On an MX running Junos OS 16.1+ in an BBE (Broadband Edge) subscriber environment, the "test aaa ppp user" command output shows the address 255.255.255.254 for the 'Client IP Address'. This article explains the reason.
The CLI operational command " test aaa ppp user " is a useful command to verify PPPoE dial in with RADIUS internally.
test aaa ppp user
Before Junos OS 16.1, the 'Client IP Address' would be assigned from the MX local pool in the PPP process:
user@MX-BBE-re0> test aaa ppp user jnpr1 password test Authentication Grant ************User Attributes*********** User Name - jnpr1 Virtual Router Name (LS:RI) - default:default Service Type - Framed Agent Remote Id - Client IP Address - 10.10.0.100 <======= Client IP Netmask - 255.255.255.255 Primary DNS IP Address - Secondary DNS IP Address - Primary WINS IP Address - Secondary WINS IP Address - Primary DNS IPv6 Address - Secondary DNS IPv6 Address - Reply Message - Class Attribute - Framed Pool - pool1 Client IPv6 Address - Client IPv6 Mask - Framed IPv6 Prefix - Framed IPv6 Pool - NDRA IPv6 Prefix - Login IPv6 Host - Framed Interface Id - Delegated IPv6 Prefix - Delegated IPv6 Pool - User Password - test CHAP Password - NAS Ip Address - NAS Port - 0 NAS Port Type - 5 Mac Address - AB:CD:00:00:00:01 Idle Timeout - 7200 Session Timeout - 14400 Cos shaping rate - Cos scheduler param - Ingress Policy Name - p8m Egress Policy Name - p8m Redirect VR Name (LS:RI) - Service Bundle - IGMP Enable - IGMP Version - MLD Version - IGMP Immediate Leave - MLD Immediate Leave - IPv6 Ingress Policy Name - IPv6 Egress Policy Name - Acct Session ID - 1 Acct Interim Interval - 1800 Acct Type - 2 Chargeable user identity - NAS Port Id - -0/0/0 NAS Port - 4095 NAS Port Type - 15 Framed Protocol - 1 ****Pausing 10 seconds before disconnecting the test user********* Logging out subscriber Terminate Id - Test complete. Exiting
Now, with Junos OS 16.1+, the 'Client IP Address' is 255.255.255.254. It is not displaying the IP address which it is getting from the local pool.
user@MX-BBE-re0> test aaa ppp user jnpr1 password test Authentication Grant ************User Attributes*********** User Name - jnpr1 Virtual Router Name (LS:RI) - default:default Service Type - Framed Agent Remote Id - Client IP Address - 255.255.255.254 <======= Client IP Netmask - Primary DNS IP Address - Secondary DNS IP Address - Primary WINS IP Address - Secondary WINS IP Address - Primary DNS IPv6 Address - Secondary DNS IPv6 Address - Reply Message - Class Attribute - Framed Pool - pool1 Client IPv6 Address - Client IPv6 Mask - Framed IPv6 Prefix - Framed IPv6 Pool - NDRA IPv6 Prefix - Login IPv6 Host - Framed Interface Id - Delegated IPv6 Prefix - Delegated IPv6 Pool - User Password - test CHAP Password - NAS Ip Address - NAS Port - 0 NAS Port Type - 5 Mac Address - AB:CD:00:00:00:01 Idle Timeout - 7200 Session Timeout - 14400 Cos shaping rate - Cos scheduler param - Ingress Policy Name - p8m Egress Policy Name - p8m Redirect VR Name (LS:RI) - Service Bundle - IGMP Enable - IGMP Version - MLD Version - IGMP Immediate Leave - MLD Immediate Leave - IPv6 Ingress Policy Name - IPv6 Egress Policy Name - Dynamic Profile - junos-default-profile Acct Session ID - 15 Acct Interim Interval - 1800 Acct Type - 2 Chargeable user identity - NAS Port Id - -0/0/0 NAS Port - 4095 NAS Port Type - 15 Framed Protocol - 1 PIM - ****Pausing 10 seconds before disconnecting the test user********* Logging out subscriber Terminate Id - Test complete. Exiting
So, why is Client IP Address 255.255.255.254, and what does mean 255.255.255.254?
This is expected behavior and has no service impact. When you dial in from a real PC client, the IP address will be assigned from the RADIUS pool. 255.255.255.254 is a special address with a special meaning - assign from NAS' local pool, and it will be assigned to all user instances.
For more information, see RFC2865 . The Address field value of 0xFFFFFFFF (255.255.255.255) indicates that the NAS should allow the user to select an address (e.g. Negotiated). The value 0xFFFFFFFE (255.255.255.254) indicates that the NAS should select an address for the user (e.g. assigned from a pool of addresses kept by the NAS). It also says that other valid values indicate that the NAS should use that value as the user's IP address.