CN114079649A

CN114079649A - Address allocation method, equipment and system

Info

Publication number: CN114079649A
Application number: CN202010838460.7A
Authority: CN
Inventors: 刘婧
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2020-08-19
Filing date: 2020-08-19
Publication date: 2022-02-22
Also published as: WO2022037621A1

Abstract

The application provides an address allocation method, device and system, and belongs to the technical field of communication. In the solution provided by the present application, the authentication request sent by the CP device includes indication information for indicating a target address pool corresponding to the target UP device. Thus, the authentication server can assign an IP address for the target client device from the target address pool corresponding to the target UP device based on the indication information. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device without forwarding through other UP devices in the UP backup group, thereby avoiding the bypass of downlink flow.

Description

Address allocation method, equipment and system

Technical Field

The present application relates to the field of communications technologies, and in particular, to an address allocation method, device, and system.

Background

The network access system adopting a Control Plane (CP) and User Plane (UP) separation scheme includes: a CP device, a forwarding device, a plurality of UP devices, and a remote authentication in user service (RADIUS) server. Wherein, the UP device is connected with the CP device through the forwarding device. In addition, in order to ensure the reliability of network access, the UP devices in the network access system may be divided into a plurality of backup groups, each backup group including two UP devices, where one UP device is a main UP device and the other UP device is a backup UP device.

In the related art, two UP devices in each backup group share one Internet Protocol (IP) address pool. When the client device accesses the network through a certain UP device in the backup group, the RADIUS server can select an IP address from the shared IP address pool as the IP address of the client device. The client device, in turn, may access the network based on the IP address.

In order to ensure that the forwarding device can normally forward the packet addressed to the client device, each UP device needs to issue a network segment route of the address pool shared by the UP device to the forwarding device. Because the priority of the network segment route sent by the main UP device is higher than that of the network route sent by the standby UP device, when receiving the message of which the destination address belongs to the shared address pool, the forwarding device sends the message to the main UP device. However, if the receiver of the packet is a client device accessing the network from the standby UP device, the main UP device needs to forward the packet to the standby UP device, and then the standby UP device sends the packet to the client device. Thereby causing downstream traffic to bypass.

Disclosure of Invention

The application provides an address allocation method, device and system, which can solve the technical problem of downlink traffic bypassing in a communication system of the related art.

In one aspect, an address allocation method is provided, which is applied to an authentication server in a CP and UP separated communication system, the communication system further includes a CP device and a UP backup group, the UP backup group includes a plurality of UP devices; the method comprises the following steps: the authentication server receives an authentication request sent by the CP device and used for indicating the authentication of the target client device, wherein the authentication request comprises: indication information for indicating a target address pool corresponding to the target UP device, and then the authentication server may send an authentication response to the CP device according to the indication information; the target client device is online from a target UP device in the UP devices, namely the target client device is accessed to the network through the target UP device, and IP address pools corresponding to the UP devices are different; the authentication response includes the IP address assigned to the target client device and the IP address is included in the target address pool corresponding to the target UP device.

In the scheme provided by the application, the authentication server can allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information in the authentication request. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device, thereby avoiding the bypass of the downlink flow.

Optionally, the authentication server stores a plurality of address pools, the indication information is an identifier of the target address pool, or a gateway address of the target address pool, and the identifier of the target address pool may be a name of the target address pool; accordingly, the process of the authentication server sending the authentication response to the CP device according to the indication information may include: and determining a target address pool from the plurality of address pools according to the indication information, and determining an IP address allocated to the target client device from the target address pool.

According to the scheme provided by the application, the CP device can plan the corresponding relation between the UP device and the address pool. Correspondingly, the authentication server only needs to store each address pool and determine the target address pool according to the indication information carried in the authentication request. Thereby, the data amount of data required to be stored in the authentication server is reduced, and the increase in complexity of data processing of the authentication server can be avoided.

Optionally, the authentication server may also generate a correspondence of the UP device to an address pool. That is, the correspondence of the UP device to the address pool can be planned by the authentication server.

Optionally, the authentication server stores a corresponding relationship between the UP device and the address pool, the indication information is an identifier of the target UP device, and the identifier of the target UP device may be an IP address of the target UP device; accordingly, the process of the authentication server sending the authentication response to the CP device according to the indication information may include: and according to the indication information, determining a target address pool corresponding to the target UP device from the corresponding relation, and determining an IP address allocated to the target client device from the target address pool.

The scheme provided by the application can also be used for planning the corresponding relation between the UP equipment and the address pool by the authentication server. Correspondingly, the CP device only needs to carry the identifier of the target UP device in the sent authentication request. Thereby, the data amount of data required to be stored in the CP device is reduced, and an increase in the complexity of data processing of the CP device can be avoided.

Optionally, the plurality of UP devices includes at least one high-priority UP device and at least one low-priority UP device, and the priority of the routing information issued by the high-priority UP device is higher than the priority of the routing information issued by the low-priority UP device. Wherein the high priority UP device and the low priority UP device may be determined by the CP device.

In the solution provided by the present application, because the IP address pools corresponding to the UP devices are different, and the authentication server can allocate an IP address to the client device from the target address pool corresponding to the target UP device on line of the client device, even if the client device is on line from the low-priority UP device, the downlink traffic of the client device can be avoided from bypassing.

In another aspect, an address allocation method is provided, which is applied to CP devices in a CP and UP separated communication system, the communication system further includes an authentication server and an UP backup group, the UP backup group includes a plurality of UP devices; the method comprises the following steps: the CP device transmits, to an authentication server, an authentication request for instructing authentication of a target client device, the authentication request including: indication information for indicating a target address pool corresponding to the target UP device, and then the CP device may receive an authentication response sent by the authentication server; wherein, the target client device is on-line from the target UP device in the UP devices, and IP address pools corresponding to the UP devices are different; the authentication response includes the IP address assigned to the target client device and the IP address is included in the target address pool corresponding to the target UP device.

The authentication request sent by the CP device comprises indication information used for indicating a target address pool corresponding to the target UP device. Thus, the authentication server can assign an IP address for the target client device from the target address pool corresponding to the target UP device based on the indication information. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device, thereby avoiding the bypass of the downlink flow.

Optionally, the CP device stores a correspondence between the UP device and the address pool; the process of the CP device sending an authentication request to the authentication server for indicating authentication of the target client device may include: and determining the indication information based on the corresponding relation, wherein the indication information is the identifier of the target address pool or the gateway address of the target address pool.

Optionally, the CP device may also generate a correspondence between the UP device and the address pool. That is, the correspondence of the UP device to the address pool can be planned by the CP device.

Alternatively, the indication information can be an identification of the target UP device.

In another aspect, an authentication server is provided, which is applied to a CP and UP separated communication system, and the communication system further includes a CP device and a UP backup group, where the UP backup group includes a plurality of UP devices, and IP address pools corresponding to the UP devices are different; the authentication server may comprise at least one module, and the at least one module may be configured to implement the address assignment method applied to the authentication server provided by the above aspect.

In another aspect, a CP device is provided, which is applied in a CP and UP separated communication system, where the communication system further includes an authentication server and a UP backup group, where the UP backup group includes multiple UP devices, and IP address pools corresponding to the UP devices are different; the CP device may include at least one module, and the at least one module may be configured to implement the address allocation method applied to the CP device provided in the above aspect.

In another aspect, an authentication server is provided, which is applied to a CP and UP separated communication system, where the communication system further includes a CP device and a UP backup group, where the UP backup group includes multiple UP devices, and IP address pools corresponding to the UP devices in the multiple UP devices are different; the authentication server may include: a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the address assignment method applied to the authentication server as provided in the above aspect when executing the computer program.

In another aspect, a CP device is provided, which is applied in a CP and UP separated communication system, where the communication system further includes an authentication server and a UP backup group, where the UP backup group includes multiple UP devices, and IP address pools corresponding to the UP devices are different; the CP device may include: a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the address assignment method applied to the CP device as provided in the above aspect when executing the computer program.

In yet another aspect, a computer-readable storage medium having instructions stored therein for execution by a processor to implement an address assignment method as provided in any of the above aspects is provided.

In a further aspect, there is provided a computer program product comprising instructions which, when run on a computer, cause the computer to perform the address allocation method as provided in any one of the above aspects.

In still another aspect, there is provided a CP and UP separated communication system, the communication system including an authentication server as provided in the above aspect, a CP device as provided in the above aspect, and a UP backup group; the UP backup group comprises a plurality of UP devices, and IP address pools corresponding to the UP devices in the UP devices are different.

In summary, the embodiments of the present application provide an address allocation method, device, and system. The authentication request sent by the CP device comprises indication information used for indicating a target address pool corresponding to the target UP device. Thus, the authentication server can assign an IP address for the target client device from the target address pool corresponding to the target UP device based on the indication information. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device without forwarding through other UP devices in the UP backup group, thereby avoiding the bypass of downlink flow.

Drawings

Fig. 1 is a schematic structural diagram of a CU-separated communication system according to an embodiment of the present disclosure;

FIG. 2 is a schematic illustration of a downstream traffic detour;

fig. 3 is a flowchart of an address allocation method according to an embodiment of the present application;

fig. 4 is a flowchart of another address allocation method provided in an embodiment of the present application;

fig. 5 is a schematic structural diagram of another CU-separated communication system according to an embodiment of the present disclosure;

fig. 6 is a flowchart of another address allocation method provided in an embodiment of the present application;

fig. 7 is a schematic structural diagram of an authentication server according to an embodiment of the present application;

fig. 8 is a schematic structural diagram of another authentication server provided in an embodiment of the present application;

fig. 9 is a schematic structural diagram of a CP device according to an embodiment of the present application;

fig. 10 is a schematic structural diagram of another CP device provided in an embodiment of the present application;

fig. 11 is a schematic structural diagram of an address assignment device according to an embodiment of the present application.

Detailed Description

The address allocation method, device and system provided by the embodiments of the present application are described in detail below with reference to the accompanying drawings.

A Broadband Remote Access Server (BRAS) is a new access gateway for broadband network applications, and is also called a Broadband Network Gateway (BNG) or a virtual BNG (virtual BNG, VBNG). The BRAS is typically deployed in a manner that separates CP devices from UP devices (segregated). In a BRAS where CP and UP are separately deployed (also referred to as CU separation), a plurality of UP devices are deployed in a distributed manner, where each UP device serves as a user plane of a BNG (or VBNG) and is used to implement forwarding of a user packet based on a user entry issued by a CP device and implement a traffic policy based on technologies such as quality of service (QoS) and Access Control List (ACL). The CP device can be implemented and centrally deployed by using a cloud technology, and serves as a control plane of a BNG (or VBNG) for implementing control and management of a client device (also referred to as a user) and unified management of multiple UP devices. For example, the CP device is mainly responsible for online, issuing configuration, and user table entry of the client device. The UP device may also be referred to as a forwarding plane device, and thus the CU separation may also be referred to as forwarding and control separation, i.e., forwarding and control separation. The system deployed in this CU-separated manner is also referred to as a CU-separated communication system or a re-control separated communication system.

Fig. 1 is a schematic structural diagram of a CU-separated communication system according to an embodiment of the present disclosure, and fig. 1 illustrates the communication system as a broadband remote access system. As shown in fig. 1, the system may include: authentication server 01, CP device 02 and at least one UP backup group 03, where each UP backup group 03 includes multiple UP devices, and the multiple UP devices are backup UP devices for each other. That is, each UP device of the plurality of UP devices may be a main UP device, and the other UP devices may be standby UP devices of the main UP device. The backup UP device can backup data in the main UP device, and when the main UP device fails, the backup UP device can take over the work of the main UP device, thereby ensuring the reliability of the UP device in work. For example, one UP backup group 03 is schematically shown in FIG. 1, and the UP backup group 03 includes a UP device 031 and a UP device 032. Wherein, the UP device 031 may be used as a standby UP device for the UP device 032, and the UP device 032 may also be used as a standby UP device for the UP device 031.

The CP device 02 is typically deployed in a Data Center (DC) room of an operator, also referred to as a core room; each UP device may be dispersedly deployed in different convergence rooms, also referred to as edge rooms. Also, the CP device 02 may include a plurality of Virtual Machines (VMs) deployed on a physical server. Each UP device 02 may be a physical UP (pUP) device of an entity, or may also be a virtual UP (vUP) device, for example, the UP device 02 may be a VM deployed on a physical server.

As shown in fig. 1, each UP device may establish a communication connection with CP device 02 through forwarding device 04, and each UP device may also establish a communication connection with a client device (not shown in fig. 1) through access device 05. The client device may also be referred to as a user equipment, and may be a home gateway (RGW), a mobile phone, a notebook computer, or a desktop computer. The forwarding device 04 may be a switch, a router, or the like, and may be a core layer router (CR), for example. The access device 05 may also be referred to as AN Access Node (AN). The access device 05 may be a Switch (SW), an Optical Line Terminal (OLT), a Digital Subscriber Line Access Multiplexer (DSLAM), or the like.

Alternatively, the authentication server 01 may be a Remote Authentication Dial In User Service (RADIUS) server. The authentication server 01 supports Authentication Authorization Accounting (AAA) protocols. As shown in fig. 1, the authentication server 01 establishes a communication connection with the CP device 02. After the CP device 02 completes interaction with a dial-UP protocol packet (also referred to as an access protocol packet) of the client device through the UP device, it may send an authentication request for the client device to the authentication server 01. The authentication server 01 may authenticate the client device, and may allocate an IP address to the client device after determining that the client device passes authentication, and send an authentication response carrying the IP address to the CP device 02. After receiving the authentication response, the CP device 02 may send the IP address to the client device through the UP device, and the client device may then access the network based on the IP address.

In the related communication system, because the UP devices in each UP backup group share the same IP address pool, the UP devices can issue network segment routes of the same IP address pool to the forwarding device 04. For example, referring to FIG. 2, assuming that the UP backup group includes UP device 031 and UP device 032, client device 1 comes on line from sub-interface 1(port1) of UP device 031 and client device 2 comes on line from sub-interface 2(port2) of UP device 032. Then for both client device 1 and client device 2, the authentication server 01 may assign an IP address for the client device in the pool of IP addresses shared by the UP backup group. For each UP backup group, the CP device 02 may further specify at least one high-priority UP device in the UP backup group, and the other UP devices are low-priority UP devices. Wherein, the priority of the routing information (such as network segment route) issued by the UP device with high priority is higher than that of the routing information issued by the UP device with low priority.

If, in the system shown in fig. 2, the UP device 031 is a high-priority UP device and the UP device 032 is a low-priority UP device, when the forwarding device 04 receives a packet addressed to the client device 2, the packet is sent to the UP device 031. Also, since the client device 2 is on-line from the UP device 032, the UP device 031 will forward the packet to the UP device 032 through the inter-UP protection tunnel, and then send the packet to the client device 2 through the UP device 032, thereby causing the downlink traffic to bypass. That is, in the solution in the related art, the downlink traffic of the client device on line from the low-priority UP device bypasses. The inter-UP protection tunnel may be a Label Switched Path (LSP) tunnel.

To avoid traffic detour, each UP device may also issue detailed routes from client devices that are on-line from the UP device when issuing routes to the forwarding device 04. The forwarding device 04 may further send the packet addressed to the client device to the UP device accessed by the client device based on the detailed route. However, since the number of client devices on line from each UP device is large, the amount of data when the UP device sends detailed routes is large, and the route distribution efficiency is low.

In the communication system provided in the embodiment of the present application, each UP device in the UP backup group corresponds to one IP address pool, and the IP address pools corresponding to different UP devices are different. That is, the UP devices in each UP backup group no longer share the same IP address pool. Correspondingly, when the authentication server 01 allocates an IP address to the client device, the IP address may be allocated to the client device from an IP address pool corresponding to the UP device accessed by the client device. And, when each UP device issues a network segment route to the forwarding device 04, it may issue a network segment route of its corresponding IP address pool. Therefore, when the forwarding device 04 receives a message addressed to a certain client device, the message can be sent to the UP device accessed by the client device based on the IP address pool to which the destination IP address of the message belongs, so that bypassing of downlink traffic can be avoided on the premise of not issuing detailed routes.

In the embodiment of the present application, each IP address pool includes a plurality of IP addresses of a network segment, and thus each IP address pool may also be referred to as a network segment.

Fig. 3 is a flowchart of an address allocation method according to an embodiment of the present application, where the method may be applied to a CU-separated communication system, for example, the communication system shown in fig. 1. The communication system comprises at least one UP backup group, and IP address pools corresponding to various UP devices in each UP backup group are different. Referring to fig. 3, the method includes:

step 101, the CP device sends an authentication request for instructing to authenticate the target client device to the authentication server, where the authentication request includes: indication information for indicating a target address pool corresponding to the target UP device.

Wherein, the target client device is online from the target UP device in the plurality of UP devices, that is, the target client accesses the network through the target UP device. In this embodiment of the present application, after the CP device completes the interaction of the dial-UP protocol packet with the target client device through the target UP device, it may generate an authentication request for instructing to authenticate the target client device, and send the authentication request to the authentication server.

Step 102, the authentication server sends an authentication response to the CP device, where the authentication response includes an IP address allocated to the target client device, and the IP address is included in a target address pool corresponding to the target UP device.

The authentication server may authenticate the target client device after receiving the authentication request. After determining that the target client device passes the authentication, the authentication server may determine a target address pool corresponding to the target UP device based on the indication information. Then, the authentication server can determine to allocate an IP address to the target client device from the target address pool, and send an authentication response carrying the IP address to the CP device.

After receiving the authentication response, the CP device may send the IP address carried in the authentication response to the target client device. The target client device may then access the network based on the IP address.

To sum UP, the embodiment of the present application provides an address allocation method, where an authentication request sent by a CP device includes indication information for indicating a target address pool corresponding to the target UP device. Thus, the authentication server can assign an IP address for the target client device from the target address pool corresponding to the target UP device based on the indication information. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device without forwarding through other UP devices in the UP backup group, thereby avoiding the bypass of downlink flow.

In this embodiment of the present application, in each UP backup group, the IP address pool corresponding to each UP device may be divided by the CP device 02, or may also be divided by the authentication server 01.

The following describes an address allocation method provided in the embodiment of the present application, taking an example that the IP address pool corresponding to each UP device is divided by the CP device 02. Referring to fig. 4, the method includes:

step 201, the CP device interacts a dial-UP protocol packet with the target client device through the target UP device.

In the embodiment of the application, when the target client device is on line based on the dial-UP protocol, the target client device may first interact with the CP device through the target UP device. The dial-up protocol may be a point to point protocol over Ethernet (PPPoE). Correspondingly, the dial-up protocol message may include: a PPPoE Active Discovery Initiation (PADI) message, a PPPoE active discovery service (PADO) message, a PPPoE Active Discovery Request (PADR) message, and a PPPoE Active Discovery Session (PADS) message, etc.

Step 202, the CP device determines the indication information for indicating the target address pool corresponding to the target UP device based on the corresponding relationship between the UP device and the address pool.

In this embodiment of the present application, the CP device may plan in advance an address pool corresponding to each UP device in each UP backup group, and generate and store a corresponding relationship between the UP device and the address pool. For example, the CP device may generate and store a correspondence of the identification of the UP device with the related information of the address pool. After the CP device completes the dial-UP protocol packet by interacting with the target client device through the target UP device, that is, after the CP device determines that the target client device is on-line from the target UP device, it may determine the related information of the target address pool corresponding to the target UP device based on the corresponding relationship, and determine the related information as the indication information. The related information of the address pool may be an identifier of the address pool, or may be a gateway address of the address pool. Correspondingly, the indication information determined by the CP device may be an identifier of the destination address pool or a gateway address of the destination address pool. The identifier of the address pool may be a name of the address pool, and the identifier of the UP device may be an IP address of the UP device.

For example, assume that the UP backup group in the communication system includes a UP device 031 and a UP device 032 as shown in FIG. 1. The correspondence between the IP address of the UP device stored in the CP device and the name of the address pool is shown in table 1. Referring to table 1, the IP address of the UP device 031: x.x.2 corresponding address pool name po 1, IP address of the UP device 032: the name of the address pool corresponding to 10.y.y.2 is poo 2. Assuming that the target client device goes online from the UP device 031, the CP device 02 may determine that the name of the target address pool corresponding to the target UP device 031 is poo1 based on the correspondence shown in table 1.

TABLE 1

IP address of UP device	Name of address pool
		10.x.x.2	pool1
10.y.y.2	pool2

Step 203, the CP device sends an authentication request to the authentication server, where the authentication request includes indication information.

After the CP device interacts with the target client device to complete the dial-up protocol packet, it needs to send an authentication request for instructing the authentication of the target client device to the authentication server. In the embodiment of the present application, the authentication request further includes indication information.

Optionally, the CP device may add a type-length-value (TLV) field in the authentication request to carry the indication information. For example, for a communication network supporting Internet protocol version 6 (IPv 6), the CP device 01 may add an IPv6 address Pool (Framed-IPv6-Pool) attribute, an IPv6 address Prefix (Framed-IPv6-Prefix) attribute, or a Prefix granted (PD) attribute to the authentication request to carry the indication information. For a communication network supporting the version 4 internet protocol (IP version 6, IPv4), the CP device 01 may add a new address Pool (frame-Pool) attribute in the authentication request, or add a gateway address attribute to carry the indication information.

For example, if the target client device goes online from the UP device 031, the UP device 031 corresponds to an address pool named pool1, and the gateway address of the address pool is 10. x.x.1. The name of the destination address pool may be included in the authentication request: pool1, or the authentication request may include the gateway address of the destination address pool: 10. x.x.1.

If the destination client device is on line from the UP device 032, the UP device 032 corresponds to the address pool named pool2, and the gateway address of the address pool is 10. y.y.1. The name of the destination address pool may be included in the authentication request: pool2, or the authentication request may include the gateway address of the destination address pool: 10. y.y.1.

Step 204, the authentication server determines the target address pool from the plurality of address pools according to the indication information.

In the embodiment of the present application, a plurality of address pools are stored in advance in the authentication server. After receiving the authentication request sent by the CP device, the authentication server may authenticate the target client device. And, the target address pool may be determined from a plurality of address pools stored therein based on the indication information after determining that the target client device is authenticated.

For example, assuming that the name of the target address pool carried in the authentication request is pool1, the authentication server may determine, as the target address pool, an address pool named pool1 from among a plurality of address pools that the authentication server stores.

Step 205, the authentication server determines the IP address allocated for the target client device from the pool of target addresses.

After the authentication server determines the target address pool, an IP address can be selected from the target address pool and allocated to the target client device. For example, the authentication server may randomly choose an IP address from IP addresses that have not been allocated in the destination address pool as the IP address of the destination client.

For example, assume that the destination address pool determined by the authentication server is the address pool named pool1, and the IP address range (i.e., network segment) included in the address pool named pool1 is 10.x.x.1 to 10. x.x.255. The authentication server may randomly choose an unassigned IP address from 10.x.x.1 to 10.x.x.255 as the IP address of the target client device. For example, the IP address assigned by the authentication server to the target client device may be 10. x.x.3.

In the embodiment of the present application, the CP device may plan the correspondence between the UP device and the address pool. Correspondingly, the authentication server only needs to store each address pool and determine the target address pool according to the indication information carried in the authentication request. Thereby, the data amount of data required to be stored in the authentication server is reduced, and the increase in complexity of data processing of the authentication server can be avoided.

Step 206, the authentication server sends an authentication response to the CP device, where the authentication response includes the IP address.

The authentication server may send an authentication response for the target client to the CP device, which may include the IP address assigned for the target client device. For example, the authentication response may include the IP address: 10. x.x.3.

Step 207, the CP device sends the IP address to the target client device through the target UP device.

After receiving the authentication response, the CP device may send the IP address to the target client device through the dial-UP protocol packet by the target UP device. The target client device may then access the network based on the IP address. For example, the CP device 02 may convert the IP address: x.x.3 is sent to the target client device through the UP device 031. The dial-up message protocol message may be a PPPoE message or a Dynamic Host Configuration Protocol (DHCP) message.

The IP addresses distributed by the authentication server for the target client device are all selected from the target address pool corresponding to the target UP device, and the target client device is on-line from the target UP device. Therefore, when the UP device issues a route to the forwarding device, even if only the network segment route of the address pool corresponding to the UP device is issued, but the detailed route of the client device is not issued, the downstream traffic sent by the subsequent forwarding device can be ensured not to bypass.

For example, referring to fig. 5, it is assumed that client device 1 comes on line from the UP device 031 in the UP backup group and client device 2 comes on line from the UP device 032 in the UP backup group. The authentication server 01 may allocate an IP address for client device 1 in the address pool named pool1 corresponding to the UP device 031 and may allocate an IP address for client device 2 in the address pool named pool2 corresponding to the UP device 032. Thus, it can be ensured that, for the client device 1, the UP device 031 in the UP backup group is an online UP device of the client device 1, and both the uplink traffic and the downlink traffic of the client device 1 are forwarded through the UP device 031. Similarly, for the client device 2, the UP device 032 in the UP backup group is an UP device on line of the client device 2, and the uplink traffic and the downlink traffic of the client device 2 are both forwarded through the UP device 032.

To sum UP, the embodiment of the present application provides an address allocation method, where an authentication request sent by a CP device includes indication information for indicating a target address pool corresponding to a target UP device. Thus, the authentication server can assign an IP address for the target client device from the target address pool corresponding to the target UP device based on the indication information. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device without forwarding through other UP devices in the UP backup group, thereby avoiding the bypass of downlink flow.

The following describes an address assignment method provided in the embodiment of the present application, taking an example that an IP address pool corresponding to each UP device is divided by the authentication server 01. Referring to fig. 6, the method includes:

step 301, the CP device interacts a dial-UP protocol packet with the target client device through the target UP device.

The implementation process of step 301 may refer to the related description of step 201, and is not described herein again.

Step 302, the CP device sends an authentication request to the authentication server, where the authentication request includes indication information.

After the CP device completes the dial-UP protocol packet by interacting with the target client device through the target UP device, that is, after the CP device determines that the target client device is on-line from the target UP device, it may send an authentication request for instructing to authenticate the target client device to the authentication server. In the embodiment of the present application, the authentication request further includes indication information. The indication may be an identification of the target UP device, for example, an IP address of the UP device. The implementation manner of carrying the identifier of the target UP device in the authentication request may refer to the related description in step 203, which is not described herein again.

For example, assume that the target client device goes online from the UP device 031, and the IP address of the UP device 031 is 10. x.x.2. The IP address of the target UP device may be included in the authentication request: 10. x.x.2.

Step 303, the authentication server determines a target address pool corresponding to the target UP device from the corresponding relationship between the UP device and the address pool according to the indication information.

In this embodiment of the present application, the authentication server may plan in advance an address pool corresponding to each UP device in each UP backup group, and generate and store a correspondence between the UP device and the address pool. For example, the authentication server can generate and store a correspondence of an identification (e.g., IP address) of the UP device with relevant information of the address pool. After receiving the authentication request, the authentication server may determine, based on the indication information carried in the authentication request, the relevant information of the target address pool corresponding to the target UP device from the corresponding relationship. The related information of the address pool may be an identifier of the address pool (e.g., a name of the address pool), or may be a gateway address of the address pool.

For example, it is assumed that the authentication server stores the corresponding relationship shown in table 1, and the IP address of the target UP device carried in the authentication request is 10. x.x.2. The authentication server may determine that the target address pool corresponding to the target UP device is the address pool named pool1 based on the correspondence shown in table 1.

In the embodiment of the present application, the authentication server may also plan the correspondence between the UP device and the address pool. Correspondingly, the CP device only needs to carry the identifier of the target UP device in the sent authentication request. Thereby, the data amount of data required to be stored in the CP device is reduced, and an increase in the complexity of data processing of the CP device can be avoided.

Step 304, the authentication server determines the IP address allocated for the target client device from the pool of target addresses.

The implementation process of step 304 may refer to the related description of step 205, which is not described herein again.

Step 305, the authentication server sends an authentication response to the CP device, the authentication response including the IP address.

