It is possible to have multiple NAF filters connect to the same BSF server.

Depending on your load profile it may be necessary to balance NAF traffic across multiple NAFs. For example:

  • If you configure a short sentinel.gaa.nonce-lifetime, then you will likely receive a similar number of requests to the BSF and NAF.

  • If you configure a long sentinel.gaa.nonce-lifetime, then you may receive more requests to the NAF than the BSF.

  • If you have multiple NAF groups configured in your HSS, you will need to install a separate NAF Authentication Filter for each NAF group.


This page explains how to install a second NAF Authentication Filter on a separate server.
It assumes you have already completed an initial installation of Sentinel Authentication Gateway.


You need these files to install a second NAF Authentication Filter:


You need to copy these files from your existing Sentinel Authentication Gateway installation:


You also need to install the Java JDK on the new server.

Set up Tomcat

To set up Apache Tomcat for the new Sentinel Authentication Gateway installation:



unzip ~/Downloads/
cd apache-tomcat*
export TOMCAT_HOME=`pwd`


Enable SSL for Apache Tomcat.

Tip See the Tomcat 8 - SSL How-To docs for help setting up SSL in Apache Tomcat.

Copy files from the original install

To copy the required files:


Copy the file from your existing install to $TOMCAT_HOME/bin/

mv ~/Downloads/ $TOMCAT_HOME/bin/


Copy the file rem-rmi.jar from your existing install to $TOMCAT_HOME/bin/rem-rmi.jar:

mv ~/Downloads/rem-rmi.jar $TOMCAT_HOME/bin/rem-rmi.jar


Copy the file rem.war from your existing install to the webapps directory:

mv ~/Downloads/rem.war $TOMCAT_HOME/webapps/


Copy the rem_home directory from your existing install:

mv ~/Downloads/rem_home $TOMCAT_HOME/
Note For multiple XCAP servers to connect to the same HSS they typically need to have unique host values in VolteHssDiameterConfig.xml. Modify the file and HSS AS configuration accordingly.


Edit the Filter Configuration if necessary.

Connect to the remote BSF


Start Tomcat:

./bin/ start
Tip start will start Tomcat as a background process. Use run to run Tomcat in the foreground instead. This can be useful for debugging.


Connect to your remote BSF server:

  1. Ensure that is resolvable from your new NAF Authentication Filter host.

  2. Login to REM.

  3. Choose View List from the Connect to…​ drop-down list.

  4. Click the Manage Instances button.

  5. Click the Add Instance button, and add a new instance for the BSF server; like this:

    adding remote bsf server to rem
  6. Click the Done button.

  7. Connect to the Remote rhino in the Connect to…​ drop-down list.

  8. When prompted, use the default credentials of admin/password.


Populate the XCAP host mappings for the new NAF Authentication Filter installation:

  1. Ensure that your new NAF Authentication Filter install has a resolvable hostname (such as

  2. Populate the XCAP server settings using Remote for the Rhino Instance ID and for the hostname.

Now you can send NAF requests to either or

Restart Tomcat

To restart Tomcat, as needed, run these commands:

./bin/ stop
./bin/ start
Previous page Next page