CN100362820C - Method and system for bearing PPP proxy server with Ethernet - Google Patents

Method and system for bearing PPP proxy server with Ethernet Download PDF

Info

Publication number
CN100362820C
CN100362820C CNB031564410A CN03156441A CN100362820C CN 100362820 C CN100362820 C CN 100362820C CN B031564410 A CNB031564410 A CN B031564410A CN 03156441 A CN03156441 A CN 03156441A CN 100362820 C CN100362820 C CN 100362820C
Authority
CN
China
Prior art keywords
pppoe
session
message
server
network side
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB031564410A
Other languages
Chinese (zh)
Other versions
CN1486037A (en
Inventor
任成珺
刘小辉
黄胜森
李希昆
周志伟
张健
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Huawei Digital Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CNB031564410A priority Critical patent/CN100362820C/en
Publication of CN1486037A publication Critical patent/CN1486037A/en
Application granted granted Critical
Publication of CN100362820C publication Critical patent/CN100362820C/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The present invention relates to a method for carrying point-to-point protocol proxy servers via an Ethernet and a system of the method. MAC address of other PPPoE servers which need to act are configured on direct connection PPPoE servers of users. The users and user side servers firstly establish user side PPPoE Session, when user service marks can not be resolved, the user side PPPoE servers and network side proxy servers establish network side PPPoE Session. The coincidence relation about Session ID of the user side PPPoE and the network side PPPoE is established. The present invention has the input method of user side PPPoE messages that the Session Id of the network side PPPoE Session replaces the Session ID of the messages, the MAC address of a network side proxy server replaces destination MAC address in the messages, and the messages are transmitted to the proxy server. The present invention has the input method of the network side PPPoE messages that the Session ID of the user side PPPoE Session replaces the Session ID of the messages, the MAC address of the users replace the MAC address in the messages, and the messages are transmitted to the users. The present invention can reduce the investment of entire broadband access networks and increase practicability and operation capacity, and the present invention can be used in the field of broadband network communication.

