CN109660459B - Physical gateway and method for multiplexing IP address - Google Patents

Physical gateway and method for multiplexing IP address Download PDF

Info

Publication number
CN109660459B
CN109660459B CN201710936102.8A CN201710936102A CN109660459B CN 109660459 B CN109660459 B CN 109660459B CN 201710936102 A CN201710936102 A CN 201710936102A CN 109660459 B CN109660459 B CN 109660459B
Authority
CN
China
Prior art keywords
gateway
group
user request
vlan
address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201710936102.8A
Other languages
Chinese (zh)
Other versions
CN109660459A (en
Inventor
付为民
郝建忠
郑浩彬
陈涛
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Group Guangdong Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Group Guangdong Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Group Guangdong Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN201710936102.8A priority Critical patent/CN109660459B/en
Publication of CN109660459A publication Critical patent/CN109660459A/en
Application granted granted Critical
Publication of CN109660459B publication Critical patent/CN109660459B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/58Association of routers
    • H04L45/586Association of routers of virtual routers
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/74Address processing for routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272Virtual private networks

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the invention provides a physical gateway and a method for multiplexing IP addresses thereof, wherein the physical gateway comprises the following steps: the system comprises router equipment, firewall equipment, switch equipment and a server; the router device is virtualized into a plurality of VPN groups, each VPN group comprising at least one GRE tunnel and at least one VLAN interface; the firewall equipment virtualizes a plurality of virtual firewall groups, and each virtual firewall group is connected with each VPN group in a one-to-one correspondence mode through the VLAN interfaces; the switch equipment virtualizes a plurality of VLAN groups, and each VLAN group is connected with each virtual firewall group in a one-to-one correspondence manner; the server is physically divided into a plurality of gateway groups, and each gateway group is connected with the VLAN group in a one-to-one correspondence mode. By virtualizing a set of physical gateway or WAP gateway into a plurality of sets of independent logical gateways, each set of logical gateway node can independently access gateway nodes with non-repeated terminal IP address pools, and the effect of terminal private network IP address multiplexing is achieved.

