CN117676768A - Access system and method based on 5G LAN - Google Patents

Abstract

The invention discloses an access system and method based on a 5G LAN, wherein the system comprises: a 5G LAN, which is a 5G LAN based on the 2B UPF, wherein the 5G LAN is used for distributing virtual network groups divided by 5G terminal equipment according to service requirements to different 2B UPFs; the internet of things CE is connected with the 5G LAN and is used for forwarding the virtual network groups on different 2B UPFs based on an N6 port MAC forwarding mechanism; and the special CN2PE is connected with the CE of the Internet of things, and the special CN2PE is used for interfacing with the virtual network groups forwarded by different 2B UPFs so as to enable the 5G terminal equipment in the virtual network groups to be accessed into the MPLS VPN. The technical proposal of the invention can be used for accessing the enterprise-level MPLS VPN network at any place with cellular signals at any time and any place, and the flexible operation and management capability of enterprises on the MPLS VPN network can not be reduced, thereby being convenient for dealing with mobile office scenes.

Description

Access system and method based on 5G LAN

Technical Field

The invention relates to the technical field of networks, in particular to an access system and method based on a 5G LAN.

Background

The network architecture of the existing MPLS VPN service is a typical convergence architecture, the CE/PE of each city is used as an access layer to be converged on the BR equipment of the key city of the province, the BR is converged on the CR equipment of the key city of the whole country, and the multistage architecture of the access-convergence-core is formed, so that the architecture of the whole country virtual private network is established. In addition, the network always provides wired service for users through a transmission network of the metropolitan area network, so that the characteristics of the network have the advantages of high safety, cross-domain forwarding, high value and the like, and the general disadvantages of the wired network, such as that a 4/5G user terminal which does not support the main stream is accessed into an enterprise private network, namely, an MPLS VPN network cannot be integrated with a cellular network, can only be accessed through wired access points, and the mobile office scene is greatly unchanged.

Disclosure of Invention

It is an object of the present invention to provide an access system based on a 5G LAN that solves the above mentioned drawbacks.

Another object of the present invention is to provide an access method based on a 5G LAN to solve the above drawbacks.

To achieve the above object, in one aspect, the present invention provides a 5G LAN-based access system, comprising: a 5G LAN, which is a 5G LAN based on 2B UPF, wherein the 5G LAN is used for distributing virtual network groups divided by 5G terminal equipment according to service requirements to different 2B UPFs; the internet of things CE is connected with the 5G LAN and is used for forwarding the virtual network groups on different 2B UPFs based on an N6 port MAC forwarding mechanism; and the special CN2PE is connected with the CE of the Internet of things, and the special CN2PE is used for interfacing with the virtual network groups forwarded by different 2B UPFs so as to access the 5G terminal equipment in the virtual network groups into the MPLS VPN.

The further technical scheme is as follows: the 2B UPFs include a first city 2B UPF, a second city 2BUPF, a third city 2B UPF, and a fourth city 2B UPF.

The further technical scheme is as follows: the internet of things CE comprises a first internet of things CE, a second internet of things CE, a third internet of things CE and a fourth internet of things CE, wherein the first internet of things CE, the second internet of things CE, the third internet of things CE and the fourth internet of things CE are respectively connected with the first city 2B UPF, the second city 2B UPF, the third city 2B UPF and the fourth city 2B UPF.

The further technical scheme is as follows: the special CN2PE comprises a first special CN2PE, a second special CN2PE, a third special CN2PE and a fourth special CN2PE, and the first special CN2PE, the second special CN2PE, the third special CN2PE and the fourth special CN2PE are respectively connected with interconnection addresses among the first Internet of things CE, the second Internet of things CE, the third Internet of things CE and the fourth Internet of things CE.

The further technical scheme is as follows: any special CN2PE in the first special CN2PE, the second special CN2PE, the third special CN2PE and the fourth special CN2PE can open a cellular point, and service pull-through is realized through the cellular point and other points.