The implementation process of step 305 may refer to the related description of step 206, and is not described herein again.

Step 306, the CP device sends the IP address to the target client device through the target UP device.

The implementation process of step 306 may refer to the related description of step 207, which is not described herein again.

Optionally, the order of the steps of the address allocation method provided in this embodiment may be appropriately adjusted, and the steps may also be increased or decreased according to the situation. Any method that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present application is covered by the protection scope of the present application, and thus the detailed description thereof is omitted.

Fig. 7 is a schematic structural diagram of an authentication server according to an embodiment of the present application, where the authentication server 01 may be applied to a CU-separated communication system, for example, the system shown in fig. 1 or fig. 5. As shown in fig. 1 and fig. 5, the communication system further includes a CP device 02 and a UP backup group 03, where the UP backup group 03 includes a plurality of UP devices, and IP address pools corresponding to the respective UP devices in the plurality of UP devices are different. The plurality of UP devices may include a primary UP device and a standby UP device. And the plurality of UP devices comprise at least one UP device with high priority and at least one UP device with low priority, and the priority of the routing information issued by the UP device with high priority is higher than that of the routing information issued by the UP device with low priority.

As shown in fig. 7, the authentication server 01 may include:

a receiving module 011, configured to receive an authentication request sent by the CP device 02 and indicating to authenticate a target client device, where the authentication request includes: indication information used for indicating a target address pool corresponding to the target UP device; wherein the target client device comes online from the target UP device of the plurality of UP devices. The function of the receiving module 011 can be implemented by referring to the related description of step 101, step 203 or step 302.

A sending module 012, configured to send an authentication response to the CP device according to the indication information, where the authentication response includes an IP address allocated to the target client device, and the IP address is included in a target address pool corresponding to the target UP device. The function of the transmitting module 012 can be implemented as described in step 102, step 206, or step 305.

As an optional implementation manner, the authentication server 01 stores a plurality of address pools, and the indication information may be an identifier of the target address pool or a gateway address of the target address pool. The transmitting module 012 may be configured to:

determining the target address pool from the plurality of address pools according to the indication information; and determining an IP address allocated for the target client device from the pool of target addresses.

The function of the transmitting module 012 can also be realized as described above with reference to step 204 and step 205.

As another optional implementation manner, the authentication server 01 stores a corresponding relationship between the UP device and the address pool, and the indication information may be an identifier of the target UP device, for example, an IP address of the target UP device. The transmitting module 012 may be configured to:

according to the indication information, determining a target address pool corresponding to the target UP device from the corresponding relation; and determining an IP address allocated for the target client device from the pool of target addresses.

The function of the transmitting module 012 can be implemented as described above with reference to steps 303 and 304.

In this implementation, as shown in fig. 8, the authentication server 01 may further include:

a generating module 013, configured to generate a correspondence between the UP device and the address pool.

To sum UP, the embodiment of the present application provides an authentication server, where an authentication request received by the authentication server includes indication information for indicating a target address pool corresponding to a target UP device. Thus, the authentication server can assign an IP address for the target client device from the target address pool corresponding to the target UP device based on the indication information. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device without forwarding through other UP devices in the UP backup group, thereby avoiding the bypass of downlink flow.

Fig. 9 is a schematic structural diagram of a CP device 02 according to an embodiment of the present application, where the CP device is applicable to a CU-separated communication system, for example, the CP device may be applied to the system shown in fig. 1 or fig. 5. Referring to fig. 1 and 5, the communication system further includes an authentication server 01 and a UP backup group 03, the UP backup group 03 includes a plurality of UP devices, and IP address pools corresponding to the UP devices are different. The plurality of UP devices may include a primary UP device and a standby UP device. And the plurality of UP devices comprise at least one UP device with high priority and at least one UP device with low priority, and the priority of the routing information issued by the UP device with high priority is higher than that of the routing information issued by the UP device with low priority.

As shown in fig. 9, the CP device 02 may include:

a sending module 021, configured to send, to the authentication server 01, an authentication request for indicating to authenticate a target client device, where the authentication request includes: and indication information for indicating a target address pool corresponding to the target UP device, wherein the target client device is on-line from the target UP device in the plurality of UP devices. The functional implementation of the sending module 021 can refer to the relevant description of step 101, step 203 or step 302.

A receiving module 022, configured to receive an authentication response sent by the authentication server 01, where the authentication response includes an IP address allocated to the target client device, and the IP address is included in a target address pool corresponding to the target UP device. The function of the receiving module 022 can be implemented by referring to the related description of step 102, step 206 or step 305.

As an optional implementation manner, the CP device 02 stores a corresponding relationship between the UP device and the address pool; the sending module 021 can be configured to:

based on the corresponding relation, determining the relevant information of the target address pool corresponding to the target UP device; wherein, the related information is the identifier of the target address pool or the gateway address of the target address pool. The functional implementation of the sending module 021 can also refer to the related description of step 202.

In this implementation, as shown in fig. 10, the CP device 02 may further include:

a generating module 023 configured to generate a corresponding relationship between the UP device and the address pool.

As another optional implementation manner, the authentication server 01 stores a correspondence between the UP device and the address pool. Accordingly, the indication information can be an identification of the target UP device, such as an IP address of the target UP device.

To sum UP, the embodiment of the present application provides a CP device, where an authentication request sent by the CP device includes indication information for indicating a target address pool corresponding to a target UP device. Thus, the authentication server can assign an IP address for the target client device from the target address pool corresponding to the target UP device based on the indication information. Because the IP address pools corresponding to the UP devices in the UP backup group are different, the forwarding device can be ensured to directly send the message to the target UP device after receiving the message sent to the target client device. And because the target client device is on line from the target UP device, the target UP device can directly send the message to the target client device without forwarding through other UP devices in the UP backup group, thereby avoiding the bypass of downlink flow.