Description

Physical gateway and method for multiplexing IP address
Technical Field
The embodiment of the invention relates to the field of internet communication, in particular to a physical gateway and a method for multiplexing an IP address thereof.
Background
With the rapid development of the mobile internet, the way for users to browse website information has been changed from a single PC to mobile terminal devices. Different from browsing website information at a PC (personal computer) end, a mobile end user needs to obtain a terminal IP address from a private network terminal address Pool IP Pool of a gateway node through Radius authentication before surfing the Internet by using an 2/3/4G network. The rapid development of the number of users therefore has led to corresponding network devices being continuously built, including the massive construction of gateway nodes.
More and more mobile phone/mobile terminal users are provided, the number of private network IP addresses reserved in the ipv4 protocol is very limited, and addresses in a private network terminal address Pool IP Pool of a gateway node under the same gateway are not repeatable, so that the terminal address Pool IP Pool of the existing network core network is multiplexed based on the requirement, that is, the private network terminal address Pool IP Pool is multiplexed among different gateways, but the number of gateways is limited and the equipment load is not high, and there is no need to waste investment when a new gateway is continuously established.
Based on the current situation, two schemes exist in the current network at present, which can continuously meet the docking requirements of more and more newly-built gateway nodes:
1. and continuously optimizing the multiplexing scheme among different gateways: and adjusting the IP address pools of the gateway nodes as much as possible, so that the IP address pools of the gateway nodes under the same gateway do not conflict, and striving to reach the theoretical maximum value of the number of gateway-accessible gateway nodes as much as possible.
The disadvantages of the scheme are that: after the IP Pool of the core network is multiplexed, according to the principle that the same gateway can not simultaneously access gateway nodes multiplexing the IP Pool, the terminal IP address Pool is checked and adjusted when a newly-built gateway node is accessed every time, a large amount of manpower is required to be input, and errors are easy to occur; in addition, on the premise that the number of gateways of the existing network is limited, the actual existing network is close to the theoretical maximum number of gateway nodes which can be butted by the gateways, and the situation that the inorganic probability is adjustable is faced, so that the service development is restricted.
2. Optimizing an APN fusion scheme: reducing the number of gateway nodes for bearing agent requests, completely distinguishing CMNET and CMWAP services, concentrating the CMWAP APN configuration agent 10.0.0.172 service on a small number of gateway nodes, and only connecting the small number of gateway nodes with WAP gateways; the rest CMNET and CMWAP service without proxy is loaded on other gateway nodes, and the partial gateway nodes do not need to be connected with WAP gateway, thereby reducing the number of gateway nodes needing to be connected with WAP gateway.
The disadvantages of the scheme are that: the service of the CMNET APN configuration proxy IP cannot be used.
Disclosure of Invention
The invention provides a physical gateway and a method for multiplexing IP addresses thereof, aiming at solving the problem of shortage of IP addresses of private networks under the conditions of not additionally increasing hardware and not changing a network architecture and the original business flow.
In a first aspect, an embodiment of the present invention provides a physical gateway, including: the system comprises router equipment, firewall equipment, switch equipment and a server;
the router device is virtualized into a plurality of VPN groups, each VPN group comprising at least one GRE tunnel and at least one VLAN interface;
the firewall equipment virtualizes a plurality of virtual firewall groups, and each virtual firewall group is connected with each VPN group in a one-to-one correspondence mode through the VLAN interfaces;
the switch equipment virtualizes a plurality of VLAN groups, and each VLAN group is connected with each virtual firewall group in a one-to-one correspondence manner;
the server is physically divided into a plurality of gateway groups, and each gateway group is connected with the VLAN group in a one-to-one correspondence mode.
In a second aspect, an embodiment of the present invention provides a method for multiplexing an IP address by a physical gateway, where the method includes:
each VPN group receives a user request sent by a gateway node through a GRE tunnel and sends the user request to a corresponding virtual firewall group through a VLAN interface;
after each virtual firewall group receives the user request, the user request is sent to a corresponding VLAN group through a VPN routing forwarding table according to an initial IP address in the user request;
and after each VLAN group receives the user request, the user request is sent to the corresponding gateway group.
In a third aspect, an embodiment of the present invention provides an electronic device, where the electronic device includes: the processor and the memory are communicated with each other through a bus; the memory stores program instructions executable by the processor, the processor invoking the program instructions to perform a method comprising: each VPN group receives a user request sent by a gateway node through a GRE tunnel and sends the user request to a corresponding virtual firewall group through a VLAN interface; after each virtual firewall group receives the user request, the user request is sent to a corresponding VLAN group through a VPN routing forwarding table according to an initial IP address in the user request; and after each VLAN group receives the user request, the user request is sent to the corresponding gateway group.
In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the following method: each VPN group receives a user request sent by a gateway node through a GRE tunnel and sends the user request to a corresponding virtual firewall group through a VLAN interface; after each virtual firewall group receives the user request, the user request is sent to a corresponding VLAN group through a VPN routing forwarding table according to an initial IP address in the user request; and after each VLAN group receives the user request, the user request is sent to the corresponding gateway group.
The GRE router and the firewall of the physical gateway are divided into a plurality of groups of VPNs for logical isolation, the exchanger is divided into a plurality of groups of vlans for logical isolation, a gateway server and a storage device are not virtualized, the physical device is divided into independent groups with the number of peer-to-peer groups, each group corresponds to one logical gateway node, namely, one set of physical gateway or WAP gateway is virtualized into a plurality of sets of independent logical gateways, so that each set of logical gateway nodes can independently access gateway nodes with non-repetitive terminal IP address pools, and the effect of terminal private network IP address multiplexing is achieved.
