The campus network is heavily invested and costly to operate, and many schools choose to bring in operators to combine the campus network with its operation. Multi-operator dialling is one of the common models: schools retain their NATSHEL_AUTH_BILLING systems; after user certification has been adopted, PPPE dialling is initiated by BRAS, a proxy gateway to operator, and users actually use web resources from operators. Under this model, how the campus network certification system interfaces with the operator’s networks, how business processes are going and what border conditions are needed for schools to understand when planning collaboration.
What's a PPoE dialling: the bridge between school and operator networks
The core logic of the PPPOE proxy is to bind user campus network accounts to operator accounts, to be managed by a campus network certification system that provides users with a password to initiate PPOE dialling on behalf of the operator’s network. According to information from the NATSHEL_BRAND School WIFI fee-operated operating solution, the proxy programme operates through: operators provide home wide account numbers, one-on-one line between the campus network billing system and Portal and interface on the dial-up gateway; schools provide students with online account numbers (usually mobile phone numbers) through the system, while automatically opening and charging fees at the side of the operator. When students are online, they first pass the school ' s Authentication & Billing system certification (Portal page entry account password), after which the gateway is given a code attached to the account number and PPOE dialling request from Bras to counterpart operators; the operator BRAS transmits the request to the provincial company AAAS for validation, returns the result after approval, and assigns the gateway to the user to decide whether to release it based on the results. From the operator ' s point of view, access to the campus network is done in the same way as home broadband, with PPPEOE access and unified web management; From a school perspective, the campus network exports have become a two-tier network, with Authentication & Billing and bandwidth control being the responsibility of the side system. One of the salient advantages of this model is that schools can introduce multiple operators, tied up with wireless and mobile school meals, students can choose their own operator, schools can increase opening rates and returns; and the school internal network remains independent without major changes in its structure.
Authentication & Billing process for dialling mode: one authentication, secondary dialling, full trailing
The user ' s access to the Internet can be divided into several phases under multi-operator proxy mode. Phase I is wireless access and Portal reorientation: students connect to the campus WiFi, go through a dial-up gateway when accessing the Internet, pass the dial-up gateway for Portal redirection, and students are directed to the authentication page. Phase II is campus network certification: students enter an online account code on Portal pages, Authentication & Billing platform authenticating account numbers (local or one-card connection, operator account number system) and, after certification, return results to the dial-up gateway and send down the operator-to-code password that binds the account. Phase III is operator dialling: once the dial-up gateway has obtained its dial-up code, a PPpoE dial-up request is launched with BRAS, which sends the dial-up request to the provincial company AAAA, AAA returns to Bras after AA recognition and BRAS returns the dial-up to the dial-up switch. The fourth phase is Internet release: the proxy channel decides whether to allow users to access the system based on the operator's dial-up, or by releasing it instead of returning the authentication failure information to the user's Portal page. Phase V is a billing and log: traffic, length of time, costs of user access are recorded and managed by the NATSHEL_AUTH_BILLING platform. The operator also has an independent dial-up log and billing record that both parties have agreed to perform. Throughout the process, the campus network certification system is responsible for strategy and accounting (who can access the Internet, what package, how much money) and the dial-up gateway is responsible for dialling and chain execution (to which operator, successful or not), with clear responsibilities and division of labour."Local authentication plus address pool diversion"Model: User access is redirected to a single authentication Portal Portal, NatShell router first locally authenticated, with different address pools distributed according to the type of operator that the user binds, then PPPOE proxy dialling started on different operators' lines based on the addresses pool, and one-to-one NAT conversion became online after certification was successful. The process details for different products vary slightly but are all coherently logical.
