trust vpn-instance framed-ipv6-pool

Function

The trust vpn-instance framed-ipv6-pool command configures a device to trust the VPN instance bound to the IPv6 address pool or IPv6 address pool group that the RADIUS server uses to deliver IP addresses to Layer 2 IPv6 users.

The undo trust vpn-instance framed-ipv6-pool command restores the default configuration.

By default, a device trusts the VPN instance bound to the domain to which Layer 2 IPv6 users belong.

This command is supported only on the NetEngine 8000 F1A.

Format

trust vpn-instance framed-ipv6-pool

undo trust vpn-instance framed-ipv6-pool

Parameters

None

Views

AAA domain view

Default Level

3: Management level

Task Name and Operations

Task Name	Operations
aaa	write

Usage Guidelines

Usage Scenario

By default, a domain cannot have both public and private network users or have users belonging to different VPN instances. To enable users belonging to different VPN instances or public and private network users access the network through the same BAS interface and coexist in the same domain, run the trust vpn-instance framed-ipv6-pool command. After this command is run, the device trust only the VPN instance bound to the IPv6 address pool or IPv6 address pool group that the RADIUS server uses to deliver IPv6 addresses.

Configuration Impact

After the trust vpn-instance framed-ipv6-pool command is configured, the device trusts only the VPN instance bound to the IPv6 address pool or IPv6 address pool group that the RADIUS server uses to deliver IPv6 addresses. If the trust vpn-instance framed-ipv6-pool command is not configured but the trust vpn-instance access-interface command is configured, the device trusts only the VPN instance bound to the BAS interface through which Layer 2 IPv6 users go online. If the trust vpn-instance access-interface command is not configured, the device trusts only the VPN instance bound to the domain to which Layer 2 IPv6 users belong.

Precautions

This command applies only to Layer 2 common IPv6 users and static IPv6 users.

If the RADIUS server has delivered the RADIUS attribute HW-VPN-Instance(HUAWEI-94), the trust vpn-instance framed-ipv6-pool configuration will not take effect.

In VS mode, this command is supported only by the admin VS.

Example

# Configure a device to trust the VPN instance bound to the IPv6 address pool or IPv6 address pool group that the RADIUS server uses to deliver IPv6 addresses to Layer 2 users.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain huawei
[*HUAWEI-aaa-domain-huawei] commit
[~HUAWEI-aaa-domain-huawei] trust vpn-instance framed-ipv6-pool