[144622] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPV6 over a PPTP Link

daemon@ATHENA.MIT.EDU (Jared Mauch)
Thu Sep 15 15:28:07 2011

From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <3210657A42284615809374B6190B8B01@work>
Date: Thu, 15 Sep 2011 15:27:12 -0400
To: "Meftah Tayeb" <tayeb.meftah@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

So, in order to do that, I recommend you do the backend authentication =
via RADIUS to handle this provisioning and routing.

Cisco has documentation on the AV pairs that are necessary to send in =
the RADIUS response that goes to your PPTP device.  Make sure that you =
are using something with a beefy enough CPU to perform this as PPTP/IPv6 =
may be in the "slow-path" depending on the device.  You want as much to =
be offloaded to the hardware as feasible.

- Jared

On Sep 15, 2011, at 1:38 PM, Meftah Tayeb wrote:

> ok, that's using RA
> but i want to do a routed interface
> so give the PPTP host a static ip and route through it
> thank you
>=20
> ----- Original Message ----- From: "Jared Mauch" =
<jared@puck.nether.net>
> To: "Meftah Tayeb" <tayeb.meftah@gmail.com>
> Cc: <nanog@nanog.org>
> Sent: Thursday, September 15, 2011 6:36 PM
> Subject: Re: IPV6 over a PPTP Link
>=20
>=20
> I did this in the past without troubles.
>=20
> http://www.gossamer-threads.com/lists/nsp/ipv6/27525
>=20
> Should give you some help.
>=20
> - Jared
>=20
> -- snip --
> !
> vpdn enable
> !
> vpdn-group 1
> ! Default PPTP VPDN group
> accept-dialin
> protocol pptp
> virtual-template 1
> !
> interface Virtual-Template1
> ip unnumbered FastEthernet2/0
> ipv6 unnumbered FastEthernet2/0
> ipv6 enable
> ipv6 nd reachable-time 30
> no ipv6 nd suppress-ra
> peer default ip address pool DIAL-IN
> peer default ipv6 pool DIAL-IN6
> ppp encrypt mppe 128
> ppp authentication ms-chap
> ppp ipcp dns 129.250.35.250 129.250.35.251
> !
> ip local pool DIAL-IN 10.10.15.72 10.10.15.79
> ipv6 local pool DIAL-IN6 3ffe:3ffe:0:7080::/62 64
> -- snip --
>=20
> On Sep 15, 2011, at 12:24 PM, Meftah Tayeb wrote:
>=20
>> Hello,
>> can i ofer ipv6 addresses through a PPTP connection using cisco ?
>> if yes, how please ?
>> Thank you
>>   Meftah Tayeb
>> IT Consulting
>> http://www.tmvoip.com/
>> phone: +21321656139
>> Mobile: +213660347746
>>=20
>>=20
>> __________ Information provenant d'ESET NOD32 Antivirus, version de =
la base des signatures de virus 6465 (20110915) __________
>>=20
>> Le message a =E9t=E9 v=E9rifi=E9 par ESET NOD32 Antivirus.
>>=20
>> http://www.eset.com
>>=20
>=20
>=20
>=20
> __________ Information provenant d'ESET NOD32 Antivirus, version de la =
base des signatures de virus 6465 (20110915) __________
>=20
> Le message a =E9t=E9 v=E9rifi=E9 par ESET NOD32 Antivirus.
>=20
> http://www.eset.com
>=20
>=20
>=20
>=20
> __________ Information provenant d'ESET NOD32 Antivirus, version de la =
base des signatures de virus 6465 (20110915) __________
>=20
> Le message a =E9t=E9 v=E9rifi=E9 par ESET NOD32 Antivirus.
>=20
> http://www.eset.com
>=20
>=20



home help back first fref pref prev next nref lref last post