CN109151916A

CN109151916A - The network transfer method of mobile network's business, device and system

Info

Publication number: CN109151916A
Application number: CN201810986425.2A
Authority: CN
Inventors: 熊志伟; 陈晓晨; 周明宇
Original assignee: Baicells Technologies Co Ltd
Current assignee: Baicells Technologies Co Ltd
Priority date: 2018-08-28
Filing date: 2018-08-28
Publication date: 2019-01-04
Anticipated expiration: 2038-08-28
Also published as: CN109151916B

Abstract

The embodiment of the present invention provides a kind of network transfer method of mobile network's business, device and system, this method comprises: customer terminal equipment obtains the service configuration information of multiple virtual LAN, wherein, service configuration information includes at least: the QoS parameter of mobile network's business of multiple virtual LAN；Service configuration information of the customer terminal equipment based on multiple virtual LAN establishes multiple carryings with core network, wherein the QoS parameter of mobile network's business of each virtual LAN is used to determine the service quality of a carrying；Customer terminal equipment is based on multiple carryings, and multiple tunnels are established between customer terminal equipment and tunnel server；Customer terminal equipment transmits the message of multiple virtual LAN by the corresponding multiple tunnels of multiple carryings.The present invention realizes mobile network's business for different service quality demand, carries out the technical effect of differentiation transmission control.

Description

Network transmission method, device and system of mobile network service

Technical Field

The present invention relates to the field of communications, and in particular, to a network transmission method, apparatus, and system for a mobile network service.

Background

A large enterprise and a medium enterprise usually have a plurality of cross-regional office centers, and these cross-regional office centers generally need to be able to access each other like a local area network, that is, there is a cross-regional large two-tier networking requirement.

In order to implement large two-layer networking, a network element is usually added at a network exit of each office center, a tunnel is established between the network element and network element devices at network exits of other office centers, and two-layer messages (i.e., data frames of a data link layer) in an enterprise are transmitted on the tunnel. For example, when an enterprise uses LTE mobile technology for networking, the network element device may be a Customer Premise Equipment (CPE). Fig. 1 shows a conventional implementation method of L2 service (i.e. data link layer service), as shown in fig. 1, there is usually a centralized tunnel Server (L2TP Network Server, LNS), one end of the LNS is connected to the local area Network of the enterprise headquarters, and the other end is connected to the CPEs of the respective office centers of the enterprise.

An IP tunnel is established between the CPE and the LNS of each office center, when the PC1 under the enterprise branch 1 needs to communicate with the PC5 under the enterprise branch 2, the packet needs to pass through the CPE in the enterprise branch 1 first, and is encapsulated by the CPE into a tunnel packet to be transmitted to the LNS, the LNS decapsulates the tunnel packet and forwards the tunnel packet to the Intranet (i.e., Intranet) of the headquarters, and after the Intranet exchange finds that the packet needs to be forwarded to the PC5 of the enterprise branch 2, the packet is sent to the LNS, the LNS tunnel-encapsulates the packet, the opposite tunnel end is the CPE of the enterprise branch 2, and the CPE of the enterprise branch 2 receives the tunnel packet and decapsulates the tunnel packet and sends the tunnel packet to the corresponding PC 5.

As can be seen from fig. 1, since there is only one tunnel between each CPE and the LNS, all the end devices under each CPE share one tunnel, and the Quality of Service (QoS) guarantees of the network, such as the bandwidth of all the end devices under each CPE (e.g., the PC1, the PC2, and the PC3 under the CPE1 in fig. 1), are consistent. In an enterprise branch, there are usually multiple departments, and the networks between the departments are not allowed to access each other, and the QoS requirements of the departments on the networks may be inconsistent, for example, a production department may need a network with bandwidth guarantee, and an enterprise human resource department only needs a server capable of accessing the headquarters, and does not need higher bandwidth. Obviously, the existing tunnel transmission mode cannot meet the requirement.

Disclosure of Invention

In view of this, embodiments of the present invention provide a network transmission method, an apparatus, and a system for mobile network services, so as to construct bearers and tunnels with different service qualities for transmission for different mobile network services, save bandwidth, and improve network service experience.

In a first aspect, an embodiment of the present invention provides a network transmission method for a mobile network service, including:

the method comprises the steps that client terminal equipment obtains service configuration information of a plurality of virtual local area networks, wherein the service configuration information at least comprises the following steps: service quality parameters of mobile network services of a plurality of virtual local area networks;

the method comprises the steps that a client terminal device establishes a plurality of bearers with a core network based on service configuration information of a plurality of virtual local area networks, wherein a service quality parameter of mobile network service of each virtual local area network is used for determining the service quality of one bearer;

the client terminal equipment establishes a plurality of tunnels between the client terminal equipment and the tunnel server based on a plurality of bearers;

the client terminal equipment transmits the messages of the virtual local area networks through a plurality of tunnels corresponding to a plurality of bearers. In a second aspect, an embodiment of the present invention provides a network transmission system for a mobile network service, including:

the client terminal device is used for acquiring service configuration information of a plurality of virtual local area networks, establishing a plurality of bearers with a core network based on the service configuration information of the plurality of virtual local area networks, and transmitting messages of the plurality of virtual local area networks through a plurality of tunnels corresponding to the plurality of bearers, wherein the service configuration information at least comprises: service quality parameters of mobile network services of a plurality of virtual local area networks; the service quality parameter of the mobile network service of each virtual local area network is used for determining the service quality of one bearer;

a tunnel server in communication with the client terminal device for constructing a plurality of tunnels corresponding to the plurality of bearers.

In a second aspect, an embodiment of the present invention provides a network transmission apparatus for a mobile network service, including:

a service configuration information obtaining module, configured to obtain service configuration information of multiple virtual local area networks, where the service configuration information at least includes: service quality parameters of mobile network services of a plurality of virtual local area networks;

a bearer establishing module, configured to establish multiple bearers between a client terminal device and a core network based on service configuration information of multiple virtual local area networks, where a service quality parameter of a mobile network service of each virtual local area network is used to determine a service quality of one bearer;

a tunnel establishing module, configured to establish a plurality of tunnels between the client terminal device and the tunnel server based on the plurality of bearers;

and the message transmission module is used for transmitting the messages of the virtual local area networks through a plurality of tunnels corresponding to the plurality of bearers.

In a third aspect, an embodiment of the present invention provides an electronic device, including a processor and a memory, where the memory is configured to store one or more computer instructions, where the one or more computer instructions, when executed by the processor, implement the network transmission method for mobile network services in the first aspect. The electronic device may also include a communication interface for communicating with other devices or a communication network.

An embodiment of the present invention provides a computer storage medium, configured to store a computer program, where the computer program enables a computer to implement the network transmission method of the mobile network service in the first aspect when executed.

