[go: up one dir, main page]
More Web Proxy on the site http://driver.im/

WO2021169291A1 - 发布路由的方法、网元、系统及设备 - Google Patents

发布路由的方法、网元、系统及设备 Download PDF

Info

Publication number
WO2021169291A1
WO2021169291A1 PCT/CN2020/118689 CN2020118689W WO2021169291A1 WO 2021169291 A1 WO2021169291 A1 WO 2021169291A1 CN 2020118689 W CN2020118689 W CN 2020118689W WO 2021169291 A1 WO2021169291 A1 WO 2021169291A1
Authority
WO
WIPO (PCT)
Prior art keywords
network element
plane network
session
forwarding plane
address
Prior art date
Application number
PCT/CN2020/118689
Other languages
English (en)
French (fr)
Inventor
彭涛
花荣荣
余舟毅
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP20920805.7A priority Critical patent/EP4096294A4/en
Publication of WO2021169291A1 publication Critical patent/WO2021169291A1/zh
Priority to US17/895,294 priority patent/US20220408332A1/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W36/00—Hand-off or reselection arrangements
    • H04W36/0005—Control or signalling for completing the hand-off
    • H04W36/0011—Control or signalling for completing the hand-off for data sessions of end-to-end connection
    • H04W36/0033—Control or signalling for completing the hand-off for data sessions of end-to-end connection with transfer of context information
    • H04W36/0038—Control or signalling for completing the hand-off for data sessions of end-to-end connection with transfer of context information of security context information
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W36/00—Hand-off or reselection arrangements
    • H04W36/0005—Control or signalling for completing the hand-off
    • H04W36/0011—Control or signalling for completing the hand-off for data sessions of end-to-end connection
    • H04W36/0019—Control or signalling for completing the hand-off for data sessions of end-to-end connection adapted for mobile IP [MIP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W36/00—Hand-off or reselection arrangements
    • H04W36/0005—Control or signalling for completing the hand-off
    • H04W36/0055—Transmission or use of information for re-establishing the radio link
    • H04W36/0069—Transmission or use of information for re-establishing the radio link in case of dual connectivity, e.g. decoupled uplink/downlink
    • H04W36/00695—Transmission or use of information for re-establishing the radio link in case of dual connectivity, e.g. decoupled uplink/downlink using split of the control plane or user plane
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W36/00—Hand-off or reselection arrangements
    • H04W36/08—Reselecting an access point
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W40/00—Communication routing or communication path finding
    • H04W40/24—Connectivity information management, e.g. connectivity discovery or connectivity update
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/02—Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
    • H04W8/08—Mobility data transfer
    • H04W8/087—Mobility data transfer for preserving data network PoA address despite hand-offs
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10—Small scale networks; Flat hierarchical networks
    • H04W84/12—WLAN [Wireless Local Area Networks]