The further technical scheme is as follows: the MPLS VPN comprises an access layer, a convergence layer and a core layer, wherein the core layer is deployed in a first preset city and is used for responsible inter-provincial traffic forwarding; the convergence layer is deployed in a second preset city and is used for taking charge of flow conversion in the province and flow conversion in and out of the province; the access layer is deployed in a third preset city for being responsible for providing MPLS services for end users.

The further technical scheme is as follows: and the CE/PE in the third preset city is used as the access layer to be converged on the BR equipment of the convergence layer in the second preset city, and the BR equipment is converged on the CR equipment of the core layer in the third preset city.

The further technical scheme is as follows: and the local CE and/or the local CN2PE in the third preset city are used as the access layer to be converged on the BR equipment of the convergence layer in the second preset city, and the BR equipment is converged on the CR equipment of the core layer in the third preset city.

The further technical scheme is as follows: and the enterprise application service accesses the local CE, and the local CE and the local CN2PE are connected with each other by an interconnection address.

In order to achieve the above object, in another aspect, the present invention further provides a 5G LAN based access method, which includes: assigning virtual network groups divided by the service requirements to 5G terminal equipment to different 2B UPFs through a 5G LAN based on the 2B UPFs; forwarding the virtual network groups on different 2B UPFs through an Internet of things CE based on an N6 port MAC forwarding mechanism; and interfacing with the virtual network group forwarded by different 2B UPFs through a special CN2PE so as to enable the 5G terminal equipment in the virtual network group to be accessed into the MPLS VPN.

The embodiment of the invention provides an access system and a method based on a 5G LAN, wherein the system is based on the 5G LAN of a 2B UPF, and 5G terminal equipment is accessed into an MPLS VPN, so that a 'mobile and flexible wing' is provided for the MPLS VPN network, an enterprise-level MPLS VPN network can be accessed anywhere and anytime at any place where cellular signals exist, flexible operation and management capability of enterprises on the MPLS VPN network is not reduced, and mobile office scenes are conveniently dealt with.

The invention will become more apparent from the following description taken in conjunction with the accompanying drawings which illustrate embodiments of the invention.

Drawings

Fig. 1 is a block diagram of an access system based on a 5G LAN according to an embodiment of the present invention;

fig. 2 is a schematic diagram of an MPLS VPN provided in an embodiment of the present invention;

FIG. 3 is a schematic diagram of a 5G LAN according to an embodiment of the present invention;

fig. 4 is a simple schematic diagram of a 5G LAN accessing MPLS VPN provided by an embodiment of the present invention;

fig. 5 is a specific schematic diagram of a 5G LAN accessing MPLS VPN provided in an embodiment of the present invention;

fig. 6 is a schematic diagram of end-to-end service fusion according to an embodiment of the present invention;

fig. 7 is a flow chart of an access method based on a 5G LAN according to an embodiment of the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, in which like reference numerals represent like components. It will be apparent that the embodiments described below are only some, but not all, embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.

Referring to fig. 1 to 6, the 5G LAN-based access system provided by the embodiment of the present invention includes 5GLAN, an internet of things CE (Customer Edge device), and a dedicated CN2PE, where the 5G LAN is a 2B UPF-based 5G LAN, and the 5G LAN is configured to allocate virtual network groups divided by 5G terminal devices according to service requirements to different 2B UPFs; the CE of the Internet of things is connected with the 5G LAN and is used for forwarding the virtual network groups on different 2B UPFs based on an MAC forwarding mechanism of an N6 port; the special CN2PE is connected with the CE of the Internet of things, and the special CN2PE is used for interfacing with the virtual network groups forwarded by different 2B UPFs so as to enable the 5G terminal equipment in the virtual network groups to be accessed into the MPLS VPN. In this embodiment, the 5G LAN is a LAN built in the 5G network, by which a LAN having mobility can be assembled to meet production and office demands. MPLS VPN: the IP-VPN based on MPLS (Multiprotocol Label Switching ) technology is to apply MPLS technology on network routing and switching equipment, simplify the routing mode of a core router, and utilize an IP virtual private network (IP VPN) realized by combining the label switching of the traditional routing technology, so that the IP-VPN can be used for constructing a broadband Intranet, extranet to meet various flexible service demands. CN2 (ChinaNet Next Carrying Network, chinese telecommunications next generation carrier network) is a multi-service carrier network that can support applications for convergence of multiple services of data, voice, and video. In this embodiment, the 5G terminal device is connected to the MPLS VPN based on the 5G LAN of the 2B UPF, so that a "mobile and flexible wing" is provided for the MPLS VPN network, and the enterprise-level MPLS VPN network can be connected anywhere and anytime without any cellular signal, and the flexible operation and management capability of the enterprise to the MPLS VPN network is not reduced, so that the mobile office scenario is convenient to deal with.

