Junos
Reply
Contributor
Aleksandr
Posts: 38
Registered: ‎10-03-2011
0

BRAS MX + Dual-Stack + together filter_IPv4/filter_IPv6

[ Edited ]

Good day!

 

Is there anyone has experience in setting up bundles BRAS (MX Platform) + Dual-Stack +filters simultaneously for both families (inet/inet6) ?

 

When you try to assign a PPPoE-subscriber, working on the Dual-Stack, a few services (eg, Internet and Local_Resource), which both refer to the appropriate filters for families (Inet and Inet6) get an error from the daemon authd:

 

Feb  2 16:43:19  BRAS1 authd[1484]: Mis-configuration, IPv4 and IPv6 both configured in service profile: Local_Resource_100M$$01
Feb  2 16:43:19  BRAS1 authd[1484]: Semantic check failed for profile=Local_Resource_100M$$01, error=252
Feb  2 16:43:19  BRAS1 authd[1484]: dyn_prof_send_request: add pre_processing failure, error=252
Feb  2 16:43:19  BRAS1 authd[1484]: Failed to post a service instantiate request to the dynamic-profile library for session-id:76 Status:252
Feb  2 16:43:19  BRAS1 authd[1484]: Mis-configuration, IPv4 and IPv6 both configured in service profile: Local_Resource_100M$$01
Feb  2 16:43:19  BRAS1 authd[1484]: Semantic check failed for profile=Local_Resource_100M$$01, error=252
Feb  2 16:43:19  BRAS1 authd[1484]: dyn_prof_send_request: add pre_processing failure, error=252
Feb  2 16:43:19  BRAS1 authd[1484]: Failed to post a service instantiate request to the dynamic-profile library for session-id:76 Status:252

 FreeRADIUS test user:

test   Cleartext-Password := "test"
        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        ERX-Service-Activate:1 = "Local_Resource_100M",
        ERX-Service-Statistics:1 = time-volume,
        ERX-Service-Acct-Interval:1 = 600,
        ERX-Service-Activate:2 += "Internet",
        ERX-Service-Statistics:2 += time-volume,
        ERX-Service-Acct-Interval:2 += 600

 Dyn-profile Internet:

show dynamic-profiles Internet
interfaces {
    pp0 {
        unit "$junos-interface-unit" {
            family inet {
                filter {
                    input Internet_in precedence 50;
                    output Internet_out precedence 50;
                }
            }
            family inet6 {
                filter {
                    input Internet_IPv6_in precedence 50;
                    output Internet_IPv6_out precedence 50;
                }
            }
        }
    }
}

 Dyn-profile Local_Resource_100M

show dynamic-profiles Local_Resource_100M
interfaces {
    pp0 {
        unit "$junos-interface-unit" {
            family inet {
                filter {
                    input Local_Resource_100M_in precedence 10;
                    output Local_Resource_100M_out precedence 10;
                }
            }
            family inet6 {
                filter {
                    input Local_Resource_100M_IPv6_in precedence 10;
                    output Local_Resource_100M_IPv6_out precedence 10;
                }
            }
        }
    }
}

However, the "starter" access-profile contains instructions to use a combination of two filters for both families inet and inet6, who successfully applied to pp0.X interface

 

show dynamic-profiles Start_PPPoE

interfaces {
    pp0 {
        unit "$junos-interface-unit" {
            ppp-options {
                chap;
		pap;
            }
            pppoe-options {
                underlying-interface "$junos-underlying-interface";
                server;
            }
            family inet {
                filter {
                    input portal-input precedence 100;
                    output portal-output precedence 100;
                }
                
                unnumbered-address "$junos-loopback-interface";
           }
            family inet6 {
                filter {
                    input portal-ipv6-input precedence 100;
                    output portal-ipv6-output precedence 100;
                }
                address $junos-ipv6-address;
            }
        }
    }
}
protocols {
    router-advertisement {
        interface "$junos-interface-name" {
            prefix $junos-ipv6-ndra-prefix;
        }
    }
}

 


 

       


Juniper Employee
Bernd
Posts: 9
Registered: ‎08-04-2009
0

Re: BRAS MX + Dual-Stack + together filter_IPv4/filter_IPv6

"combined" service are currently not supported.

You a need separate service for inet and inet6 today.

 

Contributor
Aleksandr
Posts: 38
Registered: ‎10-03-2011
0

Re: BRAS MX + Dual-Stack + together filter_IPv4/filter_IPv6

Hi !

 

Yes. this method works. Verified.

 

But then the subscriber can get a 2Mbit/s for IPv4 and 2 Mbit/s for IPv6. Total 4Mbit/s. This allowed more of its bandwidth to 2Mbit/s. This is a problem :smileysad:.

 


Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.