Definitions

  • This application relates to the field of communications, and in particular to methods, network elements, systems, and equipment for issuing routes.
  • This application provides a method, network element, system, and device for advertising routes, which are used to solve the problem that in the third layer network of the OSI model, the user equipment is connected to multiple APs of different BNGs or switches back and forth between routers. The problem of maintaining the state of the uninterrupted network.
  • a method for issuing routes is provided, which is applied to the third layer network in the open system interconnection OSI model.
  • the network includes control plane network elements and forwarding plane network elements connected to each other. The method includes the following steps :
  • the forwarding plane network element receives a message, and the source IP address of the message is the first IP address;
  • the forwarding plane network element determines that the first IP address is not authenticated
  • the forwarding plane network element sends an authentication request to the control plane network element, where the authentication request includes the first IP address;
  • the forwarding plane network element receives the first session information session from the control plane network element, the first session responds to the authentication request, and the first session corresponds to the first IP address;
  • the forwarding plane network element advertises the first routing information according to the first session, and the destination address of the first routing information is the first IP address.
  • the forwarding plane network element when the source IP address of the message received by the forwarding plane network element is the first unauthenticated IP address, the forwarding plane network element can obtain the first session corresponding to the first IP address from the control plane network element.
  • the user equipment is always online without redialing, and the network will not be disconnected during the whole process. This solves the problem that the user equipment 100 is connected to multiple APs with different BNGs while maintaining the uninterrupted network status. The problem of switching back and forth.
  • the forwarding plane network element includes a forwarding plane user table, and the forwarding plane user table is used to store session information session corresponding to an authenticated IP address; the forwarding plane network element determines the first IP address Unauthenticated, including: the forwarding plane network element determines that the forwarding plane user table does not include the first session; after the forwarding plane network element receives the first session from the control plane network element, the The method further includes: the forwarding plane network element stores the first session in the forwarding plane user table, so as to obtain an updated forwarding plane user table.
  • the forwarding plane network element after storing the first session in the user table of the forwarding plane, when the forwarding plane network element again receives a packet whose source IP address is the first IP address, it can directly determine the first session according to the user table of the forwarding plane.
  • the first IP is authenticated, and the message is forwarded according to the first routing information in the first session, without the need to send the authentication request of the first IP address to the control plane network element again, which improves the efficiency of message forwarding and improves the use of users Experience.
  • the method further includes: the forwarding plane network element sends a dial request to the control plane network element, the dial request includes a second IP address; in the case that the dial request is successful, the The forwarding plane network element receives a second session from the control plane network element, the second session corresponds to the second IP address, and the second session is the control plane network element responding to the dial request
  • the forwarding plane network element publishes second routing information according to the second session, and the destination address of the second routing information is the second IP address; the forwarding plane network element sends the second The session is stored in the forwarding plane user table, so as to obtain the updated forwarding plane user table; or, in the case that the dial request fails, the forwarding plane network element receives a failure message from the control plane network element, The failure message is used to indicate that the dialing request fails.
  • the forwarding plane network element may send the dial request to the control plane network element, so that the control plane network element sends the dial request to AAA 310 for authentication.
  • AAA 310 After AAA 310 has confirmed whether the IP address has access rights, which services are available, records of the use of network resources by the IP address, and other information, AAA 310 will return to the control plane network element 420 to dial the IP address
  • the control plane network element 420 may generate a second session corresponding to the second IP address according to the message of successful dialing, and the second session corresponding to the second IP address will be stored in the forwarding plane user table and issued To the forwarding plane network element, it is stored in the forwarding plane user table at the same time, which facilitates some program processing during the session, so that each time the forwarding plane network element 410 receives a data message sent by the user equipment corresponding to the IP address, According to the session corresponding to the IP address of the user device, you can directly determine whether the IP address corresponding to the user device has the authority to use the network, whether it has been dialed successfully and is in an authenticated state, whether it has the authority to use the value-added services in the network, and the available network bandwidth , The routing information required
  • control plane network element includes a control plane user table, and the control plane user table is used to store session information session corresponding to an authenticated IP address; the forwarding plane network element receives data from the control plane
  • the first session of the plane network element includes: the forwarding plane network element receives the first session from the control plane network element, and the first session is that the control plane network element queries according to the authentication request
  • the control surface is obtained from the user table.
  • the forwarding plane network element will store the first session corresponding to the first IP address. Therefore, even if the first session is not stored in the forwarding plane network element currently connected to the user equipment, the forwarding plane network element can also obtain the first session through the control plane network element, and the control plane network element can query the control plane user table and change the first session.
  • a session is delivered to the forwarding plane far away without repeatedly sending authentication requests to AAA, which improves the efficiency of message forwarding and improves user experience.
  • the receiving, by the forwarding plane network element, the first session from the control plane network element includes: the forwarding plane network element receiving the first session from the control plane network element, and The first session is generated by the control plane network element according to the authentication request.
  • control plane user table of the control plane network element does not include the first session, it means that the control plane network element has not received the dial request of the first IP address, and the control plane network element can dial the first IP address
  • the request is sent to AAA for authentication.
  • the first session can be generated according to the dialing success message returned by AAA, stored in the control plane user table, and then sent to the forwarding plane network element.
  • the forwarding plane network element receives a message with the first IP address as the source address again, it can directly forward the message sent by the first IP address according to the first session without repeating the authentication request to the control plane network element. Improve message forwarding efficiency and improve user experience.
  • control-plane user table of the control-plane network element does not include the first session
  • the control-plane network element can also process in different ways according to business requirements.
  • the control-plane network element can also directly discard the message. Etc., this application does not make specific limitations.
  • the forwarding plane network element receiving the message includes: the forwarding plane network element receiving the message sent by the user equipment through the network access point AP; or, the forwarding plane network element receiving the message In a message sent by the user equipment through a router, the IP address of the user equipment is the first IP address.
  • the user equipment first connects to the second forwarding plane network element through the second AP, and sends a dial request to the second forwarding plane network element through the second AP, after the dialing is successful, the control plane user of the control plane network element
  • the first session is stored in the table and the forwarding plane user table of the second forwarding plane network element. Then the user equipment disconnects from the first AP and connects to the first AP connected to the first forwarding plane network element.
  • the first session is not stored in the forwarding plane user table of the plane network element, so steps S401 to S405 will be executed.
  • the first forwarding plane network element can obtain the first session of the user equipment from the control plane network element.
  • the user equipment does not need to dial up again, so there will be no disconnection in the whole process, so that in the three-layer network, the user equipment is connected to multiple APs with different BNGs while maintaining the uninterrupted network status. Switch back and forth.
  • the message is a data message.
  • a method for issuing routes is provided, which is applied to a layer 3 network in an open system interconnection OSI model.
  • the network includes control plane network elements and forwarding plane network elements connected to each other, and the method includes :
  • the control plane network element receives an authentication request from the forwarding plane network element, where the authentication request includes a first IP address;
  • the control plane network element determines that the first IP address has been authenticated
  • the control plane network element sends the first session information session to the forwarding plane network element, the first session corresponds to the first IP address, and the first session is used to instruct the forwarding plane network element to issue the first Routing information, the destination address of the first routing information is the first IP address.
  • the forwarding plane network element when the source IP address of the message received by the forwarding plane network element is the first unauthenticated IP address, the forwarding plane network element can obtain the first session corresponding to the first IP address from the control plane network element, and then this During the process, the user equipment is always online without redialing, and the network will not be disconnected during the whole process. This solves the problem that the user equipment 100 is connected to multiple APs with different BNGs while maintaining the uninterrupted network status. The problem of switching back and forth.
  • control plane network element includes a control plane user table, and the control plane user table is used to store session information session corresponding to an authenticated IP address;
  • the network element sending the first session includes: the control plane network element queries the control plane user table to obtain the first session corresponding to the first IP address according to the authentication request; the control plane network The element sends the first session to the forwarding plane network element.
  • the forwarding plane network element will store the first session corresponding to the first IP address. Therefore, even if the first session is not stored in the forwarding plane network element currently connected to the user equipment, the forwarding plane network element can also obtain the first session through the control plane network element, and the control plane network element can query the control plane user table and change the first session.
  • a session is delivered to the forwarding plane far away without repeatedly sending authentication requests to AAA, which improves the efficiency of message forwarding and improves user experience.
  • the sending of the first session by the control plane network element to the forwarding plane network element includes: the control plane network element generating the first session corresponding to the first IP address; The control plane network element sends the first session to the forwarding plane network element.
  • control plane user table of the control plane network element does not include the first session, it means that the control plane network element has not received the dial request of the first IP address, and the control plane network element can dial the first IP address
  • the request is sent to AAA for authentication.
  • the first session can be generated according to the dialing success message returned by AAA, stored in the control plane user table, and then sent to the forwarding plane network element.
  • the forwarding plane network element receives a message with the first IP address as the source address again, it can directly forward the message sent by the first IP address according to the first session without repeating the authentication request to the control plane network element. Improve message forwarding efficiency and improve user experience.
  • control-plane user table of the control-plane network element does not include the first session
  • the control-plane network element can also process in different ways according to business requirements.
  • the control-plane network element can also directly discard the message. Etc., this application does not make specific limitations.
  • the forwarding plane network element includes a forwarding plane user table
  • the forwarding plane user table is used to store a session corresponding to an authenticated IP address
  • the first session is also used to indicate the forwarding plane
  • the network element stores the first session in the forwarding plane user table, so as to obtain an updated forwarding plane user table.
  • the forwarding plane network element after storing the first session in the user table of the forwarding plane, when the forwarding plane network element again receives a packet whose source IP address is the first IP address, it can directly determine the first session according to the user table of the forwarding plane.
  • the first IP is authenticated, and the message is forwarded according to the first routing information in the first session, without the need to send the authentication request of the first IP address to the control plane network element again, which improves the efficiency of message forwarding and improves the use of users Experience.
  • the method further includes: the control plane network element receives a dial request from the forwarding plane network element, the dial request includes a second IP address; in the case that the dial request is successful, The control plane network element sends a second session to the forwarding plane network element, where the second session corresponds to the second IP address, and the second session is used to instruct the forwarding plane network element to advertise a second route Information, the destination address of the second routing information is the second IP address, and the second session is also used to instruct the forwarding plane network element to store the second session in the forwarding plane user table, thereby Obtain the updated forwarding plane user table; the control plane network element stores the second session in the control plane user table, thereby obtaining the updated control plane user table; or, in the case that the dial request fails Next, the control plane network element sends a failure message to the forwarding plane network element, where the failure message is used to indicate that the dialing request fails.
  • the forwarding plane network element may send the dial request to the control plane network element, so that the control plane network element sends the dial request to AAA 310 for authentication.
  • AAA 310 After AAA 310 has confirmed whether the IP address has access rights, which services are available, records of the use of network resources by the IP address, and other information, AAA 310 will return to the control plane network element 420 to dial the IP address
  • the control plane network element 420 may generate a second session corresponding to the second IP address according to the message of successful dialing, and the second session corresponding to the second IP address will be stored in the forwarding plane user table and issued To the forwarding plane network element, it is stored in the forwarding plane user table at the same time, which facilitates some program processing during the session, so that each time the forwarding plane network element 410 receives a data message sent by the user equipment corresponding to the IP address, According to the session corresponding to the IP address of the user device, you can directly determine whether the IP address corresponding to the user device has the authority to use the network, whether it has been dialed successfully and is in an authenticated state, whether it has the authority to use the value-added services in the network, and the available network bandwidth , The routing information required
  • the message is a message sent by the user equipment to the forwarding plane network element through the network access point AP; or, the message is a message sent by the user equipment to the forwarding plane network element through a router, Wherein, the IP address of the user equipment is the first IP address.
  • the user equipment first connects to the second forwarding plane network element through the second AP, and sends a dial request to the second forwarding plane network element through the second AP, after the dialing is successful, the control plane user of the control plane network element
  • the first session is stored in the table and the forwarding plane user table of the second forwarding plane network element. Then the user equipment disconnects from the first AP and connects to the first AP connected to the first forwarding plane network element.
  • the first session is not stored in the forwarding plane user table of the plane network element, so steps S401 to S405 will be executed.
  • the first forwarding plane network element can obtain the first session of the user equipment from the control plane network element.
  • the user equipment does not need to dial up again, so there will be no disconnection in the whole process, so that in the three-layer network, the user equipment is connected to multiple APs with different BNGs while maintaining the uninterrupted network status. Switch back and forth.
  • the message is a data message.
  • a forwarding plane network element which is applied to a third-layer network in an open system interconnection OSI model.
  • the network includes a control plane network element and a forwarding plane network element connected to each other.
  • the forwarding plane Network elements include:
  • a receiving unit configured to receive a message, and the source IP address of the message is the first IP address;
  • a processing unit configured to determine that the first IP address is not authenticated
  • a sending unit configured to send an authentication request to the control plane network element, wherein the authentication request includes the first IP address;
  • the receiving unit is further configured to receive first session information session from the control plane network element, where the first session responds to the authentication request, and the first session corresponds to the first IP address;
  • the sending unit is further configured to publish first routing information according to the first session, and the destination address of the first routing information is the first IP address.
  • the forwarding plane network element includes a forwarding plane user table, and the forwarding plane user table is used to store session information session corresponding to an authenticated IP address; the processing unit is further used to determine the The forwarding plane user table does not include the first session; the processing unit is further configured to store the first session in the control plane network element after the receiving unit receives the first session The forwarding plane user table is described, so as to obtain the updated forwarding plane user table.
  • the sending unit is further configured to send a dial request to the control plane network element, where the dial request includes a second IP address; and the receiving unit is further configured to receive data from the control plane network element.
  • the second session of the element, the second session corresponds to the second IP address, and the second session is generated by the control plane network element in response to the dial request;
  • the sending unit is further configured to Publish second routing information according to the second session, the destination address of the second routing information is the second IP address;
  • the processing unit is further configured to store the second session to the forwarding plane user Table, thereby obtaining an updated forwarding plane user table; or, the receiving unit is further configured to receive a failure message from the control plane network element, where the failure message is used to indicate that the dialing request fails.
  • control plane network element includes a control plane user table, and the control plane user table is used to store session information session corresponding to an authenticated IP address; For the first session of the control plane network element, the first session is obtained by the control plane network element querying the control plane user table according to the authentication request.
  • the receiving unit is further configured to receive the first session from the control plane network element, where the first session is generated by the control plane network element according to the authentication request.
  • a control plane network element which is applied to a layer 3 network in an open system interconnection OSI model.
  • the network includes a control plane network element and a forwarding plane network element connected to each other.
  • the control plane Network elements include:
  • a receiving unit the receiving unit is configured to receive an authentication request from the forwarding plane network element, where the authentication request includes a first IP address;
  • a sending unit configured to send first session information session to the forwarding plane network element, the first session corresponds to the first IP address, and the first session is used to instruct the forwarding plane network element Publish the first routing information, and the destination address of the first routing information is the first IP address.
  • control plane network element further includes a processing unit, the control plane network element includes a control plane user table, and the control plane user table is used to store session information session corresponding to an authenticated IP address;
  • the processing unit is configured to query the control plane user table to obtain the first session corresponding to the first IP address according to the authentication request;
  • the sending unit is also configured to send a message to the forwarding plane The network element sends the first session.
  • the processing unit is further configured to generate the first session corresponding to the first IP address; the sending unit is further configured to send the first session to the forwarding plane network element session.
  • the receiving unit is further configured to receive a dial request from the forwarding plane network element, where the dial request includes a second IP address; and the sending unit is further configured to send a request to the forwarding plane network element.
  • the element sends a second session, the second session corresponds to the second IP address, and the second session is used to instruct the forwarding plane network element to advertise second routing information, and the destination address of the second routing information is
  • the second IP address and the second session are also used to instruct the forwarding plane network element to store the second session in the forwarding plane user table, so as to obtain an updated forwarding plane user table;
  • the processing The unit is further configured to store the second session in the control plane user table, so as to obtain an updated control plane user table; or, the sending unit is further configured to send a failure message to the forwarding plane network element , The failure message is used to indicate that the dialing request fails.
  • a network system which is applied to a layer 3 network in an open system interconnection OSI model.
  • the network system includes a control plane network element and a forwarding plane network element connected to each other, wherein the control The plane network element executes the method described in the second aspect, and the forwarding plane network element is used to execute the method described in the first aspect.
  • a computer-readable storage medium including instructions, which when executed on a computing device, cause the computing device to execute the method described in the first and second aspects.
  • an electronic device including a processor and a memory, where the processor executes the code in the memory and executes any optional manner as in the first aspect or the first aspect, or, the second aspect or The method described in any of the optional ways of the second aspect.
  • a computer program product is provided.
  • the network device executes any one of the above-mentioned first aspect or the first aspect, or the second aspect or the first aspect.
  • a method for forwarding messages provided by any of the optional methods.
