Page MenuHomeVyOS Platform
Create Task
Maniphest T4868

L2TP ppp-options ipv6 does not work without ipv6 pool but should
Closed, ResolvedPublicBUG
Actions

Description

L2TP ppp-options ipv6 does not work without ipv6 pool, but it should as we can get such addresses via RADIUS attributes:
Framed-IPv6-Prefix and Delegated-IPv6-Prefix
Example of config

set vpn l2tp remote-access authentication mode 'radius'
set vpn l2tp remote-access authentication radius dae-server ip-address '127.0.0.1'
set vpn l2tp remote-access authentication radius dae-server port '1700'
set vpn l2tp remote-access authentication radius dae-server secret 'testing1234'
set vpn l2tp remote-access authentication radius server 192.0.2.5 key 'key123'
set vpn l2tp remote-access client-ip-pool start '203.0.113.10'
set vpn l2tp remote-access client-ip-pool stop '203.0.113.100'
set vpn l2tp remote-access client-ip-pool subnet '203.0.113.0/24'
set vpn l2tp remote-access ppp-options ipv6 'allow'

check config

vyos@r1# cat /run/accel-pppd/l2tp.conf | grep ipv6
ipv6pool
ipv6_nd
ipv6_dhcp
[edit]
vyos@r1#

expecting ipv6=allow

Details

Difficulty level
Normal (likely a few hours)
Version
VyOS 1.4-rolling-202212050318
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

Viacheslav created this task.Dec 9 2022, 9:14 AM
Viacheslav updated the task description. (Show Details)
Viacheslav changed the task status from Open to In progress.Dec 9 2022, 9:51 AM
Viacheslav claimed this task.
Viacheslav renamed this task from L2TP ppp-oprions ipv6 does not work without ipv6 pool but should to L2TP ppp-options ipv6 does not work without ipv6 pool but should.Dec 9 2022, 10:05 AM
Viacheslav added a comment.Dec 9 2022, 10:17 AM

PR https://github.com/vyos/vyos-1x/pull/1700

pasik added a subscriber: pasik.Dec 9 2022, 11:41 AM
Viacheslav closed this task as Resolved.Feb 7 2023, 4:33 PM
Viacheslav moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.