Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 

Release Highlights

Highlights include the following product enhancements:

Support for Realm-Based Selection of Server Certificates

SBR Carrier 8.4.0 enables you to add multiple server certificates to the SBR Carrier server by using the Web GUI. SBR Carrier also provides the support to map a server certificate with a directed realm. To support this functionality, the ServerCertificate parameter has been newly added in the [Auth] section of the *.dir file. The ServerCertificate parameter specifies the name of the server certificate that must be used for EAP requests received from the directed realm. A server certificate can be mapped to one or more directed realms.

Web GUI has been enhanced to configure the default server certificate by using the newly added Default Certificate drop-down list in the Certificates page. The default certificate will be used as the server certificate for non-realm EAP requests.

For more information about the ServerCertificate parameter, see the SBR Carrier Reference Guide. For more information about how to add a server certificate using the Web GUI, see the SBR Carrier Administration and Configuration Guide.

STa Reference Point Support

SBR Carrier 8.4.0 supports the STa reference point, which is used to connect the trusted non-3GPP access network with the SBR Carrier server or proxy server (that is, 3GPP AAA server or proxy server) and transport access authentication, authorization, mobility parameters, and charging-related information in a secure manner. The SWa or STa reference point determines whether the non-3GPP access network is trusted or not during the authentication and authorization procedures executed between the non-3GPP access network and the 3GPP AAA server.

The STa and SWa reference points use the same Diameter application and partly share the same authentication and authorization procedure. The other procedures are specific to the STa and SWa reference points.

Note: You can configure settings for the STa reference point only through the GUI.

For more information about the STa reference point, see the SBR Carrier Administration and Configuration Guide.

Support for RADIUS IPv6 Attributes Defined in RFC 6911

SBR Carrier 8.4.0 supports all RADIUS IPv6 attributes defined in RFC 6911, RADIUS Attributes for IPv6 Access Networks, in addition to the IPv6 attributes in RFC 3162, RADIUS and IPv6. The Web GUI is enhanced to support adding the RFC 6911 attributes to the check list or return list. In the [Configuration] section of radius.ini file, FramedIPv6AddressHint, DnsServerIPv6AddressHint, RouteIPv6InfoHint, DelegatedIPv6PrefixPoolHint, and StatefulIPv6AddressPoolHint parameters are newly added to treat the RFC 6911 attributes as hints.

The radiusstatus=sessions_by_ipv6address element is added to the LDAP virtual schema to support querying sessions by Framed-IPv6-Address. The output of ShowSessions.sh script is also enhanced to display the Framed-IPv6-Address attribute value.

Note: You cannot define multiple instances of Framed-IPv6-Address attributes in a return list or check list. The Framed-IPv6-Address attribute can appear only once in a return list. Other attributes can be configured as multiple instances.

For more information about the RADIUS IPv6 attributes support, see the SBR Carrier Administration and Configuration Guide, SBR Carrier Reference Guide, and SBR Carrier Installation Guide.

authGateway Configuration Enhancements

SBR Carrier 8.4.0 enables you to configure multiple authGateway instances much easier. Most of the command line options from MML files are moved to the newly added [Routing-Configuration], [Supported-MAP-Messages], [Common-AGW-Configurations], and [Process<name>] sections of authGateway.conf file to avoid using the clean or realclean operation every time there is an update in the configuration. The MML command line options are still supported in this release for backward compatibility. However, the authGateway.conf file configuration takes precedence over any existing MML options.

The ./sbrd hup authGateway [<process-name>] command is newly introduced to issue the SIGHUP (1) signal to the authGateway processes running on SBR Carrier. The ./sbrd status -v command is also enhanced to display status information about all the active authGateway processes.

Note: The debug, trace, and tracefile parameters in the [Process<name>] section are reloaded whenever SBR Carrier receives a SIGHUP (1) signal.

For more information about the authGateway.conf file and the sbrd script, see the SBR Carrier Reference Guide and SBR Carrier Installation Guide.

EAP-AKA’ Support for Diameter

SBR Carrier 8.4.0 supports the EAP-AKA’ protocol defined by RFC 5448, in addition to the EAP-AKA protocol for Diameter authentication. The EAP-AKA’ protocol is a revision of EAP-AKA protocol and includes a new key derivation function, use of the SHA-256 hash function, and other security enhancements.

For more information about Diameter authentication using the EAP-AKA’ protocol, see the SBR Carrier Administration and Configuration Guide.

Support for Solaris 11.3

SBR Carrier has been qualified to support Oracle Solaris 10, 11.0, 11.1, and 11.3 (SPARC) versions. SBR Carrier 8.4.0 requires Solaris operating system with kernel patch version 147147-26 or later. You can use the uname –a command to check the kernel patch version associated with Solaris.

MySQL and NDB Version Upgrade

For Linux, the MySQL version is upgraded from 5.6.29 to 5.7.18, and the NDB version is upgraded from 7.4.11 to 7.5.6. For Solaris, the MySQL version is upgraded from 5.6.29 to 5.6.36, and the NDB version is upgraded from 7.4.11 to 7.4.15.

KVM Support for Standalone SBR Carrier

The standalone SBR Carrier server has been qualified to support Kernel-based Virtual Machine (KVM) hypervisor on a Red Hat Enterprise Linux 7.3 machine.

Signalware Package Upgrade

SBR Carrier 8.4.0 supports the “Signalware 9 SP6.3” upgrade on both Solaris and Linux platforms. For more information about the installation procedure, see the Steel-Belted Radius Carrier Installation Guide.

Persistence Store Performance Improvements for Accounting

Performance improvements have been made to the persistence store for accounting on the standalone version of SBR Carrier on both the Linux and Solaris platforms.

Modified: 2017-09-27