CN102546568B - Method and device for Internet protocol (IP) terminal being accessed into network - Google Patents

Abstract

Embodiments of the present invention provide a method and device for an IP terminal to access a network. The method includes: binding the user identification with the IP protocol information supported by the IP terminal according to user subscription information or user service change information, and saving the binding Determine the relationship; receive the authentication request of the IP terminal sent by the BRAS, the authentication request includes the user identification of the IP terminal; authenticate the IP terminal according to the user identification, if the authentication is passed, then according to the user identification from Find the IP protocol information supported by the IP terminal in the binding relationship; return the found IP protocol information supported by the IP terminal to the BRAS, so that the BRAS can provide the IP protocol information for the IP according to the IP protocol information. The terminal allocates an IP address and/or an IPv6 address prefix of a corresponding version. Through the method and device provided by the embodiment of the present invention, the IP terminal can correctly access the IP network, which facilitates network operation and maintenance.

Description

Method and device for accessing network by IP terminal

technical field

The present invention relates to the network field, in particular to a method and device for an IP terminal to access a network.

Background technique

At present, broadband users use IP terminals (IP Terminal) to connect to BRAS (Broadband Remote Access Server) through access network (access network). BRAS configures IP addresses and other IP network parameters for IP terminals to realize the function of IP terminals accessing IP networks. The AAA (Authentication, Authorization, and Accounting) server is deployed in the IP network, and is used to implement authentication, authorization, and accounting functions for IP terminals accessing the network. The BRAS communicates with the AAA server through the RADIUS (Remote Authentication Dial In User Service) protocol or the DIAMETER protocol. The specific network structure is shown in Figure 1.

IP terminal is a general term for devices with IP communication capabilities, specifically, it can be a PC (Personal Computer, personal computer), or a home gateway CPE (customer premises equipment, user edge equipment), or other terminals that support the IP protocol stack.

The IP protocol stack is implemented inside the IP terminal. The IP protocol implemented by the IP terminal can be the IPv4 protocol (Internet Protocol Version 4), or the IPv6 (Internet Protocol Version 6) protocol, or it can support both IPv4 and IPv6 protocols. The link layer protocol for the IP terminal to access the BRAS can be PPPOE (PPP over Ethernet), which is called the PPPOE access method; or Ethernet access, which is called the IPOE access method. Different access methods and different IP protocol versions have different protocol methods for the BRAS to configure IP addresses for IP terminals.

In the prior art solutions, the method of distinguishing IP terminals supporting different IP protocol types is to divide different domains (domains) for different IP protocol types of IP terminals, and the user name of the user IP terminal authentication carries domain information. For example, the user naming rule for IPv4 terminals is usernameipv4domain; the user naming rule for IPv6 terminals is usernameipv6domain; the user naming rule for both IPv4 and IPv6 terminals is usernamedualstackdomain. The BRAS determines the IP protocol type of the IP terminal according to the user domain (domain) information. For example, if the BRAS judges that the authentication user name domain is ipv4domain, it means that the IP terminal supports the IPv4 protocol, and an IPv4 address needs to be configured for the IP terminal; if the authentication user name domain is ipv6domain , indicating that the IP terminal supports the IPv6 protocol, and an IPv6 address needs to be configured for the IP terminal. If the IP terminal is a CPE, a delegated IPv6 address prefix needs to be configured through DHCP-PD.

However, in the existing implementation, if the user changes or adds the IP protocol type supported by the IP terminal, the field type in the user name needs to be changed, so that the BRAS can configure the IP address of the correct IP protocol version for the IP terminal. The operation method is not flexible and not easy Network Maintenance.

Contents of the invention

Embodiments of the present invention provide a method and device for an IP terminal to access the network to solve the problem in the prior art that when the user changes or adds the IP protocol type supported by the IP terminal, the domain type in the user name needs to be changed so that the BRAS can provide the IP terminal The problem of configuring the IP address of the correct IP protocol version.

The above object of the embodiments of the present invention is achieved through the following technical solutions:

A method for an IP terminal to access a network, the method is applied to an AAA server, and the method includes:

Bind the user identifier with the IP protocol information supported by the IP terminal according to the user's subscription information or the user's service change information, and save the binding relationship;

receiving the authentication request of the IP terminal sent by the BRAS, where the authentication request includes the user identification of the IP terminal;

Authenticating the IP terminal according to the user ID, and if the authentication is passed, searching the IP protocol information supported by the IP terminal from the binding relationship according to the user ID;

Returning the found IP protocol information supported by the IP terminal to the BRAS, so that the BRAS allocates an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information.

A method for an IP terminal to access a network, the method is applied to a BRAS, and the method includes:

After receiving the access request sent by the IP terminal, sending the authentication request of the IP terminal to the AAA server;

receiving IP protocol information supported by the IP terminal returned by the AAA server;

Allocating an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information.