It can be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working processes of the CP device, the authentication server and each module described above may refer to corresponding processes in the foregoing method embodiments, and are not described herein again.

It should be understood that the CP device and the authentication server provided in the embodiments of the present application may also be implemented by an application-specific integrated circuit (ASIC), or a Programmable Logic Device (PLD), which may be a Complex Programmable Logic Device (CPLD), a field-programmable gate array (FPGA), a General Array Logic (GAL), or any combination thereof. The address allocation method provided by the foregoing method embodiment may also be implemented by software, and when the address allocation method provided by the foregoing method embodiment is implemented by software, each module in the CP device and the authentication server may also be a software module.

Fig. 11 is a schematic structural diagram of an address assignment apparatus provided in an embodiment of the present application, where the apparatus 1000 may be applied to the authentication server 01 shown in fig. 7 or fig. 8, or may be applied to the CP device 02 shown in fig. 9 or fig. 10. Referring to fig. 11, the apparatus 1100 may include: a processor 1101, a memory 1102, a transceiver 1103, and a bus 1104. The bus 1104 is used to connect the processor 1101, the memory 1102 and the transceiver 1103. Communication connections with other devices may be made through the transceiver 1103 (which may be wired or wireless). The memory 1102 stores therein a computer program for implementing various application functions.

It should be understood that in the embodiments of the present application, the processor 1101 may be a CPU, and the processor 1101 may also be other general purpose processors, Digital Signal Processors (DSPs), ASICs, FPGAs, Graphics Processing Units (GPUs) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, and the like. A general purpose processor may be a microprocessor or any conventional processor or the like.

The memory 1102 may be either volatile memory or nonvolatile memory, or may include both volatile and nonvolatile memory. The non-volatile memory may be a read-only memory (ROM), a Programmable ROM (PROM), an Erasable PROM (EPROM), an electrically Erasable EPROM (EEPROM), or a flash memory. Volatile memory can be Random Access Memory (RAM), which acts as external cache memory. By way of example, but not limitation, many forms of RAM are available, such as static random access memory (static RAM, SRAM), Dynamic Random Access Memory (DRAM), Synchronous Dynamic Random Access Memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous SDRAM (ESDRAM), Synchronous Link DRAM (SLDRAM), and direct bus RAM (DR RAM).

The bus 1104 may include a power bus, a control bus, a status signal bus, and the like, in addition to the data bus. But for clarity of illustration the various busses are labeled in the drawings as bus 1104.

When the apparatus 1100 is applied to the authentication server 01, in a specific embodiment, the processor 1101 in the apparatus 1100 is configured to receive, through the communication interface, an authentication request sent by the CP device 02 for instructing authentication of a target client device, where the authentication request includes: indication information used for indicating a target address pool corresponding to the target UP device, and sending an authentication response to the CP device through the communication interface according to the indication information; the target client device is on-line from the target UP device in the UP devices, the authentication response includes an IP address allocated to the target client device, and the IP address is included in a target address pool corresponding to the target UP device. For a detailed processing procedure of the processor 1101, please refer to step 102 in the embodiment shown in fig. 3, step 204 to step 206 in the embodiment shown in fig. 4, and step 303 to step 305 in the embodiment shown in fig. 6, which are not described again here.

When the apparatus 1100 is applied to the CP device 02, in a specific embodiment, the processor 1101 in the apparatus 1100 is configured to send an authentication request for instructing authentication of a target client device to the authentication server 01 through the communication interface, where the authentication request includes: indication information for indicating a target address pool corresponding to the target UP device, and receiving an authentication response sent by the authentication server 01; the target client device is on-line from the target UP device in the UP devices, the authentication response includes an IP address allocated to the target client device, and the IP address is included in a target address pool corresponding to the target UP device. For a detailed processing procedure of the processor 1101, refer to step 101 in the embodiment shown in fig. 3, step 201 to step 203 and step 207 in the embodiment shown in fig. 4, and detailed descriptions of step 301, step 302 and step 306 in the embodiment shown in fig. 6, which are not described herein again.

The embodiment of the present application also provides a computer-readable storage medium, in which instructions are stored, where the instructions can be executed by a processor to implement the steps executed by the authentication server 01 in the above method embodiment.

Embodiments of the present application also provide a computer-readable storage medium, in which instructions are stored, where the instructions are executable by a processor to implement the steps performed by the CP device 02 in the above method embodiments.

The embodiments of the present application also provide a computer program product containing instructions, which when run on a computer, causes the computer to perform the steps performed by the authentication server 01 in the above method embodiments.

Embodiments of the present application further provide a computer program product containing instructions, which when run on a computer, cause the computer to perform the steps performed by the CP device 02 in the above method embodiments.

An embodiment of the present application further provides a CP and UP separated communication system, as shown in fig. 1 and fig. 5, the communication system may include: the system comprises an authentication server 01, a CP device 02 and a UP backup group 03, wherein the UP backup group 03 comprises a plurality of UP devices, and IP address pools corresponding to the UP devices in the UP devices are different.

The authentication server 01 may be the authentication server shown in fig. 7 or fig. 8, or include the device shown in fig. 11. The CP device 02 may be a device as shown in fig. 9 or fig. 10, or include an apparatus as shown in fig. 11.

The above embodiments may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, the above-described embodiments may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded or executed on a computer, cause the processes or functions described in accordance with the embodiments of the application to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website site, computer, server, or data center to another website site, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. that contains one or more collections of available media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. The semiconductor medium may be a Solid State Drive (SSD).

The term "at least one" is used herein to mean one or more, and the term "plurality" is used herein to mean two or more, e.g., multiple UP devices means two or more UP devices. The terms "system" and "network" are often used interchangeably herein.

The above description is only an alternative embodiment of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily conceive various equivalent modifications or substitutions within the technical scope of the present application, and these modifications or substitutions should be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. An address allocation method is applied to an authentication server in a communication system with a Control Plane (CP) and a User Plane (UP) separated, the communication system also comprises a CP device and an UP backup group, and the UP backup group comprises a plurality of UP devices; the method comprises the following steps:

receiving an authentication request sent by the CP device for indicating authentication of a target client device, wherein the authentication request comprises: indication information for indicating a target address pool corresponding to a target UP device, wherein the target client device is on-line from the target UP device in the UP devices, and the internet protocol IP address pools corresponding to the UP devices in the UP devices are different;

and sending an authentication response to the CP device according to the indication information, wherein the authentication response comprises an IP address distributed for the target client device, and the IP address is included in a target address pool corresponding to the target UP device.

2. The method according to claim 1, wherein a plurality of address pools are stored in the authentication server, and the indication information includes an identifier of the target address pool or a gateway address of the target address pool;

according to the indication information, sending an authentication response to the CP device, including:

determining the target address pool from the plurality of address pools according to the indication information;

determining an IP address allocated for the target client device from the pool of target addresses.

3. The method of claim 1 wherein the authentication server stores therein a correspondence between a UP device and an address pool, and wherein the indication information includes an identifier of the target UP device;

determining a target address pool corresponding to the target UP device from the corresponding relation according to the indication information;

4. The method of claim 3, further comprising:

and generating the corresponding relation between the UP device and the address pool.

5. The method of any of claims 1 to 4, wherein the plurality of UP devices comprise at least one high priority UP device and at least one low priority UP device, and wherein the routing information issued by the high priority UP device has a higher priority than the routing information issued by the low priority UP device.

6. An address allocation method is applied to CP equipment in a communication system with a Control Plane (CP) and a User Plane (UP) separated, the communication system also comprises an authentication server and an UP backup group, and the UP backup group comprises a plurality of UP equipment; the method comprises the following steps:

sending an authentication request to the authentication server indicating authentication of a target client device, the authentication request comprising: indication information for indicating a target address pool corresponding to a target UP device, wherein the target client device is on-line from the target UP device in the UP devices, and the internet protocol IP address pools corresponding to the UP devices in the UP devices are different;

and receiving an authentication response sent by the authentication server, wherein the authentication response comprises an IP address distributed to the target client equipment, and the IP address is included in a target address pool corresponding to the target UP equipment.

7. The method of claim 6 wherein the CP device stores a correspondence between the UP device and the address pool; sending an authentication request to the authentication server indicating authentication of a target client device, comprising:

and determining the indication information based on the corresponding relation, wherein the indication information is the identifier of the target address pool or the gateway address of the target address pool.

8. The method of claim 7, further comprising:

9. The method of claim 6 wherein the indication information is an identification of the target UP device.

10. An authentication server is applied to a communication system with a Control Plane (CP) and a User Plane (UP) separated from each other, the communication system further comprises a CP device and a UP backup group, and the UP backup group comprises a plurality of UP devices; the authentication server includes:

a receiving module, configured to receive an authentication request sent by the CP device and used for instructing to authenticate a target client device, where the authentication request includes: indication information for indicating a target address pool corresponding to a target UP device, wherein the target client device is on-line from the target UP device in the UP devices, and the internet protocol IP address pools corresponding to the UP devices in the UP devices are different;

a sending module, configured to send an authentication response to the CP device according to the indication information, where the authentication response includes an IP address allocated to the target client device, and the IP address is included in a target address pool corresponding to the target UP device.

11. The authentication server according to claim 10, wherein a plurality of address pools are stored in the authentication server, and the indication information includes an identification of the target address pool or a gateway address of the target address pool; the sending module is configured to:

12. The authentication server of claim 10, wherein the authentication server stores therein a correspondence between a UP device and an address pool, and wherein the indication information includes an identifier of the target UP device; the sending module is configured to:

13. The authentication server according to claim 12, wherein the authentication server further comprises:

and the generating module is used for generating the corresponding relation between the UP equipment and the address pool.

14. The authentication server of any one of claims 10 to 13, wherein the plurality of UP devices comprises at least one high priority UP device and at least one low priority UP device, and wherein the high priority UP device issues routing information with a higher priority than the low priority UP device issues routing information.

15. A control plane CP device is applied to a communication system with a CP and a User Plane (UP) separated, the communication system also comprises an authentication server and a UP backup group, and the UP backup group comprises a plurality of UP devices; the CP device includes:

a sending module configured to send an authentication request to the authentication server, the authentication request indicating that a target client device is authenticated, the authentication request including: indication information for indicating a target address pool corresponding to a target UP device, wherein the target client device is on-line from the target UP device in the UP devices, and the internet protocol IP address pools corresponding to the UP devices in the UP devices are different;

a receiving module, configured to receive an authentication response sent by the authentication server, where the authentication response includes an IP address allocated to the target client device, and the IP address is included in a target address pool corresponding to the target UP device.

16. The CP device of claim 15, wherein the CP device stores therein a correspondence between an UP device and an address pool; the sending module is configured to:

17. The CP apparatus of claim 16, wherein the CP apparatus further comprises:

18. The CP device of claim 15 wherein the indication information is an identification of the target UP device.

19. A computer-readable storage medium having instructions stored thereon for execution by a processor to implement the method of any one of claims 1 to 9.

20. A communication system with separation of a control plane CP and a user plane UP, the system comprising: the authentication server of any of claims 10 to 14, the CP device of any of claims 15 to 18, and a UP backup group, the UP backup group comprising a plurality of UP devices, each of the plurality of UP devices having a different pool of internet protocol IP addresses.