This article explains how to include Delegated-IPv6-Prefix in Radius Accounting using the knob, ' address-change-immediate-update' .

In the example below, Delegated-IPv6-Prefix/Pool is not returned from the RADIUS server. So, the delegated-IPv6-Prefix is allocated in DHCP session's context and not PPPoE session's context. It can be observed from the 'show subscribers extensive' command that Delegated-IPv6-Prefix is not available in PPPoE session database (DB). Hence, there is no way for AUTHD to send Delegated Prefix in interim messages.

Configure 'address-change-immediate-update' in accounting stanza. With this, DHCP copies delegated prefix from DHCP SDB to PPPoE SDB and requests for immediate-update on PPPoE session. Hence, delegated prefix will be included in interim messages.

labroot@ERX-MX480-RE0# show access   
group-profile DNS_GROUP {
    ppp {
        primary-dns 4.4.4.4;
        secondary-dns 8.8.8.8;
    }
}
profile aaa-profile {
    accounting-order radius;
    authentication-order radius;
    radius {
        authentication-server 10.10.48.247;
        accounting-server 10.10.48.247;
    }
    session-options {
        client-idle-timeout 120;
    }
    radius-server {
        10.10.48.247 {
            port 1900;
            accounting-port 1901;
            secret “$ABC123"; ## SECRET-DATA
            retry 5;
            max-outstanding-requests 2000;
            source-address 10.10.35.202;
        }
    }
    accounting {
        order radius;
        accounting-stop-on-failure;
        immediate-update;
        address-change-immediate-update;
        update-interval 10;
        statistics volume-time;
    }
    service {
        accounting-order activation-protocol;
    }
}
address-assignment {
    neighbor-discovery-router-advertisement ipv6pool;
    pool delegated-pool {
        family inet6 {
            prefix 2001:1284:f01b::/48;
            range 2 prefix-length 64;
        }
    }
    pool ipv6pool {
        family inet6 {
            prefix 2001:1284:f005::/48;
            range p1 prefix-length 64;
        }
    }
}

labroot@ERX-MX480-RE0# run show subscribers extensive
Type: VLAN
Logical System: default
Routing Instance: default
Interface: demux0.3221225487
Interface type: Dynamic
Underlying Interface: xe-3/0/0
Dynamic Profile Name: DYN-DEMUX3
Dynamic Profile Version: 1
State: Active
Session ID: 47
PFE Flow ID: 26
VLAN Id: 100
Login Time: 2017-04-11 17:01:24 IST

Type: PPPoE
User Name: [email protected]
IP Address: 10.55.177.164
IP Netmask: 255.255.255.255
Primary DNS Address: 4.4.4.4
Secondary DNS Address: 8.8.8.8
IPv6 Prefix: 2001:1284:f01b:1::/64   <<< Delegated-IPv6-Prefix copied to PPPoE Session DB
IPV6 Primary DNS Address: 2001:1284:ff02:1::253
IPV6 Secondary DNS Address: 2001:1284:ff02::243
IPv6 User Prefix: 2001:1284:f005:1::/64
Logical System: default
Routing Instance: default
Interface: pp0.3221225488
Interface type: Dynamic
Underlying Interface: demux0.3221225487
Dynamic Profile Name: local-PPPoE
Dynamic Profile Version: 1
MAC Address: 5e:32:87:ed:00:00
Idle Timeout (seconds): 7200
Idle Timeout Ingress Only: FALSE
State: Active
Radius Accounting ID: 48
Session ID: 48
PFE Flow ID: 27
VLAN Id: 100
Login Time: 2017-04-11 17:01:24 IST
IPv6 Address Pool: ipv6pool
IPv6 Interface Address: 2001:1284:f005:1::1/64
IPv6 Framed Interface Id: 0:0:3000:0
IPv4 Input Filter Name: belf_40-pp0.3221225488-in
IPv4 Output Filter Name: belf_40-pp0.3221225488-out
IPv6 Input Filter Name: belf_40_v6-pp0.3221225488-in
IPv6 Output Filter Name: belf_40_v6-pp0.3221225488-out
Accounting interval: 600
Dynamic configuration:
  junos-input-filter: belf_40
  junos-input-ipv6-filter: belf_40_v6
  junos-ipv6-ndra-prefix: 2001:1284:f005:1::/64
  junos-output-filter: belf_40
  junos-output-ipv6-filter: belf_40_v6

