Alvarion BreezeMax BTS - Service provisioning?
Hi, Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services. Essentially it appears straight forward the manual provides the following info: 1 Verify that the necessary Service Profiles are available in the database of the relevant Base Station(s). 2 The Users List of the server must include the default User Name and Password of the NPU (both are KeepAliveUserNameAndPassword). 3 The format of the each Service in the ID Filter in the RADIUS Authentication server(s) is n:v:h:a:c; The ID Filter may include up to 5 Services, separated by “;”: s1;s2;... �n = Service Profile Name � v=<VLAN List>. v=<> is an empty VLAN list. � h=ON or OFF, indicating the configured Hybrid VLAN Mode. � a=<OFF or ON, VLAN ID>, indicating the configured Access VLAN Mode, and the Access VLAN ID for Access VLAN ON. � c=ON/OFF, indicating the configured VLAN Classification Mode. The first 2 are straight forward and as things stand the CPE user get authenticated by the Radius server however defining the service whatever I do cannot get it to work! The setup is just in a lab environment so the Radius server is just using the conf files no databases and in the very simple user file I have the following: username User-password == "password" Filter-id = "n=InternetAccess:v=<>:h=OFF:a=<OFF>:c=OFF;" The manual seems to point towards the filter-id but this does not work! I see in the reply-details log files that the filter-id is being sent however I then check on the Alvarion CPE and it doesn't have any Service configured. . . I have tried the alvarion-vsa-## and the the breezemax-attrb and these still make no difference! Has anyone got this working? The supposed Alvarion support is as widely reported non-existant - the two contacts I have are both on leave! Cheers in Advance Steve
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible". Ivan Kalik Kalik Informatika ISP
Unfortunately not possible - I am doing this on behalf of a customer who has already had the network installed (albeit poorly) and I am trying to give them some control over it. I have quick discovered that Alvarion on somewhat how is best to put it . . unique . . in there Radius approach! There support & documentation is absolutely non existant, they very much strike me as a box shifting company - just get it out and once it's in forget the customer. So I guess no one has this in and working then?!!? :( On Wed, 08 Jul 2009 15:45:05 +0700, Ivan Kalik <tnt@kalik.net> wrote:
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Remove the trailing semicolon. The documentation isn't very clear on that point, but the semicolon is only needed as a separator if you are supplying multiple services to the BTS. It should not be included as the trailing character. The debug output for this was... unhelpful in earlier versions. Not sure if they've improved it any. (Note, the listed service is for Eth CS on a non 16e BTS correct?) If you need clarification on the ramifications of the different service options let me know. Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Steve Evans Sent: Wednesday, July 08, 2009 4:00 AM To: tnt@kalik.net; FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Unfortunately not possible - I am doing this on behalf of a customer who has already had the network installed (albeit poorly) and I am trying to give them some control over it.
I have quick discovered that Alvarion on somewhat how is best to put it . . unique . . in there Radius approach!
There support & documentation is absolutely non existant, they very much strike me as a box shifting company - just get it out and once it's in forget the customer.
So I guess no one has this in and working then?!!? :(
On Wed, 08 Jul 2009 15:45:05 +0700, Ivan Kalik <tnt@kalik.net> wrote:
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks Ben, Can you just clarify that it is the service is defined using the Filter-ID attrib? Yes the service is for Eth CS although I think it's 16e capable - but due to a complete lack of response from Alvarion I do not exactly know! On that note I am also trying to find out the RADIUS Attribs for the IPCS mode - of which there is absolutely no details of in the Alvarion manuals! Cheers Steve On Thu, 09 Jul 2009 09:05:30 +0700, Ben Wiechman <wiechman.lists@gmail.com> wrote:
Remove the trailing semicolon.
The documentation isn't very clear on that point, but the semicolon is only needed as a separator if you are supplying multiple services to the BTS. It should not be included as the trailing character.
The debug output for this was... unhelpful in earlier versions. Not sure if they've improved it any.
(Note, the listed service is for Eth CS on a non 16e BTS correct?)
If you need clarification on the ramifications of the different service options let me know.
Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Steve Evans Sent: Wednesday, July 08, 2009 4:00 AM To: tnt@kalik.net; FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Unfortunately not possible - I am doing this on behalf of a customer who has already had the network installed (albeit poorly) and I am trying to give them some control over it.
I have quick discovered that Alvarion on somewhat how is best to put it . . unique . . in there Radius approach!
There support & documentation is absolutely non existant, they very much strike me as a box shifting company - just get it out and once it's in forget the customer.
So I guess no one has this in and working then?!!? :(
On Wed, 08 Jul 2009 15:45:05 +0700, Ivan Kalik <tnt@kalik.net> wrote:
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes, it is the Filter-Id attribute. Sample reply: rad_recv: Access-Accept packet from host x.x.x.x:1812, id=23, length=79 Filter-Id = "n=BE_Bus_1024Kbps:v=<>:h=OFF:a=<ON,120>:c=OFF" Session-Timeout = 65535 Termination-Action = RADIUS-Request Although for greater security we should have hybrid mode enabled. If you're working with someone using 2.5GHz it should be. I don't believe there is a migration path for 3650 at this point. IP CS is a bit different and may require additional changes to SU config. Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Steve Evans Sent: Wednesday, July 08, 2009 9:32 PM To: FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Thanks Ben, Can you just clarify that it is the service is defined using the Filter-ID attrib?
