US20210044456A1

US20210044456A1 - Method for implementing gre tunnel, access point and gateway

Info

Publication number: US20210044456A1
Application number: US17/083,287
Authority: US
Inventors: Li XUE; Shanshan WANG; Zongpeng DU; Zhiwang Zhao
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2013-07-10
Filing date: 2020-10-28
Publication date: 2021-02-11
Also published as: US20220368563A1; US20160127148A1; EP3007389B1; CN105324961B; CN109921973A; WO2015003348A1; US11824685B2; EP3007389A4; ES2804676T3; EP3007389A1; EP3758307A1; CN105324961A; US10855491B2

Abstract

A method for implementing a GRE tunnel, an access point (AP), and a gateway (GW). The method includes: the AP receives a first packet, where the first packet carries an address of the GW; configures a GRE tunnel to the GW, where a source destination of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW; the AP receives a second packet sent by user equipment; performs GRE tunnel encapsulation for the second packet to form a third packet; and the AP sends the third packet to the GW by using the GRE tunnel, where the third packet carries the address of the AP. The embodiments of the present application enable efficient establishment of the GRE tunnel between the AP and the GW if there are a large quantity of APs.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No. 14/991,497, filed on Jan. 8, 2016, which is a continuation of International Application No. PCT/CN2013/079168, filed on Jul. 10, 2013. The disclosures of the aforementioned applications are hereby incorporated by reference in their entireties.

TECHNICAL FIELD

Embodiments of the present application relate to communications technologies, and in particular, to a method for implementing a GRE tunnel, an access point, and a gateway.

BACKGROUND

In actual network transmission, an operator usually implements service transmission for a user by configuring a tunnel, such as a virtual local area network (VLAN), and a pseudo wire (PW) tunnel. However, to configure these tunnels, a network and a network device must meet certain functional requirements. For example, when a PW tunnel is configured, both a provider edge device (Provider Edge, PE for short) and a provider core device (P device) on a network need to support label forwarding. Whereas a generic routing encapsulation (GRE) tunnel is a simple data tunnel, in which the tunnel configurations can be ensured only when the edge device of the tunnel is ensured. Therefore, the GRE technology receives extensive attention from equipment vendors and operators.
On a wireless local access network (WLAN), the GRE tunnel is especially useful. Generally, a WLAN network architecture includes an access point (AP), an access controller (AC), and a gateway (GW). The AP is a network element that is deployed on a side of a terminal and is accessed by the terminal. For example, a wireless fidelity (WiFi) hot spot is an AP. The AC is configured to control an access network element, for example, configuration of AP information. The AC may be deployed in a data transmission path and is responsible for routing and forwarding and may also be connected only to the GW and is responsible for access control. The GW, also referred to as a WLAN GW, is a WLAN gateway device and is responsible for managing a WLAN user. The WLAN GW includes functions of a broadband remote access server (BRAS)/a broadband network gateway (BNG) on an operator's network. It is a tendency in the future that a single WLAN GW is deployed to complete various management on the WLAN user, including accounting, policy, quality of service (QoS), and the like.
At present, the WLAN GW serves as a default WLAN gateway. User data of a terminal device of the WLAN, for example, user equipment (UE) or a personal computer (PC), is expected to be sent to the WLAN GW by using a Layer 2 network or a Layer 3 network. In this scenario, a generic data transmission mechanism needs to be provided. Because deployment of a PW and a VLAN has a certain functional requirement for the network and the network device between the AP and the WLAN GW, to reduce a requirement for a transmission network, many equipment vendors and operators all prefer implementing data routing between the AP and the WLAN GW by using the GRE technology.
However, in an existing GRE tunnel, it is necessary to configure addresses of a source node and a destination node as the destination addresses of the tunnel on the source node and the destination node of the GRE tunnel, that is, to implement static configuration of the GRE tunnel. It is very difficult to implement the static configuration due to a large quantity of APs. The configuration not only involves a heavy workload, but also is error-prone, thereby greatly increasing work costs for the operator.

