FastPCRF (BRAS integration by RADIUS) [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
en:dpi:dpi_components:pcrf [2022/03/29 13:02] edrudichgmailcomen:dpi:dpi_components:pcrf [2024/09/26 15:29] (current) – external edit 127.0.0.1
Line 1: Line 1:
-====== 2 PCRF Policy Server ======+====== FastPCRF (BRAS integration by RADIUS) ====== 
 +{{indexmenu_n>2}} 
 + 
 +PCRF provides proxying requests from fastDPI to the Radius server. 
 +It is a part of the standard Stingray Service Gateway installation package, but if necessary, it can be used as a dedicated server. 
 +===== Hardware Recommendations ===== 
 + 
 +In order to run PCRF you can use the following hardware or virtual machines matching the following characteristics: 
 +  - CPU 2.5 GHz, 1 pcs 
 +  - RAM 512 MB - 1 GB 
 +  - HDD 50 GB - 250 GB 
 +  - Operating system Cent OS 8.5, [[en:veos:installation|VEOS]] 
 +  - NIC ranging from 10 Mb/s 
 + 
 +===== Installation ===== 
 +  - Install the Network Time Protocol daemon <code>yum install chrony -y 
 +systemctl restart chronyd 
 +timedatectl</code> :!: When entering the ''timedatectl'' command, the ''System clock synchronized'' parameter must be set to ''yes'' 
 +  - Add vasexperts repository <code>rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru 
 +rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm</code> 
 +  - Install the fastPCRF <code>yum install fastpcrf</code> 
 +  - Make sure the service is running <code>service fastpcrf start</code> 
 +  - Сonfigure fastpcrf service to run at startup<code>systemctl enable fastpcrf</code> 
 +  - Open firewall ports in order to access the fastPCRF and Radius servers<code>firewall-cmd --permanent --zone=public --add-port=22/tcp 
 +firewall-cmd --permanent --zone=public --add-port=3799/udp 
 +firewall-cmd --permanent --zone=public --add-port=29002/tcp 
 +</code> 
 +and restart firewall for the rules to take effect <code>firewall-cmd --reload</code> 
 +  - Disable selinux ((temporary solution))<code>setenforce 0 
 +vi /etc/selinux/config 
 +SELINUX=disabled</code> 
 +  
 +  
 +===== Installation of the fdpi_cli and fdpi_ctrl utilities on the PCRF server ===== 
 + 
 +You can get these utilities from the server where ''fastDPI'' is installed.\\ 
 +The utility files are located in ''/usr/sbin/''
 +  - Copy the utilities to the home directory <code> 
 +cp /usr/sbin/fdpi_cli /home/vasexpertsmnt 
 +cp /usr/sbin/fdpi_ctrl /home/vasexpertsmnt 
 +</code> 
 +  - Move these files to the server where ''fastPCRF'' is installed, to ''/home/vasexpertsmnt'' 
 + 
 +How to use the utility:\\ 
 +<code> 
 +fdpi_cli -r 1.1.1.1 dpi config get trace_ip  
 +fdpi_cli -r 2.2.2.2 pcrf config get verbose 
 +fdpi_ctrl -r 1.1.1.1:29000 list all --bind 
 +</code> 
 +Server address – ''1.1.1.1'' where the ''fastDPI'' module is installed.\\ 
 +Server address – ''2.2.2.2'' where the ''fastPCRF'' module is installed.