CN109600265B - Access circuit AC configuration information issuing method, device and server - Google Patents
Access circuit AC configuration information issuing method, device and server Download PDFInfo
- Publication number
- CN109600265B CN109600265B CN201811563741.5A CN201811563741A CN109600265B CN 109600265 B CN109600265 B CN 109600265B CN 201811563741 A CN201811563741 A CN 201811563741A CN 109600265 B CN109600265 B CN 109600265B
- Authority
- CN
- China
- Prior art keywords
- configuration information
- access
- equipment
- leaf
- module
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0889—Techniques to speed-up the configuration process
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W24/00—Supervisory, monitoring or testing arrangements
- H04W24/02—Arrangements for optimising operational condition
Abstract
The embodiment of the invention provides an AC configuration information issuing method, an AC configuration information issuing device and a server, wherein when the server senses that new equipment is accessed to Access equipment, the server judges whether the equipment newly accessed to the Access equipment is an AP or not, if so, a downlink port corresponding to the newly accessed AP on Leaf equipment connected with the Access equipment in a network topology is determined, prestored AC configuration information is read from a database, and the AC configuration information is issued to the Leaf equipment, so that the Leaf equipment configures the downlink port corresponding to the newly accessed AP according to the AC configuration information. By the scheme, the time for the server to issue the AC configuration information can be reduced.
Description
Technical Field
The present invention relates to the field of communications technologies, and in particular, to a method, an apparatus, and a server for issuing AC configuration information.
Background
Fig. 1 is a schematic diagram of a networking environment of a campus network, where the networking includes: spine, Leaf, and Access. The Spine device is usually used as a core layer for data forwarding; the Leaf layer is used as a convergence layer and mainly responsible for user authentication, forwarding control of user data and the like; the Access device serves as an Access layer and mainly provides Access services for directly connected wired users and wireless APs (Access points).
With the increasing number of mobile and wireless users in campus networks and the increasing requirements on network security, the campus networks are required to have a policy-following function, that is, the campus networks can acquire the same IP address and have the same network authority no matter where the user accesses. In order to meet the requirement of a wireless user for accessing all possible APs, a server needs to issue AC (access Circuit) configuration information to all Leaf devices in advance, and after each Leaf device receives the AC configuration information, each downlink port of the Leaf device is configured. The AC configuration is performed on the downstream port of the Leaf device, so that a wireless user message VLAN (Virtual Local Area Network) tag of the downstream port can be converted into a VXLAN (Virtual eXtensible Local Area Network) for use, and if any downstream port is not configured in advance, the requirement that the access of the AP at any point can ensure the user to be on-line cannot be met.
However, since there are many Leaf devices in the actual campus network, each Leaf device has multiple downstream ports, which requires the server to issue many AC configuration information, and the issuance of AC configuration information is generally issued in series, which results in too long time consumption for the server to issue AC configuration information, and resource waste easily caused by long-term occupation of issued device table entries.
Disclosure of Invention
The embodiment of the invention aims to provide an AC configuration information issuing method, an AC configuration information issuing device and a server, so as to reduce the time length for issuing AC configuration information by the server. The specific technical scheme is as follows:
in a first aspect, an embodiment of the present invention provides a method for issuing AC configuration information, where the method includes:
when sensing that a new device is accessed to an Access device, judging whether the device newly accessed to the Access device is an AP or not;
if yes, determining a downlink port corresponding to a newly accessed AP on the Leaf device connected with the Access device in the network topology;
and reading pre-stored AC configuration information from a database, and issuing the AC configuration information to the Leaf device so that the Leaf device configures the downlink port according to the AC configuration information.
In a second aspect, an embodiment of the present invention provides an AC configuration information issuing apparatus, where the apparatus includes:
the judging module is used for judging whether the opposite terminal equipment newly accessed to the Access equipment is an AP or not when sensing that the new equipment is accessed to the Access equipment;
a determining module, configured to determine, if a determination result of the determining module is yes, a downlink port corresponding to a newly accessed AP on a Leaf device connected to the Access device in a network topology;
and the issuing module is used for reading pre-stored AC configuration information from a database and issuing the AC configuration information to the Leaf equipment so that the Leaf equipment configures the downlink port according to the AC configuration information.
