CN101166146A - Method for Broadband Access Server to Control Triple Service Service - Google Patents
Method for Broadband Access Server to Control Triple Service Service Download PDFInfo
- Publication number
- CN101166146A CN101166146A CNA200610149960XA CN200610149960A CN101166146A CN 101166146 A CN101166146 A CN 101166146A CN A200610149960X A CNA200610149960X A CN A200610149960XA CN 200610149960 A CN200610149960 A CN 200610149960A CN 101166146 A CN101166146 A CN 101166146A
- Authority
- CN
- China
- Prior art keywords
- routing
- address
- routing forwarding
- user
- forwarding table
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
本发明提供了一种用于宽带接入服务器对三重服务业务进行控制的方法,其特征在于,该方法包括以下步骤:步骤a,在宽带服务器上以全局模式配置媒介接入控制地址段以及网际协议路由转发表;步骤b,将网际协议路由转发表与接入实体相关联,以及将用户接入宽带服务器并向其分配网际协议地址;以及步骤c,宽带服务器根据网际协议地址以及路由转发表实现转发。本发明实现简单,与网络规划无关,并且Vlan等发生变化后,不需要在宽带接入服务器上重做数据,另外本发明可以同时支持IPv4和IPv6的应用场景。
The present invention provides a method for a broadband access server to control triple service services, which is characterized in that the method includes the following steps: Step a, configuring the media access control address segment and the Internet access control address segment in global mode on the broadband server protocol routing and forwarding table; step b, associating the IP routing and forwarding table with the access entity, and connecting the user to the broadband server and assigning an IP address to it; and step c, the broadband server according to the IP address and the routing and forwarding table Implement forwarding. The present invention is simple to implement, has nothing to do with network planning, and does not need to redo data on the broadband access server after the Vlan etc. change, and the present invention can simultaneously support IPv4 and IPv6 application scenarios.
Description
技术领域 technical field
本发明涉及通讯技术中宽带接入服务器对用户进行三重服务业务开展的方法,尤其涉及宽带接入服务器对三重服务业务的控制方法。The invention relates to a method for a broadband access server to carry out triple service business for users in the communication technology, in particular to a method for controlling the triple service business by the broadband access server.
背景技术 Background technique
三重服务(Triple-play)指在同一个网络上或者在不同的网络上由一个运营实体,以一个业务品牌提供语音、数据和视频三种业务的组合。三重服务具有两层含义:一是业务捆绑,二是业务融合。大多数的电信运营商通过业务融合的方式提供三重服务,在IP网络上,电信运营商提供VoIP、宽带和IPTV业务的捆绑。Triple-play refers to a combination of voice, data and video services provided by one operating entity under one service brand on the same network or on different networks. Triple service has two meanings: one is business bundling, and the other is business integration. Most telecom operators provide triple services through service integration. On IP networks, telecom operators provide VoIP, broadband and IPTV services bundled.
为了能够在IP网络上支持语音,视频等实时业务,需要有QoS(服务质量)的支持,以保证重要的、敏感的或者实时性较强的数据流在网络中得到优先处理。In order to support real-time services such as voice and video on the IP network, QoS (Quality of Service) support is required to ensure that important, sensitive or real-time data streams are prioritized in the network.
在宽带接入服务器(BRAS)上实现资源隔离的多协议标签虚拟专用网(MPLS VPN),每个业务使用一个虚拟专用网络(VPN),同其它虚拟专用网络在信息、用户、网络资源上都隔离开来,同运行在一个物理专网上没有区别。并且,由于共享一个采用了统计复用技术的共享物理网络,带来了额外的好处:A multi-protocol label virtual private network (MPLS VPN) that implements resource isolation on the broadband access server (BRAS). Each service uses a virtual private network (VPN), which is identical to other virtual private networks in terms of information, users, and network resources. Isolated, there is no difference from running on a physical dedicated network. And, because of sharing a shared physical network using statistical multiplexing technology, it brings additional benefits:
1.一个物理网络,建网成本、运行和维护成本均下降;1. With a physical network, the cost of network construction, operation and maintenance are all reduced;
2.每个业务网均可以在一定程度上“软扩容”;2. Each business network can be "softly expanded" to a certain extent;
3.各种业务的流量高峰不同步,可以体现统计复用的优势,提高资源利用率。3. The traffic peaks of various services are not synchronized, which can reflect the advantages of statistical multiplexing and improve resource utilization.
由于多协议标签虚拟专用网是相对比较成熟的技术,运营商开通业务重点在宽带接入服务器侧以区分各种业务,并映射到路由转发表(VRF)中。Since the multi-protocol label virtual private network is a relatively mature technology, operators focus on the broadband access server side to differentiate various services and map them to the routing forwarding table (VRF).
