The BNG/BRAS (Broadband Network Gateway or Broadband Remote Access Server) is a function of the Stingray SG platform for authorizing and terminating subscribers. This solution allows an ISP to control subscribers’ Internet access and to apply tariff plans and additional options.

Service Description

The main object of BNG is to authorize users and apply tariff plans to them. Initiated by the first package from the subscriber, BNG generates a request to the billing system via Radius protocol and receives a set of services enabled for the user. This functionality is implemented for L3 (IPoE) and L2 (DHCP, PPPoE, ARP) modes.

BNG as the Stingray Service Gateway function provides an opportunity to improve Quality of Service and the way the user perceives it (QoS and QoE). Stingray analyzes traffic at levels 2-7 of the OSI model and handles the protocol data units according to rules applied to them. This allows the broadband operator to use traffic balancing within each uplink, for each subscriber, and for all traffic within the device. Traffic can get a mark from Stingray SG and be passed further on for prioritization on the router. The platform itself can control the bandwidth according to the algorithms (HTB, TBF) for each of the 8 traffic classes, which are determined on the basis of signatures (instant messengers, streaming video, social networks, torrent, etc).

Features of the BNG solution

  • Providing QoS according to the given tariff plan
  • Internet access control for subscribers
  • Applying the tariff plans policy
  • Interaction with Radius server
  • IPoE, PPPoE authorization
  • Applying additional tariff options
  • Redirecting of users to Captive Portal (blocking)
  • Implementation for L2 и L3 levels
  • IPv4/IPv6 Dual Stack and Radius CoA support
  • Multi-users support, i.e. when one login is associated with multiple IPs
  • Support of domains whitelisting that is independent of IP changing
  • Marketing features (collecting and processing Quality of Experience data, clickstream)
  • Increasing speed for local resources and peer-to-peer networks
  • High speed and availability have a positive impact on customers’ Quality of Experience
  • The solution uses x86 platform advantages, maintaining flexible scalability and deployment for a provider. Thus services can be provided faster; the solution is equally efficient to use in any size networks. Maintenance expenses can also be lowered.


Precise comprehension of the network, its hardware and software states – which is critical for the network’s growth. So you can be certain that the network infrastructure stays unchanged – and maintain its actual state and security level. This allows specialists to react quickly to incidents and fix them. The outcome is clients’ growing overall satisfaction with the service.

The Stingray platform with the BNG feature is able to authorize static IP-addresses using ARP request; send VLAN/Q-in-Q tag within the Radius request; bind the IP address to access switch port; terminate traffic only for specified AS; check that VLAN tag matches the subscriber IP addresses; local traffic interconnection, etc.

The software is installed on any server equipment that the operator has. Also, a hardware-software platform can be purchased from partners of the company.

Performance of the Stingray Service Gateway is up to 100 Gbit/s on a server, whereas using 2 or 4 CPU sockets can result in very high speed traffic processing up to 400 Gbit/s.

The Bypass function: Stingray Service Gateway works both with the built-in bypass Silicom cards and with the external bypass of any manufacturer.

The network built on the platform will be ready for expansion and scalability. This can make planning of bandwidth enhancement due to clients’ demand simpler.


L3 BNG mode

Packets with already assigned IP addresses reach the Stingray platform, DHCP configuration can be assigned in the following ways: by an external DHCP server, by the Stingray DHCP Relay, or by the Stingray Radius Proxy.

BNG L3 IPoE management by SSH

Preloading of the IP-tariff_plan map using PUSH method; if the dynamic IP assignment is used, the Radius monitor installation or final migration to the Radius is needed.

BNG L3 IPoE management by Radius

Subscriber authorization by means of Radius for each unique IP address or login.

L2 BNG mode

In the L2 BNG mode, subscriber traffic reaches the Stingray platform in a unique VLAN /Q-in-Q /PPPoE tunnel. To authorize a subscriber and to assign him an IP address, the MAC/VLAN/Q-in-Q /login PPPoE /option 82 is used. Stingray operates as a virtual gateway for the subscriber and responds to its ARP requests.

Advantages of the L2 BNG mode: Full-Proxy-ARP, subscriber-to-subscriber connections management, the ability to access to network services in the kernel (dns/www/billing/tv/etc).

BNG L2 DHCP relay agent

Subscriber authorization is performed by the Radius server based on the MAC address; DHCP server is used to assign IP addresses.

BNG L2 DHCP Radius proxy

Subscriber authorization is performed by the Radius server based on the MAC address; Radius server is used instead of DHCP servers and the fast-DPI in combination with the fastPCRF operate as a DHCP server.


PPPoE subscribers authorization using the PAP, CHAP or MS-CHAPv2 protocols or by MAC address.

Request a Demo

Fill in the form
We will contact you, specify the task, provide access to the documentation and answer your questions.
Choose the solution
We discuss the current situation: traffic volume, available equipment, the functionality you need.
Free trial
Our engeniers install the selected software and adapt it to your specific tasks. Сontract — only after the test is successful.
We use cookies to optimize site functionality and give you the best possible experience. To learn more about the cookies we use, please visit our Cookies Policy. By clicking ‘Okay’, you agree to our use of cookies. Learn more.