CN101102291B - Method for realizing user Internet access based on PPPOE agent function - Google Patents
Method for realizing user Internet access based on PPPOE agent function Download PDFInfo
- Publication number
- CN101102291B CN101102291B CN2007101470095A CN200710147009A CN101102291B CN 101102291 B CN101102291 B CN 101102291B CN 2007101470095 A CN2007101470095 A CN 2007101470095A CN 200710147009 A CN200710147009 A CN 200710147009A CN 101102291 B CN101102291 B CN 101102291B
- Authority
- CN
- China
- Prior art keywords
- pppoe
- user
- home gateway
- internet
- authentication
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
- Telephonic Communication Services (AREA)
Abstract
The method comprises: 1) home gateway establishes the communication connection with ITMS server; the ITMS server sends the PPPOE agent configuration information to the home gateway; 2) home gateway enters into PPPOE agent mode and waits an incoming call from user; 3) user accesses the home gateway by dialing phone number and establishes PPPOE connection with the home gateway; the home gateway makes authentication operation for the user; after the authentication passes and before the home gateway establishes PPPOE connection with internet, the user establishes PPPOE connection with home gateway; the home gateway establishes connection with the internet; the user starts to use the internet.
Description
Technical field
The present invention relates to the home gateway field, be specifically related to a kind of method that realizes user Internet access based on PPPOE agreement (Pointto Point Protocol over Ethernet is based on the PPP(Point to Point Protocol) of local area network (LAN)).
Background technology
Along with Internet development, the pattern that the user connects the Internet progressively changes senior equipment such as using broadband router, home gateway into from using modem (modulator-demodulator), these terminal equipments allow the user connect the Internet with more mode, as DHCP (dynamic host allocation protocol), PPPOE (Point to Point Protocol over Ethernet is based on the PPP(Point to Point Protocol) of local area network (LAN)), STATIC (static configuration address etc.), more convenient and internet usage safely.But new equipment has also changed the pattern that the user uses, and has increased the difficulty of configuration, and the user need sign in on the configuration page of gateway, and the configuration effort that carries out more troubles is to realize the gateway dial feature.
Simultaneously, operator provides Internet resources for the user, and the account number and the password of dialing is provided for each authorized user.When the user used modem, an account can only offer a user and use, but the user uses home gateway, and behind the equipment such as broadband router, operator just is difficult to the control number of users.
Summary of the invention
Technical problem to be solved by this invention is to provide a kind of and realizes the method for user Internet access based on the PPPOE agent functionality, allows user's internet usage more easily, and improves the controllability that the Internet inserts.
For solving the problems of the technologies described above, a kind of method based on PPPOE agent functionality realization user Internet access of the present invention comprises the steps:
Step 1: home gateway and ITMS (Integrated Terminal ManagementSystem, integrated terminal management system) server connects, and ITMS server push PPPOE proxy configurations information is to home gateway;
Step 2: home gateway enters the PPPOE proxy mode, wait for the user pull out into;
Step 3: the user,, sets up the user and is connected with the PPPOE of home gateway after the Server process of a PPPOE of startup is handled the PPPOE message of respective user in the home gateway to home gateway by dial-up connection; Home gateway carries out authentication operations to the user, after authentication is succeedd, and the Client process of the corresponding PPPOE of Server process of foundation and described PPPOE in the home gateway, the PPPOE message with described respective user is forwarded in the correct dial-up connection simultaneously; When not setting up PPPOE as yet being connected between home gateway and the Internet, the PPPOE that sets up each other connects; When between home gateway and the Internet, having set up PPPOE and being connected, directly adopt the PPPOE that exists each other to connect;
Step 4: the user begins normal internet usage.
Further, comprise user account number and password in the PPPOE proxy configurations information in the described step 1.
Further, authentication operations comprises the steps: in the described step 3
The user sends query message and home gateway by behind the session interaction, sets up the user and is connected with the PPPOE of home gateway;
It is point-to-point negotiation that user and home gateway carry out PPP;
User and home gateway be to user name, the password of the user input authentication of holding consultation, and judge whether the terminal equipment that current home gateway inserts has surpassed maximum constraints;
After the negotiation authentication was passed through, home gateway was given user's distributing IP (Internet Protocol, Internet protocol) address.
Further, after described user and home gateway are finished negotiation, also comprise the hold consultation step of authentication of a home gateway and network access equipment.
Further, carry out following processing in the described step 3:
The user dials by the terminal equipment that connects home gateway, input PPPOE agency's user account number and password;
Home gateway carries out the authentication operations of user name, password, and the restriction of number of users judges, after authentication was succeedd, the gateway that founds a family was connected with PPPOE between the Internet, and sets up the corresponding strategy route entry for this user.