在现有业务区分手段中,可以通过三种方法来进行区分:Among the existing means of business differentiation, there are three ways to differentiate:
1.根据电路区分1. According to the circuit distinction
根据用户业务多少,规划二层网络的vlan。采用P-vlan来标示业务,采用C-vlan来标示用户。Plan the VLANs of the Layer 2 network according to the number of user services. Use P-vlan to mark services, and use C-vlan to mark users.
宽带接入服务器上针对二层网络配置,配置相应的vlan,实现用户端IP地址分配和转发控制。The broadband access server configures the corresponding vlan for the Layer 2 network configuration to realize IP address allocation and forwarding control of the client.
每新增一种业务,都需要重新规划二层网络,重新配置宽带接入服务器数据,实现用户接入。Every time a new service is added, it is necessary to re-plan the Layer 2 network and reconfigure the data of the broadband access server to realize user access.
2.根据接入方式区分2. Distinguish according to the access method
根据用户上网业务、或者IPTV业务分别用接入类型进行区分。上网业务走PPPoX封装、IPTV业务走IPoX封装。因此,只能支持两种业务,对于Triple-Play方式不能满足要求。According to the user's Internet access service or IPTV service, the access types are used to distinguish them. The Internet service adopts PPPoX encapsulation, and the IPTV service adopts IPoX encapsulation. Therefore, only two kinds of services can be supported, and the Triple-Play mode cannot meet the requirements.
3.根据用户名区分3. Distinguish by username
用户的上网业务、IPTV业务、VoIP业务都采用PPPoX接入方式,只是根据username@Domain格式中的域名,映射到不同路由转发表中。The user's Internet service, IPTV service, and VoIP service all adopt the PPPoX access method, but are mapped to different routing and forwarding tables according to the domain name in the username@Domain format.
这样所有业务客户端都必须支持PPPoX拨号,对业务客户端要求比较高,设备配置管理相对比较复杂,现有很多设备不支持这种接入方式。In this way, all business clients must support PPPoX dial-up, which requires relatively high requirements for business clients, and device configuration management is relatively complicated. Many existing devices do not support this access method.
发明内容 Contents of the invention
本发明的目的在于提供一种宽带接入服务器对三重服务业务进行控制的方法。The purpose of the present invention is to provide a method for a broadband access server to control triple service services.
根据本发明的一个方面,提供了一种用于宽带接入服务器对三重服务业务进行控制的方法。According to one aspect of the present invention, a method for controlling a triple play service by a broadband access server is provided.
根据本发明的提供的用于宽带接入服务器对三重服务业务进行控制的方法,其特征在于,该方法包括以下步骤:步骤a,在宽带服务器上以全局模式配置媒介接入控制地址段以及网际协议路由转发表;步骤b,将网际协议路由转发表与接入实体相关联,以及将用户接入宽带服务器并向其分配网际协议地址;以及步骤c,宽带服务器根据网际协议地址以及路由转发表实现转发。According to the method provided by the present invention for the broadband access server to control the triple service service, it is characterized in that the method includes the following steps: step a, configure the media access control address segment and the Internet access control address segment in the global mode on the broadband server protocol routing and forwarding table; step b, associating the IP routing and forwarding table with the access entity, and connecting the user to the broadband server and assigning an IP address to it; and step c, the broadband server according to the IP address and the routing and forwarding table Implement forwarding.
其中,上述方法中的步骤b进一步包括以下步骤:Wherein, step b in the above method further includes the following steps:
步骤b1,将媒介接入控制地址段与路由转发表通过关于媒介接入控制映射到路由转发表的函数建立对应关系,以获得路由转发表的标识;步骤b2,根据路由转发表的标识获得关联的接口,并且在接口下找到空闲的网际协议地址;以及步骤b3,将网际协议地址以及路由转发表标识分配给用户,并在用户转发表中记录用户的路由转发表。Step b1, establish a corresponding relationship between the media access control address segment and the routing forwarding table through the function about the mapping of the media access control to the routing forwarding table, so as to obtain the identification of the routing forwarding table; Step b2, obtain the association according to the identification of the routing forwarding table interface, and find an idle IP address under the interface; and step b3, assign the IP address and routing and forwarding table identifier to the user, and record the user's routing and forwarding table in the user forwarding table.
其中,在步骤a中,路由转发表的标识包括路由标识以及目的路由标识(route-target)。并且,对于网际协议接入方式,在入口接口(ingress interface)上关联路由转发表,用户分配的网际协议地址属于接口地址空间。另外,接入实体包括接入接口以及域。另外,对于端对端协议接入方式,在域上关联路由转发表,用户分配的网际协议地址属于域动态关联的接口。并且,确定路由转发表标识的优先级的顺序为媒介接入控制、永久虚拟连接、接口、以及用户名。另外,宽带服务器支持多协议标签虚拟专用网的网络。Wherein, in step a, the identifier of the route forwarding table includes a route identifier and a destination route identifier (route-target). In addition, for the Internet protocol access mode, a routing forwarding table is associated with the ingress interface, and the Internet protocol address allocated by the user belongs to the interface address space. In addition, an access entity includes an access interface and a domain. In addition, for the end-to-end protocol access mode, a routing and forwarding table is associated with the domain, and the IP address assigned by the user belongs to the interface dynamically associated with the domain. Moreover, the order of determining the priority of the routing forwarding table identifier is media access control, permanent virtual connection, interface, and user name. In addition, the Broadband Server supports multi-protocol tagged virtual private network networks.
