No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Configuration Guide - User Access 01

This is NE40E V800R010C10SPC500 Configuration Guide - User Access
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring NDRA Address Allocation

Configuring NDRA Address Allocation

This section describes how to configure the NE40E to use ND to allocate IPv6 addresses when the CPE works in bridging mode.

Usage Scenario

NDRA address allocation is implemented using Stateless Address Autoconfiguration (SLAAC).

The NE40E allocates only the 64-bit IPv6 prefixes. The 64-bit interface ID is generated by the client itself.

Figure 5-9 Networking diagram of NDRA Address Allocation

The host initiates a connection request, and the CPE transparently forwards the connection request packet. The NE40E uses NDRA to allocate IPv6 addresses to the host.

NOTE:

If NDRA address allocation is configured for IPoXv6 users, only unshared IPv6 prefixes support to allocate .

Pre-configuration Tasks

Before configuring NDRA address allocation, complete the following tasks:

Configuring the CPE working mode as bridging mode

Enabling IPv6

Configuration Procedures

Configuring an IPv6 prefix pool

Before configuring the NDRA address allocation mode, configure an IPv6 prefix pool and bind it to an address pool.

Context

  • Prefix configuration

    Only one prefix and one mask can be configured for a local prefix pool. The mask length ranges from 1 bit to 128 bits.

  • Prefix locking configuration

    After a prefix pool is locked, the leases of prefixes that have been allocated cannot be extended and new addresses cannot be allocated.

  • Address conflict resolution configuration

    If an IPv6 address status conflict is resolved, the address can be allocated to another user.

  • Binding an IPv6 prefix pool to a VPN instance

    After a prefix pool is bound to a VPN instance, prefixes in the prefix pool can be allocated to VPN users.

  • Prefix lease configuration

    A preferred prefix lifetime and valid prefix lifetime can be configured. The default value for the preferred prefix lifetime is 2 days, and the default value for the valid prefix lifetime is 3 days. The preferred prefix lifetime is used to limit the lease renewal time and rebinding time. By default, the lease renewal time accounts for 50% of the preferred prefix lifetime, and rebinding time accounts for 80% of the preferred lifetime. The valid prefix lifetime specifies the validity period in which an address can be used.

  • Address reservation configuration

    Addresses in the local prefix pool have four reservation types:
    • 1: MAC reservation

    • 2: MAC+lease-based reservation

    • 3: DUID reservation

    • 4: DUID+lease-based reservation

  • Address withdrawal

    The address of an offline user can be withdrawn using the command.

  • Exclusive prefix pool configuration

    The delegation prefix pool can be used to allocate unshared prefixes to ND users or prefixes only to DHCPv6 (IA_PD) users.

  • Prefix exclusion

    In complex network planning, some IPv6 prefixes cannot be allocated to users.

  • Address exclusion

    In complex network planning, some IPv6 addresses cannot be allocated to users.

Perform the following steps on the NE40E.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run ipv6 prefix prefix-name [ local | delegation ]

    An IPv6 prefix pool is created and the IPv6 prefix pool view is displayed.

    • The local prefix pool is used to allocate shared prefixes to ND users.

    • The delegation prefix pool can allocate unshared prefixes to ND users. The delegation prefix pool configured with slaac-unshare-only enjoys a higher priority.

  3. (Optional) Run slaac-unshare-only

    The delegation prefix pool can be used only in stateless address allocation mode.

    After this command is run, the delegation prefix pool no longer allocates prefixes when receiving a DHCPv6 IAPD packet from the clients applying for addresses. In addition, the delegation prefix pool configured with this command takes precedence over those without this configuration.

  4. Run prefix prefix-address/prefix-length [ delegating-prefix-length delegating-prefix-length ]

    IPv6 prefixes are configured.

    The assignable prefix length is the length of the IPv6 prefix that a delegating router allocates to the requesting router. The assignable prefix length in a prefix pool must be greater than or equal to the prefix length configured in the prefix pool. Otherwise, the prefix pool cannot allocate prefixes to users.

