ipv6-address authorization disable

Usage Scenario

In web authentication scenarios, if an IPv6 address pool is configured in the pre-authentication domain, a user who goes online from the pre-authentication domain can be assigned an IPv6 address and the IPv6 address cannot be changed after the user logs in to the post-authentication domain. If a user requires the pre-authentication domain to assign only an IPv4 address other than an IPv6 address, different IPv6 addresses are assigned based on the post-authentication domain. In this case, run this command in the pre-authentication domain so that the user is not assigned an IPv6 address when going online from the pre-authentication domain but can be assigned an IPv6 address after authentication in the post-authentication domain. The authorization attributes supported by the post-authentication domain include the IPv6 address (NA/PD/ND) and IPv6 DNS information.

Configuration Impact

After the ipv6-address authorization disable command is run, even an IPv6 address that is authorized by the RADIUS server or configured on the user domain cannot assign IPv6 addresses to users. IPv6 addresses can be assigned based on the authorization of the post-authentication domain after the user passes web authentication and enters the post-authentication.

Precautions

This command applies only to dynamic Layer 2 IPoE users.

The ipv6-address authorization disable command cannot be used together with the reallocate-ip-address command. If the ipv6-address authorization disable command is run in the pre-authentication domain and the reallocate-ip-address command is run in the authentication domain, IPv6 addresses cannot be allocated to users who go online from the pre-authentication domain. In the authentication domain, IPv4 address reallocation takes effect, but IPv6 addresses cannot be allocated.

In VS mode, this command is supported only by the admin VS.