并且,再上述方法的步骤c中,根据路由转发表标识以及网际协议地址,查找用户转发表,以实现转发。Moreover, in step c of the above method, the user forwarding table is searched according to the routing forwarding table identifier and the IP address, so as to realize forwarding.
本发明采用基于媒体接入控制地址的路由转发表映射,相当于是用二层地址映射到三层路由转发表。用户与宽带接入服务器之间,实际上是建立了一个点对点的串行连接。用户数据包的转发与用户源IP无关。基于此,本发明可以达到以下有益效果:The present invention adopts the routing forwarding table mapping based on the media access control address, which is equivalent to mapping the layer 2 address to the layer 3 routing forwarding table. A point-to-point serial connection is actually established between the user and the broadband access server. The forwarding of user data packets has nothing to do with user source IP. Based on this, the present invention can reach following beneficial effect:
1.根据用户端设备,如IAD、STB的媒体接入控制地址范围,直接区分路由转发表,方便的区分业务。实现简单,与网络规划无关。Vlan等发生变化后,不需要在宽带接入服务器上重做数据。1. According to the media access control address range of the client equipment, such as IAD and STB, the routing and forwarding table is directly distinguished, so as to conveniently distinguish services. The implementation is simple and has nothing to do with network planning. After the Vlan etc. are changed, there is no need to redo the data on the broadband access server.
2.由于地址分配、路由过程都是根据用户的媒体接入控制地址作为映射标准,与用户IP地址无关,因此可以同时支持IPv4和IPv6的应用场景。2. Since the address allocation and routing processes are based on the user's media access control address as the mapping standard and have nothing to do with the user's IP address, it can support both IPv4 and IPv6 application scenarios.
本发明的其它特征和优点将在随后的说明书中阐述,并且,部分地从说明书中变得显而易见,或者通过实施本发明而了解。本发明的目的和其他优点可通过在所写的说明书、权利要求书、以及附图中所特别指出的结构来实现和获得。Additional features and advantages of the invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.
附图说明 Description of drawings
附图用来提供对本发明的进一步理解,并且构成说明书的一部分,与本发明的实施例一起用于解释本发明,并不构成对本发明的限制。在附图中:The accompanying drawings are used to provide a further understanding of the present invention, and constitute a part of the description, and are used together with the embodiments of the present invention to explain the present invention, and do not constitute a limitation to the present invention. In the attached picture:
图1示出了根据本发明的网络设备的示意图;Figure 1 shows a schematic diagram of a network device according to the present invention;
图2示出了根据本发明第一实施例的用于宽带接入服务器对三重服务业务进行控制的方法的流程图;FIG. 2 shows a flowchart of a method for a broadband access server to control a triple service service according to a first embodiment of the present invention;
图3示出了根据本发明第二实施例的用于宽带接入服务器对三重服务业务进行控制的装置的框图;以及FIG. 3 shows a block diagram of an apparatus for a broadband access server to control triple play services according to a second embodiment of the present invention; and
图4示出了根据本发明第三实施例的分配网际协议地址的流程图。Fig. 4 shows a flow chart of allocating IP addresses according to the third embodiment of the present invention.
具体实施方式 Detailed ways
以下结合附图对本发明的优选实施例进行说明,应当理解,此处所描述的优选实施例仅用于说明和解释本发明,并不用于限定本发明。The preferred embodiments of the present invention will be described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described here are only used to illustrate and explain the present invention, and are not intended to limit the present invention.
第一实施例first embodiment
根据本发明的第一实施例,提供了一种用于宽带接入服务器对三重服务业务进行控制的方法。下面将参照图2对该方法进行描述。According to the first embodiment of the present invention, a method for a broadband access server to control triple play services is provided. The method will be described below with reference to FIG. 2 .
图2是示出根据本发明实施例的用于宽带接入服务器对三重服务业务进行控制的方法的流程图。如图2所示,根据本发明实施例的用于宽带接入服务器对三重服务业务进行控制的方法包括以下步骤:步骤202,在宽带服务器上以全局模式配置媒介接入控制地址段以及网际协议路由转发表;步骤204,将网际协议路由转发表与接入实体相关联,以及将用户接入宽带服务器并向其分配网际协议地址;以及步骤206,宽带服务器根据网际协议地址以及路由转发表实现转发。Fig. 2 is a flowchart illustrating a method for a broadband access server to control triple play services according to an embodiment of the present invention. As shown in FIG. 2 , the method for the broadband access server to control the triple service service according to the embodiment of the present invention includes the following steps: Step 202, configure the media access control address segment and the Internet protocol in the global mode on the broadband server Routing and forwarding table; step 204, associating the Internet protocol routing and forwarding table with the access entity, and connecting the user to the broadband server and assigning an Internet protocol address to it; and step 206, implementing the broadband server according to the Internet protocol address and the routing and forwarding table Forward.
