| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:bras_bng:radius_integration:radius_auth_server_integration:radius_auth_response [2026/03/25 09:36] – elena.krasnobryzh | en:dpi:bras_bng:radius_integration:radius_auth_server_integration:radius_auth_response [2026/03/25 11:45] (current) – [2. Policing with absolute values (simplified format)] elena.krasnobryzh |
|---|
| <code>VasExperts-Policing-Profile = “BV##100000#100000#+++-++++”</code> | <code>VasExperts-Policing-Profile = “BV##100000#100000#+++-++++”</code> |
| where: | where: |
| * **BV** — By Value | * ''BV'' — By Value, the HTB algorithm is used, where the ceil for each class is equal to the root rate |
| * **##100000** — limit from the Internet to the subscriber (download), kbps | * ''##100000'' — limit from the Internet to the subscriber (download), kbps |
| * **#100000** — limit from subscriber to Internet (upload), kbps | * ''#100000'' — limit from subscriber to Internet (upload), kbps |
| * **#+++-++++** — permission for classes cs0 … cs7, rate(cs3)=0 — class cs3 is blocked, other classes use root speed with the possibility of borrowing (HTB) | * ''#+++-++++'' — permission for classes cs0 … cs7, rate(cs3)=0 — class cs3 is blocked, other classes use root speed with the possibility of borrowing (HTB) |
| |
| ====3. Policing with Absolute Value Transmission (Extended HTB Format)==== | ====3. Policing with Absolute Value Transmission (Extended HTB Format)==== |
| |
| ===== VasExperts-Service-Profile ===== | ===== VasExperts-Service-Profile ===== |
| A string option specifying the profile name for a specific fastDPI service. Used format: | |
| <code> | A string parameter that specifies the profile name for a specific fastDPI service.\\ String format: |
| | <code bash> |
| service_id:profile_name | service_id:profile_name |
| </code> | </code> |
| Here: | Where: |
| * ''service_id'' – is the number representing [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd|the fastDPI service identifier]] | - ''service_id'' — a number, [[dpi:dpi_components:platform:subscriber_management:subsman_cmd|fastDPI service identifier]]; |
| * ''profile_name'' – is the string representing [[en:dpi:dpi_components:platform:subscriber_management:subsman_profiles|the profile name according to the service]] | - ''profile_name'' — a string, [[dpi:dpi_components:platform:subscriber_management:subsman_profiles|the profile name for the service]]. |
| |
| **Example 1,** activating the NAT (11) service with the “cgnat” profile: | <note tip>The authorization response may contain zero or more ''VasExperts-Service-Profile'' attributes—one attribute for each service.</note> |
| <code> | |
| | ====Example 1. NAT Connection==== |
| | NAT connection (service 11) using the "cgnat" profile. |
| | |
| | <code bash> |
| VasExperts-Service-Profile="11:cgnat" | VasExperts-Service-Profile="11:cgnat" |
| </code> | </code> |
| |
| **Example 2,** connecting the [[en:dpi:dpi_options:opt_capture|Allow List and Captive Portal, HTTP redirect]] (service 16) specifying page parameters for redirect "http://info.com" and allowed list of IP addresses "/var/lib/dpi/ip_list.bin": | ====Example 2. Configuring the Whitelist==== |
| <code> | Configuring [[en:dpi:dpi_options:opt_capture|Whitelist and Captive Portal, HTTP redirect]] (16 services) with the redirect page parameters set to "http://info.com" and the allowed IP address list set to "''/var/lib/dpi/ip_list.bin''". |
| | |
| | <code bash> |
| VasExperts-Service-Profile = "16:BV##/var/lib/dpi/ip_list.bin#http://info.com" | VasExperts-Service-Profile = "16:BV##/var/lib/dpi/ip_list.bin#http://info.com" |
| </code> | </code> |
| |
| <note tip>The authorization response may contain zero or more ''VasExperts-Service-Profile attributes'', one attribute for each service.</note> | ====Example 3. Overriding Traffic Classes and Policing==== |
| | |
| | [[en:dpi:dpi_options:opt_shaping:shaping_session|Service 18 (Session-Based Policing)]] is used to override traffic classes (cs0 … cs7) and configure session-based policing for a specific subscriber. |
| | |
| | The profile defines the distribution of DPI protocols across traffic classes.\\ Classes are assigned individually for each subscriber. |
| | |
| | Format: |
| | <code>VasExperts-Service-Profile = "18:BP##profile_name#/share/#IMSI_number.dscp#IMSI_number.tbf"</code> |
| | |
| | where: |
| | * ''18'' — traffic class reclassification and per-session policing |
| | * ''BP'' — By Parameters |
| | * ''##profile_name'' — profile name, created dynamically, displayed in the GUI and CLI |
| | * ''#/share/'' — directory on fastPCEF. Accessible over the network; only the filename is passed, while the file itself is read from the original directory. Contains source (.txt) files (not converted to binary) for easy verification |
| | * ''#IMSI_number.dscp'' — protocol and traffic class mapping file. Determines which class (cs0 … cs7) the traffic is placed in. Supports the **drop** flag for blocking |
| | * ''#IMSI_number.tbf'' — a file containing session-level policing parameters. Sets policing rules for individual protocols. Used to limit speed at the session level |
| | |
| | Example: |
| | <code>VasExperts-Service-Profile =18:BP##250019500475292#/share/#250019500475292.dscp#250019500475292.tbf</code> |
| |
| ===== VasExperts-Enable-Service ===== | ===== VasExperts-Enable-Service ===== |
