BRAS/BNG mode description and architecture [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:bras_bng:modes_and_architecture [2024/11/27 05:40] – [Advantages of SSG compared to other BRAS solutions] elena.krasnobryzhen:dpi:bras_bng:modes_and_architecture [2025/04/01 08:04] (current) – [BRAS components] elena.krasnobryzh
    Line 12: Line 12:
         * Application of platform services (CG-NAT, Whitelist and Captive Portal, Web-filtering, Mini-Firewall, DDoS protection)     * Application of platform services (CG-NAT, Whitelist and Captive Portal, Web-filtering, Mini-Firewall, DDoS protection)
         * Exporting traffic information in IPFIX and Netflow v5 format (Full NetFlow, Clickstream, NAT log)     * Exporting traffic information in IPFIX and Netflow v5 format (Full NetFlow, Clickstream, NAT log)
    -  - **fastPCRF** - responsible for interaction of the platform with the telecom operator's OSS/BSS via RADIUS protocol. (AAA - Authentication, Authorization, Accounting). fastDPI and fastPCRF components communicate with each other by internal communication protocol via TCP/IP stack. PCRF can be placed either on a separate physical or virtual server or run on the same server together with fasDPI. In case of using several SSG, 2xPCRF (Active-Standby) and NxSSG scheme is used.+  - **fastPCRF** - responsible for interaction of the platform with the telecom operator's OSS/BSS via RADIUS protocol. (AAA - Authentication, Authorization, Accounting). fastDPI and fastPCRF components communicate with each other by internal communication protocol via TCP/IP stack. PCRF can be placed either on a separate physical or virtual server or run on the same server together with fastDPI. In case of using several SSG, 2xPCRF (Active-Standby) and NxSSG scheme is used.
       - **Router** - used to announce routes using BGP and OSPF protocols with VRF support.   - **Router** - used to announce routes using BGP and OSPF protocols with VRF support.
       - **DHCP** - KEA local DHCP server is used. SSG can operate in one of the modes:   - **DHCP** - KEA local DHCP server is used. SSG can operate in one of the modes:
    Line 50: Line 50:
       * Traffic control and prioritization by applications and autonomous systems in the accessible band of each uplink.   * Traffic control and prioritization by applications and autonomous systems in the accessible band of each uplink.
       * Limiting the bandwidth occupied by torrent when approaching the channel upper boundary.   * Limiting the bandwidth occupied by torrent when approaching the channel upper boundary.
    -  * Traffic prioritization by applications and AS within the Subscriber’s data plan (this option is relevant for corporate clients: a number of corporate users work within single data plan. Bandwidth for them needs to be allocated so as not to interfere with each other).+  * Traffic prioritization by applications and AS within the Subscriber’s data plan (this option is relevant for corporate clients: a number of corporate users work within a single data plan. Bandwidth for them needs to be allocated so as not to interfere with each other).
       * Support for Subscribers with any number of IP addresses, including those issued dynamically.   * Support for Subscribers with any number of IP addresses, including those issued dynamically.
       * Redirection of Subscribers with zero balance to Captive Portal with an Allow list of resources. For example, bank resources for payment based on domain name or URL, including options with wildcard asterisks.   * Redirection of Subscribers with zero balance to Captive Portal with an Allow list of resources. For example, bank resources for payment based on domain name or URL, including options with wildcard asterisks.