CN108667575A

CN108667575A - A kind of BRAS turns the backup method and device of control separation

Info

Publication number: CN108667575A
Application number: CN201710797160.7A
Authority: CN
Inventors: 晁岳磊; 张仁强
Original assignee: New H3C Technologies Co Ltd
Current assignee: New H3C Technologies Co Ltd
Priority date: 2017-09-06
Filing date: 2017-09-06
Publication date: 2018-10-16
Anticipated expiration: 2037-09-06
Also published as: CN108667575B

Abstract

The application provides a kind of backup method and device of BRAS turns of control separation, and this method includes：After user equipment is by certification, determine the corresponding session information of the user equipment, and determining the corresponding tunnel backup group of the user equipment, the tunnel backup group includes the standby tunnel between main tunnel, BRAS CP equipment and standby BRAS UP equipment between BRAS CP equipment and main BRAS UP equipment；The session information is sent to main BRAS UP equipment by the main tunnel, so that main BRAS UP equipment carries out data transmission according to the session information；The session information is sent to standby BRAS UP equipment by the standby tunnel, so that standby BRAS UP equipment carries out data transmission according to the session information.By the technical solution of the application, when main BRAS UP device fails, the business experience of user can be improved to avoid the service disconnection of user equipment, can be switched fast between BRAS UP equipment, promote the reliability of forwarding plane.

Description

Backup method and device for BRAS transfer control separation

Technical Field

The present application relates to the field of communications technologies, and in particular, to a backup method and apparatus for BRAS handover separation.

Background

A BRAS (Broadband Remote Access Server) is used as an Access gateway of a user and an edge of an IP network, and since a control plane and a forwarding plane are tightly coupled together, performance processing is affected with each other, performance of the control plane and the forwarding plane cannot be fully exerted, and resource utilization rate is low. In order to solve the above problems, a virtualized BRAS with a separate Control Plane and forwarding Plane is proposed at present, that is, a vbars architecture, where the Control Plane may be implemented by a BRAS-CP (BRAS Control Plane, a broadband remote access server Control Plane, that is, a Control Plane in a transfer Control separate vbars system) device, and is located as a user Control management component, which may be used to implement functions such as user Control management, user access Control, user authentication authorization charging, address management, configuration management, and the like. The forwarding Plane can be realized by a BRAS-UP (BRAS User Plane, a broadband remote access server forwarding Plane, that is, a forwarding Plane in a transfer control separation vBRAS system), is positioned as a three-layer network edge and a User policy execution component, and can be used for realizing functions of traffic forwarding, QoS (Quality of Service), traffic statistics and the like.

At present, under a configuration with separated transfer control, user equipment is accessed to the Internet through a BRAS-UP device, and when the BRAS-UP device fails, all services of the user equipment accessed to the Internet through the BRAS-UP device are interrupted, so that the user equipment is cut off, and the service experience of a user is very poor.

Disclosure of Invention

The application provides a backup method for BRAS transfer control separation, which is applied to BRAS-CP equipment and comprises the following steps:

after user equipment passes authentication, determining session information corresponding to the user equipment, and determining a tunnel backup group corresponding to the user equipment, wherein the tunnel backup group comprises a main tunnel between BRAS-CP equipment and main BRAS-UP equipment, and a standby tunnel between BRAS-CP equipment and standby BRAS-UP equipment;

sending the session information to a main BRAS-UP device through the main tunnel so as to enable the main BRAS-UP device to carry out data transmission according to the session information; and sending the session information to a backup BRAS-UP device through the backup tunnel so as to enable the backup BRAS-UP device to carry out data transmission according to the session information.

The application provides a backup device that BRAS changes accuse separation, is applied to BRAS-CP equipment, the device includes:

the system comprises a determining module, a judging module and a judging module, wherein the determining module is used for determining session information corresponding to user equipment after the user equipment passes authentication, and determining a tunnel backup group corresponding to the user equipment, and the tunnel backup group comprises a main tunnel between a BRAS-CP device and a main BRAS-UP device and a standby tunnel between the BRAS-CP device and a standby BRAS-UP device;

the sending module is used for sending the session information to the main BRAS-UP equipment through the main tunnel so as to enable the main BRAS-UP equipment to carry out data transmission according to the session information; and sending the session information to the backup BRAS-UP device through the backup tunnel so as to enable the backup BRAS-UP device to carry out data transmission according to the session information.

The application provides a machine-readable storage medium applied to a BRAS-CP device, wherein the machine-readable storage medium stores a plurality of computer instructions, and when the computer instructions are executed, the computer instructions perform the following processing:

Based on the technical scheme, in the embodiment of the application, the session information corresponding to the user equipment can be sent to the main BRAS-UP device and the standby BRAS-UP device, and the main BRAS-UP device/the standby BRAS-UP device can perform data transmission according to the session information. Therefore, when the main BRAS-UP device breaks down, the data of the user equipment accessed to the Internet through the main BRAS-UP device can be switched to the standby BRAS-UP device, and the standby BRAS-UP device has the session information of the user equipment, so that the data can be directly transmitted by using the session information, thereby avoiding the service interruption of the user equipment, improving the service experience of a user, quickly switching between the BRAS-UP devices and improving the reliability of a forwarding layer.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings needed to be used in the description of the embodiments of the present application or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments described in the present application, and other drawings can be obtained by those skilled in the art according to the drawings of the embodiments of the present application.

FIG. 1 is a schematic diagram of an application scenario in an embodiment of the present application;

fig. 2 is a flowchart of a BRAS handover separated backup method according to an embodiment of the present application;

fig. 3 is a structural diagram of a backup device for BRAS relocation separation in an embodiment of the present application;

fig. 4 is a hardware structure diagram of a BRAS-CP device in an embodiment of the present application.

Detailed Description

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in this application and the claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein is meant to encompass any and all possible combinations of one or more of the associated listed items.

It is to be understood that although the terms first, second, third, etc. may be used herein to describe various information, such information should not be limited to these terms. These terms are only used to distinguish one type of information from another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present application. Depending on the context, moreover, the word "if" is used may be interpreted as "at … …," or "when … …," or "in response to a determination.

The embodiment of the application provides a backup method for BRAS transfer control separation, and the method can be applied to a system comprising BRAS-CP equipment and BRAS-UP equipment, such as a vBRAS system and the like. The BRAS-CP device is a device for implementing a control plane, and is used for implementing functions such as user control management, user access control, user authentication authorization charging, address management, configuration management and the like. The BRAS-UP device is a device for implementing a forwarding plane, and is used for implementing functions such as traffic forwarding, QoS, traffic statistics, ACL (Access Control List) Control, CAR (Committed Access Rate), route distribution, and the like.