A kind of AAA server, described AAA server comprises:

The binding unit is used to bind the user identification with the IP protocol information supported by the IP terminal according to the user subscription information or the user service change information, and save the binding relationship;

The receiving unit is configured to receive the authentication request of the IP terminal sent by the BRAS, where the authentication request includes the user identification of the IP terminal;

an authentication unit, configured to authenticate the IP terminal according to the user identifier of the IP terminal received by the receiving unit;

A search unit, configured to search the IP protocol information supported by the IP terminal from the binding relationship saved by the binding unit according to the user identifier of the IP terminal when the authentication by the authentication unit passes;

A sending unit, configured to return the IP protocol information supported by the IP terminal found by the search unit to the BRAS, so that the BRAS assigns an IP address of a corresponding version to the IP terminal according to the IP protocol information and/or IPv6 address prefixes.

A kind of BRAS, described BRAS comprises:

a sending unit, configured to send the authentication request of the IP terminal to the AAA server after receiving the access request sent by the IP terminal;

a receiving unit, configured to receive the IP protocol information supported by the IP terminal returned by the AAA server;

An allocating unit, configured to allocate an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information.

An IP terminal network access system, the system comprising:

The AAA server is used to bind the user identification with the IP protocol information supported by the IP terminal according to the user subscription information or user service change information, and save the binding relationship. After receiving the IP address containing the user identification of the IP terminal sent by the BRAS When the authentication request of the terminal is made, the IP terminal is authenticated according to the user ID, and when the authentication is passed, the IP protocol information supported by the IP terminal is searched from the binding relationship according to the user ID, and the found The IP protocol information supported by the IP terminal is returned to the BRAS;

The BRAS is configured to send the authentication request of the IP terminal to the AAA server after receiving the access request sent by the IP terminal, and after receiving the IP protocol information supported by the IP terminal returned by the AAA server, according to The IP protocol information assigns an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal.

With the method and device provided by the embodiments of the present invention, when a user signs up or changes a service, the user ID is bound to the IP protocol information supported by the IP terminal, and then the IP protocol information supported by the IP terminal is sent to the BRAS, so that the The BRAS assigns an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal, so that the IP terminal can correctly access the IP network and facilitate network operation and maintenance.

Description of drawings

The drawings described here are used to provide further understanding of the present invention, constitute a part of the application, and do not limit the present invention. In the attached picture:

FIG. 1 is a schematic diagram of a broadband service network structure;

Fig. 2 is the method flowchart of the embodiment of the present invention;

Fig. 3 is a method flowchart of another embodiment of the present invention;

FIG. 4 is a flow chart of an implementation manner of applying the method of this embodiment;

FIG. 5 is a flow chart of another implementation manner of applying the method of this embodiment;

Fig. 6 is the flow chart of the third embodiment of the method of applying this embodiment;

FIG. 7 is a block diagram of an AAA server according to an embodiment of the present invention;

FIG. 8 is a block diagram of a BRAS according to an embodiment of the present invention;

FIG. 9 is a block diagram of an IP terminal network access system provided by an embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention more clear, the embodiments of the present invention will be further described in detail below in conjunction with the embodiments and the accompanying drawings. Here, the exemplary embodiments and descriptions of the present invention are used to explain the present invention, but not to limit the present invention.

Figure 2 is a method for an IP terminal to access a network provided by an embodiment of the present invention, the method is applied to an AAA server, please refer to Figure 2, the method includes:

Step 201: Bind the user identifier with the IP protocol information supported by the IP terminal according to the user subscription information or the user service change information, and save the binding relationship;

Step 202: receiving the authentication request of the IP terminal sent by the BRAS, the authentication request including the user identification of the IP terminal;

Step 203: Authenticate the IP terminal according to the user ID of the IP terminal, and if the authentication is passed, search the IP protocol information supported by the IP terminal from the binding relationship according to the user ID;

Step 204: Return the found IP protocol information supported by the IP terminal to the BRAS, so that the BRAS allocates an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information.

In this embodiment, the user identifier can be a user name, then step 201 of this embodiment is to bind the user name with the IP protocol information supported by the IP terminal, and save the binding relationship; step 203 of this embodiment is to Find the IP protocol information supported by the IP terminal from the binding relationship.

In this embodiment, the user identifier may also be logical port number information accessed by the IP terminal on the BRAS, where the logical port number information is, for example, frame, slot, port or virtual local area network information.

The IP protocol information in this embodiment may be the IP protocol version supported by the IP terminal and/or the protocol type used to configure the IP address and prefix for the IP terminal. The IP protocol version here includes: IPv4 version and/or IPv6 version; the protocol type used for IP terminal configuration IP address and prefix here includes: IPCP agreement, IPv6CP agreement, DHCPv6 agreement, DHCPv4 agreement, ND agreement, and/or DHCP-PD protocol.