In a third aspect, an embodiment of the present invention provides a server, including a processor and a machine-readable storage medium, where the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the instructions are loaded and executed by the processor to implement the method provided in the first aspect of the embodiment of the present invention.
In a fourth aspect, the present invention provides a machine-readable storage medium, where machine-executable instructions are stored, and the instructions are loaded and executed by a processor to implement the method provided by the first aspect of the present invention.
According to the method, the device and the server for issuing the AC configuration information provided by the embodiment of the invention, when the server senses that a new device is accessed to an Access device, whether the device newly accessed to the Access device is an AP or not is judged, if yes, a downlink port corresponding to the newly accessed AP on a Leaf device connected with the Access device in a network topology is determined, the AC configuration information stored in advance is read from a database, and the AC configuration information is issued to the Leaf device, so that the Leaf device configures the downlink port corresponding to the newly accessed AP according to the AC configuration information. The server can dynamically sense whether a new AP is accessed to the Access device, if so, the downlink port corresponding to the newly accessed AP on the Leaf device connected with the Access device is determined, so that the AC configuration information is dynamically issued, after the new AP is sensed to be accessed, the AC configuration information is issued to the Leaf device connected with the Access device accessed by the AP, the Leaf device can configure the downlink port corresponding to the newly accessed AP, the AC configuration information does not need to be issued to all the Leaf devices in advance, the Leaf device does not need to configure all the downlink ports of the Leaf device in advance according to the AC configuration information, and therefore, the time for the server to issue the AC configuration information is shortened.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
FIG. 1 is a diagram of a prior art campus network networking environment;
fig. 2 is a schematic flowchart of an AC configuration information issuing method according to an embodiment of the present invention;
fig. 3 is a schematic structural diagram of an AC configuration information issuing apparatus according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a server according to an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
In order to reduce the time length for issuing the AC configuration information by the server, the embodiment of the invention provides an AC configuration information issuing method, an AC configuration information issuing device, a server and a machine-readable storage medium.
Next, a method for issuing AC configuration information provided in the embodiment of the present invention is described first.
An execution subject of the AC configuration information issuing method provided in the embodiment of the present invention may be a server, for example, a server running Network management Software, or may also be a controller, for example, an SDN (Software Defined Network) controller. The mode for implementing the method for issuing the AC configuration information provided by the embodiment of the present invention may be at least one of software, a hardware circuit, and a logic circuit provided in the execution main body.
As shown in fig. 2, the method for issuing AC configuration information according to the embodiment of the present invention may include the following steps:
s201, when sensing that a new device is accessed to the Access device, judging whether the device newly accessed to the Access device is an AP.
Once a new device (AP or wired user equipment) is accessed to the Access device, the Access device generates Link Layer Discovery Protocol (LLDP) information, where the LLDP information carries identification information such as a notification identifier of the new device Access and an attribute identifier of the new Access device, and the LLDP information provides a standard Link Layer discovery method, so that devices of different manufacturers can discover and interact their respective system and configuration information in a network. After the Access device generates the LLDP information, the Access device actively sends the generated LLDP information to a server in a specified message form; certainly, the server may also monitor whether the Access device generates new LLDP information in real time, and if it is monitored that the Access device generates new LLDP information, actively acquire the newly generated LLDP information from the Access device.
Since the policy associated function of the campus network is to enable the wireless user to Access all possible APs, in actual application, a downlink port corresponding to a newly accessed AP on a Leaf device connected to an Access device having a new AP Access needs to be configured, and based on this, it needs to determine whether the device newly accessed to the Access device is an AP. The server senses that a new device is accessed to the Access device through the newly generated LLDP information of the Access device, and can judge whether the device newly accessed to the Access device is an AP or not according to the device attribute identifier because the LLDP information carries the attribute identifier information of the device.
Optionally, S201 may specifically include:
receiving a link state message reported by the Access equipment, and extracting LLDP information from the link state message; or, inquiring the LLDP information from the Access equipment in a preset protocol inquiry mode;
judging whether the LLDP information carries an AP identifier or not;
and if the AP is carried, determining that the opposite terminal equipment newly accessed to the Access equipment is the AP.