其中,上述方法中的步骤204进一步包括以下步骤:将媒介接入控制地址段与路由转发表通过关于媒介接入控制映射到路由转发表的函数建立对应关系,以获得路由转发表的标识;根据路由转发表的标识获得关联的接口,并且在接口下找到空闲的网际协议地址;以及将网际协议地址以及路由转发表标识分配给用户,并在用户转发表中记录用户的路由转发表。Wherein, step 204 in the above method further includes the following steps: establishing a corresponding relationship between the media access control address segment and the routing forwarding table through a function related to the mapping of the media access control to the routing forwarding table, so as to obtain the identification of the routing forwarding table; The identification of the routing and forwarding table obtains the associated interface, and finds an idle IP address under the interface; and assigns the IP address and the routing and forwarding table identification to the user, and records the user's routing and forwarding table in the user forwarding table.
其中,路由转发表的标识包括路由标识以及目的路由标识。另外,接入实体包括接入接口以及域。并且,对于网际协议接入方式,在入口接口上关联路由转发表,用户分配的网际协议地址属于接口地址空间。另外,对于端对端协议接入方式,在域上关联路由转发表,用户分配的网际协议地址属于域动态关联的接口。并且,确定路由转发表标识的优先级的顺序为媒介接入控制、永久虚拟连接、接口、以及用户名。另外,宽带服务器支持多协议标签虚拟专用网的网络。Wherein, the identifier of the routing forwarding table includes a routing identifier and a destination routing identifier. In addition, an access entity includes an access interface and a domain. Moreover, for the Internet protocol access mode, a routing forwarding table is associated with the ingress interface, and the Internet protocol address allocated by the user belongs to the interface address space. In addition, for the end-to-end protocol access mode, a routing and forwarding table is associated with the domain, and the IP address assigned by the user belongs to the interface dynamically associated with the domain. Moreover, the order of determining the priority of the routing forwarding table identifier is media access control, permanent virtual connection, interface, and user name. In addition, the Broadband Server supports multi-protocol tagged virtual private network networks.
并且,再上述方法的步骤206中,根据路由转发表标识以及网际协议地址,查找用户转发表,以实现转发。Moreover, in
配置媒体接入控制地址与路由转发表的映射关系,在承载实现一个媒体接入控制表,查询得到路由转发表号。Configure the mapping relationship between the media access control address and the routing and forwarding table, implement a media access control table on the bearer, and query to obtain the routing and forwarding table number.
第二实施例second embodiment
根据本发明的第二实施例,提供了一种用于宽带接入服务器对三重服务业务进行控制的装置300,下面将参照图3,对该装置进行描述。According to the second embodiment of the present invention, an apparatus 300 for controlling a triple play service by a broadband access server is provided. The apparatus 300 will be described below with reference to FIG. 3 .
如图3所示,根据本发明实施例的用于宽带接入服务器对三重服务业务进行控制的装置300包括:设置模块302,用于在宽带服务器上以全局模式配置媒介接入控制地址段以及网际协议路由转发表;处理模块304,用于将网际协议路由转发表与接入实体相关联,以及将用户接入宽带服务器并向其分配网际协议地址;以及转发模块306,用于使宽带服务器根据网际协议地址以及路由转发表实现转发。As shown in FIG. 3 , an apparatus 300 for a broadband access server to control a triple play service according to an embodiment of the present invention includes: a setting
其中,上述处理模块304包括:关联模块,用于将媒介接入控制地址段与路由转发表通过关于媒介接入控制映射到路由转发表的函数建立对应关系,以获得路由转发表的标识;查找模块,用于根据路由转发表的标识获得关联的接口,并且在接口下找到空闲的网际协议地址;以及分配存储模块,用于将网际协议地址以及路由转发表标识分配给用户,并在用户转发表中记录用户的路由转发表。Wherein, the above-mentioned
其中,路由转发表的标识包括路由标识以及目的路由标识。Wherein, the identifier of the routing forwarding table includes a routing identifier and a destination routing identifier.
另外,接入实体包括接入接口以及域。In addition, an access entity includes an access interface and a domain.
