Differences

This shows you the differences between two versions of the page.

--- en:dpi:dpi_components:pcrf [2021/05/21 09:57] – edrudichgmailcom
+++ en:dpi:dpi_components:pcrf [2024/09/26 15:29] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
-====== 9 PCRF Policy Server ======
+====== FastPCRF (BRAS integration by RADIUS) ======
-{{indexmenu_n>9}}
+{{indexmenu_n>2}}
 PCRF provides proxying requests from fastDPI to the Radius server.
@@ Line 10: / Line 10: @@
   - RAM 512 MB - 1 GB
   - HDD 50 GB - 250 GB
-  - Operating system Cent OS 6.4+, 8+
+  - Operating system Cent OS 8.5, [[en:veos:installation|VEOS]]
   - NIC ranging from 10 Mb/s
 ===== Installation =====
-  - Install the Network Time Protocol daemon <code>yum install ntp -y
+  - Install the Network Time Protocol daemon <code>yum install chrony -y
-ntpdate pool.ntp.org
+systemctl restart chronyd
-service ntpd start
+timedatectl</code> :!: When entering the ''timedatectl'' command, the ''System clock synchronized'' parameter must be set to ''yes''
-chkconfig ntpd on</code>
   - Add vasexperts repository <code>rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru
 rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm</code>
   - Install the fastPCRF <code>yum install fastpcrf</code>
   - Make sure the service is running <code>service fastpcrf start</code>
-  - Сonfigure fastpcrf service to run at startup<code>chkconfig fastpcrf on</code>
+  - Сonfigure fastpcrf service to run at startup<code>systemctl enable fastpcrf</code>
-  - Open firewall ports in order to access the fastDPI and Radius servers<code>vi /etc/sysconfig/iptables
+  - Open firewall ports in order to access the fastPCRF and Radius servers<code>firewall-cmd --permanent --zone=public --add-port=22/tcp
--A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
+firewall-cmd --permanent --zone=public --add-port=3799/udp
-#Radius
+firewall-cmd --permanent --zone=public --add-port=29002/tcp
--A INPUT -m state --state NEW -m udp -p udp --dport 1812 -j ACCEPT
--A INPUT -m state --state NEW -m udp -p udp --dport 1813 -j ACCEPT
--A INPUT -m state --state NEW -m udp -p udp --dport 3799 -j ACCEPT
-#fastDPI
--A INPUT -m state --state NEW -m tcp -p tcp --dport 29002 -j ACCEPT
 </code>
-and restart firewall for the rules to take effect <code>service iptables restart</code>
+and restart firewall for the rules to take effect <code>firewall-cmd --reload</code>
   - Disable selinux ((temporary solution))<code>setenforce 0
 vi /etc/selinux/config
@@ Line 38: / Line 32: @@
+===== Installation of the fdpi_cli and fdpi_ctrl utilities on the PCRF server =====
+You can get these utilities from the server where ''fastDPI'' is installed.\\
+The utility files are located in ''/usr/sbin/''.
+  - Copy the utilities to the home directory <code>
+cp /usr/sbin/fdpi_cli /home/vasexpertsmnt
+cp /usr/sbin/fdpi_ctrl /home/vasexpertsmnt
+</code>
+  - Move these files to the server where ''fastPCRF'' is installed, to ''/home/vasexpertsmnt''
+How to use the utility:\\
+<code>
+fdpi_cli -r 1.1.1.1 dpi config get trace_ip
+fdpi_cli -r 2.2.2.2 pcrf config get verbose
+fdpi_ctrl -r 1.1.1.1:29000 list all --bind
+</code>
+Server address – ''1.1.1.1'' where the ''fastDPI'' module is installed.\\
+Server address – ''2.2.2.2'' where the ''fastPCRF'' module is installed.

Profile

Settings

Differences