Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:bras_bng:use_cases:dpi_bestpractice_brasl3 [2024/04/10 09:18] – elena.krasnobryzh | en:dpi:bras_bng:use_cases:dpi_bestpractice_brasl3 [2025/12/08 12:15] (current) – elena.krasnobryzh |
|---|
| ====== Example of BRAS L3 configuration ====== | ====== Process of AAA authorization for L3 IPoE subscriber sessions ====== |
| {{indexmenu_n>10}} | {{indexmenu_n>10}} |
| |
| When the Radius server reply is received, the fastPCRF sends user properties to the fastDPI, which in turn set the authorization status either to **"authorized" (Accept-Accept)** or **"unauthorized" (Accept-Reject) state**. | When the Radius server reply is received, the fastPCRF sends user properties to the fastDPI, which in turn set the authorization status either to **"authorized" (Accept-Accept)** or **"unauthorized" (Accept-Reject) state**. |
| |
| <note important>If a subscriber resides in "unauthorized" state, the Stingray Service Gateway itself doesn't limit subscriber's traffic. In order to limit traffic the special parameters should be received within the Access-Reject, they are the following: special policing [[en:dpi:dpi_options:opt_capture:capt_portal:start|(highly truncated bandwidth)]] and [[en:dpi:dpi_options:opt_capture:start|service 5 (Allow list)]] specifying the sites an unauthorized user is allowed to access - usually it is the [[en:dpi:dpi_options:opt_capture:capt_description:start|captive portal]].</note> | <note important>If a subscriber resides in "unauthorized" state, the Stingray Service Gateway itself doesn't limit subscriber's traffic. In order to limit traffic the special parameters should be received within the Access-Reject, they are the following: special policing [[en:dpi:dpi_options:opt_capture:capt_portal|(highly truncated bandwidth)]] and [[en:dpi:dpi_options:opt_capture|service 5 (Allow list)]] specifying the sites an unauthorized user is allowed to access - usually it is the [[en:dpi:dpi_options:opt_capture:capt_description|captive portal]].</note> |