Hi, I've got the solution but it's extremenly complex due to the business modality & lack of technological maturity in non-3gpp network. In short both SBRC & SRC will be required to build such solution but not without some limitations. I guess when Gx reference point will be available commercially for ASN-GW or such product regulation will be easier. Thanks, //asmash ... View more

Hi, Can we transform SBR Carrier to SRC somehow using the same hardware platform? Is there any other way of transformation? We don't have enough time in hand to do hardware shipment..... //asmash ... View more

Does it support SCAP to be integrated to Prepaid Charging System ? //asmash ... View more

Dear Raveen, The port is live. The GUI is accessible via root user only. So, what to do to enable it for other non-root users? BR, asmash ... View more

Hi Ashish, It's SBR SPE v6.1 running on Solaris. Never tried to access via Web before but this time need to collect some reporting which is exclusive to GUI (Concurrent Session, etc.). http://forums.juniper.net/t5/Identity-and-Policy-Control/How-to-check-Concurrent-Session-in-SBR/td-p/101524_ And I'm pretty sure that the credential I'm using is correct as I CAN login via Telnet. Thanks, Ashraf ... View more

Hi, Following is the port section in radius.ini > [Ports] TcpControlPort = 1812 ;TcpControlAddress = 1.2.3.4 SecureTcpAdminPort = 1813 ;SecureTcpAdminAddress = 1.2.3.4 UDPAuthPort = 1645 UDPAcctPort = 1646 UDPAuthPort = 1812 UDPAcctPort = 1813 ;UDPProxyPortBlockStart = 28000 ;UDPProxyPortBlockLength = 64 As I'm already connected to SBR Administrator GUI, I guess tcp port is ok. Somehow SBR is not accepting login credential by this way. //asmash ... View more

Thanks Raveen! Can upi share some light on the relationship between concurrent Act session and the TPS ? //asmash ... View more

Hi Jcanchola, Yes, we will try with JavaScript Module. It would be great if you would post a typical Script for selecting realm based on framed-ip-address segment. Thanks, asmash ... View more

It is SBR SPE 6.1. Java Script Module is not available in it. Thanks, asmash ... View more

Please find the topology in attached file. ... View more

Hi Jacanchola, The NAS is a GGSN and it allocates IP address dynamically off the pool. SBR is not doing Authentication, neither is the concern. Only Accounting message is sent to SBR (Proxy) so that it can forward it to appropriate End-node (D1/D2) based on Accounting Attribute Maping. //asmash ... View more

Actually, User IP (framed-ip-address) is assigned by NAS and forward the Accouting Start message to SBR (Proxy). SBR select particular Realm based on AcctAttributeMap (APN, User-name attributes) and forward it as end nodes. Two NAS allocates IP address dynamically from the pool 10.8.0.0/13 and 10.16.0.0/13 respectively. At present AcctAttributeMap DO NOT check framed-ip-address value rather it rely on APN and User-name to distinguish realm and forwards it to two different destination (D1, D2). Existing Topology: NAS01 (10.8.0.0/13) -> SBR01 -> D1 and NAS02 (10.16.0.0/13) _-> SBR01 -> D2 Now we need to insert framed-ip-address into consideration as a portion of NAS01 Acct message has to be forwarded to D2 insted of D1 while rest part will follow as it is (i.e. D1). Topology to be Designed: NAS01 (10.8.0.0/13) -> SBR (if targetted IP segment, 10.10.0.0/22) -> D2 NAS01 (10.8.0.0/13) _-> SBR (rest IP of 10.8.0.0/13) -> D1 and NAS02 (10.16.0.0/13) _-> SBR -> D2 _ Thanks, asmash ... View more

Hi Paul, Then what could be the solution to map a Realm based on particular framed-IP-address segment (let's say /22) ? BR, asmash ... View more

Well! Paul, So, can we define multiple framed-ip-address to cover the whole chunk? Target: 10.10.0.0/22 framed-ip-address=10.10.0.* framed-ip-address=10.10.1.* framed-ip-address=10.10.2.* framed-ip-address=10.10.3.* BR, asmash ... View more

Hi Jcanchola, I'll send you the proxy.ini shortly. In real case, how can we mention the IP address start and end? Something like 10.10.10.20 to 10.10.10.180. Thanks, asmash ... View more