Type: DHCP
IPv6 Prefix: 2001:1284:f01b:1::/64
IPV6 Primary DNS Address: 2001:1284:ff02:1::253
IPV6 Secondary DNS Address: 2001:1284:ff02::243
Logical System: default
Routing Instance: default
Interface: pp0.3221225488
Interface type: Static
Underlying Interface: pp0.3221225488
MAC Address: 5e:32:87:ed:00:00          
State: Active
Radius Accounting ID: 49
Session ID: 49
Underlying Session ID: 48
PFE Flow ID: 27
Login Time: 2017-04-11 17:01:24 IST
DHCP Options: len 52
00 08 00 02 00 00 00 01 00 0e 00 01 00 01 20 7f a2 f2 5e 32
87 ed 00 00 00 06 00 08 00 02 00 07 00 17 00 18 00 19 00 0c
00 00 00 0a 00 04 9d 40 00 07 62 00
IPv6 Address Pool: ipv6pool
IPv6 Delegated Address Pool: delegated-pool

Apr 11 17:21:01.177676  ======= Accounting Volume INTERIM triggered ==============
Apr 11 17:21:01.177706 Have session start time for session-id:48
Apr 11 17:21:01.177719 Interim stats call back 48
Apr 11 17:21:01.177745 AccFsm::current state=Acc-Interim-Sent(2) event=5 session-id:48
Apr 11 17:21:01.177758 ACC-FSM:sendAccInterim_a4 for session-id:48
Apr 11 17:21:01.177769 sendAuthModuleAcctReports
Apr 11 17:21:01.177780 Authd module Accounting
Apr 11 17:21:01.177797 Authd acctg module start
Apr 11 17:21:01.177808 authd_radius_send_acctg_msg: Starting RADIUS accounting session-id:48
Apr 11 17:21:01.177819 authd_radius_send_acctg_msg: session-id:48 profile=aaa-profile [email protected] acctg_id=(48), ls=default, lr=default
Apr 11 17:21:01.177838 radius-acct-interim: User-Name added: [email protected]
Apr 11 17:21:01.177851 radius-acct-interim: Acct-Status-Type added: 3
Apr 11 17:21:01.177867 radius-acct-interim: Acct-Session-Id added: 48
Apr 11 17:21:01.177888 radius-acct-interim: Event-Timestamp added: 2017-04-11 17:21:01
Apr 11 17:21:01.177901 radius-acct-interim: Acct-Input-Octets added: 1360
Apr 11 17:21:01.177913 radius-acct-interim: Acct-Output-Octets added: 122
Apr 11 17:21:01.177924 radius-acct-interim: Acct-Session-Time added: 1176
Apr 11 17:21:01.177936 radius-acct-interim: Acct-Input-Packets added: 40
Apr 11 17:21:01.177948 radius-acct-interim: Acct-Output-Packets added: 40
Apr 11 17:21:01.177961 dup_type: 0 effective profile aaa-profile
Apr 11 17:21:01.177977 radius-acct-interim: Acct-Delay-Time added: 0
Apr 11 17:21:01.177996 radius-acct-interim: Service-Type added: 2
Apr 11 17:21:01.178012 radius-acct-interim: Framed-Protocol added: 1
Apr 11 17:21:01.178047 radius-acct-interim: Filter-Id added: IPV4-ingress:belf_40-pp0.3221225488-in
Apr 11 17:21:01.178062 radius-acct-interim: Filter-Id added: IPV4-egress:belf_40-pp0.3221225488-out
Apr 11 17:21:01.178076 radius-acct-interim: Filter-Id added: IPV6-ingress:belf_40_v6-pp0.3221225488-in
Apr 11 17:21:01.178091 radius-acct-interim: Filter-Id added: IPV6-egress:belf_40_v6-pp0.3221225488-out
Apr 11 17:21:01.178113 radius-acct-interim: Cos-Shaping-Rate (Juniper-ERX-VSA) added: Port speed: 10000000k
Apr 11 17:21:01.178144 radius-acct-interim: Framed-IPv6-Prefix added: 2001:1284:f005:1::/64
Apr 11 17:21:01.178168 radius-acct-interim: Delegated-IPv6-Prefix added: 2001:1284:f01b:1::/64  