In this embodiment, the BRAS has different access modes, and IP terminals of different IP protocol versions configure IP addresses in different ways. For example: BRAS configures address and network layer parameters for IPv4 terminals accessed by PPPOE through IPCP (The PPP Internet Protocol Control Protocol RFC1332 definition) protocol; BRAS configures addresses and network layer parameters for IPv6 terminals accessed by PPPOE through IPv6CP (The PPP Internet Protocol version 6 Control Protocol , defined in RFC5072) protocol to configure IPv6 link-local addresses, configure IPv6 global addresses and network layer parameters through DHCPv6 (Dynamic Host configuration protocol version 6, defined in RFC3315); version) protocol to configure IPv4 addresses and network layer parameters; BRAS configures IPv6global addresses and network layer parameters through the DHCPv6 protocol for IPv6 terminals accessed through IPOE, which is called a stateful DHCPv6 mechanism; or configures IPv6global through ND (Neighbor Discovery, RFC4861 definition) Address, network layer parameters are configured through the DHCPv6 protocol, which is called a stateless DHCPv6 mechanism; in particular, when the IP terminal device is a CPE, the BRAS supports configuring the IPv6 address prefix to the CPE through DHCP-PD (DHCP prefix delegation RFC3633 definition) , and then the CPE configures the IPv6 address prefix to the IP devices inside the home through the ND protocol.

In this embodiment, the IP protocol information can be transmitted through the IP protocol version attribute of the RADIUS protocol, can also be transmitted through the IP address and prefix configuration mode attributes of the RADIUS protocol, and can also be transmitted through the extended attribute value pair according to the specification of the diameter protocol . The following will be described through different embodiments.

Through the method provided by the embodiment of the present invention, when the user signs up or changes the service, the user ID is bound to the IP protocol information supported by the IP terminal, and then the IP protocol information supported by the IP terminal is sent to the BRAS, so that the BRAS can provide The IP terminal is assigned a corresponding version of an IP address and/or an IPv6 address prefix, so that the IP terminal can correctly access the IP network and facilitate network operation and maintenance.

FIG. 3 is a flow chart of a method for an IP terminal to access a network provided by an embodiment of the present invention. The method corresponds to the method in the embodiment shown in FIG. 2 and is applied to a BRAS. Please refer to FIG. 3. The method includes:

Step 301: After receiving the access request of the IP terminal, sending the authentication request of the IP terminal to the AAA server;

Step 302: receiving the IP protocol information supported by the IP terminal returned by the AAA server;

Step 303: Allocate an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information.

In this embodiment, similarly, the IP protocol information may be the IP protocol version supported by the IP terminal and/or the protocol type used to configure the IP address and prefix for the IP terminal. The IP protocol version here can include: IPv4 version and/or IPv6 version; The protocol type used here for IP terminal configuration IP address and prefix can include: IPCP agreement, IPv6CP agreement, DHCPv6 agreement, DHCPv4 agreement, ND agreement, and / or DHCP-PD protocol.

In this embodiment, the IP protocol information can be transmitted through the IP protocol version attribute of the RADIUS protocol; it can also be transmitted through the IP address and prefix configuration mode attributes of the RADIUS protocol; transfer. The following will be described through different embodiments.

Through the method provided by the embodiment of the present invention, when the user signs up or changes the service, the AAA server binds the user ID with the IP protocol information supported by the IP terminal, and then sends the IP protocol information supported by the IP terminal to the IP protocol information of this embodiment BRAS, after receiving the IP protocol information, the BRAS in this embodiment assigns an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information, so that the IP terminal can correctly access the IP network and facilitate network operation maintain.

In order to make the method in the embodiment shown in FIG. 2 and FIG. 3 clearer and easier to understand, the method in this embodiment will be described in detail below through different embodiments.

Fig. 4 is the flow chart of applying the method of this embodiment, the IP terminal accesses the AAA server through the BRAS, please refer to Fig. 4, the process includes:

Step 401: When the user signs up or changes the service, the AAA server binds the user identification with the IP protocol information supported by the IP terminal according to the user's subscription information or the user's service change information, and saves the binding relationship. So far, the binding relationship configuration Go to the AAA server;

Step 402: The IP terminal initiates a network access request to the BRAS, and carries the user identifier in the network access request message;

Step 403: The BRAS receives the network access request message of the IP terminal, and sends an authentication request to the AAA server carrying the user identifier;

Step 404: The AAA server authenticates the IP terminal according to the user ID in the authentication request, and if the authentication is passed, searches for the IP protocol information supported by the IP terminal in the saved binding relationship according to the user ID;

Step 405: The AAA server notifies the BRAS that the authentication is passed, and carries the IP protocol information supported by the IP terminal in the authentication passed message;

Step 406: The BRAS assigns an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information supported by the IP terminal;

Step 407: The BRAS sends a network access response message to the IP terminal, carrying the assigned IP address and/or IPv6 address prefix and other IP layer parameters, so that the IP terminal configures its own IP address and other IP layer parameters according to the network access response message parameter.