Drawings
Fig. 1 is a schematic structural diagram of a physical gateway according to an embodiment of the present invention;
fig. 2 is a schematic flowchart of a method for multiplexing an IP address by a physical gateway according to an embodiment of the present invention;
fig. 3 is a block diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some embodiments, but not all embodiments, of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a schematic structural diagram of a physical gateway provided in an embodiment of the present invention. As shown in fig. 1, the physical gateway includes: the system comprises router equipment, firewall equipment, switch equipment and a server;
the router device is virtualized into a plurality of VPN groups, each VPN group comprising at least one GRE tunnel and at least one VLAN interface;
the firewall equipment virtualizes a plurality of virtual firewall groups, and each virtual firewall group is connected with each VPN group in a one-to-one correspondence mode through the VLAN;
the switch equipment virtualizes a plurality of VLAN groups, and each VLAN group is connected with each virtual firewall group in a one-to-one correspondence manner;
the server is physically divided into a plurality of gateway groups, and each gateway group is connected with the VLAN group in a one-to-one correspondence mode.
Specifically, a router device (GRE device for short) and a firewall device (FW device for short) of the physical gateway are logically isolated by dividing the physical gateway into multiple groups of VPNs, a switch device (including a three-layer switch and a four-layer switch) is logically isolated by dividing multiple groups of vlans, a server and a storage device (not shown in the figure) are not virtualized, and are divided into multiple independent groups by the physical gateway, wherein each group corresponds to one virtual logical gateway. The physical gateway is isolated into a plurality of groups of logical gateways through the VPN, and each group of logical gateways comprises a VPN group, a virtual firewall group, a VLAN group and a gateway group. It should be noted that, in fig. 1, only one physical gateway is divided into 3 groups of logical gateways as an example, and specifically, the physical gateway is divided into several groups of logical gateways, which may be determined according to the number of physical devices and the amount of traffic. The physical gateway in this embodiment includes an integrated gateway and a WAP gateway, the integrated gateway is a gateway capable of accessing both WAP services and NET services, and both the WAP services and the NET services include services with and without proxy IP.
On the basis of the above embodiment, the server in the physical gateway includes: a gateway server and an IMDB server.
Specifically, the gateway server is configured to distribute user requests requesting different services to different function servers. An IMDB (in Memory database) server (also called an IMDB database) for storing Radius data, where the Radius data mainly includes a correspondence between an IP address and a mobile phone number; radius requests arrive at the gateway server, which writes, updates, or deletes the data into the IMDB database. When a user request reaches each gateway group, a gateway server in the gateway group initiates inquiry to an IMDB server, and if the corresponding relation between an IP address and the mobile phone number of the user exists in an IMDB database, the user can carry out internet access service; if the corresponding relation is not inquired, the user cannot carry out the internet surfing service. That is, the IMDB server is configured to perform radius authentication on the user request, and if the authentication passes, the user may perform an internet access service, and if the authentication does not pass, the user may not perform the internet access service. In addition, the server may also include a traffic server, a service server, and other functions.
The physical gateway provided by the embodiment of the invention divides the GRE router and the firewall into a plurality of groups of VPNs for logical isolation, the gateway server and the storage device are not virtualized, the physical device is divided into independent gateway groups with the number of peer-to-peer groups, each gateway group corresponds to one logical gateway, namely, one set of physical gateway or WAP gateway is virtualized into a plurality of sets of independent logical gateways, so that each set of logical gateway node can independently access gateway nodes with non-repeated terminal IP address pools, and the effect of multiplexing the terminal private network IP addresses is achieved.
Generally, the process of the user terminal acquiring the terminal IP address is as follows: when a UE initial Attach (first attachment) 2/3G/LTE network, the UE requests a PDN connection to a gateway node, the gateway node allocates an IP address from an IP address pool configured by the gateway node, then sends a RADIUS on-line request message containing information such as the IP address, MSISDN, NAS/GGSNID and the like to a physical gateway connected with the gateway node, after receiving the RADIUS on-line request message, the physical gateway writes data into an IMDB database, successfully forwards a RADIUS on-line response message to the gateway node, and transmits the IP address to the UE while establishing a default bearer. And after acquiring the IP address, the UE can use the service provided by the PDN.
Fig. 2 is a schematic flowchart of a method for multiplexing an IP address by a physical gateway according to an embodiment of the present invention. Under the networking framework that a physical gateway is isolated into a plurality of groups of logical gateways by a VPN, and each group of logical gateway group comprises a VPN group, a virtual firewall group, a VLAN group and a corresponding gateway group, as shown in figure 2, the method comprises the following steps:
s201, each VPN group receives a user request sent by a gateway node through a GRE tunnel, and sends the user request to a corresponding virtual firewall group through a VLAN interface; specifically, in this embodiment, different logical gateways are bound in advance for the gateway nodes in the multiplexing IP address pool. The gateway nodes with repeated IP address pools are accessed to the GRE router through the corresponding GRE tunnels, each VPN group receives the user request sent by the gateway node through the GRE tunnels, and then the user request is sent to the virtual firewall group corresponding to the VLAN interface through the VLAN interface.
S202, after each virtual firewall group receives the user request, according to an initial IP address in the user request, the user request is sent to a corresponding VLAN group through a VPN routing forwarding table;
specifically, after the VPN group routes the user request to the corresponding virtual firewall group, the virtual firewall group obtains an initial IP address in the user request (which may also be referred to as a radius request at this time), and if the initial IP address is a preset radius IP address that needs to be distinguished, the initial IP address needs to be translated. If the initial IP address is not the preset radius IP address, the virtual firewall group can directly send the user request to the corresponding VLAN group through the VRF. A Virtual Routing Forwarding (VRF), also called VPN-instance, through which each Virtual firewall group can query a VLAN group connected to itself.
