CN102186168A - Private network access method, device and system - Google Patents

Abstract

The invention discloses a private network access method, device and system. The method comprises the following steps of: when the failure of a special line circuit connected to a private network is detected, automatically accessing a wireless network to determine core network packet domain equipment distributed to an access router of a client in the wireless network; establishing an L2TP (layer-2 tunneling protocol ) tunnel between the access router of the client and an LNS (Lon-Works Network Service) server through the core network packet domain equipment, wherein the LNS server is connected with the core network packet domain equipment and the access router of the private network; and accessing the access router of the private network through the L2TP tunnel and the LNS server, and establishing communication connection between the client and the private network. According to the technical scheme, when the special line circuit connected to the private network fails, the end-to-end L2TP tunnel is established through a wireless network to establish communication connection of the private network, so that the security of data transmission can be effectively ensured.

Description

Private network access method, device and system

technical field

The present invention relates to communication technology, in particular to a dedicated network access method, device and system.

Background technique

At present, in the fixed network data business, the international leased line and multi-protocol label switching (Multi-Protocol Label Switching, MPLS) virtual private network (Virtual Private Network, VPN) networking service provided for enterprises, that is, the private network, is usually based on a synchronous Digital system (Synchronous Digital Hierarchy, SDH), digital data network (Digital Data Network, DDN), Ethernet leased line and other methods are used as the access method of the client. However, due to cost considerations, customers usually rent one access circuit as a leased line circuit instead of renting two physically isolated leased line circuits at the same time. Therefore, when the leased line circuit fails, the access node of the client cannot be connected to the Private network, causing customers to be unable to access the private network normally.

With the popularization of wireless networks, the existing technology also proposes a wireless access method to access the private network through the wireless network, as a backup of the dedicated line circuit, so that when the dedicated line circuit fails, it can be accessed through the wireless access method. The access node of the private line network ensures that customers can normally access the private line network. In the existing MPLS VPN application based on wireless access, it is realized through the mode of Internet Protocol Security (IPsec) gateway. Specifically, the dedicated line circuit between the access router of the client and the access router of the private network is faulty. At this time, the access router of the client can be connected to the wireless network, and connected to the public network through the IPsec gateway, so as to establish a connection between the client and the private network through the wireless network and the public network, so that the client can work normally. Access to the private network.

However, in the existing wireless access mode that uses the IPsec gateway mode to realize the private network, it is to access the public network through the wireless network. Since the private network is a private network with good confidentiality requirements, and the public network's confidentiality Relatively poor performance, when accessing the private network through the public network, when the data on the private network is transmitted through the public network, it is easy to be attacked and easily cause information leakage, thereby reducing the security of data transmission and failing to meet the security requirements of the private network At the same time, in the process of accessing the private network through the public network, the convergence of public network routes takes more time. When the private line fails, the network switching time is longer, which is not conducive to the rapid switching between the client and the private network, affecting users use experience.

To sum up, the existing backup circuit technology based on the wireless access method as a private line circuit is realized by using the IPsec gateway mode. Network security; at the same time, due to the time-consuming convergence of public network routes, the network switching time is longer when the private line fails, which affects the user experience.

Contents of the invention

The invention provides a private network access method, device and system, which can establish a communication connection between a client and a private network when a dedicated line circuit fails, effectively improve the security of network data transmission, and reduce network switching time.

The present invention provides a private network access method, including:

When detecting the failure of the dedicated line circuit for accessing the private network, automatically access the wireless network to determine the core network packet domain device allocated for the client's access router in the wireless network;

Establishing a Layer 2 Tunneling Protocol L2TP tunnel between the access router of the client and the LNS server through the core network packet domain device, wherein the LNS server communicates with the core network packet domain device and the core network packet domain device through an IP bearer network The access router connection of the private network;

Through the L2TP tunnel and the LNS server, access the access router of the private network, and establish a communication connection between the client and the private network.

The present invention provides a private network access device, including:

The wireless access unit is used to automatically access the wireless network when detecting a failure of the dedicated line circuit for accessing the private network, so as to determine the core network packet domain device allocated for the client's access router in the wireless network;

An L2TP tunnel establishment unit, configured to establish an L2TP tunnel between the access router of the client and an LNS server through the core network packet domain device, wherein the LNS server communicates with the core network packet domain through an IP bearer network The device is connected to the access router of the private network;

The private network access unit is configured to access the access router of the private network through the L2TP tunnel and the LNS server, and establish a communication connection between the client and the private network.

The present invention provides a private network access system, including: a client access router, a private network access router and an LNS server, the client access router is deployed on the private network client; the private network access The ingress router and the LNS server are deployed in the private network, and the LNS server is connected to the access router of the private network;

The access router of the client is configured to automatically access the wireless network when detecting a failure of the dedicated line circuit for accessing the private network, and pass through the core network packet domain device allocated for the access router of the client in the wireless network , establishing an L2TP tunnel with the LNS server;

The LNS server is configured to negotiate with the access router of the client to establish the L2TP tunnel, and map the L2TP tunnel to a private network;

The access router of the client is further configured to access the access router of the private network through the L2TP tunnel and the LNS server, so as to establish a communication connection between the client and the private network.

The private network access method, device and system provided by the present invention establish an end-to-end L2TP tunnel between the client's access router and the LNS server by utilizing the wireless network when the dedicated line circuit for accessing the private network fails, and utilize The L2TP tunnel and LNS server are connected to the access router of the private network to realize the communication connection between the client and the private network. The data transmission process will not pass through the public network, which can effectively guarantee the confidentiality and security of customer data information , to meet the security needs of the private network, and at the same time, it can effectively reduce the network switching time and improve the user experience.

Description of drawings

FIG. 1 is a schematic flow diagram of Embodiment 1 of the private network access method of the present invention;

FIG. 2 is a schematic flow diagram of Embodiment 2 of the private network access method of the present invention;

3 is a schematic diagram of the application environment of Embodiment 2 of the private network access method of the present invention;

FIG. 4 is a schematic structural diagram of Embodiment 1 of the private network access device of the present invention;

5 is a schematic structural diagram of the L2TP tunnel establishment unit in Embodiment 2 of the private network access device of the present invention;

Fig. 6 is a schematic structural diagram of an embodiment of a private network access system according to the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

FIG. 1 is a schematic flowchart of Embodiment 1 of a private network access method according to the present invention. As shown in Figure 1, the private network access method in this embodiment may include the following steps:

Step 101, when the access router of the client detects that the dedicated line circuit for accessing the private network fails, it automatically accesses the wireless network to determine the core network packet domain device assigned to the client's access router in the wireless network;

Step 102, the client's access router sets up a Layer 2 Tunneling Protocol (Layer2 Tunneling Protocol, L2TP) tunnel between the client's access router and the L2TP-based network server (LNS server) through the core network packet domain device, wherein , the LNS server is deployed on the private network side, and is connected to the packet domain equipment of the core network and the access router of the private network through the IP bearer network;

Step 103, the access router of the client accesses the access router of the private network through the established L2TP tunnel and the LNS server, and establishes a communication connection between the client and the private network.

This embodiment can be applied to the connection of the private network. When the dedicated line circuit between the client and the private network fails, a communication connection between the client and the private network can be established through the wireless network. Specifically, when the fixed network set between the client and the private network, that is, the private line circuit fails, the access router of the client can access the wireless network, and through the core packet domain equipment in the wireless network, Establish an end-to-end L2TP tunnel between the ingress router and the LNS server deployed on the side of the private network, so that the established L2TP tunnel and the LNS server can be used to access the access router of the private network to realize the connection between the client and the private network. communication connection.

In this embodiment, when the private line circuit of the private line network that the client accesses fails, an L2TP tunnel can be established between the client's access router and the LNS server on the private network side, so that the established L2TP tunnel can be used to realize The communication between the client and the private network, the communication between the client and the private network is through the established L2TP tunnel, and does not need to pass through the public network. Therefore, in the process of data transmission, the customer data can be guaranteed to the greatest extent throughout the process The confidentiality and security of information meet the security needs of the private network; at the same time, in the process of network switching, that is, to re-establish the communication connection between the client and the private network, since there is no need to access the private network through the public network, there is no need to There will be a delay problem caused by the long time-consuming public network convergence in the existing technology, which can effectively reduce the network switching time, that is, the network switching time, so that when the private line circuit fails, the communication between the client and the private network can be quickly established Connection, to ensure that the client quickly accesses the private network, which can effectively improve the user experience.

