Base SSG configuration for INLINE scheme [Документация VAS Experts]

Base SSG configuration for INLINE scheme

  1. Prepare the server according to the installation requirements.
  2. Install and configure the VEOS OS
  3. Set an IP address.
  4. Apply for license installation and fastDPI to Service Desk.
  5. After installing them, the following settings must be made in etc/dpi/fastdpi.conf:
    • Set up transit:
      in_dev=01:00.0
      out_dev=01:00.1
      #Scale factor is about 1 for every 1 Gigabit of bandwidth
      scale_factor=10
      timeout_check_dev=0
       
      #FastDPI Control
      ctrl_port=29000
      ctrl_dev=lo
       
      #Turn on UDR
      udr=1
    • Statistics gathering:
      #FullNetflow/IPFIX
      netflow=8
      netflow_full_collector_type=2
      netflow_dev=eth3
      netflow_timeout=20
      netflow_full_collector=172.18.254.124:1500
      netflow_rate_limit=30
      netflow_passive_timeout=40
      netflow_active_timeout=120
       
      #ClickStream/IPFIX
      ipfix_dev=eth3
      ipfix_tcp_collectors=172.18.254.124:1501
       
      #SIP
      ipfix_meta_tcp_collectors=172.18.254.124:1511
      rlimit_fsize=32000000000
  6. Further settings are made depending on which components are to be used. The settings are described in the SSG components section.