In some embodiments, for example, as shown in fig. 2, the network architecture of the existing MPLS VPN service is a typical convergence architecture, and the CE/PE of each city is used as an access layer to converge on the BR device of the key city of the present province, and then the BR device converges on the CR device of the key city of the country, so as to form a multi-level architecture of the access-convergence-core, thereby establishing the architecture of the national virtual private network. Specifically, the MPLS VPN network is divided into an access layer, a convergence layer and a core layer, wherein the core layer is deployed in a first preset city and is used for responsible inter-provincial traffic forwarding; the convergence layer is deployed in a second preset city and is used for taking charge of flow conversion in the province and flow conversion in and out of the province; the access layer is deployed in a third preset city for being responsible for providing MPLS services for end users. In practical application, the first preset city is a plurality of extra large cities, the second preset city is 31 provinces, and the third preset city is 400 or more ground cities in the whole country. It can be appreciated that the access layer network is accessed based on a local transmission network, so that a private line access mode can be provided only for fixed places and places, and the requirement of increasingly flexible production office scenes is limited. It should be noted that in this embodiment, the MPLS VPN network always provides wired service for users through the transmission network of the metro network, so that the characteristics of the network have advantages of high security, cross-domain forwarding, high value, and the like, and also have general disadvantages of some wired networks, such as being unable to cope with mobility scenarios, complex service opening, and being unable to form convenient and fast delivery due to the transmission link being configured, and meanwhile, the MPLS VPN network never pursues network parameter requirements of large bandwidth, and more iteration of network capability focuses on aspects of security isolation, cross-domain, and the like.

In some embodiments, for example, as shown in fig. 3, key technologies in the 5G LAN, such as a group management technology, a dynamic multicast technology, and the like, are all key technologies of the 5G LAN, and may directly provide an ethernet TCP/IP type communication service for an enterprise, where an enterprise terminal and a terminal, and a terminal and a service may be anchored at the same UPF (User Plane Function, a user plane function), or perform communication with a local area network across UPFs. Meanwhile, the 5G LAN can decouple the 5G network from the enterprise intranet, the operation networking architecture is independent, the enterprise intranet architecture is independent, and the 5G network and the enterprise intranet architecture are not required to be integrally planned and built like the traditional network, but the 5G network can be seamlessly connected to the existing enterprise network, so that the access layer of the enterprise network is prolonged. It should be noted that, in this embodiment, the 5G LAN may not only provide grouping of virtual networks, but also implement QOS (Quality of Service )/QCI (QoS class identifier, which is a scale value) and other parameters between different virtual networks, that is, bandwidth, time delay and connection guarantee may be customized for each virtual network, and classification of LAN network dimensions is performed on the basis of 5G slicing, so that granularity refinement of a client network is more accurate, and targeting of network resource guarantee is more definite. In addition to the characteristics of packets, virtual networks themselves are also one of the important characteristics of 5G LANs. In the virtual network, the data is broadcast and addressed by the MAC address, i.e. each packet virtual network is a two-layer lan. Different terminals can be placed into the same or different virtual network groups according to requirements, so that the pull-through and extension of the local area network are realized.

It should be noted that, in this embodiment, with the development of the internet, the network capacities of the entire backbone private network and the MPLS VPN carried by the CN2 are iterated continuously. The equipment scale of each node of the network is continuously expanded, but the whole architecture of the network still maintains the original framework. In the following diagram, after the private network user of the enterprise needs to access the CE through the private line of the metropolitan area network, the private network user of the enterprise is further connected to the PE, so that the requirement on the access side is relatively complicated, and for the enterprise user of the MPLS VPN, the physical threshold of the access network is higher, and the pace of increasingly faster production and management activities cannot be satisfied. Therefore, as shown in fig. 4, the access layer of the MPLS VPN is combined with the 5G core network channel to wirelessly extend the "last kilometer" of the MPLS VPN.