另外,对于网际协议接入方式,在入口接口上使路由转发表关联,用户分配的网际协议地址属于接口地址空间。并且,对于端对端协议接入方式,在域上使路由转发表关联,用户分配的网际协议地址属于域动态关联的接口。In addition, for the Internet protocol access mode, the routing and forwarding table is associated on the ingress interface, and the Internet protocol address allocated by the user belongs to the interface address space. Moreover, for the end-to-end protocol access mode, the routing and forwarding table is associated on the domain, and the Internet protocol address allocated by the user belongs to the interface dynamically associated with the domain.
并且,在该装置中,确定路由转发表标识的优先级的顺序为媒介接入控制、永久虚拟连接、接口、以及用户名。另外,转发模块根据路由转发表标识以及网际协议地址,查找用户转发表,以实现转发。宽带服务器支持多协议标签虚拟专用网的网络。Moreover, in this device, the order of determining the priority of the routing and forwarding table identifier is media access control, permanent virtual connection, interface, and user name. In addition, the forwarding module searches the user forwarding table according to the routing forwarding table identifier and the IP address, so as to realize forwarding. Broadband server supports multi-protocol label virtual private network network.
第三实施例third embodiment
根据本发明的第一实施例,本发明还提供了一种用于宽带接入服务器对三重服务业务进行控制的方法,下面将参照图3对该方法进行描述。According to the first embodiment of the present invention, the present invention also provides a method for a broadband access server to control triple play services, which will be described below with reference to FIG. 3 .
如图4所示,该方法包括以下步骤:As shown in Figure 4, the method includes the following steps:
第一步骤,在宽带服务器上全局模式下配置媒体接入控制地址段。其中,媒体接入控制地址具有全局唯一性,在目前应用较多的48位媒体接入控制地址中,前24位是由生产网卡的厂商向IEEE申请的厂商地址,后24位为厂商内部分配给每台设备,并且在宽带接入服务器上,配置媒体接入控制地址段作为一种接入方式;The first step is to configure the media access control address segment in the global mode on the broadband server. Among them, the media access control address has global uniqueness. Among the 48-bit media access control addresses that are widely used at present, the first 24 bits are the manufacturer's address applied by the manufacturer of the network card to IEEE, and the last 24 bits are allocated internally by the manufacturer. For each device, and on the broadband access server, configure the media access control address segment as an access method;
第二步骤,在全局模式下配置IP路由转发表,配置一个路由转发表,同时指定路由转发表的必要属性路由标识,即,目的路由标识;The second step configures the IP routing and forwarding table in the global mode, configures a routing and forwarding table, and specifies the necessary attribute routing identifier of the routing and forwarding table, that is, the destination routing identifier;
第三步骤,将路由转发表与接入实体相关联。由于接入服务器接入方式比较多,路由转发表关联工作相当比较复杂,对于IP接入方式,可在入口接口上关联路由转发表,用户分配的ip地址属于该接口地址空间;对于PPP接入方式,可在域上关联路由转发表,用户分配的ip地址属于该域动态关联的接口;The third step is associating the routing and forwarding table with the access entity. Since there are many access methods to the access server, the routing and forwarding table association work is rather complicated. For the IP access method, the routing and forwarding table can be associated with the ingress interface, and the ip address assigned by the user belongs to the interface address space; for PPP access In this way, the routing and forwarding table can be associated with the domain, and the ip address assigned by the user belongs to the interface dynamically associated with the domain;
第四步骤,用户接入宽带服务器,并分配地址。对于IP接入方式,可在入口接口上关联路由转发表,用户分配的ip地址属于该接口的地址空间;对于PPP接入方式,可在域上关联路由转发表,用户分配的ip地址属于该域动态关联的接口;以及In the fourth step, the user accesses the broadband server and assigns an address. For the IP access mode, a routing forwarding table can be associated with the ingress interface, and the ip address assigned by the user belongs to the address space of the interface; for the PPP access mode, a routing forwarding table can be associated with the domain, and the ip address assigned by the user belongs to the address space of the interface. domain dynamically associated interfaces; and
第五步骤,接入服务器根据IP地址和路由转发表转发到多协议标签虚拟专用网内。In the fifth step, the access server forwards to the multi-protocol label virtual private network according to the IP address and the routing forwarding table.
并且,在设备组网中,要实现基于媒体接入控制的路由转发表管理,除了宽带接入服务器自身完成媒体接入控制地址到路由转发表的映射外,如果要开展整个业务,还必须有支持多协议标签虚拟专用网的网络配合。Moreover, in the equipment network, in order to realize the routing and forwarding table management based on media access control, in addition to the broadband access server itself completing the mapping from the media access control address to the routing and forwarding table, if the entire service is to be carried out, there must be a Supports network coordination for multi-protocol tag virtual private networks.
路由型城域网组网如图1所示。Figure 1 shows the routed MAN network.
