Our High-Performing Core Network
Fully virtualizable on VMware, K8S, Docker and OpenStack containers
Authentication, Authorization and Accounting (AAA)
AAA, an intelligent service and policy control framework, facilitates access controls to networks and optimizes the utilization of resources.
▫ Authentication: to identify valid subscribers
▫ Authorization: to handles user requests for access to computer resources
▫ Accounting: to record the activities of subscribers which will be related to the billing
It can be used for the administration platform with billing function, applied in campus, hotel, enterprises and government, helping service providers control how subscribers access and consume IP data services.
Key Benefits
High-Performing and Scalable
Support for swiftly growing subscriber bases and increasing demand of data
Connect All Networks
Converged services for Mobile, WiFi, and wireline networks
Strong Brand Differentiation
Obust integration with third-party and legacy systems
Reduce Total Cost of Ownership
Enables operators to create new services and accelerate time-to-market
Virtualized AAA Optimize the performance of all networks
- IPLOOK’s virtualized AAA (vAAA) is one of few in the market that can be deployed in any NFV infrastructure (NFVI) environment as per ETSI standards or instances provided by the NFVI vendor, optimizing scalability and resource utilization through orchestration.
- NFV Compliant
IPLOOK can deliver its specific Virtual Network Function (sVNF), or integrate with a generic Virtual Network Function (gVNF) provided by any NFVi vendor, to manage the entire AAA VNF life cycle: onboarding, deploying, monitoring, scaling, fault recovery, updating, and undeploying. - 5G Compliant
IPLOOK AAA is ready to be integrated with the 5G mobile core network (5GC) to handle various use cases like slice authentication, authentication and authorization for Data Network Name (DNN) provisioning, as well as authenticating access of user device accessing from non-3GPP networks such as WiFi.
Features
Multi-Service Support
- Supports all access technologies, allowing operators to streamline operations, reduce total cost of ownership, and deliver converged services with a single platform.
Real-Time Policy Management
- Enables the launch of prepaid plans with zero revenue leakage, delivering bandwidth on demand, and communicating instantly with customers with real-time quota management, mid-session policy changes, and dynamic redirection.
Noise Reduction
- Reduces signaling “noise” on a network caused by endless loops of authentication requests by redirecting disturbing users and instructing them to take corrective action, keeping network performance high.
High Performance and Failover Support
- A highly responsive system that maximizes efficiency, and has 99.999% availability, assures carrier-grade performance as the network grows and expands.
Web-Based Administration
- Portal Includes a user-friendly and intuitive web portal for AAA configuration, including creation and management of user profiles; access policies such as authentication and authorization checks; integration with external systems like NASes; proxy targets; and more. Provides an interface for CSR and operations teams for monitoring, troubleshooting, and assisting in customer support.
Provisioning Support via API Gateway
- Supports a proven, scalable integration framework for provisioning using the API Gateway module, which is key in implementing AAA transformation projects without impacting existing integrations.
Emergency Mode
- Enables requests to process if database connectivity is lost by automatically switching to emergency mode, avoiding single points of failure, revenue loss, and service disruption.
Vendor Neutral and Standards Compliant
- Interoperable with any best-of-breeds network, preventing vendor lock-in, enabling operators to deploy a multivendor network for better performance and price, and reducing both upfront and long-term network costs.
3GPP Interface Support
- Supports all major 3GPP standard interfaces for integration with the operator’s mobile core and supports use cases such as WiFi offload, WiFi calling, charging, and more. Key interfaces include SWx, STa, SWm, SWa, and S6b.
Scalability
- IPLOOK AAA is stateless; it stores sessions and information in the centralized database cluster, so if any AAA nodes are down, another node can access the sessions. This enables vertical and horizontal scaling in the event of sudden network expansion.
Session Management
- Zero-leakage session management handles multiple simultaneous sessions, allows mid-session policy change, ghost session clean-up, and provides detailed real-time information on any session, enabling real-time prepaid enforcement with no revenue loss.
WiFi Calling and Offload
- Integrates with the mobile core to authenticate and authorize mobile subscribers connecting from non-3GPP networks like WiFi to enable WiFi calling and offload. Integrates with the mobile charging system to charge subscribers for offload use.
Automated Service Restoration
- Enables rapid recovery from system failures or outages to ensure minimal revenue loss and strain on resources, guards against system failure, and reduces operational cost as well as lowering churn.
Centralized Configuration Management
- Enables managing multiple nodes of the AAA cluster from a centralized platform, their configurations, scripts and real-time syncing across AAA nodes. This also includes centralized life-cycle management of AAA nodes: starting and stopping node/s, monitoring runtime status, viewing logs, and running a trace for troubleshooting.
Usage Monitoring and Notifications
- Supports the enforcement of fair use policies (FUPs), with usage caps and usagebased notifications, giving operators better control over services and converged data offers.
SNMP Support
- Effectively manages the AAA nodes using any SNMP-compliant management tool and implements standard RADIUS protocolspecific Management Information Base Structure (MIBS) and custom AAA application MIBS.
FAQ
What is an AAA system in telecommunications?
AAA stands for Authentication, Authorization, and Accounting. It is a core network framework used to verify subscriber identities, control access to network resources, and record usage activities for billing and policy management. AAA systems are essential for secure and efficient service delivery across telecom and enterprise networks.
What are the main functions of IPLOOK’s AAA solution?
IPLOOK’s AAA platform performs subscriber authentication, access authorization, session management, real-time policy enforcement, usage monitoring, and accounting for billing purposes. It supports mobile, WiFi, and wireline network environments through a unified management framework.
Which deployment scenarios are best suited for the AAA platform?
The solution is widely used in telecom operator networks, enterprise networks, campus environments, hotels, government projects, WiFi hotspots, and public access services where centralized user authentication and policy control are required.
Is IPLOOK’s AAA solution cloud-native and NFV compliant?
Yes. IPLOOK’s virtualized AAA (vAAA) is fully NFV-compliant and can be deployed on public cloud, private cloud, and ETSI-compliant NFVI environments. It supports orchestration, lifecycle management, automated scaling, fault recovery, and resource optimization.
Does the AAA platform support 5G and WiFi integration?
Yes. The solution is designed for 5G integration and supports use cases such as slice authentication, DNN authorization, WiFi offload, and WiFi calling. It supports key 3GPP interfaces including SWx, STa, SWm, SWa, and S6b.
How does the system ensure scalability and high availability?
IPLOOK’s AAA architecture is stateless and stores session information in a centralized database cluster. This enables horizontal and vertical scaling, rapid failover, 99.999% availability, automated service restoration, and uninterrupted session continuity during node failures.
What policy and session management capabilities are included?
The platform supports real-time quota management, mid-session policy changes, prepaid enforcement, fair usage policies (FUP), ghost session cleanup, dynamic redirection, and usage-based notifications. These capabilities help operators maintain accurate billing and improve network efficiency.
How does IPLOOK’s AAA solution help operators reduce operational costs?
By consolidating authentication, authorization, policy control, and accounting into a single standards-based platform, operators can simplify network operations, reduce integration complexity, avoid vendor lock-in, accelerate service deployment, and lower both CAPEX and OPEX while supporting future network growth.