To sum up, the private network access method provided by the embodiment of the present invention establishes an end-to-end L2TP tunnel between the client access router and the LNS server by using the wireless network when the private line circuit for accessing the private network fails, and Use the L2TP tunnel and the LNS server to connect to the access router of the private network to realize the communication connection between the client and the private network. The data transmission process will not pass through the public network, which can effectively guarantee the confidentiality and security of customer data information It meets the security needs of the private network, and at the same time, it can effectively reduce the network switching time and improve the user experience.

In this embodiment, the wireless network through which the client accesses the private network may be Global System for Mobile Communications (GSM), Wideband Code Division Multiple Access (WCDMA) or Long Term Evolution (Long Term Evolution). Term Evolution, LTE) network, wherein, when the wireless network is a GSM or WCDMA network, the above-mentioned core network packet domain device can be a gateway GPRS support node (Gateway GPRS Support Node, GGSN), and when the wireless network is an LTE network, the above-mentioned The core network packet domain device may be a system architecture evolution gateway (System Architecture Evolution, SAE-GW). In the following, the WCDMA network will be used as the wireless network, and the GGSN in it will be used as the core packet domain device, and the process of the client accessing the private network through the WCDMA network will be described.

FIG. 2 is a schematic flowchart of Embodiment 2 of the private network access method of the present invention; FIG. 3 is a schematic diagram of the application environment of Embodiment 2 of the private network access method of the present invention. In this embodiment, as shown in FIG. 3 , the branch network A where the client is located communicates with the private network B through the dedicated line circuit of the fixed network C; the access router 10 of the client at the branch network A side has The wireless access function can be accessed to the WCDMA network through the base station D of the WCDMA network, and the access router 10 of the client can support the L2TP tunnel protocol, and can establish an L2TP tunnel with devices supporting the L2TP tunnel protocol. In this embodiment The access router 10 of the client can also be referred to as an L2TP access router; one side of the private network B is provided with an LNS server 30, and is connected with the private network access router PE 40 in the private network B, and the LNS server 30 is based on The equipment of L2TP tunnel agreement; WCDMA network assigns a dedicated APN for the built-in USIM card of the access router 10 of the client in advance, and saves in the HLR70 as user information, like this, when the access router 10 of the client accesses the network, SSGN 60 Just can determine that the access router 10 of the client is connected to the core network packet domain device GGSN 20 of the LNS server 30 of the private network side by querying the HLR, wherein, the GGSN 20 is the pre-installed APN in the WCDMA network. The set device that can be connected to the LNS server, when the access router 10 of the client accesses the WCDMA network, can establish a connection with the LNS server through the GGSN 20. Wherein, the access router 10 of the client is connected by an optical fiber link through the fixed network C and the access router PE 50 of the private network, and the access router 10 of the client is connected with the base station D through a wireless network, and the base station D, SGSN 60, GGSN 20, LNS server 30, and the access router PE 40 of the private network pass through the optical fiber link, and after the access router 10 of the client is connected to the wireless network, it can be established to the LNS server through the network equipment in the wireless network. 30 L2TP tunnels between.

In this embodiment, the client's access router, WCDMA network and LNS server can be used as the backup of the fixed network C, so that when the fixed network C fails, the client's access router can be connected to the private network through the WCDMA network and the LNS server access router. Specifically, under normal circumstances, the access router 10 of the client will be connected to the access router PE 50 of the private network through the fixed network C, so that the user can access the private network B through the fixed network C; when the fixed network C fails, the Wireless routing can be started, that is, through the technical solution of this embodiment, an L2TP tunnel is established between the access router 10 of the client and the LNS server 30, and the access router 10 of the client will access the private network through the L2TP tunnel and the LNS server 30. The router PE 40 enables the user to access the private network through the L2TP tunnel. Specifically, as shown in Figure 2, the access router of the client accessing the private network through the WCDMA network may specifically include the following steps:

Step 201, when the access router of the client detects that the access to the fixed network is down, it starts wireless access and automatically accesses the WCDMA network;

Step 202, the GPRS service support node (SERVICING GPRS SUPPORTNODE, SGSN) in the WCDMA network queries the APN of the access router of the client through the home location register (Home Location Register, HLR), to determine the access router assigned to the client by the WCDMA network the GGSN;

Step 203, GGSN judges that the client's access router is a private network user according to the APN of the client's access router, and assigns a private IP address for the client's access router;

Step 204, the access router of the client accesses the LNS server through the private IP address allocated by the GGSN, and establishes a session and negotiation with the LNS server;

Step 205, the LNS server assigns a new IP address to the access router of the client;

Step 206, the client's access router establishes an L2TP tunnel between the client's access router and the LNS server through the new IP address;

Step 207, the LNS server completes the mapping between the established L2TP tunnel and the private network;

Step 208, the access router of the client accesses the access router of the private network through the L2TP tunnel and the LNS server.

