Background technology
WLAN(Wireless Local Area Network, i.e. WLAN)Refer to and use the wireless skills of IEEE802.11
One group of computer and relevant device that art is interconnected.WLAN refers to the computer bureau for making transmission medium with wireless channel
Domain net, is important supplement and the extension of wired networking mode, and is increasingly becoming a vital composition in computer network
Part, is widely used in needing removable data to handle or can not carry out the field of physical transmission medium wiring.With
The formulation and development of IEEE802.11 wireless network standards, make radio network technique more ripe with it is perfect.And it is successfully wide
It is general to be applied to numerous industries, such as financial instrument, education, large enterprise, industrial and mineral harbour, government bodies, hotel, airport, army.
Product mainly includes:WAP, unlimited network interface card, wireless router, radio network gateway, wireless bridge etc..
WLAN is primarily present two kinds of frameworks, i.e. IBSS(Independent Basic Service Set, independent basic clothes
Business collection, also referred to as Ad-hoc)And BSS(Basic Service Set, Basic Service Set, also as Infrastructure).
In IBSS frameworks, transfer communication is directly carried out without specific equipment by wireless communication between user terminal.
It is required for being communicated by AP transfers in BSS frameworks, between user terminal, and can also be accessed by AP
Internet business.
Earliest wlan device, a variety of functions is gathered, such as:Physical layer, link layer, ciphering user data, user
Certification, QoS, security strategy, the management of user and other application level functions integrate, tradition this kind of wlan device is commonly called as
For " fat " AP.The characteristics of " fat " AP is that configuration is flexible, it is high but separate between AP to install simple, cost performance, it is impossible to be adapted to use
The complicated places of environment such as family density is high, the continuous coverings of multiple AP.Centralized Control type AC+AP equipment is produced for this, by concentrating
Controller AC and Lightweight AP coordinate, and realize the function of " fat " AP equipment.Wherein, Lightweight AP only retain physical link layer and
MAC functions include the wireless connection of 802.11 agreements there is provided reliable, high performance Radio Frequency Management;Centralized Controller AC concentrates institute
Some upper-layer functionalities, including safety, control and management etc. function, compared with traditional AP, Lightweight AP realize function significantly
Weaken, therefore be commonly called as " thin " AP.
With the maturation further of WLAN technologies, traditional Autonomous Model wlan network using fat AP as chief component is gradually
Develop into the convergence type wlan network using thin AP+AC as framework.Wherein, AP is as carrier class wireless coverage equipment, equivalent to one
The bridge of individual connection wired network and wireless network, its main function is to connect together each wireless network clients, is realized big
Scope, the wireless access of multi-user, different according to application scenarios, AP is commonly divided under indoor type and outdoor version, indoor environment
Coverage is generally at 30 meters~100 meters, and outdoor environment maximum coverage range can reach 800 meters.The access control of AC WLANs
Control equipment, is responsible for converging the data from different AP and accessing Internet, while completing the configuration management of AP equipment
The control functions such as certification with wireless user, management, and bandwidth, access, switching, safety.Management powerful AC and control work(
Can, personalized, specialized wlan solution can be constructed.
In thin AP+AC frameworks wireless controller AC be responsible for network Access Control, forwarding and statistics, AP configuration monitoring,
Roaming management, AP network management agent and security control etc., thin AP are responsible for the encryption and decryption of 802.11 messages, radio physical layer PHY
The functions such as the statistics that function, RF eat dishes without rice or wine.
In general, centralized Control type AC+AP frameworks, its biggest advantage, which is to manage, to be simplified.The net of wlan device
Pipe platform need to only manage Centralized Controller AC, so that it may which Lightweight AP is arrived in management indirectly, and this mitigates backstage significantly(As webmaster is put down
Platform)Pressure.When use the wlan network security strategy based on WAPI technologies, when digital certificate be arranged on " fat " AP on, due to
" fat " AP is large number of, the numerous message identifying Session initiated(Session)Number can produce very big pressure to certificate server
Power;And when using " thin " AP, digital certificate is arranged on AC, due to AC negligible amounts, therefore the message identifying that AC is initiated
Session numbers are considerably less than the message identifying Session numbers of " fat " AP initiations, therefore mitigate the pressure of certificate server significantly;
Meanwhile, " fat " AP is to dispose in public places, and general user is likely to touch AP equipment, and AC equipment is to be deployed in machine
Room, general user can not possibly touch AC equipment, and AC is as unified authentication points, by the management and domination set of safety, therefore
The digital certificate that device certificate ratio on AC is arranged in " fat " AP equipment is safer.
