en:dpi:dpi_components:radius:radius_integration:start [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    en:dpi:dpi_components:radius:radius_integration:start [2024/02/02 12:47] – [Configuring FreeRADIUS as a balancing proxy VASE NAS adapter for Nokia AAA] elena.krasnobryzhen:dpi:dpi_components:radius:radius_integration:start [2024/05/29 08:08] (current) – removed elena.krasnobryzh
    Line 1: Line 1:
    -{{indexmenu_n>8}} 
    -======RADIUS integration of SSG BRAS with Nokia BNG (AUTH/ACCT)====== 
    -=====Assignment===== 
    -Radius contains a specification for what data should be present in request and response packets, but allows you to extend its functionality to a specific case by using Vendor Specific Attribute - attributes that are specified by a particular vendor. For example, to transmit information that has a non-standard display. In this case it is necessary for Nokia BNG to understand attributes from SSG BRAS and vice versa (SSG BRAS is a Radius client, Nokia BNG is a Radius server), for this purpose FreeRadius package has a possibility to work out attributes on the fly, which pass through it both in one and in the other direction. 
    - 
    -=====Configuring FreeRADIUS as a balancing proxy VASE NAS adapter for Nokia AAA===== 
    -{{ :en:dpi:dpi_components:radius:radius_integration:vase_to_nokia.tar.gz |}} 
    - 
    -The attached archive contains the folders: 
    -  - ''scripts'' - scripts of VASE NAS requests emulation for debugging and testing. The scripts contain examples of authorization and account requests for test users. 
    -  - ''proxy/raddb'' - FreeRADIUS configuration of VASE NAS adaptation for Nokia AAA. 
    - 
    -<note tip>Adaptation of AUTH and ACCT queries has been implemented, plans to add COA.</note> 
    - 
    -To deploy in a production environment, you need to: 
    -  - Install the FreeRADIUS server according to [[https://freeradius.org/documentation/|installation instructions]] on the software website. 
    -  - Replace the default configuration created by the installer with the configuration from the archive. 
    -  - Configure addresses of VASE NAS source clients and Nokia AAA target servers according to [[en:dpi:dpi_components:radius:balancing_proxy:start]] instructions. 
    -  - Configure the source realm for VASE NAS users in the ''proxy.conf'' file (currently ''beelinerouter'' and ''beelinerouter-iptv''). 
    -  - Configure adapter settings in the ''vase_to_nokia {}'' section in the ''radiusd.conf'' file: 
    -    * ''nokia_realm'' - target realm for Nokia AAA users; 
    -    * ''nokia_iptv_realm'' - target realm for Nokia AAA IP-TV users; 
    -    * ''nas_identifier'' - NAS identifier for Nokia AAA users; 
    -    * ''nas_port_type'' - port type for Nokia AAA; 
    -    * ''nas_port_id'' - port identifier for Nokia AAA. 
    - 
    -Example setting: 
    -<code bash> 
    -vase_to_nokia { 
    -    nokia_realm = "MSFT 5.0" 
    -    nokia_iptv_realm = "MSFT_IPTV" 
    - 
    -    nas_identifier = "bras904.krasnodar" 
    -    nas_port_type = ethernet 
    -    nas_port_id = "lag-2:3330.3330" 
    -} 
    -</code> 
    - 
    -''server1/raddb'' - FreeRADIUS configuration of Nokia AAA emulator #1.\\ 
    -''server2/raddb'' - FreeRADIUS configuration of Nokia AAA emulator #2.\\ 
    -These emulator configurations contain test user sets and target realm settings.