So far, the IP terminal can start to communicate with the IP network.

In this embodiment, when the BRAS communicates with the AAA server through the RADIUS protocol, the IP protocol information can be transmitted through the newly defined IP protocol version (Framed-IP-Protocol-Version) attribute of the RADIUS protocol. The IP protocol version supported by the terminal. In the case of a fixed access mode, the BRAS can configure a correct IP address for the IP terminal according to the IP protocol version information.

Among them, the Framed-IP-Protocol-Version attribute format is defined as follows:

0 1 2 2 3

0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+-+

| Type | Length | Value

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+-+

Value(cont) |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

type

Value for Framed-IP-Protocol-Version.

Length

6

Value

The Value field is four octets, used to indicate the IP version of the

host.

1 ipv4 version

2 ipv6 version

          both ipv4 and ipv6 version

Among them, type is the type field, indicating the value of the IP protocol version attribute; length is the length of the IP protocol version attribute measured in bytes, and the value is 6; value is the value field, the length is 4 bytes, use different values Indicates the IP version supported by the host. For example, a value of 1 indicates the IPv4 version, a value of 2 indicates the IPv6 version, and a value of 3 indicates that both IPv4 and IPv6 versions are supported.

In this embodiment, when the BRAS communicates with the AAA server through the RADIUS protocol, the IP protocol information can be passed through the IP address and prefix configuration mode (Framed-IP-AddressPrefix-Config-Mode) attributes newly defined by the RADIUS protocol. The attribute conveys the protocol type used to configure the IP address and prefix for the IP terminal, such as IPCP, DHCPv6, etc. The AAA server transmits the protocol type information used for IP address and prefix configuration to the BRAS, and further precisely instructs the BRAS on how to configure the correct version of the IP address and prefix for the IP terminal.

Among them, the Framed-IP-AddressPrefix-Config-Mode attribute format is defined as follows:

0 1 2 2 3

0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+-+

| Type | Length | Value

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+-+

Value(cont) |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

type

Value for Framed-IP-AddressPrefix-Config-Mode.

Length

6

Value

The Value field is four octets, used bit mask to indicate the IP address

or prefix configuration protocol. multiple configuration protocol can be

combined in the same attribute.

0x1 PPP IPCP

0x2 DHCPv4

0x4 PPP IPv6CP

0x8 stateful DHCPv6

0x10 ND with stateless DHCPv6

0x20 DHCPv6 PD

Among them, type is the type field, indicating the value of the IP address and prefix configuration mode attribute; length is the length of the IP address and prefix configuration mode attribute measured in bytes, and the value is 6; value is the value field, and the length is 4 characters Section, using a bitmask to indicate the IP address or prefix configuration mode, multiple configuration protocols can be combined into the same attribute value. For example, 0x1 means PPP IPCP; 0x2 means DHCPv4; 0x4 means PPP IPv6CP; 0x8 means stateful DHCPv6; 0x10 means ND with stateless DHCPv6; 0x20 means DHCPv6PD.

In this embodiment, when the BRAS communicates with the AAA server through the DIAMETER protocol, the IP protocol information can be implemented through extended AVP (attribute value pairs) according to the specification of the diameter protocol.

Through the method provided by the embodiment shown in Figure 4, when the user signs up or changes the service, the AAA server binds the user identification with the IP protocol information supported by the IP terminal, and then sends the IP protocol information supported by the IP terminal to the BRAS, After receiving the IP protocol information, the BRAS allocates an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information, so that the IP terminal can correctly access the IP network and facilitate network operation and maintenance.

Fig. 5 is in the method for the embodiment shown in Fig. 4, BRAS communicates with AAA server by RADIUS protocol, and user identification is user name, supports the flow chart of the IP terminal of IPv4 and IPv6 to insert by PPPOE mode simultaneously, please refer to Fig. 5, The process includes:

Step 501: When the user signs up or changes the service, the AAA server binds the user name with the IP protocol information supported by the IP terminal, and saves the binding relationship. So far, the binding relationship is configured on the AAA server;

In this embodiment, the value of the IP protocol information represented by the Framed-IP-Protocol-Version attribute is 3, indicating that both IPv4 and IPv6 are supported, and the value represented by the Framed-IP-AddressPrefix-Config-Mode attribute is 0x13, indicating that Configure IP addresses for IP terminals through IPCP, IPv6CP, and stateful DHCPv6 protocols.

Step 502: the IP terminal carries username and password (username & password) in the response (Response) message of the PPP CHAP phase to request access authentication to the BRAS;

In this embodiment, after the IP terminal and the BRAS negotiate link layer parameters in the PPPOE discovery phase and the PPP LCP phase, in the PPP CHAP phase, the IP terminal authenticates to the BRAS by carrying the user name and password in the response message. The password here may be a value calculated by one-way hashing.