In the present embodiment, the traffic forwarding method of the 5G LAN is roughly divided into 3 types: (1) Based on local forwarding, forwarding with access terminal users under UPF; (2) Based on the forwarding of the N19 port, the access terminal users under different UPFs (cross-anchor UPFs) are connected; (3) And forwarding based on an N6 port, and forwarding traffic between an access terminal and a DN (service side external network) under UPF. In the present embodiment, the 5G LAN and the MPLS VPN network are combined based on the forwarding through the N6 port. It should be further noted that, in this embodiment, group management of the 5G LAN is mainly based on a divided virtual network (VN group), and specific terminals are divided into the same or different VN groups according to service requirements, members in the same group can perform intra-group communication, and different group members cannot directly communicate with each other, so as to perform isolation on the domain level of the virtual network group. This feature is advantageous in that when the 5G LAN and MPLS VPN networks are combined, only one 5G network is enabled, multiple VN groups are partitioned on the network, and different VN groups may be assigned to different branch points, so that a cellular access manner may be ensured for each branch point of the enterprise private network. Meanwhile, the cellular groups at different branch points can be isolated from each other, and on the basis of ensuring convenient access, the framework and address planning of the original MPLS VPN network are not broken, which is equivalent to the smooth connection of a pair of 5G wings for the MPLS VPN network.

In this embodiment, as shown in fig. 5, the 2B UPF includes a first city 2B UPF, a second city 2B UPF, a third city 2B UPF, and a fourth city 2B UPF; the internet of things CE comprises a first internet of things CE, a second internet of things CE, a third internet of things CE and a fourth internet of things CE, and the first internet of things CE, the second internet of things CE, the third internet of things CE and the fourth internet of things CE are respectively connected with the first city 2B UPF, the second city 2B UPF, the third city 2B UPF and the fourth city 2B UPF; more specifically, the dedicated CN2PE includes a first dedicated CN2PE, a second dedicated CN2PE, a third dedicated CN2PE, and a fourth dedicated CN2PE, and interconnection addresses between the first dedicated CN2PE, the second dedicated CN2PE, the third dedicated CN2PE, and the fourth dedicated CN2PE and the first internet of things CE, the second internet of things CE, the third internet of things CE, and the fourth internet of things CE, respectively; any special CN2PE in the first special CN2PE, the second special CN2PE, the third special CN2PE and the fourth special CN2PE can open a cellular point, and service pull-through is realized through the cellular point and other points.

In practical application, the 5G LAN network is integrated into the MPLS VPN network, and is used as an intensive complementary point to interface with dedicated PEs of 4 important node cities of the 5G core network of the internet of things through dedicated CEs of the internet of things. As shown in fig. 5, 4 important node cities are tokyo, beijing, guangzhou and chengdou, which are all deployed with special CEs for internet of things, can be directly connected to CN2 special PEs in MPLS VPN networks through physical lines, and can be used as analog individual "province" users to open cellular sites, thereby realizing service pull-through with other sites in the whole country. Understandably, the first city 2B UPF, the second city 2B UPF, the third city 2B UPF, and the fourth city 2B UPF are Jiangsu 2B UPF, beijing 2B UPF, guangzhou 2B UPF, and Sichuan 2B UPF, respectively. It should be further noted that, in this embodiment, as shown in fig. 5, CE/PE in the third preset city in the MPLS VPN network is converged as the access layer onto the BR device of the convergence layer in the second preset city, and then the BR device is converged onto the CR device of the core layer in the third preset city; the local CE and/or the local CN2PE in the third preset city are used as the access layer to be converged on the BR equipment of the convergence layer in the second preset city, and the BR equipment is converged on the CR equipment of the core layer in the third preset city; and the enterprise application service accesses the local CE, and the local CE and the local CN2PE are connected with each other by an interconnection address.

In some embodiments, for example, in the present embodiment, in the 5G2B LAN service or in the 5G2B private network, VN packets may be performed again, and the cellular terminals may be grouped as needed, so that the combination may be used in combination with other fixed network points, which is more suitable for a nationwide cross-domain interlocking enterprise. As shown in fig. 6, the end-to-end service convergence can be fully embodied, and the network environment of the 5G cellular access point can be completely analogous to that of the existing fixed network access MPLS VPN. The right side of the CN2 backbone network is a traditional fixed network access point, and the left side is a newly converged 5G LAN-based cellular access point. Traditional access point location: the exit gateway of the user firewall is a CE address, and three-layer address division with the CE as the gateway is formed; 5G cellular access point: the CPE is used as a 5G access terminal, based on a MAC forwarding mechanism of a 5G N6 port, the SIM card IP of the 5G CPE and the CE IP form internal interconnection, namely the 5G CPE is similar to the CE, the computer and the PAD IP are planned by taking the 5G CPE IP as a gateway, namely three-layer address division which is equivalent to the computer and the PAD and takes the CE as the gateway is consistent with the traditional access point. It should be noted that the CPE (Customer Premise Equipment, i.e., the customer premise equipment) in fig. 6 is one type of 5G terminal equipment.

Referring to fig. 7, fig. 7 is a flowchart illustrating an embodiment of a 5G LAN based access method according to the present invention, where the web page tamper-proof method is applied to the 5G LAN based access system, and the specific implementation steps of the 5G LAN based access system according to the present invention are further described in detail below. As shown in fig. 7, the method includes steps S110 to S130:

s110, distributing virtual network groups divided by 5G terminal equipment according to service requirements to different 2B UPFs through a 5G LAN based on the 2B UPFs;

s120, forwarding the virtual network groups on different 2B UPFs through an Internet of things CE based on an N6 port MAC forwarding mechanism;

s130, interfacing with the virtual network group forwarded by different 2B UPFs through a special CN2PE so as to enable the 5G terminal equipment in the virtual network group to access an MPLS VPN.

In the embodiment of the invention, a virtual network group divided into by service requirements for 5G terminal equipment is distributed to different 2B UPFs through a 5G LAN based on the 2B UPFs, wherein the 2B UPFs comprise a first city 2B UPF, a second city 2B UPF, a third city 2B UPF and a fourth city 2B UPF; forwarding the traffic of the devices in the 5G in the virtual network group on different 2B UPFs through an Internet of things CE based on an MAC forwarding mechanism of an N6 port; the special CN2PE is in butt joint with the virtual network groups forwarded by different 2B UPFs, so that the 5G terminal equipment in the virtual network groups is accessed to the MPLS VPN, a 'mobile and flexible wing' is provided for the MPLS VPN network, the enterprise-level MPLS VPN network can be accessed anywhere and anytime at any place where cellular signals exist, the flexible operation and management capability of enterprises to the MPLS VPN network can not be reduced, and the mobile office scene can be conveniently dealt with.

In summary, in this embodiment, network access of different systems is added, and in the prior art, access is based on a fixed network mode such as a metropolitan area network and a bearer network, and only access is possible in a network access environment where a user has a higher threshold. Along with the increasing of branch institutions of enterprises, if each branch institution, particularly branch institutions in some remote areas, is accessed into an MPLS VPN network through a special fixed network line, the cost is high, and the realization is difficult, so that the parallel access of a mobile network and a traditional fixed network is realized, the mutual visit between the mobile network and the traditional fixed network is supported, the mutual visit between the mobile network and the traditional fixed network is also supported, and the mobile network and the traditional fixed network can be mutually visited with a third party point, so that the pain point of the existing service can be effectively solved.

The scheme provides a new technology for utilizing the 5G network, and the characteristics of the traditional network architecture are combined in a targeted manner, so that the method is very important for the use experience of the network functions after the subsequent fusion. The fusion of two different networks requires the mutual complementation and compromise of the two networks, so that the fusion effect is better, and the method is more suitable for production and operation scenes.

The scheme combines the MAC forwarding characteristic based on N6 in the 5G LAN network with the characteristics of an access layer and a convergence layer in the MPLS VPN network. The traditional 5G NAT function is penetrated, the cellular network is 'compromised' as a special complement point, and the cellular network is integrated into the MPLS VPN. The characteristics of VN group division in the 5G LAN network are combined with the use scene of the MPLS VPN, different 5G terminals can be divided into different branch office sub-networks according to the need, and the fusion network is more flexible.

The invention has been described in connection with the preferred embodiments, but the invention is not limited to the embodiments disclosed above, but it is intended to cover various modifications, equivalent combinations according to the essence of the invention.

Claims (10)

1. An access system based on a 5G LAN, comprising:

a 5G LAN, which is a 5G LAN based on 2B UPF, wherein the 5G LAN is used for distributing virtual network groups divided by 5G terminal equipment according to service requirements to different 2B UPFs;

the internet of things CE is connected with the 5G LAN and is used for forwarding the virtual network groups on different 2B UPFs based on an N6 port MAC forwarding mechanism;

and the special CN2PE is connected with the CE of the Internet of things, and the special CN2PE is used for interfacing with the virtual network groups forwarded by different 2B UPFs so as to access the 5G terminal equipment in the virtual network groups into the MPLS VPN.

2. The 5G LAN-based access system of claim 1, wherein: the 2B UPF includes a first city 2B UPF, a second city 2B UPF, a third city 2B UPF, and a fourth city 2BUPF.

3. The 5G LAN-based access system of claim 2, wherein: the internet of things CE comprises a first internet of things CE, a second internet of things CE, a third internet of things CE and a fourth internet of things CE, wherein the first internet of things CE, the second internet of things CE, the third internet of things CE and the fourth internet of things CE are respectively connected with the first city 2B UPF, the second city 2B UPF, the third city 2B UPF and the fourth city 2B UPF.

4. A 5G LAN based access system according to claim 3, wherein: the special CN2PE comprises a first special CN2PE, a second special CN2PE, a third special CN2PE and a fourth special CN2PE, and the first special CN2PE, the second special CN2PE, the third special CN2PE and the fourth special CN2PE are respectively connected with interconnection addresses among the first Internet of things CE, the second Internet of things CE, the third Internet of things CE and the fourth Internet of things CE.

5. The 5G LAN based access system of claim 4, wherein: any special CN2PE in the first special CN2PE, the second special CN2PE, the third special CN2PE and the fourth special CN2PE can open a cellular point, and service pull-through is realized through the cellular point and other points.

6. The 5G LAN-based access system of claim 1, wherein: the MPLS VPN comprises an access layer, a convergence layer and a core layer, wherein the core layer is deployed in a first preset city and is used for responsible inter-provincial traffic forwarding; the convergence layer is deployed in a second preset city and is used for taking charge of flow conversion in the province and flow conversion in and out of the province; the access layer is deployed in a third preset city for being responsible for providing MPLS services for end users.

7. The 5G LAN based access system of claim 6, wherein: and the CE/PE in the third preset city is used as the access layer to be converged on the BR equipment of the convergence layer in the second preset city, and the BR equipment is converged on the CR equipment of the core layer in the third preset city.

8. The 5G LAN based access system of claim 7, wherein: and the local CE and/or the local CN2PE in the third preset city are used as the access layer to be converged on the BR equipment of the convergence layer in the second preset city, and the BR equipment is converged on the CR equipment of the core layer in the third preset city.

9. The 5G LAN based access system of claim 8, wherein: and the enterprise application service accesses the local CE, and the local CE and the local CN2PE are connected with each other by an interconnection address.

10. An access method based on a 5G LAN, comprising:

assigning virtual network groups divided by the service requirements to 5G terminal equipment to different 2B UPFs through a 5G LAN based on the 2B UPFs;

forwarding the virtual network groups on different 2B UPFs through an Internet of things CE based on an N6 port MAC forwarding mechanism;

and interfacing with the virtual network group forwarded by different 2B UPFs through a special CN2PE so as to enable the 5G terminal equipment in the virtual network group to be accessed into the MPLS VPN.