Referring to fig. 1, an application scenario schematic diagram of the embodiment of the present application is shown, and a vbrs system may include a BRAS-CP device and at least two BRAS-UP devices. In fig. 1, 1 BRAS-CP device and 3 BRAS-UP devices are taken as an example for illustration, and of course, in practical applications, the number of BRAS-CP devices and the number of BRAS-UP devices may be more, and the number is not limited.

In fig. 1, the user equipment may be, for example, a virtual machine, a PC (Personal Computer), a mobile phone, a host Computer, or the like. The Authentication server may be, for example, an AAA (Authentication Authorization Accounting) server, a RADIUS (Remote Authentication Dial In User Service) server, or the like. The management orchestrator may be a mano (management and organization) for managing and controlling the BRAS-CP device and the BRAS-UP device, and may call an API (Application Programming Interface) Interface through a Netconf (Network configuration protocol) protocol to complete interaction with the BRAS-CP device and the BRAS-UP device. The core router is a CR and is used for routing and forwarding data packets.

In one example, the BRAS-CP device may be a virtual BRAS-CP device in software, such as a virtual resource with BRAS service processing capability running on an X86 server, or a physical BRAS-CP device in hardware, such as a server with BRAS service processing capability. The BRAS-UP device may be a virtual BRAS-UP device in software, such as a virtual resource running on an X86 server, or a physical BRAS-UP device in hardware, such as a router or switch. Of course, the above procedures only describe two expressions of BRAS-CP device and BRAS-UP device, which is not limited to this. Moreover, when the BRAS-UP device is a virtual BRAS-UP device, different BRAS-UP devices may be deployed at the same server or at different servers. When the BRAS-CP device is a virtual BRAS-CP device and the BRAS-UP device is a virtual BRAS-UP device, the BRAS-CP device and the BRAS-UP device may be deployed in the same server or in different servers.

In one example, the BRAS-CP device may establish a tunnel, such as an openflow tunnel, with each BRAS-UP device separately. For example, a tunnel a may be established between the BRAS-CP device 141 and the BRAS-UP device 131, where at the BRAS-CP device 141, the source address of the tunnel a is the address of the BRAS-CP device 141 and the destination address is the address of the BRAS-UP device 131; on the BRAS-UP device 131, the destination address of the tunnel a is the address of the BRAS-CP device 141 and the source address is the address of the BRAS-UP device 131. Similarly, a tunnel B may be established between the BRAS-CP device 141 and the BRAS-UP device 132, and a tunnel C may be established between the BRAS-CP device 141 and the BRAS-UP device 133, and the source address and the destination address of the tunnel B and the tunnel C are similar to the tunnel a, and will not be described in detail herein.

On the basis of the above tunnels, in the embodiment of the present application, a tunnel backup group may be created first, where the tunnel backup group may include a main tunnel between a BRAS-CP device and a main BRAS-UP device, and a standby tunnel between a BRAS-CP device and a standby BRAS-UP device, where the number of the main tunnel may be one, and the number of the standby tunnels may be one or more, and a description is given by taking one standby tunnel as an example later. Moreover, the main tunnels of different tunnel backup groups can be different, and the backup tunnels of different tunnel backup groups can be the same or different; or, the primary tunnels of different tunnel backup groups may be the same, and the backup tunnels of different tunnel backup groups may be different. For convenience of description, in the following process, the example that the main tunnels of different tunnel backup groups are different is taken as an example for explanation.

The process for creating the tunnel backup group may include, but is not limited to, the following ways:

in the first mode, the BRAS-CP equipment sequentially acquires a tunnel between the BRAS-CP equipment and each BRAS-UP equipment; the BRAS-CP device creates a tunnel backup group for the acquired tunnel, wherein in the created tunnel backup group, the main tunnel is the acquired tunnel, and the standby tunnel is other tunnels except the acquired tunnel.

Referring to fig. 1, when acquiring a tunnel a, a BRAS-CP device 141 may create a tunnel backup group 1 for the tunnel a, where a main tunnel of the tunnel backup group 1 is the tunnel a, and a backup tunnel may be a tunnel B or a tunnel C, and a description will be given by taking the tunnel B as an example later. When acquiring the tunnel B, the BRAS-CP device 141 may create a tunnel backup group 2 for the tunnel B, where a main tunnel of the tunnel backup group 2 is the tunnel B, and a backup tunnel may be the tunnel a or the tunnel C, and the tunnel C is described later as an example. When acquiring the tunnel C, the BRAS-CP device 141 may create a tunnel backup group 3 for the tunnel C, where a main tunnel of the tunnel backup group 3 is the tunnel C, and a backup tunnel may be a tunnel a or a tunnel B, and the tunnel a is described as an example in the following.

And in the second mode, the BRAS-CP equipment receives the tunnel backup message sent by the management orchestrator, analyzes the main tunnel information and the standby tunnel information from the tunnel backup message, and creates a tunnel backup group by using the main tunnel information and the standby tunnel information, namely, the main tunnel is determined based on the main tunnel information, and the standby tunnel is determined based on the standby tunnel information.

Referring to fig. 1, when the management orchestrator 161 determines that the tunnel between the BRAS-CP device 141 and the BRAS-UP device 131 is a primary tunnel and the tunnel between the BRAS-CP device 141 and the BRAS-UP device 132 is a standby tunnel, it may send a tunnel backup message to the BRAS-CP device 141, where the primary tunnel information carried by the tunnel backup message is the tunnel between the BRAS-CP device 141 and the BRAS-UP device 131, and the standby tunnel information carried by the tunnel backup message is the tunnel between the BRAS-CP device 141 and the BRAS-UP device 132. After receiving the tunnel backup message, BRAS-CP device 141 may create tunnel backup group 1, where a main tunnel of tunnel backup group 1 is tunnel a and a backup tunnel is tunnel B.

In an example, the management orchestrator 161 may determine the primary tunnel and the backup tunnel in the tunnel backup group according to a preset policy, as long as the primary tunnels of different tunnel backup groups are different, and the preset policy is not limited. For example, the management orchestrator 161 may determine that the primary tunnel in the tunnel backup group 1 is tunnel a and the backup tunnel is tunnel B, determine that the primary tunnel in the tunnel backup group 2 is tunnel B and the backup tunnel is tunnel C, determine that the primary tunnel in the tunnel backup group 3 is tunnel C and the backup tunnel is tunnel a, and so on.

In an example, based on the first and second manners, after the BRAS-CP device creates the tunnel backup group, the backup tunnel in the tunnel backup group may also be adjusted. For example, after the BRAS-CP device creates the tunnel backup group 1, the backup tunnel is adjusted to be the tunnel C, that is, the primary tunnel is the tunnel a, and the backup tunnel is the tunnel C.