The network transmission method of the mobile network service provided by the embodiment of the invention triggers and establishes a plurality of loads with different service qualities according to different Layer2 (L2) services divided by the VLAN, and establishes a plurality of tunnels with different QoS between the CPE and the LNS based on the loads, so that the services with different QoS requirements are transmitted on the tunnels with different QoS, and the services of different VLAN users are allowed to have different QoS. The transmission method of the mobile network service provided by the invention does not need manual participation in the process of establishing and deleting the specific tunnel except the initial service configuration definition, and realizes the automatic establishment and removal of the tunnel.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.

Fig. 1 is a schematic diagram of a conventional L2 service implementation principle;

fig. 2 is a schematic diagram of a network transmission system for mobile network services according to an embodiment of the present invention;

fig. 3 is a flowchart of a network transmission method of a mobile network service according to an embodiment of the present invention;

fig. 4 is a schematic diagram of network transmission system interaction of a mobile network service according to an embodiment of the present invention;

fig. 5 is a schematic diagram of a protocol stack according to an embodiment of the present invention;

fig. 6 is a schematic diagram of a process for notifying an LNS of tunnel establishment by using multiple APNs and EPCs according to the present invention;

fig. 7 is a schematic diagram of a process of auto-negotiation between multiple APNs, UE and LNS tunnels according to the present invention;

fig. 8 is a schematic diagram of a process of auto-negotiation between multiple APNs, UE and LNS tunnels according to the present invention;

fig. 9 is a schematic diagram of a tunnel modification and deletion scheme in case of multiple APNs according to the present invention;

fig. 10 is a schematic diagram of a multi-APN, UE and LNS tunnel auto-negotiation process provided in the present invention;

fig. 11 is a schematic structural diagram of a network transmission apparatus for mobile network services according to an embodiment of the present invention;

fig. 12 is a schematic structural diagram of an electronic device corresponding to the network transmission apparatus for mobile network services provided in the embodiment shown in fig. 11.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

The terminology used in the embodiments of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in the examples of the present invention and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, and "a" and "an" generally include at least two, but do not exclude at least one, unless the context clearly dictates otherwise.

It should be understood that the term "and/or" as used herein is merely one type of association that describes an associated object, meaning that three relationships may exist, e.g., a and/or B may mean: a exists alone, A and B exist simultaneously, and B exists alone. In addition, the character "/" herein generally indicates that the former and latter related objects are in an "or" relationship.

The words "if", as used herein, may be interpreted as "at … …" or "at … …" or "in response to a determination" or "in response to a detection", depending on the context. Similarly, the phrases "if determined" or "if detected (a stated condition or event)" may be interpreted as "when determined" or "in response to a determination" or "when detected (a stated condition or event)" or "in response to a detection (a stated condition or event)", depending on the context.

It is also noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a good or system that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such good or system. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a commodity or system that includes the element.

In addition, the sequence of steps in each method embodiment described below is only an example and is not strictly limited.

Before describing the network transmission method of the mobile network service provided in the embodiment of the present invention, some concepts related in the subsequent embodiments and the basic principle of network transmission of the mobile network service will be described.

Tunneling is a way of transmitting data between networks by using the infrastructure of the internet. The data tunnelled may be data frames or data packets of different protocols. To create a tunnel, the same tunneling protocol must be used between the client (i.e., CPE) and the server (i.e., LNS) of the tunnel. Tunneling may be based on layer2 or layer 3 tunneling protocols, respectively. The layer2 tunneling protocol corresponds to the data link layer of the OSI model, using frames as data exchange units. The layer 3 tunneling protocol corresponds to a network layer of the OSI model, and uses packets as data exchange units.

Virtual Local Area Network (Virtual Local Area Network) is a communication technology that logically divides a physical Local Area Network LAN into a plurality of broadcast domains, in a computer Network, a two-layer Network can be divided into a plurality of different broadcast domains, one broadcast domain corresponds to a specific user group, and different broadcast domains are isolated from each other under default conditions, and communication among different broadcast domains needs to be realized through one or more routers, so that one broadcast domain is called as a Virtual Local Area Network, direct communication among hosts in the Virtual Local Area Network can be realized, and communication among Virtual Local Area networks needs to be realized through routers or three-layer switches.

As can be seen from fig. 1, in the prior art, only one IPinIP tunnel is provided between the CPE and the LNS, and all the PC services that are hung down are transmitted over the tunnel, so that different QoS cannot be executed for different PCs under the same CPE; in addition, the LNS needs to configure an IPinIP tunnel for each CPE in advance, which results in a large configuration workload and may cause a certain performance waste.

In order to meet the QoS requirements of different user PCs on the network under each CPE, the present application establishes multiple bearers with different QoS between the CPE and a Core network (EPC) by triggering, and establishes multiple tunnels to the LNS based on the bearers, so that two-layer messages of different VLANs are transmitted over the tunnels with different QoS, thereby achieving the purpose of allowing L2 services of different VLAN users to enjoy different QoS. The QoS control method of the mobile network service provided by the invention does not need manual participation in the process of establishing and deleting the specific tunnel except the initial service configuration definition, thereby realizing the effect of automatically completing the tunnel dismantling and establishment.

Fig. 2 is a schematic diagram of a network transmission system for mobile network services according to an embodiment of the present invention, and as shown in fig. 2, the system may include: customer premises equipment CPE and a tunnel server LNS. The Customer Premises Equipment (CPE) is used for acquiring service configuration information of a plurality of Virtual Local Area Networks (VLANs), establishing a plurality of bearers with a core network (EPC) based on the service configuration information of the plurality of VLANs, and transmitting messages of the plurality of VLANs through a plurality of tunnels corresponding to the plurality of bearers, wherein the service configuration information at least comprises: service quality parameters of mobile network services of a plurality of virtual local area networks; the service quality parameter of the mobile network service of each virtual local area network is used for determining the service quality of one bearer; a tunnel server LNS in communication with the customer premises equipment CPE for constructing a plurality of tunnels corresponding to the plurality of bearers.

Specifically, the customer premises equipment CPE may be a customer for establishing tunnels for a plurality of virtual local area networks VLAN, and the plurality of virtual local area networks VLAN may be divided according to service logic, may be a plurality of virtual local area networks on the same switch, and may also be a plurality of virtual local area networks on different switches. Because the virtual local area networks are divided according to different services, the requirements of different virtual local area networks on the quality of service (QoS) of the network are different, and the method can allow the L2 services of different VLAN users to enjoy different QoS by establishing a plurality of bearers and further constructing a plurality of tunnels with different QoS.

Optionally, the system may further include: and the network capacity disclosing platform is communicated with the client terminal equipment and is used for issuing service configuration information to the client terminal equipment under the condition that the client terminal equipment is connected to the network capacity disclosing platform.

In the application scenario, the present invention provides an embodiment of a network transmission method for a mobile network service, which can be applied to, but is not limited to, the system shown in fig. 2. Fig. 3 is a flowchart of a network transmission method for a mobile network service according to an embodiment of the present invention, and as shown in fig. 3, the method includes the following steps:

step S301, the client terminal device obtains service configuration information of a plurality of virtual local area networks, where the service configuration information at least includes: quality of service parameters of mobile network traffic of a plurality of virtual local area networks.

Specifically, the service configuration information further includes: the identification information of the virtual local area networks, the identification information of the client terminal equipment connected with the virtual local area networks, and the tunnel identification of at least one tunnel established between the client terminal equipment and the tunnel server.

As an optional implementation manner, when the client terminal device obtains the service configuration information of the multiple virtual local area networks, the Network Capability disclosure Platform (NCEP) may issue the service configuration information to the client terminal device when the client terminal device is connected to the Network Capability disclosure Platform.

Before the network capability disclosure platform issues the service configuration information to the client terminal device, the method may further include: the tunnel server determines service configuration information; the tunnel server sends a service registration request to the network capability disclosure platform, wherein the service registration request includes service configuration information and a service implementation mode, and the service implementation mode includes at least one of the following: establishing a first service implementation mode of a plurality of default bearers of a plurality of access points and establishing a second service implementation mode of a plurality of special bearers of a single access point; the network capacity disclosing platform issues corresponding configuration information to the core network, wherein the information issued by the network capacity disclosing platform to the core network comprises: the identification information of the client terminal equipment, the tunnel identification of at least one tunnel established between the client terminal equipment and the tunnel server, and the network service quality corresponding to each tunnel.

It should be noted that, in the case that the service implementation manner is the first service implementation manner, the tunnel identifier is a network address of the multiple access points; the network address of the multi-access point is allocated by the core network; in the case that the service implementation manner is the second service implementation manner, the tunnel identifier is any one of the following: the network address of the tunnel server, the network address of the tunnel server + port number.

Step S302, the client terminal device establishes a plurality of bearers with the core network based on the service configuration information of the plurality of virtual local area networks, wherein the service quality parameter of the mobile network service of each virtual local area network is used to determine the service quality of one bearer.

Specifically, the bearers may be default bearers of multiple access points, or dedicated bearers of a single access point.

Step S303, the client terminal device establishes a plurality of tunnels between the client terminal device and the tunnel server based on the plurality of bearers.

Specifically, the tunnels have different service qualities to transmit messages of different virtual local area networks. Wherein the tunnel server further needs to acquire a network address (e.g., an IP address) of the client terminal device before the client terminal device establishes a plurality of tunnels between the client terminal device and the tunnel server based on the plurality of bearers. It is easy to note that the way in which the tunnel server obtains the network address of the client terminal device includes, but is not limited to, the following three ways:

firstly, a core network sends a first message to a network capacity disclosure platform, and the network capacity disclosure platform sends a second message to a tunnel server, wherein the first message carries a network address of a client terminal device; the second message at least carries the identification of the client terminal device and the network address of the client terminal device. Wherein, under the condition that the plurality of bearers are a plurality of default bearers of the multi-access point, the second message carries the identification of the client terminal equipment, the network address of the client terminal equipment and the name of the access point; and under the condition that the plurality of bearers are a plurality of special bearers of a single access point, the second message carries the identification of the client terminal equipment and the network address of the client terminal equipment.

And secondly, the client terminal equipment sends a third message to the tunnel server, wherein the third message is used for performing tunnel negotiation between the client terminal equipment and the tunnel server, and the third message carries the identifier of the client terminal equipment, the network address of the client terminal equipment and the tunnel identifier of at least one tunnel established between the client terminal equipment and the tunnel server.

Thirdly, under the condition that the client terminal equipment receives the message of any one virtual local area network in the plurality of virtual local area networks, the bearing and the tunnel identification corresponding to the message are determined based on the service configuration information; according to the bearing of the message and the tunnel mark, tunnel encapsulation is carried out on the message to obtain a corresponding tunnel message; then sending the tunnel message to a corresponding tunnel server; and finally, the tunnel server authenticates the legality of the network address of the client device corresponding to the tunnel message, and decapsulates the tunnel message and forwards the tunnel message to the destination under the condition of legal authentication.

Specifically, the process of the tunnel server authenticating the validity of the network address of the client device corresponding to the tunnel packet is as follows: the tunnel server sends an authentication request to the network capability disclosure platform, wherein the authentication request comprises a network address of the client terminal equipment; the network capability disclosure platform forwards the authentication request to a core network; the core network inquires whether a corresponding client terminal equipment identifier exists according to the network address of the client terminal equipment contained in the authentication request, and returns the inquired client terminal equipment identifier to the tunnel server through the network capability open platform as an authentication result; and the tunnel server inquires a corresponding virtual network list according to the identification information of the client terminal equipment, decapsulates the tunnel message based on the virtual network list and forwards the tunnel message to a destination.

Step S304, the client terminal device transmits the messages of a plurality of virtual local area networks through a plurality of tunnels corresponding to a plurality of bearers.

Specifically, the multiple tunnels corresponding to the multiple bearers have different QoS, and the QoS control of different L2(Layer2) services divided according to the VLAN can be realized by transmitting the messages of the multiple virtual local area networks through the tunnels having different QoS.

In order to realize the automatic tunnel dismantling, when the QoS or the VLAN of the tunnel changes, the QoS modification and the VLAN modification may be respectively realized in the following two ways.

The VLAN modification execution process comprises the following steps: the tunnel server sends a first modification request to the network capacity disclosure platform, wherein the first modification request is used for requesting to modify the virtual local area network corresponding to each tunnel; the network capability disclosure platform modifies the virtual local area network list and informs the client terminal device of the modification result. After the network capability disclosure platform modifies the virtual local area network list and notifies the client terminal device of the modification result, the execution flow may further include: under the condition that the client terminal equipment or the core network initiates a bearing deactivation request, the core network sends a fourth message to the network capability disclosure platform, wherein the fourth message carries the identification of the client terminal equipment and the identification of the deactivated access point name; the network capacity disclosure platform obtains a deactivated virtual local area network list according to the fourth message and sends a fifth message to the tunnel server, wherein the fifth message carries the identification of the client terminal equipment and the identification of the deactivated virtual local area network; and the tunnel server deletes the deactivated virtual local area network corresponding to the client terminal equipment according to the fifth message.

The execution flow of QoS modification comprises the following steps: the tunnel server sends a second modification request to the network capability disclosure platform, wherein the second modification request is used for requesting to modify the service quality of the tunnel; the network capability disclosure platform informs the core network to modify the service quality of the corresponding bearer.

