user-trace ipv6prefix

Function

The user-trace ipv6prefix command enables the IPv6 address prefix resolution function and sets the length of an IPv6 address prefix.

The undo user-trace ipv6prefix command disables the IPv6 address prefix resolution function.

Format

user-trace ipv6prefix prefix-length

undo user-trace ipv6prefix

Parameters

Parameter	Description	Value
prefix-length	Specifies the length of an IPv6 address prefix.	The value is an integer ranging from 1 to 128.

Views

RADIUS SSO view

Default Level

2: Configuration level

Usage Guidelines

By default, the IPv6 address prefix resolution function is disabled.

Before you run this command, you must run the user-trace enable command first. Otherwise, this command does not take effect.

After you run this command, the FW resolves the IPv6 address prefix in the received RADIUS accounting packet.

After the FW resolves the IPv6 address prefix, it implements various processing methods based on the prefix length.

If the length of the IPv6 address prefix is equal to the length specified in this command, the FW creates a user source tracing entry and records the prefix to this entry.
If the length of the IPv6 address prefix is not equal to the length specified in this command, the FW discards the resolved attribute value.

If the FW resolves and obtains the IPv4 and IPv6 address prefixes from the RADIUS accounting packet, and the length of the IPv6 address prefix is equal to the length specified in this command, the FW creates two user source tracing entries, with one recording the mapping between the IPv4 address and user (mobile phone number) and the other recording the mapping between the IPv6 address prefix and user. That is, a user has two entries.

Example

# Set the length of the IPv6 address prefix to 64.

<sysname> system-view
[sysname] user-manage single-sign-on radius
[sysname-sso-radius] enable
[sysname-sso-radius] user-trace enable
[sysname-sso-radius] user-trace ipv6prefix 64