After the BRAS-CP device creates the tunnel backup group, the tunnel backup group may also be deleted, that is, the primary-backup relationship between the primary tunnel and the secondary tunnel is released. For example, after the BRAS-CP device creates the tunnel backup group 1, the tunnel backup group 1 may also be deleted, that is, the primary and secondary relations that the primary tunnel is the tunnel a and the secondary tunnel is the tunnel B no longer exist.

After the BRAS-CP device creates the tunnel backup group, the roles of the main and standby can be exchanged to form a backup of 1+1, that is, the main tunnel and the standby tunnel are mutually the main and standby. For example, after the BRAS-CP device creates the tunnel backup group 1, the main tunnel is tunnel a, the backup tunnel is tunnel B, the main tunnel is tunnel B, and the backup tunnel is tunnel a.

In one example, the BRAS-CP device may transmit session information to the BRAS-UP device through the above-described tunnel (e.g., openflow tunnel, etc.). In addition, the BRAS-CP device can also establish a VXLAN (virtual extensible Local Area Network) tunnel with each BRAS-UP device, and the BRAS-UP device and the BRAS-CP device can transmit related messages through the VXLAN tunnel.

For example, VXLAN tunnel 1 may be established between the BRAS-CP device 141 and the BRAS-UP device 131, where on the BRAS-CP device 141, the source address of the VXLAN tunnel 1 is the address of the BRAS-CP device 141 and the destination address is the address of the BRAS-UP device 131; on the BRAS-UP device 131, the destination address of the VXLAN tunnel 1 is the address of the BRAS-CP device 141 and the source address is the address of the BRAS-UP device 131. Similarly, VXLAN tunnel 2 may be established between BRAS-CP device 141 and BRAS-UP device 132, and VXLAN tunnel 3 may be established between BRAS-CP device 141 and BRAS-UP device 133, which will not be described in detail in terms of VXLAN tunnel 2 and VXLAN tunnel 3.

In the application scenario, before the user equipment accesses the Internet, the user equipment may be authenticated, and after the user equipment passes the authentication, the user equipment may access the Internet. Since the authentication process of each user equipment is the same, the authentication process of the user equipment 111 will be described as an example.

Take an IPoE (Internet Protocol over Ethernet, IP over Ethernet) access process triggered by DHCP (Dynamic Host Configuration Protocol) as an example.

The user equipment 111 sends a DHCP-DISCOVER message, and after receiving the DHCP-DISCOVER message, the BRAS-UP device 131 sends the DHCP-DISCOVER message to the BRAS-CP device 141 through the VXLAN tunnel 1. BRAS-CP device 141 creates an IPoE session and sends an authentication request message to the authentication server, where the authentication request message includes user information, such as Client ID option and source MAC address (i.e., MAC address of user device 111) in the DHCP-DISCOVER message.

The BRAS-CP device 141 receives the authentication result returned by the authentication server. If the authentication is passed, the authentication result is an authentication acceptance message, and the authentication acceptance message carries authorization information for the user equipment 111; if the authentication is not passed, the authentication result is an authentication refusing message. The following description will take authentication pass as an example.

BRAS-CP device 141 updates IPoE session status to authentication pass, and forwards DHCP-DISCOVER message to DHCP server. The DHCP server may respond to the DHCP-OFFER message and BRAS-CP device 141 forwards the DHCP-OFFER message to BRAS-UP device 131 through VXLAN tunnel 1 and BRAS-UP device 131 forwards the DHCP-OFFER message to user equipment 111.

The user equipment 111 sends a DHCP-REQUEST message, and the BRAS-UP device 131 sends the DHCP-REQUEST message to the BRAS-CP device 141 through the VXLAN tunnel 1 after receiving the DHCP-REQUEST message. BRAS-CP device 141 sends a DHCP-REQUEST message to the DHCP server. The DHCP server responds with a DHCP-ACK message carrying the assigned IP address.

BRAS-CP device 141 resolves the IP address and other address parameter information of the user from the DHCP-ACK message, updates the session information of the IPoE session, and sets the state of the IPoE session to be online. In addition, BRAS-CP device 141 forwards the DHCP-ACK message to BRAS-UP device 131 through VXLAN tunnel 1, and BRAS-UP device 131 forwards the DHCP-ACK message to user equipment 111. The user equipment 111 obtains the IP address and the related address parameter information according to the received DHCP-ACK message.

Certainly, the above process is only an example, and in practical applications, access manners such as PPPoE (Point to Point protocol over Ethernet ) may also be adopted, which is not limited to this.

Through the above implementation process, the user equipment 111 can access the Internet through the BRAS-UP device, and the session information corresponding to the user equipment 111 is recorded on the BRAS-CP device 141.

The process of sending the DHCP-DISCOVER message to the BRAS-CP device 141 by the BRAS-UP device 131 through the VXLAN tunnel 1 may also be implemented in the following manner:

the BRAS-UP device 131 establishes a correspondence between a VSI Interface 1(Virtual Switch Interface) and the VXLAN tunnel 1, a correspondence between a VSI Interface 2 and the VXLAN tunnel 1, and a correspondence between a VSI Interface 3 and the VXLAN tunnel 1. The VSI interface 1 corresponds to the physical interface 1 (the interface of the BRAS-UP device 131 connected to the switch 121), the VSI interface 2 corresponds to the physical interface 2 (the interface of the BRAS-UP device 131 connected to the switch 122), and the VSI interface 3 corresponds to the physical interface 3 (the interface of the BRAS-UP device 131 connected to the switch 123).

Based on this, after receiving the DHCP-DISCOVER message through the physical interface 1, the BRAS-UP device 131 may determine the VSI interface 1 corresponding to the physical interface 1, and then the BRAS-UP device 131 may obtain the VXLAN tunnel 1 corresponding to the VSI interface 1 by querying the correspondence between the VSI interface and the tunnel, and send the DHCP-DISCOVER message to the BRAS-CP device 141 through the VXLAN tunnel 1.

In one example, in order to make the access BRAS-UP device of each user equipment connected to the switch 121 be the BRAS-UP device 131, the switch 121 may be controlled to send a DHCP-DISCOVER message to the BRAS-UP device 131, but not to the BRAS-UP device 132 and the BRAS-UP device 133. In order to realize that the switch 121 sends the DHCP-DISCOVER message to the BRAS-UP device 131, the following steps may be implemented: the BRAS-CP device 141 or the management orchestrator 161 notifies the BRAS-UP device 132 and the BRAS-UP device 133 to set the interface connected to the switch 121 itself to the DOWM (failure) state, based on which the BRAS-UP device 132 may set the interface connected to the switch 121 on the device to the DOWM state and the BRAS-UP device 133 may set the interface connected to the switch 121 on the device to the DOWM state. That is, the interface on the switch 121 to which the BRAS-UP device 132 is connected is in the down state, and the interface on the switch 121 to which the BRAS-UP device 133 is connected is in the down state, but the interface on the switch 121 to which the BRAS-UP device 131 is connected is still in the UP (normal) state. The BRAS-UP device 132/BRAS-UP device 133 sets the interface of the device connected to the switch 121 to the DOWN state, which may be to set the VSI interface to the DOWN state, or to set the two-layer VSI instance to the DOWN state, and this is not limited.

