Table of Contents

Identification of L2 and L3 subscribers

L3-subscribers

FastDPI 12 introduces support for identifying L2 subscribers by VLAN/Q-in-Q.

Previously, the way of subscriber identification was only his MAC-address, which could lead to problems if two different subscribers belonging to different VLANs, have the same MAC-address.

FastDPI 12 introduces a new fastdpi.conf setting: bras_subs_id, which is a type of L2 subscriber identification. It specifies a list, in order of preference, of what to consider to be the L2-subscriber ID.

Valid values in the list:

The default value is bras_subs_id=mac (for compatibility with previous versions)

Setup example:

bras_subs_id=qinq+mac,vlan+mac,mac

is interpreted as follows:

Instead of a list you can set it to auto:

bras_subs_id=auto

which is equal to:

bras_subs_id=qinq+mac,vlan+mac,mac

We recommend to use the auto value for bras_subs_id.

If no identification type is defined for an incoming packet, then such subscriber is not terminated, all packets of the subscriber are dropped. This is possible for the following example:

bras_subs_id=qinq+mac

when the incoming packet from the subscriber is not Q-in-Q.

Radius Authorization

In the Radius L2 authorization request, the subscriber ID is passed in the VSA attribute VasExperts-L2-SubsId as a string:

ATTRIBUTE   VasExperts-L2-SubsId           14   string

The format of the string representation of the identifiers is as follows:

If the subscriber's L2 identifier is unknown, then VasExperts-L2-SubsId=[0]<n/a>.

L2-subscribers