Case 1. Creating Channel and Subscriber Profiles
1. Profile Types
The system allows the application of various filtering lists for specified subscriber groups. Definitions of logical objects to which rules are applied:
- Common Channel or Default vChannel - Traffic passing through the DPI device that is not allocated to channels (vChannel). By default, this is all traffic. In the system, the Default Channel is assigned the number 1 and is defined in DPI by the parameter
default_vhannels=1
. - vChannel - Defined by a list of Static and Dynamic IPprefixes. Dynamic IPprefixes are specified using a regular expression (regexp) with ASpath and BGP Community from BGP. IPprefix is bound to a specific vChannel. vChannel contains traffic from those subscribers who fall within the associated IPprefix.
- Subscriber - Defined by a list of Static and Dynamic IPprefixes. Dynamic IPprefixes are specified using a regular expression (regexp) with ASpath and BGP Community from BGP. IPprefix is bound to a specific Login. If an IPprefix associated with a particular Subscriber overlaps with an IPprefix associated with a vChannel, policies applied to the vChannel will also affect the Subscriber. This influence can be avoided by applying personalized filtering and policing rules to the Subscriber.
Session - traffic (flow) defined by a set of parameters: IPsrc:port, IPdst:port, and protocol type (TCP, UDP, ICMP, etc.).
2. Profile Configuration
2.1. “Default Channel” Profile
No special configuration is required. By default, this group includes all subscribers who have not been assigned to other groups. In the system, the Default Channel is assigned the number 1.
2.2. “Channel” Profile
Created in the “Profile Management” section under “Add new channel.”
- Fill in the required fields, and select the location from the list.
- The “Use Global Lists for WEB FILTER rules” toggle refers to filtering based on the Global List. Filtering is enabled by default and can be edited at any time.
- Add prefixes. CIDR prefixes can be imported from the clipboard or a file; XLSX, CSV, and TSV extensions are supported, and multiple files can be uploaded simultaneously.
For channels, it is recommended to use dynamic prefixes configured by BGP attributes COMMUNITY and/or ASPATH (e.g., ASPATH — .*25106$).
- Select IPv4 or IPv6 based on the found regular expression (both are used by default).
After completing, press “Save.”
2.3. “Subscriber” Profile
Is created in the “Profile Management” section under “Add new subscriber.”
- Fill in the required fields, and select the location from the list.
- The “Use Global Lists for WEB FILTER rules” toggle refers to filtering based on the list. Filtering is enabled by default and can be edited at any time.
After completing, press “Save.”