并且,Layer3多协议标签虚拟专用网是一种基于路由方式的多协议标签虚拟专用网解决方案,IETF RFC2547中对这种虚拟专用网络技术进行了描述,MPLS Layer3虚拟专用网络也被称作是BGP/MPLS VPNs。BGP/MPLS VPN使用类似传统路由的方式进行IP分组的转发,在路由器接收到IP数据包以后,通过在转发表查找IP数据包的目的地址,然后使用预先建立的LSP进行跨运营商骨干的IP数据传送。Moreover, Layer3 multi-protocol label virtual private network is a multi-protocol label virtual private network solution based on routing. This virtual private network technology is described in IETF RFC2547. MPLS Layer3 virtual private network is also called BGP /MPLS VPNs. BGP/MPLS VPN uses a method similar to traditional routing to forward IP packets. After the router receives the IP packets, it looks up the destination address of the IP packets in the forwarding table, and then uses the pre-established LSP to carry out inter-operator backbone IP data transmission.
其中,BGP/MPLS VPN的解决方案支持对等方式的虚拟专用网络网络结构。在PE之间,属于同一多协议标签虚拟专用网的路由信息通过BGP协议承载进行交互。PE路由器使用LSP进行路由转发,对于运营商路由器P并不需要知道客户虚拟专用网络的信息,这种透明可以有效的减小路由器P的负担,提高网络的扩展性和业务开展的灵活性。通过PE之间、PE和CE之间的路由交互,客户的路由器可以知道属于同一个虚拟专用网络的网络拓扑信息。Among them, the BGP/MPLS VPN solution supports peer-to-peer virtual private network network structure. Between PEs, the routing information belonging to the same multi-protocol label virtual private network is exchanged through the BGP protocol bearer. PE routers use LSPs for routing and forwarding. The operator router P does not need to know the information of the customer's virtual private network. This transparency can effectively reduce the burden on router P and improve network scalability and business flexibility. Through the routing interaction between PEs and between PEs and CEs, the customer's router can know the network topology information belonging to the same virtual private network.
并且,BGP/多协议标签虚拟专用网可以解决基于纯IP Layer3虚拟专用网络无法实现的一些功能,主要包括:支持地址重叠,即同时支持使用公有地址的客户端设备和私有地址的客户端设备,或者多个虚拟专用网络使用同一个地址空间;以及支持重叠虚拟专用网络,即一个站点可以同时属于多个虚拟专用网络。Moreover, BGP/multi-protocol label virtual private network can solve some functions that cannot be realized based on pure IP Layer3 virtual private network, mainly including: support for address overlap, that is, support for client devices with public addresses and client devices with private addresses at the same time, Or multiple virtual private networks use the same address space; and support overlapping virtual private networks, that is, a site can belong to multiple virtual private networks at the same time.
并且,对于传统基于路由的虚拟专用网络来说,要解决以上的问题有一定的挑战性。多协议标签虚拟专用网使用虚拟专用网络路由转发表(路由转发表)解决地址重叠的问题。在运营商PE路由器上使用基于每个虚拟专用网络的路由转发表隔离不同虚拟专用网络的路由。通过路由信息的隔离,实现支持虚拟专用网络地址的重叠。如果一个PE上有多个CE属于同一个虚拟专用网络,那么这些CE共享PE上的虚拟专用网络路由转发表。对于重叠虚拟专用网络的情况,重叠发生的站点需要使用独立的路由转发表表存储来自其所属虚拟专用网络的路由信息。Moreover, for traditional route-based virtual private networks, it is challenging to solve the above problems. The multi-protocol label virtual private network uses a virtual private network routing and forwarding table (routing and forwarding table) to solve the problem of address overlap. On the PE router of the operator, use a routing and forwarding table based on each virtual private network to isolate the routes of different virtual private networks. Through the isolation of routing information, the overlapping of virtual private network addresses is supported. If multiple CEs on a PE belong to the same VPN, these CEs share the routing and forwarding table of the VPN on the PE. In the case of overlapping virtual private networks, the site where the overlapping occurs needs to use an independent routing and forwarding table to store routing information from the virtual private network to which it belongs.
并且,地址重叠的另一个问题是,PE路由器从邻居的BGP更新中会收到属于不同虚拟专用网络的重叠路由信息。为了区别来自不同虚拟专用网络的路由信息,PE使用8octet的路由标识(RD)对来自不同虚拟专用网络的路由信息进行标记。这个8octet的路由标识作为4octet的IP地址前缀的扩展构成了一个新的地址类(VPN-IPv4地址)。路由标识不参与路由发布的过程,它所起的作用仅仅是区分属于不同虚拟专用网络站点的路由。路由标识和路由转发表之间建立了一种一一映射的关系,路由转发表在发布路由信息的同时将附带相应的路由标识信息。对于重叠虚拟专用网络的情况,这类站点虽然同时属于多个虚拟专用网络,但是它只需要一个路由标识,并不需要多个路由标识以对应多个路由转发表,其主要的目的是为了节省PE路由器上的存储资源。Moreover, another problem of address overlap is that PE routers will receive overlapping routing information belonging to different virtual private networks from neighbors' BGP updates. In order to distinguish the routing information from different virtual private networks, PE uses 8octet routing identification (RD) to mark the routing information from different virtual private networks. This 8octet routing identifier constitutes a new address class (VPN-IPv4 address) as an extension of the 4octet IP address prefix. The route identifier does not participate in the process of route publishing, and its role is only to distinguish routes belonging to different virtual private network sites. A one-to-one mapping relationship is established between the routing identifier and the routing forwarding table, and the routing forwarding table will attach corresponding routing identifier information when publishing routing information. For the case of overlapping virtual private networks, although this type of site belongs to multiple virtual private networks at the same time, it only needs one routing identifier, and does not need multiple routing identifiers to correspond to multiple routing and forwarding tables. The main purpose is to save Storage resources on PE routers.