In the above steps 201 to 203, when the access router of the client detects that the fixed network is down, that is, the private line circuit is faulty, it can initiate the attachment process, register the mobility management MM context information on the SGSN, and access the WCDMA network; the SGSN User information can be queried from the HLR, and the APN assigned to the client's access router by the WCDMA network can be found. Through APN analysis, the GGSN that provides services for the client's access router can be determined; the client's access router can use this GGSN. The packet data protocol context (PDP context) is activated, and the GGSN assigns a private IP address to the access router of the client.

In the above steps 204 to 208, the access router of the client can establish a session connection between the GGSN and the LNS server through the assigned private IP address; the LNS server can assign a new IP address to the access router of the client, so that The new IP address establishes an end-to-end L2TP tunnel between the client's access router and the LNS server; the client's access router can announce its own routing information to the LNS server through the L2TP tunnel, wherein the The LNS server supports the Border Gateway Protocol (BGP) function, so that the mapping between the L2TP tunnel and the private network can be completed through the BGP function; the LNS server can be connected to the network as a communication terminal (Communication Edge, CE), and related The routing information of the private network is declared to the access router PE of the private network, so that the access router of the client can be connected to the access router PE of the private network, thereby establishing a session channel between the client and the private network, and the user of the client That is, the private network can be accessed through the session channel.

In this embodiment, the session channel between the client and the private network, that is, after the communication connection is established, the data message can be forwarded. Specifically, for the uplink IP data message, the access router of the client can send the received The uplink IP data packet is transmitted to the GGSN through the WCDMA network and SGSN, and transparently transmitted by the GGSN to the LNS server. Finally, the LNS server sends the IP data packet to the access router PE of the private network. During this process, the IP Data packets are sent to the access router PE of the private network through L2TP tunnel encapsulation. The WCDMA network does not need to process IP data packets, but only needs to be transparently transmitted; for downlink IP data packets, the LNS server needs to be in the IP Identify the IP network segment configured in the client's access router in the data message, find the corresponding client access router according to the L2TP session, and send the downlink IP data message to the client's access router through L2TP tunnel encapsulation. During the sending process of the downlink IP data message, the WCDMA network only performs the transparent transmission of the IP data message, and does not need to perform operations such as message processing in the middle, which can effectively reduce the workload of the GGSN.

FIG. 4 is a schematic structural diagram of Embodiment 1 of a private network access device according to the present invention. As shown in Figure 4, the private network access device in this embodiment includes a wireless access unit 1, an L2TP tunnel establishment unit 2, and a private network access unit 3, wherein:

The wireless access unit 1 is used to automatically access the wireless network when detecting a failure of the dedicated line circuit for accessing the private network, so as to determine the core network packet domain device allocated for the client's access router in the wireless network;

The L2TP tunnel establishment unit 2 is used to establish an L2TP tunnel between the access router of the client and the LNS server through the core network packet domain device, wherein the LNS server is connected to the core network packet domain device and the private network through the IP bearer network Incoming router connection;

The private network access unit 3 is used to access the access router of the private network through the L2TP tunnel and the LNS server, and establish a communication connection between the client and the private network.

The access device of the private network in this embodiment can be used as the access router of the client, so that when the private line circuit between the client and the private network fails, it can be automatically connected to the private network through the wireless network to ensure that the client is connected to the private network. For the specific implementation process of the communication connection between them, reference may be made to the above description of the method embodiment of the present invention, which will not be repeated here.

FIG. 5 is a schematic structural diagram of the L2TP tunnel establishment unit in Embodiment 2 of the private network access device of the present invention. On the basis of the technical solution of the embodiment shown in FIG. 4 above, as shown in FIG. 5 , the L2TP tunnel establishment unit 2 may specifically include a first acquisition module 21, a negotiation establishment module 22, a second acquisition module 23, and an L2TP tunnel establishment module 24 ,in:

The first obtaining module 21 is used to obtain the private IP address assigned by the core network packet domain device to the access router of the client;

A negotiation establishment module 22, configured to establish a negotiation between the access router of the client and the LNS server through the obtained private IP address;

The second obtaining module 23 is used to obtain the IP address assigned by the LNS server to the access router of the client;

The L2TP tunnel establishment module 24 is configured to establish an L2TP tunnel between the access router of the client and the LNS server through the IP address allocated by the LNS server.

In this embodiment, the above-mentioned private network access unit can be specifically used to announce the routing information attached to the client's access router itself to the LNS server through the L2TP tunnel, so that the LNS server can announce the routing information to the private network access Router, to connect the access router of the client to the access router of the private network. The above-mentioned wireless access unit can be specifically used to automatically access the wireless network when a fault is detected in the dedicated line circuit for accessing the private network, so as to inquire the HLR through the SGSN of the access node APN allocated for the client's access router, so as to determine the APN according to the APN. The core packet domain device assigned to the client's access router in the wireless network.

Fig. 6 is a schematic structural diagram of an embodiment of a private network access system according to the present invention. As shown in Figure 6, the private network access system of this embodiment includes: an access router 100 of the client, an access router 200 of the private network and an LNS server 300, and the access router 100 of the client is deployed at the client of the private network; The access router 200 of the private network and the LNS server 300 are deployed in the private network, the LNS server 300 is connected to the access router 200 of the private network, and the access router 100 of the client is connected to the LNS server through a wireless network.

Wherein, the access router 100 of the client is used to automatically access the wireless network when a fault is detected in the dedicated line circuit for accessing the private network, and establish and communicate with the core network packet domain device assigned to the access router 100 of the client in the wireless network. The L2TP tunnel between the LNS servers 300; the LNS server 300 is used to negotiate with the access router 100 of the client, cooperate to establish the L2TP tunnel between the two, and map the L2TP tunnel to the private network; the access router 100 of the client also uses The access router 200 is connected to the private network through the established L2TP tunnel and the LNS server 300, so as to establish a communication connection between the client and the private network.

In this embodiment, the LNS server 300 is correspondingly connected to a port of the access router 200 of the private network, and each port of the access router of the private network has multiple sub-interfaces. Therefore, the LNS server 300 can also connect the L2TP tunnel Mapped to the sub-interface of the access router 200 of the private network, so that the LNS server 300 can directly send the data to the sub-interface of the access router 200 of the private network after receiving the data sent by the access router of the client through the L2TP tunnel . Specifically, since the clients of the private network are certain, a correspondence table can be maintained on the LNS server, and the access routers of each client are mapped to the L2TP tunnels of the LNS server to each of the access routers of the private network. In this way, when a new customer access node is added, it is only necessary to configure the corresponding data on the LNS server, that is, modify the corresponding relationship table on the LNS server, and establish the access between the new customer access node and the private network The corresponding relationship between the sub-interfaces of the routers is enough. In this way, there is no need to configure data on the access router of the private network, which can effectively facilitate the maintenance and management of the network, and will not frequently modify the private network due to the addition of new customer access nodes. Accessing the router for data configuration facilitates network deployment.

In the private line network access system of this embodiment, the client's access router 100 can establish the client's access router 100 through the core network packet domain device in the wireless network when the private line circuit that the client accesses to the private network fails. The L2TP tunnel between the LNS server and the LNS server 300, so that the access router 100 of the client can access the access router 200 of the private network through the L2TP tunnel and the LNS server, and establish a communication connection between the client and the private network, wherein, The access router 100 of the client may specifically be the private network access device provided by the above-mentioned embodiments of the present invention. For its specific structure and implementation, refer to the descriptions of the above-mentioned method and device embodiments of the present invention, which will not be repeated here.

Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the It includes the steps of the above method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (10)

1. a special network access method is characterized in that, comprising:

When detecting the private wire circuit fault that inserts private network, automatic access of radio network is in definite described wireless network to be the core network packet-domain equipment of the couple in router distribution of client;

By described core network packet-domain equipment, between the couple in router of described client and LNS server, set up the Level 2 Tunnel Protocol L2TP Tunnel, wherein, described LNS server is connected with the couple in router of described core network packet-domain equipment and private network by the IP bearer network;

By described L2TP Tunnel and LNS server, insert the couple in router of described private network, set up communicating to connect between client and the private network.

2. special network access method according to claim 1 is characterized in that, and is described by described core network packet-domain equipment, sets up L2TP Tunnel and comprise between the couple in router of described client and LNS server:

The private IP address that the couple in router that to obtain described core network packet domain equipment be described client distributes;

By described private IP address, between the couple in router of described client and LNS server, set up and consult;

The couple in router IP address allocated that to obtain described LNS server be described client;

By described IP address, between the couple in router of described client and LNS server, set up L2TP Tunnel.

3. special network access method according to claim 1 is characterized in that, described by described L2TP Tunnel, the couple in router that inserts described private network comprises:

By described L2TP Tunnel, the routing iinformation that the couple in router self of described client is hung is down declared to described LNS server, so that with the couple in router of the described routing iinformation declaration in road, be linked into the couple in router of described private network with couple in router with described client to described private network by described LNS server.

4. special network access method according to claim 1 is characterized in that, described access of radio network comprises to determine the core network packet-domain equipment that distributes with the couple in router that is client in the described wireless network:

When detecting the private wire circuit fault that inserts private network, access of radio network, so that the access node APN that distributes for the couple in router of described client to attaching position register HLR inquiry by GPRS serving GPRS support node SGSN, so that determine in the described wireless network core packet domain equipment that the couple in router for described client distributes according to described APN.

5. a private network access device is characterized in that, comprising:

Wireless Access Unit, when being used to detect the private wire circuit fault that inserts private network, automatic access of radio network is in definite described wireless network to be the core network packet-domain equipment of the couple in router distribution of client;

L2TP Tunnel is set up the unit, be used for by described core network packet-domain equipment, set up L2TP Tunnel between the couple in router of described client and LNS server, wherein, described LNS server is connected with the couple in router of described core network packet-domain equipment and private network by the IP bearer network;

The private network access unit is used for inserting the couple in router of described private network by described L2TP Tunnel and LNS server, sets up communicating to connect between client and the private network.

6. private network access device according to claim 5 is characterized in that, described L2TP Tunnel is set up the unit and comprised:

First acquisition module is used to obtain described core network packet domain equipment the private IP address that the couple in router that is described client distributes;

Module is set up in negotiation, is used for by described private IP address, sets up between the couple in router of described client and LNS server and consults;

Second acquisition module is used to obtain described LNS server the couple in router IP address allocated that is described client;

L2TP Tunnel is set up module, is used for the address by described IP, sets up L2TP Tunnel between the couple in router of described client and LNS server.

7. private network access device according to claim 5, it is characterized in that, described private network access unit, specifically be used for by described L2TP Tunnel, the routing iinformation that the couple in router self of described client is hung is down declared to described LNS server, so that with the couple in router of described routing iinformation declaration, be linked into the couple in router of described private network with couple in router with described client to described private network by described LNS server.

8. private network access device according to claim 5, it is characterized in that, described Wireless Access Unit, when specifically being used to detect the private wire circuit fault that inserts private network, access of radio network, so that the access node APN that distributes for the couple in router of described client to HLR inquiry by SGSN, so that determine in the described wireless network core packet domain equipment that the couple in router for described client distributes according to described APN.

9. a private network connecting system is characterized in that, comprising: the couple in router of client, the couple in router of private network and LNS server, and the couple in router of described client is deployed in the client of private network; The couple in router of described private network and LNS department server are deployed in private network, and described LNS server is connected with the couple in router of described private network;

The couple in router of described client, when being used to detect the private wire circuit fault that inserts private network, automatic access of radio network, and by in the described wireless network being the core network packet-domain equipment of the couple in router distribution of described client, the L2TP Tunnel between foundation and the described LNS server;

Described LNS server, be used for and the couple in router of described client between set up and consult to set up described L2TP Tunnel, and described L2TP Tunnel is mapped to private network;

The couple in router of described client also is used for inserting the couple in router of described private network by described L2TP Tunnel and described LNS server, thereby sets up communicating to connect between described client and the private network.

10. private network connecting system according to claim 9, it is characterized in that, described LNS service specifically also is used for described L2TP Tunnel is mapped to the sub-interface of the couple in router of private network, so that after receiving the data of couple in router by described L2TP Tunnel transmission of client, directly send to the sub-interface of the couple in router of described private network.

Images