The link state message is a message carrying LLDP information, such as Syslog message, and the like, and the link state message may carry information such as device information (device MAC address, device serial number, device name, and the like) of the Access device in addition to the LLDP information, and after the Access device generates the LLDP information, the Access device may carry the LLDP information into the link state message such as the Syslog message, and report the link state message to the server, so that the server may sense that a new device is accessed to the Access device.
In addition, the server may further have a monitoring function, which monitors whether the Access device generates new LLDP information, and if so, the server may send an LLDP information query instruction to the Access device in a Simple Network Management Protocol (SNMP), a Telnet (standard Protocol for remote login service), a Network Configuration Protocol (NETCONF), or the like, and the Access device may reply the LLDP information to the server after receiving the query instruction.
Because the LLDP information is generated when a new device accesses the Access device each time, and the LLDP information carries the attribute identifier of the device newly accessing the Access device, it is possible to determine whether the device newly accessing the Access device is an AP by determining whether the device attribute identifier carried in the LLDP information is an attribute identifier related to the AP. For example, if the identifier of "Wlan Access point" is found in the LLDP information in the following statement, it may be considered that the peer device accessing the Access device is an AP:
System capabilities supported:Bridge,WlanAccessPoint,Router,Customer Bridge,Service Bridge
s202, if the equipment newly accessed to the Access equipment is the AP, determining a downlink port corresponding to the newly accessed AP on the Leaf equipment connected with the Access equipment in the network topology.
If the server can determine that the device newly accessing the Access device is an AP, the server needs to correspondingly issue AC configuration information, and therefore, a downlink port corresponding to the newly accessed AP on the Leaf device connected to the Access device needs to be determined.
And S203, reading the pre-stored AC configuration information from the database, and issuing the AC configuration information to the Leaf device, so that the Leaf device configures a downlink port corresponding to the newly accessed AP on the Leaf device according to the AC configuration information.
AC configuration information based on security group configuration is stored in advance in the database, and after a user inputs a security group creation instruction, the server may create a security group and perform security group configuration. A security group represents a group of users of the same rights. The members in the security group can be network terminal devices such as a PC, a mobile phone and the like. When security group configuration is performed, corresponding AC configuration information is set corresponding to each security group, that is, how each security group performs conversion of VLAN packet tags to VXLAN.
Optionally, the method for issuing the AC configuration information provided in the embodiment of the present invention may further perform the following steps:
acquiring a security group establishing instruction;
creating configuration information of each security group, wherein the configuration information of each security group comprises AC configuration information of each security group;
and storing the configuration information of each security group in a database.
And when the AC configuration information is stored, only warehousing and storing without configuration issuing. And only after the downlink port of the Leaf device corresponding to the newly accessed AP is determined, the pre-stored AC configuration information is read from the database through network management software and is issued.
In this embodiment, fig. 1 is taken as an example for explanation, as shown in fig. 1, a newly accessed AP is accessed to a Leaf device 1 through an Access device 111, and a downlink port 11, through which the Leaf device 1 is connected to the Access device 111, is a downlink port of a Leaf device corresponding to the newly accessed AP. When the AC configuration information is issued, in order to ensure that the wireless user can normally access, all the stored AC configuration information may be issued to the Leaf device, or a security group to which the user device accessing the AP belongs may be identified, and the AC configuration information corresponding to the security group is issued to the Leaf device, and after receiving the AC configuration information, the Leaf device may configure the downlink port 11 corresponding to the newly accessed AP device according to the AC configuration information, thereby ensuring that the user device can normally access the AP.
Optionally, the method for issuing the AC configuration information provided in the embodiment of the present invention may further perform the following steps:
acquiring an AP leaving notification message reported by the Access equipment;
and if the AP Access notification message reported by the Access device is not acquired within the preset period, sending a deletion instruction to the Leaf device so that the Leaf device deletes the AC configuration of the downlink port.
If the AP leaves from the Access device, for example, the AP is powered off, the AP fails, and the like, an AP leaving identifier may be generated on the Access device, the Access device notifies the server of the AP leaving identifier in a notification manner, and a notification message sent by the Access device includes the device identifier of the AP. The server, upon receiving the notification message, may identify which AP left from the Access device. If the notification message of the same AP Access is not received all the time in the preset period, it indicates that the AP has determined to disconnect from the Access device, and the AC configuration of the corresponding downlink port may be deleted. Specifically, if an AP leaves from the Access device, an LLDP message carrying a leaving identifier is correspondingly generated, and the server may determine which AP leaves the Access device by acquiring the LLDP message.