在宽带接入服务器产品的实现中,宽带接入服务器上实现基于媒体接入控制地址的路由转发表包括以下两个阶段:In the implementation of the broadband access server product, the implementation of the routing and forwarding table based on the media access control address on the broadband access server includes the following two stages:
第一阶段,地址分配过程。根据用户媒体接入控制地址与路由转发表的映射关系,得到呼叫用户路由转发表属性,并在该路由转发表关联的接口中,将一个ip地址分配给客户端。The first stage is the address allocation process. According to the mapping relationship between the user's media access control address and the routing and forwarding table, the attribute of the calling user's routing and forwarding table is obtained, and an IP address is assigned to the client in the interface associated with the routing and forwarding table.
第二阶段,业务转发过程。根据用户的媒体接入控制地址获得与路由转发表的映射关系,得到路由转发表属性,并与目的IP地址一起,作为用户路由的标记,实现路由转发。The second stage is the business forwarding process. Obtain the mapping relationship with the routing forwarding table according to the user's media access control address, obtain the routing forwarding table attribute, and use it together with the destination IP address as the label of the user's routing to realize routing forwarding.
其实现原理包括:Its implementation principles include:
1.静态配置媒体接入控制地址与路由转发表的对应关系。人工配置媒体接入控制地址与路由转发表的对应关系,即生成一个关于媒体接入控制映射到路由转发表的函数:IDvrf=f(MAC)。1. Statically configure the correspondence between media access control addresses and routing and forwarding tables. Manually configure the corresponding relationship between the MAC address and the routing and forwarding table, that is, generate a function about the mapping of the media access control to the routing and forwarding table: ID vrf = f(MAC).
2.确立IDvrf获得优先级。根据用户物理信息、用户名等信息,确定IDvrf优先级为:媒体接入控制->永久虚拟连接->接口->用户名。2. Establish ID vrf get priority. According to the user's physical information, user name and other information, determine the ID vrf priority as: media access control->permanent virtual connection->interface->user name.
3.分配IP地址。根据用户接入方式分别分配IP地址。其流程如图2所示。3. Assign an IP address. Allocate IP addresses according to user access methods. Its process is shown in Figure 2.
第一步骤,根据第二步的顺序,获得IDvrf;In the first step, according to the order of the second step, the ID vrf is obtained;
第二步骤,根据路由转发表ID得到关联的接口;The second step is to obtain the associated interface according to the routing forwarding table ID;
第三步骤,在该接口下,找到空闲的IP地址,并将该IP地址分配给用户,并在用户转发表中记下用户的路由转发表;以及The third step is to find an idle IP address under the interface, assign the IP address to the user, and record the user's routing forwarding table in the user forwarding table; and
第四步骤,用户数据包转发。根据第一步的映射关系,根据用户源媒体接入控制,获得用户所在IDvrf,根据IDvrf和目的IP,查询路由表,之后进行转发。In the fourth step, the user data packet is forwarded. According to the mapping relationship in the first step, according to the user source media access control, the ID vrf of the user is obtained, and the routing table is queried according to the ID vrf and the destination IP, and then forwarded.
采用基于媒体接入控制地址的路由转发表映射,相当于是用二层地址映射到三层路由转发表。用户与宽带接入服务器之间,实际上是建立了一个点对点的串行连接。用户数据包的转发与用户源IP无关。基于此,本发明可以达到以下有益效果:Using the routing forwarding table mapping based on the media access control address is equivalent to mapping the layer 2 address to the layer 3 routing forwarding table. A point-to-point serial connection is actually established between the user and the broadband access server. The forwarding of user data packets has nothing to do with user source IP. Based on this, the present invention can reach following beneficial effect:
1.根据用户端设备,如IAD、STB的媒体接入控制地址范围,直接区分路由转发表,方便的区分业务。实现简单,与网络规划无关。Vlan等发生变化后,不需要在宽带接入服务器上重做数据。1. According to the media access control address range of the client equipment, such as IAD and STB, the routing and forwarding table is directly distinguished, so as to conveniently distinguish services. The implementation is simple and has nothing to do with network planning. After the Vlan etc. are changed, there is no need to redo the data on the broadband access server.