Description

Use the method and system of Ethernet bearing point-to-point protocol acting server
Technical field:
The invention belongs to the broadband access network technical field, relate in particular to a kind of method of using Ethernet bearing point-to-point protocol acting server, and the system that uses this method.
Background technology:
Along with development of internet technology, broadband access has at present become a kind of leading user mode access.Broadband access generally comprises ADSL, VDSL, modes such as Ethernet.According to the needs of operator's operation, these all modes all need broadband dialing and the process that authenticates.Current this broadband dialing is PPPoE (an Ethernet bearing point-to-point protocol) with the main mode of authentication.
PPPoE needs two entities, and one is pppoe client, and one is the PPPoE server.PPPoE is divided into two processes, verification process and data transmission procedures.The general form (PPPoE carries Internet protocol) that adopts IP overPPPoE in data transmission procedure.Traditionally, process IP over PPPoE's generally is an edge router, also claims BRAS (BAS Broadband Access Server).This equipment operation is on the level of the 3rd a layer of network layer of network seven layer protocols of ISO (International Standards Organization) regulation, and network layer refers generally to the IP layer.General BRAS equipment also has the function that various user's complicated service are handled except having PPPoE Server (Ethernet bearing point-to-point protocol server) function, such as VPDN, and MPLS, IP SEC, NAT etc. make it very complicated, and price are high.But these functions only have the small part user to use, and most user only needs the function of PPPoE Server, and this situation has caused the investment waste of operator.
At present, have the trend of BRAS equipment end officeization, the function of PPPoE Server that promptly only keeps BRAS is as a BRAS, to reduce cost.But the BRAS of end officeization only handles the function of PPPoE Server, can't support more complicated customer service function.But a lot of functions only obtain just can give to support after the user profile in the PPPoE verification process, just can finish support to all customer services thereby make the BRAS of end office (EO) to work in coordination with large-scale BRAS.But the user just must select different PPPoE servers in the face of different business like this, the inconvenience that causes complexity that the user uses and operator to commence business.
Summary of the invention:
The object of the present invention is to provide a kind of method, even make when in network, existing a plurality of PPPoEServer to be used, the user still can only PPPoE Server of perception, thereby has reduced the complexity in user's use, makes operator that more easy-to-use business can be provided.
The present invention also aims to provide a kind of suitable system for carrying out said process.
The method of Ethernet bearing point-to-point protocol acting server of the present invention, its step comprises:
1) directly connects on the PPPoE server MAC Address of other PPPoE servers that configuration needs act on behalf of the user, be called user side PPPoE server and network side acting server;
2) user side PPPoE startup of server verification process, user and user side server are at first set up PPPoE Session, be called user side PPPoE Session, when user service identification can't be resolved, set up another PPPoESession by user side PPPoE server and network side acting server, be called network side PPPoE Session;
3) set up user side PPPoE Session and network side PPPoE Session corresponding relation about Session ID;
4) import for user side PPPoE message:
Search the SessionID of the network side PPPoE Session corresponding with user side PPPoE Session, replace the Session ID of message with the Session ID of network side PPPoE Session, target MAC (Media Access Control) address with in the MAC Address replacement message of network side acting server sends to acting server with message;
Import for network side PPPoE message:
Search the SessionID of the network side PPPoE Session corresponding with user side PPPoE Session, replace the Session ID of message with the Session ID of user side PPPoE Session, target MAC (Media Access Control) address with in user's the MAC Address replacement message sends to the user with message.
Described user side PPPoE Session and network side PPPoE Session are configured in the user side PPPoE server hardware about the corresponding relation of Session ID.
The control message and the data message of the PPPoE message of described user side and network side are handled respectively.
The system of Ethernet bearing point-to-point protocol acting server of the present invention comprises the user side PPPoE Server module on the user side PPPoE server, network side PPPoE Client module, PPPoE message proxy module; Wherein
The MAC Address of user side PPPoE Server block configuration network side PPPoE acting server; Start verification process; When the customer service type can't be resolved, send and set up the message of acting server to network side PPPoE Client module;
User side PPPoE Server module and network side PPPoE Client module are set up on the user side PPPoE server on the PPPoE Session and network side acting server PPPoE Session about the corresponding relation of Session ID;
PPPoE message proxy module receives the user side PPPoE message of user side PPPoE Server module forwards, the Session ID of the network side PPPoE Session corresponding with user side PPPoE Session will be searched, replace the Session ID of message with the Session ID of network side PPPoE Session, target MAC (Media Access Control) address with in the MAC Address replacement message of acting server sends to acting server with message; Receive network side PPPoE message, search the Session ID of the network side PPPoE Session corresponding with user side PPPoE Session, replace the Session ID of message with the Session ID of user side PPPoE Session, target MAC (Media Access Control) address with in user's the MAC Address replacement message sends to the user with message.
Said system also comprises PPPoE message proxy module driver module, and PPPoE Session on PPPoE Session and the network side acting server on the user side PPPoE server is configured in the hardware about the corresponding relation of Session ID.
Described PPPoE message proxy module comprises PPPoE data message proxy module and PPPoE control message proxy module; PPPoE data message proxy module deal with data message; PPPoE control message proxy module processing controls message.