Further, home gateway carries out authentication operations to the user in the described step 3, comprises the steps:
PPPOE proxy module audit user dials in information in the home gateway, after audit is passed through, and PPPOE dial module in the PPPOE proxy module notice home gateway, the gateway that founds a family is connected with PPPOE between the Internet;
Tactful routing module in the PPPOE proxy module notice home gateway, the route entry of configure user is transmitted to realize that user's message connects from the PPPOE agency.
Preferably, also comprise failed authentication in the described step 3, the PPPOE agency that PPPOE proxy module disconnect user is dialled in connects, the step of subscriber dialing failure.
Compared with prior art, the present invention is based on the PPPOE agent functionality and realize that the network user inserts the method for the Internet, allow the user on terminals such as PC, connect the Internet by dial-in direct, and need not to carry out complicated configuration effort, also for operator provides a kind of pattern of controlling number of users, improve the controllability that the Internet inserts simultaneously.
Description of drawings
Fig. 1 the present invention is based on PPPOE agency to realize that the network user inserts PPPOE agency network Organization Chart in the method for the Internet;
Fig. 2 is first embodiment of home gateway network configuration model among the present invention;
Fig. 3 is second embodiment of home gateway network configuration model among the present invention;
Fig. 4 is a home gateway internal module model among the present invention;
Fig. 5 is a PPPOE agent functionality authentication process among the present invention;
Fig. 6 is a PPPOE agent functionality flow process among the present invention;
Fig. 7 is a PPPOE agent functionality internal process among the present invention.
Embodiment
The present invention is described in further detail below in conjunction with drawings and embodiments.
The present invention is based on the PPPOE agent functionality and realize that the realization of PPPOE agent functionality in the method for user Internet access needs ITMS server (Integrated TerminalManagement System, the integrated terminal management system), the mating reaction of home gateway, its network architecture as shown in Figure 1, the PC of family, STB (set-top box), other-end equipment are dialled in by home gateway, and by network access equipment connection broadband access network, utilize the propelling movement PPPOE proxy configurations information of ITMS server then, the PPPOE agent functionality is come into force on home gateway.
Ginseng Fig. 2 and shown in Figure 3 has disclosed the dialing model of two kinds of different embodiment of home gateway among the present invention respectively.Fig. 2,2 PVC of this model configuration (VPI/VCI, the identification of virtual path identification/virtual channel) connect: PVC1, PVC2, set up two routes (R) respectively and connect, be used to offer the user who dials in.Fig. 3, the difference part of this model and Fig. 2 is, this user agent connects and has used identical PVC parameter, connects account number and password but input different PPP according to the user, sets up 2 different dial-up connections respectively.
Join shown in Figure 4, disclosed home gateway internal module model, it comprises: PPPD (Server) (being the Server process of PPPOE), PPPD (Client) (being the Client process of PPPOE), PPPOE server processes, PPPOE proxy module, PPPOE dial module.Wherein, the PPPOE server processes start when the PPPOE agent functionality comes into force, and the discover message of the PPPOE that monitoring is dialled in case find that the user dials in, starts the PPPOE message that a PPPD (Server) process is handled respective user; When the user finishes the PPPOE negotiations process, scheduling PPPOE proxy module, by the PPPOE proxy module this user profile is carried out authentication operations, after the authentication success, by PPPOE proxy module notice PPPOE dial module, set up corresponding PPPD (Client) process, begin to dial in broadband access network, simultaneously, the message with the user is forwarded in the correct dial-up connection.
Referring to figs. 1 through Fig. 7, the PPPOE agent functionality can provide subscription authentication, dial-up connection state-maintenance, user to dial in limited in number among the present invention, is described below respectively:
The authentication pattern of PPPOE agent functionality: the PPPOE proxy configurations information (account number and password) that receives the ITMS server push when family's gateway, the PPPOE agent functionality is preserved this parameter, when the user when terminal is dialled in, the PPPOE agent functionality carries out authentication operations according to this account number and password to the user, then dispatch dial module after the success, set up and use corresponding PPPOE connection, if finding this PPPOE connection exists, then no longer carry out dial-up operation, but directly use this PPPOE to connect.
The maintenance of dial-up connection state: when the unexpected broken string of the PPPOE of the Internet side connection, then the PPPOE agent functionality will connect the local area network side PPPOE connection disconnection of correspondence, and after side connection in the Internet recovered normally, user of redialing was again user Internet access; If the user of local area network side disconnects suddenly, then whether the PPPOE agent functionality is analyzed the corresponding the Internet side dialing of this connection and has not been hung down fully, if after determining not have corresponding local area network (LAN) to connect, the PPPOE agent functionality is with automatic disconnection the Internet side PPPOE dialing, with conserve network resources.
The user dials in limited in number: after the user dialled in home gateway, the PPPOE agent functionality was analyzed the client that is dialled in this PPPOE connection and whether has been surpassed maximum number, if surpassed restriction, then refusing user's is dialled in; If the user adopts other ways to insert family gateway equipment, as direct configuration lan address, DHCP distributes address etc., then the PPPOE agent functionality is closed these routing functions that inserts message, these messages can not be connected from the PPPOE of the Internet side send, thereby realize the function that number of users limits.
Join shown in Figure 5ly, disclosed PPPOE agent functionality authentication process:
1. at first enter the PPPOE Discovery stage, user terminal sends query message and home gateway by behind the session interaction, sets up user terminal and is connected with PPPOE between the home gateway, and generate Session ID, and sign is connection specifically;
2. enter the PPPOE Session stage then, carry out the ppp negotiation process, as the LCP negotiation of PPP, the parameter of consulting link layer is as authentification of user mode, MTU etc.;
3.PPP LCP consult to finish after, begin to carry out the negotiation of user name, password, and analyze, whether the equipment that current gateway inserted has surpassed maximum constraints;
4. after authentication was passed through, home gateway assigned IP address for subscriber terminal;
Certainly, after the negotiation of home gateway and user terminal is finished, the negotiation of beginning home gateway and network access equipment, the same 1-4 of this process 5-8 goes up network access equipment until allowing home gateway connect, and finally allows user terminal connect and goes up the Internet.
Join shown in Figure 6ly, the present invention is based on the method realization flow that the PPPOE agent functionality is realized user Internet access:
11. user installation home gateway, user terminal is set up TR069 with home gateway and is connected that (TR-069 is by one of technical specification of DSLFORUM exploitation, full name is " a CPE wide area network management agreement "), and the connection parameter (being the ITMS information on services) of configuration Long-distance Control;
12. being connected of automatic foundation of family gateway equipment and ITMS server, the ITMS server comprises the username and password of PPPOE with PPPOE agency's configuration information, is pushed on the home gateway;
13.PPPOE function comes into force, home gateway enters the PPPOE proxy mode, waits for dialling in of user;
14. the user dials by the terminal equipments such as PC that connect home gateway, input right user authentication information, the i.e. username and password of PPPOE;
15. home gateway carries out the authentication operations of user name, password, and the work such as restriction judgement of number of users, after authentication was succeedd, the gateway that founds a family was connected with the PPPOE of the Internet, and set up the corresponding strategy route entry for this user;
16. the user begins normal internet usage;
17. the user stops dialing, disconnects being connected with the PPPOE of home gateway;
18.P home gateway connects disconnection with the outside P PPOE of this user side PPPOE join dependency, finishes the dialing flow process.
Certainly, more than be that basic PPPOE acts on behalf of realization flow, because this realization flow relates to PPPOE server, PPPOE proxy module, remote control module, tactful routing module, PPPOE dial module at family's intra-gateway, below be example from the scheduling flow of home gateway inside, entire PP POE agency's implementation procedure is described, as shown in Figure 7:
21. the user installation home gateway lands the configuration page of home gateway, the connection parameter of input Long-distance Control is set up and is connected with the TR069 of PPPOE dial module;
22. the user allows home gateway land the ITMS server, to obtain configuration information in remote control module configuration ITMS server parameter information;
Automatically be pushed on the home gateway 23.ITMS server is acted on behalf of parameters needed with PPPOE;
24.PPPOE agent functionality comes into force, home gateway enters the PPPOE proxy mode, waits for dialling in of user;
25 users begin dialing;
26.PPPOE proxy module begins to examine the information that the user dials in, as user name, password, whether the number of users of dialling in is limited, and whether this outside P PPOE connection can set up;
27. audit can not be passed through, the PPPOE agency that PPPOE proxy module disconnect user is dialled in connects, the subscriber dialing failure;
28. audit is passed through, PPPOE proxy module notice PPPOE dial module, and the outside of setting up the PPPOE agency connects, if this connection is set up, then directly utilizes this connection;
29.PPPOE proxy module notification strategy routing module disposes this user's route entry, allows this user's message all can forward from PPPOE agency's connection;
30. the user successfully dials in, normal internet usage.
PPPOE agent functionality of the present invention, do not change the dial mode of user in the PC terminal, but termination user's dialing request on gateway device, PPPOE server by internal support ensures, after carrying out relevant treatment by gateway device then, initiation is dial-up connection to BAS Broadband Access Server, thereby inserts the Internet.The number of may command user access simultaneously, the dial mode that does not change the user does not make the user get involved in the complicated configuration yet, thereby has solved above-mentioned two problems effectively.
Claims (7)
1. the method based on PPPOE agent functionality realization user Internet access is characterized in that this method comprises the steps:
Step 1: home gateway and ITMS are that the integrated terminal Tomcat-AdminPortal connects, ITMS server push PPPOE promptly based on the PPP(Point to Point Protocol) proxy configurations information of local area network (LAN) to home gateway;
Step 2: home gateway enters the PPPOE proxy mode, waits for dialling in of user;
Step 3: the user,, sets up the user and is connected with the PPPOE of home gateway after the Server process of a PPPOE of startup is handled the PPPOE message of respective user in the home gateway to home gateway by dial-up connection; Home gateway carries out authentication operations to the user, after authentication is succeedd, and the Client process of the corresponding PPPOE of Server process of foundation and described PPPOE in the home gateway, the PPPOE message with described respective user is forwarded in the correct dial-up connection simultaneously; When not setting up PPPOE as yet being connected between home gateway and the Internet, the PPPOE that sets up each other connects; When between home gateway and the Internet, having set up PPPOE and being connected, directly adopt the PPPOE that exists each other to connect;
Step 4: the user begins normal internet usage.
According to claim 1 based on the PPPOE agent functionality realize user Internet access method, it is characterized in that, comprise user account number and password in the PPPOE proxy configurations information in the described step 1.
As described in the claim 2 based on the PPPOE agent functionality realize user Internet access method, it is characterized in that authentication operations comprises the steps: in the described step 3
The user sends query message and home gateway by behind the session interaction, sets up the user and is connected with the PPPOE of home gateway;
It is point-to-point negotiation that user and home gateway carry out PPP;
User and home gateway be to user name, the password of the user input authentication of holding consultation, and judge whether the terminal equipment that current home gateway inserts has surpassed maximum constraints;
After the negotiation authentication was passed through, home gateway was given user's distributing IP address.
As described in the claim 3 based on the PPPOE agent functionality realize user Internet access method, it is characterized in that, after described user and home gateway are finished negotiation, also comprise the hold consultation step of authentication of a home gateway and network access equipment.
According to claim 1 based on the PPPOE agent functionality realize user Internet access method, it is characterized in that, carry out following processing in the described step 3:
The user dials by the terminal equipment that connects home gateway, input PPPOE agency's user account number and password;
Home gateway carries out the authentication operations of user name, password, and the restriction of number of users judges, after authentication was succeedd, the gateway that founds a family was connected with PPPOE between the Internet, and sets up the corresponding strategy route entry for this user.
According to claim 1 based on the PPPOE agent functionality realize user Internet access method, it is characterized in that home gateway carries out authentication operations to the user in the described step 3, comprises the steps:
PPPOE proxy module audit user dials in information in the home gateway, after audit is passed through, and PPPOE dial module in the PPPOE proxy module notice home gateway, the gateway that founds a family is connected with PPPOE between the Internet;
Tactful routing module in the PPPOE proxy module notice home gateway, the route entry of configure user is transmitted to realize that user's message connects from the PPPOE agency.
As described in the claim 6 based on the PPPOE agent functionality realize user Internet access method, it is characterized in that, also comprise failed authentication in the described step 3, the PPPOE agency that PPPOE proxy module disconnect user is dialled in connects, the step of subscriber dialing failure.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2007101470095A CN101102291B (en) | 2007-08-11 | 2007-08-11 | Method for realizing user Internet access based on PPPOE agent function |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2007101470095A CN101102291B (en) | 2007-08-11 | 2007-08-11 | Method for realizing user Internet access based on PPPOE agent function |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101102291A CN101102291A (en) | 2008-01-09 |
| CN101102291B true CN101102291B (en) | 2010-08-18 |
Family
ID=39036383
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2007101470095A Active CN101102291B (en) | 2007-08-11 | 2007-08-11 | Method for realizing user Internet access based on PPPOE agent function |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101102291B (en) |
Families Citing this family (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101262368B (en) * | 2008-03-17 | 2012-03-28 | 中兴通讯股份有限公司 | Method and device for connection and configuration in home gateway routing mode |
| CN101771692B (en) * | 2009-12-30 | 2013-01-30 | 华为终端有限公司 | Method, device and system for managing user terminal equipment region |
| CN102143233A (en) * | 2011-04-07 | 2011-08-03 | 深圳市共进电子有限公司 | Customer premise equipment and network accessing method |
| CN103067231A (en) * | 2011-10-24 | 2013-04-24 | 中兴通讯股份有限公司 | System and method for managing home network application terminal equipment |
| CN103491058A (en) * | 2012-06-12 | 2014-01-01 | 深圳市共进电子股份有限公司 | TR069 and UPnP protocol conversion method and home network terminal management method and system |
| CN104754689B (en) * | 2013-12-31 | 2019-12-06 | 中兴通讯股份有限公司 | home gateway access management method and system |
| CN104901856A (en) * | 2015-05-21 | 2015-09-09 | 烽火通信科技股份有限公司 | One-to-many PPPoE (Point-to-Point Protocol over Ethernet) proxy Internet control method and system |
| CN106452917B (en) * | 2016-11-24 | 2019-10-25 | 上海斐讯数据通信技术有限公司 | PPPOE internet account and password method of automatic configuration and system |
| CN107888467B (en) * | 2017-11-20 | 2021-01-01 | 新华三技术有限公司 | Message forwarding method and device based on PPPOE, BRAS and switch |
| CN108898814B (en) * | 2018-06-27 | 2022-05-27 | 泰斗微电子科技有限公司 | Electric power data acquisition and transmission method and system |
| CN108900394B (en) * | 2018-06-28 | 2021-01-08 | 重庆广用通信技术有限责任公司 | Method and system for disordered conversion of PPPoE internal and external network accounts |
| CN111162976B (en) * | 2019-12-20 | 2021-03-02 | 北京邮电大学 | Campus network PPPoE proxy dialing method and device |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1437363A (en) * | 2002-02-08 | 2003-08-20 | 松下电器产业株式会社 | Net gate apparatus and control method thereof |
| CN1486037A (en) * | 2003-08-29 | 2004-03-31 | 北京港湾网络有限公司 | Method and system for bearing PPP proxy server with Ethernet |
-
2007
- 2007-08-11 CN CN2007101470095A patent/CN101102291B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1437363A (en) * | 2002-02-08 | 2003-08-20 | 松下电器产业株式会社 | Net gate apparatus and control method thereof |
| CN1486037A (en) * | 2003-08-29 | 2004-03-31 | 北京港湾网络有限公司 | Method and system for bearing PPP proxy server with Ethernet |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101102291A (en) | 2008-01-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101102291B (en) | Method for realizing user Internet access based on PPPOE agent function | |
| US8458359B2 (en) | System for the internet connections, and server for routing connection to a client machine | |
| US8923284B2 (en) | Method and system of providing multi-user access to a packet switched network | |
| US7630386B2 (en) | Method for providing broadband communication service | |
| CN100421403C (en) | Identification insertion system and identification inserting method thereof | |
| US8868699B2 (en) | Minimum intervention authentication of heterogeneous network technologies (MIAHNT) | |
| CN1332542C (en) | VoIP wireless telephone system and method utilizing wireless LAN | |
| JP5876877B2 (en) | Telecommunication network and method and system for efficient use of connection between telecommunication network and customer premises equipment | |
| WO2004105319A1 (en) | Broadband access method with great capacity and the system thereof | |
| KR20050116820A (en) | Automatic configuration of client terminal in public hot spot | |
| CN101257420A (en) | Point-to-point protocol accessing method, system as well as access node equipment | |
| CN101102265A (en) | Control and carrier separation system and implementation method for multi-service access | |
| CN103051642A (en) | Method for realizing accessing of local area network equipment in firewall based on VPN (Virtual Private Network) and network system | |
| WO2011150610A1 (en) | Method and system for dynamically adjusting bandwidth services, and broadband policy system | |
| CN101197785A (en) | MAC authentication method and apparatus | |
| CN101309284A (en) | Remote access communication method, apparatus and system | |
| US9413829B2 (en) | Method for efficient initialization of a telecommunications network and telecommunications network | |
| CN102143233A (en) | Customer premise equipment and network accessing method | |
| CN101808256B (en) | Passive optical network system with multicast authentication and control functions and implementing method thereof | |
| CN101867509B (en) | Device, system and method for automatically configuring application terminal in household network | |
| CN108134693A (en) | Networking parameters configuration method, device, router and the storage medium of router | |
| CN112566120A (en) | Slice management method, device and system and service subscription server | |
| CN102487331A (en) | Equipment management method and system thereof, and apparatuses | |
| CN102143027A (en) | Method and device for accessing network | |
| Cisco | App A: Advanced Quick Reference |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |