JP2000349831A - System and device for ip address management - Google Patents

Abstract

PROBLEM TO BE SOLVED: To save space in IP address assignment management. SOLUTION: A package is provided to manage an IP address for each of a plurality of LANs for providers. A CPU 2 of each package receives communication data of an authentication request from an KW 11 and relays the data to an ISP authentication server 6 via a LAN controller 4. Upon the receipt of an authentication reply of an assignment performance from the ISP authentication server 6, the CPU 2 reads an IP address from an FRAM 3 storing the IP address in advance and assigns it to a user terminal. The IP address management device is designed that the FRAM is replaceable and the IP address can be taken over by using the original FRAM when the package is replaced on the occurrence of a fault.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to IP address allocation management, and more particularly, to an IP address management method and apparatus in ISP authentication server authentication.

[0002]

2. Description of the Related Art In order to connect a user terminal to the Internet via a general subscriber's telephone network, a provider's ISP (Intern) responds to a connection request from the user terminal.
et Service Provider) With the authentication of the authentication server 6,
It is necessary to be assigned an IP address.

Conventionally, there has been known a system configuration using a proxy authentication server for rationally assigning such IP addresses and managing the IP addresses.

FIG. 2 is a diagram showing a conventional IP address management system using a proxy authentication server. An exchange 23 of a subscriber telephone network 24 and an IPS authentication server 22
And a proxy authentication server 21 is connected between them. In this system, in response to an authentication request from the user terminal of the subscriber's telephone network 24 to the ISP authentication server 22, when the ISP authentication server 22 receives an authentication response permitting the assignment of the IP address, the Proxy authentication server 21 transmits the IP address. It manages assignments. In this system, the Proxy authentication server 21
Requires the setting of the IP address at the time of authentication response, and the processing of reading the IP address from the ISP authentication server side,
Even in the event of a failure, recovery is performed by such settings.

[0005]

In the conventional system,
Since the management of the proxy authentication server manages the assignment of the IP address and the like, it is necessary to provide a proxy authentication server, and there is a problem that the management system of the IP address becomes large-scale.
In addition, since a server has to be installed, space saving cannot be realized. Also, there is a problem that it is difficult to quickly recover from a failure of the proxy authentication server.

(Object of the Invention) An object of the present invention is to provide an IP address management system which can simplify management and setting of an IP address, such as assignment of an IP address to an authentication request from a user terminal. It is in.

[0007] An object of the present invention is to provide an IP address management device that can replace a proxy server.

Another object of the present invention is to provide an IP address management method and an IP address management method capable of promptly recovering from a failure.
An address management device is provided.

[0009]

According to an IP address management system of the present invention, an authentication request from a user terminal is relayed to an authentication server of a provider, and an IP address from the provider is transmitted.
In response to an authentication response permitting P-address assignment, a plurality of packages to read and assign IP addresses from a memory in which IP addresses are stored in advance are connected to a plurality of LANs of a provider to manage the assignment of IP addresses of user terminals. It is characterized by the following. The memory is
It is characterized in that it is physically replaceable on the package.

[0010] Further, the IP address management device of the present invention comprises:
A process of relaying an authentication request from a user terminal to a memory in which an IP address is stored in advance and an authentication server of a provider, and reading and assigning an IP address from the memory in response to an authentication response from the provider permitting assignment of an IP address; And a plurality of packages corresponding to a plurality of LANs of the provider. The memory is physically replaceable on the package, and is a flash random access memory.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, an embodiment of an IP address management system and apparatus according to the present invention will be described with reference to the drawings. (Description of Configuration) FIG. 1 is a diagram showing a configuration of an IP address management system and an IP address management device according to the present embodiment. In the system configuration of the present embodiment, an IP address management device 9 is connected between the exchange 7 on the side of the subscriber's telephone network 8 and the IPS authentication server 6 of the provider. Multiple LANs for Protocol Highway (IPHW) and ISP authentication server 22 of provider
(Ethernet).

The IP address management device 9 according to the present embodiment includes a plurality of packages (packag) for connecting a user terminal to the Internet via a provider.
e: PKG) PKG1, PKG2,... In addition, each package includes a plurality of Ets of the IPHW and the provider.
and hernet.

Then, each package PKG1, PKG
,... Indicate a CPU 2 and a high-way interface (High Wafer) connected to the CPU 2 via an Ext-BUS.
y Interface: HWI) 1 and flash random
Access Memory (Flash Random Access Memory: FR)
AM) 3, CTL (Control) 5, and CPU 2
Via PCI-BUS from the PCI terminal
and a LAN controller 4 connected to the network. The outline of the function of each part of the packages PKG1, PKG2,... Is as follows.

The IPHW is a highway (HW) indirectly connected to the user terminal via the exchange 7, and has a channel (Bch) for the user terminal. E
The Ethernet is a network connected to the ISP authentication server 6, and is a LAN network connecting the ISP authentication server 6 at the time of an authentication request from a user terminal and connecting the user terminal after authentication to the Internet.

Within the package, HWI1
It has a function of separating data received via the PHW for each channel, and selectively selects data corresponding to the user terminal.
Output to xt-BUS. Ext-BUS is a processor BUS of the CPU 2. CPU2 is Ext-BUS
In addition to controlling the connection of data between the ISP authentication server 6 and the PCI-BUS, the ISP authentication server 6 also controls the assignment of IP addresses and the like in response to an authentication response to permit assignment of IP addresses. The CTL 5 controls access to each device connected to the Ext-BUS. The LAN controller 4 performs Et from communication data of the PCI-BUS Bch.
Conversion to Ethernet packets and Ethernet
It has a function of converting packets to PCI-BUS data, and performs transmission and reception between the PCI-BUS and Ethernet (LAN). The FRAM 3 is a memory physically removable from a package, and stores in advance an IP address assigned to the package for each package.

The CPU 2 transmits the communication data of the authentication request from the user terminal of the HWI 1 to the Ext-
Received via BUS and sent to LAN controller 4 with P
An IP address stored in the FRAM 3 only when the authentication response from the ISP authentication server 6 is output via the CI-BUS and received via the LAN controller 4 from the ISP authentication server 6, and the allocation is permitted by the authentication response. Is read and assigned, and the IP address is output to the user terminal.

(Explanation of Operation) Next, the authentication operation of the present embodiment and the operation of inheriting an IP address when a failure occurs in each package will be described.

[0018] From the user terminal via the subscriber telephone network 8, I
When an authentication request is sent to the SP authentication server 6, this data is delivered to the HWI 1 via the IPHW. After the data transmitted is determined by the protocol control and the data link is determined, the CPU 2 transmits the data to the
Sent to. Next, after the protocol conversion by the CPU 2, the data is sent to the LAN controller 4 via the PCI-BUS.
ISP authentication server 6
Sent to. When the ISP authentication server 6 receives the data of the authentication request, the ISP authentication server 6 determines whether or not the user terminal that transmitted the data has been authenticated. If it is determined that the user terminal has been authenticated, the assignment of the IP address is permitted. An authentication response is sent to the CPU 2 via the LAN controller 4. Upon receiving the authentication response, the CPU 2 assigns the IP address stored in the FRAM 3 to the user.

In the present embodiment, each package is replaceable, and when a failure occurs in any block, the recovery of the failure can be realized by replacing the corresponding package itself. Further, in this embodiment, a plurality of packages each have an FRAM 3 in which an individual IP address is stored, and this FRAM 3 is detachably mounted. Into the FRAM3 mounting location of the new package,
The address can be inherited in the package.

[0020]

As described above, in the present invention, the authentication request from the user terminal is notified to the authentication server of the provider, and after the authentication response, the IP address pooled in the memory is allocated to the user terminal. Because of the configuration using multiple packages, I
Space can be saved without a large-scale system that uses a proxy authentication server for P address assignment and setting. Further, it is not necessary to control the writing of the IP address from the authentication server of the provider to the proxy authentication server as in the related art, so that such a setting is omitted, and a plurality of packages are connected to a plurality of LANs of the provider. By taking the configuration,
Failure recovery is possible only by replacing the failed package at the time of package failure, and the system recovery time at the time of failure can be reduced.

In addition, since an IP address is stored in advance and a memory such as an FRAM mounted on a package is physically removable, an IP address written once is held in the memory. When the package is replaced, the state is inherited if the original memory is mounted on the package. Therefore, the I
There is no need to check the P address, and management of the IP address can be made extremely easy. In other words, in a situation where a failure has occurred in a large number of arbitrary LAN-compatible packages, the state can be inherited without using any special IP address management and setting simply by using the original memory.

[Brief description of the drawings]

FIG. 1 is a diagram showing an embodiment of the present invention.

FIG. 2 is a diagram showing a conventional example.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 HWI 2 CPU 3 FRAM 4 LAN controller 5 CTL 6,22 ISP authentication server 7,23 exchange 8,24 Subscriber telephone network 9 IP address management device 21 Proxy server

Continued on front page F-term (reference) 5B089 GA19 GA21 GA34 GB02 HA10 JB22 KA11 KA12 KA13 KB06 KB13 MD02 ME00 5J104 AA07 KA02 MA01 NA36 PA07 5K030 GA05 GA15 HA08 HC01 HD06 HD09 JL07 JT06 KA04 KA13 LD19 5K03 DA06 DBA9 DBA BB03 CC02 CC08 JJ25 JJ27 KK56 LL03 LL05 LL09

Claims (5)

[Claims] 1. An authentication request from a user terminal is relayed to an authentication server of a provider, and an authentication response for permitting assignment of an IP address from the provider is provided.
An IP address management method, wherein a plurality of packages for reading and assigning an IP address from a memory in which an IP address is stored in advance are connected to a plurality of LANs of a provider to manage IP address assignment of a user terminal. 2. The I memory according to claim 1, wherein said memory is physically replaceable on said package.
P address management system. 3. A memory storing an IP address in advance,
A processing device that relays an authentication request from a user terminal to an authentication server of the provider and reads and assigns an IP address from the memory in response to an authentication response from the provider that permits assignment of an IP address; An IP address management device, comprising a plurality of LAN-compatible packages. 4. The I according to claim 3, wherein said memory is physically replaceable on said package.
P address management device. 5. The memory according to claim 1, wherein the memory is a flash random memory.
5. The IP address management device according to claim 4, wherein the IP address management device is an access memory.