Содержание

FastPCRF (BRAS integration by RADIUS)

PCRF provides proxying requests from fastDPI to the Radius server. It is a part of the standard Stingray Service Gateway installation package, but if necessary, it can be used as a dedicated server.

Hardware Recommendations

In order to run PCRF you can use the following hardware or virtual machines matching the following characteristics:

  1. CPU 2.5 GHz, 1 pcs
  2. RAM 512 MB - 1 GB
  3. HDD 50 GB - 250 GB
  4. Operating system Cent OS 8.5, VEOS
  5. NIC ranging from 10 Mb/s

Installation

  1. Install the Network Time Protocol daemon
    yum install chrony -y
    systemctl restart chronyd
    timedatectl

    :!: When entering the timedatectl command, the System clock synchronized parameter must be set to yes

  2. Add vasexperts repository
    rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru
    rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm
  3. Install the fastPCRF
    yum install fastpcrf
  4. Make sure the service is running
    service fastpcrf start
  5. Сonfigure fastpcrf service to run at startup
    systemctl enable fastpcrf
  6. Open firewall ports in order to access the fastPCRF and Radius servers
    firewall-cmd --permanent --zone=public --add-port=22/tcp
    firewall-cmd --permanent --zone=public --add-port=3799/udp
    firewall-cmd --permanent --zone=public --add-port=29002/tcp

and restart firewall for the rules to take effect

firewall-cmd --reload
  1. Disable selinux 1)
    setenforce 0
    vi /etc/selinux/config
    SELINUX=disabled

Installation of the fdpi_cli and fdpi_ctrl utilities on the PCRF server

You can get these utilities from the server where fastDPI is installed.
The utility files are located in /usr/sbin/.

  1. Copy the utilities to the home directory
    cp /usr/sbin/fdpi_cli /home/vasexpertsmnt
    cp /usr/sbin/fdpi_ctrl /home/vasexpertsmnt
  2. Move these files to the server where fastPCRF is installed, to /home/vasexpertsmnt

How to use the utility:

fdpi_cli -r 1.1.1.1 dpi config get trace_ip 
fdpi_cli -r 2.2.2.2 pcrf config get verbose
fdpi_ctrl -r 1.1.1.1:29000 list all --bind

Server address – 1.1.1.1 where the fastDPI module is installed.
Server address – 2.2.2.2 where the fastPCRF module is installed.

1)
temporary solution