Step 503: BRAS initiates an authentication request to the AAA server by carrying a user name and a password through an authentication request (Access-Request) message of the RADIUS protocol;

Step 504: The AAA server authenticates the IP terminal according to the username and password in the authentication request message. If the authentication is passed, the IP protocol information corresponding to the IP terminal is searched from the previous binding relationship according to the username;

Step 505: AAA server passes through (Access-Accept) message notification BRAS IP terminal authentication through the authentication of RADIUS protocol, and carries IP agreement information in this message;

In this embodiment, the value of the IP protocol information represented by the Framed-IP-Protocol-Version attribute is 3, indicating that both IPv4 and IPv6 are supported, and the value represented by the Framed-IP-AddressPrefix-Config-Mode attribute is 0x13, indicating that Configure IP addresses for IP terminals through IPCP, IPv6CP, and stateful DHCPv6 protocols.

Step 506: The BRAS configures the IPv4 address and network parameters for the IP terminal through the PPP IPCP protocol according to the indication of the IP protocol information;

Step 507: The BRAS configures the IPv6 linklocal address for the IP terminal through the PPP IPv6CP protocol according to the indication of the IP protocol information;

Step 508: The BRAS configures the IPv6 global address and network parameters for the IP terminal through the DHCPv6 protocol according to the indication of the IP protocol information.

Wherein, step 506-508 is the step that BRAS distributes the IP address of corresponding version and/or IPv6 address prefix for IP terminal according to IP agreement information, and wherein, the order that steps 506-508 are carried out on BRAS can be arbitrary, without time on sequence.

So far, the IP terminal can start to communicate with the IP network.

Through the method provided by the embodiment shown in Figure 5, when the user signs up or changes the service, the AAA server binds the user name with the IP protocol information supported by the IP terminal, and then sends the IP protocol information supported by the IP terminal to the BRAS, After receiving the IP protocol information, the BRAS allocates an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information, so that the IP terminal can correctly access the IP network and facilitate network operation and maintenance.

Fig. 6 shows that in the method of the embodiment shown in Fig. 4, the IP terminal is a CPE, which accesses through the IPOE mode, and the BRAS implements the DHCPv6server function, and supports configuring an IPv6 address for the CPE through the DHCPv6 mode, and the DHCPv6PD mode is configured with a delegated prefix (delegated prefix) for the CEP , BRAS and AAA server transmit IP protocol information through RADIUS protocol and Framed-IP-AddressPrefix-Config-Mode attribute. In this embodiment, in the DHCP protocol access mode, the user can be identified by the logical port number information that the IP terminal accesses on the BRAS, for example, through the frame/slot/port/vlan information that the IP terminal accesses on the BRAS ID, so the user ID in this embodiment is the logical port number information that the IP terminal accesses on the BRAS. Please refer to Figure 6, the process includes:

Step 601: When the user signs up or changes the service, the AAA server binds the user identification with the IP protocol information supported by the IP terminal, and saves the binding relationship. So far, the binding relationship is configured on the AAA server;

In this embodiment, the value of the IP protocol information represented by the Framed-IP-AddressPrefix-Config-Mode attribute is 0x28, indicating that the IP address and the delegated prefix are configured for the IP terminal through the stateful DHCPv6 and DHCPv6PD protocols.

Step 602: the IP terminal requests access authentication from the BRAS through a DHCPv6solicit message;

Step 603: BRAS initiates an authentication request to the AAA server by carrying a user identification (user identify) through an authentication request (Access-Request) message of the RADIUS protocol;

In this embodiment, the user identifier is logical port number information accessed by the IP terminal on the BRAS.

Step 604: The AAA server authenticates the IP terminal according to the user ID in the authentication request message, and if the authentication is passed, searches for the IP protocol information corresponding to the IP terminal from the previously saved binding relationship according to the user ID;

Step 605: The AAA server notifies the BRAS that the IP terminal has passed the authentication through an Access-Accept message of the RADIUS protocol, and carries IP protocol information in the message.

In this embodiment, the value of the IP protocol information represented by the Framed-IP-AddressPrefix-Config-Mode attribute is 0x28, indicating that the IP address and the delegated prefix are configured for the IP terminal through the stateful DHCPv6 and DHCPv6PD protocols.

Step 606: the BRAS notifies the IP terminal of passing the authentication through a DHCPv6 Advertise message;

Step 607: the IP terminal requests an IPv6 address and a delegated prefix through a DHCPv6 Request message;

Step 608: The BRAS configures the IP terminal through the DHCPv6 Reply message carrying the IPv6 address, delegated prefix and network parameters.

So far, the IP terminal can start to communicate with the IP network.

