Просмотреть исходный

Supported operating systems

Astra Linux versions 1.7.X / 1.8.X
RedOS versions 7.3.X / 8.0.X
Ubuntu 24.04 LTS
Debian 13

Hardware requirements

The IP addresses of the VMs on which NAICE is deployed must be configured statically.

Single-host deployment

Minimum requirements (suitable only for test operation):

CPU: 4
RAM: 10 GB
HDD/SSD: 50 GB

Recommended requirements:

CPU: 8
RAM: 16 GB
HDD/SSD: 1000 GB

High-availability deployment

Role	CPU	RAM	HDD/SSD
Minimum requirements for deploying NAICE on 2 VMs (test operation)
NAICE 1 + PostgreSQL node 1	6	10 GB	100 GB
NAICE 2 + PostgreSQL node 2	6	10 GB	100 GB
Recommended requirements for deployment on 2 VMs (fewer than 1000 network devices)
NAICE 1 + PostgreSQL node 1	8	16 GB	500 GB
NAICE 2 + PostgreSQL node 2	8	16 GB	500 GB
Recommended requirements for deployment on 4 VMs (more than 1000 network devices)
NAICE 1	16	32 GB	100 GB
NAICE 2	16	32 GB	100 GB
PostgreSQL node 1	8	16 GB	1000 GB
PostgreSQL node 2	8	16 GB	1000 GB

Disk layout requirements

By default, NAICE stores configuration files in the /etc/docker-naice/ directory.

This directory also contains PostgreSQL database files and database backups.

Docker uses the /var/lib/docker/ directory to store containers and their logs.

When allocating partitions and mounting disks, ensure that these directories have sufficient space for deployment and normal system operation.

VM for running Ansible playbooks

Role

CPU

RAM

HDD/SSD

Notes

Host for running Ansible playbooks

1

4 GB

100 GB

The following operating systems are supported:

Ubuntu 24.04

RedOS 8.0.3

Astra Linux 1.8.6

RADIUS protocol attribute requirements

RADIUS Access-Request messages sent by network devices during user authentication must include:

User-Name — required to determine the user login (except when authorization is based on a TLS certificate attribute);

It is recommended that the following attributes be included:

Acct-Session-Id — a unique session identifier; without it, sessions can be distinguished only by indirect parameters;
Calling-station-Id (in MAC address format) — required to determine the unique endpoint.
NAS-Port-Type — required for correct detection of connection type (wired/wireless);
Service-Type — required for correct identification of the authentication method (802.1X / MAB).

For portal authentication, the Calling-Station-Id attribute in MAC address format must be present.
It is required to uniquely identify a guest endpoint and to enable roaming within a single SSID between access points without repeated portal authentication during the endpoint lifetime.