The BNG/BRAS (Broadband Network Gateway or Broadband Remote Access Server) is a function of the Stingray platform for authorizing and terminating subscribers. This solution allows the ISP to control the subscriber access to the Internet and apply tariff plans and additional options.

The main object of BNG is to authorize users and apply tariff plans to them. BNG generates a request to billing system via Radius protocol depending on the first package from the subscriber and receives a set of services enabled for the user. This functionality is implemented for L3 (IPoE) and L2 (DHCP, PPPoE, ARP) modes.

BNG as a Stingray Service Gateway function gives an opportunity to improve Quality of Service and the way the user perceives it (QoS and QoE). Stingray analyzes traffic at levels 2-7 of the OSI model and handles the protocol data units according to rules applied to them. This allows the broadband operator to use traffic balancing within each uplink, each subscriber and for all traffic within the device. Traffic can be marked by the Stingray SG and further passed on for prioritization on the router. The platform itself can control the bandwidth according to the algorithms (HTB, TBF) for each of the 8 traffic classes, which are determined on the basis of signatures (instant messengers, streaming video, social networks, torrent, etc).


PCRF is responsible for interaction with Stingray platform and Radius server within the network scheme. This feature allows the integration with any billing system.


  • Proxying requests between BNG and Radius server
  • Dynamic management of policies and services of subscribers by Radius (CoA)
  • Synchronize multiple BNG operations and provide redundancy
  • Using separate accounting for AS or protocols.

Features of BNG based on VAS Experts solution

  • Providing QoS according to the given tariff plan
  • Internet access control for subscribers
  • Applying the tariff plans policy
  • Interaction with Radius server
  • IPoE, PPPoE authorization
  • Applying additional tariff options
  • Redirecting of users to Captive Portal (blocking)
  • Implementation for L2 и L3 levels
  • IPv4/IPv6 Dual Stack and Radius CoA support
  • Multi-users support, i.e. when one login is associated with multiple IPs
  • Support of domains whitelisting that is independent of IP changing
  • Marketing features (collecting and processing Quality of Experience data, clickstream)
  • Increasing speed for local resources and peer-to-peer networks.

Case studies


Software BNG has several advantages over hardware solutions

The software is installed on any server equipment that the operator has. Also, a hardware-software platform can be purchased from partners of the company.

The Bypass function: Stingray Service Gateway works both with the built-in bypass Silicom cards and with the external bypass of any manufacturer.

The Stingray platform with the BNG feature is able to authorize static IP-addresses using ARP request; send VLAN/Q-in-Q tag within the Radius request; bind the IP address to access switch port; terminate traffic only for specified AS; check that VLAN tag matches the subscriber IP addresses; local traffic interconnection, etc.

Performance of the Stingray Service Gateway is up to 100 Gbit/s on a server, whereas using 2 or 4 CPU sockets can result in very high speed traffic processing up to 400 Gbit/s.


L3 BNG mode

Packets with already assigned IP address reach the Stingray platform, DHCP configuration can be assigned in the following ways: by an external DHCP server, by the Stingray DHCP Relay or by the Stingray Radius Proxy.

BNG L3 IPoE management by SSH

Preloading of the IP-tariff_plan map using PUSH method; if the dynamic IP assignment is used, the Radius monitor installation or final migration to the Radius is needed.

BNG L3 IPoE management by Radius

Subscriber authorization by means of Radius for each unique IP address or login.

L2 BNG mode

In the L2 BNG mode, subscriber traffic reaches the Stingray platform in a unique VLAN /Q-in-Q /PPPoE tunnel. To authorize a subscriber and to assign him an IP address, the MAC/VLAN/Q-in-Q /login PPPoE /option 82 is used. Stingray operates as a virtual gateway for the subscriber and responds to its ARP requests.

Advantages of the L2 BNG mode: Full-Proxy-ARP, subscriber-to-subscriber connections management, the ability to access to network services in the kernel (dns/www/billing/tv/etc).

BNG L2 DHCP relay agent

Subscriber authorization is performed by the Radius server based on the MAC address; DHCP server is used to assign IP addresses.

BNG L2 DHCP Radius proxy

Subscriber authorization is performed by the Radius server based on the MAC address; Radius server is used instead of DHCP servers and the fast-DPI in combination with the fastPCRF operate as a DHCP server.


PPPoE subscribers authorization using the PAP, CHAP or MS-CHAPv2 protocols or by MAC address.

Where to begin?

Send a request
We contact you, specify the task, provide access to the documentation and answer your questions.
Choose the solution
We discuss the current situation: traffic volume, available equipment, the functionality you need.
Free trial
Our engeniers install the selected software and adapt it to your specific tasks. Сontract — only after the test is successful.
We use cookies to optimize site functionality and give you the best possible experience. To learn more about the cookies we use, please visit our Cookies Policy. By clicking ‘Okay’, you agree to our use of cookies. Learn more.