Through the method provided by the embodiment shown in Figure 6, when the user signs up or changes the service, the AAA server binds the user ID with the IP protocol information supported by the IP terminal, and then sends the IP protocol information supported by the IP terminal to the BRAS, After receiving the IP protocol information, the BRAS assigns the corresponding version of the IP address and/or IPv6 address prefix to the IP terminal according to the request of the IP terminal and the IP protocol information, so that the IP terminal can correctly access the IP network and facilitate network operation maintain.

FIG. 7 is a block diagram of an AAA server provided by an embodiment of the present invention. Referring to FIG. 7, the AAA server includes:

The binding unit 71 is configured to bind the user identification with the IP protocol information supported by the IP terminal according to the user subscription information or the user service change information, and save the binding relationship;

The receiving unit 72 is configured to receive the authentication request of the IP terminal sent by the BRAS, where the authentication request includes the user identification of the IP terminal;

An authentication unit 73, configured to authenticate the IP terminal according to the user identification of the IP terminal received by the receiving unit 72;

The search unit 74 is used to search the IP protocol information supported by the IP terminal from the binding relationship saved by the binding unit 71 according to the user identification of the IP terminal when the authentication by the authentication unit 73 is passed;

The sending unit 75 is configured to return the IP protocol information supported by the IP terminal found by the search unit 74 to the BRAS, so that the BRAS assigns the corresponding version of the IP address and/or IPv6 address prefix to the IP terminal according to the IP protocol information .

In one embodiment, the user identifier is a user name, and the binding unit 71 is specifically configured to bind the user name to the IP protocol information supported by the IP terminal; Find the IP protocol information supported by the IP terminal.

In one embodiment, the user identification is logical port number information accessed by the IP terminal on the BRAS, where the logical port number information may be frame, slot, port or virtual local area network information.

In one embodiment, the IP protocol information is the IP protocol version supported by the IP terminal and/or the protocol type used to configure the IP address and prefix for the IP terminal. The IP protocol version here can include: IPv4 version and/or IPv6 version; The protocol type used here for IP terminal configuration IP address and prefix can include: IPCP agreement, IPv6CP agreement, DHCPv6 agreement, DHCPv4 agreement, ND agreement, and / or DHCP-PD protocol. The sending unit 75 is specifically used to pass the IP protocol information through the IP protocol version of the RADIUS protocol; or, pass the IP protocol information through the IP address and the prefix configuration mode attribute of the RADIUS protocol; or, according to the specification of the diameter protocol, pass the IP protocol information through Extended attribute-value pairs convey the IP protocol information.

The various components of the AAA server in this embodiment are respectively used to implement the steps of the method in the embodiment shown in FIG. 2 . Since in the embodiment shown in FIG. 2 , each step has been described in detail, it will not be repeated here. repeat.

Through the AAA server of the embodiment of the present invention, when the user signs up or changes the service, the AAA server binds the user identification with the IP protocol information supported by the IP terminal, and then sends the IP protocol information supported by the IP terminal to the BRAS, so that the The BRAS assigns an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal, so that the IP terminal can correctly access the IP network and facilitate network operation and maintenance.

Fig. 8 is a composition block diagram of a BRAS provided by an embodiment of the present invention, please refer to Fig. 8, the BRAS includes:

The sending unit 81 is configured to send the authentication request of the IP terminal to the AAA server after receiving the access request of the IP terminal;

a receiving unit 82, configured to receive the IP protocol information supported by the IP terminal returned by the AAA server;

The allocation unit 83 is configured to allocate an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information.

In one embodiment, in the authentication pass message received by the receiving unit 82, the IP protocol version of the RADIUS protocol is used to transmit the IP protocol information; or, the IP protocol is transmitted through the IP address and prefix configuration mode attributes of the RADIUS protocol information; or, according to the specifications of the diameter protocol, the IP protocol information is transmitted through extended attribute-value pairs.

The components of the BRAS in this embodiment are respectively used to implement the steps of the method in the embodiment shown in FIG. 3 . Since the steps in the embodiment shown in FIG. 3 have been described in detail, details will not be repeated here. .

Through the BRAS provided by the embodiment of the present invention, when the user signs up or changes the service, the AAA server binds the user ID with the IP protocol information supported by the IP terminal, and then sends the IP protocol information supported by the IP terminal to the BRAS of this embodiment BRAS, after receiving the IP protocol information, the BRAS in this embodiment assigns an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information, so that the IP terminal can correctly access the IP network and facilitate network operation maintain.

FIG. 9 is a block diagram of an IP terminal network access system provided by an embodiment of the present invention. Please refer to FIG. 9. The IP terminal network access system includes:

The AAA server 91 is configured to bind the user identification with the IP protocol information supported by the IP terminal according to the user subscription information or the user service change information, and save the binding relationship. When an authentication request of an IP terminal is made, the IP terminal is authenticated according to the user ID, and when the authentication is passed, the IP protocol information supported by the IP terminal is searched from the binding relationship according to the user ID, and the search is performed. The received IP protocol information supported by the IP terminal is returned to the BRAS;

BRAS 92, configured to send the authentication request of the IP terminal to the AAA server after receiving the access request sent by the IP terminal, and after receiving the IP protocol information supported by the IP terminal returned by the AAA server, Allocating an IP address of a corresponding version and/or an IPv6 address prefix to the IP terminal according to the IP protocol information.

Wherein, the AAA server 91 of this embodiment can be realized by the AAA server of the embodiment shown in FIG. 7, and the BRAS 92 of this embodiment can be realized by the BRAS of the embodiment shown in FIG. In the illustrated embodiment, the AAA server and the BRAS have been described in detail, and will not be repeated here.

Through the IP terminal network access system provided by the embodiment of the present invention, when a user signs a contract or changes a service, the AAA server binds the user identification with the IP protocol information supported by the IP terminal, and subsequently sends the IP protocol information supported by the IP terminal To the BRAS, after receiving the IP protocol information, the BRAS assigns the corresponding version of the IP address and/or IPv6 address prefix to the IP terminal according to the IP protocol information, so that the IP terminal can correctly access the IP network and facilitate network operation and maintenance.

The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

The specific embodiments described above have further described the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only specific embodiments of the present invention and are not intended to limit the scope of the present invention. Protection scope, within the spirit and principles of the present invention, any modification, equivalent replacement, improvement, etc., shall be included in the protection scope of the present invention.

Claims (13)

1. a method for IP accessing terminal to network, described method is applied to aaa server, it is characterized in that, described method comprises:

According to user signing contract information or customer service changed information, the IP protocol information that user ID and IP terminal are supported is bound, and preserves this binding relationship;

Receive the authentication request of the IP terminal that BRAS sends, described authentication request comprises the user ID of described IP terminal;

According to described user ID, certification is carried out to described IP terminal, if certification is passed through, then from described binding relationship, search the IP protocol information of described IP terminal support according to described user ID;

The IP protocol information of this IP terminal support found is returned to described BRAS, so that described BRAS is according to described IP protocol information, is IP address and/or the IPv6 address prefix of described IP terminal distribution respective version;

Wherein, described IP protocol information is transmitted by the IP protocol version attribute of radius protocol; Or by IP address and the transmission of prefix configuration mode attribute of radius protocol; Or according to the specification of diameter agreement, by expansion attribute value to transmission.

2. method according to claim 1, is characterized in that: described user ID is user name, then:

The IP protocol information of user ID and the support of IP terminal is bound and is specially: the IP protocol information that user name and IP terminal are supported is bound;

From described binding relationship, search the IP protocol information of described IP terminal support according to described user ID, be specially: the IP protocol information searching the support of described IP terminal according to described user name from described binding relationship.

3. method according to claim 1, is characterized in that: described user ID is the logical port number information that IP terminal accesses on BRAS, and described logical port number information is frame, groove, port or information of virtual local area network.

4. method according to claim 1, is characterized in that: described IP protocol information is the IP protocol version supported of IP terminal and/or is IP terminal configuration IP address and prefix protocol type used; Described IP protocol version comprises: IPv4 version and/or IPv6 version; Describedly to comprise for IP terminal configuration IP address and prefix protocol type used: IPCP agreement, IPv6CP agreement, DHCPv6 agreement, DHCPv4 agreement, ND agreement and/or DHCP-PD agreement.

5. a method for IP accessing terminal to network, described method is applied to BRAS, it is characterized in that, described method comprises:

Send the authentication request of described IP terminal to aaa server after the access request receiving the transmission of IP terminal, described authentication request comprises the user ID of described IP terminal, so that described aaa server carries out certification according to described user ID to described IP terminal, if certification is passed through, then from binding relationship, search the IP protocol information of described IP terminal support according to described user ID; Described binding relationship be signing user or change business time, according to described user signing contract information or described customer service changed information, by the relation that the IP protocol information that user ID and IP terminal are supported is bound;

Receive the IP protocol information of the described IP terminal support that described aaa server returns;

According to IP address and/or IPv6 address prefix that described IP protocol information is described IP terminal distribution respective version;

Wherein, described IP protocol information is transmitted by the IP protocol version attribute of radius protocol; Or, by IP address and the transmission of prefix configuration mode attribute of radius protocol; Or, according to the specification of diameter agreement, by expansion attribute value to transmission.

6. method according to claim 5, is characterized in that: described IP protocol information is the IP protocol version supported of IP terminal and/or is IP terminal configuration IP address and prefix protocol type used; Described IP protocol version comprises: IPv4 version and/or IPv6 version; Describedly to comprise for IP terminal configuration IP address and prefix protocol type used: IPCP agreement, IPv6CP agreement, DHCPv6 agreement, DHCPv4 agreement, ND agreement and/or DHCP-PD agreement.