Apr 11 17:21:01.178183 radius-acct-interim: Framed-IPv6-Pool added: ipv6pool
Apr 11 17:21:01.178202 radius-acct-interim: Framed-Interface-Id added: 00 00 00 00 30 00 00
Apr 11 17:21:01.178218 radius-acct-interim: Acct-Authentic added: 1
Apr 11 17:21:01.178238 radius-acct-interim: DHCP-MAC-Address (Juniper-ERX-VSA) added: 5e32.87ed.0000
Apr 11 17:21:01.178253 radius-acct-interim: Egress-Policy-Name (Juniper-ERX-VSA) added: belf_40
Apr 11 17:21:01.178270 radius-acct-interim: Framed-IP-Address added: 10.55.177.164
Apr 11 17:21:01.178286 radius-acct-interim: Framed-IP-Netmask added: 255.255.255.255
Apr 11 17:21:01.178299 radius-acct-interim: Ingress-Policy-Name (Juniper-ERX-VSA) added: belf_40
Apr 11 17:21:01.178313 radius-acct-interim: Input-Gigapackets (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178326 radius-acct-interim: Acct-Input-Gigawords added: 0
Apr 11 17:21:01.178340 radius-acct-interim: NAS-Identifier added: ERX-MX480-II-RE0
Apr 11 17:21:01.178355 radius-acct-interim: NAS-Port added: 30 00 00 64
Apr 11 17:21:01.178368 radius-acct-interim: NAS-Port-Id added: xe-3/0/0.demux0.3221225487:100
Apr 11 17:21:01.178382 radius-acct-interim: NAS-Port-Type added: 15
Apr 11 17:21:01.178397 radius-acct-interim: Output-Gigapackets (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178410 radius-acct-interim: Acct-Output-Gigawords added: 0
Apr 11 17:21:01.178421 radius-acct-interim: IPv6-Ingress-Policy-Name (Juniper-ERX-VSA) added: belf_40_v6
Apr 11 17:21:01.178434 radius-acct-interim: IPv6-Egress-Policy-Name (Juniper-ERX-VSA) added: belf_40_v6
Apr 11 17:21:01.178447 radius-acct-interim: IPv6-Acct-Input-Octets (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178460 radius-acct-interim: IPv6-Acct-Output-Octets (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178472 radius-acct-interim: IPv6-Acct-Input-Packets (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178484 radius-acct-interim: IPv6-Acct-Output-Packets (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178497 radius-acct-interim: IPv6-Acct-Input-Gigawords (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178509 radius-acct-interim: IPv6-Acct-Output-Gigawords (Juniper-ERX-VSA) added: 0
Apr 11 17:21:01.178530 radius-acct-interim: Virtual-Router (Juniper-ERX-VSA) added: default:default
Apr 11 17:21:01.178550 radius-acct-interim: PPPoE-Description (Juniper-ERX-VSA) added: pppoe 5e:32:87:ed:00:00
Apr 11 17:21:01.178578 authd_create_application_specific_radius_server: Evaluating RADIUS server 10.10.48.247 to add to the server list
Apr 11 17:21:01.178591 Evaluating RADIUS server 10.10.48.247 to add to the server list
Apr 11 17:21:01.178603 Verify source address adb23ca in routing instance index=0
Apr 11 17:21:01.178641 authd_radius_server_add: server 10.10.48.247 retry 5, timeout 3
Apr 11 17:21:01.178704 Request queued successfully
Apr 11 17:21:01.178725 accFsmExecute::new state=Acc-Interim-Sent(2)
 

2020-02-21: Changed IP addresses and encrypted password to “$ABC123".

• PR1269062 - Clients not getting IP addresses - ports are programmed under incorrect vlan