2.由于地址分配、路由过程都是根据用户的媒体接入控制地址作为映射标准,与用户IP地址无关,因此可以同时支持IPv4和IPv6的应用场景。2. Since the address allocation and routing processes are based on the user's media access control address as the mapping standard and have nothing to do with the user's IP address, it can support both IPv4 and IPv6 application scenarios.
以上所述仅为本发明的优选实施例而已,并不用于限制本发明,对于本领域的技术人员来说,本发明可以有各种更改和变化。凡在本发明的精神和原则之内,所作的任何修改、等同替换、改进等,均应包含在本发明的保护范围之内。The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.
Claims (9)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200610149960XA CN101166146B (en) | 2006-10-19 | 2006-10-19 | Method for Broadband Access Server to Control Triple Service Service |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200610149960XA CN101166146B (en) | 2006-10-19 | 2006-10-19 | Method for Broadband Access Server to Control Triple Service Service |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101166146A true CN101166146A (en) | 2008-04-23 |
| CN101166146B CN101166146B (en) | 2010-08-04 |
Family
ID=39334627
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200610149960XA Expired - Fee Related CN101166146B (en) | 2006-10-19 | 2006-10-19 | Method for Broadband Access Server to Control Triple Service Service |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101166146B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105099927A (en) * | 2015-08-31 | 2015-11-25 | 上海斐讯数据通信技术有限公司 | Method for realizing multi-service channel and router |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6553421B1 (en) * | 1998-09-15 | 2003-04-22 | International Business Machines Corporation | Method and system for broadcast management in a data communication network that permits namesharing |
| CN1323520C (en) * | 2002-05-30 | 2007-06-27 | 中兴通讯股份有限公司 | A dial-up test method for broadband access server |
| CN1505345A (en) * | 2002-12-02 | 2004-06-16 | 深圳市中兴通讯股份有限公司上海第二 | A method for accessing user's forced access to authentication server |
| CN1298145C (en) * | 2003-12-24 | 2007-01-31 | 中兴通讯股份有限公司 | Control device and method for realizing broad band connecting server multiple business united interface |
-
2006
- 2006-10-19 CN CN200610149960XA patent/CN101166146B/en not_active Expired - Fee Related
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105099927A (en) * | 2015-08-31 | 2015-11-25 | 上海斐讯数据通信技术有限公司 | Method for realizing multi-service channel and router |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101166146B (en) | 2010-08-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102025591B (en) | Method and system for implementing virtual private network | |
| US7756998B2 (en) | Managing L3 VPN virtual routing tables | |
| CN102025589B (en) | Method and system for realizing virtual private network | |
| US8121126B1 (en) | Layer two (L2) network access node having data plane MPLS | |
| CN102577257B (en) | Virtual local area network identity transformation method and apparatus | |
| CN101072238A (en) | Method for realizing identical subnet communication for MPLS three-layer virtual special net | |
| CN101908996B (en) | Method for accessing private network and data transmission method, device and system | |
| WO2013139270A1 (en) | Method, device, and system for implementing layer3 virtual private network | |
| WO2011147342A1 (en) | Method, equipment and system for exchanging routing information | |
| WO2011009331A1 (en) | Routing label distribution method and apparatus in virtual private network | |
| WO2023082779A1 (en) | Packet forwarding method, electronic device, and storage medium | |
| CN118233250B (en) | FTTR gateway and FTTR gateway data transmission method | |
| JP4753314B2 (en) | System and program for setting and managing virtual closed network as one layer 3 switch | |
| EP1811728B1 (en) | Method, system and device of traffic management in a multi-protocol label switching network | |
| CN101299723A (en) | Method and apparatus for managing label switching route tunnel information | |
| CN108156067A (en) | It is a kind of to realize the method and system based on Ethernet Virtual Private Network | |
| WO2006002598A1 (en) | A vpn system of a hybrid-site hybrid backbone network and an implementing method thereof | |
| CN101483638A (en) | Method, system and apparatus for applying label | |
| CN101043430B (en) | A method for network address translation between devices | |
| US9054896B2 (en) | SVC-L2 VPNs: flexible on demand switched MPLS/IP layer-2 VPNs for ethernet SVC, ATM and frame relay | |
| CN101001264B (en) | Method, device, network edge equipment and addressing server for L1VPN address distribution | |
| CN110460507A (en) | Service bearer method, apparatus | |
| CN100518138C (en) | Method for realizing virtual special network | |
| CN101557334B (en) | MPLS VPN, VPN multiple-instance user edge device and implementation method thereof | |
| CN100563182C (en) | A method for realizing virtual private network service in multi-layer label switching network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20100804 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |