Pre-requisites:
Enable subscriber management in the VPRN service.
Configure anti-spoof nh-mac in the group-interface sap or msap-policy ies-vprn-only-sap-parameters context, with ipv6 urpf-check optionally configured at the group-interface to compensate for IP anti-spoofing not being enabled.
An ESM dynamic BGPv6 peer is established for a routed subscriber host if the 26.6527.208 Alc-BGP-IPv6-Policy VSA returned in a RADIUS Access-Accept message contains the name of a local configured BGP peering policy and an ESM dynamic peer group is configured in the VPRN BGP context, as shown in the following classic CLI example.
config>subscr-mgmt
bgp-peering-policy "bgpv6-policy-1" create
local-address 2001:db8:b002:201::1
local-as 65536
peer-as 65501
type external
exit
config>service>vprn
bgp
group "esm-dyn-peer-group-1" esm-dynamic-peer
exit
no shutdown
exit
The following example shows the MD-CLI equivalent.
[pr:/configure subscriber-mgmt]
bgp-peering-policy "bgpv6-policy-1" {
local-address 2001:db8:b002:201::1
peer-as 65501
type external
local-as {
as-number 65536
}
}
[pr:/configure service vprn "submgmt-vprn-2000"]
bgp {
group "esm-dyn-peer-group-1" {
admin-state enable
static-group false
}
}
The subscriber host IPv6 WAN address is used as the BGP peer IP address. Both SLAAC and DHCPv6 IA_NA addresses are supported.
For a SLAAC host, the BGP mode on the subscriber side must be active, that is the router at the subscriber premises should initiate the BGP TCP connection, such that the BNG can snoop the TCP SYN and derive the /128 Global Unicast Address of the SLAAC host as the BGP peer address.
ESM dynamic BGP peering is not supported for a DHCPv6 IA_PD host.
The local address can be the subscriber interface IPv6 address (single hop BGP peer) or a loopback interface IPv6 address (multi-hop BGP peer).
See BGP peering parameters for more information about how to configure other BGP peering parameters and Import and export policies for ESM dynamic BGP peers for more information about route policies.
To verify that an ESM dynamic BGPv6 peer is correctly installed, use the following show commands.
show service id service-id ipoe session detail
show service id service-id ppp session detail
Example output:
IPv6 Bgp Peering Policy : bgpv6-policy-1
IPv6 Bgp Peer Status : installed
To verify the state of an ESM dynamic BGPv6 peer, use the show router router-instance bgp summary command.