7. an aaa server, is characterized in that, described aaa server comprises:

Binding unit, for according to user signing contract information or customer service changed information, binds the IP protocol information that user ID and IP terminal are supported, and preserves this binding relationship;

Receiving element, for receiving the authentication request of the IP terminal that BRAS sends, described authentication request comprises the user ID of described IP terminal;

Authentication ' unit, the user ID for the described IP terminal received according to described receiving element carries out certification to described IP terminal;

Search unit, for when the certification of described authentication ' unit is passed through, from the binding relationship that described binding unit is preserved, search the IP protocol information of described IP terminal support according to the user ID of described IP terminal;

Transmitting element, for the described IP protocol information searching the described IP terminal support that unit finds is returned to described BRAS, so that described BRAS is according to described IP protocol information, is IP address and/or the IPv6 address prefix of described IP terminal distribution respective version; Wherein, described transmitting element transmits described IP protocol information by the IP protocol version attribute of radius protocol; Or, transmit described IP protocol information by the IP address of radius protocol and prefix configuration mode attribute; Or, according to the specification of diameter agreement, by expansion attribute value to transmission described IP protocol information.

8. aaa server according to claim 7, is characterized in that: described user ID is user name, and described binding unit is bound specifically for IP protocol information user name and IP terminal supported; The described IP protocol information searched unit and support specifically for searching described IP terminal from described binding relationship according to described user name.

9. aaa server according to claim 7, is characterized in that: described user ID is the logical port number information that IP terminal accesses on BRAS, and described logical port number information is frame, groove, port or information of virtual local area network.

10. aaa server according to claim 7, is characterized in that: described IP protocol information is the IP protocol version supported of IP terminal and/or is IP terminal configuration IP address and prefix protocol type used; Described IP protocol version comprises: IPv4 version and/or IPv6 version; Describedly to comprise for IP terminal configuration IP address and prefix protocol type used: IPCP agreement, IPv6CP agreement, DHCPv6 agreement, DHCPv4 agreement, ND agreement and/or DHCP-PD agreement.

11. 1 kinds of BRAS, is characterized in that, described BRAS comprises:

Transmitting element, for sending the authentication request of described IP terminal after the access request receiving the transmission of IP terminal to aaa server, described authentication request comprises the user ID of described IP terminal, so that described aaa server carries out certification according to described user ID to described IP terminal, if certification is passed through, then from binding relationship, search the IP protocol information of described IP terminal support according to described user ID; Described binding relationship be signing user or change business time, according to described user signing contract information or described customer service changed information, by the relation that the IP protocol information that user ID and IP terminal are supported is bound;

Receiving element, the IP protocol information that the described IP terminal returned for receiving described aaa server is supported; Wherein, the certification that described receiving element receives, by message, transmits described IP protocol information by radius protocol IP protocol version attribute; Or, transmit described IP protocol information by radius protocol IP address and prefix configuration mode attribute; Or, according to the specification of diameter agreement, by expansion attribute value to transmission described IP protocol information;

Allocation units, for according to described IP protocol information being IP address and/or the IPv6 address prefix of described IP terminal distribution respective version.

12. BRAS according to claim 11, is characterized in that: the IP protocol information that described receiving element receives is the IP protocol version supported of IP terminal and/or is IP terminal configuration IP address and prefix protocol type used; Described IP protocol version comprises: IPv4 version and/or IPv6 version; Describedly to comprise for IP terminal configuration IP address and prefix protocol type used: IPCP agreement, IPv6CP agreement, DHCPv6 agreement, DHCPv4 agreement, ND agreement and/or DHCP-PD agreement.

13. 1 kinds of IP terminal network connecting systems, it is characterized in that, described system comprises:

Aaa server, for according to user signing contract information or customer service changed information, the IP protocol information that user ID and IP terminal are supported is bound, and preserve this binding relationship, receive BRAS send comprise the authentication request of IP terminal of the user ID of IP terminal time, according to described user ID, certification is carried out to described IP terminal, when certification is passed through, from described binding relationship, search the IP protocol information of described IP terminal support according to described user ID, the IP protocol information of the described IP terminal support found is returned to described BRAS; Wherein, described IP protocol information is transmitted by the IP protocol version attribute of radius protocol; Or, by IP address and the transmission of prefix configuration mode attribute of radius protocol; Or, according to the specification of diameter agreement, by expansion attribute value to transmission;

BRAS, for sending the authentication request of described IP terminal after the access request receiving the transmission of IP terminal to described aaa server, after the IP protocol information receiving the described IP terminal support that described aaa server returns, be IP address and/or the IPv6 address prefix of described IP terminal distribution respective version according to described IP protocol information.