Under thin AP+AC frameworks, AP can not work independently, it is necessary to used cooperatively with AC, therefore need and match somebody with somebody between AP and AC
The communication protocol of set can allow them to be interconnected.Tunneling Protocol between first AP-AC is LWAPP, then, and IETF is
The incompatibility problem of tunnel protocol, CAPWAP has been set up in 2005 between solution each vendor A P-AC(Control And
Provisioning of Wireless Access Points Protocol Specification, the wireless access of control
Point and configuration protocol)Working group is with the tunnel protocol between standardized A P and AC.
Distributed WLAN network under thin AP+AC patterns mainly has two kinds of frameworks, respectively Local MAC frameworks, Split
MAC frameworks.All things considered, the main distinction of Local MAC and Split MAC frameworks is whether the communication data of user needs
Forwarded by AC.In Local MAC, user data is directly realized by local forwarding, and in Split MAC frameworks, number of users
Unified forwarding is carried out according to being to need to be back at AC, then by AC.Further by Local MAC can be understood as bypass mode, AC
Only it is responsible for the management of user(User authentication)With the management of network(Network configuration);And Split MAC are appreciated that main road pattern,
AC not only needs to be responsible for the management and network management of user, while also needing to be responsible for the forwarding of user data.
AP on existing market, when removing by supporting the communication protocols such as CAPWAP agreements so as to be controlled by AC, AP
Command Line Interface are also provided simultaneously(CLI, Command Line Interface), facilitate user by logging in the machine, directly enter
Row network management(For example, when AP can not link AC), user can operate AP comprehensively by CLI, its achievable management function
The management function that can be provided by CAPWAP agreements more than or equal to AC.
With continuing to develop for WLAN technologies, AP function is also being continuously increased, and manufacturer is required for when developing the function
In AP CLI systems, corresponding CLI command is increased newly, so that user can debug to the function.
As WLAN technologies are evolving, AP function will be continuously increased.Each AP function increase, is required for
Increase corresponding information word in CAPWAP(Can also referred to as " cell "), to realize that AC is called to the what's new.And mesh
Before, in the operator network, it there is the AP and AC of different manufacturers.In the wlan network early stage of development, the AC of same manufacturer is managed
Manage the AP of the manufacturer.The phenomenon of different manufacturers self-organizing system is so there is, and its is unfavorable for concentration of the operator to all AP
Management.To solve the problem, each producer releases one after another the AC of big function, it is desirable to achieve to all AP(Including third party AP)System
One management.
Because each vendor equipment all has the function of differentiation, therefore CAPWAP agreements can only be common to each vendor equipment at present
Have, basic function unified management, and to function specific to different manufacturers, only by formulating specific information word come real
It is existing.Development cost has so been significantly greatly increased.Meanwhile, when being related to AP the and AC intercommunications of different vendor, it is necessary to which different manufacturers are cooperateed with
Exploitation, the Cost for Coordination of both sides further increases development cost.
Embodiment
The present invention is described in further detail below by specific embodiment and with reference to accompanying drawing.
The embodiment of the present invention is in order to when AP extends New function, it is to avoid the corresponding New function exploitation on AC, and realizes that this is new
The rapid deployment of function, so as to reduce the development cost of operator's WiFi network what's new and there is provided one kind the construction cycle
Communication means and equipment between AP and AC(For example:Access point apparatus and Access Control point device), carried out below by embodiment
Description.
Communication means flow chart between the AP described from AC sides as shown in Figure 1 and AC, this method comprises the following steps:
The mark letter for the order AP corresponding with the order that step S102, AC are inputted by explosion command interface user
Breath;
Step S104, AC will be ordered to be encapsulated in the form of character string in CMD cell;Wherein, the command cue
Symbol cell can be the cell that AP and AC makes an appointment, dedicated for sending extension or newly-increased order, its specific form
Correlation technique is may be referred to, the embodiment of the present invention is not limited thereof;
CMD cell after encapsulation is sent to by step S106, AC according to the corresponding AP of order identification information
AP。
In the method for the present embodiment, AC, directly should after the order that user is inputted by explosion command interface is received
Order is sent to corresponding AP in the form of character string, it is no longer necessary to the operation program to that should order is developed on AC, is passed through
Corresponding AP, which runs the order, can complete the instruction of user, reduce the AC development costs after AP extensions, and then also shorten
Construction cycle, with stronger practicality.
Corresponding to method as shown in Figure 1, the embodiment of the present invention additionally provides the communication between the AP described from AP sides and AC
Method, such as Fig. 2, this method comprise the following steps:
Step S202, AP receive the CMD cell that AC is sent;Wherein, it is packaged with life in the CMD cell
The character string of order;
Step S204, AP are parsed to mentioned order prompt cell, obtain mentioned order;
Step S206, AP pass through CLI(Command Line Interface)System operation mentioned order.
In the method for the present embodiment, AP is receiving the CMD cell of AC transmissions, runs it in CLI systems and takes
The order of band, so no longer needs to develop the operation program to that should order on AC, reduces the AC after AP extensions and develops into
This, and then the construction cycle is also shortened, with stronger practicality.
The schematic diagram of communication means between AP shown in Figure 3 and AC, this method can increase CAPWAP's on AC
Order input module, the information to receive user's input;By taking AP what's news A as an example, as AP what's new A, it is assumed that factory
The meeting of business 1 is CLI_A orders there is provided what's new A order in AP CLI systems.This method comprises the following steps:
(1)On the AC of manufacturer 2, CAPWAP order input module is called(Equivalent to above-mentioned explosion command interface), it is right
The AP inputs corresponding CLI_A orders.In the present embodiment, the CLI_A command formats in the CLI_A orders and AP are completely the same.
(2)The CLI_A orders are encapsulated in specifically defined CMD IE by with the pattern of character string(Equivalent to mentioned order
Prompt cell)In, it is delivered to by CAPWAP control messages on AP.
(3)When AP CAPWAP modules receive the CMD IE, character string CLI_A will be parsed, the character string is passed
Pass CLI systems;
(4)The CLI_A orders are performed in CLI systems.AP New functions A is directly invoked at AC ends so as to realize.
Wherein, above-mentioned CMD IE form as shown in figure 4, including:
Type=37, it is vendor specific to illustrate this cell(Manufacturer is specific)Information word;
Length, illustrates the length of subsequent packet, and unit is byte(Include Vendor Identifier, Element
ID, Length_2 and CMD String).
Vendor Identifier, correspondence formulates the identification of the manufacturer of the information word;
Elment ID, fill in CMD IE corresponding No. IE;
Length_2, illustrates the length of follow-up CMD String messages, and unit is byte.
In CMD String, CLI command is encapsulated with character string mode.
Network manager operates the AP of different manufacturers similar New function with unified command format for convenience.It is above-mentioned
AC will order the step to be encapsulated in the form of character string in CMD cell to include:AC is according to AP type information(Example
Such as:AP producer, hardware version numbers, the information such as software version number), determine order row format;Mentioned order is converted to this by AC
The character string of order row format;AC is by the string wrapper in CMD cell.So webmaster need not be corresponded to not
Same AP inputs different command formats, is easy to practical operation.Based on this, network manager inputs mould in above-mentioned CAPWAP orders
Input includes corresponding target AP identity beacon informations in block(Such as mac address information)With corresponding management order.System is by head
Target AP identity beacon informations are first passed through, the corresponding CLI CMD forms of the AP is confirmed, CLI CMD modular converters is recalled, by this
Administration order is converted into the character string of corresponding CLI CMD forms according to the corresponding CLI CMD forms of the AP;According still further to above
Encapsulation transmission flow be sent to AP.The operational order of personnel can be so managed collectively, the complex management of administrative staff is reduced
Degree.
AP has been run after mentioned order, can also be included:AP, which will run the obtained implementing result of order and be encapsulated in, performs knot
In fruit cell;Implementing result cell is sent to AC by AP.Correspondingly, the above method also includes:AC receives the execution knot that AP is returned
Fruit cell, wherein, the implementing result of operation order is packaged with the implementing result cell;AC is unsealed to implementing result cell
Dress, obtains the implementing result of order;Implementing result is presented in AC on a user interface.
The schematic diagram of communication means between AP shown in Figure 5 and AC, on the basis of flow shown in Fig. 3, Fig. 5 correspondences
Communication means in can also increase execution command result return information member, receiving AC CMD IE to AP, and perform
After corresponding CLI_A, corresponding implementing result is returned.On the basis of flow shown in Fig. 3, after AP performs CLI_A, CLI systems
CLI_A implementing result is returned to CAPWAP modules.The implementing result is encapsulated in Result IE by CAPWAP modules(It is i.e. above-mentioned
Implementing result cell)In, then control message to send Result IE to AC by CAPWAP.When AC CAPWAP modules are received
To after the control message, therefrom parse after implementing result, the implementing result of the CLI_A is presented on a user interface.Wherein,
Result IE form is as shown in fig. 6, wherein, each field meanings is as follows:
Type=37, explanation is vendor specific information words;
Length, illustrates the length of subsequent packet, and unit is byte(Include Vendor Identifier, Element
ID, Length_2, Result Code and Result String).
Vendor Identifier, correspondence formulates the identification of the manufacturer of the information word
Elment ID, fill in Result IE corresponding No. IE;
Length_2, illustrates the length of follow-up CMD String messages, and unit is byte.
Result Code, the result that mentioned order is performed:It can be represented to perform failure with 0;Represented to run succeeded with 1;With
2 represent that the order is not present;Reserved field is used as with rest;
Result String(It is optional), when the execution order is encapsulated in character string mode, the correlation that CLI systems are returned
Information.
Corresponding to the above method, the embodiment of the present invention additionally provides a kind of Access Control point device(AC), should referring to Fig. 7
Equipment is included with lower module:
User profile receiving module 72, the order and order for being inputted by explosion command interface user is corresponding
AP identification information;
Package module 74, the order for user profile receiving module 72 to be received is encapsulated in order in the form of character string
In prompt cell;
Sending module 76, the identification information of the corresponding AP of order for being received according to user profile receiving module 72 will be sealed
CMD cell after dress is sent to AP.
This equipment is after the order that user is inputted by explosion command interface is received, directly by the order with character string
Form is sent to corresponding AP, it is no longer necessary to the operation program to that should order is developed on AC, should by corresponding AP operations
Order can complete the instruction of user, reduce the AC development costs after AP extensions, and then also shorten the construction cycle, with compared with
Strong practicality.
In order to simplify webmaster operation, above-mentioned package module 74 includes:Order row format determining unit, for the class according to AP
Type information, determines order row format;Order converting unit, for the life for being converted to the determination of order row format determining unit will to be ordered
Make the character string of row format;Encapsulation unit, for the string wrapper after the conversion of order converting unit to be believed in CMD
In member.
Preferably, above-mentioned Access Control point device also includes:Implementing result receiving module, the execution for receiving AP returns
As a result cell, wherein, the implementing result of operation order is packaged with implementing result cell;Decapsulation module, for performing knot
The implementing result cell that fruit receiving module is received is decapsulated, and obtains the implementing result of order;Module is presented in implementing result, uses
In the implementing result that presentation decapsulation module is obtained on a user interface.
Corresponding to the above method and equipment, the present embodiment additionally provides a kind of access point apparatus(AP), referring to Fig. 8, this sets
It is standby to include with lower module:
Cell reception module 82, the CMD cell for receiving AC transmissions;Wherein, sealed in CMD cell
Character string equipped with order;
Command analysis module 84, for being parsed to the CMD cell that cell reception module 82 is received, is obtained
Mentioned order;
Order operation module 86, for parsing obtained order by CLI system operation command analysis module 84.
This equipment extracts the order of its carrying after the CMD cell of AC transmissions is received, and passes through CLI systems
Run the order, it is no longer necessary to the operation program to that should order is developed on AC, reduce the AC development costs after AP extensions,
And then the construction cycle is also shortened, with stronger practicality.
Preferably, above-mentioned access point apparatus also includes:Implementing result package module, for the execution that order is obtained will to be run
As a result it is encapsulated in implementing result cell;Implementing result sending module, for implementing result cell to be sent into AC.
The embodiment of the present invention additionally provides the communication system between a kind of AP and AC, and the system includes above-mentioned AP and AC, wherein,
AC can be the equipment shown in Fig. 7, and AP can be the corresponding equipment of Fig. 8.
In above example, by increasing CMD IE, AC is set to directly transmit CLI command to AP, the work(increased newly to AP
It can be directly invoked.By increasing CMD transformation functions, at AC ends, can automatically according to AP type, by the control command of standard
It is changed into corresponding A P CLI command.At AP ends, by increasing Result IE, AP is set to return to correspondence CLI command operation
As a result.
Above example, can complete the transmission of any order by AP and AC the CAPWAP agreements followed, realize
When AP extends New function, it is to avoid the corresponding New function exploitation on AC, and then the rapid deployment of the New function is realized, so as to reduce fortune
Seek development cost and the construction cycle of business's WiFi network what's new.
Obviously, those skilled in the art should be understood that above-mentioned each module of the invention or each step can be with general
Computing device realize that they can be concentrated on single computing device, or be distributed in multiple computing devices and constituted
Network on, alternatively, the program code that they can be can perform with computing device be realized, it is thus possible to they are stored
Performed in the storage device by computing device, either they are fabricated to respectively each integrated circuit modules or by they
In multiple modules or step single integrated circuit module is fabricated to realize.So, the present invention is not restricted to any specific
Hardware and software is combined.
The preferred embodiments of the present invention are the foregoing is only, are not intended to limit the invention, for the skill of this area
For art personnel, the present invention can have various modifications and variations.Within the spirit and principles of the invention, that is made any repaiies
Change, equivalent substitution, improvement etc., should be included in the scope of the protection.