Border conditions of the dialling model: operator resources, interface alignment, account synchronization and clearing calibre
The PPPOE proxy model is available on several prerequisites. First, it has operator accounts and line resources: the basis for the dialling is a home-broad account number and route provided by the operator without operator resources; when multiple operators are introduced, they need to identify the account number system, the opening process and the manner of clearing each operator separately. Second, the protocol match with BRAS/AAA: the proxy gateway initiates a PPPE dialup to the operator BRAS, requiring the operator to support the appropriate agreement and interface, and the terms of cooperation of BRAS and AAA require confirmation from one owner. Third is the synchronization of new accounts: according to information from the University WIFI fee-for-business solution, the replacement model involves matching the account opening with the operator's back office to ensure that the account numbers are synchronized——After opening the school fee system, students need to automatically (or bulk) open their accounts on the side of the operator, with a matching account number 1. Fourth is the reconciliation of settlement logs: the split reconciliation requires three types of evidence that rely simultaneously on certified logs, dial-up logs, billing logs, the side recording of user authentication and billing data, the side record of dialling numbers and resource use data, the parties reconcile monthly or agreed cycle, and the balance calculator (number by account, length by schedule, flow by basket, sharing by table etc.) must be clear before cooperating. In accordance with the rules governing multi-operator allocation and the border area of export operations at campuses, technical skills must be described separately from commercial landing sites.——Technology programmes can be designed to pass and export operations without being successful, and the viability of projects depends on bilateral technical and commercial conditions."Access to the three nets will be operational, nuanced and profitable."Such representations are prohibited;"You can land without the operator's cooperation."It's forbidden.——The proxy model is essentially dependent on the operator ' s account number, line and interface.
Joint operating model: self-construction of schools, PPpoE dialling and trade-offs for joint operations
According to the NatShell School WIFI fee-based operating solution, there are three main models for running the campus network. The school self-built model: basic network building and wiring of POPE plus AP or POL+AP by schools or third parties; students are provided with Internet accounts and fees through NATSHEL_AUTH_BILLING system, which allows them to complete certification using Portal, 802.1X, PPPoE, IPOE etc. The integration package is not possible, except that the campus network provides only WiFi services and is independent of the student cell number. PPOE dialling model: basic school construction network, operator-provided broad home account numbers, campus network billing system tied to operator's account numbers, and school provider provides students with online accounts (cell phone) through a fee system. The advantage of this model is that schools can introduce multiple operators, with school wireless and mobile packages tied to the campus, students can choose their own operator, open up and reap better earnings; the school internal network remains independent. Joint operating models: based on PPoE dialling, schools work in depth with operators, one school number can bind multiple operators, students have full autonomy and operate in cooperation according to agreed patterns of differentiation. The three models are not absolute, but schools need to be selected in the context of their own investment capacity, network development, operational management capacity and cooperative intentions with operators. For schools that have already built a campus network and want to operate at a fee as quickly as possible, the model for self-build is fast-tracked; and for those that wish to lower construction inputs and upgrade web services with operator resources, the PPOE proxy or joint operating model is more appropriate.
Operator secondary certification scene: synergy between the certification system and operator AAA
In large user networks such as schools, parks, etc., users have built their own NATSHEL_AUTH_BILLING systems, which usually require matching and secondary certification when operators access business. The second certification is the first certification (identity) by a user through the campus network certification system, the Internet traffic into the operator’s network, the operator has been certified or validated for another validation or recognition (account authentication, AAAA recognition), and two certifications are used to coordinate the completion of user access and billing. Under the dial-up model, the first certification is done by the campus network certification system (Portal account code), and the second certification is completed by operator Bras/AAA (PPPOE dial-up) before both are properly connected to the Internet. In the secondary certification setting, the interface between the campus network certification system and the operator AAA needs to be clear: the correspondence of the account number system (the first map of the campus network account with the operator account), the bridging of the authentication process (first campus network certification or first operator certification), attribution of billing data (how long-term traffic is shared and how the clearing calibre is determined), and an anomaly mechanism (how users may alert and return to the site network for local access if the operator ' s side dialling fails). Based on information on the theme of the AAA upgrade to RadiusProxy, which involves a connection between the operator AAA/BOSS, separate checks are required for interfaces, account systems, strategic succession and different links should be evaluated separately. The link validation cannot be extrapolated to all chains. The interface between the certification system and the operator network is a process that requires confirmation by both technical teams, and schools should have access windows in place when planning, with clear details of interfaces, fields, privileges, etc.
The campus network certification system is linked to the operator PPpoE, which is an important technology model for the operation of the campus network at a fee."Campus network certification plus operator dialling"The local distribution model requires a combination of building inputs, operating capabilities and cooperative intent with operators. Specific dial-up docking programmes require confirmation of interfaces and connectivity conditions on a home-to-house basis with operators and cannot be divorced from direct commitments under the field conditions.