To sum UP, when the switch 121 receives the DHCP-DISCOVER message, since only the interface connected to the BRAS-UP device 131 on the switch 121 is in the UP state, and both the interface connected to the BRAS-UP device 132 and the interface connected to the BRAS-UP device 133 are in the DOWM state, the switch 121 may send the DHCP-DISCOVER message to the BRAS-UP device 131.

In the foregoing application scenario, referring to fig. 2, a flowchart of a BRAS transfer separation backup method provided in an embodiment of the present application is shown, where the BRAS transfer separation backup method may be applied to a BRAS-CP device, and the BRAS transfer separation backup method may include the following steps:

step 201, after the user equipment passes the authentication, determining the session information corresponding to the user equipment, and determining the tunnel backup group corresponding to the user equipment, where the tunnel backup group may include a main tunnel between the BRAS-CP device and the main BRAS-UP device, and a backup tunnel between the BRAS-CP device and the backup BRAS-UP device.

Wherein, the main tunnel and the backup tunnel in the tunnel backup group can be the openflow tunnel. Of course, the main tunnel and the backup tunnel are not limited to openflow tunnels, and may be any tunnels with reliable connection, and the openflow tunnels are described as an example herein.

The session information is used for guiding the BRAS-UP device to transmit data according to the session information, and the content of the session information is not limited. For example, the session information may include, but is not limited to, one or any combination of the following: IP address, MAC (Media Access Control) address, VLAN (Virtual Local area Network) information, VPN (Virtual Private Network) information, VXLAN tunnel information, authorization information, user traffic, etc., where the authorization information may further include, but is not limited to, one or any combination of the following: QoS strategy, speed limit strategy, statistical strategy, ACL strategy, etc. Of course, the above-mentioned session information is only an example, and is not limited thereto.

For the obtaining mode of the session information, the BRAS-CP device can obtain authorization information from the authentication server. The BRAS-CP device may also collect the traffic flow information by itself, for example, the MAC address and VLAN information of the user equipment are analyzed from the DHCP-REQUEST message, the IP address and VPN information of the user equipment are analyzed from the DHCP-ACK message, and the user traffic flow currently used by the user equipment may be counted.

Of course, the above-mentioned manner of obtaining the session information is only an example of the present application, and is not limited thereto.

In an example, the process for "determining a tunnel backup group corresponding to the user equipment" may include, but is not limited to, the following ways: determining a receiving tunnel of an address request message (such as a DHCP-DISCOVER message), wherein the receiving tunnel can be a tunnel on BRAS-CP equipment for receiving the address request message, and the address request message is sent by user equipment through BRAS-UP equipment. And inquiring a tunnel backup group matched with the main tunnel and the receiving tunnel, and determining the inquired tunnel backup group as a tunnel backup group corresponding to the user equipment. Of course, the above manner is only an example of determining the tunnel backup group corresponding to the user equipment, and is not limited to this.

In the above process, it has been introduced that the receiving tunnel (i.e. the tunnel receiving the DHCP-DISCOVER message) may be a VXLAN tunnel, and the tunnel in the tunnel backup group may be an openflow tunnel, and therefore, the matching between the main tunnel and the receiving tunnel means: the source IP address of the receiving tunnel is the same as the source IP address of the main tunnel, and the destination IP address of the receiving tunnel is the same as the destination IP address of the main tunnel. Certainly, in practical application, a corresponding relationship between the VXLAN tunnel and the openflow tunnel may also be specified, and based on this, after the VXLAN tunnel receiving the DHCP-DISCOVER message is determined, the openflow tunnel corresponding to the VXLAN tunnel may be queried by querying the corresponding relationship, that is, the main tunnel is found.

In the above process, it has been introduced that the BRAS-UP device 131 can send the DHCP-DISCOVER message to the BRAS-CP device 141 through the VXLAN tunnel 1, that is, the BRAS-CP device 141 receives the DHCP-DISCOVER message through the VXLAN tunnel 1, that is, the receiving tunnel is the VXLAN tunnel 1. In the three tunnel backup groups created by the BRAS-CP device 141, the main tunnel of the tunnel backup group 1 is the tunnel a, the source IP address of the tunnel a is the same as the source IP address of the VXLAN tunnel 1, and the destination IP address of the tunnel a is the same as the destination IP address of the VXLAN tunnel 1, so that the tunnel backup group matched with the receiving tunnel is the tunnel backup group 1, and the tunnel backup group corresponding to the user device is the tunnel backup group 1.

In the tunnel backup group 1, the primary tunnel is a tunnel a between the BRAS-CP device 141 and the BRAS-UP device 131, and the backup tunnel is a tunnel B between the BRAS-CP device 141 and the BRAS-UP device 132.

Step 202, sending the session information to a primary BRAS-UP device through the primary tunnel, so that the primary BRAS-UP device performs data transmission according to the session information; and sending the session information to the backup BRAS-UP device through the backup tunnel so as to enable the backup BRAS-UP device to carry out data transmission according to the session information.

In one example, after obtaining the session information corresponding to the user equipment, the BRAS-CP device 141 sends the session information to the primary BRAS-UP device and the standby BRAS-UP device, and both the primary BRAS-UP device and the standby BRAS-UP device may perform data transmission according to the session information. For example, if the data sent by the user equipment to the Internet is transmitted to the main BRAS-UP device, the main BRAS-UP device can perform data transmission according to the session information, and if the data sent by the user equipment to the Internet is transmitted to the standby BRAS-UP device, the standby BRAS-UP device can also perform data transmission according to the session information. For example, if the data transmitted to the user equipment through Internet is transmitted to the main BRAS-UP device, the main BRAS-UP device can transmit data according to the session information, and if the data transmitted to the user equipment through Internet is transmitted to the standby BRAS-UP device, the standby BRAS-UP device can also transmit data according to the session information.

