https://wiki.vasexperts.ru/ 2026-04-03T22:22:05+00:00 https://wiki.vasexperts.ru/ https://wiki.vasexperts.ru/lib/exe/fetch.php?media=wiki:favicon.ico text/html 2026-03-03T14:01:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:bras_bng:bras_l2_options:bras_l2_vlan_ipsg&rev=1772546466&do=diff IP source guard Purpose FastDPI BNG verifies the consistency between subscriber VLAN tags and the subscriber IP address. When assigning an IP address via DHCP, FastDPI BNG stores the subscriber VLAN/QinQ tags in the built-in UDR database. These data are later used to validate the correspondence between the packet source IP and its VLAN tags. text/html 2024-09-26T15:29:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:bras_bng:bras_l2_options:bras_l2_vlan_local&rev=1727364582&do=diff Local traffic interconnect Description FastDPI BRAS has a feature to interconnect the local (intra-network) traffic between users. When the interconnection mode is enabled, BRAS searches its UDR database for the recipient's IP address. If it is found and the session is not expired and is not explicitly closed (there was no DHCPRELEASE), then the packet is not passed out, but sent back to the receiver's input dna interface. Since this is local traffic, no text/html 2024-09-26T15:29:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:bras_bng:bras_l2_options:filtering&rev=1727364582&do=diff Traffic Filtering Traffic filtering is performed using the bras_ip_filtering option. Traffic filtering (bitmask) is disabled (=0) by default. Allowed flags: 0x0001 – control of subscriber IP spoofing (restricting forged traffic). The packet is dropped on text/html 2024-09-26T15:29:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:bras_bng:bras_l2_options:framed_route&rev=1727364582&do=diff Framed-Route Stingray Service Gateway with L2 BRAS/BNG supports Framed-Route attribute in Access-Accept response for small (up to /24) subnets. The attribute format is the string "subnet gateway": # Canonical format according to RFC 2865 p.5.22 - subnet, gateway and other metrics Framed-Route:="192.168.1.0/24 192.168.1.1 1 2 -1 3 400" # Only subnet and gateway can be specified Framed-Route:="192.168.1.0/24 192.168.1.1" # If the gateway = 0.0.0.0, then Framed-IP-Address is c… text/html 2026-03-03T14:25:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:bras_bng:bras_l2_options:subs_activity&rev=1772547945&do=diff Subscriber Activity Monitoring * Monitoring subscriber activity and blocking incoming traffic without terminating the session. This is a reactive control, performed "after the fact," i.e., when a packet arrives from the internet to the subscriber. If there is no traffic from the internet to the subscriber, there is no control; ARP ping is used to check subscriber activity. This method limits incoming traffic to the subscriber in case of inactivity without terminating the subscriber session.