dhcpv6 user-identify-policy

Function

The dhcpv6 user-identify-policy command configures a method for obtaining MAC addresses of Layer 3 DHCPv6 users during login.

The undo dhcpv6 user-identify-policy command restores the default configuration.

By default, a device preferentially obtains MAC addresses of Layer 3 DHCPv6 users from the Option 38 field. If MAC addresses fail to be obtained from the Option 38 field, the device obtains users' MAC addresses from DUIDs. If MAC addresses fail to be obtained from DUIDs, user login fails.

This command is supported only on the NetEngine 8000 F1A.

Format

dhcpv6 user-identify-policy { option79-option38 | option38-option79 | option79 | option38 } [ no-exist-action offline ]

undo dhcpv6 user-identify-policy { option79-option38 | option38-option79 | option79 | option38 } [ no-exist-action offline ]

Parameters

Parameter Description Value
option79-option38

Get mac by option79 or option38.

-

option38-option79

Get mac by option38 or option79.

-

option79

Get mac by option79.

-

option38

Get mac by option38.

-

no-exist-action

Action for no option79 or option38.

-

offline

Offline for option79 or option38.

-

Views

BAS interface view (FE), BAS interface view (GE), BAS interface view (VE), BAS interface view (trunk)

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
bras-control write

Usage Guidelines

Usage Scenario

When a Layer 3 DHCPv6 user requests to go online, the device needs to obtain the user's MAC address. To configure a method for obtaining users' MAC addresses, run the dhcpv6 user-identify-policy command.

  • If option79-option38 is specified, the device preferentially obtains users' MAC addresses from the Option 79 field in relay headers of DHCPv6 Solicit or Advertise messages. If no MAC address is carried in the Option 79 field, the device obtains users' MAC addresses from the Option 38 field.
  • If option38-option79 is specified, the device preferentially obtains users' MAC addresses from the Option 38 field in relay headers of DHCPv6 Solicit or Advertise messages. If no MAC address is carried in the Option 38 field, the device obtains users' MAC addresses from the Option 79 field.
  • If option79 is specified, the device obtains users' MAC addresses from the Option 79 field in relay headers of DHCPv6 Solicit or Advertise messages.
  • If option38 is specified, the device obtains users' MAC addresses from the Option 38 field in relay headers of DHCPv6 Solicit or Advertise messages.
  • If no-exist-action offline is specified and the device fails to obtain users' MAC addresses using one of the preceding methods, user login fails. If no-exist-action offline is not specified and the device fails to obtain users' MAC addresses using one of the preceding methods, the device obtains users' MAC addresses from DUIDs. If users' MAC addresses cannot be obtained from DUIDs, user login then fails.

    When the dhcpv6 user-identify-policy command is not configured, the deviceobtains users' MAC addresses from the Option 38.If users' MAC addresses cannot be obtained fromOption 38,the device obtains users' MAC addresses from DUIDs.

This configuration modification may affects the dhcpv6 protocol interaction interrupt of online users,therefore, the prompt information is added during command line configuration.

Prerequisites

The access-type layer3-subscriber command has been run in the BAS interface view to set the access type of the BAS interface to layer3-subscriber.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Configure the device to obtain MAC addresses of Layer 3 DHCPv6 users preferentially from the Option 79 field and then from the Option 38 field during user login and deny user access if it cannot obtain users' MAC addresses using the preceding methods.
<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet0/1/17
[~HUAWEI-GigabitEthernet0/1/17] bas
[~HUAWEI-GigabitEthernet0/1/17-bas] access-type layer3-subscriber default-domain authentication domain1
[*HUAWEI-GigabitEthernet0/1/17-bas] commit
[~HUAWEI-GigabitEthernet0/1/17-bas] dhcpv6 user-identify-policy option79-option38 no-exist-action offline
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >