Alcatel-Lucent AOS-W 6.5.3.x - Understanding AOS-W Authentication and Firewall Features that Support Ipv6

To Next Page

To Previous Page

149| IPv6 Support AOS-W 6.5.3.x| User Guide

Understanding the Network Connection Sequence for Windows IPv6 Clients

This section describes the network connection sequence for Windows Vista/XP clients that use IPv6 addresses,

and the actions performed by the AP and the switch.

1. The IPv6 client sends a Router Solicit message through the AP. The AP passes the Router Solicit message

from the IPv6 client through the GRE tunnel to the switch.

2. The switch removes the 802.11 frame and creates an 802.3 frame for the Router Solicit message.

a. The switch authenticates the user, applies firewall policies, and bridges the 802.3 frame to the IPv6

router.

b. The switch creates entries in the user and session tables.

3. The IPv6 router responds with a Router Advertisement message.

4. The switch applies firewall policies, then creates an 802.11 frame for the Router Advertisement message.

The switch sends the Router Advertisement through the GRE tunnel to the AP.

5. The IPv6 client sends a Neighbor Solicitation message.

6. The IPv6 router responds with a Neighbor Advertisement message.

7. If the DHCP is required to provide IPv6 addresses, the DHCPv6 process is started.

8. The IPv6 client sends data.

9. The switch removes the 802.11 frame and creates an 802.3 frame for the data.

The switch authenticates the user, applies firewall policies and bridges the 802.3 frame to the IPv6 router.

The switch creates entries in the user and session tables.

A client can have an IPv4 address and an IPv6 address, but the switch does not relate the states of the IPv4 and the

IPv6 addresses on the same client. For example, if an IPv6 user session is active on a client, the switch will delete an

IPv4 user session on the same client if the idle timeout for the IPv4 session is reached.

Understanding AOS-W Authentication and Firewall Features that

Support IPv6

This section describes AOS-W features that support IPv6 clients.

Understanding Authentication

This release of AOS-W only supports 802.1X authentication for IPv6 clients. You cannot configure layer-3

authentications to authenticate IPv6 clients.

Authentication Method Supported for IPv6 Clients?

802.1X Yes

Stateful 802.1X (with non-Alcatel-

Lucent APs)

Yes

Local database Yes

Captive Portal Yes

Table 37: IPv6 Client Authentication