For a better understanding of the present invention, reference is made to the following detailed description. Fig. 4 is a schematic diagram of interaction of a network transmission system of a mobile network service according to an embodiment of the present invention, and as shown in fig. 4, the general scheme of the present invention includes the following steps:

step S401, service configuration. The customer (typically enterprise IT personnel) makes some basic configuration on the LNS, including < CPEID, VLAN list, LNS Tunnel ID, QoS > list, where LNS Tunnel ID may be an LNS IP or an LNS IP + Port No. The CPE ID is used to uniquely identify a CPE and may be the IMSI, or IMEI, in the mobile network.

Step S402, service registration. The LNS initiates L2 service registration to the NCEP (network Capability Exposure platform), the registration information carries < CPE ID, VLAN list, tunnel identification, QoS > list and a mode for realizing L2 service, wherein the mode for realizing L2 service comprises establishing multi-APN connection or establishing a plurality of special loads; if the establishment of a plurality of APN connections is indicated, the tunnel identifier is an APN name, if the establishment of a plurality of dedicated bearers is indicated, the tunnel identifier is a Packet Filter (hereinafter abbreviated as PF) capable of identifying the tunnel, and if the tunnel identifier is a Packet Filter, the Packet Filter may be an LNS IP list or a < LNS IP, LNS Port > list.

Note: the tunnel is a tunnel for encapsulating an L2(layer2) message, and may be a GRE tunnel or a VxLAN tunnel. The tunnel is located between the CPE and the LNS.

Step S403, configure request/issue. The NCEP issues related configuration information to the EPC, including < CPE ID, tunnel identifier, QoS >, where the tunnel identifier is as defined in S402, APN list, or PF list.

Note that this step is performed only once at system initialization, and the configuration information of the relevant CPE device is then issued again if there is a modification.

Step S404, the CPE activates network access. Registering to access the mobile network.

Step S405, configure the request/instruction. After the CPE accesses the network, the CPE may connect to the NCEP, and the NCEP transmits L2 service configuration information of the CPE to the CPE, where the L2 service configuration information includes < VLAN list, tunnel identifier, and LNS IP (LNSIP + Port) >. The tunnel identifier is the APN or PacketFilter defined in S402. If multiple bearers are established by using multiple APNs, the third parameter is the IP of the LNS; if the exclusive loading mode is used, the third parameter can also carry a port used by the service provided by the LNS besides the LNS IP.

It is easy to note that, in steps S405 and S404, the system is only executed once at the time of initialization, and the refresh is performed at the time of subsequent modification.

Step S406, multi-bearer establishment. Multiple bearers are established between the CPE and the EPC. The multiple bearers may be multiple default bearers established by multiple APNs, or multiple dedicated bearers of a single APN, and respectively correspond to the multiple APN scheme and the multiple dedicated bearer scheme. If the scheme is a multi-APN scheme, the establishment is generally initiated by the CPE, and if the scheme is a multi-dedicated scheme, the establishment can be initiated by both the CPE and the EPC. In the multi-APN scheme, each APN of the CPE is allocated with an IP by the EPC, and the identification of the subsequently established tunnel can be directly distinguished by using the APN; in the multi-load scheme, the CPE only has one IP, and subsequently established tunnels are distinguished by a PacketFilter, and at this time, an opposite end (LNS) identifier of the tunnel uses a different LNS IP or uses the same LNS IP + Port.

QoS of each bearer established between the CPE and the EPC is obtained by the third step, and subsequent messages are transmitted on the bearers and are controlled based on different QoS strategies.

Step S407, configure response/confirmation. This step is an optional step, and the EPC optionally informs the NCEP of the IP address of the registered CPE after the multi-bearer establishment.

Step S408, service response. This step is optional and if step S407 returns the IP of the CPE, step S408 informs the LNS of the IP. If the scheme is a multi-APN scheme, the carried information is < CPE ID, APN and CPE IP >, and if the scheme is a special loading scheme, the carried information is (CPE ID and CPE IP).

The following a and B steps are alternatively selected if step S407 and step S408 are not performed. The LNS may have two modes a and B to acquire the IP of the CPE.

Mode A: before transmitting the message, the CPE sends a message to the LNS for tunnel negotiation. The negotiation message carries < CPEID, tunnel identification, CPE IP >. The tunnel identifier may be an APN or a PF.

Mode B: when the VLAN message reaches the CPE, the CPE obtains a corresponding bearer according to the VLAN-tunnel identification information obtained in step S405, and further obtains a corresponding tunnel identification, and the CPE performs tunnel encapsulation on the VLAN message through step B0 and then sends the VLAN message to the LNS through the EPC. After receiving the message, the LNS does not know whether the source address of the message is a legal CPE or not, requests authentication to the NCEP through step B1, where the authentication request carries a CPE IP and the NCEP does not have CPE address information, then forwards the message to the EPC through step B2 for authentication, returns an authentication result through steps B3 and B4, and after the authentication is passed, the LNS performs tunnel decapsulation and forwards the message to an enterprise internal L2 network, or forwards the message to a communication opposite terminal.

Similarly, after the downlink message reaches the LNS, the LNS obtains the corresponding APN or PF according to the VLAN information of the received message, if a multiple APN scheme is used, the CPE IP is when the tunnel opposite end of the downlink message encapsulated by the LNS is the APN, and if a multiple dedicated bearer scheme is used, the tunnel source end of the downlink message encapsulated by the LNS is the LNS IP + port number corresponding to the PF.

Steps S401 to S406 in the above flow are processing required to implement QoS control of the L2 traffic, and steps S407 to S408 and modes a and B are processing required to implement tunnel self-configuration and are also required to enhance security.

Note: VLAN is a method for isolating the L2 network, and the above-described VLAN packet is also a type of packet that does not carry VLAN, because the packet that does not carry VLAN can be isolated from the packets of other VLANs, and different QoS controls can be performed as well.

It is easy to note that the specific protocol stack is shown in fig. 5 below.

As an optional implementation manner, fig. 6 is a schematic diagram of a process for notifying an LNS of tunnel establishment by a multi-APN and an EPC, provided by the present invention, as shown in fig. 6, including the following steps:

step S601, service configuration. The synchronization step S401 is not described herein.

Step S602, service registration. Registration information < CPE ID, VLAN, QoS >.

Step S603, APN signing request < CPE ID, APN, QoS >. The NCEP also indicates the EPC when sending a subscription request to the EPC, and notifies the NCEP if the APN for L2 issued by the UE is activated.

Step S604, the CPE activates network entry. The synchronization step S404 is not described here.

Step S605, configuration issue. The issued configuration information includes VLAN, APN and LNS IP.

Step S606, multiple APN activation and multiple bearer establishment. The synchronization step S406 is not described herein.

Step S607, the CPE and the APN activate the notice. After activating multiple APNs to establish multiple bearers, the EPC will notify the NCEP that one or several APNs for L2 service of the UE are activated, and the message carries < CPE ID, APN, CPE IP >.

Step S608, the CPE tunnel establishes notification. The NCEP converts the APN into the corresponding VLAN list, and informs the LNS that the L2 tunnel of the CPE is established, and the informing message carries < CPE ID, CPE IP, VLAN >. The LNS records these information, and performs tunnel encapsulation after the downstream VLAN packet belonging to this VLAN list arrives, and the tunnel peer IP is this CPE IP.

As an optional implementation manner, fig. 7 is a schematic diagram of a tunnel auto-negotiation process between a multi-APN, a UE and an LNS, which is provided in the present invention, and as shown in fig. 7, the tunnel auto-negotiation process includes the following steps:

step S701, service configuration. The synchronization step S401 is not described herein.

Step S702, service registration. The registration information carries < CPE ID, VLAN, QoS > and indicates that the multiple APN approach is used.

Step S703, APN signing request < CPE ID, APN, QoS >.

Step S704, the CPE activates network entry.

Step S705, configuration is issued. The issued configuration information includes VLAN, APN and LNS IP.

Step S706, activating multiple APNs and establishing multiple bearers. The synchronization step S407 is not described herein.

Step S707, tunnel negotiation. The CPE IP used by all the tunnel information and the VLAN list supported by each tunnel are carried in one message, and the CPE is identified by a CPE ID. After receiving the IP, the LNS obtains the IP of the CPE according to the ID of the CPE and a VLAN list transmitted when the IP is used, records that tunnel encapsulation is carried out when a message carrying the VLAN list in the downlink arrives, and the IP of the opposite end of the tunnel is the CPE IP.

In specific implementation, the EPC, the NCEP and the LNS can be deployed together, or the EPC and the LNS can be deployed together, and the NCEP is independent.

In the above scheme, a self-defined private message is provided between two ends of the tunnel (CPE and LNS), and the tunnel is established by performing tunnel authentication and negotiation.

As another optional implementation, the LNS is triggered after receiving the L2 message, and establishes the tunnel after performing authentication. Fig. 8 is a schematic diagram of a tunnel auto-negotiation process between a multi-APN, a UE and an LNS, as shown in fig. 8, including the following steps:

step S801, service configuration. The synchronization step S401 is not described herein.

Step S802, service registration. The registration information carries < CPE ID, VLAN, QoS >.

Step S803, APN signing request < CPE ID, APN, QoS >.

Step S804, the CPE activates network entry.

Step S805, configuration issuing. The issued configuration information includes VLAN, APN and LNS IP.

Step S806, multiple APN activation and multiple bearer establishment. The synchronization step S408 is not described herein.

Step S807, VLAN packet. After receiving the uplink message carrying the VLAN sent by the PC, the CPE determines a tunnel for transmitting the message according to the VLAN, and sends the message to the LNS through the EPC after encapsulating a tunnel header. After receiving the message, the LNS analyzes and obtains the IP of the tunnel opposite end and the VLAN in the message, and if the IP is not legal, the LNS initiates a CPE authentication request message to the NCEP, wherein the message carries the CPE IP.

Step S808, the CPE authenticates < CPE IP >. After the NCEP receives the CPE authentication request, the NCEP does not know whether the CPE IP is a legal CPE IP or not, and then the NCEP continues to transfer to the EPC for authentication.

Step S809, the CPE authenticates < CPE IP >. The EPC queries the CPE ID of the activated subscriber according to the requested CPE IP.

In step S810, the CPE authentication result < CPE ID >. The resulting CPE ID is sent as a result to the LNS via the NCEP.

In step S811, the CPE authentication result < CPE ID >. And the LNS queries the configuration of the message according to the CPE ID and the VLAN of the message after receiving the CPE authentication result, obtains a VLAN list to which the VLAN of the CPE ID belongs, records that when a subsequent VLAN message which belongs to the VLAN list in a downlink way arrives, the tunnel encapsulation is carried out by taking the CPE IP as a tunnel opposite end IP.

In an optional embodiment, fig. 9 is a schematic diagram of a tunnel modification and deletion scheme in case of multiple APNs, where the tunnel modification mainly includes two types of information: QoS modification and VLAN modification, and the flow of executing the QoS modification is different from the modification flow of the VLAN. The former modification flow is steps S901 to S904, and the VLAN modification flow is steps S901 to S902 and S905. As shown in fig. 9, the method comprises the following steps:

step S901, service configuration. The synchronization step S401 is not described herein.

Step S902, service modifies CPE ID, VLAN, QoS >. After receiving the service modification request of L2, if the modified service is QoS, the NCEP executes step S903 to notify the EPC to modify the QoS that a certain APN corresponds to and bears; if the modification is VLAN, i.e. adding or deleting VLAN from the list, step S905 is executed to notify the CPE of the new VLAN list transmitted under this APN.

It is readily noted that the flows shown in fig. 6, 7 and 8 are to be added if one or more L2 tunnels are to be added. If one or more tunnels are to be deleted, the EPC then initiates the CPE to deactivate bearers, as in S901 to S903, i.e., S906.

Step S903, APN configuration modifies CPE ID, APN and QoS.

Step S904, CPE carries the modification.

Step S905, configuration issuing. The issued configuration information includes VLAN, APN and LNS IP.

Step S906, CPE deactivation/bearer deactivation. CPE or EPC initiates bearer deactivation.

Step S907, the CPE deactivates notification < CPE ID, APN >. The EPC sends a deactivation notice to the NCEP, the message carries < CPE ID, APN >, wherein the APN is optionally carried, and if not, the deactivation of the whole CPE is indicated.

Step S908, CPE deactivates notification < CPE ID, APN >. And the NCEP obtains a VLAN list to be deactivated according to the deactivated APN and sends a deactivation notice to the LNS. The message carries < CPE ID, VLAN >.

Step S909, the tunnel corresponding to the CPE is removed. And the LNS deletes the VLAN list corresponding to the CPE, and the VLAN message in the carried VLAN list is not encapsulated and sent to the CPE after the VLAN message arrives.

The schemes shown in fig. 6, 7, 8 and 9 are all multi-APN schemes, and fig. 10 shows an exclusive scheme. For the load-dedicated scheme, it is required that the LNS side has multiple LNS instances, uses different LNS IPs, or uses the same LNS IP + different ports to distinguish the instances. The corresponding special packet filters are different by using different distinguishing modes. In addition, the special loading scheme is divided into network side initiation and UE side initiation, when the network side initiation is carried out, the network side control surface can be actively initiated, and the initiation can also be triggered after the data message meeting the requirement of the packetFilter reaches the EPC user surface.

Fig. 10 is a schematic diagram of a process of auto-negotiation between multiple APNs, UE and LNS tunnel provided in the present invention, as shown in fig. 10, including the following steps:

step S101, service configuration.

And step S102, registering the service. The registration information carries < CPE ID, VLAN, QoS >. Different from the multi-APN scheme, the NCEP is indicated to realize the L2QoS control by using a multi-load mode.

Step S103, the special load establishment request < CPE ID, PF, QoS >. Unlike the multiple APN scheme, the NCEP instructs the EPC to establish multiple bearers, each using PacketFilter differentiation (differentiation using APN in the multiple APN scheme). The PacketFilter may be an LNS IP, or LNS IP + LNS Port. If the service is the LNS IP, a plurality of LNS instances can be provided on the LNS, and each instance provides LNS service by using different IP addresses; in the case of LNS IP + LNS Port, multiple instances on the LNS use the same IP address + different ports to provide LNS services.

Step S104, the CPE activates network access. After the CPE activates network access, the NCEP sends the information of the VLAN, the PacketFilter and the LNS to the CPE.

Step S105, configuring and transmitting VLAN, PF and LNSIP. A plurality of exclusive loads with different QoS are established between the CPE and the EPC. The initiation may be initiated by the CPE actively or by the EPC actively, or, if the initiation is initiated by the EPC actively, initiated by the control plane of the PGW actively, or initiated by triggering after the user plane of the PGW receives a tunnel packet satisfying the PacketFilter.

And step S106, establishing multiple special loads.

Step S107, the CPE loads the activation notice < CPE ID, PF, CPE IP >. After the private load activation is completed, the EPC will send a private load activation notification to the NCEP. The notification message carries < CPE ID, PF, CPE IP >.

Step S108, the CPE tunnel establishes the notice < CPE ID, VLAN, CPE IP >. The NCEP maps the PF to a VLAN list and informs the LNS. The LNS encapsulates the L2 message in the downlink VLAN list into a tunnel message and sends the tunnel message to the EPC, the opposite end of the tunnel is CPE IP, the home end is LNS IP, or LNS IP + LNS Port.

Other embodiments of the multi-loading scheme are similar to the multi-APN scheme, and may be performed by the CPE auto-negotiates with the LNS, or may be performed by the EPC requesting authentication, modification, and deletion.

Fig. 11 is a schematic structural diagram of a network transmission device for mobile network services according to an embodiment of the present invention, and as shown in fig. 11, the device includes: a service configuration information acquisition module 11, a bearer establishment module 12, a tunnel establishment module 13 and a message transmission module 14.

A service configuration information obtaining module 11, configured to obtain service configuration information of multiple virtual local area networks, where the service configuration information at least includes: service quality parameters of mobile network services of a plurality of virtual local area networks;

a bearer establishing module 12, configured to establish multiple bearers between the client terminal device and the core network based on service configuration information of multiple virtual local area networks, where a service quality parameter of a mobile network service of each virtual local area network is used to determine a service quality of one bearer;

a tunnel establishing module 13, configured to establish a plurality of tunnels between the client terminal device and the tunnel server based on the plurality of bearers;

the message transmission module 14 is configured to transmit messages of multiple virtual local area networks through multiple tunnels corresponding to multiple bearers.

Optionally, the service configuration information further includes: the identification information of the virtual local area networks, the identification information of the client terminal equipment connected with the virtual local area networks, and the tunnel identification of at least one tunnel established between the client terminal equipment and the tunnel server.

Optionally, the service configuration information obtaining module 11 is configured to, when the client terminal device is connected to the network capability disclosure platform, the network capability disclosure platform issues the service configuration information to the client terminal device.

Optionally, the service configuration information obtaining module 11 further includes: the determining module is used for determining the service configuration information by the tunnel server; a sending module, configured to send, by the tunnel server, a service registration request to the network capability disclosure platform, where the service registration request includes service configuration information and a service implementation manner, and the service implementation manner includes at least one of the following: establishing a first service implementation mode of a plurality of default bearers of a plurality of access points and establishing a second service implementation mode of a plurality of special bearers of a single access point; the issuing module is used for the network capacity disclosing platform to issue corresponding configuration information to the core network, wherein the information issued by the network capacity disclosing platform to the core network comprises the following information: the identification information of the client terminal equipment, the tunnel identification of at least one tunnel established between the client terminal equipment and the tunnel server, and the network service quality corresponding to each tunnel.

Optionally, in a case that the service implementation manner is the first service implementation manner, the tunnel identifier is a network address of the multiple access points; the network address of the multi-access point is allocated by the core network; in the case that the service implementation manner is the second service implementation manner, the tunnel identifier is any one of the following: the network address of the tunnel server, the network address of the tunnel server + port number.

Optionally, the apparatus further comprises: and the address information acquisition module is used for the tunnel server to acquire the network address of the client terminal equipment.

Optionally, the address information obtaining module is configured to send, by the core network, a first message to the network capability disclosure platform, where the first message carries a network address of the client terminal device; the network capacity disclosure platform sends a second message to the tunnel server, wherein the second message carries the identification of the client terminal equipment, the network address of the client terminal equipment and the name of the access point under the condition that the plurality of loads are a plurality of default loads of the plurality of access points; and under the condition that the plurality of bearers are a plurality of special bearers of a single access point, the second message carries the identification of the client terminal equipment and the network address of the client terminal equipment.

Optionally, the address information obtaining module is further configured to send a third message to the tunnel server by the client terminal device, where the third message is used to perform tunnel negotiation between the client terminal device and the tunnel server, and the third message carries an identifier of the client terminal device, a network address of the client terminal device, and a tunnel identifier of at least one tunnel established between the client terminal device and the tunnel server.

Optionally, the message transmission module 14 is further configured to, when receiving a message from any one of the multiple virtual local area networks, the client terminal device determines, based on the service configuration information, a bearer and a tunnel identifier corresponding to the message; the client terminal equipment performs tunnel encapsulation on the message according to the bearing of the message and the tunnel identifier to obtain a corresponding tunnel message; the client terminal equipment sends the tunnel message to a corresponding tunnel server; and the tunnel server verifies the legality of the network address of the client equipment corresponding to the tunnel message, and decapsulates the tunnel message and forwards the tunnel message to the destination under the condition of verifying the legality.

Optionally, the message transmission module 14 is further configured to send, by the tunnel server, a verification request to the network capability disclosure platform, where the verification request includes a network address of the client terminal device; the network capability disclosure platform forwards the verification request to a core network; the core network inquires whether a corresponding client terminal equipment identifier exists according to the network address of the client terminal equipment contained in the verification request, and returns the inquired client terminal equipment identifier to the tunnel server through the network capacity disclosure platform as a verification result; and the tunnel server inquires a corresponding virtual network list according to the identification information of the client terminal equipment, decapsulates the tunnel message based on the virtual network list and forwards the tunnel message to a destination.

Based on any one of the above optional embodiments, the apparatus further includes: the first tunnel modification module is used for sending a first modification request to the network capability disclosure platform by the tunnel server, wherein the first modification request is used for requesting to modify the virtual local area network corresponding to each tunnel; the network capability disclosure platform modifies the virtual local area network list and informs the client terminal device of the modification result.

Optionally, the first tunnel modification module is further configured to, when the client terminal device or the core network initiates a request for bearer deactivation, send, by the core network, a fourth message to the network capability disclosure platform, where the fourth message carries an identifier of the client terminal device and an identifier of a name of a deactivated access point; the network capacity disclosure platform obtains a deactivated virtual local area network list according to the fourth message and sends a fifth message to the tunnel server, wherein the fifth message carries the identification of the client terminal equipment and the identification of the deactivated virtual local area network; and the tunnel server deletes the deactivated virtual local area network corresponding to the client terminal equipment according to the fifth message.

Based on any one of the above optional embodiments, the apparatus further includes: the second tunnel modification module is used for sending a second modification request to the network capacity disclosure platform by the tunnel server, wherein the second modification request is used for requesting to modify the service quality of the tunnel; the network capability disclosure platform informs the core network to modify the service quality of the corresponding bearer.

The apparatus shown in fig. 11 can perform the method of the embodiments shown in fig. 4 and 6-10, and the related descriptions of the embodiments shown in fig. 4 and 6-10 can be referred to for the part of this embodiment not described in detail. The implementation process and technical effect of the technical solution are described in the embodiments shown in fig. 4 and fig. 6 to fig. 10, and are not described again here.

Having described the internal functions and structure of the network transport apparatus for mobile network traffic, in one possible design, the structure of the network transport apparatus for mobile network traffic may be implemented as an electronic device, for example, a server for managing mobile network traffic, as shown in fig. 12, and the electronic device may include: a processor 21 and a memory 22. Wherein the memory 22 is used for storing a program for supporting an electronic device to execute the network transmission method of the mobile network service provided in the embodiments shown in fig. 3-6, and the processor 21 is configured to execute the program stored in the memory 22.

The program comprises one or more computer instructions which, when executed by the processor 21, are capable of performing the steps of:

acquiring link state information of a plurality of tunnel servers, wherein the tunnel servers are distributed in a plurality of local area networks and used for establishing tunnels between any two local area networks, and each tunnel server is connected with a local gateway of the corresponding local area network;

determining transmission path information of a message to be transmitted according to link state information of a plurality of tunnel servers, wherein the message to be transmitted is a message transmitted from any one of a plurality of local area networks to other local area networks, and the transmission path information at least comprises: receiving address information of a tunnel server of a local area network of a message to be transmitted;

and transmitting the transmission path information of the message to be transmitted to the local gateway of the corresponding local area network, wherein the local gateway of the corresponding local area network transmits the message to be transmitted to the tunnel server of the local area network receiving the message to be transmitted according to the determined transmission path information.

Optionally, the processor 21 is further configured to perform all or part of the steps in the embodiments shown in fig. 3 to 6.

The electronic device may further include a communication interface 23 for communicating with other devices or a communication network.

In addition, the embodiment of the present invention provides a computer storage medium for storing computer software instructions for an electronic device, which includes a program for executing the network transmission method of the mobile network service in the method embodiments shown in fig. 3 to fig. 6.

The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.

Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by adding a necessary general hardware platform, and of course, can also be implemented by a combination of hardware and software. With this understanding in mind, the above-described aspects and portions of the present technology which contribute substantially or in part to the prior art may be embodied in the form of a computer program product, which may be embodied on one or more computer-usable storage media having computer-usable program code embodied therein, including without limitation disk storage, CD-ROM, optical storage, and the like.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable network transport device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable network transport device, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable network transport device to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a network transmission device of a computer or other programmable mobile network service to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer implemented process such that the instructions which execute on the computer or other programmable device provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.

Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.

Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

The application discloses a1, a network transmission method of mobile network service, including:

the method comprises the steps that client terminal equipment obtains service configuration information of a plurality of virtual local area networks, wherein the service configuration information at least comprises the following steps: service quality parameters of mobile network services of the plurality of virtual local area networks;

the client terminal equipment establishes a plurality of bearers with a core network based on the service configuration information of the virtual local area networks, wherein the service quality parameter of the mobile network service of each virtual local area network is used for determining the service quality of one bearer;

the client terminal device establishes a plurality of tunnels between the client terminal device and a tunnel server based on the plurality of bearers;

and the client terminal equipment transmits the messages of the virtual local area networks through a plurality of tunnels corresponding to the plurality of bearers.

A2, according to the method of a1, the service configuration information further includes: the method comprises the steps of identifying information of a plurality of virtual local area networks, identifying information of client terminal equipment connected with the virtual local area networks, and tunnel identification of at least one tunnel established between the client terminal equipment and a tunnel server.

A3, according to the method in a2, the method for acquiring service configuration information of multiple virtual local area networks by a client terminal device includes:

and under the condition that the client terminal equipment is connected to a network capacity disclosing platform, the network capacity disclosing platform issues the service configuration information to the client terminal equipment.

A4, according to the method in A3, before the network capability disclosure platform issues the service configuration information to the client terminal device, the method further includes:

the tunnel server determines the service configuration information;

the tunnel server sends a service registration request to a network capability disclosure platform, wherein the service registration request comprises the service configuration information and a service implementation mode, and the service implementation mode comprises at least one of the following modes: establishing a first service implementation mode of a plurality of default bearers of a plurality of access points and establishing a second service implementation mode of a plurality of special bearers of a single access point;

the network capacity disclosing platform issues corresponding configuration information to a core network, wherein the information issued by the network capacity disclosing platform to the core network comprises: the method comprises the steps of identification information of client terminal equipment, tunnel identification of at least one tunnel established between the client terminal equipment and a tunnel server, and network service quality corresponding to each tunnel.

A5, according to the method in A4, in case that the service implementation is the first service implementation, the tunnel identifier is a network address of a multi-access point; the network address of the multi-access point is allocated by a core network; in a case that the service implementation manner is a second service implementation manner, the tunnel identifier is any one of the following: the network address of the tunnel server, the network address of the tunnel server + port number.

A6, before the client terminal device establishes a plurality of tunnels between the client terminal device and a tunnel server based on the plurality of bearers according to the method of a1, the method further comprising: the tunnel server obtains the network address of the client terminal device.

A7, according to the method of a6, the tunnel server obtaining the network address of the client terminal device includes:

the core network sends a first message to a network capability disclosure platform, wherein the first message carries a network address of the client terminal equipment;

the network capacity disclosure platform sends a second message to the tunnel server, wherein the second message carries the identification of the client terminal equipment, the network address of the client terminal equipment and the name of the access point under the condition that the plurality of bearers are a plurality of default bearers of a plurality of access points; and under the condition that the plurality of bearers are a plurality of exclusive bearers of a single access point, carrying the identification of the client terminal equipment and the network address of the client terminal equipment in the second message.

A8, the method of a6, the tunnel server obtaining the network address of the client terminal device, the method further comprising:

the client terminal device sends a third message to the tunnel server, where the third message is used to perform tunnel negotiation between the client terminal device and the tunnel server, and the third message carries an identifier of the client terminal device, a network address of the client terminal device, and a tunnel identifier of at least one tunnel established between the client terminal device and the tunnel server.

A9, according to the method in a1, the transmitting, by the client terminal device, the messages of the multiple virtual local area networks through the multiple tunnels corresponding to the multiple bearers, includes:

the client terminal equipment determines the corresponding bearing and tunnel identification of the message based on the service configuration information under the condition of receiving the message of any one virtual local area network in the plurality of virtual local area networks;

the client terminal equipment carries out tunnel encapsulation on the message according to the bearing of the message and the tunnel identifier to obtain a corresponding tunnel message;

the client terminal equipment sends the tunnel message to a corresponding tunnel server;

and the tunnel server authenticates the legality of the network address of the client equipment corresponding to the tunnel message, and decapsulates the tunnel message and forwards the tunnel message to a destination under the condition of legal authentication.

A10, according to the method in a9, the tunnel server authenticating validity of the network address of the client device corresponding to the tunnel packet, and decapsulating the tunnel packet and forwarding the tunnel packet to a destination if the authentication is valid, including:

the tunnel server sends an authentication request to a network capability disclosure platform, wherein the authentication request comprises a network address of the client terminal equipment;

the network capability disclosure platform forwards the authentication request to a core network;

the core network inquires whether a corresponding client terminal equipment identifier exists according to the network address of the client terminal equipment contained in the authentication request, and returns the inquired client terminal equipment identifier to the tunnel server through a network capability disclosure platform as an authentication result;

and the tunnel server inquires a corresponding virtual network list according to the identification information of the client terminal equipment, decapsulates the tunnel message based on the virtual network list and forwards the tunnel message to a destination.

A11, the method of any one of a1 to a10, wherein after the client terminal device establishes a plurality of tunnels between the client terminal device and a tunnel server based on the plurality of bearers, the method further comprises:

the tunnel server sends a first modification request to a network capability disclosure platform, wherein the first modification request is used for requesting to modify a virtual local area network corresponding to each tunnel;

and the network capacity disclosing platform modifies the virtual local area network list and informs the client terminal equipment of the modification result.

A12, according to the method of a10, after the network capability disclosure platform modifies a virtual local area network list and notifies the client terminal device of the modification result, the method further includes:

under the condition that the client terminal equipment or a core network initiates a bearing deactivation request, the core network sends a fourth message to the network capability disclosure platform, wherein the fourth message carries an identifier of the client terminal equipment and an identifier of a deactivated access point name;

the network capability disclosure platform obtains a deactivated virtual local area network list according to the fourth message and sends a fifth message to a tunnel server, wherein the fifth message carries the identifier of the client terminal equipment and the identifier of the deactivated virtual local area network;

and the tunnel server deletes the deactivated virtual local area network corresponding to the client terminal equipment according to the fifth message.

A13, the method of any one of a1 to a10, wherein after the client terminal device establishes a plurality of tunnels between the client terminal device and a tunnel server based on the plurality of bearers, the method further comprises:

the tunnel server sends a second modification request to a network capability disclosure platform, wherein the second modification request is used for requesting to modify the service quality of the tunnel;

and the network capability disclosure platform informs a core network of modifying the service quality of the corresponding bearer.

The application discloses B14, a network transmission system of mobile network service, includes:

the client terminal device is configured to acquire service configuration information of multiple virtual local area networks, establish multiple bearers with a core network based on the service configuration information of the multiple virtual local area networks, and transmit packets of the multiple virtual local area networks through multiple tunnels corresponding to the multiple bearers, where the service configuration information at least includes: service quality parameters of mobile network services of the plurality of virtual local area networks; the service quality parameter of the mobile network service of each virtual local area network is used for determining the service quality of one bearer;

B15, the system according to B14, the system further comprising:

and the network capacity disclosing platform is communicated with the client terminal equipment and is used for issuing the service configuration information to the client terminal equipment under the condition that the client terminal equipment is connected to the network capacity disclosing platform.

The application discloses C16, a network transmission device of mobile network service, includes:

a service configuration information obtaining module, configured to obtain service configuration information of multiple virtual local area networks, where the service configuration information at least includes: service quality parameters of mobile network services of the plurality of virtual local area networks;

a bearer establishing module, configured to establish multiple bearers between the client terminal device and the core network based on the service configuration information of the multiple virtual local area networks, where a service quality parameter of a mobile network service of each virtual local area network is used to determine a service quality of one bearer;

a tunnel establishing module, configured to establish a plurality of tunnels between the client terminal device and a tunnel server based on the plurality of bearers;

and the message transmission module is used for transmitting the messages of the virtual local area networks through the plurality of tunnels corresponding to the plurality of bearers.

The application discloses D17, an electronic equipment includes: a memory, a processor; wherein,

the memory is configured to store one or more computer instructions, wherein the one or more computer instructions, when executed by the processor, implement a network transport method for mobile network traffic as described in any of a 1-a 13.

Claims

1. A method for network transmission of mobile network traffic, comprising:

2. The method of claim 1, wherein the service configuration information further comprises: the method comprises the steps of identifying information of a plurality of virtual local area networks, identifying information of client terminal equipment connected with the virtual local area networks, and tunnel identification of at least one tunnel established between the client terminal equipment and a tunnel server.

3. The method of claim 2, wherein the step of the client terminal device obtaining service configuration information of a plurality of virtual local area networks comprises:

4. The method of claim 3, wherein before the network capability disclosure platform issues the service configuration information to the client terminal device, the method further comprises:

the tunnel server determines the service configuration information;

5. The method of claim 4, wherein in the case that the service implementation is the first service implementation, the tunnel identifier is a network address of a multi-access point; the network address of the multi-access point is allocated by a core network; in a case that the service implementation manner is a second service implementation manner, the tunnel identifier is any one of the following: the network address of the tunnel server, the network address of the tunnel server + port number.

6. The method of claim 1, wherein before the client terminal device establishes a plurality of tunnels between the client terminal device and a tunnel server based on the plurality of bearers, the method further comprises: the tunnel server obtains the network address of the client terminal device.

7. The method of claim 6, wherein the tunnel server obtaining the network address of the client terminal device comprises:

8. A network transmission system for mobile network traffic, comprising:

9. A network transmission apparatus for mobile network traffic, comprising:

10. An electronic device, comprising: a memory, a processor; wherein,

the memory is configured to store one or more computer instructions, wherein the one or more computer instructions, when executed by the processor, implement a network transmission method of mobile network traffic according to any of claims 1 to 7.