SUMMARY

Embodiments of the present application provide a method for implementing a GRE tunnel, an access point, and a gateway.
According to a first aspect, an embodiment of the present application provides a method for implementing a generic routing encapsulation (GRE) tunnel, including:
receiving, by an access point (AP), a first packet, where the first packet carries an address of a gateway (GW);
configuring, by the AP a GRE tunnel to the GW, where a source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW;
receiving, by the AP, a second packet sent by user equipment;
performing, by the AP, GRE tunnel encapsulation for the second packet to form a third packet; and
sending, by the AP, the third packet to the GW by using the GRE tunnel, where the third packet carries the address of the AP.
In a first possible implementation manner of the first aspect, the receiving, by the AP, the first packet, where the first packet carries the address of a GW, includes:
receiving, by the AP, a Control And Provisioning of Wireless Access Points (CAPWAP) packet sent by an access controller (AC), where the CAPWAP packet carries the address of the GW.
With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner, the CAPWAP packet includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.
In a third possible implementation manner of the first aspect, the receiving, by the AP, the first packet, where the first packet carries the address of a GW, includes:
initiating, by the AP, a Remote Authentication Dial In User Service Radius access request to an authentication server through the GW; and
receiving, by the AP, a Radius access response returned by the GW, where the Radius access response carries the address of the GW.
With reference to the third possible implementation manner of the first aspect, in a fourth possible implementation manner, the Radius access response includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.
According to a second aspect, an embodiment of the present application provides a method for implementing a generic routing encapsulation (GRE) tunnel, including:
sending, by an access point (AP), a fourth packet to a gateway (GW), where the fourth packet carries an address of the AP, and the fourth packet is used to instruct the GW to configure a GRE tunnel to the AP, where a source address of the GRE tunnel is an address of the GW, and a destination address of the GRE tunnel is the address of the AP; and
receiving, by the AP, a fifth packet sent by the GW by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure a GRE tunnel to the GW.
In a first possible implementation manner of the second aspect, the sending, by the AP, the fourth packet to the GW, where the fourth packet carries the address of the AP, includes:
initiating, by the AP, a Radius access request to an authentication server by using the GW, where the Radius access request carries the address of the AP, so that the GW obtains the address of the AP from the Radius access request.
With reference to the first possible implementation manner of the second aspect, in a second possible implementation manner, the Radius access request includes at least an AP address configuration attribute, and the AP address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the AP address configuration attribute, and a value of the attribute value field is the address of the AP.
According to a third aspect, an embodiment of the present application provides a method for implementing a generic routing encapsulation (GRE) tunnel, including:
sending, by a gateway (GW), a first packet to an access point (AP), where the first packet carries an address of the GW, and the first packet is used to instruct the AP to configure a GRE tunnel to the GW, and a source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW; and
receiving, by the GW, a third packet sent by the AP by using the GRE tunnel, where the third packet carries the address of the AP, and the third packet is used to instruct the GW to configure a GRE tunnel to the AP.
In a first possible implementation manner of the third aspect, the sending, by the GW, the first packet to the AP, where the first packet carries the address of the GW, includes:
receiving, by the GW, a Radius access response returned by an authentication server, and sending the Radius access response that carries the address of the GW to the AP directly or by using an access controller AC.
With reference to the first possible implementation manner of the third aspect, in a second possible implementation manner, the Radius access response includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.
In a third possible implementation manner of the third aspect, the third packet is formed by performing GRE tunnel encapsulation for a second packet after the AP receives the second packet sent by user equipment.
According to a fourth aspect, an embodiment of the present application provides a method for implementing a generic routing encapsulation (GRE) tunnel, including:
receiving, by a gateway (GW), a fourth packet sent by an access point (AP), where the fourth packet carries an address of the AP;
configuring, by the GW, a GRE tunnel to the AP, where a source address of the GRE tunnel is an address of the GW, and a destination address of the GRE tunnel is the address of the AP; and
sending, by the GW, a fifth packet to the AP by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure a GRE tunnel to the GW.
According to a fifth aspect, an embodiment of the present application provides an access point, including:
a first receiving module, configured to receive a first packet, where the first packet carries an address of a gateway GW;
a first configuring module, configured to configure a GRE tunnel to the GW, where a source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW;
a second receiving module, configured to receive a second packet sent by user equipment;
an encapsulating module, configured to perform GRE tunnel encapsulation for the second packet to form a third packet; and
a first sending module, configured to send the third packet to the GW by using the GRE tunnel, where the third packet carries the address of the AP.
In a first possible implementation manner of the fifth aspect, the first receiving module is specifically configured to receive a Control And Provisioning of Wireless Access Points (CAPWAP) packet sent by an access controller AC, and the CAPWAP packet carries the address of the GW.
With reference to the first possible implementation manner of the fifth aspect, in a second possible implementation manner, the CAPWAP packet includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.
In a third possible implementation manner of the fifth aspect, the first receiving module is specifically configured to initiate a Radius access request to an authentication server by using the GW, and receive a Radius access response returned by the GW, where the Radius access response carries the address of the GW.
With reference to the third possible implementation manner of the fifth aspect, in a fourth possible implementation manner, the Radius access response includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.
According to a sixth aspect, an embodiment of the present application provides an access point, including:
a second sending module, configured to send a fourth packet to a gateway (GW), where the fourth packet carries an address of an AP, and the fourth packet is used to instruct the GW to configure a GRE tunnel to the AP, where a source address of the GRE tunnel is an address of the GW, and a destination address of the GRE tunnel is the address of the AP; and
a third receiving module, configured to receive a fifth packet sent by the GW by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure the GRE tunnel to the GW.
In a first possible implementation manner of the sixth aspect, the second sending module is specifically configured to initiate a Radius access request to an authentication server by using the GW, where the Radius access request carries an address of the AP, so that the GW obtains the address of the AP from the Radius access request.
With reference to the first possible implementation manner of the sixth aspect, in a second possible implementation manner, the Radius access request includes at least an AP address configuration attribute, and the AP address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the AP address configuration attribute, and a value of the attribute value field is the address of the AP.
According to a seventh aspect, an embodiment of the present application provides a gateway, including:
a third sending module, configured to send a first packet to an access point AP, where the first packet carries an address of a GW, and the first packet is used to instruct the AP to configure a GRE tunnel to the GW, where a source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW; and
a fourth receiving module, configured to receive a third packet sent by the AP by using the GRE tunnel, where the third packet carries the address of the AP, and the third packet is used to instruct the GW to configure a GRE tunnel to the AP.
In a first possible implementation manner of the seventh aspect, the third sending module is specifically configured to receive a Radius access response returned by an authentication server, and send the Radius access response that carries the address of the GW to the AP directly or by using an access controller (AC).
With reference to the first possible implementation manner of the seventh aspect, in a second possible implementation manner, the Radius access response includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.
In a third possible implementation manner of the seventh aspect, the third packet is formed by performing GRE tunnel encapsulation for a second packet after the AP receives the second packet sent by user equipment.
According to an eighth aspect, an embodiment of the present application provides a gateway (GW), including:
a fifth receiving module, configured to receive a fourth packet sent by an access point (AP), where the fourth packet carries an address of the AP;
a second configuring module, configured to configure a GRE tunnel to the AP, where a source address of the GRE tunnel is an address of the GW, and a destination address of the GRE tunnel is the address of the AP; and
a fourth sending module, configured to send a fifth packet to the AP by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure a GRE tunnel to the GW.
Embodiments of the present application provide a method for implementing a GRE tunnel, an access point, and a gateway. There is no need to separately store an address of a peer end in an AP and a GW by using static configuration. Instead, the AP and the GW obtain and store the address of the peer end in a dynamic interaction process. In addition, data interacted in the GRE tunnel is encapsulated and sent by using the address of the peer end as a destination address without a need to maintain a status of the GRE tunnel. Therefore, a dynamic GRE tunnel can be flexibly and easily established, and signaling costs are low.

