Scaling and Wholesale Computer Networks 2007 Week 7 Lecture 1 by Donald Neal

The Players Telekordstra – A telco. See also Carrier, Incumbent. Goblinet – An ISP. See also Challenger. PFY Communications – Another ISP. PFY

Week 7 Lecture 1 Access Network Structure Scaling RADIUS using Proxies Scaling BRAS's with Logical Routers Access Network Wholesaling L2TP in a Wholesale Environment

Access Networks Aggregation Transport To provide multiple virtual IP networks, runs at layer 2. e.g. ATM, ethernet. (Contrast “Layer 2 VPN's”) Some AAA components, but data and decision making located elsewhere

Access – DSL / ATM Mode m ADSL Layer 2, say ATM DSLAM ATM Mode m It's The ATM Cloud! PPP IP RADIUS BRAS

On a BRAS Using ATM Physical Interfaces attached to ATM switch(es) Virtual Path carried by ATM switches to DSLAM VPI/VCI identify Virtual Circuit (PVC) to customer So one ATM subinterface per customer ATM device. BRAS terminates all those ATM PVC's. Aggregation is the name of the game. May allocate addresses from local pools (or by DHCP or RADIUS). Routes packets, including advertising routes for local pools. Applies QoS policies to subinterfaces.

From Here, Not About DSL From this point, DSL for example only. Scaling and wholesale considerations also apply to dial and wireless. Not about ATM, either.

PPP – RADIUS AUTH. Mode m DSLAM Mode m RADIUS Access-Request (User-Name, CHAP-Password) Secur3 Access-Accept (Framed-IP-Address, VSA's) , AverageService BRAS

PPP – RADIUS RADIUS PROXY RADIUS Can proxy for both authentication and accounting. BRAS

Logical Routers aka Virtual Routers Some shared configuration Each logical router has its own peers and its own routing/forwarding table (DHCP configuration, DNS, RADIUS accounting...) Complex vs. MPLS

Which Logical Router? All incoming PPP requests come to one logical router. Could just statically configure it. telek.co.nz -> telekordstra goblin.net.nz -> goblinet pfy.net.nz -> pfy

PPP – RADIUS BRAS RADIUS PROXY Telekordstra RADIUS Goblinet RADIUS Access-Request (User-Name, CHAP-Password) Secur3 Access-Accept (Framed-IP-Address) Access-Accept (Framed-IP-Address, VSA's) , AverageService, telekordstra

PPP – RADIUS BRAS RADIUS PROXY Telekordstra RADIUS Goblinet RADIUS Access-Request (User-Name, CHAP-Password) S3cure Access-Accept (Framed-IP-Address) Access-Accept (Framed-IP-Address, VSA's) , AverageService, goblinet

But Then... BRAS RADIUS PROXY Telekordstra RADIUS Goblinet RADIUS Access-Request (User-Name, CHAP-Password) S3cure Access-Accept (Framed-IP-Address) Access-Accept (Framed-IP-Address, VSA's) , AverageService, goblinet

Layer 2 Service With The Same Network BRA S Part 1 BRA S Part 2 ISPCarrie r Aggregatio n Authentication, Accounting, IP and above ISP RADIUS

Layer 2 Service With The Same Network LA C LN S ISPCarrie r ISP RADIUS “L2TP extends the PPP model by allowing the L2 and PPP endpoints to reside on different devices interconnected by a packet-switched network.... instead of requiring the L2 connection terminate at the NAS (which may require long-distance toll charge), the connection may terminate at a local circuit concentrator, which then extends the logical PPP session over a shared infrastructure” - RFC2661

Layer 2 Service With The Same Network LA C LN S ISPCarrie r ISP RADIUS PPP IP UDP

Layer 2 Service With The Same Network Mode m ADSL Layer 2 DSLAM ATM Mode m PPP IP RADIUS LAC LNS L2TP Tunnel Access SeekerCarrie r

Layer 2 Service With The Same Network Mode m DSLAM Mode m RADIUS LAC LNS RADIUS Access-Request (User-Name, CHAP-Password – not used) S3cure Access-Accept (attributes including Tunnel Destination and probably QoS) , BitstreamService

L2TP Aggregation LAC LNS LAC NAS

Further Reading Broadband Network Architectures pp