Configuration of work with NOKIA attributes

Purpose

RADIUS defines requirements for the data composition in request and response packets, while allowing functionality to be extended for specific tasks using vendor specific attributes — attributes defined by a particular vendor, for example, to transmit data with non-standard semantics.
To ensure correct interaction, NOKIA BNG must correctly process attributes from SSG BNG and vice versa (SSG BNG acts as a RADIUS client, NOKIA BNG as a RADIUS server). For this purpose, FreeRADIUS provides a mechanism for dynamic processing of attributes passing through it in both directions.

Configuration of FreeRADIUS as a load-balancing VASE NAS proxy adapter for NOKIA AAA

vase_to_nokia.tar.gz

The attached archive contains the following directories:

scripts — scripts for emulating VASE NAS requests for debugging and verification. The scripts contain examples of authorization and accounting requests for test users.

proxy/raddb — FreeRADIUS configuration for adapting VASE NAS to NOKIA AAA.

Adaptation of AUTH and ACCT requests is implemented; CoA support is planned to be added.

To deploy in a production environment, it is required to:

install the FreeRADIUS server according to the installation guide on the software website.

replace the default configuration created by the installer with the configuration from the attached archive.

configure the source client addresses of VASE NAS and the target NOKIA AAA servers according to the instructions in Description of RADIUS proxy based on FreeRADIUS and installation.

configure the source realms for VASE NAS users in the file proxy.conf (currently rlm_pppoe_prod_servers and rlm_ipoe_prod_servers).

configure the adapter parameters in the vase_to_nokia {} section of the file radiusd.conf:

nokia_realm — target realm for NOKIA AAA users;

nokia_iptv_realm — target realm for NOKIA AAA IPTV users;

nas_identifier — NAS identifier for NOKIA AAA;

nas_port_type — port type for NOKIA AAA;

nas_port_id — port identifier for NOKIA AAA.

Configuration example:

vase_to_nokia { nokia_realm = "MSFT 5.0" nokia_iptv_realm = "MSFT_IPTV" nas_identifier = "bras904.krasnodar" nas_port_type = ethernet nas_port_id = "lag-2:3330.3330" }

server1/raddb — FreeRADIUS configuration of NOKIA AAA emulator #1.
server2/raddb — FreeRADIUS configuration of NOKIA AAA emulator #2.
These emulator configurations contain sets of test users and target realm settings.