Это старая версия документа!
Настройки интерфейса авторизации S6b
Секция "charon.plugins.eap-diameter.s6b"
| Параметр | Описание | Значение |
|---|---|---|
app_id | Идентификатор приложения | s6b |
realm | Обслуживаемый реалм | epc.mncYYY.mccXXX.3gppnetwork.org |
host | Имя хоста сервера | epdg.epc.mncYYY.mccXXX.3gppnetwork.org |
vendor_id | Идентификатор вендора | [none][3gpp] |
<diameter-s6b-client-name-1> {} | Параметры сервера S6b №1 | |
<diameter-s6b-client-name-2> {} | Параметры сервера S6b №2 | |
<diameter-s6b-client-name-n> {} | Параметры сервера S6b №№ |
Пример:
charon { plugins { eap-diameter { interface = SWx s6b { app_id = s6b realm = epc.mnc002.mcc250.3gppnetwork.org host = epdg.epc.mnc002.mcc250.3gppnetwork.org vendor_id = 3gpp diameter-s6b-client-name-1 {} diameter-s6b-client-name-2 {} diameter-s6b-client-name-n {} } } } }
Секция "charon.plugins.eap-diameter.s6b.<diameter-s6b-client-name-n>"
| Параметр | Описание | Значение |
|---|---|---|
local | Адрес:порт клиента | AAA.BBB.CCC.DDD:XXXX, [1111.2222.3333.4444.5555.6666.7777.8888]:XXXX |
remote | Адрес:порт сервера AAA | AAA.BBB.CCC.DDD:XXXX, [1111.2222.3333.4444.5555.6666.7777.8888]:XXXX |
proto | Транспортный протокол | [sctp][tcp] |
Пример:
charon { plugins { eap-diameter { interface = SWx s6b { app_id = s6b realm = epc.mnc002.mcc250.3gppnetwork.org host = epdg.epc.mnc002.mcc250.3gppnetwork.org vendor_id = 3gpp diameter-s6b-client-1 { local = 192.168.1.1:3868 remote = 192.168.2.1:3868 proto = sctp } diameter-s6b-client-2 { local = 192.168.1.1:3869 remote = 192.168.2.2:3868 proto = sctp } diameter-s6b-client-3 { local = 192.168.1.1:3870 remote = 192.168.2.3:3868 proto = tcp } } } } }
fast-epdg { swu { <config-name> { apn= ike=aes256-sha256-sha1-prfsha256-prfsha1-modp2048-modp1024! esp=aes256-sha256-sha1-modp2048-modp1024! leftauth=eap leftsubnet= rightauth=eap-diameter rightsourceip=%epdg } } auth { interface = accounting = swm { app_id = swm realm = host = vendor_id = <server-name> { priority = local = remote = proto = } } swx { app_id = swx realm = host = vendor_id = <server-name> { priority = local = remote = proto = } } s6b { app_id = s6b realm = host = vendor_id = <server-name> { priority = local = remote = proto = } } } tunnel { iface = pdn = pgw { gtp { mcc = mnc = tac = cid = enbid = realm = <server-name> { apn = priority = devname = devmode = subnet = qos { qci = mbr_ul = mbr_dl = gbr_ul = gbr_dl = } gtp-c { local = remote = } gtp-u { local = remote = } } } } } syslog { daemon { ike = cfg = lib = } } }