Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| en:dpi:dpi_bestpractice:dpi_bestpractice_brasl2radiusproxy [2020/08/26 11:12] – edrudichgmailcom | en:dpi:dpi_bestpractice:dpi_bestpractice_brasl2radiusproxy [2023/08/28 14:44] (current) – removed edrudichgmailcom | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== BRAS L2 DHCP Radius Proxy Example ====== | ||
| - | {{indexmenu_n> | ||
| - | ===== Description ===== | ||
| - | {{ : | ||
| - | BRAS DHCP L2 mode means that the subscriber recieves an IP-address via DHCP Proxy and proceeds to ААА in the Billing system. Then the subscriber is terminated by VAS Experts DPI and transferred to border equipment. | ||
| - | The following elements are involved in the VAS Experts DPI operation scheme in BRAS L2 DHCP Radius Proxy mode: | ||
| - | - Client with Q-in-Q access type | ||
| - | - FastDPI - traffic processing and policing | ||
| - | - FastPCRF - proxying requests between fastDPI and Radius | ||
| - | - Radius server - accepts requests from fastPCRF and generates responses with specified attributes | ||
| - | - Router - is responsible for packets transmission to the Internet and the backward routing. It is necessary to specify the Static Route, since VAS Experts DPI does not support OSPF and BGP at the moment. | ||
| - | |||
| - | ===== Scenario ===== | ||
| - | ===== FastDPI Setup ===== | ||
| - | ==== Editing the DPI Configuration File ==== | ||
| - | First, you need to uncomment (add) the following lines to the / | ||
| - | |||
| - | < | ||
| - | #enabling internal database of user properties | ||
| - | udr=1 | ||
| - | #enabling the authorization by IP mode | ||
| - | enable_auth=1 | ||
| - | #enabling L2 BRAS mode | ||
| - | bras_enable=1 | ||
| - | |||
| - | #" | ||
| - | bras_arp_ip=192.168.1.2 | ||
| - | #" | ||
| - | bras_arp_mac=a0: | ||
| - | |||
| - | #IP address of the border | ||
| - | bras_gateway_ip=192.168.1.1 | ||
| - | #MAC address of the interface to which DPI is connected on the border | ||
| - | bras_gateway_mac=c4: | ||
| - | |||
| - | #server data which Fastpcrf is installed on (if it is the same where Fastdpi is installed, do not change) | ||
| - | |||
| - | auth_servers=127.0.0.1%lo: | ||
| - | |||
| - | #enabling of DHCP Relay Agent mode | ||
| - | bras_dhcp_mode=1 | ||
| - | |||
| - | # | ||
| - | #veth0 – the name of the network interface that communicates with the DHCP server | ||
| - | #67 – port, default value: 68 | ||
| - | #arp_proxy - lag in response to ARP requests for the DHCP-server IP-address | ||
| - | #alias_ip - DHCP server alias | ||
| - | # | ||
| - | bras_dhcp_server=192.168.10.2%veth0: | ||
| - | |||
| - | #vlan termination (in this case the tag will be cut out) | ||
| - | bras_vlan_terminate=1 | ||
| - | #MAC spoofing | ||
| - | bras_terminate_l2=1 | ||
| - | #local traffic interconnection | ||
| - | bras_terminate_local=1 | ||
| - | |||
| - | #enabling accounting | ||
| - | enable_acct=1 | ||
| - | # | ||
| - | netflow=4 | ||
| - | #timeout for sending statistics | ||
| - | netflow_timeout=60 | ||
| - | </ | ||
| - | |||
| - | <note important> | ||
| - | * bras_arp_ip | ||
| - | * bras_arp_mac | ||
| - | * bras_gateway_ip | ||
| - | * bras_gateway_mac | ||
| - | </ | ||
| - | |||
| - | If the session is successfully started and the L3 authorization mode is enabled (enable_auth = 1), fastDPI BRAS immediately sends a Radius request for subscriber authorization and gets an up-to-date list of subscriber' | ||