master  : -
 Dns server slave   : -
 AFTR name          : -
 Warning Threshold  : 10
 Warning Exhaust Switch: TRUE
 ----------------------------------------------------------------------
 Prefix-Name                      Prefix-Type 
 ----------------------------------------------------------------------
 lj                               LOCAL     
 ----------------------------------------------------------------------
Run the display ipv6 prefix command, you can view the configuration of all IPv6 prefix pools.
<HUAWEI> display ipv6 prefix
 -------------------------------------------------------------------------------
 Index Name                             Address/Length                Type
    Constant-index
 -------------------------------------------------------------------------------
 0     dg                               2021::/46                     DELEGATION
    -
 1     dl                               -                             REMOTE
    -
 2     dpc                              2011::/64                     LOCAL
    -
 3     god6                             2012::/64                     LOCAL
    -
 4     prefix1                          -                             LOCAL
    -
 5     tt                               1000::/64                     LOCAL
    -
 6     wm                               1111::/64                     LOCAL
    -
 7     ww                               2222::/46                     DELEGATION
    -
 -------------------------------------------------------------------------------
 Total created prefix pool(s): 8
Run the display dhcpv6 upgrade command, you can view leases of DHCPv6 users.
<HUAWEI> display dhcpv6 upgrade
DHCPv6 upgrade: enable.
Preferred lifetime: 0days 0hours 30minutes
Valid lifetime: 0days 1hours 0minutes
Renew time percent: 50%
Rebind time percent:80%
Renew time: 0days 0hours 15minutes
Rebind time: 0days 0hours 24minutes
Access DHCPv6 user count of new lifetime: 100 
Access DHCPv6 user count of old lifetime: 100
Access DHCPv6 user count of infinite lifetime: 10
Max interval from current for old lifetime DHCPv6 user renew: 0days 0hours 15minutes
Run the display dhcpv6-access user-table command, you can view detailed information about the DHCPv6 user with user-id set to 2.
<HUAWEI> display dhcpv6-access user-table user-id 2
  -------------------------------------------------------------------
  Interface                   :   GigabitEthernet1/0/0.3
  SVLAN/CVLAN                 :   3/0
  User Link-Local Address     :   FE80::202:1FF:FE01:10C
  User Address Type           :   IA_NA
  DNS search list             :   -
  AFTR name                   :   -
  Option15                    :   01 02 03 04 05 06 07 08 09
  User DUID                   :   00 03 00 01 00 02 01 01 01 0C
  User MAC Address            :   0002-0101-010C
  User-ID                     :   2
  Index                       :   1
  User State                  :   ONLINE
  VPN Instance                :   -
  Session ID                    :   2147483649
  Client DUID to Remote Server  : 00 02 00 00 07 DB FF FF 80 00 00 01 01 01 01 01 01 01 00 00

  User IPV6 address           :   1100::1
         T1                   :   86400
         T2                   :   138240
         Prefer time          :   2 days 0 hours 0  minutes
         Valid time           :   3 days 0 hours 0  minutes
         IA_ID                :   38
         Prefix length        :   128
         Lease                :   2012/01/23 14:23:39 --- 2012/01/26 14:23:39
         Remain-Lease(Sec)    :   259029
         Address Pool Name    :   csj-local
  User IPV6 PD prefix         :   2200::
         T1                   :   86400
         T2                   :   138240
         Prefer time          :   2 days 0 hours 0  minutes
         Valid time           :   3 days 0 hours 0  minutes
         IA_ID                :   9
         Prefix length        :   64
         Lease                :   2012/01/23 14:23:39 --- 2012/01/26 14:23:39
         Remain-Lease(Sec)    :   258811
         Address Pool Name    :   csj-del
  PCP server name(option 80)  :   www.pcpserver.com
    -------------------------------------------------------------------
Run the display dhcpv6-access statistic command, you can view statistics about packets exchanged between users and DHCPv6 server.
<HUAWEI> display dhcpv6-access statistic
-------------------------------------------------------------------------
    Received Packets
-------------------------------------------------------------------------
  Total Packets                    :   40

  Received from Clients            :   40
    Solicit   Packets              :   8
    Request   Packets              :   11
    Renew     Packets              :   0
    Rebind    Packets              :   0
    Confirm   Packets              :   0
    Release   Packets              :   7
    Decline   Packets              :   0

  Received from Servers            :   0
    Advertise Packets              :   0
    Reply     Packets              :   0

  Received Invalid Packets         :   22
    Invalid UDP Length             :   0
    NULL Client DUID               :   5
    NULL Server DUID               :   9
    NULL IA Option                 :   8
    Invalid IA Option Length       :   0
    Invalid Client DUID Length     :   0
    Invalid Server DUID Length     :   0
    Invalid Server DUID            :   0
    Invalid Unicast Option         :   0
    Invalid Preference Option      :   0
        Other Invalid Packets          :   0
    vCPE Not Support Packet        :   0

-------------------------------------------------------------------------
    Sent Packets
-------------------------------------------------------------------------
  Total Packets                    :   18

  Sent to Clients                  :   18
    Advertise Packets              :   8
    Reply     Packets              :   10

  Sent to Servers                  :   0
    Solicit   Packets              :   0
    Request   Packets              :   0
    Renew     Packets              :   0
    Rebind    Packets              :   0
    Confirm   Packets              :   0
    Release   Packets              :   0
    Decline   Packets              :   0

-------------------------------------------------------------------------
Run the display ipv6-pool max-ratio domain command to view information about IPv6 address pool or prefix pool usage in all domains on the device.
<BASE_VNFC1> display ipv6-pool max-ratio domain
  ----------------------------------------------------------------------------
  Domain name:                                                                
  Address                             Current       Max                 Time 
  NDRA Unshared Prefix                Current       Max                 Time 
  Delegation Prefix                   Current       Max                 Time 
  ----------------------------------------------------------------------------
  isp2                                                                        
                                          10%         40%  2012-08-07 15:31:50 
                                            0          0                    - 
                                            0          0                    - 
  ----------------------------------------------------------------------------
Run the display ipv6-pool pool-usage { upper-threshold | lower-threshold | all-threshold } command to view information about domains whose IPv6 address pool or prefix pool usage exceeds a specified threshold.
<BASE_VNFC1> display ipv6-pool pool-usage upper-threshold
--------------------------------------------------------
  Domain name:
  Address                  PoolLen    Used    Ratio
  NDRA unshared Prefix     PoolLen    Used    Ratio
  Delegation Prefix        PoolLen    Used    Ratio
  --------------------------------------------------------
  domain1(up)
                            262144     252222   90%
                                 0       0       0%
                                 0       0       0%
Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055031

Views: 17281

Downloads: 70

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next