• AWS
  • Azure
  • Google Cloud
  • Hyper-V

A configurable broadband remote access server (BRAS) is a highly valuable technology for any service provider. This is why VyOS stands out among solutions as a platform that will scale with your users and workload, and allow you to painlessly extend your services.

The BRAS architecture is created in a way to enable the router to communicate with external devices and servers with the purpose of establishing connectivity to subscribers and managing their sessions. A logical session is used to connect subscribers to the network. There are two types of subscriber sessions, depending on the protocols used:

  • PPPoE subscriber session

    PPPoE subscriber session

    The PPP-over-Ethernet (PPPoE) subscriber session is established using the point-to-point (PPP) protocol that runs between the customer-premises equipment (CPE) and the broadband network gateway (BNG). It is designed for managing how data is transmitted over Ethernet, and it allows a single server connection to be divided between multiple clients.

  • IPoE subscriber session

    IPoE subscriber session

    The IP-over-Ethernet (IPoE) subscriber session is established using the IP connection that runs between the CPE and the BNG; IP addressing is done using the DHCP protocol. IPoE is essentially DHCP triggered subscriber interfaces. Users are “authenticated” through the combination of incoming interface and MAC address. This identifies the physical location of the user based on the queue they are connected to.

To control subscribers’ sessions and to collect statistics, AAA (authentication, authorization and accounting) is necessary. With RADIUS integration, all information will always be in synchronization with your billing database, which allows providing refined operational services with identity authentication of broadband users, package and service authorization, and calculation of charges.

VyOS utilizes accel-ppp to control services. It can be used with local authentication or a connected RADIUS server.

Specific Tasks Include

Provides Layer 3 connectivity and routes IP traffic through an internet service provider’s backbone network to the internet

Applyies limits to the services provided to customers, limiting access to sensitive data or valuable resources with a powerful firewall

Integrates with the AAA server that authenticates subscribers and keeps an account of subscriber sessions

Enforces quality of service (QoS) policies

Acts as DHCP server to provide IP addresses to the clients


  • Subscriber Authorization

    Subscriber Authorization

  • Traffic Accounting

    Traffic Accounting

  • Quality of Service

    Quality of Service

  • Traffic Filtering

    Traffic Filtering

  • Individual Access Attribute Assignment

    Individual Access Attribute Assignment

VyOS provides carriers with the solution, which can be offered to end-users as self-serve products and services, cutting of delivery costs, administration complexity, and the time-to-market of new products and services.


Here are some resources to help you learn more about VyOS, keep up with the development, and participate in it.



  • Can be installed on any supported hardware equipment
  • Configurable internet access control for subscribers
  • Support for L2 / L3 protocols
  • Wide range of subscriber management features
  • Unified CLI for management
  • Reasonable pricing for maximum flexibility

Get Solution Brief

Feel free to contact us with any technical or business questions.

Request more information

We use the contact information you provide us to contact you about our products and services. You can unsubscribe from these communications at any time. For information on how to unsubscribe, as well as our privacy practices and the commitment to protect your privacy, see below our  Privacy Policy.

Still have a question?

Fill out the form to communicate with our experts