en:dpi:dpi_options:brass:opt_bras:bras_l3_authorization:start [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    en:dpi:dpi_options:brass:opt_bras:bras_l3_authorization:start [2020/02/05 17:38] – ↷ Page moved from en:dpi:dpi_options:base_functionality:brass:opt_bras:bras_l3_authorization:start to en:dpi:dpi_options:brass:opt_bras:bras_l3_authorization:start lexx26en:dpi:dpi_options:brass:opt_bras:bras_l3_authorization:start [2020/03/18 14:58] (current) – removed lexx26
    Line 1: Line 1:
    -====== 2 L3-connected BRAS users authorization procedure description ====== 
    -{{indexmenu_n>2}} 
      
    -<note>FastPCRF server acts as an authorization server within the L3-connected BRAS solution.</note> 
    - 
    -Immediately after the FastDPI started, the process to set the authorization status of all users to "unknown" is performed. This status assumes that all the user settings previously saved in the internal UDR database will be applied. 
    - 
    -Once the network packet from the previously unknown IP address has been received, the FastDPI sends a request to authorize the User to the FastPCRF. The FastPCRF server refers to the RADIUS server, requesting from the latter the client authorization, its polycing profile (analogous to the tariff plan), and service profiles. Upon receiving a response from the RADIUS server, FastPCRF sends the user's properties to FastDPI which in turn sets the authorization status either to "authorized" (Access-Accept) or to "unauthorized" (Accept-Reject). 
    - 
    -FastPCRF supports CoA notifications — the RADIUS server notifications about changes in user settings (for example, when the client's account has insufficient funds or the changes in band limitation have been made). 
    - 
    -<note important>If the subscriber resides in "not authorized" status, FastDPI itself takes no any action to limit subscriber traffic. In order to limit traffic the returned Access-Reject should contain special parameters: special policing (highly reduced bandwidth) and [[en:dpi:dpi_options:opt_capture:start|service 5 "white list"]] specifying sites an anauthorized user is allowed to visit, typically it is a [[en:dpi:dpi_options:opt_capture:capt_description:start|captive portal]].</note>