Skip to main content
This guide provides comprehensive access information for all services and devices in the Nokia BNG lab.

​
SSH Access to Network Devices

All Nokia devices use the following default credentials:
  • Username: admin
  • Password: lab123

​
BNG Routers

1

Access BNG1 (SR-7)

ssh admin@localhost -p 56661
# Management IP: 10.77.1.2
BNG1 also exposes:
  • gRPC/gNMI: Port 56662 (internal: 57400)
  • NETCONF: Port 56663 (internal: 830)
2

Access BNG2 (SR-7)

ssh admin@localhost -p 56664
# Management IP: 10.77.1.3
BNG2 also exposes:
  • gRPC/gNMI: Port 56665 (internal: 57400)
  • NETCONF: Port 56666 (internal: 830)

​
Access Network Devices

ssh admin@localhost -p 56667
# Management IP: 10.77.1.4
Additional Ports:
  • gRPC/gNMI: 56668 (internal: 57400)
  • NETCONF: 56669 (internal: 830)
ssh admin@localhost -p 56678
# Management IP: 10.77.1.5
Additional Ports:
  • gRPC/gNMI: 56671 (internal: 57400)
  • NETCONF: 56672 (internal: 830)
ssh admin@localhost -p 56676
# Management IP: 10.77.1.16
SR Linux uses admin/lab123 credentials and includes custom .srlinuxrc configuration.

​
Subscriber Devices (ONTs)

ssh user@localhost -p 56673
# Password: test
# Management IP: 10.77.1.6
Configuration:
ssh user@localhost -p 56674
# Password: test
# Management IP: 10.77.1.7
Configuration:
  • Connection Type: PPPoE
  • PPP Username: test@test.com
  • PPP Password: testlab123
  • VLAN ID: 150
  • MAC Address: 00:D0:F6:01:01:02
  • Web UI: http://localhost:8082

​
Test Devices

ssh root@localhost -p 56675
# Management IP: 10.77.1.15
Network Configuration:
  • eth1: 172.19.1.1/30 (connected to BNG1)
  • eth2: 172.20.1.1/30 (connected to BNG2)
  • Default route via 172.19.1.2
ssh root@localhost -p 56677
# Management IP: 10.77.1.17
PC1 is configured for SLAAC (IPv6 autoconfiguration) and connected to ONT1.

​
Web UI Access

​
Grafana Dashboard

1

Access Grafana

Open your browser and navigate to:
http://localhost:3030
2

Login Credentials

  • Username: admin
  • Password: admin
Anonymous access is also enabled with Editor role for the Main Org.
3

Available Dashboards

Pre-configured dashboards for:
  • Nokia SROS metrics
  • Interface statistics
  • BNG subscriber sessions
  • System resources (CPU, memory)

​
Prometheus Metrics

http://localhost:9090
Prometheus scrapes metrics from gNMIc every 5 seconds. Access the Targets page at http://localhost:9090/targets to verify scraping status.

​
Management Network Access

The lab uses a dedicated management network: 
Network: lab
Subnet: 10.77.1.0/24
Gateway: Managed by Containerlab

​
IP Address Allocation

DeviceManagement IPPurpose
bng110.77.1.2BNG Router ISP 1
bng210.77.1.3BNG Router ISP 2
switch10.77.1.4Aggregation Switch
olt10.77.1.5Optical Line Terminal
ont110.77.1.6IPoE Subscriber
ont210.77.1.7PPPoE Subscriber
radius10.77.1.10RADIUS Server
gnmic10.77.1.12Telemetry Collector
prometheus10.77.1.13Metrics Database
grafana10.77.1.14Visualization
iperf10.77.1.15Traffic Generator
tx10.77.1.16Transit Router
pc110.77.1.17Test Client

​
Container Access

​
Direct Container Shell Access

1

List Running Containers

sudo containerlab inspect -t lab.yml
2

Access Container Shell

# General format
docker exec -it clab-lab-<node-name> /bin/bash

# Examples
docker exec -it clab-lab-bng1 sr_cli
docker exec -it clab-lab-grafana /bin/bash
docker exec -it clab-lab-gnmic /bin/sh
3

Access Nokia SR OS CLI

# SR OS devices (BNG, Switch, OLT)
docker exec -it clab-lab-bng1 sr_cli

# SR Linux devices (TX)
docker exec -it clab-lab-tx sr_cli

​
Container Management Commands

# View container logs
docker logs clab-lab-<node-name>

# Follow logs in real-time
docker logs -f clab-lab-gnmic

# Restart a specific container
docker restart clab-lab-prometheus

# Check container resource usage
docker stats clab-lab-bng1

​
gRPC and NETCONF Access

​
gNMI/gRPC Access

All Nokia devices expose gNMI on port 57400 (mapped to external ports): 
# Query BNG1 capabilities
gnmic -a localhost:56662 \
  -u admin -p lab123 \
  --skip-verify \
  capabilities

# Subscribe to interface statistics
gnmic -a localhost:56662 \
  -u admin -p lab123 \
  --skip-verify \
  subscribe \
  --path "/state/port/statistics"

# Get specific configuration
gnmic -a localhost:56662 \
  -u admin -p lab123 \
  --skip-verify \
  get \
  --path "/configure/service"
The lab uses automated discovery via Docker socket:
# From configs/gnmic/config.yml
loader:
  type: docker
  address: unix:///run/docker.sock
  filters:
    - containers:
        - label: clab-node-kind=nokia_srsim
      port: "57400"
Credentials are configured globally: admin/lab123 with skip-verify: true

​
NETCONF Access

# Connect to BNG1 NETCONF interface
ssh admin@localhost -p 56663 -s netconf

# Using netconf-console (if installed)
netconf-console \
  --host=localhost \
  --port=56663 \
  --user=admin \
  --password=lab123 \
  --get-config

​
RADIUS Server Access

The RADIUS server handles authentication and accounting for subscriber sessions. 
docker exec -it clab-lab-radius /bin/bash
  • Clients Config: /etc/raddb/clients.conf
  • User Database: /etc/raddb/mods-config/files/authorize
  • Main Config: /etc/raddb/radiusd.conf
# View authorized users
docker exec clab-lab-radius cat /etc/raddb/mods-config/files/authorize

# Check RADIUS logs
docker exec clab-lab-radius tail -f /var/log/radius/radius.log

# From within the RADIUS container
docker exec -it clab-lab-radius radtest \
  test@test.com testlab123 \
  localhost 0 testing123

​
Quick Reference

Default Credentials Summary:
  • Nokia Devices (admin): admin/lab123
  • ONT Devices (SSH): user/test
  • PPPoE Subscriber: test@test.com/testlab123
  • Grafana: admin/admin
  • RADIUS Shared Secret: testing123
All devices are accessible via localhost ports. Ensure no firewall is blocking these ports on your host system.

​
Network Connectivity Test

Verify management network connectivity: 
# Ping from host to any device
docker exec clab-lab-bng1 ping -c 3 10.77.1.14

# Verify all devices can reach each other
docker exec clab-lab-grafana ping -c 3 10.77.1.13  # to Prometheus
docker exec clab-lab-gnmic ping -c 3 10.77.1.2     # to BNG1