Yes the service is for Eth CS although I think it's 16e capable - but due to a complete lack of response from Alvarion I do not exactly know!
On that note I am also trying to find out the RADIUS Attribs for the IPCS mode - of which there is absolutely no details of in the Alvarion manuals!
Cheers
Steve
On Thu, 09 Jul 2009 09:05:30 +0700, Ben Wiechman <wiechman.lists@gmail.com> wrote:
Remove the trailing semicolon.
The documentation isn't very clear on that point, but the semicolon is only needed as a separator if you are supplying multiple services to the BTS. It should not be included as the trailing character.
The debug output for this was... unhelpful in earlier versions. Not sure if they've improved it any.
(Note, the listed service is for Eth CS on a non 16e BTS correct?)
If you need clarification on the ramifications of the different service options let me know.
Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Steve Evans Sent: Wednesday, July 08, 2009 4:00 AM To: tnt@kalik.net; FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Unfortunately not possible - I am doing this on behalf of a customer who has already had the network installed (albeit poorly) and I am trying to give them some control over it.
I have quick discovered that Alvarion on somewhat how is best to put it . . unique . . in there Radius approach!
There support & documentation is absolutely non existant, they very much strike me as a box shifting company - just get it out and once it's in forget the customer.
So I guess no one has this in and working then?!!? :(
On Wed, 08 Jul 2009 15:45:05 +0700, Ivan Kalik <tnt@kalik.net> wrote:
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Ben, Right then now I'm getting somewhere! That does indeed work and what's more annoying is I tried removing the semi colon yesterday - however what I failed to notice was in my service profile string the c: for VLAN classification for some reason I had entered a capital C - d'oh!!! I only notice as I was about to type out the exact string saying it wasn't working!!!! However I now have the CPE for some reason recieving VLAN 4095 - opposed to it's real VLAN - I've seen this before when using Service Profiles configured on the BTS and if I remember rightly rebooting the CPE with the shadow code then back to default fixes it! Anyway cheers for the tip - I'd spent to long staring at the same string to notice the capital! But if you could let know on the IPCS details it'd be appreciated. Cheers Steve On Thu, 09 Jul 2009 09:05:30 +0700, Ben Wiechman <wiechman.lists@gmail.com> wrote:
Remove the trailing semicolon.
The documentation isn't very clear on that point, but the semicolon is only needed as a separator if you are supplying multiple services to the BTS. It should not be included as the trailing character.
The debug output for this was... unhelpful in earlier versions. Not sure if they've improved it any.
(Note, the listed service is for Eth CS on a non 16e BTS correct?)
If you need clarification on the ramifications of the different service options let me know.
Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Steve Evans Sent: Wednesday, July 08, 2009 4:00 AM To: tnt@kalik.net; FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Unfortunately not possible - I am doing this on behalf of a customer who has already had the network installed (albeit poorly) and I am trying to give them some control over it.
I have quick discovered that Alvarion on somewhat how is best to put it . . unique . . in there Radius approach!
There support & documentation is absolutely non existant, they very much strike me as a box shifting company - just get it out and once it's in forget the customer.
So I guess no one has this in and working then?!!? :(
On Wed, 08 Jul 2009 15:45:05 +0700, Ivan Kalik <tnt@kalik.net> wrote:
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Actually authorization in their hybrid 16d system that Steve is using is very seamless. We've looked at many solutions and in most configuration/service assignment revolves around some kind of custom NMS that is a complete kludge or require service levels to be configured in each MS individually. Supplying the services via RADIUS is a decent semi-standardized approach that helps with centralization. I think they could stand to improve the attribute structure a bit as the long string is a fun regular expression exercise when you work for standardization. Then again, you should see the DHCP option string that is used to configure their ATA adapters... heh It's really their ASN-GW that deviates... a bit... from the standard. And the fact that they have a strange attitude toward IOT. We asked and were essentially told that the FR team would have to come crawling to Tel Aviv on their bellies and beg for the chance to be forced to pay for IOT testing. Helpfully pointing out that IOT testing would be a non-issue if the established standard was followed wasn't met with much of a response. Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Wednesday, July 08, 2009 3:45 AM To: FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Well that is the Authenticating, Authorising done and the Service provisioning sorted. Now it's time to see if I can get anything useful out of the BTS for Account purposes. Any pointer Ben? Ideally the customer would like to see session bandwidth usage and all those normal kind of stats - will the BTS provide anything remotely resembling this look at that Acct log files on the FreeRadius the only information seems to be login info (but at least the MAC is provided in the Calling-Station-id!) ? :-/ Thanks in advance Steve On Thu, 09 Jul 2009 09:17:32 +0700, Ben Wiechman <wiechman.lists@gmail.com> wrote:
Actually authorization in their hybrid 16d system that Steve is using is very seamless. We've looked at many solutions and in most configuration/service assignment revolves around some kind of custom NMS that is a complete kludge or require service levels to be configured in each MS individually. Supplying the services via RADIUS is a decent semi-standardized approach that helps with centralization.
