I. Project status:
The region has a total of more than 600,000 users, with an actual opening of over 60,000 and nearly 40,000 online.
The project operates in cooperation with telecommunication and connectivity, with the last km of telecommunication access, bandwidth for telecommunications and connectivity, and separate fees for all users.
II. Product selection:
It's a bras product with a model of Me-60.
Outer network interfaces with two operators: telecommunications and connectivity
The need to settle with two operators in the actual use process
In the same project, there are telecommunications users and connected users who need to distinguish between users and charge separately
Products that are largely off-the-shelf or demand-responsive on the market have been compared to a more selective model, resulting in the choice of using NATSHEL_BRAND NS-G600 NATSHEL_AUTH_BILLING billing management.
III. Network architecture and certification process
Network architecture
· Outline leased fibre-optic lines for connectivity and telecommunications to access the central office
· Telecom lines (BRAS on the provincial network) and connected lines, with access to BRAS on the Hingejiang wide power grid
· The user of the BRAS below Hikang Wide Power is connected to the Internet through a single dial-up certification by the owner of the BRAS from Hikang Wide Power.
The toptops are as follows:
Certification process
Local user (Yellow arrow):
1) Users submit dial-up requests to client BRAS
2) Client BRAS sends authenticated user information to client RADIUS for authentication
3) RADIUS determines that the user is a local user and that the user information is correct, then authentication using standard RADIUS certification processes
4) Client RADIUS returned to client BRAS user authentication successfully, while the user accessed Internet
Connected users (red arrow):
1) Users submit dial-up requests to client BRAS
2) Client BRAS sends authenticated user information to client RADIUS for authentication
3) Client RADIUS determines that the user is connected and the user information is correct returns to client BRAS user authenticated successful message (carryed in)“tunnel-server-endpoint”parameter, this parameter is to inform the client that the user needs to re-validate the end Bras via L2TP tunnel)
4) Client Bras receives and identifies parameters for the return of client RADIFUS, establishes a L2TP tunnel between client Bras by identifying parameters and connected BraS, and sends the user's dial-up request via the tunnel to the connection BRAS for recertification
5) Connecting to BRAS send messages to RADIUS for authentication
6) RADIUS returns authentication results
7. Clients accessing Internet via the BRAS
Provincial web users (Blue Arrow):
1) Users submit dial-up requests to client BRAS
2) Client BRAS sends authenticated user information to client RADIUS for authentication
3) Client RADIUS returns the user BRAS certificate successful message (which is carried) when determining that users are provincial web users and the user information is correct“tunnel-server-endpoint”parameter, this parameter is to inform the client that the user needs to re-validate the end Bras via L2TP tunnel)
4) Client Bras established L2TP tunnel with the provincial network BRAS by identifying parameters for return of client RADIUS and sent this user dial-up request to the provincial network BRAS for recertification
5) Provincial Network BRAS sends authentication information to RADIUS for accreditation
6) The provincial network RADIUS returns the certification results
7. Clients visit the Internet via the provincial network BRAS
IV. Programme implementation and operations
The program is run by a NatShell server, which supports the bill management of 100,000 registered users. As the pre-implementation period is well prepared, the project has been implemented for a relatively short period and successfully.
The following results have been achieved as a result of the implementation of the project:
1 Users use the BRAS on Hikang Wide Power for dial-up authentication.
2 The user can only dial up one dial, and the BRAS on Hikang has sent its account code to NatShell for authentication after receiving the dialling request.
3 The account numbers are connected and telecommunications and accounts, in which NATSHEL_BRAND's billing is certified. The result of the return is to Bras, who has been powered by Hiangjia, and to be notified that it will be accredited twice and then to an AAA server with telecommunications or connections.
4 The same account number allows only one user to log in at the same time, ensuring that the user uses it exclusively.
5 Support for the PPPOE and PPTTP-based user login models not only supports traditional PPPOE authentication but also allows, in exceptional circumstances, users to assign a PPTP-based user account to share the same system, which enhances the flexibility of the system.
6 Different fee packages, such as 1M year, 2M for six months, free property accounts, test accounts etc., have been developed to accommodate the needs of different users and can be easily converted between different packages, depending on user needs and publicity.
7 The generation of different reports on demand not only generates text but also graphics, which provide a strong basis for management to easily analyse opening accounts and use them.
8 The secondary authentication not only synchronized with the telecommunications, connected account number but also ensured accuracy of accounts, which could not be authenticated by either party without user information in its account system.
V. Operations summary
After the new equipment became operational, the area was connected to a two-fold network, with users free choice of which network to use. The user needed only one fibre optic line. A good reputation was quickly created by flexible and easy accounting. Management managed not only through the introduction of professional NATSHEL_BRAND certification, billing equipment, but also through user management, company employee authority management, opening accounts, filing and overhauling, etc., were integrated into the system, resulting in real systematic and process management.