The process of data transmission by the primary BRAS-UP device/the backup BRAS-UP device according to the session information may include: and acquiring contents such as an IP address, an MAC address, VLAN information, VPN information, VXLAN tunnel information and the like from the session information, generating a forwarding table item based on the contents, and guiding the BRAS-UP equipment to realize flow forwarding through the forwarding table item. A QoS strategy can be obtained from the session information, and the QoS strategy is used for guiding the BRAS-UP equipment to realize QoS control; acquiring a speed limit strategy from the session information, and guiding BRAS-UP equipment to realize CAR through the speed limit strategy; acquiring a statistical strategy from the session information, and guiding the BRAS-UP equipment to realize flow statistics through the statistical strategy; obtaining an ACL strategy from the session information, and guiding BRAS-UP equipment to realize ACL control through the ACL strategy; and acquiring user traffic from the session information, and counting the traffic on the basis of the user traffic.

Of course, the above manner is only an example of data transmission according to the session information, and is not limited to this.

In summary, since the session information is sent to the primary BRAS-UP device and the secondary BRAS-UP device, when the primary BRAS-UP device fails, data sent by the primary BRAS-UP device may be switched to the secondary BRAS-UP device, for example, data sent by the user equipment to the Internet through the primary BRAS-UP device may be switched to the secondary BRAS-UP device, and data sent by the Internet to the user equipment through the primary BRAS-UP device may be switched to the secondary BRAS-UP device.

In one example, when the main BRAS-UP device is not failed, the user equipment can send data to the Internet through the main BRAS-UP device, the Internet can send data to the user equipment through the main BRAS-UP device, when the main BRAS-UP device is failed, the user equipment can send data to the Internet through the standby BRAS-UP device, and the Internet can send data to the user equipment through the standby BRAS-UP device.

In order to realize that the Internet sends data to the user equipment through the main BRAS-UP device when the main BRAS-UP device fails, and sends data to the user equipment through the backup BRAS-UP device when the main BRAS-UP device fails, the backup method for BRAS transfer control separation further comprises the following steps:

step 203, determining the network segment to which the user equipment belongs, if the network segment is not sent, sending the network segment to the primary BRAS-UP equipment through the primary tunnel, so that the primary BRAS-UP equipment issues a first route carrying the network segment, wherein the first route is used for sending the data aiming at the network segment to the primary BRAS-UP equipment.

As shown in fig. 1, the ue connected to the switch 121 (e.g., ue 111, ue 112) may belong to the same network segment, e.g., segment 10.1.1.0/24, the ue connected to the switch 122 (e.g., ue 113, ue 114) may belong to the same network segment, e.g., segment 10.1.2.0/24, and so on.

After the user device 111 is authenticated, the BRAS-CP device 141 determines a network segment, such as the network segment 10.1.1.0/24, to which the IP address of the user device 111 belongs, and transmits the network segment 10.1.1.0/24 to the BRAS-UP device 131 through a primary tunnel (tunnel a) since the network segment was not previously transmitted to the BRAS-UP device. In addition, after the user equipment 112 is authenticated, the BRAS-CP device 141 determines the network segment, such as the network segment 10.1.1.0/24, to which the IP address of the user equipment 112 belongs, and the network segment 10.1.1.0/24 is no longer transmitted since the network segment 10.1.1.0/24 has been previously transmitted to the BRAS-UP device 131 through the tunnel a.

Upon receipt of the network segment 10.1.1.0/24, the BRAS-UP device 131 (i.e., the primary BRAS-UP device), since the BRAS-UP device 131 has a route publishing function, the BRAS-UP device 131 may publish a first route carrying the network segment 10.1.1.0/24, which is sent to the core router 151. After receiving the first route through interface a, the core router 151 records a correspondence between the network segment 10.1.1.0/24 carried by the first route and interface a in the local routing table. Thus, when core router 151 receives data (e.g., data sent by the Internet to user device 111) whose destination IP address matches network segment 10.1.1.0/24, the data is sent via interface a, i.e., the data is sent to BRAS-UP device 131 instead of BRAS-UP device 132, and BRAS-UP device 131, upon receiving the data, may send the data to user device 111 based on the session information.

Through the transmission flow, the method can realize that the Internet sends data to the user equipment through the main BRAS-UP equipment instead of the backup BRAS-UP equipment when the main BRAS-UP equipment does not have faults.

In one example, after the BRAS-CP device sends a network segment to the primary BRAS-UP device through the primary tunnel, if the primary BRAS-UP device fails, the BRAS-CP device may also send the network segment to the standby BRAS-UP device through the standby tunnel, so that the standby BRAS-UP device issues a second route carrying the network segment, where the second route is used to send data destined for the network segment to the standby BRAS-UP device.

For example, when the BRAS-UP device 131 fails, then the BRAS-CP device 141 may also send the network segment 10.1.1.0/24 to the BRAS-UP device 132 through a backup tunnel (tunnel B). Upon receipt of the network segment 10.1.1.0/24, the BRAS-UP device 132 (i.e., the backup BRAS-UP device) may issue a second route carrying the network segment 10.1.1.0/24, which is sent to the core router 151, since the BRAS-UP device 132 has a route issuing function. After receiving the second route through interface B, the core router 151 may record a corresponding relationship between the network segment 10.1.1.0/24 carried by the second route and interface B in the local routing table. Thus, when the core router 151 receives data whose destination IP address matches the network segment 10.1.1.0/24 (e.g., data sent to the user equipment 111 via the Internet), the data is sent via interface B, i.e., the data is sent to the BRAS-UP device 132 instead of the BRAS-UP device 131, and the BRAS-UP device 132, after receiving the data, may also send the data based on the session information, i.e., the data is sent to the user equipment 111.

Through the transmission flow, the method can realize that the Internet sends data to the user equipment through the backup BRAS-UP equipment instead of the primary BRAS-UP equipment when the primary BRAS-UP equipment fails.

In one example, to avoid two routes corresponding to the network segment 10.1.1.0/24 in the local routing table, the core router 151 may further delete the correspondence relationship between the network segment 10.1.1.0/24 and interface a from the local routing table after recording the correspondence relationship between the network segment 10.1.1.0/24 and interface B in the local routing table.

One way of deletion may be: when the core router 151 records the correspondence between the network segments 10.1.1.0/24 and the interface B in the local routing table, it queries whether there is another route corresponding to the network segment 10.1.1.0/24 in the local routing table, and since there is a correspondence between the network segments 10.1.1.0/24 and the interface a, the core router 151 directly deletes the correspondence between the network segments 10.1.1.0/24 and the interface a, which was recorded before, from the local routing table.

Another deleting method may be: when a link between the BRAS-UP device 131 and a switch on the user side fails, the BRAS-CP device 141 may also send a notification message (carrying a network segment 10.1.1.0/24) for withdrawing the first route to the BRAS-UP device 131 through the primary tunnel, so that the BRAS-UP device 131 issues the withdrawn route carrying the network segment 10.1.1.0/24 to the core router 151. After receiving the withdrawn route through interface a, core router 151 may remove the correspondence between network segment 10.1.1.0/24 and interface a from the local routing table.

In one example, the procedure for "the BRAS-CP device sending the network segment to the backup BRAS-UP device through the backup tunnel" may include, but is not limited to, the following: in the first mode, after sensing that the primary BRAS-UP equipment has a fault, the BRAS-CP equipment can send a network segment to the standby BRAS-UP equipment through the standby tunnel. In the second mode, after sensing that the main BRAS-UP equipment fails, the BRAS-CP equipment sends the information that the main BRAS-UP equipment fails to a management orchestrator; if the BRAS-CP device receives the master/slave switching message sent by the management orchestrator, the network segment can be sent to the backup BRAS-UP device through the backup tunnel. If the BRAS-CP equipment receives the master/slave switching message sent by the management orchestrator, the fault of the master BRAS-UP equipment can be determined, and the network segment is sent to the slave BRAS-UP equipment through the slave tunnel; the master/standby switching message is sent by the management orchestrator when sensing that the master BRAS-UP device is failed.

In the first mode, after sensing that the primary BRAS-UP equipment has a fault, the BRAS-CP equipment decides whether to carry out primary and secondary switching, and if so, the network segment is sent to the secondary BRAS-UP equipment through the secondary tunnel.

In the second mode, after sensing that the primary BRAS-UP device fails, the BRAS-CP device does not decide whether to perform primary/secondary switching, and the BRAS-CP device may send information that the primary BRAS-UP device fails to the management orchestrator decide whether to perform primary/secondary switching. If the management orchestrator decides to perform the master-slave switching, the master-slave switching message may be sent to the BRAS-CP device, and the BRAS-CP device may send the network segment to the backup BRAS-UP device through the backup tunnel after receiving the master-slave switching message. And if the management orchestrator decides not to perform the main/standby switching, the main/standby switching message is not sent to the BRAS-CP device, and the BRAS-CP device does not send the network segment to the backup BRAS-UP device through the backup tunnel.

And aiming at the third mode, the management orchestrator can decide whether to carry out the main/standby switching or not after sensing that the main BRAS-UP equipment has a fault. If the primary and standby switching is carried out, a primary and standby switching message is sent to the BRAS-CP equipment, and after receiving the primary and standby switching message, the BRAS-CP equipment can send the network segment to the standby BRAS-UP equipment through the standby tunnel. If the primary and standby switching is not carried out, the primary and standby switching information is not sent to the BRAS-CP equipment, and the BRAS-CP equipment cannot send the network segment to the standby BRAS-UP equipment through the standby tunnel.

In one example, the failure type of the primary BRAS-UP device may be: the primary BRAS-UP device itself fails or the link between the primary BRAS-UP device and the switch fails.

If the main BRAS-UP device per se fails, the mode of sensing that the main BRAS-UP device fails is as follows: aiming at the first mode and the second mode, the BRAS-CP equipment and the main BRAS-UP equipment can periodically interact heartbeat messages, and if the heartbeat messages are not received within preset time, the main BRAS-UP equipment can be sensed to have faults. And aiming at the third mode, the management orchestrator and the main BRAS-UP equipment can periodically interact with heartbeat messages, and if the heartbeat messages are not received within the preset time, the main BRAS-UP equipment can be sensed to have faults.

If the link between the main BRAS-UP device and the exchanger fails, the mode of sensing the failure of the main BRAS-UP device is as follows: aiming at the first mode and the second mode, the main BRAS-UP device sends the information that the link between the main BRAS-UP device and the switch is in failure to the BRAS-CP device. And aiming at the third mode, when the link between the main BRAS-UP device and the switch fails, the main BRAS-UP device sends the information that the link between the main BRAS-UP device and the switch fails to the management orchestrator. Or the management orchestrator regularly inquires the link state of the main BRAS-UP device, and the main BRAS-UP device sends the information that the link between the main BRAS-UP device and the switch fails to the management orchestrator after receiving the inquiry information of the management orchestrator.

In the above process, it has been described that the BRAS-UP device 132/BRAS-UP device 133 sets the interface connected to the switch 121 on the present device to the down state, based on which, when the BRAS-UP device 131 fails, the BRAS-CP device 141 or the management orchestrator 161 may also notify the BRAS-UP device 132 to restore the interface connected to the switch 121 on the present device to the UP (failed) state, so that the interface connected to the BRAS-UP device 132 on the switch 121 is in the UP state, and since the interface connected to the BRAS-UP device 131 on the switch 121 is in the down state (due to the failure of the BRAS-UP device 131), the switch 121 may transmit data to the BRAS-UP device 132.

In one example, in order to implement "when the primary BRAS-UP device fails, the user equipment sends data to the Internet through the primary BRAS-UP device, and when the primary BRAS-UP device fails, the user equipment sends data to the Internet through the backup BRAS-UP device", the BRAS diversion separation backup method may further include:

if the main BRAS-UP device does not have a fault, the main BRAS-UP device sends a gratuitous ARP (address resolution Protocol) message to the switch, wherein the gratuitous ARP message can carry the MAC address of the main BRAS-UP device, so that the switch updates the MAC table entry by using the MAC address of the main BRAS-UP device, and thus, the switch sends data (data sent by user equipment to the Internet) to the main BRAS-UP device by using the MAC table entry, and the main BRAS-UP device can send the data to the Internet by using the session information. If the main BRAS-UP device has a fault, the standby BRAS-UP device sends a free ARP message to the switch, the free ARP message can carry the MAC address of the standby BRAS-UP device, so that the switch updates the MAC table entry by using the MAC address of the standby BRAS-UP device, the switch sends data (the data sent to the Internet by the user equipment) to the standby BRAS-UP device by using the MAC table entry, and the standby BRAS-UP device can send the data to the Internet by using the session information.

In one example, if the primary BRAS-UP device does not fail, the BRAS-CP device or the management orchestrator may send a stop transmission message to the standby BRAS-UP device, where the stop transmission message is used to indicate that the standby BRAS-UP device is no longer sending gratuitous ARP packets to the switch, so that the switch does not update the MAC table entry with the MAC address of the standby BRAS-UP device. If the main BRAS-UP device fails, the BRAS-CP device or the management orchestrator can send a starting sending message to the standby BRAS-UP device, wherein the starting sending message is used for indicating the standby BRAS-UP device to send a gratuitous ARP message to the switch, and therefore the switch can update the MAC table entry by using the MAC address of the standby BRAS-UP device.