  • a chip is provided.
  • the network device can execute any one of the above-mentioned optional methods of the first aspect or the first aspect, or any one of the second aspect or the second aspect.
  • a method for forwarding messages provided by an optional method.
  • FIG. 1 is a schematic structural diagram of an access network applied to a third layer network provided by this application;
  • FIG. 2 is a schematic structural diagram of a network system applied to a third-layer network provided by this application;
  • FIG. 3 is a schematic diagram of an interface between a forwarding plane network element and a control plane network element in a network system provided by the present application;
  • FIG. 4 is a schematic flowchart of a method for advertising routes provided by the present application.
  • FIG. 5 is a schematic structural diagram of a forwarding plane network element provided by the present application.
  • FIG. 6 is a schematic structural diagram of a control plane network element provided by this application.
  • Fig. 7 is a schematic structural diagram of an electronic device provided by the present application.
  • the access network here is the third layer network in the OSI model.
  • Fig. 1 is a schematic diagram of a network topology of an access network according to an embodiment of the present invention.
  • various types of user equipment 100 can be connected to a fixed broadband network (that is, the core network 300 in FIG. 1) through an access network 200.
  • a fixed broadband network that is, the core network 300 in FIG. 1
  • an access network 200 in,
  • the user equipment 100 connected to the access network 200 may be a mobile terminal, specifically a wireless electronic device that can be connected to a wireless access point AP, a wired electronic device that can be connected to a router, or both Connect to electronic devices that can be connected to the router.
  • the electronic devices can be smart phones, handheld processing devices, tablets, personal computers, mobile notebooks, virtual reality devices, integrated handhelds, in-vehicle devices, smart conference devices, and smart advertising devices. , Smart home appliances, wearable devices, etc., among them, wearable devices can also be called wearable smart devices, which are the general term for applying wearable technology to intelligently design daily wear and develop wearable devices, such as glasses and gloves , Watches, clothing and shoes, etc.
  • the wearable device can be a portable device that is directly worn on the body or integrated into the user's clothes or accessories.
  • Wearable devices can achieve powerful functions through software support, data interaction, and cloud interaction.
  • wearable smart devices include full-featured, large-sized, complete or partial functions that can be achieved without relying on smart phones, such as smart watches or smart glasses, and only focus on a certain type of application function, and need to cooperate with other devices such as smart phones.
  • the core network 300 connected to the access network is used to process various service requests sent by the user equipment 100 through the access network 200. To put it simply, the access network 200 is used to adapt to the diversity of the user equipment 100, and the core network 300 faces the consistent service requests processed by the access network 100, which greatly simplifies the network architecture and improves the core network 300.
  • the core network 300 may include multiple servers or systems that process user services. In FIG. 1, only authentication, authorization and accounting (Authentication, Authorization and Accounting, AAA) 310 is taken as an example for illustration.
  • the core network 300 may also include a web server (Web Sever), a DHCP server, a remote user dial authentication system (Remote Authentication Dial In User Service), etc., which are not specifically limited in this application.
  • the access network 200 may include one or more access points (Access Point, AP) 212, one or more routers (Router) 211, and one or more broadband network gateways (Broadband Network Gateway, BNG) 220.
  • AP Access Point
  • Router Router
  • BNG broadband network gateways
  • Figure 1 only uses 3 user equipment 100, 2 AP 212, 1 router 211, and 2 BNG 220 as examples for illustration.
  • the user equipment 100, AP 212, router 211, and BNG 220 The quantity can be determined according to the actual situation, and this application does not make a specific limit.
  • AP 212 is an access point that uses wireless devices to enter the wired network, and is a bridge between the wireless network and the wired network. It is usually connected to a wired switch or router, so that the wireless device connected to the AP can connect to the wired switch or the wired switch through the wireless AP.
  • the router is connected.
  • APs are mainly used in broadband homes, buildings, campuses, campuses, warehouses, factories and other places that require wireless networks.
  • AP includes not only simple wireless access points (wireless switches), but also a collective name for devices such as wireless routers (including wireless gateways and wireless bridges) with routing functions that can establish independent wireless home networking.
  • user equipment 2 can communicate with BNG1 through AP1
  • user equipment 3 can communicate with BNG2 through AP2.
  • Router 211 is a hardware device that connects two or more networks. It acts as a gateway between networks. It is used to connect non-TCP/IP networks to the Internet. It is a dedicated device that reads the address in each data packet and decides how to transmit it. Intelligent network equipment.
  • the router 122 is usually able to understand different forwarding protocols. For example, a certain local area network uses the Ethernet protocol and the Internet uses the TCP/IP protocol. Then the router between the Ethernet and the Internet can analyze the destination address of the data packet from the local area The address is converted to a TCP/IP address; then the data packet is sent to the TCP/IP address according to the best route according to the selected routing algorithm, and vice versa, so I won’t repeat it here.
  • the user equipment 1 can use the router 211 to communicate with the BNG1.
  • the BNG 220 is a link that connects users, networks, and services, and can perform unified management of services and traffic required by multiple user equipment 100. Specifically, when the user equipment 100 accesses the Internet for the first time, it will send a dial request to the BNG 220 through the access point AP 212 or the router 211, and the dial request includes the IP address of the user equipment 110.
  • the BNG 130 can authenticate the IP address, such as sending an authentication request to the authentication authorization and accounting (Authentication, Authorization and Accounting, AAA) 310 in the core network 300 to verify the authentication information of the user equipment 100, such as available network services , Bandwidth, usage, balance, etc., so as to obtain the authentication information of the user equipment 100, which will not be repeated here.
  • AAA authentication, Authorization and Accounting
  • BNG 130 will store the authentication information corresponding to the IP, such as the static IP address, bandwidth, and list of inaccessible addresses of the user equipment 100. In this way, when the user equipment 100 passes When the AP 212 or the router 211 sends a data message to the BNG 220, the BNG 220 will query the stored authentication information. If the authentication information includes the IP address of the user equipment 100, it proves that the user equipment 100 has been successfully authenticated, and the BNG 220 will The data message sent by the user equipment 100 is forwarded. The specific steps of forwarding are not repeated here. If the authentication information does not include the IP address of the user equipment 100, it proves that the user equipment 110 is not authenticated, and the BNG 220 will reject the data The message is forwarded.
  • the authentication information does not include the IP address of the user equipment 100, it proves that the user equipment 110 is not authenticated, and the BNG 220 will reject the data The message is forwarded.
  • the network system is used in the third layer network of the OSI model.
  • various types of user equipment 100 can access the core network 300 through the network system 400.
  • the user equipment 100 and the core network 300 may refer to the content described in the embodiment in FIG. 1, and details are not described herein again.
  • the internal unit modules of the network system 400 shown in FIG. 2 can also be divided into various types. Each module can be a software module, a hardware module, or a part of a software module and a part of a hardware module.
  • This application is not correct. It is restricted.
  • Figure 2 is an exemplary division method, which is not specifically limited in this application.
  • the network system 400 includes at least a forwarding plane network element (User Plane) 410 and a control plane network element (Control Plane) 420, where the forwarding plane network element 410 can be directly connected to the control plane network element 420, or It may be connected to the control plane network element 420 through a core router (Core Router, CR).
  • the network system 400 may also include the AP 212 and the router 211 described in the foregoing content, or may not include the AP 212 and the router 211 described in the foregoing content, which is not specifically limited in this application.
  • the network system 400 may be a "separated transfer and control" network, that is, separate the forwarding plane and the control plane of the BNG.
  • one or more BNGs in the foregoing content are separated into one or more control plane network elements 410 and one or more forwarding plane network elements 410.
  • one control plane network element can uniformly control and manage multiple BNGs.
  • BNG1 and BNG2 in FIG. 1 can become forwarding plane network element 1, forwarding plane network element 2 and control plane network element 1 as shown in FIG. 2 after the transfer and control are separated.
  • Fig. 2 is only used for illustration, and this application does not limit the number of forwarding plane network elements and control plane network elements.
  • the control plane network element 420 and the forwarding plane network element 410 are respectively described in detail below.
  • the forwarding plane network element 410 is mainly used to forward the data message sent by the user equipment 100 according to the session information (Session) delivered by the control plane network element 420.
  • session is used to save the authentication information that the user equipment corresponding to each IP address needs to save during data communication (ie, session) with the forwarding plane network element, such as the user name and MAC address of the user equipment corresponding to each IP address. , IP address, bandwidth, value-added services, inaccessible address list (List) and routing information, etc.
  • Routing information can store a path to a specific network address to guide the forwarding plane network element 1 to route and forward data packets, Routing information can refer to routing table (Routing Table), routing information base (Routing Information Base, RIB) and other information, such as destination address, network mask, output interface, next hop IP address, etc., this application does not limited.
  • routing table Routing Table
  • RIB routing information base
  • other information such as destination address, network mask, output interface, next hop IP address, etc.
  • the forwarding plane network element 410 can send the dialing request to the control plane network element 420, and the control plane network element 420 then dials The request is sent to AAA 310 for authentication.
  • AAA 310 has confirmed that the IP address has access to the network, it indicates that the dial-up is successful. If the IP address does not have the right to access, it indicates that the dial-up failed. After dialing is successful, AAA 310 can further confirm which services the IP address can use.
  • AAA 310 After the IP address uses network resource records and other information, AAA 310 will encapsulate the confirmed information into a dialing success message and return it For the control plane network element 420, if the control plane network element 420 receives the dialing success message returned by AAA 310, it can generate a session corresponding to the IP address according to the dialing success message, which means that the user equipment and the forwarding plane network element 410 have been established Session, and deliver the session to the forwarding plane network element 410. The forwarding plane network element 410 will store the corresponding session corresponding to the IP address of the user equipment.
  • a data message sent by the user equipment corresponding to the IP address it can be directly determined according to the session corresponding to the IP address of the user equipment whether the IP address corresponding to the user equipment has the authority to use the network, and whether it has been dialed successfully and is in the current state.
  • Authentication status whether you have the authority to use the value-added services in the network, the available network bandwidth, the routing information required to forward the data message sent by the user equipment, etc., without the need to repeatedly send authentication requests to the AAA through the control plane network element 420 , Verify various user information of the user device 100.
  • the forwarding plane network element 410 can be a virtualized network element or a physical device.
  • the forwarding plane network element 410 can be referred to as vUP for short, and it can be run on an X86 server.
  • a virtualized network function (Virtualized Network Functions, VNF) on the above; when the forwarding plane network element 410 is a physical device, the forwarding plane network element may be referred to as pUP for short, which may specifically be a traditional hardware network device. This application does not limit the specific form of the forwarding plane network element 410.
  • the control plane network element 420 is used for unified management of multiple forwarding plane network elements 410, and is mainly used for processing dialing requests and authentication requests, such as interacting with AAA 300 for user authentication, accounting, and authorization.
  • the control plane network element 420 is usually a virtualized network element, so it is also called vBNG-CP.
  • vBNG-CP can be implemented using cloud technology, and cloudized vBNG-CP can include multiple deployed on physical servers.
  • Virtual Machine (VM) the multiple VMs can be uniformly managed by a virtual machine monitor (Hypervisor) running on a physical server.
  • one vBNG-CP can manage multiple pUPs and vUPs.
  • FIG. 3 is a schematic diagram of the internal structure of the control plane network element 420 and the forwarding plane network element 410 in the network system 400 shown in FIG. 2, and the internal unit modules of the control plane network element 420 and the forwarding plane network element 410 shown in FIG. 3
  • each module may be a software module, a hardware module, or a part of a software module and a part of a hardware module, which is not limited in this application.
  • Figure 3 is an exemplary division method.
  • the control plane network element 420 stores a control plane user table 421, and the control plane user table 421 is used to store the session corresponding to the successfully authenticated IP address.
  • a forwarding plane user table 411 is stored in the forwarding plane network element 410, and the forwarding plane user table 411 is also used to store the session corresponding to the successfully authenticated IP address.
  • the sessions in the forwarding plane user table 411 are all issued by the control plane network element 420, that is, the control plane user table 421 of the control plane network element 420 stores all the forwarding plane network elements under its management. Session in the user table on the forwarding plane of 410. Taking FIG.
  • the control plane user table 421 of the control plane network element 1 includes the session in the forwarding plane user table of the forwarding plane network element 1 and the session in the forwarding plane user table of the forwarding plane network element 2. Therefore, when the user equipment 100 sends a dial request to the forwarding plane network element 1, the dial request will be sent to the control plane network element 420 for processing. If the dialing is successful, the session of the user equipment 100 will be stored in the control plane network element 1. In the control plane user table of, whether the user equipment 100 uses the forwarding plane network element 1 or the forwarding plane network element 2 to forward data packets, the forwarding plane network element 1 or the forwarding plane network element 2 can send the data message to the control plane network element.
  • control plane network element 420 and the forwarding plane network element 410 may perform data communication through three interfaces, so as to realize the switching back and forth between multiple APs connected to different BNGs while maintaining the uninterrupted state.
  • the three interfaces are the control interface 431, the service interface 432, and the management interface 433, respectively.
  • the service interface 432 can adopt the Generic Protocol Extension for VXLAN (VXLAN-GPE) interface.
  • the service interface 432 can encapsulate the dialing request It is sent to the control plane network element 420 for processing; the control interface 431 can use the Cloud Broadband Remote Access Server (BRAS) interface protocol standard draft (Control Plane and User Plane Separated Protocol, CUSP) interface, and the control plane network
  • BRAS Cloud Broadband Remote Access Server
  • CUSP Control Plane and User Plane Separated Protocol
  • the first session corresponding to the first IP address is issued; the management interface 433 adopts the Network Configuration Protocol (Netconf) interface, and the control plane network element 420 can issue part of the configuration, such as virtual, to the forwarding plane network element 410 through this interface.
  • the configuration data of the local area network (Virtual Local Area Network, VLAN), virtual private network (Virtual Private Network, VPN), etc., the forwarding plane network element 410 can also report some operating status to the control plane network element 420 through the management interface 433, such as Whether the forwarding plane network element 410 is currently in a fault state, whether the number of sessions stored in the forwarding plane user table 411 of the forwarding plane network element 410 reaches a threshold, and so on.
  • the above three interfaces are only used for illustration, and the control plane network element 420 and the forwarding plane network element 410 may also communicate data through more or fewer interfaces according to actual conditions, which is not specifically limited in this application.
  • the network system provided in this application applied to the layer 3 network of the OSI model, after the user equipment sends a dial request to the forwarding plane network element 410 and the dialing is successful, the control plane user table of the control plane network element 420 In the third layer network 420 of the OSI model, the session of the user equipment 100 will be stored, regardless of whether the user equipment sends a data message to any forwarding plane network element 410 in the network, even if the forwarding plane network element 410 of the data message is received The session of the user equipment is not stored in the user table of the forwarding plane, and the forwarding plane network element 410 that receives the data message can obtain the session corresponding to the user equipment 100 from the control plane network element 420, and the user does not need to dial again, so the whole process There will be no network disconnection, which solves the problem of switching back and forth between multiple APs connected to different BNGs when the user equipment 100 remains in an uninterrupted network state.
  • the present application provides a method for issuing routes.
  • the method is applied to the third layer network in the OSI model of open system interconnection.
  • the network includes control plane network elements and forwarding plane network elements connected to each other, where the control plane network element is the control plane network element 420 in the embodiment of FIG. 2, and the forwarding plane network element is the forwarding plane network in the embodiment of FIG.
  • the forwarding plane network element includes a forwarding plane user table
  • the control plane network element includes a control plane user table
  • the forwarding plane user table and the control plane user table are used to store the IP addresses of successful authentication
  • the forwarding plane user table is used to store the session information session corresponding to the authenticated IP address
  • the control plane user table is used to store the session information session corresponding to the authenticated IP address.
  • the forwarding plane network element receives a message, where the source IP address of the message is the first IP address.
  • the message is a data message.
  • the data packet may be sent by the user equipment 100 to the forwarding plane network element through the AP 212, and the first IP address may be the IP address of the user equipment 100.
  • the forwarding plane network element determines that the first IP address is not authenticated.
  • determining that the first IP address is not authenticated by the forwarding plane network element includes: the forwarding plane network element determining that the forwarding plane user table does not include the first session. It can be understood that, referring to the embodiment in FIG. 2, if the user equipment 100 corresponding to the first IP address has ever sent a dial request to the forwarding plane network element, the forwarding plane network element may send the dial request to the control plane network element, so that the control plane The network element sends the dial request to AAA 310 for authentication. After AAA 310 has confirmed whether the IP address has access rights, which services can be used, and the record of the IP address using network resources, etc., AAA 310 will return it to the control plane. The network element 420 indicates that the IP address is successfully dialed.
  • the control plane network element 420 can generate a first session corresponding to the first IP address according to the message of the successful dialing.
  • the first session corresponding to the first IP address will be stored in the forwarding plane. It is sent to the forwarding plane network element and stored in the forwarding plane user table at the same time.
  • the forwarding plane network element can forward the packets received later according to the first session; if the user corresponding to the first IP address
  • the device 100 has never sent a dial request to the forwarding plane network element, and the first session corresponding to the first IP address will not be stored in the forwarding plane user table. Therefore, the forwarding plane network element will send an authentication request to the control plane network element. That is, step S403 is executed.
  • the method further includes: the forwarding plane network element stores the first session in the The forwarding plane user table, so as to obtain the updated forwarding plane user table. It is understandable that after storing the first session in the user table of the forwarding plane, when the forwarding plane network element again receives a packet whose source IP address is the first IP address, it can directly determine the first session according to the user table of the forwarding plane. Whether the first IP address has the authority to use the network, whether it has been dialed successfully and is in an authenticated state, whether it has the authority to use the value-added services in the network, the available network bandwidth, the routing information required to forward the data message sent by the user equipment, etc. It is not necessary to repeatedly send an authentication request to the AAA through the control plane network element 420 to verify various information of the user equipment 100, thereby improving the message forwarding efficiency and improving the user experience.
  • the forwarding plane network element sends an authentication request to the control plane network element, and the control plane network element receives an authentication request from the forwarding plane network element, where the authentication request includes the first IP address.
  • the forwarding plane network element may send an authentication request to the control plane network element through the service interface 432 shown in FIG. 3.
  • the control plane network element sends the first session information session to the forwarding plane network element, and the forwarding plane network element receives the first session from the control plane network element, where the first session corresponds to the first IP address,
  • the first session is used to instruct the forwarding plane network element to release first routing information, and the destination address of the first routing information is the first IP address.
  • the sending of the first session by the control plane network element to the forwarding plane network element includes: the control plane network element queries the control plane user table according to the authentication request to obtain the The first session corresponding to the first IP address; the control plane network element sends the first session to the forwarding plane network element. That is, the control plane network element may determine whether the first IP address has been authenticated by determining whether the control plane user table includes the first session, and if it has been authenticated, step S404 is executed.
  • the control plane user table will The first session corresponding to the first IP address is stored. Therefore, if the control plane user table includes the first session, it means that the user equipment 100 corresponding to the first IP address has sent a dial request to the control plane network element, and the dialing is successful, the control plane network element can connect to the first IP address The forwarding plane network element sends the first session, so that the forwarding plane network element can publish the first route details according to the first session.
