L2TP termination support
L2TP termination is a feature that allows Stingray SG to act as an L2TP server, accepting and terminating tunnels from clients (LAC). The main task is to centralize and simplify the management of remote user access: instead of tunnels passing through the entire network to specialized servers, they terminate directly at the gateway.
Using L2TP reduces the load on the internal network, increases security, and allows a single policy to be applied to the traffic of all remote users directly at the network border. In addition, this innovation provides scalability, as it allows Stingray to simultaneously serve a large number of L2TP tunnels and sessions within them, ensuring the operation of large provider or corporate networks.
👉 See the documentation for more details.
New mode for BNG/BRAS – DHCP Dual Proxy
Dual DHCP is a new BNG mode in Stingray 14.0 designed to simplify subscriber authorization and session management. Its main benefit is that for dual-stack subscribers (using IPv4 and IPv6 simultaneously), a single shared session is created, for which only one authorization request is sent to the RADIUS server and a single accounting is maintained. This increases efficiency and reduces load compared to the previous mode, where a separate request was required for each protocol.
Key features:
- Although the name “dual DHCP” may give the impression that this mode is only intended for dual stack subscribers, this is not the case. This mode can also be used for regular subscribers – IPv4 only or IPv6 only.
- The mode clearly distinguishes between the subscriber’s session lifetime (session timeout, usually 1 day) and the IP address lease time (lease time, usually 5 minutes). This allows for more flexible management of reauthorization via CoA Disconnect.
- The mode supports various methods of issuing IPv6 addresses (a single address or an entire prefix) and working with address pools (Framed-Pool).
👉 See the documentation for more details.
Command line for managing Stingray modules
Stingray product users now have access to VASE-CLI, a universal command shell for managing VAS Experts products and related third-party products. Features include:
- viewing configuration and log files, shell version
- configuring fastDPI and fastPCRF components, managing subscribers and BNG policies
- configuring and requesting actions in bird and bird netns
- configuring and requesting actions in kea, managing DHCP leases for IPv4 and IPv6
- managing Radius proxy based on freeRadius.
👉 See the documentation for more details.
The update also includes an expanded list of supported signatures and network cards, automatic separation of UDR/SDR databases, and many other improvements to BNG and DPI products.
