KYNEX BNG
KYNEX BNG supports the access-network functions required to connect broadband subscribers to an ISP's network and internet services. Depending on the implementation, it handles subscriber connectivity, session establishment, access policies, IP address assignment, service differentiation and integration with authentication systems. It also adds network security controls, DDoS and spam protection, dynamic routing with OSPF, RIP and BGP, and carrier-grade NAT (CGNAT) to help operators protect their network and stretch their IPv4 address space.
The chosen model is finalized per project before specific performance, throughput, subscriber-capacity, security-mitigation or protocol-support commitments are made.
What KYNEX BNG does.
Subscriber Access
Support broadband access methods such as PPPoE and IPoE, manage session state and integrate with access infrastructure.
Authentication & Accounting
Integrate with KYNEX RADIUS or compatible external RADIUS servers for authentication, accounting and live policy changes (RADIUS CoA) without dropping subscribers.
Session Management
Monitor active sessions, review establishment and termination events and gain visibility into connectivity, with per-subscriber usage counters.
IP Address Management
Subscriber IP assignment workflows, DHCP-based allocation and integration with IPAM systems; IPv4/IPv6 dual-stack where implemented.
Service Policy & QoS
Bandwidth profiles, traffic shaping and policing, fair-usage policies and subscriber policy differentiation, plus walled-garden redirection for expired or suspended accounts.
Network Security & Access Control
Access control lists, anti-spoofing checks such as reverse-path filtering, subscriber isolation and control-plane protection to keep the access network and core safe.
Unauthorized & Unwanted Request Drop
Drop unsolicited, unauthorized and malformed inbound requests at the edge: bogon and invalid-source filtering, blocked ports and services, and scan or probe suppression.
DDoS Protection
Detect and limit SYN, UDP and ICMP floods with rate limits and connection thresholds, and mitigate volumetric attacks with BGP-based blackholing where the upstream supports it.
Spam & Abuse Protection
Control outbound SMTP and other abuse-prone traffic, throttle or block compromised sources, and isolate infected subscribers to protect your IP reputation.
Dynamic Routing: OSPF, RIP & BGP
Exchange routes with the core and upstream providers over OSPF, RIP and BGP (iBGP/eBGP), with route filtering and policy control; ECMP and fast failure detection where supported.
CGNAT
Carrier-grade NAT to share scarce public IPv4 addresses across many subscribers, with port-block allocation and NAT session logging that integrates with KYNEX IPDR for record-keeping.
Reliability, Monitoring & Scale
Capacity planning, redundancy and high availability where the architecture supports it, with health, session and traffic visibility through KYNEX NMS.
- Centralized subscriber access management
- Stronger protection for subscribers and the core network
- Fewer attack and abuse incidents reaching your customers
- More subscribers per public IPv4 address with CGNAT
- Session and NAT records ready for compliance with IPDR
- Foundation for scalable operations
- ISPs and FTTH operators
- Broadband network operators
- Telecom service providers
- Operators modernizing access infrastructure
- Native BNG: proprietary implementation.
- Integrated BNG: established third-party platforms.
- Multi-vendor management: management and integration layer.
- Security, routing and CGNAT capabilities depend on the selected deployment model and platform.
promise
Connect subscribers. Protect the network. Support scalable broadband access.
Questions about KYNEX BNG
What is KYNEX BNG?
KYNEX BNG supports the access-network functions required to connect broadband subscribers to an ISP's network and internet services. Depending on the implementation, it handles subscriber connectivity, session establishment, access policies, IP address assignment, service differentiation and integration with authentication systems.
Who is BNG designed for?
BNG is designed for ISPs and FTTH operators; broadband network operators; telecom service providers; operators modernizing access infrastructure.
What are the key features of KYNEX BNG?
PPPoE / IPoE subscriber access, Subscriber session management, RADIUS authentication & accounting, Network security & access control, Unwanted & unauthorized request drop, DDoS protection, Spam & abuse protection, OSPF, RIP & BGP routing, CGNAT (carrier-grade NAT), IPv4 / IPv6 dual-stack, QoS, bandwidth & service controls, High availability and redundancy.
Does BNG work with other KYNEX products?
BNG can be adopted on its own and is designed to integrate with KYNEX RADIUS, KYNEX IPDR, KYNEX NMS through supported interfaces. Actual integration depends on your deployment.
How do I request a BNG demo?
Use the contact page and choose the product, or email info@kynexindia.in. The team will arrange a walkthrough.