Above-mentioned PPPoE data message proxy module is realized by hardware FPGA (field programmable gate array) or NP (network processing unit).
Adopt method and system of the present invention to make and only handle basic PPPoE authentication, the BRAS equipment of termination cooperatively interacts with the BRAS with complicated customer service tenability and provides professional to the broadband user, reduce the investment of whole broadband access network, improved the easy-to-use type of whole network and the ability that can run.
The annex explanation:
Fig. 1: PPPoE Proxy Server subsystem technology framework schematic diagram of the present invention
Wherein:
A: user side PPPoE controls message
B: user side PPPoE Server module
C:PPPoE control message proxy module
D: network side PPPoE Client module
E: network side PPPoE controls message
F:PPPoE data message proxy module driver module
G: user side PPPoE data message
H:PPPoE data message proxy module
I: network side PPPoE data message
Fig. 2: use networking schematic diagram of the present invention
Wherein:
1:Radius Server server
2: fire compartment wall
3:Internet
4:BRAS
5: three-tier switch
6: Ethernet
7:IP?DSLAM
Embodiment:
The present invention is general, and a subsystem as the concrete network equipment is realized, is called PPPoE Proxy Server subsystem, comprises as lower module:
User side PPPoE Server module, network side PPPoE Client module, PPPoE control message proxy module, PPPoE data message proxy module, PPPoE message proxy module driver module.
The relation of each module such as accompanying drawing 1:PPPoE Proxy Server subsystem technology framework schematic diagram.
The present invention is to be processed to be input as the input of user side PPPoE message and network side PPPoE imports.
Algorithm of the present invention is as follows:
Generally speaking, the sign of customer service is distinguished with the wide band access user name.Be specially the domain name part of @ character back in the user name.
Idiographic flow of the present invention is as follows:
Configuration flow:
The identification information of the PPPoE Server that configuration will be acted on behalf of is generally the MAC Address of PPPoE Server.This PPPoE Server is referred to as to act on behalf of PPPoE Server.
Import for user side PPPoE message:
1, finishes PPPoE Session by user side PPPoE Server module and set up process;
2, finish LCP by user side PPPoE Server module and set up process;
3, user side PPPoE Server module begins the PAP/CHAP verification process, the analysis user name, find user name domain name part can't resolve the time, transmission is set up the message of Proxy Server to network side PPPoE Client module, comprises the Session ID of user side PPPoE Session in the message.Simultaneously send LCP Restart message to the user.The PPPoE Session of wait network side PPPoE Client sets up and finishes message;
4, network side PPPoE Client and act on behalf of PPPoE Server and finish PPPoE Session and set up process, set up the corresponding relation of the Session ID of the Session ID of network side PPPoE Session and user side PPPoE Session, call PPPoE agent data driver of modules module this relation is configured to hardware, successful rear line side PPPoE Server module sends PPPoE Session foundation and finishes message;
5, user side PPPoE Server module receive the PPPoE Session of network side PPPoE Client module set up finish message after, the PPPoE control message of user side is forwarded to PPPoE control message proxy module.
6, PPPoE control message proxy module utilizes the SessionID of the user side PPPoE Session in the message to find the Session ID of corresponding network side PPPoE Session, and replace Session id field in the message with the Session ID of network side, replace target MAC (Media Access Control) address in the message with the MAC Address of acting on behalf of PPPoE Server, message is sent to act on behalf of PPPoE Server then.Finish LCP, PAP/CHAP, processes such as IPCP, the user begins to carry out normal data communication.
7, after PPPoE data message processing module receives the PPPoE data message, find the Session ID of corresponding network side PPPoE Session according to the Session id field in the message, and replace Session id field in the message with the Session ID of network side, replace target MAC (Media Access Control) address in the message with the MAC Address of acting on behalf of PPPoE Server, message is sent to act on behalf of PPPoE Server then.
Import for network side PPPoE:
1 if the control message then enters network side PPPoE Client module, and network side PPPoE Client module is controlled message with PPPoE and is forwarded to PPPoE control message proxy module.
2, PPPoE control message proxy module utilizes the SessionID of the network side PPPoE Session in the message to find the Session ID of corresponding user side PPPoE Session, and replace Session id field in the message with the Session ID of user side, replace target MAC (Media Access Control) address in the message with user's MAC Address, then message is sent to user side.
3, after PPPoE data message processing module receives the PPPoE data message, find the Session ID of corresponding user side PPPoE Session according to the network side Session id field in the message, and replace Session id field in the message with the Session ID of user side, replace target MAC (Media Access Control) address in the message with user's MAC Address, then message is sent to the user.
Like this, just realized the function of PPPoE Proxy Server (PPPoE acting server).
The networking diagram of practical application such as accompanying drawing 2: as Fig. 2,7 is an IP DSLAM system, and the basic BRAS function of PPPoE Server is provided, and is used for realizing authentication and termination to xDSL user's PPPoE message.According to technical scheme of the present invention, provide the function of PPPoE Proxy Server to be used for simultaneously and BRAS with complicated customer service tenability cooperates the support of finishing the customer service of complexity.
Configuration is supported the PPPOE that carries out of user port on 7 control desk, the address of Configuration Agent PPPoE ProxyServer, and the Mac address for higher level BRAS configures the uplink service mouth, and the uplink service mouth is connected with internet, Radius Server.
The user at first starts the PPPOE dialing procedure, finds it is basic PPPoE authentication when 7, when termination is professional, by self PPPoE Server user's PPPoE message is handled.When finding to be the customer service that self can't handle, give PPPoE Proxy Server subsystem with business and handle, PPPoEProxy Server cooperates the processing of finishing this customer service with higher level BRAS.

Claims (7)

1. method of using Ethernet bearing point-to-point protocol acting server, its step comprises:
1) directly connects on the PPPoE server MAC Address of other PPPoE servers that configuration needs act on behalf of the user, be called user side PPPoE server and network side acting server;
2) user side PPPoE startup of server verification process, user and user side PPPoE server are at first set up PPPoE Session, be called user side PPPoE Session, when user service identification can't be resolved, set up another PPPoESession by user side PPPoE server and network side acting server, be called network side PPPoE Session;
3) set up user side PPPoE Session and network side PPPoE Session corresponding relation about Session ID;
4) import for user side PPPoE message:
Search the SessionID of the network side PPPoE Session corresponding with user side PPPoE Session, replace the Session ID of message with the Session ID of network side PPPoE Session, target MAC (Media Access Control) address with in the MAC Address replacement message of network side acting server sends to acting server with message;
Import for network side PPPoE message:
Search the SessionID of the network side PPPoE Session corresponding with user side PPPoE Session, replace the Session ID of message with the Session ID of user side PPPoE Session, target MAC (Media Access Control) address with in user's the MAC Address replacement message sends to the user with message.
2. the method for use Ethernet bearing point-to-point protocol acting server as claimed in claim 1 is characterized in that described user side PPPoE Session and network side PPPoE Session are configured in the user side PPPoE server hardware about the corresponding relation of Session ID.
3. the method for use Ethernet bearing point-to-point protocol acting server as claimed in claim 1 is characterized in that the control message and the data message of described user side PPPoE message handled respectively; The control message and the data message of network side PPPoE message are handled respectively.
4. a system that uses Ethernet bearing point-to-point protocol acting server comprises the user side PPPoE Server module on the user side PPPoE server, network side PPPoE Client module, PPPoE message proxy module; It is characterized in that
The MAC Address of user side PPPoE Server block configuration network side PPPoE acting server; Start verification process; When the customer service type can't be resolved, send and set up the message of acting server to network side PPPoE Client module;
User side PPPoE Server module and network side PPPoE Client module are set up on the user side PPPoE server on the PPPoE Session and network side acting server PPPoE Session about the corresponding relation of Session ID;
PPPoE message proxy module receives the user side PPPoE message of user side PPPoE Server module forwards, the Session ID of the network side PPPoE Session corresponding with user side PPPoE Session will be searched, replace the Session ID of message with the Session ID of network side PPPoE Session, target MAC (Media Access Control) address with in the MAC Address replacement message of acting server sends to acting server with message; Receive network side PPPoE message, search the Session ID of the network side PPPoE Session corresponding with user side PPPoE Session, replace the Session ID of message with the Session ID of user side PPPoE Session, target MAC (Media Access Control) address with in user's the MAC Address replacement message sends to the user with message.
5. the system of use Ethernet bearing point-to-point protocol acting server as claimed in claim 4, it is characterized in that also comprising PPPoE message proxy module driver module, this module is configured to PPPoE Session on PPPoE Session and the network side acting server on the user side PPPoE server in the hardware about the corresponding relation of Session ID.
6. the system of use Ethernet bearing point-to-point protocol acting server as claimed in claim 4 is characterized in that described PPPoE message proxy module comprises PPPoE data message proxy module and PPPoE control message proxy module; PPPoE data message proxy module deal with data message; PPPoE control message proxy module processing controls message.
7. the system of use Ethernet bearing point-to-point protocol acting server as claimed in claim 6 is characterized in that PPPoE data message proxy module is by hardware FPGA or NP realization.
CNB031564410A 2003-08-29 2003-08-29 Method and system for bearing PPP proxy server with Ethernet Expired - Fee Related CN100362820C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB031564410A CN100362820C (en) 2003-08-29 2003-08-29 Method and system for bearing PPP proxy server with Ethernet

