RADIUS integration of SSG BRAS with Nokia BNG (AUTH/ACCT)

Assignment

Radius contains a specification for what data should be present in request and response packets, but allows you to extend its functionality to a specific case by using Vendor Specific Attribute - attributes that are specified by a particular vendor. For example, to transmit information that has a non-standard display. In this case it is necessary for Nokia BNG to understand attributes from SSG BRAS and vice versa (SSG BRAS is a Radius client, Nokia BNG is a Radius server), for this purpose FreeRadius package has a possibility to work out attributes on the fly, which pass through it both in one and in the other direction.

Configuring FreeRADIUS as a balancing proxy VASE NAS adapter for Nokia AAA

vase_to_nokia.tar.gz

The attached archive contains the folders:

  1. scripts - scripts of VASE NAS requests emulation for debugging and testing. The scripts contain examples of authorization and account requests for test users.
  2. proxy/raddb - FreeRADIUS configuration of VASE NAS adaptation for Nokia AAA.
Adaptation of AUTH and ACCT queries has been implemented, plans to add COA.

To deploy in a production environment, you need to:

  1. Install the FreeRADIUS server according to installation instructions on the software website.
  2. Replace the default configuration created by the installer with the configuration from the archive.
  3. Configure addresses of VASE NAS source clients and Nokia AAA target servers according to balancing_proxy instructions.
  4. Configure the source realm for VASE NAS users in the proxy.conf file (currently beelinerouter and beelinerouter-iptv).
  5. Configure adapter settings in the vase_to_nokia {} section in the radiusd.conf file:
    • nokia_realm - target realm for Nokia AAA users;
    • nokia_iptv_realm - target realm for Nokia AAA IP-TV users;
    • nas_identifier - NAS identifier for Nokia AAA users;
    • nas_port_type - port type for Nokia AAA;
    • nas_port_id - port identifier for Nokia AAA.

Example setting:

vase_to_nokia {
    nokia_realm = "MSFT 5.0"
    nokia_iptv_realm = "MSFT_IPTV"
 
    nas_identifier = "bras904.krasnodar"
    nas_port_type = ethernet
    nas_port_id = "lag-2:3330.3330"
}

server1/raddb - FreeRADIUS configuration of Nokia AAA emulator #1.
server2/raddb - FreeRADIUS configuration of Nokia AAA emulator #2.
These emulator configurations contain test user sets and target realm settings.