Ipcp Lockout And Local Ip Address Pool Restoration - Juniper JUNOSE 11.1.X - LINK LAYER CONFIGURATION 4-7-2010 Configuration Manual

JUNOSe 11.1.x Link Layer Configuration Guide

IPCP Lockout and Local IP Address Pool Restoration

You can configure the router to terminate invalid IPv4 subscribers and return the
unused IPv4 addresses to the local address pool. When Internet Protocol version 6
Control Protocol (IPv6CP) is negotiated, the router waits for 10 seconds for Internet
Protocol Control Protocol (IPCP) negotiation. If IPCP is not negotiated in 10 seconds,
the interface blocks IPv4 over Network Control Protocol (NCP) packets and the IP
address is returned to the local address pool. The subscribers must then reconnect
to negotiate IPCP again.
The router assigns IPv4 and IPv6 addresses for a PPP subscriber after authentication
in the following ways:
The subscriber can negotiate IPv4 addresses, IPv6 addresses, or both. After an IPv6
address is negotiated for an IPCP service, the PPP application waits for the negotiation
of IPv4 address and then returns the assigned unused addresses to the local pool.
By default, this feature is disabled. To enable the feature, issue the ppp ipcp lockout
command from Interface Configuration, Subinterface Configuration, or Profile
272
Overview
If B-RAS sends an ACK, it ignores the options and brings up the link
The CPE negotiates the prompted options but the option values are not acceptable
B-RAS sends another NAK with the prompted options, until max
configure-nak is exceeded
The CPE negotiates the prompted options but some option values are not
acceptable
B-RAS sends a NAK for unacceptable options, until max configure-nak is
exceeded
The CPE stops responding on receiving the prompted options
B-RAS negotiation timer expires and the link is terminated
The CPE negotiates the prompted option after the link comes up
This is treated as a renegotiation request and B-RAS sends an ACK/NAK until
max renegotiation and max configure-nak counters are exceeded, respectively
The CPE starts renegotiation without the prompted options
B-RAS renegotiates, until max renegotiation is exceeded
If B-RAS sends a NAK, it prompts the options, until max configure-nak is
exceeded
If B-RAS sends an ACK, it ignores the options and brings up this link
The CPE NAKs or rejects the prompted options
This behavior is non-compliant with RFC because a configure-rej or a
configure-nak must be sent only in response to a configure-req
RADIUS returns a valid IP address or a IPv6 prefix
The configured local address pool returns a valid IP address