# -------- Local --------- # Uncomment if the framework cannot resolv it. Identity = "@MME_FQDN@"; Realm = "@REALM@"; # TLS configuration (see previous section) TLS_Cred = "@FREEDIAMETER_PATH@/../etc/freeDiameter/mme.cert.pem", "@FREEDIAMETER_PATH@/../etc/freeDiameter/mme.key.pem"; TLS_CA = "@FREEDIAMETER_PATH@/../etc/freeDiameter/mme.cacert.pem"; # Disable use of TCP protocol (only listen and connect in SCTP) # Default : TCP enabled @TRANSPORT_option@; # This option is ignored if freeDiameter is compiled with DISABLE_SCTP option. # Prefer TCP instead of SCTP for establishing new connections. # This setting may be overwritten per peer in peer configuration blocs. # Default : SCTP is attempted first. @TRANSPORT_PREFER_TCP_option@; No_IPv6; # Overwrite the number of SCTP streams. This value should be kept low, # especially if you are using TLS over SCTP, because it consumes a lot of # resources in that case. See tickets 19 and 27 for some additional details on # this. # Limit the number of SCTP streams SCTP_streams = 3; # By default, freeDiameter acts as a Diameter Relay Agent by forwarding all # messages it cannot handle locally. This parameter disables this behavior. NoRelay; TLS_old_method; AppServThreads = 1; # Specify the addresses on which to bind the listening server. This must be # specified if the framework is unable to auto-detect these addresses, or if the # auto-detected values are incorrect. Note that the list of addresses is sent # in CER or CEA message, so one should pay attention to this parameter if some # adresses should be kept hidden. @ListenOn@ @DIAMETER_PORT@; @DIAMETER_SEC_PORT@; # -------- Extensions --------- # Uncomment (and create rtd.conf) to specify routing table for this peer. #LoadExtension = "rt_default.fdx" : "rtd.conf"; # Uncomment (and create acl.conf) to allow incoming connections from other peers. #LoadExtension = "acl_wl.fdx" : "acl.conf"; # Uncomment to display periodic state information #LoadExtension = "dbg_monitor.fdx"; # Uncomment to enable an interactive Python interpreter session. # (see doc/dbg_interactive.py.sample for more information) #LoadExtension = "dbg_interactive.fdx"; # Load the RFC4005 dictionary objects #LoadExtension = "dict_nasreq.fdx"; LoadExtension = "dict_nas_mipv6.fdx"; LoadExtension = "dict_s6a.fdx"; # Load RFC4072 dictionary objects #LoadExtension = "dict_eap.fdx"; # Load the Diameter EAP server extension (requires diameap.conf) #LoadExtension = "app_diameap.fdx" : "diameap.conf"; # Load the Accounting Server extension (requires app_acct.conf) #LoadExtension = "app_acct.fdx" : "app_acct.conf"; # -------- Peers --------- # The framework will actively attempt to establish and maintain a connection # with the peers listed here. # For only accepting incoming connections, see the acl_wl.fx extension. # ConnectPeer # Declare a remote peer to which this peer must maintain a connection. # In addition, this allows specifying non-default parameters for this peer only # (for example disable SCTP with this peer, or use RFC3588-flavour TLS). # Note that by default, if a peer is not listed as a ConnectPeer entry, an # incoming connection from this peer will be rejected. If you want to accept # incoming connections from other peers, see the acl_wl.fdx? extension which # allows exactly this. @ConnectPeer@ = "@HSS_FQDN@" { ConnectTo = "@HSS_IP@"; No_IPv6; No_TLS ; port = 3868; Realm = "@REALM@"; };