en:dpi:dpi_options:brass:opt_bras:bras_l3_authorization:start [Документация VAS Experts]

This is an old revision of the document!


2 L3-connected BRAS users authorization procedure description

FastPCRF server acts as an authorization server within the L3-connected BRAS solution.

Immediately after the FastDPI started, the process to set the authorization status of all users to "unknown" is performed. This status assumes that all the user settings previously saved in the internal UDR database will be applied.

Once the network packet from the previously unknown IP address has been received, the FastDPI sends a request to authorize the User to the FastPCRF. The FastPCRF server refers to the RADIUS server, requesting from the latter the client authorization, its polycing profile (analogous to the tariff plan), and service profiles. Upon receiving a response from the RADIUS server, FastPCRF sends the user's properties to FastDPI which in turn sets the authorization status either to "authorized" (Access-Accept) or to "unauthorized" (Accept-Reject).

FastPCRF supports CoA notifications — the RADIUS server notifications about changes in user settings (for example, when the client's account has insufficient funds or the changes in band limitation have been made).

If the subscriber resides in "not authorized" status, FastDPI itself takes no any action to limit subscriber traffic. In order to limit traffic the returned Access-Reject should contain special parameters: special policing (highly reduced bandwidth) and service 5 "white list" specifying sites an anauthorized user is allowed to visit, typically it is a captive portal.