Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[MX] "test aaa ppp user" shows Client IP Address 255.255.255.254

0

0

Article ID: KB32821 KB Last Updated: 25 Jun 2018Version: 1.0
Summary:

On an MX running Junos OS 16.1+ in an BBE (Broadband Edge) subscriber environment, the "test aaa ppp user" command output shows the address 255.255.255.254 for the 'Client IP Address'. This article explains the reason.

Symptoms:
The CLI operational command "test aaa ppp user" is a useful command to verify PPPoE dial in with RADIUS internally.

Before Junos OS 16.1, the 'Client IP Address' would be assigned from the MX local pool in the PPP process:

user@MX-BBE-re0> test aaa ppp user jnpr1 password test

    Authentication Grant
    ************User Attributes***********
         User Name -                              jnpr1            
         Virtual Router Name (LS:RI) -            default:default  
         Service Type -                           Framed           
         Agent Remote Id -                               
         Client IP Address -                      10.10.0.100       <=======
         Client IP Netmask -                      255.255.255.255  
         Primary DNS IP Address -                        
         Secondary DNS IP Address -                      
         Primary WINS IP Address -                       
         Secondary WINS IP Address -                     
         Primary DNS IPv6 Address  -                     
         Secondary DNS IPv6 Address  -                   
         Reply Message -                                 
         Class Attribute -                               
         Framed Pool -                            pool1            
         Client IPv6 Address -                           
         Client IPv6 Mask -                              
         Framed IPv6 Prefix -                            
         Framed IPv6 Pool -                              
         NDRA IPv6 Prefix -                              
         Login IPv6 Host -                               
         Framed Interface Id -                           
         Delegated IPv6 Prefix -                         
         Delegated IPv6 Pool -                           
         User Password -                          test             
         CHAP Password -                                 
         NAS Ip Address -                                
         NAS Port -                               0                
         NAS Port Type -                          5                
         Mac Address -                            AB:CD:00:00:00:01
         Idle Timeout -                           7200             
         Session Timeout -                        14400            
         Cos shaping rate -                              
         Cos scheduler param -                           
         Ingress Policy Name -                    p8m              
         Egress Policy Name -                     p8m              
         Redirect VR Name (LS:RI) -                      
         Service Bundle -                                
         IGMP Enable -                                   
         IGMP Version -                                  
         MLD Version -                                   
         IGMP Immediate Leave -                          
         MLD Immediate Leave -                           
         IPv6 Ingress Policy Name -                      
         IPv6 Egress Policy Name -                       
         Acct Session ID -                        1                
         Acct Interim Interval -                  1800             
         Acct Type -                              2                
         Chargeable user identity -                      
         NAS Port Id -                            -0/0/0           
         NAS Port -                               4095             
         NAS Port Type -                          15               
         Framed Protocol -                        1                

    ****Pausing 10 seconds before disconnecting the test user*********

    Logging out subscriber
         Terminate Id -                                  
    Test complete. Exiting


Now, with Junos OS 16.1+, the 'Client IP Address' is 255.255.255.254. It is not displaying the IP address which it is getting from the local pool.

user@MX-BBE-re0> test aaa ppp user jnpr1 password test
    Authentication Grant
    ************User Attributes***********
         User Name -                              jnpr1            
         Virtual Router Name (LS:RI) -            default:default  
         Service Type -                           Framed           
         Agent Remote Id -                               
         Client IP Address -                      255.255.255.254   <=======
         Client IP Netmask -                             
         Primary DNS IP Address -                        
         Secondary DNS IP Address -                      
         Primary WINS IP Address -                       
         Secondary WINS IP Address -                     
         Primary DNS IPv6 Address  -                     
         Secondary DNS IPv6 Address  -                   
         Reply Message -                                 
         Class Attribute -                               
         Framed Pool -                            pool1            
         Client IPv6 Address -                           
         Client IPv6 Mask -                              
         Framed IPv6 Prefix -                            
         Framed IPv6 Pool -                              
         NDRA IPv6 Prefix -                              
         Login IPv6 Host -                               
         Framed Interface Id -                           
         Delegated IPv6 Prefix -                         
         Delegated IPv6 Pool -                           
         User Password -                          test             
         CHAP Password -                                 
         NAS Ip Address -                                
         NAS Port -                               0                
         NAS Port Type -                          5                
         Mac Address -                            AB:CD:00:00:00:01
         Idle Timeout -                           7200             
         Session Timeout -                        14400            
         Cos shaping rate -                              
         Cos scheduler param -                           
         Ingress Policy Name -                    p8m              
         Egress Policy Name -                     p8m              
         Redirect VR Name (LS:RI) -                      
         Service Bundle -                                
         IGMP Enable -                                   
         IGMP Version -                                  
         MLD Version -                                   
         IGMP Immediate Leave -                          
         MLD Immediate Leave -                           
         IPv6 Ingress Policy Name -                      
         IPv6 Egress Policy Name -                       
         Dynamic Profile -                        junos-default-profile
         Acct Session ID -                        15               
         Acct Interim Interval -                  1800             
         Acct Type -                              2                
         Chargeable user identity -                      
         NAS Port Id -                            -0/0/0           
         NAS Port -                               4095             
         NAS Port Type -                          15               
         Framed Protocol -                        1                
         PIM -                                           

    ****Pausing 10 seconds before disconnecting the test user*********
    Logging out subscriber
         Terminate Id -                                  
    Test complete. Exiting
 

So, why is Client IP Address 255.255.255.254, and what does mean 255.255.255.254?

Solution:

This is expected behavior and has no service impact. When you dial in from a real PC client, the IP address will be assigned from the RADIUS pool. 255.255.255.254 is a special address with a special meaning - assign from NAS' local pool, and it will be assigned to all user instances.

For more information, see RFC2865. The Address field value of 0xFFFFFFFF (255.255.255.255) indicates that the NAS should allow the user to select an address (e.g. Negotiated). The value 0xFFFFFFFE (255.255.255.254) indicates that the NAS should select an address for the user (e.g. assigned from a pool of addresses kept by the NAS). It also says that other valid values indicate that the NAS should use that value as the user's IP address.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search