FastPCRF (BRAS integration by RADIUS) [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:dpi_components:pcrf [2020/03/03 06:40] – [Hardware Recommendations] kvazikraven:dpi:dpi_components:pcrf [2024/09/26 15:29] (current) – external edit 127.0.0.1
    Line 1: Line 1:
    -====== 9 PCRF Policy Server ====== +====== FastPCRF (BRAS integration by RADIUS) ====== 
    -{{indexmenu_n>9}}+{{indexmenu_n>2}}
      
     PCRF provides proxying requests from fastDPI to the Radius server. PCRF provides proxying requests from fastDPI to the Radius server.
    -It is a part of the standard VAS Experts DPI installation package, but if necessary, it can be used as a dedicated server.+It is a part of the standard Stingray Service Gateway installation package, but if necessary, it can be used as a dedicated server.
     ===== Hardware Recommendations ===== ===== Hardware Recommendations =====
      
    Line 10: Line 10:
       - RAM 512 MB - 1 GB   - RAM 512 MB - 1 GB
       - HDD 50 GB - 250 GB   - HDD 50 GB - 250 GB
    -  - Operating system Cent OS 6.4 - 7++  - Operating system Cent OS 8.5, [[en:veos:installation|VEOS]]
       - NIC ranging from 10 Mb/s   - NIC ranging from 10 Mb/s
      
     ===== Installation ===== ===== Installation =====
    -  - Install the Network Time Protocol daemon <code>yum install ntp -y +  - Install the Network Time Protocol daemon <code>yum install chrony -y 
    -ntpdate pool.ntp.org +systemctl restart chronyd 
    -service ntpd start +timedatectl</code> :!: When entering the ''timedatectl'' command, the ''System clock synchronized'' parameter must be set to ''yes''
    -chkconfig ntpd on</code>+
       - Add vasexperts repository <code>rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru   - Add vasexperts repository <code>rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru
     rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm</code> rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm</code>
       - Install the fastPCRF <code>yum install fastpcrf</code>   - Install the fastPCRF <code>yum install fastpcrf</code>
       - Make sure the service is running <code>service fastpcrf start</code>   - Make sure the service is running <code>service fastpcrf start</code>
    -  - Сonfigure fastpcrf service to run at startup<code>chkconfig fastpcrf on</code> +  - Сonfigure fastpcrf service to run at startup<code>systemctl enable fastpcrf</code> 
    -  - Open firewall ports in order to access the fastDPI and Radius servers<code>vi /etc/sysconfig/iptables +  - Open firewall ports in order to access the fastPCRF and Radius servers<code>firewall-cmd --permanent --zone=public --add-port=22/tcp 
    --A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT +firewall-cmd --permanent --zone=public --add-port=3799/udp 
    -#Radius +firewall-cmd --permanent --zone=public --add-port=29002/tcp
    --A INPUT -m state --state NEW -m udp -p udp --dport 1812 -j ACCEPT +
    --A INPUT -m state --state NEW -m udp -p udp --dport 1813 -j ACCEPT +
    --A INPUT -m state --state NEW -m udp -p udp --dport 3799 -j ACCEPT +
    -#fastDPI +
    --A INPUT -m state --state NEW -m tcp -p tcp --dport 29002 -j ACCEPT+
     </code> </code>
    -and restart firewall for the rules to take effect <code>service iptables restart</code>+and restart firewall for the rules to take effect <code>firewall-cmd --reload</code>
       - Disable selinux ((temporary solution))<code>setenforce 0   - Disable selinux ((temporary solution))<code>setenforce 0
     vi /etc/selinux/config vi /etc/selinux/config
    Line 38: Line 32:
        
        
     +===== Installation of the fdpi_cli and fdpi_ctrl utilities on the PCRF server =====
     +
     +You can get these utilities from the server where ''fastDPI'' is installed.\\
     +The utility files are located in ''/usr/sbin/''.
     +  - Copy the utilities to the home directory <code>
     +cp /usr/sbin/fdpi_cli /home/vasexpertsmnt
     +cp /usr/sbin/fdpi_ctrl /home/vasexpertsmnt
     +</code>
     +  - Move these files to the server where ''fastPCRF'' is installed, to ''/home/vasexpertsmnt''
     +
     +How to use the utility:\\
     +<code>
     +fdpi_cli -r 1.1.1.1 dpi config get trace_ip 
     +fdpi_cli -r 2.2.2.2 pcrf config get verbose
     +fdpi_ctrl -r 1.1.1.1:29000 list all --bind
     +</code>
     +Server address – ''1.1.1.1'' where the ''fastDPI'' module is installed.\\
     +Server address – ''2.2.2.2'' where the ''fastPCRF'' module is installed.