For complete details about the hardware and software requirements for running a standalone Steel-Belted Radius Carrier server or the optional SBR Carrier Session State Register (SSR), see “Meeting System Requirements” in the Steel-Belted Radius Carrier Installation Guide.
SBR Carrier has been qualified and is supported on Oracle Solaris 188.8.131.52, 184.108.40.206 (SPARC), and 220.127.116.11.1.75.3; and Red Hat Enterprise Linux 7.3, 7.4, 7.5, 7.6, 7.7, 8.1 on Intel (Xeon) platforms.
SBR Carrier does not support RHEL 6.x, 7.0, 7.1, and 7.2.
You cannot run multiple instances of SBR Carrier on Solaris and Linux platforms.
Make sure that nss-util, nss, nspr, gcc, openldap, Kerberos, cyrus-sasl, and zlib libraries are installed on your system before installing the SBR Carrier software. The libraries are normally available and installed with the OS base bundle. SBR Carrier supports the package versions of preceding libraries that are provided with Solaris 18.104.22.168.0 or later and RHEL 7.3 or later.
We recommend you to update the OS regularly for security reasons. Any questions concerning vulnerabilities of libraries that are not distributed by Juniper Networks should be addressed to the OS vendor (Red Hat or Oracle).
SBR Carrier supports virtualization on Linux, VMware hypervisor, Kernel-based Virtual Machine (KVM) hypervisor, and logical domains on Solaris. SBR Carrier has been tested with VMware ESXi 5.1, 5.5, 6.0, and 6.5 versions and KVM hypervisor on RHEL 7.3. For more information on planning and tuning the performance of SBR Carrier running on the Linux and Solaris operating systems, see the Performance, Planning, and Tuning Guide.
SSR cluster in virtualized environments is not officially supported. Juniper Networks may still provide support for known issues and for those where you can demonstrate the issue exists on the native OS.
SeeResolved Issues, Features, and Limitations (Patch-Wise) section for RHEL 8.1 and Solaris 11.4 related installation and prerequisite details.
Steel-Belted Radius Carrier has been tested with Perl 5.8.4 and 5.8.8. Multiple Perl installations in discrete directories are supported, but attempting to use other versions of Perl with SBR Carrier may cause problems.
The LDAP plug-in requires SASL, which is not included with the SBR Carrier package. You must ensure that you have the SASL package installed before starting SBR Carrier.
SBR Carrier does not support the Signalware communication stack on RHEL 8.1. So, the SIM authentication module cannot use the SIGTRAN protocol to communicate with an HLR to process RADIUS requests. However, the SIM authentication module can convert RADIUS requests to Diameter requests to communicate with an HSS.
SS7 cards are no longer supported.
The OpenLDAP-2.4.46-15 is NOT supported on RHEL 8.1 due to bug “case ID: 02838485“ in RHEL 8.1. Ensure that only OpenLDAP-2.4.46-11 is present on the RHEL 8.1 machine, where SBR8.60R14 installation is planned.
In case if the legacy cipher suite is required as mentioned in the section “Starting from SBR 8.6.0R7 and 8.6.0R8 release, the following features are supported”, run the following command to set the RHEL 8.1 to use legacy cipher suites.
update-crypto-policies --set LEGACY
RHEL 8.1 by default does not support the legacy cipher. Refer the RHEL 8.1 documentation for more detailed information at https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/considerations_in_adopting_rhel_8/security_considerations-in-adopting-rhel-8 .
The Web GUI can be launched in different browsers across different platforms. Table 2 lists the tested browser versions and the operating systems.
Table 2: Web GUI—Tested Browsers
36 and later
9 and later
31 and later
23 and later
12 and later
Java 1.8.0 or a later version is required to be installed in the server to access the Web GUI.
When you upgrade from an earlier SBR Carrier version to the current version, clear your browser’s cache before launching the Web GUI.
External Database Requirements
Steel-Belted Radius Carrier supports:
Any external database with a compatible JDBC connector.
Oracle native client versions 11 and 12 to connect Oracle database versions 11 and 12 on Solaris.
Oracle native client versions 11 and 12 to connect Oracle database versions 11 and 12 on Linux.
For SBR Carrier to act as an Oracle native client, the Oracle 64-bit client must be set up before installing 64-bit version of SBR Carrier, because the Oracle server location is used during installation.
Oracle native client version 19C.
SBR Carrier has been tested with MySQL version 5.1.69, Oracle database versions 11.2.0 and 22.214.171.124 on Solaris, and Oracle database versions 11.2.0 and 12.2.0 on Linux.
Signalware and SIM Requirements
To support the optional SIM authentication module, Signalware 9 with Service Pack 6.5 must be installed before installing SBR Carrier.
Service Pack 6.5 must be installed; otherwise, Steel-Belted Radius Carrier cannot use the Signalware communications stack.
SBR Carrier Installation
- Before installing Signalware on RHEL 7.5, you must disable kernel address space layout randomization (KASLR), which is enabled by default on RHEL 7.5. Signalware is incompatible with KASLR and requires the kernel memory address space to be consistent.
To disable KASLR, do the following:
- Edit the GRUB_CMDLINE_LINUX key in the /etc/default/grub
file to add the new parameter nokaslr.GRUB_CMDLINE_LINUX="crashkernel=auto rd.lvm.lv=rhel_bng-lnx-perf6/root rd.lvm.lv=rhel_bng-lnx-perf6/swap rhgb quiet nokaslr"
- Run the command grub2-mkconfig -o /boot/grub2/grub.cfg.
- Reboot the server.
This disables the KASLR feature on Linux Kernel.
- Install Signalware.
- Start Signalware.
- Edit the GRUB_CMDLINE_LINUX key in the /etc/default/grub file to add the new parameter nokaslr.
- To find out more about KASLR, refer to the RHEL 7.5 kernel
If it not 7.5 then refer the Installation guide.
SBR Carrier does not support the Signalware communication stack on Solaris. So, the SIM authentication module cannot use the SIGTRAN protocol to communicate with an HLR to process RADIUS requests. However, the SIM authentication module can convert RADIUS requests to Diameter requests to communicate with an HSS.
SS7 cards are no longer supported.