I think they could stand to improve the attribute structure a bit as the long string is a fun regular expression exercise when you work for standardization. Then again, you should see the DHCP option string that is used to configure their ATA adapters... heh
It's really their ASN-GW that deviates... a bit... from the standard. And the fact that they have a strange attitude toward IOT. We asked and were essentially told that the FR team would have to come crawling to Tel Aviv on their bellies and beg for the chance to be forced to pay for IOT testing. Helpfully pointing out that IOT testing would be a non-issue if the established standard was followed wasn't met with much of a response.
Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Wednesday, July 08, 2009 3:45 AM To: FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Not that I am aware of. All we've been getting out of the BTS is start and end time. There may be a way to enable additional support. No interim updates either, and I don't believe that is supported in the current version of the 16e firmware either. All you really get out of the accounting is registered BTS, sector, start and end times. Sector information can be deducted based on port ID - each step of 2^16 appears to correspond to a particular AU card slot. AU slot 1 appears to use ports starting around 200 (haven't dug through to determine the actual start point), AU slot 2 around 65700, etc.
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Steve Evans Sent: Thursday, July 09, 2009 1:12 AM To: FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Well that is the Authenticating, Authorising done and the Service provisioning sorted. Now it's time to see if I can get anything useful out of the BTS for Account purposes.
Any pointer Ben? Ideally the customer would like to see session bandwidth usage and all those normal kind of stats - will the BTS provide anything remotely resembling this look at that Acct log files on the FreeRadius the only information seems to be login info (but at least the MAC is provided in the Calling-Station-id!) ? :-/
Thanks in advance Steve
On Thu, 09 Jul 2009 09:17:32 +0700, Ben Wiechman <wiechman.lists@gmail.com> wrote:
Actually authorization in their hybrid 16d system that Steve is using is very seamless. We've looked at many solutions and in most configuration/service assignment revolves around some kind of custom NMS that is a complete kludge or require service levels to be configured in each MS individually. Supplying the services via RADIUS is a decent semi-standardized approach that helps with centralization.
I think they could stand to improve the attribute structure a bit as the long string is a fun regular expression exercise when you work for standardization. Then again, you should see the DHCP option string that is used to configure their ATA adapters... heh
It's really their ASN-GW that deviates... a bit... from the standard. And the fact that they have a strange attitude toward IOT. We asked and were essentially told that the FR team would have to come crawling to Tel Aviv on their bellies and beg for the chance to be forced to pay for IOT testing. Helpfully pointing out that IOT testing would be a non-issue if the established standard was followed wasn't met with much of a response.
Ben
-----Original Message----- From: freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail.com@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Wednesday, July 08, 2009 3:45 AM To: FreeRadius users mailing list Subject: Re: Alvarion BreezeMax BTS - Service provisioning?
Hopefully someone has come across this before and can easily answer the question I am attempting to get an Alvarion Breezemax basestation working with FreeRadius for provisioning of services.
Best advice you are going to get here is: "avoid Alvarion if possible".
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ben Wiechman wrote:
It's really their ASN-GW that deviates... a bit... from the standard. And the fact that they have a strange attitude toward IOT. We asked and were essentially told that the FR team would have to come crawling to Tel Aviv on their bellies and beg for the chance to be forced to pay for IOT testing.
Strange. The other ASN-GW manufacturers were quite happy to talk to us about interoperability testing. I think it's the difference between mindset and reality. The other vendors want sales, and make sure that their equipment works with every AAA server. They don't care that the market-leading AAA server is GPL'd, so long as they can sell their commercial gateways. Alvarion seems to believe that a GPL'd AAA server isn't relevant, even when it has the largest market share. They don't care about people publicly discussing how bad their support is, or how their equipment is broken, and doesn't follow the WiMAX specs.
Helpfully pointing out that IOT testing would be a non-issue if the established standard was followed wasn't met with much of a response.
Yup. At this point, it's difficult to recommend Alvarion for anything. Even ignoring the interop issues, they've made it clear that they're not interested in supporting the customers who purchased their equipment. Alan DeKok.
At this point, it's difficult to recommend Alvarion for anything. Even ignoring the interop issues, they've made it clear that they're not interested in supporting the customers who purchased their equipment.
Oh they'll support it... it's called turn-key professional services. :) Ben
Ben Wiechman wrote:
At this point, it's difficult to recommend Alvarion for anything. Even ignoring the interop issues, they've made it clear that they're not interested in supporting the customers who purchased their equipment.
Oh they'll support it... it's called turn-key professional services. :)
$ for purchasing the product $$ for support $$$ for making it work Hm... why didn't I think of that? Alan DeKok.
participants (4)
-
Alan DeKok -
Ben Wiechman -
Ivan Kalik -
Steve Evans