  5. (Optional) Run excluded-ipv6-address start-ipv6-address [ end-ipv6-address ]

    A specified IPv6 address is prohibited.

    The prohibited IPv6 address must be in the assignable range of the prefix pool. When the end IPv6 address is not specified, only the start IPv6 address is prohibited.

  6. (Optional) Run excluded-ipv6-prefix start-ipv6-prefix/prefix-length [ end-ipv6-prefix/prefix-length ]

    A specified IPv6 prefix is prohibited.

    The prohibited IPv6 prefix must be in the assignable range of the prefix pool. When the end IPv6 prefix is not specified, only the start IPv6 prefix is prohibited.

  7. (Optional) Run lock

    The IPv6 prefix pool is locked.

    No prefix in the locked IPv6 prefix pool can be allocated, preventing new users from getting online using the IPv6 prefix pool.

    This command applies to a scenario where the IPv6 prefix pool cannot be deleted because it is being used by online users. Lock the IPv6 prefix pool first to stop it from allocating prefixes. The prefixes in the IPv6 prefix pool will be released when the users get offline. Then the IPv6 prefix pool can be deleted.

  8. (Optional) Run vpn-instance vpn-instance-name

    The VPN instance is configured for the prefix pool.

  9. (Optional) Run lifetime preferred-lifetime { days days-value [ hours hours-value [ minutes minutes-value ] ] | infinite } valid-lifetime { days days-value [ hours hours-value [ minutes minutes-value ] ] | infinite }

    The preferred lifetime and valid lifetime of IPv6 prefixes are configured.

    preferred-lifetime of the IPv6 prefixes in the command is used by the system to calculate the lease renewal time and rebinding time of the IPv6 prefix pool. The time must be no less than 1 minute. The default value is 2 days.

    valid-lifetime specifies the validity period of the prefixes. The users using the prefixes will be logged off after the validity period expires. The valid-lifetime must be no less than 1 minute, nor less than the preferred prefix lifetime. The default value is 3 days.

  10. (Optional) Run conflict auto-recycle interval interval-time

    The interval at which conflicting prefixes are automatically recycled is configured.

    This command is valid only to the local prefix pool.

  11. (Optional) Run reserved prefix { duid | mac } [ lease ]

    The reservation type of user prefixes in the prefix pool is configured.

  12. (Optional) Run recycle prefix start-prefix [ end-prefix ]

    The prefix status is set to idle.

  13. (Optional) Run reserved ipv6-address { duid | mac } [ lease ]

    The reservation type for the IPv6 addresses in a local address pool is configured.

  14. (Optional) Run recycle ipv6-address start-prefix [ end-prefix ]

    The status of IPv6 addresses is set to idle.

  15. Run commit

    The configuration is committed.

Configuring an IPv6 Address Pool

After an IPv6 prefix pool is configured in NDRA address allocation mode, you need to configure an IPv6 address pool.

Context

  • Prefix binding

    A prefix pool can be bound to only one address pool. Similarly, an address pool can be bound to only one prefix pool. Table 5-2 shows the binding between address pools and prefix pools.

    Table 5-2 Binding between address pools and prefix pools

    Address Pool Type

    Prefix Pool for Binding

    User-side local address pool

    Local prefix pool

    User-side delegation address pool

    Delegation prefix pool

    User-side relay address pool

    Local prefix pool

    User-side remote address pool

    Remote prefix pool

  • Priority configuration

    Among address pools of the same type, the greater the value of pool, the higher its priority.

    In NDRA address allocation mode, BAS local address pools are used to allocate shared prefixes, while BAS delegation address pools are used to allocate unshared prefixes. A BAS delegation address pool configured with slaac-unshare-only takes precedence over other BAS delegation address pools.

  • Address pool binding configuration

    An IPv6 address pool whose addresses are in use cannot be deleted. To delete an IPv6 address pool, first run the lock command in the IPv6 address pool view to lock the pool and then delete it after all online users have logged out.

  • DNS suffix configuration

    Only one domain name suffix can be set for an IPv6 address pool.

  • DNS server configuration

    A maximum of two DNS servers can be bound to an IPv6 address pool.

  • Address lease configuration

    If an IPv6 address pool has been bound to a domain, the address lease cannot be changed.

Perform the following steps on the NE40E.

Procedure

  1. Run system-view

    The system view is displayed.

  2. (Optional) Run access wait-request-time dhcpv6 time-value

    The timeout period for a router to wait for a Request message from a client in response to an Advertise message sent to the client is set.

  3. Run ipv6 pool pool-name { bas { local | delegation | reomote } }

    An IPv6 address pool is created and the IPv6 address pool view is displayed.

    NOTE:

    The parameter remote is controlled by the PAF file. It is disabled by default. That is, the ipv6 pool bas remote cannot be configured by default.

  4. Run prefix prefix-name

    The IPv6 address pool is bound to an IPv6 prefix pool.

  5. (Optional) Run preference preference-value

    A priority value is set for the IPv6 address pool.

    The default value is 255.

  6. (Optional) Run dns-server ipv6-address &<1-2>

    A DNS server is specified for an IPv6 address pool. An IPv6 address is used to specify a DNS server.

  7. (Optional) Run renew-time-percent renew-time-percent rebind-time-percent rebind-time-percent

    A lease renewal time and rebinding time are set for the IPv6 address pool.

    By default, the renewal time for an IPv6 address pool is 50% of the preferred lifetime and the rebinding time is 80% of the preferred lifetime.

  8. (Optional) Run ipv6-pool statistic include shared-user

    IPv6 address pool statistics include those about users sharing the prefix pool.

  9. (Optional) Run wait-request-time time-value

    The timeout period for a router to wait for a Request message from a client in response to an Advertise message sent to the client is set.

    NOTE:

    The wait-request-time time-value command is run in the IP address pool view whereas the access wait-request-time dhcpv6 time-value command is run in the system view. If the two commands are both run, the wait-request-time time-value command takes effect.

  10. Run commit

    The configuration is committed.

Binding an IPv6 Address Pool to a Domain

Users in the domain can obtain addresses from the address pool only after an IPv6 address pool is bound to a domain.

Prerequisites

The address pool to be bound has been created and bound to a prefix pool.

Context

Perform the following steps on router.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run aaa

    The AAA view is displayed.

  3. Run domain domain-name

    A domain is created and the domain view is displayed.

  4. Run ipv6-pool pool-name

    The IPv6 local address pool or the delegation address pool is bound to the domain.

  5. (Optional) Run ipv6-warning-threshold { upper-limit-value | lower-limit lower-limit-value }

    Threshold for the usage of IPv6 addresses and prefixes is configured.

  6. Run commit

    The configuration is committed.

(Optional) Configuring the state of Address Allocation

Configuring the state of address allocation according to the IPv6 access mode and address allocation mode.

Context

Stateless address allocation (M=0) should be configured for NDRA and NDRA+IA_PD address allocation modes. By default, the M flag is 0, you need not configuration.

NOTE:
  • For PPPoE users, the domain configuration determines whether stateful or stateless configuration should be adopted.
  • For IPoE users, the interface configuration determines whether stateful or stateless address configuration should be adopted.

If the M flag is 0, and the O flag is 1, the clients need to obtain other configuration information except IPv6 addresses in stateful mode.

Perform the following steps on router.

Procedure

  • State of the interface
    1. Run system-view

      The system view is displayed.

    2. Run interface interface-type interface-number

      The interface view is displayed.

    3. Run undo ipv6 nd autoconfig managed-address-flag

      Stateless address allocation mode is enabled.

    4. Run ipv6 nd autoconfig other-flag

      The O flag is set to 1 to enable stateful mode.

  • State of the domain
    1. Run system-view

      The system view is displayed.

    2. Run aaa

      The AAA view is displayed.

    3. Run domain domain-name

      A domain is created and the AAA view is displayed.

    4. Run undo ipv6 nd autoconfig managed-address-flag

      Stateless address allocation is configured for PPPoX users.

    5. Run ipv6 nd autoconfig other-flag { ndra | dhcpv6 }

      The O flag is set.

    6. Run prefix-assign-mode unshared

      The IPv6 prefix allocation mode is set to unshared mode. After the configuration, IPv6 users do not share the same IP prefix.

    7. Run dhcpv6-follow-ipv6cp wait-delay time-value

      The timeout period for waiting for a DHCPv6 connection request is set.

  • Run commit

    The configuration is committed.

(Optional) Configuring a Constant Index for an IPv6 Address Pool

Context

After the ip-pool constant-index enable command is used, the index of the IPv4 address pool, IPv6 prefix pool, or IPv6 address pool does not change after the device restarts. The constant-index index command is automatically generated in the views of all the IPv4 address pools, IPv6 prefix pools, and IPv6 address pools configured on the device for users to check the constant value. But the constant-index command cannot be used to change the automatically generated constant index for an IPv6 prefix pool or IPv6 address pool.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run ip-pool constant-index enable

    The constant index function is enabled for IPv4 address pools, IPv6 prefix pools, and IPv6 address pools.

  3. Run commit

    The configuration is committed.

(Optional) Locking an IPv6 Address Pool

This section describes how to lock an IPv6 address pool so that the address pool cannot be used to assign IPv6 addresses to new users.

Context

An IPv6 address pool with an in-use IPv6 address cannot be deleted. Therefore, configure the drain function to lock the IPv6 address pool before you delete the address pool. After an IPv6 address pool is locked using the lock drain command, DHCP Renew or Rebind messages from online users will be discarded. The IPv6 address pool can be deleted after all online users using the address pool go offline upon lease expiry. If you only need to disable an IPv6 address pool so that the address pool will not be used to assign IPv6 addresses to new users but online users can still use assigned IPv6 addresses, configure the lock function to lock the address pool using the lock command.

Perform the following steps on the router.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run ipv6 pool pool-name [ bas { local | remote | delegation | relay } ]

    The IPv6 address pool view is displayed.

  3. Perform either of the following configurations as needed:

    • Configure the drain function to lock the IPv6 address pool.

      1. Run lock drain

        The IPv6 address pool is locked so that the address pool cannot be used to assign IPv6 addresses to new users and Renew or Rebind messages from online users using the address pool are discarded.

        NOTE:

        This command does not take effect for ND users in remote address pool scenarios.

      2. Run commit

        The configuration is committed.

    • Configure the lock function to lock the IPv6 address pool.

      1. Run lock

        The IPv6 address pool is locked so that the address pool cannot be used to assign IPv6 addresses to new users but Renew or Rebind messages from online users can still be processed.

      2. Run commit

        The configuration is committed.

Verifying the NDRA Address Allocation Configuration

After completing configurations, you can view information about the IPv6 address pool, the prefix pool, domain configurations, and the address usage of the address pool.

Procedure

  • Run the display ipv6 pool [ pool-name ] command to check information about the IPv6 address pool.
  • Run the display ipv6 prefix [ prefix-name [ all | used ] ] command to check information about the prefix pool.
  • Run the display domain [ domain-name ] command to check information about the domain.
  • Run the display ipv6-pool pool-usage [ domain domain-name | pool-name [ pool-name ] ] command to check information about the usage of the address pool.
  • Run the display ipv6-pool max-usage { pool [ pool-name ] | domain [ domain-name ] } command in any view to check the historical maximum usage of addresses in an IPv6 address pool.
  • Run the display ipv6-pool max-ratio domain command to check information about IPv6 address pool or prefix pool usage in all domains on the device.
  • Run the display ipv6-pool pool-usage { upper-threshold | lower-threshold | all-threshold } command to check information about domains whose IPv6 address pool or prefix pool usage exceeds a specified threshold.
Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055031

Views: 17736

Downloads: 72

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next