EasyManua.ls Logo

Alcatel-Lucent AOS-W 6.5.3.x - Filtering an Ipv6 Extension Header (EH); Configuring a Captive Portal over Ipv6

Alcatel-Lucent AOS-W 6.5.3.x
1160 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Loading...
139| IPv6 Support AOS-W 6.5.3.x| User Guide
2. Select an AP and click Provision.
3. Under the Master Discovery section, enter the host switch IP address and the IPv6 address of the master
switch.
4. To provision a static IP, select the Use the following IP address check box under the IP Settings section,
and enter the following details:
n IPv6 Address/Prefix-lengths
n Gateway IPv6 Address
n DNS IPv6 Address
Ensure that CPSEC is disabled before rebooting the AP.
5. Click Apply and Reboot to bring the IPv6 AP up.
In the CLI
To provision a static IPv6 address:
(host)(config)# provision-ap
Enhancements to IPv6Support on AP
This release of AOS-W provides the following IPv6 enhancements on the AP:
n DNS based ipv6 switch discovery
n FTP support for image upgrade in an IPv6 network
n DHCPv6 client support
Monitoring Bandwidth Usage
Starting from AOS-W 6.5, customers can monitor bandwidth usage by clients/hosts with IPv6 addresses, over
radius protocol. The Framed-IPv6-Address attribute is used in accounting start, stop, and interim packets. A
host can have multiple IPv6 addresses and all of them are tracked to check the usage, for billing purpose.
Filtering an IPv6 Extension Header (EH)
AOS-W firewall is enhanced to process the IPv6 Extension Header (EH) to enable IPv6 packet filtering. You can
now filter the incoming IPv6 packets based on the EH type. You can edit the packet filter options in the default
EH, using the CLI. The default EH alias permits all EH types.
Execute the following commands to permit or deny the IPv6 packets matching an EH type:
(host)(config) #netexthdr default
(host)(config-exthdr) #eh <eh-type> permit | deny
To view the EH types denied:
(host) (config-exthdr) #show netexthdr default
Configuring a Captive Portal over IPv6
IPv6 is now enabled on the captive portal for user authentication on the Alcatel-Lucent switch. For user
authentication, use the internal captive portal that is initiated from the switch. A new parameter captive has
been added to the IPv6 captive portal session ACL:
(host) (config) #ipv6 user alias controller 6 svc-https captive

Table of Contents