For example, the radius IP configured in the core network of china mobile 2/3/4G is 10.0.0.173, that is, if the initial IP address is 10.0.0.173, the target address needs to be translated and converted, and a new IP address needs to be reassigned to the user request. For example, in the case where the physical gateways are segregated into three groups of logical gateways by the VPN, virtual firewall group 1 would target 10.0.0.173: 1812/1813 is mapped to 10.0.0.172: 1812/1813, respectively; the virtual firewall group 2 does not translate; virtual group firewall 3, targets 10.0.0.173: 1812/1813 is mapped to 10.0.0.174: 1812/1813. Then, each virtual firewall group sends the user request with the new IP address to the corresponding VLAN group through the VRF. If the initial IP address is not 10.0.0.173, the virtual firewall group can directly send the user request to the corresponding VLAN group through the VRF without address translation.
And S203, after each VLAN group receives the user request, sending the user request to a corresponding gateway group.
Specifically, each gateway group is connected to a corresponding VLAN group in advance, and after each VLAN group receives a user request, the user request is sent to the corresponding gateway group, and then the gateway group is responsible for processing a service requested by the user.
In the method for multiplexing the IP address by the physical gateway provided in the embodiment of the present invention, the GRE router and the firewall of the physical gateway are logically isolated by dividing the GRE router and the firewall into multiple groups of VPNs, the gateway server and the storage device are not virtualized, and the physical device is divided into independent gateway groups with equal groups, each gateway group corresponds to a logical gateway, that is, a set of physical gateway or WAP gateway is virtualized into multiple sets of independent logical gateways, so that each set of logical gateway node can independently access a gateway node with no duplicate terminal IP address pool, and the effect of multiplexing the IP address of the terminal private network is achieved.
Further, the gateway node in the above embodiments includes a GGSN node and/or an SAEGW node.
Specifically, the ggsn (gateway GPRS Support node) node is a gateway GPRS Support node. GGSN node has functions of encapsulation and tunnel transmission, and can use the GTP header and TCP/IP or UDP/IP header to carry out split charging function for PDP from external data network, and uses the related address information in these headers as identification, and in GPRS backbone network, a point-to-point bidirectional tunnel is used to transmit encapsulated data. A SAEGW (SGW-PGW) node, wherein the SGW (serving gateway) is a serving gateway, the PGW (PDN gateway) is a PDN gateway, the serving gateway and the PDN gateway are important network elements in an EPC (mobile communication network), and the SGW is responsible for forwarding a received user request to a specified PGW network element; the PGW is responsible for providing functions of session management and bearer control, data forwarding, IP address allocation, non-3 GPP user access, and the like for the user. The SGW and PGW are combined and referred to as the SAE-GW.
Fig. 3 is a block diagram of an electronic device according to an embodiment of the present invention. As shown in fig. 3, the electronic apparatus includes: as shown in fig. 3, the electronic apparatus includes: a memory 302 and a processor 301, wherein the processor 301 and the memory 302 are communicated with each other through a bus 303; the memory 302 stores program instructions executable by the processor, and the processor 301 invoking the program instructions is capable of performing a method, for example, comprising: each VPN group receives a user request sent by a gateway node through a GRE tunnel and sends the user request to a corresponding virtual firewall group through a VLAN interface; after each virtual firewall group receives the user request, the user request is sent to a corresponding VLAN group through a VPN routing forwarding table according to an initial IP address in the user request; and after each VLAN group receives the user request, the user request is sent to the corresponding gateway group.
Embodiments of the present invention also provide a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, which when executed by a computer, enable the computer to perform the methods provided by the above-mentioned method embodiments, for example, including: each VPN group receives a user request sent by a gateway node through a GRE tunnel and sends the user request to a corresponding virtual firewall group through a VLAN interface; after each virtual firewall group receives the user request, the user request is sent to a corresponding VLAN group through a VPN routing forwarding table according to an initial IP address in the user request; and after each VLAN group receives the user request, the user request is sent to the corresponding gateway group.
An embodiment of the present invention further provides a computer-readable storage medium, where the computer-readable storage medium stores computer instructions, and the computer instructions enable the computer to execute the method provided by each of the above method embodiments, for example, including: each VPN group receives a user request sent by a gateway node through a GRE tunnel and sends the user request to a corresponding virtual firewall group through a VLAN interface; after each virtual firewall group receives the user request, the user request is sent to a corresponding VLAN group through a VPN routing forwarding table according to an initial IP address in the user request; and after each VLAN group receives the user request, the user request is sent to the corresponding gateway group.
According to the physical gateway and the method for multiplexing the IP address thereof provided by the embodiment of the invention, firstly, the problem of address pool conflict is solved under the conditions of not additionally increasing hardware, not changing a network architecture and an original business process, and the multiplexing rate of a private address pool at a mobile phone end is favorably improved; secondly, through the virtual logic gateway, the service processing processes of all gateway nodes are not related and not influenced, and the service processing capacity and the equipment utilization rate of the physical gateway are improved; thirdly, a large amount of complex work such as cutting, configuration, debugging and the like on the core network side is not needed, a large amount of workload is reduced, and the risk is low; and fourthly, no difference is generated between the service level and the current network, the normal use of the network by the user under any configuration is not influenced, and the complaint that the network cannot be accessed is not increased by the improvement.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (4)

1. A physical gateway and a method for multiplexing IP addresses are characterized by comprising the following steps:
each VPN group receives a user request sent by a gateway node through a GRE tunnel and sends the user request to a corresponding virtual firewall group through a VLAN interface;
after each virtual firewall group receives the user request, forwarding the user request through a VPN route and sending the user request to a corresponding VLAN group according to an initial IP address in the user request;
after each VLAN group receives the user request, the user request is sent to a corresponding gateway group;
if the initial IP address is a preset radius IP address, translating and converting the initial IP address, allocating a new IP address for the user, forwarding a user request with the new IP address through a VPN route and sending the user request to a corresponding VLAN group;
a physical gateway, comprising: the system comprises router equipment, firewall equipment, switch equipment and a server;
the router device is virtualized into a plurality of VPN groups, each VPN group comprising at least one GRE tunnel and at least one VLAN interface;
the firewall equipment virtualizes a plurality of virtual firewall groups, and each virtual firewall group is connected with each VPN group in a one-to-one correspondence mode through the VLAN interfaces;
the switch equipment virtualizes a plurality of VLAN groups, and each VLAN group is connected with each virtual firewall group in a one-to-one correspondence manner;
the server is physically divided into a plurality of gateway groups, and each gateway group is connected with the VLAN group in a one-to-one correspondence manner;
wherein the server comprises at least: a gateway server and an IMDB server;
the gateway server is used for distributing user requests for different services to the IMDB server, and the IMDB server is used for storing Radius data;
the Radius data comprises a corresponding relation between an IP address and a mobile phone number so that the IMDB server can authenticate the user request;
the user request includes the Radius data.
2. The method according to claim 1, wherein said gateway node comprises a GGSN node and/or a SAEGW node.
3. An electronic device, comprising:
the processor and the memory are communicated with each other through a bus; the memory stores program instructions executable by the processor, the processor invoking the program instructions to be capable of performing the method of claim 1 or 2.
4. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the method according to claim 1 or 2.
CN201710936102.8A 2017-10-10 2017-10-10 Physical gateway and method for multiplexing IP address Active CN109660459B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710936102.8A CN109660459B (en) 2017-10-10 2017-10-10 Physical gateway and method for multiplexing IP address

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710936102.8A CN109660459B (en) 2017-10-10 2017-10-10 Physical gateway and method for multiplexing IP address

Publications (2)

Publication Number Publication Date
CN109660459A CN109660459A (en) 2019-04-19
CN109660459B true CN109660459B (en) 2021-12-07

Family

ID=66108744

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710936102.8A Active CN109660459B (en) 2017-10-10 2017-10-10 Physical gateway and method for multiplexing IP address

Country Status (1)

Country Link
CN (1) CN109660459B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110324826B (en) * 2019-06-10 2022-08-16 平安科技(深圳)有限公司 Intranet access method and related device
CN112925192A (en) * 2021-01-21 2021-06-08 刘昌宏 Method for improving operation reliability of multi-service industrial control system

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7376125B1 (en) * 2002-06-04 2008-05-20 Fortinet, Inc. Service processing switch
CN101399742B (en) * 2007-09-28 2011-10-26 中国移动通信集团公司 Data service network system and access method of data service
CN101399766B (en) * 2007-09-28 2011-05-11 中国移动通信集团公司 Network system and access method for data service
CN101742547A (en) * 2009-12-15 2010-06-16 武汉虹旭信息技术有限责任公司 Mark-based network message correlation method
CN103139758B (en) * 2011-11-28 2016-03-02 中国电信股份有限公司 Mobile Socket class application system, server, method and WAP gateway
CN103200159B (en) * 2012-01-04 2016-06-22 中国移动通信集团公司 A kind of Network Access Method and equipment
CN103220372B (en) * 2012-01-19 2016-08-10 中国移动通信集团公司 Data service access method and system
CN103441859A (en) * 2013-08-26 2013-12-11 暨南大学 Generation management method and system for identifiers for user charging services
CN103532752A (en) * 2013-10-10 2014-01-22 北京首信科技股份有限公司 Management device and method for realizing integration of surfing logs of mobile internet users

Also Published As

Publication number Publication date
CN109660459A (en) 2019-04-19

Similar Documents

Publication Publication Date Title
US10911932B2 (en) Method and system for hub breakout roaming
EP3113539A1 (en) Load balancing user plane traffic in a telecommunication network
US10873562B2 (en) IP address allocation system and method
CN104780088A (en) Service message transmission method and equipment
CN102845123A (en) Virtual private cloud connection method and tunnel proxy server
CN110213148B (en) Data transmission method, system and device
WO2020011152A1 (en) Pfcp connection processing method and apparatus, network element, system, and storage medium
US20120082110A1 (en) Method and terminal for transmitting service data
CN106454809A (en) Routing behind mobile station method for LTE (Long Term Evolution) system
US8345603B2 (en) Method and apparatus for processing GTP triggered messages
CN102238243B (en) Data transmission method and system, address access method, terminal device and server
EP3537666B1 (en) Service data processing method and apparatus
CN109660459B (en) Physical gateway and method for multiplexing IP address
CN109088823B (en) Method and device for realizing terminal interconnection
CN103401954B (en) The implementation method of virtual DHCP
US10225191B2 (en) Service packet distribution method and apparatus
CN108809795A (en) Transparent shunt method and device in a kind of LAN environment
CN102083173B (en) Network access control method, equipment and gateway GPRS support node
CN103619005B (en) Method and system for obtaining cell phone number of 3G network user
CN114650290A (en) Network connection method, processing device, terminal and storage medium
CN101044722B (en) Combined GGSN and SGSN Gateway GPRS Support Node
KR102315347B1 (en) HSS(Home Subscriber Server) and HSS control method
CN107124411A (en) Virtual private cloud implementation method, device and system under classic network environment
KR101752975B1 (en) Apparatus and Method for allocating IP in LTE System
CN113114565A (en) Data message forwarding method and device, storage medium and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant