CN108234255B

CN108234255B - Online processing method and device

Info

Publication number: CN108234255B
Application number: CN201711475514.2A
Authority: CN
Inventors: 金小艇; 戴一凡
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: Hangzhou H3C Technologies Co Ltd
Priority date: 2017-12-29
Filing date: 2017-12-29
Publication date: 2021-01-26
Anticipated expiration: 2037-12-29
Also published as: CN108234255A

Abstract

The disclosure relates to an online processing method and device, wherein the method comprises the following steps: creating a virtual interface corresponding to a physical port of a data plane device; receiving a message sent by the data plane device, wherein the message carries a port identifier of a physical port of the data plane device, which is connected with user equipment; and if the port identification of the physical port connected with the user equipment corresponds to the created virtual interface, issuing a flow table item for guiding the user equipment to be on-line to the data plane equipment. And the CP controls whether to issue a flow table item for guiding the user equipment to be on line according to whether the port identification of the physical port carried by the message received from the DP corresponds to the virtual interface created by the CP, and the CP maintains the corresponding relation between all the physical ports of the DP and the created virtual interface, so that any port of the DP can be on line.

Description

Online processing method and device

Technical Field

The present disclosure relates to the field of network communication technologies, and in particular, to an online processing method and apparatus.

Background

In order to solve the problems that the capacity of a forwarding plane and a control plane is not matched, resources cannot be shared, new service deployment is not timely and the like in the traditional BRAS (Broadband Remote Access Server), a virtualized BRAS concept is introduced. The idea of virtualizing the BRAS is to separate the control plane and the data plane, i.e.: control Plane services such as user identification and initiation authentication request, identity authentication, address allocation and management, access control and the like are independently extracted and completed by an independent device CP (Controller Plane); the Data Plane services such as user Data packet forwarding and flow control are completed by another separate device DP (Data Plane).

Disclosure of Invention

In view of this, the present disclosure provides an online processing method and apparatus.

According to a first aspect of the present disclosure, there is provided an online processing method applied to a control plane device, including:

creating a virtual interface corresponding to a physical port of a data plane device;

receiving a message sent by the data plane device, wherein the message carries a port identifier of a physical port of the data plane device, which is connected with user equipment;

and if the port identification of the physical port connected with the user equipment corresponds to the created virtual interface, issuing a flow table item for controlling the user equipment to be on-line to the data plane equipment.

According to a second aspect of the present disclosure, there is provided an online processing method, applied to a data plane device, including:

receiving a default flow table sent by a control plane device, wherein a matching item of the default flow table is the type of an online message sent by a user device or a matching object set by a user, and an action item of the default flow table is to package a port identifier of a physical port of the data plane device, which is connected with the user device, into the online message and forward the port identifier on the physical port connected with the user device;

receiving an online message sent by the user equipment;

packaging a port identifier of a physical port of the data plane equipment, which is connected with user equipment, into the online message;

and sending the encapsulated message to the control plane equipment at the physical port connected with the user equipment.

According to a third aspect of the present disclosure, there is provided an online processing apparatus, applied to a control plane device, including:

a creation module for creating a virtual interface corresponding to a physical port of a data plane device;

a receiving module, configured to receive a packet sent by the data plane device, where the packet carries a port identifier of a physical port of the data plane device, where a user equipment is connected to the port identifier;

and a sending module, configured to issue, to the data plane device, a flow entry for guiding the user equipment to go online if the port identifier of the physical port to which the user equipment is connected corresponds to the created virtual interface.

According to a fourth aspect of the present disclosure, there is provided an online processing apparatus, applied to a data plane device, including:

the flow table receiving module is used for receiving a default flow table sent by the control plane device, wherein a matching item of the default flow table is the type of an online message sent by the user device or a matching object set by the user, and an action item of the default flow table is to package a port identifier of a physical port, connected with the user device, of the data plane device into the online message and forward the port identifier on the physical port connected with the user device;

the message receiving module is used for receiving an online message sent by the user equipment;

the encapsulation module is used for encapsulating the port identification of the physical port of the data plane equipment, which is connected with the user equipment, into the online message;

and the sending module is used for sending the encapsulated message to the control plane equipment at the physical port connected with the user equipment.

The technical scheme provided by the disclosure can comprise the following beneficial effects: and the CP controls whether to issue a flow table item for guiding the user equipment to be on line according to whether the port identification of the physical port carried by the message received from the DP corresponds to the virtual interface created by the CP, and the CP maintains the corresponding relation between all the physical ports of the DP and the created virtual interface, so that any port of the DP can be on line.

In one implementation, the technical solution provided by the present disclosure may include the following beneficial effects: compared with the prior art in which the CP and the DP communicate through two different channels, namely the OpenFlow channel and the VXLAN channel, that is, the entry issuing and the control of the protocol message are realized through the two different channels, according to the embodiment of the present disclosure, the CP and the DP communicate using only one channel, for example, the OpenFlow channel, and thus, no additional other channel, for example, the VXLAN channel, is needed.

Other features and aspects of the present disclosure will become apparent from the following detailed description of exemplary embodiments, which proceeds with reference to the accompanying drawings.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate exemplary embodiments, features, and aspects of the disclosure and, together with the description, serve to explain the principles of the disclosure.

FIG. 1 is a flow diagram illustrating a method of online processing, according to an example embodiment.

FIG. 2 is a flow diagram illustrating a method of online processing, according to an example embodiment.

Fig. 3 is a block diagram illustrating a structure of an online processing apparatus according to an exemplary embodiment.

Fig. 4 is a block diagram illustrating a structure of an online processing apparatus according to an exemplary embodiment.

Fig. 5 is a block diagram illustrating a hardware structure of an online processing apparatus according to an exemplary embodiment.

Detailed Description

Various exemplary embodiments, features and aspects of the present disclosure will be described in detail below with reference to the accompanying drawings. In the drawings, like reference numbers can indicate functionally identical or similar elements. While the various aspects of the embodiments are presented in drawings, the drawings are not necessarily drawn to scale unless specifically indicated.

The word "exemplary" is used exclusively herein to mean "serving as an example, embodiment, or illustration. Any embodiment described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments.

Furthermore, in the following detailed description, numerous specific details are set forth in order to provide a better understanding of the present disclosure. It will be understood by those skilled in the art that the present disclosure may be practiced without some of these specific details. In some instances, methods, means, elements and circuits that are well known to those skilled in the art have not been described in detail so as not to obscure the present disclosure.

For convenience of explanation, a part of the concept related to the present disclosure will be explained first.

Two transmission channels, OpenFlow and VXLAN (Virtual Extensible LAN) are established between the CP and the DP to implement entry issuing and control of the protocol message. The OpenFlow channel is used as an entry issuing channel between the CP and the DP, and the VXLAN channel is used as a protocol message channel between the CP and the DP.

However, since the CP can only obtain, according to the protocol packet received by the VXLAN tunnel, which VSI (Virtual Switching Instance) gateway interface the protocol packet comes from, the CP can only limit the user traffic to the VSI gateway logical port, and thus, it is not possible to realize that any port of the DP is online.

For this reason, the present disclosure proposes the following embodiments to solve the above-described problems.

Fig. 1 is a flowchart illustrating an on-line processing method, which may be applied to a control plane device, according to an exemplary embodiment. As shown in fig. 1, the inline processing method may include the following steps.

In step S110, a virtual interface corresponding to a physical port of the data plane device is created.

In this embodiment, the CP may directly acquire the port identifiers of all the physical ports of the DP, so that the CP may create a virtual interface corresponding to the physical port identified by the acquired port identifier.

In an implementation manner, if a communication channel between a CP and a DP is an OpenFlow channel, when a state of any physical port of the DP is converted between an active (UP) state and a DOWN (DOWN) state, the DP may actively send an advertisement message to the CP, so as to report the state of its own physical port, where the advertisement message carries a port identifier of the physical port whose state is converted and a current state of the physical port. The CP may obtain the port identifier of the physical port of the DP by analyzing the notification message sent by the DP.

In step S130, a packet sent by the data plane device is received, where the packet carries a port identifier of a physical port of the data plane device, to which the user equipment is connected.

In step S150, if the port identifier of the physical port to which the user equipment is connected corresponds to the created virtual interface, a flow entry for guiding the user equipment to go online is issued to the data plane device.

In this embodiment, if the port identifier of the physical port to which the user equipment is connected corresponds to the created virtual interface, the CP may perform a subsequent control flow in the online flow of the user equipment under the created virtual interface.

Taking PPPOE (Point-to-Point Protocol over Ethernet, which carries PPP Protocol over Ethernet) user equipment access as an example, the subsequent control flow in the online flow of the user equipment is performed under the created virtual interface.

The CP creates a PPPoE session and performs PPP negotiation, and sends an Authentication request to an AAA (Authentication Authorization Accounting, Authentication, Authorization, and Accounting) server, where the Authentication request message carries information such as a user name and a password. The CP receives an authentication result returned by the AAA server, wherein if the authentication is successful, the AAA server sends an authentication receiving message to the CP and carries authorization information; if the authentication fails, the AAA server sends an authentication reject message to the CP.

The CP obtains the result of authentication and authorization according to the message received from the AAA server, if the authentication fails, the user equipment is off-line; and if the authentication is successful, the CP sends the PPPoE session to the DP through the OpenFlow channel. And the CP sends an accounting start message to the AAA server to start accounting for the user.

Therefore, in the embodiment of the present disclosure, the CP controls whether to issue a flow entry for guiding the user equipment to go online according to whether the port identifier of the physical port carried in the packet received from the DP corresponds to the virtual interface created by the CP. The CP maintains the corresponding relation between all physical ports of the DP and the created virtual interface, so that any port of the DP can be on line.

In addition, compared with the prior art in which the CP and the DP communicate through two different channels, namely the OpenFlow channel and the VXLAN channel, that is, the entry issuing and the control of the protocol message are realized through the two different channels, according to the embodiment of the present disclosure, the CP and the DP communicate using only one channel, for example, the OpenFlow channel, and thus, no additional other channel, for example, the VXLAN channel, is needed.

In an implementation manner, the online processing method may further include: and sending a default flow table to the data plane equipment, wherein a matching item of the default flow table is the type of an online message sent by the user equipment or a matching object set by a user, and an action item of the default flow table is to package a port identifier connected with a physical port of the user equipment into the online message and forward the online message on the physical port connected with the user equipment.

In this embodiment, each time a default flow table is hit, the DP processes the online packet according to the action item of the default flow table, and forwards the processed packet according to the physical port connected to the user equipment.

The default flow table may include, but is not limited to, the following flow tables:

flow table one: when the message is a DHCP (Dynamic Host Configuration Protocol) discover message, the matching item is a message type: and in the DHCP message, the action item is Packet-in operation on the DHCP discover message and normal forwarding operation on other DHCP messages.

And a second flow table: when the message is an ND (Neighbor Discovery) RS (route request) message, the matching item is the message type: and in the NDRS message, the action item is to perform Packet-in operation on the ND RS message and perform normal forwarding operation on other ND messages.

And a third flow table: for all messages, the matching item is an Access Circuit (AC) of a corresponding interface/L2 VPN (Layer 2Virtual Private Network) set by a user, and the action item is Packet-in operation and normal forwarding operation on all messages on the AC.

And fourthly, for the subnet messages, the matching items are subnet network segments set by a user, and the action items are Packet-in operations and normal forwarding operations on all the subnet messages on the corresponding interfaces.

And fifthly, for the unknown source IP message, the matching item is the IP set by the user, and the action item is the Packet-in operation on the IP message.

And the flow table six, the matching item is a message which is not matched with the flow tables I to V, and the action item is discarded.

For the six flow tables, parallel matching can be performed, the priority levels are the same, or matching can be performed according to a priority level sequence set by user requirements, for example, matching is performed sequentially according to the sequence of the priority levels from large to small, the priority level of the flow table one is the largest, and the priority level of the flow table six is the smallest. And if the attack prevention is considered, a meter table can be quoted on the flow table to limit the speed of the Packet-in message and the like.

In this embodiment, the CP may also send the following two flow tables to the DP:

flow table I: when the message is a message interacted with the WEB authentication server, the matching item is the message type: and the action item is to carry out normal forwarding operation on all the messages interacted with the WEB authentication server.

Flow table II: when the message is other HTTP/HTTPS messages except the message interacted with the WEB authentication server, the matching item is the message type: except the message interacted with the WEB authentication server, the action item is to perform Packet-in operation on other HTTP/HTTPS messages.

The priority of the flow table I and the flow table II may be the same as or different from that of the above-described flow table one to flow table five, or may be prioritized according to user needs, for example, higher than that of the above-described five flow tables.

In one implementation, the received packet may also carry a corresponding relationship between a port identifier of a physical port of the data plane device to which the user device is connected and the VLAN/VXLAN/port MAC,

correspondingly, the online processing method of the embodiment may further include:

if the port identification of the physical port connected with the user equipment corresponds to the created virtual interface, acquiring the corresponding relation between the virtual interface and the VLAN/VXLAN/port MAC, and issuing a flow table item for guiding the user equipment to be on-line to the data plane equipment.

In this embodiment, if the received packet further carries a corresponding relationship between the port identifier and the VLAN/VXLAN/port MAC, the CP obtains the corresponding relationship between the VLAN/VXLAN/port MAC and the created virtual interface according to the corresponding relationship between the port identifier and the VLAN/VXLAN/port MAC and the corresponding relationship between the port identifier and the created virtual interface, and thus, when the QINQ/VXLAN/MACinMAC encapsulation is solved, it is determined that the user equipment is online from the virtual interface according to the obtained corresponding relationship.

Fig. 2 is a flowchart illustrating an on-line processing method that may be applied to a data plane device according to an example embodiment. As shown in fig. 2, the inline processing method may include the following steps.

In step S220, a default flow table sent by the control plane device is received, where a matching item of the default flow table is a type of an online packet sent by the user device or a matching object set by the user, and an action item of the default flow table is to encapsulate a port identifier of a physical port of the data plane device, to which the user device is connected, into the online packet, and forward the port identifier on the physical port to which the user device is connected.

In step S240, an online message sent by the user equipment is received.

In step S260, the port identifier of the physical port of the data plane device, to which the user equipment is connected, is encapsulated into an online message.

In this embodiment, since the DP receives the online packet, the DP queries that the default flow table is hit, and thus the DP executes an action item in the default flow table, that is, encapsulates the port identifier of the physical port of the data plane device, to which the user device is connected, into the online packet. The DP may encapsulate the on-line packet through an existing protocol packet or a newly defined packet, so that the encapsulated packet carries a port identifier of a physical port of the DP, to which the user equipment is connected. For example, the DP may perform Packet-in operation on the online Packet through an OpenFlow protocol, so as to encapsulate a port identifier of a physical port, to which the user equipment is connected, of the DP into the online Packet.

IN an implementation manner, the protocol packet includes, but is not limited to, an OpenFlow protocol packet, a VXLAN protocol packet, a QINQ protocol packet, and a MAC-IN-MAC protocol packet.

It should be noted that, as will be understood by those skilled in the art, the encapsulation manner for encapsulating the online packet in the embodiment of the present disclosure is not particularly limited, and as long as the online packet can carry the port identifier of the DP, which is connected to the physical port of the user equipment, the encapsulation manner can be applied to the embodiment of the present disclosure.

In step S280, the encapsulated packet is sent to the control plane device at the physical port to which the user equipment is connected.

Therefore, in the embodiment of the present disclosure, the DP packages the port identifier of the physical port connected to the user equipment of the DP into the online message, and sends the packaged message to the CP, so that the CP controls whether to issue the flow entry for guiding the user equipment to be online according to whether the port identifier of the physical port carried by the packaged message corresponds to the virtual interface created by the CP, and since the CP maintains the corresponding relationship between all the physical ports of the DP and the created virtual interface, the online of any port of the DP can be realized.

In one implementation, the action item of the default flow table is to encapsulate a port identifier of a physical port, which is connected to the user equipment, of the data plane device into an online packet, and the method includes:

the action item of the default flow table is to encapsulate the corresponding relation between the port identification of the physical port of the data plane device connected with the user device and the VLAN/VXLAN/port MAC into an online message,

encapsulating a port identifier of a physical port of a data plane device, which is connected with a user device, into an online message, including:

and encapsulating the corresponding relation between the port identification of the physical port of the data plane equipment connected with the user equipment and the VLAN/VXLAN/port MAC into an online message.

In this embodiment, the action item of the default flow table may also be to encapsulate a correspondence between a port identifier of a physical port of the DP, to which the user equipment is connected, and the VLAN/VXLAN/port MAC into an online message, and correspondingly, the DP encapsulates a correspondence between a port identifier of a physical port of the DP, to which the user equipment is connected, and the VLAN/VXLAN/port MAC into an online message. Therefore, the CP can acquire the corresponding relation between the VLAN/VXLAN/port MAC and the created virtual interface according to the received message, and therefore when the QINQ/VXLAN/MACinMAC encapsulation is solved, the user equipment is determined to be online from the virtual interface according to the acquired corresponding relation.

In an implementation manner, the online processing method may further include:

when the communication between the data plane device and the control plane device is interrupted, maintaining the online state of the user equipment which is online, and storing the charging information of the user equipment which is online;

when the communication between the data plane device and the control plane device is recovered, comparing whether the flow in the stored charging information is consistent with the flow in the charging information when the communication is recovered;

and if the flow in the stored charging information is not consistent with the flow in the charging information when the communication is recovered, sending the charging information when the communication is recovered to the control plane equipment.

And the DP collects user flow at regular time and sends the user flow to the CP through an OpenFlow channel. The CP sends the flow to AAA server to process charging.

Therefore, in the embodiment of the present disclosure, when the communication between the CP and the DP is interrupted, the DP maintains the online state of the user equipment that has been online and stores the charging information of the user equipment that has been online, and when the communication between the CP and the DP is resumed, if the flow in the stored charging information is not consistent with the flow in the charging information when the communication is resumed, the DP uploads the charging information when the communication is resumed to the CP, thereby, when the communication between the CP and the DP is interrupted, not only the use of the user equipment that has been online can be ensured, but also the charging manner can be optimized.

Fig. 3 is a block diagram illustrating a structure of an online processing apparatus according to an exemplary embodiment, where the online processing apparatus may be applied to a control plane device. As shown in fig. 3, the online processing apparatus 300 may include a creating module 310, a receiving module 330, and a transmitting module 350.

The creation module 310 is used to create a virtual interface corresponding to a physical port of a data plane device.

The receiving module 330 is configured to receive a packet sent by the data plane device, where the packet carries a port identifier of a physical port of the data plane device, where the physical port is connected to the user equipment.

The sending module 350 is connected to the receiving module 330 and the creating module 310, and configured to issue a flow entry for guiding the user equipment to go online to the data plane device if the port identifier of the physical port to which the user equipment is connected corresponds to the created virtual interface.

In one implementation, the online processing device may further include:

an obtaining module (not shown) for obtaining a port identification of a physical port of the data plane device,

the creation module 310 is configured to: a virtual interface is created that corresponds to the physical port identified by the port identification.

In one implementation, the sending module 350 is further configured to:

and sending a default flow table to the data plane equipment, wherein a matching item of the default flow table is the type of an online message sent by the user equipment or a matching object set by a user, and an action item of the default flow table is to package a port identifier connected with a physical port of the user equipment into the online message and forward the online message on the physical port connected with the user equipment.

In one implementation, the packet also carries a correspondence between port identifiers of physical ports of the data plane device to which the user device is connected and VLAN/VXLAN/port MAC,

the online processing device may further include:

an obtaining module (not shown) is configured to, if the port identifier of the physical port connected with the user equipment corresponds to the created virtual interface, obtain a corresponding relationship between the virtual interface and the VLAN/VXLAN/port MAC, and issue a flow entry for guiding the user equipment to go online to the data plane device.

Fig. 4 is a block diagram illustrating a structure of an online processing apparatus according to an exemplary embodiment, where the online processing apparatus may be applied to a data plane device. As shown in fig. 4, the online processing apparatus 400 may include a flow table receiving module 410, a packet receiving module 430, an encapsulating module 450, and a sending module 470.

The flow table receiving module 410 is configured to receive a default flow table sent by the control plane device, where a matching item of the default flow table is a type of an online packet sent by the user device or a matching object set by the user, and an action item of the default flow table is to package a port identifier of a physical port of the data plane device, where the physical port is connected to the user device, into the online packet, and forward the port identifier on the physical port connected to the user device.

The message receiving module 430 is configured to receive an online message sent by a user equipment.

The encapsulating module 450 is connected to the flow table receiving module 410 and the message receiving module 430, and is configured to encapsulate the port identifier of the physical port of the data plane device, to which the user equipment is connected, into an online message.

The sending module 470 is connected to the encapsulating module 450, and configured to send the encapsulated packet to the control plane device at the physical port to which the user equipment is connected.

the encapsulation module 450 is configured to:

With regard to the apparatus in the above-described embodiment, the specific manner in which each module performs the operation has been described in detail in the embodiment related to the method, and will not be elaborated here.

Fig. 5 is a block diagram illustrating a hardware structure of an online processing apparatus according to an exemplary embodiment. Referring to fig. 5, the apparatus 500 may include a processor 901, a machine-readable storage medium 902 having stored thereon machine-executable instructions. The processor 901 and the machine-readable storage medium 902 may communicate via a system bus 903. Also, processor 901 performs the tunnel selection method described above by reading machine-executable instructions in machine-readable storage medium 902 corresponding to tunnel selection logic.

The machine-readable storage medium 902 referred to herein may be any electronic, magnetic, optical, or other physical storage device that can contain or store information such as executable instructions, data, and the like. For example, the machine-readable storage medium may be: a RAM (random Access Memory), a volatile Memory, a non-volatile Memory, a flash Memory, a storage drive (e.g., a hard drive), a solid state drive, any type of storage disk (e.g., an optical disk, a dvd, etc.), or similar storage medium, or a combination thereof.

Having described embodiments of the present disclosure, the foregoing description is intended to be exemplary, not exhaustive, and not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terms used herein were chosen in order to best explain the principles of the embodiments, the practical application, or technical improvements to the techniques in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. An online processing method is applied to control plane equipment, and is characterized by comprising the following steps:

if the port identification of the physical port connected with the user equipment corresponds to the created virtual interface, issuing a flow table item for guiding the user equipment to be on-line to the data plane equipment;

the method further comprises the following steps: and sending a default flow table to the data plane equipment, wherein a matching item of the default flow table is the type of an online message sent by the user equipment or a matching object set by a user, and an action item of the default flow table is to package a port identifier of a physical port connected with the user equipment into the online message and forward the port identifier on the physical port connected with the user equipment.

2. The online processing method according to claim 1, further comprising:

acquiring a port identification of a physical port of the data plane device,

creating a virtual interface corresponding to a physical port of a data plane device, comprising:

creating a virtual interface corresponding to the physical port identified by the port identification.

3. The inline processing method according to claim 1,

the message also carries the corresponding relation between the port identification of the physical port of the data plane equipment connected with the user equipment and VLAN/VXLAN/port MAC,

the online processing method further comprises the following steps:

4. An online processing method is applied to data plane equipment, and is characterized by comprising the following steps:

receiving an online message sent by the user equipment;

packaging a port identifier of a physical port of the data plane equipment, which is connected with user equipment, into the online message; the port identification is used for: the control plane issues a flow table item for guiding the user equipment to be on-line to the data plane equipment according to the corresponding relation between the port identification and the virtual interface established by the control plane;

5. The inline processing method according to claim 4,

the action item of the default flow table is to encapsulate a port identifier of a physical port, connected with the user equipment, of the data plane device into the online packet, and includes:

the action item of the default flow table is to encapsulate the corresponding relation between the port identification of the physical port of the data plane device connected with the user device and the VLAN/VXLAN/port MAC into the online message,

the encapsulating the port identifier of the physical port of the data plane device, to which the user equipment is connected, into the online packet includes:

and encapsulating the corresponding relation between the port identification of the physical port of the data plane equipment connected with the user equipment and the VLAN/VXLAN/port MAC into the online message.

6. The utility model provides a processing apparatus that reaches standard grade, is applied to control plane equipment, its characterized in that includes:

a sending module, configured to issue, to the data plane device, a flow entry for guiding the user equipment to go online if the port identifier of the physical port connected with the user equipment corresponds to the created virtual interface;

the sending module is further configured to: and sending a default flow table to the data plane equipment, wherein a matching item of the default flow table is the type of an online message sent by the user equipment or a matching object set by a user, and an action item of the default flow table is to package a port identifier of a physical port connected with the user equipment into the online message and forward the port identifier on the physical port connected with the user equipment.

7. The inline processing apparatus as set forth in claim 6, further comprising:

an obtaining module, configured to obtain a port identifier of a physical port of the data plane device,

the creation module is configured to:

8. The inline processing apparatus according to claim 6,

the online processing device further comprises:

and the acquisition module is used for acquiring the corresponding relation between the virtual interface and the VLAN/VXLAN/port MAC if the port identification of the physical port connected with the user equipment corresponds to the created virtual interface, and issuing a flow table entry for guiding the user equipment to be on-line to the data plane equipment.

9. The utility model provides an online processing apparatus, is applied to data plane equipment, its characterized in that includes:

the encapsulation module is used for encapsulating the port identification of the physical port of the data plane equipment, which is connected with the user equipment, into the online message; the port identification is used for: the control plane issues a flow table item for guiding the user equipment to be on-line to the data plane equipment according to the corresponding relation between the port identification and the virtual interface established by the control plane;

10. The inline processing apparatus as set forth in claim 9,

the encapsulation module is configured to: