{{indexmenu_n>2}} ======RADIUS integration of SSG BRAS with Nokia BNG (AUTH/ACCT)====== =====Assignment===== Radius contains a specification for what data should be present in request and response packets, but allows you to extend its functionality to a specific case by using Vendor Specific Attribute - attributes that are specified by a particular vendor. For example, to transmit information that has a non-standard display. In this case it is necessary for Nokia BNG to understand attributes from SSG BRAS and vice versa (SSG BRAS is a Radius client, Nokia BNG is a Radius server), for this purpose FreeRadius package has a possibility to work out attributes on the fly, which pass through it both in one and in the other direction. =====Configuring FreeRADIUS as a balancing proxy VASE NAS adapter for Nokia AAA===== {{ :dpi:dpi_components:radius:radius_integration:vase_to_nokia.tar.gz |}} The attached archive contains the folders: - ''scripts'' - scripts of VASE NAS requests emulation for debugging and testing. The scripts contain examples of authorization and account requests for test users. - ''proxy/raddb'' - FreeRADIUS configuration of VASE NAS adaptation for Nokia AAA. Adaptation of AUTH and ACCT queries has been implemented, plans to add COA. To deploy in a production environment, you need to: - Install the FreeRADIUS server according to [[https://freeradius.org/documentation/|installation instructions]] on the software website. - Replace the default configuration created by the installer with the configuration from the archive. - Configure addresses of VASE NAS source clients and Nokia AAA target servers according to [[dpi:dpi_components:radius:balancing_proxy]] instructions. - Configure the source realm for VASE NAS users in the ''proxy.conf'' file (currently ''beelinerouter'' and ''beelinerouter-iptv''). - Configure adapter settings in the ''vase_to_nokia {}'' section in the ''radiusd.conf'' file: * ''nokia_realm'' - target realm for Nokia AAA users; * ''nokia_iptv_realm'' - target realm for Nokia AAA IP-TV users; * ''nas_identifier'' - NAS identifier for Nokia AAA users; * ''nas_port_type'' - port type for Nokia AAA; * ''nas_port_id'' - port identifier for Nokia AAA. Example setting: vase_to_nokia { nokia_realm = "MSFT 5.0" nokia_iptv_realm = "MSFT_IPTV" nas_identifier = "bras904.krasnodar" nas_port_type = ethernet nas_port_id = "lag-2:3330.3330" } ''server1/raddb'' - FreeRADIUS configuration of Nokia AAA emulator #1.\\ ''server2/raddb'' - FreeRADIUS configuration of Nokia AAA emulator #2.\\ These emulator configurations contain test user sets and target realm settings.