  • the control plane network element sending the first session to the forwarding plane network element includes: the control plane network element generates the first session corresponding to the first IP address according to the authentication request The first session; the control plane network element sends the first session to the forwarding plane network element. It is understandable that if the control plane user table does not include the first session, it means that the user equipment 100 corresponding to the first IP address has never sent a dial request to the control plane network element, or has sent a dial request but the dialing fails. Therefore, the specific implementation If the control plane user table does not include the first session, the control plane network element can send the dialing request of the first IP address to AAA for authentication. After the dialing is successful, the first session can be generated according to the dialing success message returned by AAA.
  • the forwarding plane network element receives a message with the first IP address as the source address again, it can directly forward the message sent by the first IP address according to the first session without repeating the authentication request to the control plane network element. Improve message forwarding efficiency and improve user experience.
  • control plane network element directly generates a dial request and interacts with AAA 310. In the case of a successful dialing, it generates the first session and sends it to the forwarding plane network element; or, the control plane network element can also directly The message is discarded without any processing. It should be understood that the above examples are only for illustration and not specifically limited.
  • control plane network element may send the first route details to the forwarding plane network element through the control interface 431 in the embodiment of FIG. 3. It is understandable that the control plane network element sends the first session corresponding to the first IP address to the forwarding plane network element, so that the forwarding plane network element can directly according to its own forwarding plane when it receives the data packet sent by the user equipment again.
  • the first session in the user table confirms whether the user equipment has dialed successfully and is in an authenticated state, without the need to confirm the authenticated state of the user equipment to the control plane network element again, which improves the efficiency of data message transmission and improves user experience.
  • the forwarding plane network element advertises first routing information according to the first session, and the destination address of the first routing information is the first IP address. It is understandable that after the forwarding plane network element publishes the first routing information, when the forwarding plane network element again receives a message with the source IP address being the first IP address, it can directly forward the message according to the first routing information. The specific implementation of how to route and forward messages will not be further described here.
  • the method further includes: the forwarding plane network element stores the first session in the The forwarding plane user table, so as to obtain the updated forwarding plane user table. It is understandable that after the forwarding plane user table is updated, when the forwarding plane network element again receives a message whose source IP address is the first IP address, it can directly determine whether the user is authenticated according to the first session, and then according to the information in the first session The first routing information forwards the message without sending an authentication request to the control plane network element again, which improves message forwarding efficiency and improves user experience.
  • the situation in step S401 may occur when the user equipment jumps between APs. That is, the message received by the forwarding plane network element includes: the forwarding plane network element receives the message sent by the user equipment through the network access point AP; or, the forwarding plane network element receives the user equipment In the packet sent through the router, the IP address of the user equipment is the first IP address. To put it simply, in step S401, the user equipment first connects to the second forwarding plane network element through the second AP, and sends a dial request to the second forwarding plane network element through the second AP.
  • the control in the network 400 The first session will be stored in the control plane user table of the network element of the second forwarding plane and the user table of the forwarding plane of the second forwarding plane.
  • steps S401 to S405 will be executed, and the first forwarding plane network element can obtain the user equipment from the control plane network element During this period, the user equipment does not need to dial again, so there will be no disconnection in the whole process, so as to realize that in the three-layer network, the user equipment is connected to different Switch back and forth between multiple APs of BNG.
  • the forwarding plane network element 2 connected to AP2 does not store the XXXX session, so the forwarding plane network element 2 cannot confirm whether the user equipment corresponding to XXXX is For the user equipment that has successfully dialed, the forwarding plane network element 2 can perform steps S401 to S405 to obtain the XXXX session from the control plane network element, so that the user equipment does not need to dial again after switching the AP, which improves the user experience.
  • the above trigger condition for the user equipment to switch from the second AP to the first AP includes: the second forwarding plane network element fails, or the user equipment is in a roaming state.
  • the second forwarding plane network element fails, or the user equipment is in a roaming state.
  • the north area is AP1
  • the south area is AP2.
  • the forwarding plane network element connected to AP2 can perform the above steps S401 to S405, so that the user can continue to use the network without redialing.
  • the network system provided by the present application may also send the data message sent by the user equipment to the forwarding plane network element 2 for processing when the forwarding plane network element 1 fails, and perform the above step S401-step S405, the entire process of failing over the forwarding plane network element does not require the user to re-dial, which improves the user experience.
  • the above examples are only for illustration and cannot constitute a specific limitation.
  • the method further includes: the control plane network element forwards to the second The surface network element sends an instruction to delete the first session.
  • the control plane network element forwards to the second The surface network element sends an instruction to delete the first session.
  • step S404 the control plane network element forwards to When the plane network element sends the first session, it can send an instruction to delete the first session to the second forwarding plane network element, thereby reducing the memory occupancy rate of the second forwarding plane network element and improving the security of the user session.
  • the forwarding plane network element may also receive a dial request sent by the user equipment, encapsulate the dial request and report it to the control plane network element. That is, the method further includes: the forwarding plane network element sends a dial request to the control plane network element, the dial request includes a second IP address; in the case that the dial request is successful, the forwarding The plane network element receives a second session from the control plane network element, the second session corresponds to the second IP address, and the second session is generated by the control plane network element in response to the dial request The forwarding plane network element publishes second routing information according to the second session, and the destination address of the second routing information is the second IP address; the forwarding plane network element stores the second session To the forwarding plane user table to obtain an updated forwarding plane user table; or, in the case that the dialing request fails, the forwarding plane network element receives a failure message from the control plane network element, the The failure message is used to indicate that the dialing request fails.
  • the IP address of user equipment 2 is XXXX.
  • user equipment 2 accesses AP1 for the first time, it can send a dial request to forwarding plane network element 1 to request Internet access, and forwarding plane network element 1 can dial the number After the request is encapsulated, it is reported to the control plane network element 1 through the service interface.
  • the control plane network element 1 can confirm to AAA 310 whether the user equipment 2 dialing is successful.
  • the control plane network element 1 can assign the IP address of the user equipment 2 to XXXX and The corresponding session is stored in the control plane user table, and the session and XXXX routing table entries are issued to the forwarding plane network element 1, so that the control plane network element 1 again receives other forwarding plane network elements (for example, the forwarding plane network element 2)
  • the session of XXXX can be directly issued to the forwarding plane network element without confirming to AAA 310 whether the user equipment 2 dials successfully, thereby improving communication efficiency and improving user experience.
  • the control plane user table 420 of the control plane network element 420 will store the session of the user equipment 100 Regardless of whether the user equipment sends a data message to any forwarding plane network element 410 in the network, even if the forwarding plane user table of the forwarding plane network element 410 that receives the data message does not store the session of the user equipment, the datagram is received
  • the forwarding plane network element 410 of the text can obtain the session corresponding to the user equipment 100 from the control plane network element 420, and the user does not need to dial again.
  • the entire AP switching process will not be disconnected, thus solving the first problem of the OSI model.
  • the user equipment 100 switches back and forth between multiple APs connected to different BNGs while maintaining an uninterrupted network state, which improves the user experience.
  • the forwarding plane network element 500 may be the forwarding plane network element 410 in the foregoing content, and the forwarding plane network element 500 is applied to the open system interconnection OSI model
  • the network includes a control plane network element and a forwarding plane network element that are connected to each other, and the forwarding plane network element 500 includes:
  • a receiving unit 510 the receiving unit is configured to receive a message, and the source IP address of the message is the first IP address;
  • a processing unit 520 configured to determine that the first IP address is not authenticated
  • a sending unit 530 the sending unit is configured to send an authentication request to the control plane network element, where the authentication request includes the first IP address;
  • the receiving unit 510 is further configured to receive first session information session from the control plane network element, where the first session responds to the authentication request, and the first session corresponds to the first IP address;
  • the sending unit 530 is further configured to publish first routing information according to the first session, and the destination address of the first routing information is the first IP address.
  • the forwarding plane network element 500 includes a forwarding plane user table, and the forwarding plane user table is used to store session information session corresponding to an authenticated IP address; the processing unit 520 is also used to determine The forwarding plane user table does not include the first session; the processing unit 520 is further configured to: after the receiving unit 510 receives the first session from the control plane network element, transfer the first session The session is stored in the forwarding plane user table, so as to obtain an updated forwarding plane user table.
  • the sending unit 530 is further configured to send a dial request to the control plane network element, where the dial request includes a second IP address;
  • the receiving unit 510 is further configured to receive The second session of the plane network element, where the second session corresponds to the second IP address, and the second session is generated by the control plane network element in response to the dial request;
  • the sending unit 530 It is also used to publish second routing information according to the second session, and the destination address of the second routing information is the second IP address;
  • the processing unit 520 is also used to store the second session in the The forwarding plane user table to obtain an updated forwarding plane user table; or, the receiving unit 510 is further configured to receive a failure message from the control plane network element, where the failure message is used to indicate the dial request fail.
  • control plane network element includes a control plane user table, and the control plane user table is used to store session information session corresponding to an authenticated IP address; the receiving unit 510 is also used to receive data from For the first session of the control plane network element, the first session is obtained by the control plane network element by querying the control plane user table according to the authentication request.
  • the receiving unit 510 is also used for the receiving unit, and is further used for receiving the first session from the control plane network element, where the first session is the control plane network element according to the The authentication request is generated.
  • the receiving unit 510 is further configured to receive a message sent by the user equipment through a network access point AP; or, the receiving unit 510 is further configured to receive a message sent by the user equipment through a router.
  • the IP address of the user equipment is the first IP address.
  • the message is a data message.
  • the forwarding plane network element provided in this application enables the user equipment to send a dial request through a certain forwarding plane network element in the network and the dialing is successful, the user equipment will be stored in the control plane user table of the control plane network element If the user equipment sends a data message to any forwarding plane network element in the network, even if the forwarding plane user table of the forwarding plane network element that receives the data message does not store the session of the user equipment, the datagram is received
  • the forwarding plane network element of the text can obtain the session corresponding to the user equipment from the control plane network element, and the user does not need to dial again, so there will be no network disconnection during the entire AP switching process, thus solving the third layer network of the OSI model. In the problem of switching back and forth between multiple APs connected to different BNGs while the user equipment is in an uninterrupted network state, the user experience is improved.
  • Fig. 6 is a schematic structural diagram of a control plane network element provided by the present application.
  • the control plane network element 600 may be the control plane network element 420 in the foregoing content.
  • the control plane network element 600 can be applied to the third layer network in the open system interconnection OSI model.
  • the network includes a control plane network element and a forwarding plane network element that are connected to each other, and the control plane network element includes:
  • a receiving unit 610 configured to receive an authentication request from the forwarding plane network element, where the authentication request includes a first IP address
  • the sending unit 620 is configured to send first session information session to the forwarding plane network element, the first session corresponds to the first IP address, and the first session is used to indicate the forwarding plane
  • the network element advertises first routing information, and the destination address of the first routing information is the first IP address.
  • control plane network element further includes a processing unit 630.
  • the control plane network element includes a control plane user table, and the control plane user table is used to store session information corresponding to an authenticated IP address.
  • the processing unit 630 is configured to query the control plane user table to obtain the first session corresponding to the first IP address according to the authentication request; the sending unit 620 is also configured to send The forwarding plane network element sends the first session.
  • the processing unit 630 is further configured to generate the first session corresponding to the first IP address according to the authentication request; the sending unit 620 is further configured to forward The surface network element sends the first session.
  • the receiving unit 610 is further configured to receive a dial request from the forwarding plane network element, where the dial request includes a second IP address; the sending unit 620 is further configured to forward The plane network element sends a second session, the second session corresponds to the second IP address, and the second session is used to instruct the forwarding plane network element to publish second routing information.
  • the address is the second IP address
  • the second session is also used to instruct the forwarding plane network element to store the second session in the forwarding plane user table, so as to obtain an updated forwarding plane user table
  • the processing unit 630 is further configured to store the second session in the control plane user table, so as to obtain an updated control plane user table; or, the sending unit 620 is further configured to forward the network Meta sends a failure message, where the failure message is used to indicate that the dialing request fails.
  • the control plane network element provided in this application enables the user equipment to send a dial request through a forwarding plane network element in the network and the dialing is successful, the user equipment will be stored in the control plane user table of the control plane network element If the user equipment sends a data message to any forwarding plane network element in the network, even if the forwarding plane user table of the forwarding plane network element that receives the data message does not store the session of the user equipment, the datagram is received
  • the forwarding plane network element of the text can obtain the session corresponding to the user equipment from the control plane network element, and the user does not need to dial again, so there will be no network disconnection during the entire AP switching process, thus solving the third layer network of the OSI model. In the problem of switching back and forth between multiple APs connected to different BNGs while the user equipment is in an uninterrupted network state, the user experience is improved.
  • FIG. 7 is a schematic structural diagram of an electronic device 700 provided by an embodiment of the application.
  • the electronic device 700 may be a forwarding plane network element or a control plane network element in the foregoing content.
  • the electronic device 700 includes a processor 710, a communication interface 720, a memory 730, and a bus 740.
  • the processor 710, the communication interface 720, and the memory 730 may be connected to each other through an internal bus 740, and may also communicate through other means such as wireless transmission.
  • the connection via a bus 740 is taken as an example.
  • the bus 740 may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus.
  • PCI Peripheral Component Interconnect
  • EISA Extended Industry Standard Architecture
  • the bus 740 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is used in FIG. 7, but it does not mean that there is only one bus or one
  • the processor 710 may be composed of one or more general-purpose processors, such as a central processing unit (CPU), or a combination of a CPU and a hardware chip.
  • the aforementioned hardware chip may be an application-specific integrated circuit (ASIC), a programmable logic device (Programmable Logic Device, PLD), or a combination thereof.
  • the above-mentioned PLD may be a complex programmable logic device (Complex Programmable Logic Device, CPLD), a field programmable logic gate array (Field-Programmable Gate Array, FPGA), a general array logic (Generic Array Logic, GAL), or any combination thereof.
  • the processor 710 executes various types of digital storage instructions, such as software or firmware programs stored in the memory 730, which enables the electronic device 700 to provide a wide variety of services.
  • the processor 710 may include a processing unit, which may implement processing functions by calling program codes in the memory 730, including the processing in FIG. 6
  • the functions described in unit 630 such as determining to query the control plane user table, determining that the first IP address has been authenticated, etc., can be specifically used to perform S403-step S404 and optional steps of the foregoing method, and can also be used to perform Figure 2- The other steps described in the embodiment of FIG. 4 will not be repeated here.
  • the processor 710 may include a processing unit, which may implement processing functions by calling program codes in the memory 730, including the processing in FIG. 5
  • the functions described in unit 520 such as querying the forwarding plane user table, determining that the first IP address is not authenticated, etc., can be specifically used to perform steps S401, S402, S405 and optional steps of the foregoing method, and can also be used to perform The other steps described in the embodiment of Fig. 2 to Fig. 4 will not be repeated here.
  • the memory 730 may include a volatile memory (Volatile Memory), such as a random access memory (Random Access Memory, RAM); the memory 730 may also include a non-volatile memory (Non-Volatile Memory), such as a read-only memory ( Read-Only Memory (ROM), Flash Memory (Flash Memory), Hard Disk Drive (HDD), or Solid-State Drive (SSD); the memory 730 may also include a combination of the above types.
  • volatile memory such as a random access memory (Random Access Memory, RAM
  • non-Volatile Memory such as a read-only memory ( Read-Only Memory (ROM), Flash Memory (Flash Memory), Hard Disk Drive (HDD), or Solid-State Drive (SSD)
  • ROM Read-Only Memory
  • Flash Memory Flash Memory
  • HDD Hard Disk Drive
  • SSD Solid-State Drive
  • the memory 730 may store the control plane user table in the embodiment of FIG. 3 and FIG.
  • the program code may be a code for determining that the first IP address has been authenticated, a code for processing a dial request, etc., and may also include other program codes for performing other steps described in the embodiments of Figures 2 to 4, which will not be performed here. Go into details.
  • the memory 730 may store the forwarding plane user table in the embodiment of FIG. 3 and FIG.
  • the session information session; the memory 730 may also store program codes.
  • the program code may be a code for determining that the first IP address is not authenticated, a code for generating an authentication request according to a received message, etc., and may also include other program codes for performing other steps described in the embodiments of FIGS. 2 to 4, I will not repeat them here.
  • the communication interface 720 may be a wired interface (such as an Ethernet interface), an internal interface (such as a high-speed serial computer expansion bus (Peripheral Component Interconnect express, PCIe) bus interface), a wired interface (such as an Ethernet interface), or a wireless interface (for example, a cellular network interface or the use of a wireless local area network interface) to communicate with other devices or modules.
  • a wired interface such as an Ethernet interface
  • PCIe serial computer expansion bus
  • PCIe Peripheral Component Interconnect express
  • Ethernet interface such as an Ethernet interface
  • a wireless interface for example, a cellular network interface or the use of a wireless local area network interface
  • FIG. 7 is only a possible implementation of the embodiment of the present application.
  • the electronic device may also include more or fewer components, which is not limited here.
  • the content not shown or described in the embodiments of the present application please refer to the relevant descriptions in the embodiments described in FIG. 2 to FIG. 6, which will not be repeated here.
  • the electronic device shown in FIG. 7 may also be a computer cluster composed of multiple servers, which is not specifically limited in this application.
  • the embodiment of the present application also provides a computer-readable storage medium that stores instructions in the computer-readable storage medium.
  • the computer-readable storage medium runs on a processor, the method flow shown in FIGS. 2 to 6 is implemented.
  • the embodiments of the present application also provide a computer program product.
  • the computer program product runs on a processor, the method flow shown in FIGS. 2 to 6 is realized.
  • the above-mentioned embodiments may be implemented in whole or in part by software, hardware, firmware or any other combination.
  • the above-mentioned embodiments may be implemented in the form of a computer program product in whole or in part.
  • the computer program product includes one or more computer instructions.
  • the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium.
  • the computer instructions may be transmitted from a website, computer, server, or data center.
  • the computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or a data center that includes one or more sets of available media.
  • the usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, and a magnetic tape), an optical medium (for example, a high-density digital video disc (Digital Video Disc, DVD)), or a semiconductor medium.
  • the semiconductor medium may be an SSD.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Databases & Information Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本申请提供了一种发布路由的方法，应用于开放式系统互联OSI模型中的第三层网络中，该网络包括相互连接的控制面网元和转发面网元，该方法包括：转发面网元接收源IP地址为第一IP地址的报文，转发面网元确定第一IP地址未认证；转发面网元向控制面网元发送包括所述第一IP地址的认证请求，转发面网元接收来自控制面网元的第一会话信息session；转发面网元根据第一session发布第一路由信息，第一路由信息的目的地址为第一IP地址。该方法可以解决OSI模型的第三层网络中，用户设备连接了不同BNG的多个AP或者路由器间来回切换的情况下，无法保持不断网的状态的问题。