When the Access device is reconnected, because the Access device records the device information of the accessed device, the server can directly obtain the device information of the accessed device of the Access device, if the devices contain the AP, the AC configuration is issued to the Leaf device connected with the Access device according to the process, so that the Leaf device configures the downlink port corresponding to the accessed AP on the Leaf device according to the AC configuration information.
By applying the embodiment, when sensing that a new device is accessed to the Access device, the server judges whether the device newly accessed to the Access device is an AP, if so, determines a downlink port corresponding to the newly accessed AP on the Leaf device connected to the Access device in the network topology, and issues AC configuration information to the Leaf device, so that the Leaf device configures the downlink port corresponding to the newly accessed AP according to the AC configuration information, thereby avoiding issuing the AC configuration information to all the Leaf devices, and reducing the time for issuing the AC configuration information by the server.
Further, the server may dynamically sense whether an AP accesses the Access device, and if a new AP accesses the Access device, determine a downlink port corresponding to the newly accessed AP on the Leaf device connected to the Access device, so as to dynamically issue AC configuration information, and after sensing that a new AP accesses, issue AC configuration information to the Leaf device connected to the Access device accessed by the AP, and the Leaf device may configure the downlink port corresponding to the newly accessed AP, and does not need to issue AC configuration information to all Leaf devices in advance, and the Leaf device does not need to configure each downlink port of the Leaf device in advance according to the AC configuration information, so as to reduce a duration of issuing AC configuration information by the server. Because the AC configuration information issued each time is reduced, the issued list items of the server are optimized.
Corresponding to the foregoing method embodiment, an embodiment of the present invention provides an AC configuration information issuing apparatus, and as shown in fig. 3, the apparatus may include:
a determining module 310, configured to determine whether a device newly accessing an Access device is an AP when it is sensed that the Access device is accessed by a new device;
a determining module 320, configured to determine, if the determination result of the determining module is yes, a downlink port corresponding to a newly accessed AP on a Leaf device connected to the Access device in a network topology;
the issuing module 330 is configured to read pre-stored AC configuration information from a database, and issue the AC configuration information to the Leaf device, so that the Leaf device configures the downstream port according to the AC configuration information.
Optionally, the apparatus may further include:
the acquisition module is used for acquiring a security group creation instruction;
the system comprises a creating module, a configuration module and a configuration module, wherein the creating module is used for creating configuration information of each security group, and the configuration information of each security group comprises AC configuration information of each security group;
and the storage module is used for storing the configuration information of each security group to the database.
Optionally, the determining module 310 may be specifically configured to:
receiving a link state message reported by the Access equipment, and extracting LLDP information from the link state message; or, inquiring the LLDP information from the Access equipment in a preset protocol inquiry mode;
judging whether the LLDP information carries an AP identifier or not;
and if the AP is carried, determining that the opposite terminal equipment newly accessed to the Access equipment is the AP.
Optionally, the apparatus may further include:
an obtaining module, configured to obtain an AP leaving notification message reported by the Access device;
and a sending module, configured to send a delete instruction to the Leaf device if the notification message of the AP Access reported by the Access device is not obtained within a preset period, so that the Leaf device deletes the AC configuration of the downstream port.
By applying the embodiment, when sensing that a new device is accessed to the Access device, the server judges whether the device newly accessed to the Access device is an AP, if so, determines a downlink port corresponding to the newly accessed AP on the Leaf device connected to the Access device in the network topology, reads the pre-stored AC configuration information from the database, and transmits the AC configuration information to the Leaf device, so that the Leaf device configures the downlink port corresponding to the newly accessed AP according to the AC configuration information. The server can dynamically sense whether a new AP is accessed to the Access device, if so, the downlink port corresponding to the newly accessed AP on the Leaf device connected with the Access device is determined, so that the AC configuration information is dynamically issued, after the new AP is sensed to be accessed, the AC configuration information is issued to the Leaf device connected with the Access device accessed by the AP, the Leaf device can configure the downlink port corresponding to the newly accessed AP, the AC configuration information does not need to be issued to all the Leaf devices in advance, the Leaf device does not need to configure all the downlink ports of the Leaf device in advance according to the AC configuration information, and therefore, the time for the server to issue the AC configuration information is shortened.
An embodiment of the present invention further provides a server, as shown in fig. 4, including a processor 401 and a machine-readable storage medium 402, where the machine-readable storage medium 402 stores machine-executable instructions that can be executed by the processor 401, and the instructions are loaded and executed by the processor 401, so as to implement all steps of the AC configuration information issuing method provided in the embodiment of the present invention.
The machine-readable storage medium may include a RAM (Random Access Memory) and a NVM (Non-volatile Memory), such as at least one disk Memory. Alternatively, the machine-readable storage medium may be at least one memory device located remotely from the processor.
The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), and the like; but also a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array) or other Programmable logic device, discrete Gate or transistor logic device, discrete hardware component.
The machine-readable storage medium 402 and the processor 401 may be in data communication by way of a wired or wireless connection, and the server may communicate with other devices by way of a wired or wireless communication interface. Fig. 4 shows only an example of data transmission between the processor 401 and the machine-readable storage medium 402 through a bus, and the connection manner is not limited in particular.
In this embodiment, the processor 401, by reading machine executable instructions stored in the machine-readable storage medium 402, is caused by the machine executable instructions to enable: when sensing that a new device is accessed to the Access device, the server judges whether the device newly accessed to the Access device is an AP, if so, determines a downlink port corresponding to the newly accessed AP on a Leaf device connected with the Access device in the network topology, reads pre-stored AC configuration information from a database, and transmits the AC configuration information to the Leaf device, so that the Leaf device configures the downlink port corresponding to the newly accessed AP according to the AC configuration information. The server can dynamically sense whether a new AP is accessed to the Access device, if so, the downlink port corresponding to the newly accessed AP on the Leaf device connected with the Access device is determined, so that the AC configuration information is dynamically issued, after the new AP is sensed to be accessed, the AC configuration information is issued to the Leaf device connected with the Access device accessed by the AP, the Leaf device can configure the downlink port corresponding to the newly accessed AP, the AC configuration information does not need to be issued to all the Leaf devices in advance, the Leaf device does not need to configure all the downlink ports of the Leaf device in advance according to the AC configuration information, and therefore, the time for the server to issue the AC configuration information is shortened.
In addition, an embodiment of the present invention provides a machine-readable storage medium, where a machine-executable instruction is stored, where the instruction is loaded and executed by a processor, so as to implement all the steps of the AC configuration information issuing method provided in the embodiment of the present invention.
In this embodiment, when running, the machine-readable storage medium executes the machine-executable instruction of the AC configuration information issuing method provided in the embodiment of the present invention, so that: when sensing that a new device is accessed to the Access device, the server judges whether the device newly accessed to the Access device is an AP, if so, determines a downlink port corresponding to the newly accessed AP on a Leaf device connected with the Access device in the network topology, reads pre-stored AC configuration information from a database, and transmits the AC configuration information to the Leaf device, so that the Leaf device configures the downlink port corresponding to the newly accessed AP according to the AC configuration information. The server can dynamically sense whether a new AP is accessed to the Access device, if so, the downlink port corresponding to the newly accessed AP on the Leaf device connected with the Access device is determined, so that the AC configuration information is dynamically issued, after the new AP is sensed to be accessed, the AC configuration information is issued to the Leaf device connected with the Access device accessed by the AP, the Leaf device can configure the downlink port corresponding to the newly accessed AP, the AC configuration information does not need to be issued to all the Leaf devices in advance, the Leaf device does not need to configure all the downlink ports of the Leaf device in advance according to the AC configuration information, and therefore, the time for the server to issue the AC configuration information is shortened.
For the embodiments of the server and the machine-readable storage medium, the contents of the related methods are substantially similar to those of the foregoing embodiments of the methods, so that the description is relatively simple, and for the relevant points, reference may be made to the partial description of the embodiments of the methods.
It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, as for the apparatus, server, and machine-readable storage medium embodiments, since they are substantially similar to the method embodiments, the description is relatively simple, and reference may be made to some descriptions of the method embodiments for relevant points.
The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention shall fall within the protection scope of the present invention.
Claims (10)
1. A method for issuing Access Circuit (AC) configuration information, the method comprising:
when sensing that a new device is accessed to an Access device, judging whether the device newly accessed to the Access device is an Access Point (AP) or not;
if yes, determining a downlink port corresponding to a newly accessed AP on a Leaf device connected with the Access device in the network topology;
and reading pre-stored AC configuration information from a database, and issuing the AC configuration information to the Leaf device so that the Leaf device configures the downlink port according to the AC configuration information.
2. The method of claim 1, further comprising:
acquiring a security group establishing instruction;
creating configuration information of each security group, wherein the configuration information of each security group comprises AC configuration information of each security group;
and storing the configuration information of each security group in a database.
3. The method of claim 1, wherein when it is sensed that a new device accesses an Access device, determining whether the device newly accessing the Access device is an Access Point (AP) comprises:
receiving a link state message reported by the Access equipment, and extracting link layer protocol LLDP information from the link state message; or, inquiring the LLDP information from the Access equipment in a preset protocol inquiry mode;
judging whether the LLDP information carries an AP identifier or not;
and if the AP is carried, determining that the equipment newly accessed to the Access equipment is the AP.
4. The method of claim 1, further comprising:
acquiring an AP leaving notification message reported by the Access equipment;
and if the AP Access notification message reported by the Access equipment is not acquired in a preset period, sending a deletion instruction to the Leaf equipment so that the Leaf equipment deletes the AC configuration of the downlink port.
5. An Access Circuit (AC) configuration information issuing device, characterized in that the device comprises:
the judging module is used for judging whether the equipment newly accessed to the Access equipment is an AP or not when sensing that the new equipment is accessed to the Access equipment;
a determining module, configured to determine, if a determination result of the determining module is yes, a downlink port corresponding to a newly accessed AP on a Leaf device connected to the Access device in a network topology;
and the issuing module is used for reading pre-stored AC configuration information from a database and issuing the AC configuration information to the Leaf equipment so that the Leaf equipment configures the downlink port according to the AC configuration information.
6. The apparatus of claim 5, further comprising:
the acquisition module is used for acquiring a security group creation instruction;
the system comprises a creating module, a configuration module and a configuration module, wherein the creating module is used for creating configuration information of each security group, and the configuration information of each security group comprises AC configuration information of each security group;
and the storage module is used for storing the configuration information of each security group to the database.
7. The apparatus of claim 5, wherein the determining module is specifically configured to:
receiving a link state message reported by the Access equipment, and extracting LLDP information from the link state message; or, inquiring the LLDP information from the Access equipment in a preset protocol inquiry mode;
judging whether the LLDP information carries an AP identifier or not;
and if the AP is carried, determining that the opposite terminal equipment newly accessed to the Access equipment is the AP.
8. The apparatus of claim 5, further comprising:
an obtaining module, configured to obtain an AP leaving notification message reported by the Access device;
and a sending module, configured to send a delete instruction to the Leaf device if the notification message of the AP Access reported by the Access device is not obtained within a preset period, so that the Leaf device deletes the AC configuration of the downstream port.
9. A server comprising a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor, the instructions being loaded and executed by the processor to implement the method of any one of claims 1 to 4.
10. A machine-readable storage medium having stored thereon machine-executable instructions, which are loaded and executed by a processor, to implement the method of any one of claims 1-4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811563741.5A CN109600265B (en) | 2018-12-20 | 2018-12-20 | Access circuit AC configuration information issuing method, device and server |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811563741.5A CN109600265B (en) | 2018-12-20 | 2018-12-20 | Access circuit AC configuration information issuing method, device and server |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109600265A CN109600265A (en) | 2019-04-09 |
| CN109600265B true CN109600265B (en) | 2021-11-12 |
Family
ID=65963131
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811563741.5A Active CN109600265B (en) | 2018-12-20 | 2018-12-20 | Access circuit AC configuration information issuing method, device and server |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109600265B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112583690B (en) * | 2019-09-27 | 2022-08-19 | 华为技术有限公司 | Tunnel configuration method, device, system, equipment and storage medium |
| CN111654403B (en) * | 2020-06-24 | 2022-04-22 | 迈普通信技术股份有限公司 | Wireless access point configuration method and device, communication equipment and readable storage medium |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2013117165A1 (en) * | 2012-02-08 | 2013-08-15 | 中兴通讯股份有限公司 | Method and node for realizing e-tree service based on vpls |
| CN106209643A (en) * | 2016-07-14 | 2016-12-07 | 杭州华三通信技术有限公司 | Message forwarding method and device |
| CN107809367A (en) * | 2017-11-07 | 2018-03-16 | 锐捷网络股份有限公司 | The equipment loading method and SDN controllers, the network equipment of a kind of SDN |
| CN107979614A (en) * | 2017-12-30 | 2018-05-01 | 杭州华为数字技术有限公司 | Data packet detection method and device |
| CN108260106A (en) * | 2018-01-10 | 2018-07-06 | 中国电子科技集团公司第三十研究所 | The ad hoc network method for building up and device of a kind of intelligent terminal WiFi |
| CN108600179A (en) * | 2018-03-28 | 2018-09-28 | 新华三技术有限公司 | Authentication method and device |
-
2018
- 2018-12-20 CN CN201811563741.5A patent/CN109600265B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2013117165A1 (en) * | 2012-02-08 | 2013-08-15 | 中兴通讯股份有限公司 | Method and node for realizing e-tree service based on vpls |
| CN106209643A (en) * | 2016-07-14 | 2016-12-07 | 杭州华三通信技术有限公司 | Message forwarding method and device |
| CN107809367A (en) * | 2017-11-07 | 2018-03-16 | 锐捷网络股份有限公司 | The equipment loading method and SDN controllers, the network equipment of a kind of SDN |
| CN107979614A (en) * | 2017-12-30 | 2018-05-01 | 杭州华为数字技术有限公司 | Data packet detection method and device |
| CN108260106A (en) * | 2018-01-10 | 2018-07-06 | 中国电子科技集团公司第三十研究所 | The ad hoc network method for building up and device of a kind of intelligent terminal WiFi |
| CN108600179A (en) * | 2018-03-28 | 2018-09-28 | 新华三技术有限公司 | Authentication method and device |
Non-Patent Citations (1)
| Title |
|---|
| 基于SDN的智能园区交换网络解决方案;张立军等;《中国新通信》;20181120;全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109600265A (en) | 2019-04-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107733670B (en) | Forwarding strategy configuration method and device | |
| US9154378B2 (en) | Architecture for virtualized home IP service delivery | |
| JP5093598B2 (en) | Control relay program, control relay device, and control relay method | |
| WO2017177798A1 (en) | Method and system for discovering cloud access controller by access point | |
| CN111885680A (en) | Method, system and core equipment for establishing network connection | |
| CN102377568A (en) | Network relay device and frame relaying control method | |
| EP2218214B1 (en) | Network location service | |
| CN109600265B (en) | Access circuit AC configuration information issuing method, device and server | |
| EP2814217B1 (en) | Access control method for wifi device and wifi device thereof | |
| CN107948979B (en) | Information processing method and device and auditing equipment | |
| CN106954212A (en) | A kind of portal authentication method and system | |
| US20240089178A1 (en) | Network service processing method, system, and gateway device | |
| CN109981462B (en) | Message processing method and device | |
| CN107547676B (en) | Address processing method and device | |
| CN107786441B (en) | Communication method, OpenFlow switch and communication system | |
| CN109120738B (en) | DHCP server and method for managing network internal equipment | |
| US20230318923A1 (en) | Proactive inspection technique for improved classification | |
| US8239930B2 (en) | Method for controlling access to a network in a communication system | |
| CN116719868A (en) | Network asset identification method, device and equipment | |
| CN108989173B (en) | Message transmission method and device | |
| US9467932B2 (en) | Access control method for WiFi device and WiFi device | |
| CN104468467A (en) | Dynamic host configuration protocol (DHCP) message transmitting method and device | |
| CN114500175A (en) | Communication method for reversely dividing home VLAN based on IP address of user equipment | |
| WO2015145953A1 (en) | Communication terminal, communication method, and program-containing storage medium | |
| CN112383646B (en) | Security entry configuration method and device, SDN controller and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |