We are having mega fun trying to get RouterOS/PPC 5.11 to do anything with a statically-configured Framed-IPv6-Prefix: attribute.
Just in case it makes any difference, this is L2TP/PPP rather than PPPoE/PPP but the basic concepts are the same.
This is the base PPP profile:
Code: Select all
/ppp profile
set default change-tcp-mss=yes name=default only-one=default remote-ipv6-prefix-pool=none \
use-compression=default use-encryption=default use-ipv6=yes use-mpls=default \
use-vj-compression=default
add change-tcp-mss=yes dhcpv6-pd-pool=adsl-dhcpv6-test dns-server=192.0.2.1,192.0.2.2 \
local-address=192.0.2.254 name=default-l2tp only-one=default remote-ipv6-prefix-pool=\
adsl-prefix-test use-compression=no use-encryption=no use-ipv6=yes use-mpls=no \
use-vj-compression=no
set default-encryption change-tcp-mss=yes name=default-encryption only-one=default \
remote-ipv6-prefix-pool=none use-compression=default use-encryption=yes use-ipv6=yes use-mpls=\
default use-vj-compression=default
/ppp aaa
set accounting=yes interim-update=1m use-radius=yesThe interesting part is that if we statically set a remote-ipv6-prefix: for a user:
Code: Select all
/ppp secret
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=sampleuser@ourrealm.net.uk \
password=blah profile=default-l2tp remote-address=192.0.2.10 remote-ipv6-prefix=\
2001:db8:1000:2::/64 routes="" service=l2tpNow, as we want to statically assign prefixes to users anyway, we remove the pool from the PPP profile and as a result of that, the user now receives no prefix whatsoever.
I have also tested this with FreeRADIUS 2.1.12 (but tried it with local user config in case it was a RADIUS issue on our part) and radcheck/radreply tables are below:
Code: Select all
mysql> SELECT * FROM radcheck WHERE username = 'sampleuser@ourrealm.net.uk';
+-----+----------------------------+--------------------+----+----------+
| id | username | attribute | op | value |
+-----+----------------------------+--------------------+----+----------+
| 164 | sampleuser@ourrealm.net.uk | Cleartext-Password | := | blah |
+-----+----------------------------+--------------------+----+----------+
1 row in set (0.00 sec)
mysql> SELECT * FROM radreply WHERE username = 'sampleuser@ourrealm.net.uk';
+------+----------------------------+------------------------------+----+----------------------+------+
| id | username | attribute | op | value | type |
+------+----------------------------+------------------------------+----+----------------------+------+
| 1986 | sampleuser@ourrealm.net.uk | Mikrotik-Delegated-IPv6-Pool | := | 2001:db8:1002::/48 | l2tp |
| 1984 | sampleuser@ourrealm.net.uk | Framed-IP-Address | := | 192.0.2.10 | l2tp |
| 1988 | sampleuser@ourrealm.net.uk | Framed-IPv6-Prefix | := | 2001:db8:1000:2::/64 | l2tp |
+------+----------------------------+------------------------------+----+----------------------+------+
3 rows in set (0.00 sec)The NAS (mpd5 on FreeBSD) which we are currently using handles Framed-IPv6-Prefix attributes from our RADIUS with no problems.
If we are doing something wrong, I am happy to hold my hands up and apologize to the lads in Latvia for complaining unnecessarily but as it stands, I think there is definitely something amiss with Framed-IPv6-Prefix handling in RouterOS 5.x.
I'm happy to send a supout or provide further information where required.
Regards,
Terry Froy
Spilsby Internet Solutions
http://www.spilsby.net/