Description

发布路由的方法、网元、系统及设备
本申请要求于2020年02月29日提交中国专利局、申请号为202010132858.9、申请名称为“发布路由的方法、网元、系统及设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及通信领域，尤其涉及发布路由的方法、网元、系统及设备。
背景技术
近些年来，网络技术发展迅猛，使得人们对其的依赖程度也在逐渐增加，互联网已经深入到千家万户，几乎所有的消费场所比如购物商场、餐厅、宾馆、咖啡厅等都为其顾客提供了无线服务，几乎所有的家庭、办公、学校等场所都覆盖了有线服务，上网已经成为了多数人学习、工作和生活的重要部分。
当用户使用WLAN或者路由器接入应用于开放式系统互联(Open System Interconnection，OSI)模型中的第三层网络中时，经常会出现在不同的网络接入点(Access Point，AP)或者路由器之间来回跳转的情况。然而当前OSI模型的第三层网络中，普遍可以实现用户在连接了同一台宽带网络网关(Broadband Network Gateway，BNG)的多个AP或者路由器之间来回切换的情况下，保持不断网的状态，而无法实现在连接了不同BNG的多个AP或者路由器间来回切换的情况下，保持不断网的状态，举例来说，当用户从与BNG1相连的AP1切换至与BNG2相连的AP2时，必须要断开与BNG1的链接，重新向BNG2发送拨号请求，这一过程导致用户出现短时间的断网，为用户带来不便。
发明内容
本申请提供了一种发布路由的方法、网元、系统及设备，用于解决OSI模型的第三层网络中，用户设备连接了不同BNG的多个AP或者路由器间来回切换的情况下，无法保持不断网的状态的问题。
第一方面，提供了一种发布路由的方法，应用于开放式系统互联OSI模型中的第三层网络中，该网络包括相互连接的控制面网元和转发面网元，该方法包括以下步骤：
转发面网元接收报文，该报文的源IP地址为第一IP地址；
转发面网元确定第一IP地址未认证；
转发面网元向控制面网元发送认证请求，其中，该认证请求包括第一IP地址；
转发面网元接收来自控制面网元的第一会话信息session，第一session响应于该认证请求，第一session对应第一IP地址；
转发面网元根据第一session发布第一路由信息，该第一路由信息的目的地址为第一IP地址。
上述方法中，当转发面网元接收到报文的源IP地址是未认证的第一IP地址时，转发面网元可以向控制面网元获取第一IP地址对应的第一session，在这个过程中，用户设备一直处于上线状态，而无需重新拨号，整个过程不会出现断网的情况，从而解决了用户设备 100在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换的问题。
在一实施例中，所述转发面网元包括转发面用户表，转发面用户表用于存储与已认证的IP地址对应的会话信息session；所述转发面网元确定所述第一IP地址未认证，包括：所述转发面网元确定所述转发面用户表不包括所述第一session；所述转发面网元接收来自所述控制面网元的所述第一session之后，所述方法还包括：所述转发面网元将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。
可以理解的，将第一session存储在转发面用户表后，当转发面网元再次接收到源IP地址为第一IP地址的报文时，可以直接根据转发面用户表中的第一session确定第一IP已认证，根据第一session中的第一路由信息对该报文进行转发，而无需再次向控制面网元发送第一IP地址的认证请求，提高报文转发效率，提高用户的使用体验。
在一实施例中，所述方法还包括：所述转发面网元向所述控制面网元发送拨号请求，所述拨号请求包括第二IP地址；在所述拨号请求成功的情况下，所述转发面网元接收来自所述控制面网元的第二session，所述第二session与所述第二IP地址对应，所述第二session是所述控制面网元响应于所述拨号请求而生成的；所述转发面网元根据所述第二session发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址；所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；或者，在所述拨号请求失败的情况下，所述转发面网元接收来自所述控制面网元的失败消息，所述失败消息用于指示所述拨号请求失败。
可以理解的，如果第二IP地址对应的用户设备100曾经向转发面网元发送过拨号请求，转发面网元可以将拨号请求发送至控制面网元，使得控制面网元将拨号请求发送AAA 310进行认证，当AAA 310确认过该IP地址是否有访问权，可否使用哪些服务，该IP地址使用网络资源的记录等等信息后，AAA 310将会返回给控制面网元420该IP地址拨号成功的消息，控制面网元420可以根据该拨号成功的消息生成第二IP地址对应的第二session，第二IP地址对应的第二session将被存储在转发面用户表中，并被下发至转发面网元，同时存储于转发面用户表中，这样就方便了会话期间的一些程序处理，使得转发面网元410每次接收到该IP地址对应的用户设备发送的数据报文时，都可以根据用户设备的IP地址对应的session，直接确定用户设备对应的IP地址是否有权限使用网络、是否已拨号成功处于已认证状态、是否有权限使用网络中的增值服务、可使用的网络带宽、转发该用户设备发送的数据报文所需的路由信息等等，而无需重复通过控制面网元420向AAA发送认证请求，验证用户设备100的各种用户信息。
在一实施例中，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；所述转发面网元接收来自所述控制面网元的所述第一session包括：所述转发面网元接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求查询所述控制面用户表而获得的。
可以理解的，如果第一IP地址对应的用户设备曾经通过其他控制面网元，向转发面网元发送过拨号请求，那么转发面网元中将存储有第一IP地址对应的第一session，因此，即使当前与用户设备连接的转发面网元中没有存储第一session，该转发面网元也可以通过控制面网元获取第一session，控制面网元可以查询控制面用户表，将第一session下发至转发 面往远处，而无需重复向AAA发送认证请求，提高报文转发效率，提高用户使用体验。
在一实施例中，所述转发面网元接收来自所述控制面网元的所述第一session包括：所述转发面网元接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求生成的。
可以理解的，如果控制面网元的控制面用户表中不包括第一session，则代表控制面网元没有接收过第一IP地址的拨号请求，控制面网元可以将第一IP地址的拨号请求发送至AAA进行认证，拨号成功后，即可根据AAA返回的拨号成功消息生成第一session，并将其存储在控制面用户表中，再下发至转发面网元。使得转发面网元再次接收到源地址为第一IP地址的报文时，可以直接根据第一session对第一IP地址发送的报文进行转发，而无需重复向控制面网元发送认证请求，提高报文转发效率，提高用户的使用体验。
需要说明的，如果控制面网元的控制面用户表中不包含第一session，控制面网元还可以根据业务需求进行不同方式的处理，比如，控制面网元还可以直接将报文丢弃处理等等，本申请不作具体限定。
在一实施例中，所述转发面网元接收报文包括：所述转发面网元接收所述用户设备通过网络接入点AP发送的报文；或者，所述转发面网元接收所述用户设备通过路由器发送的报文，其中，所述用户设备的IP地址为所述第一IP地址。
可以理解的，如果用户设备先通过第二AP与第二转发面网元连接，并通过第二AP向第二转发面网元发送了拨号请求，拨号成功后，控制面网元的控制面用户表和第二转发面网元的转发面用户表中将存储有第一session，接着用户设备与第一AP断开，连接了与第一转发面网元相连的第一AP，由于第一转发面网元的转发面用户表中并没有存储有第一session，因此将会执行步骤S401-步骤S405，第一转发面网元可以向控制面网元获取该用户设备的第一session，在这期间，用户设备无需重新拨号，因此整个过程不会出现断网的情况，从而实现了在三层网络中，用户设备在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换。
在一实施例中，所述报文为数据报文。
第二方面，提供了一种发布路由的方法，应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述方法包括：
所述控制面网元接收来自所述转发面网元的认证请求，所述认证请求包括第一IP地址；
所述控制面网元确定所述第一IP地址已认证；
所述控制面网元向所述转发面网元发送第一会话信息session，所述第一session对应所述第一IP地址，所述第一session用于指示所述转发面网元发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
上述方法中，当转发面网元接收到报文的源IP地址是未认证的第一IP地址时，转发面网元可以向控制面网元获取第一IP地址对应的第一session，再这个过程中，用户设备一直处于上线状态，而无需重新拨号，整个过程不会出现断网的情况，从而解决了用户设备100在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换的问题。
在一实施例中，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；所述控制面网元向所述转发面网元发送第一session， 包括：所述控制面网元根据所述认证请求，查询所述控制面用户表以获得与所述第一IP地址对应的所述第一session；所述控制面网元向所述转发面网元发送所述第一session。
可以理解的，如果第一IP地址对应的用户设备曾经通过其他控制面网元，向转发面网元发送过拨号请求，那么转发面网元中将存储有第一IP地址对应的第一session，因此，即使当前与用户设备连接的转发面网元中没有存储第一session，该转发面网元也可以通过控制面网元获取第一session，控制面网元可以查询控制面用户表，将第一session下发至转发面往远处，而无需重复向AAA发送认证请求，提高报文转发效率，提高用户使用体验。
在一实施例中，所述控制面网元向所述转发面网元发送第一session，包括：所述控制面网元生成与所述第一IP地址对应的所述第一session；所述控制面网元向所述转发面网元发送所述第一session。
可以理解的，如果控制面网元的控制面用户表中不包括第一session，则代表控制面网元没有接收过第一IP地址的拨号请求，控制面网元可以将第一IP地址的拨号请求发送至AAA进行认证，拨号成功后，即可根据AAA返回的拨号成功消息生成第一session，并将其存储在控制面用户表中，再下发至转发面网元。使得转发面网元再次接收到源地址为第一IP地址的报文时，可以直接根据第一session对第一IP地址发送的报文进行转发，而无需重复向控制面网元发送认证请求，提高报文转发效率，提高用户的使用体验。
需要说明的，如果控制面网元的控制面用户表中不包含第一session，控制面网元还可以根据业务需求进行不同方式的处理，比如，控制面网元还可以直接将报文丢弃处理等等，本申请不作具体限定。
在一实施例中，所述转发面网元包括转发面用户表，所述转发面用户表用于存储与已认证的IP地址对应的session，所述第一session还用于指示所述转发面网元将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。
可以理解的，将第一session存储在转发面用户表后，当转发面网元再次接收到源IP地址为第一IP地址的报文时，可以直接根据转发面用户表中的第一session确定第一IP已认证，根据第一session中的第一路由信息对该报文进行转发，而无需再次向控制面网元发送第一IP地址的认证请求，提高报文转发效率，提高用户的使用体验。
在一实施例中，所述方法还包括：所述控制面网元接收来自所述转发面网元的拨号请求，所述拨号请求包括第二IP地址；在所述拨号请求成功的情况下，所述控制面网元向所述转发面网元发送第二session，所述第二session与所述第二IP地址对应，所述第二session用于指示所述转发面网元发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址，所述第二session还用于指示所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；所述控制面网元将所述第二session存储至所述控制面用户表，从而获得更新后的控制面用户表；或者，在所述拨号请求失败的情况下，所述控制面网元向所述转发面网元发送失败消息，所述失败消息用于指示所述拨号请求失败。
可以理解的，如果第二IP地址对应的用户设备100曾经向转发面网元发送过拨号请求，转发面网元可以将拨号请求发送至控制面网元，使得控制面网元将拨号请求发送AAA 310进行认证，当AAA 310确认过该IP地址是否有访问权，可否使用哪些服务，该IP地址使 用网络资源的记录等等信息后，AAA 310将会返回给控制面网元420该IP地址拨号成功的消息，控制面网元420可以根据该拨号成功的消息生成第二IP地址对应的第二session，第二IP地址对应的第二session将被存储在转发面用户表中，并被下发至转发面网元，同时存储于转发面用户表中，这样就方便了会话期间的一些程序处理，使得转发面网元410每次接收到该IP地址对应的用户设备发送的数据报文时，都可以根据用户设备的IP地址对应的session，直接确定用户设备对应的IP地址是否有权限使用网络、是否已拨号成功处于已认证状态、是否有权限使用网络中的增值服务、可使用的网络带宽、转发该用户设备发送的数据报文所需的路由信息等等，而无需重复通过控制面网元420向AAA发送认证请求，验证用户设备100的各种用户信息。
在一实施例中，所述报文是用户设备通过网络接入点AP向转发面网元发送的报文；或者，所述报文是用户设备通过路由器向转发面网元发送的报文，其中，所述用户设备的IP地址为所述第一IP地址。
可以理解的，如果用户设备先通过第二AP与第二转发面网元连接，并通过第二AP向第二转发面网元发送了拨号请求，拨号成功后，控制面网元的控制面用户表和第二转发面网元的转发面用户表中将存储有第一session，接着用户设备与第一AP断开，连接了与第一转发面网元相连的第一AP，由于第一转发面网元的转发面用户表中并没有存储有第一session，因此将会执行步骤S401-步骤S405，第一转发面网元可以向控制面网元获取该用户设备的第一session，在这期间，用户设备无需重新拨号，因此整个过程不会出现断网的情况，从而实现了在三层网络中，用户设备在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换。
在一实施例中，所述报文为数据报文。
第三方面，提供了一种转发面网元，应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述转发面网元包括：
接收单元，所述接收单元用于接收报文，所述报文的源IP地址为第一IP地址；
处理单元，所述处理单元用于确定所述第一IP地址未认证；
发送单元，所述发送单元用于向所述控制面网元发送认证请求，其中，所述认证请求包括所述第一IP地址；
所述接收单元，还用于接收来自所述控制面网元的第一会话信息session，所述第一session响应于所述认证请求，所述第一session对应所述第一IP地址；
所述发送单元，还用于根据所述第一session发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
在一实施例中，所述转发面网元包括转发面用户表，所述转发面用户表用于存储与已认证的IP地址对应的会话信息session；所述处理单元，还用于确定所述转发面用户表不包括所述第一session；所述处理单元，还用于在所述接收单元接收来自所述控制面网元的所述第一session之后，将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。
在一实施例中，所述发送单元，还用于向所述控制面网元发送拨号请求，所述拨号请求包括第二IP地址；所述接收单元，还用于接收来自所述控制面网元的第二session，所述 第二session与所述第二IP地址对应，所述第二session是所述控制面网元响应于所述拨号请求而生成的；所述发送单元，还用于根据所述第二session发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址；所述处理单元，还用于将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；或者，所述接收单元，还用于接收来自所述控制面网元的失败消息，所述失败消息用于指示所述拨号请求失败。
在一实施例中，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；所述接收单元，还用于接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求查询所述控制面用户表而获得的。
在一实施例中，所接收单元，还用于接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求生成的。
第四方面，提供了一种控制面网元，应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述控制面网元包括：
接收单元，所述接收单元用于接收来自所述转发面网元的认证请求，所述认证请求包括第一IP地址；
发送单元，所述发送单元用于向所述转发面网元发送第一会话信息session，所述第一session对应所述第一IP地址，所述第一session用于指示所述转发面网元发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
在一实施例中，所述控制面网元还包括处理单元，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；所述处理单元，用于根据所述认证请求，查询所述控制面用户表以获得与所述第一IP地址对应的所述第一session；所述发送单元，还用于向所述转发面网元发送所述第一session。
在一实施例中，所述处理单元，还用于生成与所述第一IP地址对应的所述第一session；所述发送单元，还用于向所述转发面网元发送所述第一session。
在一实施例中，所述接收单元，还用于接收来自所述转发面网元的拨号请求，所述拨号请求包括第二IP地址；所述发送单元，还用于向所述转发面网元发送第二session，所述第二session与所述第二IP地址对应，所述第二session用于指示所述转发面网元发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址，所述第二session还用于指示所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；所述处理单元，还用于将所述第二session存储至所述控制面用户表，从而获得更新后的控制面用户表；或者，所述发送单元，还用于向所述转发面网元发送失败消息，所述失败消息用于指示所述拨号请求失败。
第五方面，提供了一种网络系统，应用于开放式系统互联OSI模型中的第三层网络中，所述网络系统包括相互连接的控制面网元和转发面网元，其中，所述控制面网元执行如第二方面描述的方法，所述转发面网元用于执行如第一方面描述的方法。
第六方面，提供了一种计算机可读存储介质，包括指令，当所述指令在计算设备上运行时，使得所述计算设备执行如第一方面和第二方面描述的方法。
第七方面，提供了一种电子设备，包括处理器和存储器，所述处理器执行所述存储器 中的代码执行如第一方面或第一方面任一种可选方式，或者，第二方面或第二方面任一种可选方式描述的方法。
第八方面，提供了一种计算机程序产品，当该计算机程序产品在网络设备上运行时，使得网络设备执行上述第一方面或第一方面任一种可选方式，或者，第二方面或第二方面任一种可选方式所提供的转发报文的方法。
第九方面，提供了一种芯片，当该芯片在网络设备上运行时，使得网络设备执行上述第一方面或第一方面任一种可选方式，或者，第二方面或第二方面任一种可选方式所提供的转发报文的方法。
附图说明
为了更清楚地说明本申请实施例或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍。
图1是本申请提供的一种应用于第三层网络的接入网的结构示意图；
图2是本申请提供的一种应用于第三层网络的网络系统的结构示意图；
图3是本申请提供的一种网络系统中转发面网元和控制面网元之间接口示意图；
图4是本申请提供的一种发布路由的方法的流程示意图；
图5是本申请提供的一种转发面网元的结构示意图；
图6是本申请提供的一种控制面网元的结构示意图；
图7是本申请提供的一种电子设备的结构示意图。
具体实施方式
下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行描述，显然，所描述的实施例仅仅是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
随着互联网应用和智能终端的快速发展，用户可以通过各种智能终端或者个人电脑，例如智能手机、平板、电脑等，随时随地访问互联网进行办公、交流和娱乐活动等等。一般来说，用户往往通过接入网与核心网(Core Network)进行通信，使用核心网的各种业务，其中，这里的接入网为OSI模型中的第三层网络。
图1是根据本发明实施例的一种接入网的网络拓扑示意图。如图1所示，各种类型的用户设备100可以通过接入网200接入到固定宽带网络(即图1中的核心网300)中。其中，
与接入网200相连的用户设备100可以是移动终端，具体可以是能够与无线接入点AP连接的无线电子设备，也可以是能够与路由器连接的有线电子设备，还可以是既能够与AP连接又能够与路由器连接的电子设备，电子设备具体可以是智能手机、掌上处理设备、平板电脑、个人电脑、移动笔记本、虚拟现实设备、一体化掌机、车载设备、智能会议设备、智能广告设备、智能家电、可穿戴设备等等，其中，可穿戴设备也可以称为穿戴式智能设备，是应用穿戴式技术对日常穿戴进行智能化设计、开发出可以穿戴的设备的总称，如眼 镜、手套、手表、服饰及鞋等。可穿戴设备可以是直接穿在身上，或是整合到用户的衣服或配件的一种便携式设备。可穿戴设备可以通过软件支持以及数据交互、云端交互来实现强大的功能。广义穿戴式智能设备包括功能全、尺寸大、可不依赖智能手机实现完整或者部分的功能，例如：智能手表或智能眼镜等，以及只专注于某一类应用功能，需要和其它设备如智能手机配合使用，如各类进行体征监测的智能手环、智能首饰等。应理解，上述举例仅用于说明，并不能构成具体限定。
与接入网相连的核心网300用于处理用户设备100通过接入网200发送的各种业务请求。简单来说，接入网200用来适应用户设备100的多样性，核心网300则面对接入网100处理后的一致的业务请求，极大的简化了网络体系结构，进而提高核心网300的业务处理能力。需要说明的，核心网300可以包括多个处理用户业务的服务器或者系统，图1中仅以认证授权和计费(Authentication,Authorization and Accounting，AAA)310为例进行了举例说明，具体实现中，核心网300还可以包括网络服务器(Web Sever)、DHCP服务器、远程用户拨号认证系统(Remote Authentication Dial In User Service)等等，本申请不作具体限定。
下面对接入网200的网络结构进行简要说明。由图1可知，接入网200可以包括一个或者多个接入点(Access Point，AP)212、一个或者多个路由器(Router)211以及一个或者多个宽带网络网关(Broadband Network Gateway，BNG)220。其中，图1仅仅以3个用户设备100，2个AP 212、1个路由器211以及2个BNG 220为例进行了举例说明，具体实现中，用户设备100、AP 212、路由器211以及BNG 220的数量可以根据实际情况确定，本申请不作具体限定。
AP 212是使用无线设备进入有线网络的接入点，是无线网和有线网之间的桥梁，通常接入在有线交换机或者路由器上，使得接入AP的无线设备可以通过无线AP与有线交换机或者路由器相连。AP主要用于宽带家庭、大楼内部、校园内部、园区内部以及仓库、工厂等需要无线网络的地方。AP不仅包括单纯性的无线接入点(无线交换机)，也可以是带路由功能的、可以建立独立无线家庭组网的无线路由器(包含无线网关、无线网桥)等类设备的统称。图1中，用户设备2可以通过AP1与BNG1进行通信，用户设备3可以通过AP2与BNG2进行通信。
路由器211是连接两个或多个网络的硬件设备，在网络间起网关作用，用于把非TCP/IP网络连接到因特网上，是读取每一个数据包中的地址然后决定如何传送的专用智能网络设备。路由器122通常能够理解不同的转发协议，例如某个局域网使用以太网协议，因特网使用TCP/IP协议，那么以太网和因特网之间的路由器可以分析局域网传来的数据包的目的地址，把局域网的地址转换为TCP/IP地址；再根据选定的路由算法把数据包按最佳路线传送到该TCP/IP地址，反之同理，这里不再赘述。图1中，用户设备1可以用过路由器211与BNG1进行通信。
BNG 220是连接用户、网络和业务的纽带，可以对多个用户设备100所需的业务和流量进行统一管理。具体地，用户设备100第一次上网时，将会通过接入点AP 212或者路由器211向BNG 220发送拨号请求，该拨号请求中包含用户设备110的IP地址。BNG 130可以对该IP地址进行认证，比如向核心网300中的认证授权和计费(Authentication, Authorization and Accounting，AAA)310发送认证请求，验证用户设备100的认证信息，比如可使用的网络服务、带宽、用量和余额等等，从而获得用户设备100的认证信息，这里不展开赘述。在该IP地址认证成功的情况下，BNG 130将会存储该IP对应的认证信息，比如用户设备100的静态IP地址、带宽、不可访问地址清单(List)等等，这样，当用户设备100通过AP 212或者路由器211向BNG 220发送数据报文时，BNG 220将会查询存储好的认证信息，如果该认证信息中包括用户设备100的IP地址，证明用户设备100已经认证成功，BNG 220将会对用户设备100发送的数据报文进行转发，转发的具体步骤这里不再展开赘述，如果该认证信息中不包括用户设备100的IP地址，证明用户设备110未认证，BNG 220将拒绝对该数据报文进行转发。
可以理解的，在图1所示的OSI模型的第三层网络的接入网系统中，用户212或者路由器211向某一台BNG 220发送拨号请求并拨号成功后，其拨号成功的认证信息将会存储在该台BNG中。但是，由于每台BNG 200只存储向自己发送拨号请求且拨号成功的用户设备的IP地址，而不会存储向其他BNG发送拨号请求且拨号成功的用户设备的IP地址，因此，图1所示的网络系统中，用户设备无法实现在保在连接了不同BNG的多个AP间来回切换的情况下，保存不断网的状态。举例来说，如果图1中的用户设备2已经通过AP1向BNG1发送了拨号请求并拨号成功后，突然与AP1之间的连接状态断开而与AP2进行了连接，此时，虽然用户设备2已经通过BNG1获得了进行了认证，并且认证信息已经存储在了BNG1中，但由于AP2与BNG2相连，而BNG2中并没有存储AP2认证成功的已认证信息，因此在该情况下，用户设备2需要重新向BNG2发送拨号请求，BNG2再次认证成功后，用户设备2才可以重新上网，这期间用户设备2一直处于断网状态，为用户带来不便。
为了解决上述OSI模型的第三层网络中，用户设备无法实现在保在连接了不同BNG的多个AP或者路由器间来回切换的情况下，保持不断网的状态的问题，本申请提供了一种网络系统，应用于OSI模型种的第三层网络中。如图2所示，各种类型的用户设备100可以通过该网络系统400接入到核心网300中。其中，用户设备100和核心网300可以参考图1实施例描述的内容，这里不再展开赘述。需要说明的，图2所示的网络系统400的内部的单元模块也可以有多种划分，各个模块可以是软件模块，也可以是硬件模块，也可以是部分软件模块部分硬件模块，本申请不对其进行限制。图2是一种示例性的划分方式，本申请不作具体限定。
如图2所示，该网络系统400至少包括转发面网元(User Plane)410以及控制面网元(Control Plane)420，其中，转发面网元410可以与控制面网元420直接连接，也可以通过核心路由器(Core Router，CR)与控制面网元420连接。应理解，该网络系统400还可以包括前述内容中描述的AP 212和路由器211，也可以不包括前述内容中描述的AP 212和路由器211，本申请不作具体限定。其中，网络系统400可以是“转控分离”的网络，也即是将BNG的转发面与控制面分离。简单来说，就是将前述内容中的一个或者多个BNG分离为一个或者多个控制面网元410以及一个或者多个转发面网元410，其中，一个控制面网元可以统一控制和管理多个转发面网元，使得转发面网元410在控制面网元420的管理下， 可以对用户设备发送的数据报文进行转发。比如，图1中的BNG1和BNG2在经过转控分离后，可以变为如图2所示的转发面网元1、转发面网元2以及控制面网元1。可以理解的，图2仅用于举例说明，本申请不对转发面网元和控制面网元的数量进行限制。下面分别对控制面网元420和转发面网元410进行详细说明。
转发面网元410主要用于根据控制面网元420下发的会话信息(Session)，对用户设备100发送的数据报文进行转发。其中，session用于保存每一个IP地址对应的用户设备在与转发面网元进行数据通信(即会话)期间需要保存的认证信息，比如保存每一个IP地址对应的用户设备的用户名、MAC地址、IP地址、带宽、增值业务、不可访问地址清单(List)以及路由信息等等，路由信息可以存储有指向特定网络地址的路径，用于指导转发面网元1对数据报文进行路由转发，路由信息可以是指路由表(Routing Table)、路由择域信息库(Routing Information Base，RIB)等信息，比如目的地址、网络掩码、输出接口、下一跳的IP地址等等，本申请不作限定。
因此，当用户设备第一次向转发面网元410发送某一IP地址的拨号请求后，转发面网元410可以将拨号请求上送至控制面网元420，控制面网元420再将拨号请求发送至AAA 310进行认证，当AAA 310确认过该IP地址拥有该网络的访问权，则表示拨号成功，如果该IP地址没有访问权，则表示拨号失败。拨号成功后，AAA 310还可以进一步确认该IP地址可以使用哪些服务，该IP地址使用网络资源的记录等等信息后，AAA 310将会把确认好的信息封装成拨号成功消息，并将其返回给控制面网元420，如果控制面网元420接收到了AAA 310返回的拨号成功消息，可以根据该拨号成功消息生成该IP地址对应的session，即代表用户设备与该转发面网元410已经建立会话，并将session下发至转发面网元410中，转发面网元410将存储有该用户设备对应IP地址的对应session，这样就方便了会话期间的一些程序处理，使得转发面网元410每次接收到该IP地址对应的用户设备发送的数据报文时，都可以根据用户设备的IP地址对应的session，直接确定用户设备对应的IP地址是否有权限使用网络、是否已拨号成功处于已认证状态、是否有权限使用网络中的增值服务、可使用的网络带宽、转发该用户设备发送的数据报文所需的路由信息等等，而无需重复通过控制面网元420向AAA发送认证请求，验证用户设备100的各种用户信息。
转发面网元410可以是虚拟化网元，也可以是物理设备，当转发面网元410是虚拟化网元的情况下，转发面网元410可以简称为vUP，具体可以是运行在X86服务器上的一个虚拟化网络功能(Virtualized Network Functions,VNF)；当转发面网元410是物理设备的情况下，转发面网元可以简称为pUP，具体可以是一个传统硬件网络设备。本申请不对转发面网元410的具体形态进行限定。
控制面网元420则用于对多个转发面网元410进行统一管理，主要用于负责拨号请求和认证请求的处理，比如与AAA 300交互进行用户认证、计费和授权等等。控制面网元420通常为虚拟化网元，因此又称为vBNG-CP，具体实现中，vBNG-CP可以采用云化技术实现，云化的vBNG-CP可以包括部署在物理服务器上的多个虚拟机(Virtual Machine,VM)，该多个VM可以由运行在物理服务器上的虚拟机监视器(Hypervisor)进行统一管理。其中，一个vBNG-CP可以管理多个pUP和vUP。
图3是图2所示的网络系统400中的控制面网元420和转发面网元410的内部结构示 意图，图3所示的控制面网元420和转发面网元410的内部的单元模块也可以有多种划分，各个模块可以是软件模块，也可以是硬件模块，也可以是部分软件模块部分硬件模块，本申请不对其进行限制。图3是一种示例性的划分方式。
如图3所示，控制面网元420存储有控制面用户表421，该控制面用户表421用于存储认证成功的IP地址对应的session。转发面网元410中存储有转发面用户表411，该转发面用户表411也用于存储认证成功的IP地址对应的session。但是，转发面用户表411中的session全部是由控制面网元420下发的，也就是说，控制面网元420的控制面用户表421中存储了全部在其管理下的转发面网元410的转发面用户表中的session。以图2为例，控制面网元1的控制面用户表421包括了转发面网元1的转发面用户表中的session以及转发面网元2的转发面用户表中的session。因此，当用户设备100向转发面网元1发送了拨号请求后，该拨号请求将发送至控制面网元420进行处理，如果拨号成功，该用户设备100的session将存储在控制面网元1的控制面用户表中，用户设备100无论是使用转发面网元1或者是转发面网元2进行数据报文的转发，转发面网元1或者转发面网元2都可以向控制面网元1获取用户设备100的session，再根据用户设备100的session中的路由信息对数据报文进行转发，而无需重新拨号，从而解决了OSI模型的第三层网络中，用户设备在保在连接了不同BNG的多个AP间来回切换的情况下，保持不断网的状态的问题。
具体实现中，控制面网元420和转发面网元410可以通过三个接口进行数据通信，以实现上述保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换。这三个接口分别为控制接口431、业务接口432以及管理接口433。其中，业务接口432可以采用可扩展局域网通用扩展协议(Generic Protocol Extension for VXLAN,VXLAN-GPE)接口，当转发面网元410接收到用户的拨号请求时，可以通过该业务接口432将拨号请求封装上送至控制面网元420处理；控制接口431可以采用云化宽带接入服务器(Broadband Remote Access Server,BRAS)的接口协议标准草案(Control Plane and User Plane Separated Protocol，CUSP)接口，控制面网元420在接收到转发面网元410通过业务接口432发送的拨号请求后，如果该拨号请求中的第一IP地址认证成功，控制面网元420可以通过该控制接口431向转发面网元410下发第一IP地址对应的第一session；管理接口433采用网络配置协议(Network Configuration Protocol,Netconf)接口，控制面网元420可以通过该接口向转发面网元410下发部分配置，比如虚拟局域网(Virtual Local Area Network，VLAN)、虚拟专用网络(Virtual Private Network，VPN)的配置数据等等，转发面网元410也可以通过该管理接口433向控制面网元420上报一些运行状态，比如转发面网元410当前是否处于故障状态、转发面网元410的转发面用户表411存储的session数量是否达到阈值等等。应理解，上述3个接口仅用于举例说明，控制面网元420和转发面网元410之间还可以根据实际情况，通过更多或者更少的接口进行数据通信，本申请不作具体限定。
可以理解的，本申请提供的应用于OSI模型的第三层网络中的网络系统，在用户设备向转发面网元410发送了拨号请求并拨号成功后，控制面网元420的控制面用户表OSI模型的第三层网络中420中将存储有用户设备100的session，无论用户设备将数据报文发送给网络中的任意转发面网元410，即使接收到数据报文的转发面网元410的转发面用户表中没有存储该用户设备的session，接收到数据报文的转发面网元410都可以向控制面网元 420获取该用户设备100对应的session，用户无需重新拨号，因此整个过程不会出现断网的情况，从而解决了用户设备100在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换的问题。
下面结合附图，对本申请提供的上述网络系统如何解决OSI模型的第三层网络中，用户设备保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换的问题，进行详细介绍。
如图4所示，本申请提供了一种发布路由的方法，该方法应用于开放式系统互联OSI模型中的第三层网络中，比如可以应用于图2所示的网络系统400，所述网络包括相互连接的控制面网元和转发面网元，这里的控制面网元即为图2实施例中的控制面网元420，转发面网元即为图2实施例中的转发面网元410，其中，所述转发面网元包括转发面用户表，所述控制面网元包括控制面用户表，所述转发面用户表以及所述控制面用户表用于存储认证成功的IP地址对应的会话信息session，所述转发面用户表用于存储与已认证的IP地址对应的会话信息session，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session。该方法可以包括以下步骤：
S401：转发面网元接收报文，其中，所述报文的源IP地址为第一IP地址。
在一实施例中，所述报文为数据报文。具体地，该数据报文可以是用户设备100通过AP 212向转发面网元发送的，第一IP地址可以是用户设备100的IP地址。
S402：转发面网元确定第一IP地址未认证。
具体实现中，所述转发面网元确定所述第一IP地址未认证，包括：所述转发面网元确定所述转发面用户表不包括所述第一session。可以理解的，参考图2实施例可知，如果第一IP地址对应的用户设备100曾经向转发面网元发送过拨号请求，转发面网元可以将拨号请求发送至控制面网元，使得控制面网元将拨号请求发送AAA 310进行认证，当AAA 310确认过该IP地址是否有访问权，可否使用哪些服务，该IP地址使用网络资源的记录等等信息后，AAA 310将会返回给控制面网元420该IP地址拨号成功的消息，控制面网元420可以根据该拨号成功的消息生成第一IP地址对应的第一session，第一IP地址对应的第一session将被存储在转发面用户表中，并被下发至转发面网元，同时存储于转发面用户表中，转发面网元可以根据该第一session对之后收到的报文进行转发；如果第一IP地址对应的用户设备100从未向转发面网元发送过拨号请求，转发面用户表中将不会存储有第一IP地址对应的第一session，因此转发面网元将会向控制面网元发送认证请求，即执行步骤S403。
在一实施例中，所述转发面网元接收来自所述控制面网元的所述第一session之后，所述方法还包括：所述转发面网元将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。可以理解的，将第一session存储在转发面用户表后，当转发面网元再次接收到源IP地址为第一IP地址的报文时，可以直接根据转发面用户表中的第一session确定第一IP地址是否有权限使用网络、是否已拨号成功处于已认证状态、是否有权限使用网络中的增值服务、可使用的网络带宽、转发该用户设备发送的数据报文所需的路由信息等等，而无需重复通过控制面网元420向AAA发送认证请求，验证用户设备100的各种信息，从而提高报文转发效率，提高用户的使用体验。
S403：转发面网元向控制面网元发送认证请求，控制面网元接收来自转发面网元的认证请求，其中，所述认证请求包括所述第一IP地址。具体实现中，转发面网元可以通过图3所示的业务接口432向控制面网元发送认证请求。
S404：控制面网元向转发面网元发送第一会话信息session，转发面网元接收来自所述控制面网元的第一session，其中，所述第一session对应所述第一IP地址，所述第一session用于指示所述转发面网元发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
在一实施例中，所述控制面网元向所述转发面网元发送第一session，包括：所述控制面网元根据所述认证请求，查询所述控制面用户表以获得与所述第一IP地址对应的所述第一session；所述控制面网元向所述转发面网元发送所述第一session。也就是说，控制面网元可以通过确定所述控制面用户表是否包括所述第一session，从而确定第一IP地址是否已认证，在已认证的情况下，执行步骤S404。可以理解的，参考前述内容可知，如果第一IP地址对应的用户设备100曾经向控制面网元管理的任何转发面网元发送过拨号请求，且拨号成功的情况下，控制面用户表中将存储有该第一IP地址对应的第一session。因此，如果控制面用户表包括第一session，则表示第一IP地址对应的用户设备100曾经向控制面网元发送过拨号请求，且拨号成功，控制面网元可以向与第一IP地址相连的转发面网元发送第一session，使得转发面网元可以根据第一session发布第一路由明细。
在一实施例中，所述控制面网元向所述转发面网元发送第一session，包括：所述控制面网元根据所述认证请求，生成与所述第一IP地址对应的所述第一session；所述控制面网元向所述转发面网元发送所述第一session。可以理解的，如果控制面用户表不包括第一session，则表示第一IP地址对应的用户设备100未曾向控制面网元发送过拨号请求，或者发送过拨号请求但是拨号失败，因此，具体实现中，如果控制面用户表中不包括第一session，控制面网元可以将第一IP地址的拨号请求发送至AAA进行认证，拨号成功后，即可根据AAA返回的拨号成功消息生成第一session，并将其存储在控制面用户表中，再下发至转发面网元。使得转发面网元再次接收到源地址为第一IP地址的报文时，可以直接根据第一session对第一IP地址发送的报文进行转发，而无需重复向控制面网元发送认证请求，提高报文转发效率，提高用户的使用体验。
具体实现中，控制面网元直接生成拨号请求并与AAA 310交互，在拨号成功的情况下，生成第一session，并将其下发至转发面网元；或者，控制面网元还可以直接将报文丢弃，不作任何处理。应理解，上述举例仅用于说明，并不做具体限定。
在一实施例中，控制面网元可以通过图3实施例中的控制接口431向转发面网元发送第一路由明细。可以理解的，控制面网元将第一IP地址对应的第一session发送至转发面网元，使得转发面网元可以在再次收到用户设备发送的数据报文时，直接根据自己的转发面用户表中的第一session确认用户设备是否拨号成功，是否处于已认证状态，而无需再次向控制面网元确认用户设备的已认证状态，提高数据报文传输效率，提升用户体验。
S405：转发面网元根据所述第一session发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。可以理解的，转发面网元发布第一路由信息后，当转发面网元再次接收到源IP地址为第一IP地址的报文时，可以直接根据第一路由信息对该报文进行转 发。如何对报文进行路由转发的具体实现这里不再展开描述。
在一实施例中，所述转发面网元接收来自所述控制面网元的所述第一session之后，所述方法还包括：所述转发面网元将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。可以理解的，转发面用户表更新后，当转发面网元再次接收到源IP地址为第一IP地址的报文时，可以直接根据第一session确定用户是否认证，再根据第一session中的第一路由信息对该报文进行转发，而无需再次向控制面网元发送认证请求，提高了报文转发效率，提高用户使用体验。
在一实施例中，步骤S401所处的情况可以是用户设备在AP间跳转时发生的。也就是说，所述转发面网元接收报文包括：所述转发面网元接收所述用户设备通过网络接入点AP发送的报文；或者，所述转发面网元接收所述用户设备通过路由器发送的报文，其中，所述用户设备的IP地址为所述第一IP地址。简单来说，在步骤S401用户设备先通过第二AP与第二转发面网元连接，并通过第二AP向第二转发面网元发送了拨号请求，拨号成功后，该网络400中的控制面网元的控制面用户表和第二转发面网元的转发面用户表中将存储有第一session，接着用户设备与第一AP断开，连接了与第一转发面网元相连的第一AP，由于第一转发面网元的转发面用户表中并没有存储有第一session，因此将会执行步骤S401-步骤S405，第一转发面网元可以向控制面网元获取该用户设备的第一session，在这期间，用户设备无需重新拨号，因此整个过程不会出现断网的情况，从而实现了在三层网络中，用户设备在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换。
举例来说，如图2所示，假设用户设备2在T0时刻与AP1相连，用户设备的2的IP地址为X.X.X.X，通过转发面网元1向控制面网元1发送了拨号请求。控制面网元1通过AAA 310拨号成功后，将X.X.X.X对应的session存储在控制面用户表中，并将X.X.X.X对应的session发送至转发面网元1的转发面用户表中。在T1时刻假设用户设备2与AP1断开，并与AP2相连，此时与AP2相连的转发面网元2中没有存储X.X.X.X的session，因此转发面网元2无法确认X.X.X.X对应的用户设备是否是已拨号成功的用户设备，转发面网元2可以执行步骤S401-步骤S405，从而向控制面网元获取X.X.X.X的session，使得用户设备在切换AP后无需重新拨号，提高用户体验。
具体实现中，上述用户设备从第二AP切换至所述第一AP的触发条件包括：所述第二转发面网元发生故障，或者，所述用户设备处于漫游状态。举例来说，某商场无线网络存在2个接入点，北区为AP1，南区为AP2，用户设备从商场北区与AP1连接并拨号成功后，移动至上次南区，用户设备自动与AP2连接后，用户设备将处于漫游状态，与AP2相连的转发面网元即可执行上述步骤S401-步骤S405，从而实现用户无需重新拨号也可以继续使用网络的目的。再举例来说，本申请提供的网络系统也可以在的转发面网元1发生故障的情况下，将用户设备发送的数据报文送至转发面网元2进行处理，执行上述步骤S401-步骤S405，整个故障切换转发面网元的过程无需用户重新拨号，提升用户体验。应理解，上述举例仅用于说明，并不能构成具体限定。
在一实施例中，控制面网元确定第一IP地址已认证之后(即所述控制面用户表包括所述第一session)，所述方法还包括：所述控制面网元向第二转发面网元发送删除所述第一session的指令。仍以前述例子为例，用户设备先与第二AP相连，第二AP与第二转发面网 元相连，因此第二转发面网元中曾经存储有第一session，但是用户设备又与第一AP相连，第一AP与第一转发面网元相连，也就是说，用户设备发送的数据报文不再需要第二转发面网元进行处理，因此在步骤S404处，控制面网元向转发面网元发送第一session的同时，可以向第二转发面网元发送删除第一session的指令，从而降低第二转发面网元的内存占用率，也可以提高用户session的安全性。
在一实施例中，转发面网元还可以接收用户设备发送的拨号请求，并将拨号请求封装后上报至控制面网元。也就是说，所述方法还包括：所述转发面网元向所述控制面网元发送拨号请求，所述拨号请求包括第二IP地址；在所述拨号请求成功的情况下，所述转发面网元接收来自所述控制面网元的第二session，所述第二session与所述第二IP地址对应，所述第二session是所述控制面网元响应于所述拨号请求而生成的；所述转发面网元根据所述第二session发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址；所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；或者，在所述拨号请求失败的情况下，所述转发面网元接收来自所述控制面网元的失败消息，所述失败消息用于指示所述拨号请求失败。
仍以图2为例，用户设备2的IP地址为X.X.X.X，用户设备2第一次接入AP1后，可以向转发面网元1发送拨号请求以请求上网，转发面网元1可以将该拨号请求封装后通过业务接口上报至控制面网元1，控制面网元1可以向AAA 310确认用户设备2是否拨号成功，如果拨号成功，控制面网元1可以将用户设备2的IP地址X.X.X.X以及对应的session存储在控制面用户表中，并向转发面网元1下发session以及X.X.X.X的路由表项，使得控制面网元1再次接收到其他转发面网元(比如转发面网元2)发送的X.X.X.X的认证请求时，可以直接将X.X.X.X的session下发给转发面网元，而无需再次向AAA 310确认用户设备2是否拨号成功，从而提高通信效率，提升用户体验。应理解，上述举例仅用于说明，本申请不作具体限定。
可以理解的，上述方法使得用户设备100通过网络中的某个转发面网元410发送了拨号请求并拨号成功后，控制面网元420的控制面用户表420中将存储有用户设备100的session，无论用户设备将数据报文发送给网络中的任意转发面网元410，即使接收到数据报文的转发面网元410的转发面用户表中没有存储该用户设备的session，接收到数据报文的转发面网元410都可以向控制面网元420获取该用户设备100对应的session，用户无需重新拨号，因此整个AP切换的过程不会出现断网的情况，从而解决了OSI模型的第三层网络中，用户设备100在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换的问题，提高用户的使用体验。
上述详细阐述了本申请实施例的方法，为了便于更好的实施本申请实施例上述方案，相应地，下面还提供用于配合实施上述方案的相关设备。
图5是本申请提供的一种转发面网元500的结构示意图，该转发面网元500可以是前述内容中的转发面网元410，该转发面网元500应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述转发面网元500包括：
接收单元510，所述接收单元用于接收报文，所述报文的源IP地址为第一IP地址；
处理单元520，所述处理单元用于确定所述第一IP地址未认证；
发送单元530，所述发送单元用于向所述控制面网元发送认证请求，其中，所述认证请求包括所述第一IP地址；
所述接收单元510，还用于接收来自所述控制面网元的第一会话信息session，所述第一session响应于所述认证请求，所述第一session对应所述第一IP地址；
所述发送单元530，还用于根据所述第一session发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
在一实施例中，所述转发面网元500包括转发面用户表，所述转发面用户表用于存储与已认证的IP地址对应的会话信息session；所述处理单元520，还用于确定所述转发面用户表不包括所述第一session；所述处理单元520，还用于在所述接收单元510接收来自所述控制面网元的所述第一session之后，将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。
在一实施例中，所述发送单元530，还用于向所述控制面网元发送拨号请求，所述拨号请求包括第二IP地址；所述接收单元510，还用于接收来自所述控制面网元的第二session，所述第二session与所述第二IP地址对应，所述第二session是所述控制面网元响应于所述拨号请求而生成的；所述发送单元530，还用于根据所述第二session发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址；所述处理单元520，还用于将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；或者，所述接收单元510，还用于接收来自所述控制面网元的失败消息，所述失败消息用于指示所述拨号请求失败。
在一实施例中，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；所述接收单元510，还用于接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求查询所述控制面用户表而获得的。
在一实施例中，所接收单元510还用于所接收单元，还用于接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求生成的。
在一实施例中，所述接收单元510，还用于接收所述用户设备通过网络接入点AP发送的报文；或者，所述接收单元510，还用于接收所述用户设备通过路由器发送的报文，所述用户设备的IP地址为所述第一IP地址。
在一实施例中，所述报文为数据报文。
可以理解的，本申请提供的转发面网元，使得用户设备通过网络中的某个转发面网元发送了拨号请求并拨号成功后，控制面网元的控制面用户表中将存储有用户设备的session，无论用户设备将数据报文发送给网络中的任意转发面网元，即使接收到数据报文的转发面网元的转发面用户表中没有存储该用户设备的session，接收到数据报文的转发面网元都可以向控制面网元获取该用户设备对应的session，用户无需重新拨号，因此整个AP切换的过程不会出现断网的情况，从而解决了OSI模型的第三层网络中，用户设备在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换的问题，提高用户的使用体验。
图6是本申请提供的一种控制面网元的结构示意图。该控制面网元600可以是前述内容中的控制面网元420。其中，控制面网元600可以应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述控制面网元包括：
接收单元610，所述接收单元610用于接收来自所述转发面网元的认证请求，所述认证请求包括第一IP地址；
发送单元620，所述发送单元620用于向所述转发面网元发送第一会话信息session，所述第一session对应所述第一IP地址，所述第一session用于指示所述转发面网元发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
在一实施例中，所述控制面网元还包括处理单元630，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；所述处理单元630，用于根据所述认证请求，查询所述控制面用户表以获得与所述第一IP地址对应的所述第一session；所述发送单元620，还用于向所述转发面网元发送所述第一session。
在一实施例中，所述处理单元630，还用于根据所述认证请求，生成与所述第一IP地址对应的所述第一session；所述发送单元620，还用于向所述转发面网元发送所述第一session。
在一实施例中，所述接收单元610，还用于接收来自所述转发面网元的拨号请求，所述拨号请求包括第二IP地址；所述发送单元620，还用于向所述转发面网元发送第二session，所述第二session与所述第二IP地址对应，所述第二session用于指示所述转发面网元发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址，所述第二session还用于指示所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；所述处理单元630，还用于将所述第二session存储至所述控制面用户表，从而获得更新后的控制面用户表；或者，所述发送单元620，还用于向所述转发面网元发送失败消息，所述失败消息用于指示所述拨号请求失败。
可以理解的，本申请提供的控制面网元，使得用户设备通过网络中的某个转发面网元发送了拨号请求并拨号成功后，控制面网元的控制面用户表中将存储有用户设备的session，无论用户设备将数据报文发送给网络中的任意转发面网元，即使接收到数据报文的转发面网元的转发面用户表中没有存储该用户设备的session，接收到数据报文的转发面网元都可以向控制面网元获取该用户设备对应的session，用户无需重新拨号，因此整个AP切换的过程不会出现断网的情况，从而解决了OSI模型的第三层网络中，用户设备在保持不断网状态的情况下，在连接了不同BNG的多个AP之间来回切换的问题，提高用户的使用体验。
图7为本申请实施例提供的一种电子设备700的结构示意图。其中，所述电子设备700可以是前述内容中的转发面网元或者控制面网元。如图7所示，电子设备700包括：处理器710、通信接口720、存储器730、以及总线740。其中，处理器710、通信接口720以及存储器730可以通过内部总线740相互连接，也可通过无线传输等其他手段实现通信。本申请实施例以通过总线740连接为例，总线740可以是外设部件互连标准(Peripheral Component Interconnect,PCI)总线或扩展工业标准结构(Extended Industry Standard Architecture,EISA)总线等。所述总线740可以分为地址总线、数据总线、控制总线等。 为便于表示，图7中仅用一条粗线表示，但并不表示仅有一根总线或一种类型的总线。
所述处理器710可以由一个或者多个通用处理器构成，例如中央处理器(Central Processing Unit，CPU)，或者CPU和硬件芯片的组合。上述硬件芯片可以是专用集成电路(Application-Specific Inegrated Circuit，ASIC)、可编程逻辑器件(Programmable Logic Device，PLD)或其组合。上述PLD可以是复杂可编程逻辑器件(Complex Programmable Logic Device，CPLD)、现场可编程逻辑门阵列(Field-Programmable Gate Array，FPGA)、通用阵列逻辑(Generic Array Logic，GAL)或其任意组合。处理器710执行各种类型的数字存储指令，例如存储在存储器730中的软件或者固件程序，它能使电子设备700提供较宽的多种服务。
在电子设备700是前述内容中的控制面网元的情况下，所述处理器710可以包括处理单元，该处理单元可以通过调用存储器730中的程序代码以实现处理功能，包括图6中的处理单元630所描述的功能，例如确定查询控制面用户表，确定第一IP地址已认证等等，具体可用于执行前述方法的S403-步骤S404及其可选步骤，还可以用于执行图2-图4实施例描述的其他步骤，这里不再进行赘述。
在电子设备700是前述内容中的转发面网元的情况下，所述处理器710可以包括处理单元，该处理单元可以通过调用存储器730中的程序代码以实现处理功能，包括图5中的处理单元520所描述的功能，例如查询转发面用户表，确定第一IP地址未认证等等，具体可用于执行前述方法的步骤S401、步骤S402、步骤S405及其可选步骤，还可以用于执行图2-图4实施例描述的其他步骤，这里不再进行赘述。
所述存储器730可以包括易失性存储器(Volatile Memory)，例如随机存取存储器(Random Access Memory，RAM)；存储器730也可以包括非易失性存储器(Non-Volatile Memory)，例如只读存储器(Read-Only Memory，ROM)、快闪存储器(Flash Memory)、硬盘(Hard Disk Drive，HDD)或固态硬盘(Solid-State Drive，SSD)；存储器730还可以包括上述种类的组合。
在电子设备700是前述内容中的控制面网元的情况下，存储器730可以存储有图3、图4实施例中的控制面用户表，控制面用户表用于存储与已认证的IP地址对应的会话信息session；存储器730还可以存储有程序代码。程序代码可以是确定第一IP地址已认证的代码、对拨号请求进行处理的代码等等，还可以包括其他用于执行图2-图4实施例描述的其他步骤的程序代码，这里不再进行赘述。
在电子设备700是前述内容中的转发面网元的情况下，存储器730可以存储有图3、图4实施例中的转发面用户表，转发面用户表用于存储与已认证的IP地址对应的会话信息session；存储器730还可以存储有程序代码。程序代码可以是确定第一IP地址未认证的代码、根据接收到的报文生成认证请求的代码等等，还可以包括其他用于执行图2-图4实施例描述的其他步骤的程序代码，这里不再进行赘述。
通信接口720可以为有线接口(例如以太网接口)，可以为内部接口(例如高速串行计算机扩展总线(Peripheral Component Interconnect express,PCIe)总线接口)、有线接口(例如以太网接口)或无线接口(例如蜂窝网络接口或使用无线局域网接口)，用于与与其他设备或模块进行通信。
需要说明的，图7仅仅是本申请实施例的一种可能的实现方式，实际应用中，所述电子设备还可以包括更多或更少的部件，这里不作限制。关于本申请实施例中未示出或未描述的内容，可参见前述图2-图6所述实施例中的相关阐述，这里不再赘述。
应理解，图7所示的电子设备还可以是多个服务器构成的计算机集群，本申请不作具体限定。
本申请实施例还提供一种计算机可读存储介质，所述计算机可读存储介质中存储有指令，当其在处理器上运行时，图2-图6所示的方法流程得以实现。
本申请实施例还提供一种计算机程序产品，当所述计算机程序产品在处理器上运行时，图2-图6所示的方法流程得以实现。
上述实施例，可以全部或部分地通过软件、硬件、固件或其他任意组合来实现。当使用软件实现时，上述实施例可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机指令。在计算机上加载或执行所述计算机程序指令时，全部或部分地产生按照本发明实施例所述的流程或功能。所述计算机可以为通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一个计算机可读存储介质传输，例如，所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(Digital Subscriber Line,DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集合的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质(例如，软盘、硬盘、磁带)、光介质(例如，高密度数字视频光盘(Digital Video Disc,DVD)、或者半导体介质。半导体介质可以是SSD。
以上所述，仅为本发明的具体实施方式，但本发明的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本发明揭露的技术范围内，可轻易想到各种等效的修改或替换，这些修改或替换都应涵盖在本发明的保护范围之内。因此，本发明的保护范围应以权利要求的保护范围为准。

Claims (26)

  1. 一种发布路由的方法，其特征在于，应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述方法包括：
    所述转发面网元接收报文，所述报文的源IP地址为第一IP地址；
    所述转发面网元确定所述第一IP地址未认证；
    所述转发面网元向所述控制面网元发送认证请求，其中，所述认证请求包括所述第一IP地址；
    所述转发面网元接收来自所述控制面网元的第一会话信息session，所述第一session响应于所述认证请求，所述第一session对应所述第一IP地址；
    所述转发面网元根据所述第一session发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
  2. 根据权利要求1所述的方法，其特征在于，所述转发面网元包括转发面用户表，所述转发面用户表用于存储与已认证的IP地址对应的会话信息session；
    所述转发面网元确定所述第一IP地址未认证，包括：
    所述转发面网元确定所述转发面用户表不包括所述第一session；
    所述转发面网元接收来自所述控制面网元的所述第一session之后，所述方法还包括：
    所述转发面网元将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。
  3. 根据权利要求2所述的方法，其特征在于，所述方法还包括：
    所述转发面网元向所述控制面网元发送拨号请求，所述拨号请求包括第二IP地址；
    在所述拨号请求成功的情况下，所述转发面网元接收来自所述控制面网元的第二session，所述第二session与所述第二IP地址对应，所述第二session是所述控制面网元响应于所述拨号请求而生成的；
    所述转发面网元根据所述第二session发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址；
    所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；或者，
    在所述拨号请求失败的情况下，所述转发面网元接收来自所述控制面网元的失败消息，所述失败消息用于指示所述拨号请求失败。
  4. 根据权利要求1至3任一权利要求所述的方法，其特征在于，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；
    所述转发面网元接收来自所述控制面网元的所述第一session包括：
    所述转发面网元接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求查询所述控制面用户表而获得的。
  5. 根据权利要求1至3任一权利要求所述的方法，其特征在于，
    所述转发面网元接收来自所述控制面网元的所述第一session包括：
    所述转发面网元接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求生成的。
  6. 根据权利要求1至5任一权利要求所述的方法，其特征在于，
    所述转发面网元接收报文包括：
    所述转发面网元接收所述用户设备通过网络接入点AP发送的报文；或者，
    所述转发面网元接收所述用户设备通过路由器发送的报文，其中，所述用户设备的IP地址为所述第一IP地址。
  7. 根据权利要求1至6任一权利要求所述的方法，其特征在于，所述报文为数据报文。
  8. 一种发布路由的方法，其特征在于，应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述方法包括：
    所述控制面网元接收来自所述转发面网元的认证请求，所述认证请求包括第一IP地址；
    所述控制面网元向所述转发面网元发送第一会话信息session，所述第一session对应所述第一IP地址，所述第一session用于指示所述转发面网元发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
  9. 根据权利要求8所述的方法，其特征在于，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；
    所述控制面网元向所述转发面网元发送第一session，包括：
    所述控制面网元根据所述认证请求，查询所述控制面用户表以获得与所述第一IP地址对应的所述第一session；
    所述控制面网元向所述转发面网元发送所述第一session。
  10. 根据权利要求8所述的方法，其特征在于，所述控制面网元向所述转发面网元发送第一session，包括：
    所述控制面网元生成与所述第一IP地址对应的所述第一session；
    所述控制面网元向所述转发面网元发送所述第一session。
  11. 根据权利要求8至10任一权利要求所述的方法，其特征在于，所述转发面网元包括转发面用户表，所述转发面用户表用于存储与已认证的IP地址对应的session，
    所述第一session还用于指示所述转发面网元将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。
  12. 根据权利要求11所述的方法，其特征在于，所述方法还包括：
    所述控制面网元接收来自所述转发面网元的拨号请求，所述拨号请求包括第二IP地址；
    在所述拨号请求成功的情况下，所述控制面网元向所述转发面网元发送第二session，所述第二session与所述第二IP地址对应，所述第二session用于指示所述转发面网元发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址，所述第二session还用于指示所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；所述控制面网元将所述第二session存储至所述控制面用户表，从而获得更新后的控制面用户表；或者，
    在所述拨号请求失败的情况下，所述控制面网元向所述转发面网元发送失败消息，所述失败消息用于指示所述拨号请求失败。
  13. 根据权利要求8至12任一权利要求所述的方法，其特征在于，所述报文是用户设备通过网络接入点AP向转发面网元发送的报文；或者，所述报文是用户设备通过路由器向转发面网元发送的报文，其中，所述用户设备的IP地址为所述第一IP地址。
  14. 根据权利要求8至13任一权利要求所述的方法，其特征在于，所述报文为数据报文。
  15. 一种转发面网元，其特征在于，应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述转发面网元包括：
    接收单元，所述接收单元用于接收报文，所述报文的源IP地址为第一IP地址；
    处理单元，所述处理单元用于确定所述第一IP地址未认证；
    发送单元，所述发送单元用于向所述控制面网元发送认证请求，其中，所述认证请求包括所述第一IP地址；
    所述接收单元，还用于接收来自所述控制面网元的第一会话信息session，所述第一session响应于所述认证请求，所述第一session对应所述第一IP地址；
    所述发送单元，还用于根据所述第一session发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
  16. 根据权利要求15所述的转发面网元，其特征在于，所述转发面网元包括转发面用户表，所述转发面用户表用于存储与已认证的IP地址对应的会话信息session；
    所述处理单元，还用于确定所述转发面用户表不包括所述第一session；
    所述处理单元，还用于在所述接收单元接收来自所述控制面网元的所述第一session之后，将所述第一session存储至所述转发面用户表，从而获得更新后的转发面用户表。
  17. 根据权利要求16所述的转发面网元，其特征在于，所述发送单元，还用于向所述控制面网元发送拨号请求，所述拨号请求包括第二IP地址；
    所述接收单元，还用于接收来自所述控制面网元的第二session，所述第二session与所 述第二IP地址对应，所述第二session是所述控制面网元响应于所述拨号请求而生成的；
    所述发送单元，还用于根据所述第二session发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址；
    所述处理单元，还用于将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；或者，
    所述接收单元，还用于接收来自所述控制面网元的失败消息，所述失败消息用于指示所述拨号请求失败。
  18. 根据权利要求15至17任一权利要求所述的转发面网元，其特征在于，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；
    所述接收单元，还用于接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求查询所述控制面用户表而获得的。
  19. 根据权利要求18所述的转发面网元，其特征在于，
    所接收单元，还用于接收来自所述控制面网元的所述第一session，所述第一session是所述控制面网元根据所述认证请求生成的。
  20. 一种控制面网元，其特征在于，应用于开放式系统互联OSI模型中的第三层网络中，所述网络包括相互连接的控制面网元和转发面网元，所述控制面网元包括：
    接收单元，所述接收单元用于接收来自所述转发面网元的认证请求，所述认证请求包括第一IP地址；
    发送单元，所述发送单元用于向所述转发面网元发送第一会话信息session，所述第一session对应所述第一IP地址，所述第一session用于指示所述转发面网元发布第一路由信息，所述第一路由信息的目的地址为所述第一IP地址。
  21. 根据权利要求20所述的控制面网元，其特征在于，所述控制面网元还包括处理单元，所述控制面网元包括控制面用户表，所述控制面用户表用于存储与已认证的IP地址对应的会话信息session；
    所述处理单元，用于根据所述认证请求，查询所述控制面用户表以获得与所述第一IP地址对应的所述第一session；
    所述发送单元，还用于向所述转发面网元发送所述第一session。
  22. 根据权利要求20或21所述的控制面网元，其特征在于，
    所述处理单元，还用于生成与所述第一IP地址对应的所述第一session；
    所述发送单元，还用于向所述转发面网元发送所述第一session。
  23. 根据权利要求22所述的控制面网元，其特征在于，
    所述接收单元，还用于接收来自所述转发面网元的拨号请求，所述拨号请求包括第二IP地址；
    所述发送单元，还用于向所述转发面网元发送第二session，所述第二session与所述第二IP地址对应，所述第二session用于指示所述转发面网元发布第二路由信息，所述第二路由信息的目的地址为所述第二IP地址，所述第二session还用于指示所述转发面网元将所述第二session存储至所述转发面用户表，从而获得更新后的转发面用户表；
    所述处理单元，还用于将所述第二session存储至所述控制面用户表，从而获得更新后的控制面用户表；或者，
    所述发送单元，还用于向所述转发面网元发送失败消息，所述失败消息用于指示所述拨号请求失败。
  24. 一种网络系统，其特征在于，应用于开放式系统互联OSI模型中的第三层网络中，所述网络系统包括相互连接的控制面网元和转发面网元，其中，所述控制面网元执行如权利要求8至14任一权利要求所述的方法，所述转发面网元用于执行如权利要求1至7任一权利要求所述的方法。
  25. 一种计算机可读存储介质，其特征在于，包括指令，当所述指令在计算设备上运行时，使得所述计算设备执行如权利要求1至7或者8至14任一权利要求所述的方法。
  26. 一种电子设备，其特征在于，包括处理器和存储器，所述处理器执行所述存储器中的代码执行如权利要求1至7或者8至14任一权利要求所述的方法。
PCT/CN2020/118689 2020-02-29 2020-09-29 发布路由的方法、网元、系统及设备 WO2021169291A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP20920805.7A EP4096294A4 (en) 2020-02-29 2020-09-29 Route advertising method, network elements, system, and device
US17/895,294 US20220408332A1 (en) 2020-02-29 2022-08-25 Method for advertising route, network element, system, and device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010132858.9A CN113329454B (zh) 2020-02-29 2020-02-29 发布路由的方法、网元、系统及设备
CN202010132858.9 2020-02-29

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US17/895,294 Continuation US20220408332A1 (en) 2020-02-29 2022-08-25 Method for advertising route, network element, system, and device

Publications (1)

Publication Number Publication Date
WO2021169291A1 true WO2021169291A1 (zh) 2021-09-02

Family

ID=77412900

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/118689 WO2021169291A1 (zh) 2020-02-29 2020-09-29 发布路由的方法、网元、系统及设备

Country Status (4)

Country Link
US (1) US20220408332A1 (zh)
EP (1) EP4096294A4 (zh)
CN (1) CN113329454B (zh)
WO (1) WO2021169291A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023124480A1 (zh) * 2021-12-29 2023-07-06 中国电信股份有限公司 路由通告方法、装置、设备及存储介质

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117424712A (zh) * 2022-07-11 2024-01-19 中兴通讯股份有限公司 访问控制方法、电子设备及存储介质
CN115996380B (zh) * 2023-03-22 2023-06-20 北京首信科技股份有限公司 一种网络柔性管控的方法和设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101873329A (zh) * 2010-06-29 2010-10-27 迈普通信技术股份有限公司 一种Portal强制认证方法以及接入设备
CN103973658A (zh) * 2013-02-04 2014-08-06 中兴通讯股份有限公司 静态用户终端认证处理方法及装置
CN105391634A (zh) * 2015-12-08 2016-03-09 福建星网锐捷网络有限公司 一种报文处理方法、装置及交换机
US20160253481A1 (en) * 2015-02-27 2016-09-01 Dropbox, Inc. Cross-application authentication on a content management system

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101761702B1 (ko) * 2012-03-30 2017-08-04 노키아 솔루션스 앤드 네트웍스 오와이 분산된 게이트웨이들을 위한 중앙집중화된 ｉｐ 어드레스 관리 방법 및 장치
CN104378333B (zh) * 2013-08-15 2018-09-21 华为终端有限公司 调制解调器拨号方法及宽带设备
CN104426660A (zh) * 2013-09-04 2015-03-18 中兴通讯股份有限公司 一种Portal认证方法、BNG、Portal服务器和系统
US10033540B2 (en) * 2014-07-24 2018-07-24 The Hong Kong University Of Science And Technology Handoff free wireless network architecture
CN105141618A (zh) * 2015-09-15 2015-12-09 华为技术有限公司 一种网络连接的认证方法及网络接入设备
EP3357297B1 (en) * 2015-09-29 2020-12-16 Nokia Solutions and Networks Oy Access agnostic control plane
US9973469B2 (en) * 2015-09-30 2018-05-15 Juniper Networks, Inc. MAC (L2) level authentication, security and policy control
CN106685847B (zh) * 2015-11-06 2020-01-17 华为技术有限公司 一种报文处理方法、装置及设备
CN106101023B (zh) * 2016-05-24 2019-06-28 华为技术有限公司 一种vpls报文处理方法及设备
CN107786613B (zh) * 2016-08-30 2020-05-12 新华三技术有限公司 宽带远程接入服务器bras转发实现方法和装置
CN108667695B (zh) * 2017-09-06 2020-12-29 新华三技术有限公司 一种bras转控分离的备份方法和装置
CN109510848B (zh) * 2017-09-14 2020-07-31 大唐移动通信设备有限公司 一种通信系统、会话管理方法、数据发送方法及装置
CN107547568B (zh) * 2017-09-29 2020-07-07 新华三技术有限公司 认证方法和装置
CN107770012A (zh) * 2017-10-23 2018-03-06 中国联合网络通信集团有限公司 一种宽带接入方法、装置及虚拟宽带远程接入服务器系统
CN110557791B (zh) * 2018-05-31 2021-07-20 华为技术有限公司 会话管理方法、设备及系统
CN110650077A (zh) * 2018-06-27 2020-01-03 中兴通讯股份有限公司 一种l2tp协议控制与转发分离的方法及系统

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101873329A (zh) * 2010-06-29 2010-10-27 迈普通信技术股份有限公司 一种Portal强制认证方法以及接入设备
CN103973658A (zh) * 2013-02-04 2014-08-06 中兴通讯股份有限公司 静态用户终端认证处理方法及装置
US20160253481A1 (en) * 2015-02-27 2016-09-01 Dropbox, Inc. Cross-application authentication on a content management system
CN105391634A (zh) * 2015-12-08 2016-03-09 福建星网锐捷网络有限公司 一种报文处理方法、装置及交换机

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP4096294A4

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023124480A1 (zh) * 2021-12-29 2023-07-06 中国电信股份有限公司 路由通告方法、装置、设备及存储介质

Also Published As

Publication number Publication date
EP4096294A1 (en) 2022-11-30
US20220408332A1 (en) 2022-12-22
CN113329454A (zh) 2021-08-31
CN113329454B (zh) 2023-01-06
EP4096294A4 (en) 2023-06-28

Similar Documents

Publication Publication Date Title
US12015503B2 (en) Virtual network communication method, device, and system
US11777783B2 (en) Network slicing with smart contracts
US10574763B2 (en) Session-identifer based TWAMP data session provisioning in computer networks
CA2530343C (en) System for the internet connections, and server for routing connections to a client machine
WO2023000935A1 (zh) 一种数据处理方法、网元设备以及可读存储介质
JP2019526983A (ja) ブロードバンドリモートアクセスサーバの制御プレーン機能と転送プレーン機能の分離
EP3720100A1 (en) Service request processing method and device
US7849127B2 (en) Method and apparatus for a distributed control plane
US20140328161A1 (en) Enhancing a mobile backup channel to address a node failure in a wireline network
US20220408332A1 (en) Method for advertising route, network element, system, and device
WO2021135663A1 (zh) 应用实例确定的方法、装置及系统
CN112039920A (zh) 通信方法、装置、电子设备及存储介质
US11582113B2 (en) Packet transmission method, apparatus, and system utilizing keepalive packets between forwarding devices
WO2011038639A1 (zh) 端到端即时通讯的实现方法、端到端即时通讯终端及系统
US11870683B2 (en) 3GPP network function set adaptation for pre-5G network elements
WO2021185253A1 (zh) 拨号报文处理方法, 网元, 系统及网络设备
WO2013189130A1 (zh) 一种基于点对点网络的通讯系统及通讯方法
WO2012088828A1 (zh) 表维护方法、系统和接入网关路由器
WO2012075768A1 (zh) 身份位置分离网络的监听方法和系统
WO2011160384A1 (zh) 一种通信方法及网关设备
WO2011026355A1 (zh) 节点接入家乡代理的方法、家乡代理集群系统及业务路由器
CN113545130A (zh) 利用分布式散列的无线客户端的快速漫游和统一策略
EP4373051A1 (en) Apparatuses, methods and non-transitory computer-readable storage mediums for network access to residential gateways
EP4432610A1 (en) Apparatuses, methods and non-transitory computer-readable storage mediums for network access
WO2022156423A1 (zh) 一种数据传输方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20920805

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2020920805

Country of ref document: EP

Effective date: 20220825

NENP Non-entry into the national phase

Ref country code: DE