Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

System Requirements

 

For complete details about the hardware and software requirements for running a standalone Steel-Belted Radius Carrier server or the optional SBR Carrier Session State Register (SSR), see “Meeting System Requirements” in the Steel-Belted Radius Carrier Installation Guide.

Software

SBR Carrier has been qualified and is supported on Oracle Solaris 11.3.36.10, 11.3.36.20 (SPARC), and 11.4.25.0.1.75.3; and Red Hat Enterprise Linux 7.3, 7.4, 7.5, 7.6, 7.7, 8.1 on Intel (Xeon) platforms.

Note

SBR Carrier does not support RHEL 6.x, 7.0, 7.1, and 7.2.

Note

You cannot run multiple instances of SBR Carrier on Solaris and Linux platforms.

Note

Make sure that nss-util, nss, nspr, gcc, openldap, Kerberos, cyrus-sasl, and zlib libraries are installed on your system before installing the SBR Carrier software. The libraries are normally available and installed with the OS base bundle. SBR Carrier supports the package versions of preceding libraries that are provided with Solaris 11.3.36.10.0 or later and RHEL 7.3 or later.

We recommend you to update the OS regularly for security reasons. Any questions concerning vulnerabilities of libraries that are not distributed by Juniper Networks should be addressed to the OS vendor (Red Hat or Oracle).

SBR Carrier supports virtualization on Linux, VMware hypervisor, Kernel-based Virtual Machine (KVM) hypervisor, and logical domains on Solaris. SBR Carrier has been tested with VMware ESXi 5.1, 5.5, 6.0, and 6.5 versions and KVM hypervisor on RHEL 7.3. For more information on planning and tuning the performance of SBR Carrier running on the Linux and Solaris operating systems, see the Performance, Planning, and Tuning Guide.

Note

SSR cluster in virtualized environments is not officially supported. Juniper Networks may still provide support for known issues and for those where you can demonstrate the issue exists on the native OS.

SeeResolved Issues, Features, and Limitations (Patch-Wise) section for RHEL 8.1 and Solaris 11.4 related installation and prerequisite details.

Perl

Steel-Belted Radius Carrier has been tested with Perl 5.8.4 and 5.8.8. Multiple Perl installations in discrete directories are supported, but attempting to use other versions of Perl with SBR Carrier may cause problems.

LDAP Plug-in

The LDAP plug-in requires SASL, which is not included with the SBR Carrier package. You must ensure that you have the SASL package installed before starting SBR Carrier.

Note
  • SBR Carrier does not support the Signalware communication stack on RHEL 8.1. So, the SIM authentication module cannot use the SIGTRAN protocol to communicate with an HLR to process RADIUS requests. However, the SIM authentication module can convert RADIUS requests to Diameter requests to communicate with an HSS.

    SS7 cards are no longer supported.

  • The OpenLDAP-2.4.46-15 is NOT supported on RHEL 8.1 due to bug “case ID: 02838485“ in RHEL 8.1. Ensure that only OpenLDAP-2.4.46-11 is present on the RHEL 8.1 machine, where SBR8.60R14 installation is planned.

  • In case if the legacy cipher suite is required as mentioned in the section “Starting from SBR 8.6.0R7 and 8.6.0R8 release, the following features are supported”, run the following command to set the RHEL 8.1 to use legacy cipher suites.

    update-crypto-policies --set LEGACY

  • RHEL 8.1 by default does not support the legacy cipher. Refer the RHEL 8.1 documentation for more detailed information at https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/considerations_in_adopting_rhel_8/security_considerations-in-adopting-rhel-8 .

Tested Browsers

The Web GUI can be launched in different browsers across different platforms. Table 2 lists the tested browser versions and the operating systems.

Table 2: Web GUI—Tested Browsers

Browser

Version

Operating System

Google Chrome

36 and later

Windows/UNIX

Internet Explorer

9 and later

Windows

Mozilla Firefox

31 and later

Windows/UNIX

Opera

23 and later

Windows/Mac

Opera

12 and later

UNIX

Note

Java 1.8.0 or a later version is required to be installed in the server to access the Web GUI.

When you upgrade from an earlier SBR Carrier version to the current version, clear your browser’s cache before launching the Web GUI.

External Database Requirements

Steel-Belted Radius Carrier supports:

  • Any external database with a compatible JDBC connector.

  • Oracle native client versions 11 and 12 to connect Oracle database versions 11 and 12 on Solaris.

  • Oracle native client versions 11 and 12 to connect Oracle database versions 11 and 12 on Linux.

    Note

    For SBR Carrier to act as an Oracle native client, the Oracle 64-bit client must be set up before installing 64-bit version of SBR Carrier, because the Oracle server location is used during installation.

  • Oracle native client version 19C.

  • SBR Carrier has been tested with MySQL version 5.1.69, Oracle database versions 11.2.0 and 12.1.0.2 on Solaris, and Oracle database versions 11.2.0 and 12.2.0 on Linux.

Signalware and SIM Requirements

To support the optional SIM authentication module, Signalware 9 with Service Pack 6.5 must be installed before installing SBR Carrier.

Caution

Service Pack 6.5 must be installed; otherwise, Steel-Belted Radius Carrier cannot use the Signalware communications stack.

SBR Carrier Installation

  1. Before installing Signalware on RHEL 7.5, you must disable kernel address space layout randomization (KASLR), which is enabled by default on RHEL 7.5. Signalware is incompatible with KASLR and requires the kernel memory address space to be consistent.
  2. To disable KASLR, do the following:

    1. Edit the GRUB_CMDLINE_LINUX key in the /etc/default/grub file to add the new parameter nokaslr.
    2. Run the command grub2-mkconfig -o /boot/grub2/grub.cfg.
    3. Reboot the server.

      This disables the KASLR feature on Linux Kernel.
    4. Install Signalware.
    5. Start Signalware.
  3. To find out more about KASLR, refer to the RHEL 7.5 kernel release notes.

    If it not 7.5 then refer the Installation guide.
Note

SBR Carrier does not support the Signalware communication stack on Solaris. So, the SIM authentication module cannot use the SIGTRAN protocol to communicate with an HLR to process RADIUS requests. However, the SIM authentication module can convert RADIUS requests to Diameter requests to communicate with an HSS.

SS7 cards are no longer supported.