The BRAS-UP device can be used as a gateway of the user equipment, and in order to enable the traffic of the user equipment to be switched among different BRAS-UP devices, the MAC address of each BRAS-UP device can be the same, and the MAC address is used as a gateway MAC. Based on this, the MAC address of the primary BRAS-UP device is the same as the MAC address of the secondary BRAS-UP device, and the process of updating the MAC table entry by the switch using the MAC address of the primary BRAS-UP device/the secondary BRAS-UP device is to adjust the outgoing interface corresponding to the MAC address.

In summary, when the BRAS-UP device 131 does not fail, the switch 121, upon receiving the data sent by the user equipment 111 to the Internet, sends the data to the BRAS-UP device 131 based on the MAC entry, and after receiving the data, the BRAS-UP device 131 sends the data to the Internet based on the session information. In addition, when the BRAS-UP device 131 is failed, the switch 121 sends data to the BRAS-UP device 132 based on the MAC table entry when receiving the data sent to the Internet by the user equipment 111, and the BRAS-UP device 132 sends data to the Internet based on the session information after receiving the data.

After receiving the data (the data sent by the user equipment 111 to the Internet), the BRAS-UP device 131/BRAS-UP device 132 may query the routing table based on the destination IP address of the data, send the data to the core router 151 based on the routing table, and send the data to the Internet by the core router 151.

In order to implement the above process, the core router 151 may further send a route to the BRAS-UP device 131/BRAS-UP device 132, and in order to enable both the BRAS-UP device 131 and the BRAS-UP device 132 to forward data sent by the user equipment 111 to the Internet, the core router 151 may send the route to the BRAS-UP device 131 and the BRAS-UP device 132, so that when data needs to be switched between the BRAS-UP device 131 and the BRAS-UP device 132, each BRAS-UP device may forward the data based on a local routing table, thereby reducing convergence time of the switching, and being capable of normally transmitting the data.

In order to reduce the number of routes maintained by the BRAS-UP device 131/BRAS-UP device 132, when the core router 151 sends a route to the BRAS-UP device 131/BRAS-UP device 132, the core router 151 may send a converged route, a segment route, a static route, or the like to the BRAS-UP device 131/BRAS-UP device 132, so that the number of routes sent by the core router 151 may be reduced, and the number of routes maintained by the BRAS-UP device 131/BRAS-UP device 132 may be reduced.

Based on the same application concept as the method, an embodiment of the present application further provides a backup device for BRAS transfer separation, which is applied to BRAS-CP equipment, and is shown in fig. 3, where the backup device for BRAS transfer separation is a structural diagram of the backup device for BRAS transfer separation, and the backup device for BRAS transfer separation includes:

a determining module 301, configured to determine session information corresponding to a user equipment after the user equipment passes authentication, and determine a tunnel backup group corresponding to the user equipment, where the tunnel backup group includes a main tunnel between a BRAS-CP device and a main BRAS-UP device, and a backup tunnel between a BRAS-CP device and a backup BRAS-UP device;

a sending module 302, configured to send session information to a primary BRAS-UP device through a primary tunnel, so that the primary BRAS-UP device performs data transmission according to the session information; and sending the session information to the backup BRAS-UP device through the backup tunnel so as to enable the backup BRAS-UP device to carry out data transmission according to the session information.

The determining module 301 is further configured to determine a network segment to which the ue belongs;

the sending module 302 is further configured to send the network segment to a primary BRAS-UP device through the primary tunnel when the network segment is not sent, so that the primary BRAS-UP device issues a first route carrying the network segment, where the first route is used to send data destined for the network segment to the primary BRAS-UP device.

The sending module 302 is further configured to send the network segment to the standby BRAS-UP device through the standby tunnel after the network segment is sent to the primary BRAS-UP device through the primary tunnel, so that the standby BRAS-UP device issues a second route carrying the network segment, where the second route is used to send data destined for the network segment to the standby BRAS-UP device, if the primary BRAS-UP device fails.

The sending module 302 is specifically configured to send, in a process of sending the network segment to the standby BRAS-UP device through the standby tunnel, information that the primary BRAS-UP device fails to a management orchestrator after sensing that the primary BRAS-UP device fails; if receiving the master/slave switching message sent by the management orchestrator, sending the network segment to the backup BRAS-UP device through the backup tunnel; or if receiving a master/slave switching message sent by a management orchestrator, determining that the master BRAS-UP device fails, and sending the network segment to the slave BRAS-UP device through the slave tunnel; and the master/standby switching message is sent by the management orchestrator when sensing that the master BRAS-UP device fails.

The determining module 301 is specifically configured to determine a receiving tunnel of an address request packet in the process of determining the tunnel backup group corresponding to the user equipment; the receiving tunnel is a tunnel for receiving an address request message on BRAS-CP equipment, and the address request message is sent by user equipment through BRAS-UP equipment;

inquiring a tunnel backup group matched with the main tunnel and the receiving tunnel, and determining the inquired tunnel backup group as a tunnel backup group corresponding to the user equipment; wherein the primary tunnels of different tunnel backup groups are different.

In one example, the BRAS relocation separate backup device may further include (not shown in the figure): the establishing module is used for sequentially acquiring the tunnel between the BRAS-CP equipment and each BRAS-UP equipment; creating a tunnel backup group for the acquired tunnel, wherein in the created tunnel backup group, a main tunnel is the acquired tunnel, and a standby tunnel is other tunnels except the acquired tunnel; or,

receiving tunnel backup information sent by a management orchestrator, analyzing main tunnel information and standby tunnel information from the tunnel backup information, and creating a tunnel backup group by using the main tunnel information and the standby tunnel information.

The sending module 302 is further configured to send a stop sending message to the standby BRAS-UP device when the primary BRAS-UP device fails, where the stop sending message is used to instruct the standby BRAS-UP device to prohibit sending a gratuitous ARP packet to a switch on a user side; and when the main BRAS-UP equipment fails, sending a message for starting sending to the standby BRAS-UP equipment, wherein the message for starting sending is used for indicating the standby BRAS-UP equipment to send a gratuitous ARP message to a switch at a user side.

For the BRAS-CP device provided in the embodiment of the present application, in terms of a hardware level, a schematic diagram of a hardware architecture of the BRAS-CP device may refer to fig. 4. The method comprises the following steps: a machine-readable storage medium and a processor, wherein:

a machine-readable storage medium: the instruction code is stored.

A processor: and communicating with a machine readable storage medium, reading and executing the instruction codes stored in the machine readable storage medium, and realizing the BRAS transfer control separated backup operation disclosed by the above example of the application.

Here, a machine-readable storage medium may be any electronic, magnetic, optical, or other physical storage device that can contain or store information such as executable instructions, data, and so forth. For example, the machine-readable storage medium may be: a RAM (random access Memory), a volatile Memory, a non-volatile Memory, a flash Memory, a storage drive (e.g., a hard drive), a solid state drive, any type of storage disk (e.g., an optical disk, a dvd, etc.), or similar storage medium, or a combination thereof.

The embodiment of the present application further provides a machine-readable storage medium, where the machine-readable storage medium stores a plurality of computer instructions, and when the computer instructions are executed, the computer instructions perform the following processes:

The systems, devices, modules or units illustrated in the above embodiments may be implemented by a computer chip or an entity, or by a product with certain functions. A typical implementation device is a computer, which may take the form of a personal computer, laptop computer, cellular telephone, camera phone, smart phone, personal digital assistant, media player, navigation device, email messaging device, game console, tablet computer, wearable device, or a combination of any of these devices.

For convenience of description, the above devices are described as being divided into various units by function, and are described separately. Of course, the functionality of the units may be implemented in one or more software and/or hardware when implementing the present application.

As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

Furthermore, these computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

The above description is only an example of the present application and is not intended to limit the present application. Various modifications and changes may occur to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A backup method for BRAS transfer control separation of broadband remote access server is characterized in that the backup method is applied to BRAS-CP equipment, and the method comprises the following steps:

sending the session information to a main BRAS-UP device through the main tunnel so as to enable the main BRAS-UP device to carry out data transmission according to the session information;

and sending the session information to a backup BRAS-UP device through the backup tunnel so as to enable the backup BRAS-UP device to carry out data transmission according to the session information.

2. The method of claim 1, further comprising:

and if the network segment to which the user equipment belongs is not sent, the network segment is sent to a main BRAS-UP device through the main tunnel, so that the main BRAS-UP device issues a first route carrying the network segment, and the first route is used for sending data aiming at the network segment to the main BRAS-UP device.

3. The method of claim 2, wherein after sending the network segment to a primary BRAS-UP device over the primary tunnel, the method further comprises:

and if the main BRAS-UP equipment fails, the network segment is sent to the standby BRAS-UP equipment through the standby tunnel so that the standby BRAS-UP equipment can issue a second route carrying the network segment, and the second route is used for sending data aiming at the network segment to the standby BRAS-UP equipment.

4. The method of claim 3, wherein the sending the network segment to the standby BRAS-UP device through the standby tunnel specifically comprises:

after sensing that the main BRAS-UP equipment fails, sending the information that the main BRAS-UP equipment fails to a management orchestrator; if receiving the master/slave switching message sent by the management orchestrator, sending the network segment to the backup BRAS-UP device through the backup tunnel; or,

if receiving a master-slave switching message sent by a management orchestrator, determining that the master BRAS-UP device fails, and sending the network segment to the slave BRAS-UP device through the slave tunnel; and the master/standby switching message is sent by the management orchestrator when sensing that the master BRAS-UP device fails.

5. The method of claim 1,

the process of determining the tunnel backup group corresponding to the user equipment specifically includes:

determining a receiving tunnel of the address request message; the receiving tunnel is a tunnel for receiving an address request message on BRAS-CP equipment, and the address request message is sent by user equipment through BRAS-UP equipment;

6. The method of claim 1,

before determining the tunnel backup group corresponding to the user equipment, the method further includes:

sequentially acquiring a tunnel between the BRAS-CP equipment and each BRAS-UP equipment;

creating a tunnel backup group for the acquired tunnel, wherein in the created tunnel backup group, a main tunnel is the acquired tunnel, and a standby tunnel is other tunnels except the acquired tunnel; or,

7. The method of claim 1, further comprising:

if the main BRAS-UP equipment does not have a fault, sending a message of stopping sending to the standby BRAS-UP equipment, wherein the message of stopping sending is used for indicating the standby BRAS-UP equipment to forbid sending a free ARP message to a switch at a user side; and if the main BRAS-UP equipment fails, sending a message for starting sending to the standby BRAS-UP equipment, wherein the message for starting sending is used for indicating the standby BRAS-UP equipment to send a gratuitous ARP message to a switch at a user side.

8. A backup device for BRAS transfer control separation of broadband remote access server is characterized in that the backup device is applied to BRAS-CP equipment, and the device comprises:

9. The apparatus of claim 8,

the determining module is further configured to determine a network segment to which the user equipment belongs;

the sending module is further configured to send the network segment to a primary BRAS-UP device through the primary tunnel when the network segment is not sent, so that the primary BRAS-UP device issues a first route carrying the network segment, where the first route is used to send data destined for the network segment to the primary BRAS-UP device.

10. The apparatus of claim 9,

the sending module is further configured to send the network segment to the standby BRAS-UP device through the standby tunnel after the network segment is sent to the primary BRAS-UP device through the primary tunnel, so that the standby BRAS-UP device issues a second route carrying the network segment, where the second route is used to send data destined for the network segment to the standby BRAS-UP device, if the primary BRAS-UP device fails.

11. The apparatus of claim 10,

the sending module is specifically configured to send information that the primary BRAS-UP device fails to a management orchestrator after sensing that the primary BRAS-UP device fails in a process of sending the network segment to the secondary BRAS-UP device through the secondary tunnel; if receiving the master/slave switching message sent by the management orchestrator, sending the network segment to the backup BRAS-UP device through the backup tunnel; or if receiving a master/slave switching message sent by a management orchestrator, determining that the master BRAS-UP device fails, and sending the network segment to the slave BRAS-UP device through the slave tunnel; and the master/standby switching message is sent by the management orchestrator when sensing that the master BRAS-UP device fails.

12. The apparatus of claim 8,

the determining module is specifically configured to determine a receiving tunnel of the address request packet in the process of determining the tunnel backup group corresponding to the user equipment; the receiving tunnel is a tunnel for receiving an address request message on BRAS-CP equipment, and the address request message is sent by user equipment through BRAS-UP equipment;

13. The apparatus of claim 8, further comprising:

the establishing module is used for sequentially acquiring the tunnel between the BRAS-CP equipment and each BRAS-UP equipment; creating a tunnel backup group for the acquired tunnel, wherein in the created tunnel backup group, a main tunnel is the acquired tunnel, and a standby tunnel is other tunnels except the acquired tunnel; or,

14. The apparatus of claim 8,

the sending module is further configured to send a stop sending message to the standby BRAS-UP device when the primary BRAS-UP device fails, where the stop sending message is used to instruct the standby BRAS-UP device to prohibit sending a gratuitous ARP packet to a switch on a user side; and when the main BRAS-UP equipment fails, sending a message for starting sending to the standby BRAS-UP equipment, wherein the message for starting sending is used for indicating the standby BRAS-UP equipment to send a gratuitous ARP message to a switch at a user side.

15. A machine-readable storage medium for use in a BRAS-CP device, the machine-readable storage medium having stored thereon computer instructions that, when executed, perform: