FastPCRF (BRAS integration by RADIUS) [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • ODT export
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • ODT export
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:dpi_components:pcrf [2020/10/30 08:55] – [Hardware Recommendations] v.chekhutskiyen:dpi:dpi_components:pcrf [2026/04/15 16:16] (current) – [Installation] elena.krasnobryzh
    Line 1: Line 1:
    -====== 9 PCRF Policy Server ====== +====== FastPCRF (BRAS integration by RADIUS) ====== 
    -{{indexmenu_n>9}}+{{indexmenu_n>2}}
      
     PCRF provides proxying requests from fastDPI to the Radius server. PCRF provides proxying requests from fastDPI to the Radius server.
    -It is a part of the standard VAS Experts DPI installation package, but if necessary, it can be used as a dedicated server.+It is a part of the standard Stingray Service Gateway installation package, but if necessary, it can be used as a dedicated server.
     ===== Hardware Recommendations ===== ===== Hardware Recommendations =====
      
    Line 10: Line 10:
       - RAM 512 MB - 1 GB   - RAM 512 MB - 1 GB
       - HDD 50 GB - 250 GB   - HDD 50 GB - 250 GB
    -  - Operating system Cent OS 6.4+, 8++  - Operating system Cent OS 8.5, [[en:veos:installation|VEOS]].\\ :!: When using VEOS, take into account the information in [[en:veos:changelogs]] when selecting hardware.
       - NIC ranging from 10 Mb/s   - NIC ranging from 10 Mb/s
      
     ===== Installation ===== ===== Installation =====
    -  - Install the Network Time Protocol daemon <code>yum install ntp -y +  - Install the Network Time Protocol daemon <code>yum install chrony -y 
    -ntpdate pool.ntp.org +systemctl restart chronyd 
    -service ntpd start +timedatectl</code> :!: When entering the ''timedatectl'' command, the ''System clock synchronized'' parameter must be set to ''yes''
    -chkconfig ntpd on</code>+
       - Add vasexperts repository <code>rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru   - Add vasexperts repository <code>rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru
     rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm</code> rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm</code>
       - Install the fastPCRF <code>yum install fastpcrf</code>   - Install the fastPCRF <code>yum install fastpcrf</code>
       - Make sure the service is running <code>service fastpcrf start</code>   - Make sure the service is running <code>service fastpcrf start</code>
    -  - Сonfigure fastpcrf service to run at startup<code>chkconfig fastpcrf on</code> +  - Сonfigure fastpcrf service to run at startup<code>systemctl enable fastpcrf</code> 
    -  - Open firewall ports in order to access the fastDPI and Radius servers<code>vi /etc/sysconfig/iptables +  - Open firewall ports in order to access the fastPCRF and Radius servers<code>firewall-cmd --permanent --zone=public --add-port=22/tcp 
    --A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT +firewall-cmd --permanent --zone=public --add-port=3799/udp 
    -#Radius +firewall-cmd --permanent --zone=public --add-port=29002/tcp 
    --A INPUT -m state --state NEW -m udp -p udp --dport 1812 -j ACCEPT +</code> and restart firewall for the rules to take effect <code>firewall-cmd --reload</code>
    --A INPUT -m state --state NEW -m udp -p udp --dport 1813 -j ACCEPT +
    --A INPUT -m state --state NEW -m udp -p udp --dport 3799 -j ACCEPT +
    -#fastDPI +
    --A INPUT -m state --state NEW -m tcp -p tcp --dport 29002 -j ACCEPT +
    -</code> +
    -and restart firewall for the rules to take effect <code>service iptables restart</code>+
       - Disable selinux ((temporary solution))<code>setenforce 0   - Disable selinux ((temporary solution))<code>setenforce 0
     vi /etc/selinux/config vi /etc/selinux/config
     SELINUX=disabled</code> SELINUX=disabled</code>
        
    - +=====FastPCRF update===== 
     +FastPCRF is updated automatically together with fastDPI. 
     + 
     +However, if fastPCRF is deployed on a separate server, update it using the following command: 
     +<code>yum upgrade fastpcrf</code> 
     +===== Installation of the fdpi_cli and fdpi_ctrl utilities on the PCRF server ===== 
     + 
     +You can get these utilities from the server where ''fastDPI'' is installed.\\ 
     +The utility files are located in ''/usr/sbin/''. 
     +  - Copy the utilities to the home directory <code> 
     +cp /usr/sbin/fdpi_cli /home/vasexpertsmnt 
     +cp /usr/sbin/fdpi_ctrl /home/vasexpertsmnt 
     +</code> 
     +  - Move these files to the server where ''fastPCRF'' is installed, to ''/home/vasexpertsmnt'' 
     + 
     +How to use the utility:\\ 
     +<code> 
     +fdpi_cli -r 1.1.1.1 dpi config get trace_ip  
     +fdpi_cli -r 2.2.2.2 pcrf config get verbose 
     +fdpi_ctrl -r 1.1.1.1:29000 list all --bind 
     +</code> 
     +Server address – ''1.1.1.1'' where the ''fastDPI'' module is installed.\\ 
     +Server address – ''2.2.2.2'' where the ''fastPCRF'' module is installed.