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB031564410A CN100362820C (en) 2003-08-29 2003-08-29 Method and system for bearing PPP proxy server with Ethernet

Publications (2)

Publication Number Publication Date
CN1486037A CN1486037A (en) 2004-03-31
CN100362820C true CN100362820C (en) 2008-01-16

Family

ID=34156943

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB031564410A Expired - Fee Related CN100362820C (en) 2003-08-29 2003-08-29 Method and system for bearing PPP proxy server with Ethernet

Country Status (1)

Country Link
CN (1) CN100362820C (en)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1303780C (en) * 2004-05-18 2007-03-07 Ut斯达康通讯有限公司 Broadband user calling charging method
CN100442706C (en) * 2005-04-19 2008-12-10 华为技术有限公司 Method for making maintaining node labels to match with media visiting controlled addresses
CN100450080C (en) 2005-05-17 2009-01-07 华为技术有限公司 Method and apparatus for astringing two layer MAC address
CN101051993A (en) * 2006-04-04 2007-10-10 华为技术有限公司 Method for substituting conversation mark conversation replacing method using said conversation mark substitution
US7564850B2 (en) 2007-01-17 2009-07-21 Huawei Technologies Co., Ltd. Method for transmitting layer 2 packet and access device thereof
CN101102291B (en) * 2007-08-11 2010-08-18 中兴通讯股份有限公司 Method for realizing user Internet access based on PPPOE agent function
CN103095857A (en) * 2011-10-28 2013-05-08 中兴通讯股份有限公司 Method of accessing and quitting network and sending messages and network side equipment
CN108965268B (en) * 2018-06-28 2021-03-26 重庆广用通信技术有限责任公司 Method and system for disordered conversion of PPPoE internal and external network accounts
CN108965269B (en) * 2018-06-28 2021-03-30 重庆广用通信技术有限责任公司 Method and system for disordered conversion of PPPoE internal and external network accounts

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1392708A (en) * 2001-06-19 2003-01-22 深圳市中兴通讯股份有限公司 Allocation method of wide band access user
WO2003021866A2 (en) * 2001-08-31 2003-03-13 The Boeing Company Point-to-point protocol over ethernet for mobile platforms
CN1437360A (en) * 2002-02-07 2003-08-20 华为技术有限公司 Method for the point-to-point protocol log-on user to obtain Internet protocol address

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1392708A (en) * 2001-06-19 2003-01-22 深圳市中兴通讯股份有限公司 Allocation method of wide band access user
WO2003021866A2 (en) * 2001-08-31 2003-03-13 The Boeing Company Point-to-point protocol over ethernet for mobile platforms
CN1437360A (en) * 2002-02-07 2003-08-20 华为技术有限公司 Method for the point-to-point protocol log-on user to obtain Internet protocol address

Also Published As

Publication number Publication date
CN1486037A (en) 2004-03-31

Similar Documents

Publication Publication Date Title
EP1535449B1 (en) System and method for dynamic simultaneous connection to multiple service providers
US6490289B1 (en) Multiple network connections from a single PPP link with network address translation
JP3515983B2 (en) Network access methods, including direct wireless access to the Internet
US6282575B1 (en) Routing mechanism for networks with separate upstream and downstream traffic
US20080225749A1 (en) Auto-configuration of a network device
US6381646B2 (en) Multiple network connections from a single PPP link with partial network address translation
CN100534055C (en) Method for implementing network access through broadband router
CN101110847B (en) Method, device and system for obtaining medium access control address
EP1748603B1 (en) A transmission method for message in layer 2 and an access device
WO2003013072A1 (en) A method of user data exchange in the data network and a data network system
JP2002523977A (en) Apparatus and method for remote access server
CN100362820C (en) Method and system for bearing PPP proxy server with Ethernet
JP2003179618A (en) METHOD AND APPARATUS FOR PPPoA SPOOFING IN POINT-TO-POINT PROTOCOL OVER ASYNCHRONOUS TRANSMISSION MODE USING xDSL MODEM
CN1553674A (en) Method for wideband connection server to obtain port numbers of its uers
EP2357761B1 (en) Proxy method of media stream, voice exchanger and communication system
US20070140118A1 (en) Access multiplexer
US7564850B2 (en) Method for transmitting layer 2 packet and access device thereof
EP2854343B1 (en) Subscriber service selection over non-channelized media
EP2073432B1 (en) Method for binding an access terminal to an operator and corresponding access terminal
CN100442735C (en) Dynamic configuration insertion terminal realizing method
CN100473038C (en) Method for supporting multiple Ethernet point-to-point protocol conversation by one Ethernet interface
EP2222021B1 (en) A method and system for implementing the inter-accession of stack members
Cisco Cisco IOS Dial Technologies Configuration Guide Release 12.2
CN2679929Y (en) System of using ethernet to bear point-to-point protocol agency server
CN101197835A (en) Virtual special network access method, system and device

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
ASS Succession or assignment of patent right

Owner name: HUAWEI TECHNOLOGY CO., LTD.

Free format text: FORMER OWNER: GANGWAN NETWORK CO., LTD.

Effective date: 20061013

C41 Transfer of patent application or patent right or utility model
TA01 Transfer of patent application right

Effective date of registration: 20061013

Address after: 518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen

Applicant after: Huawei Technologies Co., Ltd.

Address before: 100089, No. 21 West Third Ring Road, Beijing, Haidian District, Long Ling Building, 13 floor

Applicant before: Harbour Networks Holdings Limited

C14 Grant of patent or utility model
GR01 Patent grant
ASS Succession or assignment of patent right

Owner name: HUAWEI DIGIT TECHNOLOGY CO., LTD.

Free format text: FORMER OWNER: HUAWEI TECHNOLOGY CO LTD

Effective date: 20111230

C41 Transfer of patent application or patent right or utility model
COR Change of bibliographic data

Free format text: CORRECT: ADDRESS; FROM: 518129 SHENZHEN, GUANGDONG PROVINCE TO: 100085 HAIDIAN, BEIJING

TR01 Transfer of patent right

Effective date of registration: 20111230

Address after: 100085 Beijing, Haidian District on the road, No. 3

Patentee after: Huawei Digit Technology Co., Ltd.

Address before: 518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen

Patentee before: Huawei Technologies Co., Ltd.

CP01 Change in the name or title of a patent holder

Address after: 100085 Beijing, Haidian District on the road, No. 3

Patentee after: Beijing Huawei Digital Technology Co.,Ltd.

Address before: 100085 Beijing, Haidian District on the road, No. 3

Patentee before: Huawei Digit Technology Co., Ltd.

CP01 Change in the name or title of a patent holder
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20080116

Termination date: 20180829

CF01 Termination of patent right due to non-payment of annual fee