A configurable broadband remote access server (BRAS) is a highly valuable technology for any service provider. This is why VyOS stands out among solutions as a platform that will scale with your users and workload, and allow you to painlessly extend your services.
The BRAS architecture is created in a way to enable the router to communicate with external devices and servers with the purpose of establishing connectivity to subscribers and managing their sessions. A logical session is used to connect subscribers to the network. There are two types of subscriber sessions, depending on the protocols used:
PPPoE subscriber session
The PPP-over-Ethernet (PPPoE) subscriber session is established using the point-to-point (PPP) protocol that runs between the customer-premises equipment (CPE) and the broadband network gateway (BNG). It is designed for managing how data is transmitted over Ethernet, and it allows a single server connection to be divided between multiple clients.
IPoE subscriber session
The IP-over-Ethernet (IPoE) subscriber session is established using the IP connection that runs between the CPE and the BNG; IP addressing is done using the DHCP protocol. IPoE is essentially DHCP triggered subscriber interfaces. Users are “authenticated” through the combination of incoming interface and MAC address. This identifies the physical location of the user based on the queue they are connected to.
To control subscribers’ sessions and to collect statistics, AAA (authentication, authorization and accounting) is necessary. With RADIUS integration, all information will always be in synchronization with your billing database, which allows providing refined operational services with identity authentication of broadband users, package and service authorization, and calculation of charges.
VyOS utilizes accel-ppp to control services. It can be used with local authentication or a connected RADIUS server.
Specific Tasks Include
Provides Layer 3 connectivity and routes IP traffic through an internet service provider’s backbone network to the internet
Applyies limits to the services provided to customers, limiting access to sensitive data or valuable resources with a powerful firewall
Integrates with the AAA server that authenticates subscribers and keeps an account of subscriber sessions
Enforces quality of service (QoS) policies
Acts as DHCP server to provide IP addresses to the clients
Quality of Service
Individual Access Attribute Assignment
- Can be installed on any supported hardware equipment
- Configurable internet access control for subscribers
- Support for L2 / L3 protocols
- Wide range of subscriber management features
- Unified CLI for management
- Reasonable pricing for maximum flexibility