BRIEF DESCRIPTION OF DRAWINGS

To describe the technical solutions in the embodiments of the present application more clearly, the following briefly describes the accompanying drawings required for describing the embodiments. Apparently, the accompanying drawings in the following description show merely some embodiments of the present application, and a person of ordinary skill in the art may still derive other drawings from these accompanying drawings without creative efforts.

FIG. 1 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 1 of the present application;

FIG. 2A is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 2 of the present application;

FIG. 2B to FIG. 2D are schematic diagrams of a network architecture that is applicable to Embodiment 2 of the present application;

FIG. 3A is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 3 of the present application;

FIG. 3B is a schematic structural diagram of a heterogeneous access network that is applicable to Embodiment 3 of the present application;

FIG. 4 is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 4 of the present application;

FIG. 5 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 5 of the present application;

FIG. 6 is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 6 of the present application;

FIG. 7 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 7 of the present application;

FIG. 8 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 8 of the present application;

FIG. 9 is a schematic structural diagram of an access point according to Embodiment 9 of the present application;

FIG. 10 is a schematic structural diagram of an access point according to Embodiment 10 of the present application;

FIG. 11 is a schematic structural diagram of a gateway according to Embodiment 11 of the present application;

FIG. 12 is a schematic structural diagram of a gateway according to Embodiment 12 of the present application;

FIG. 13 is a schematic structural diagram of an access point according to Embodiment 13 of the present application; and

FIG. 14 is a schematic structural diagram of a gateway according to Embodiment 14 of the present application.

DESCRIPTION OF EMBODIMENTS

The following clearly describes the technical solutions in the embodiments of the present application with reference to the accompanying drawings in the embodiments of the present application. Apparently, the described embodiments are merely a part rather than all of the embodiments of the present application. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without creative efforts shall fall within the protection scope of the present application.

Embodiment 1

FIG. 1 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 1 of the present application. The method may be applicable to establishment of a GRE tunnel between an AP and a GW. There are multiple types of network architectures that include the AP and the GW. These architectures are all applicable to a technical solution of this embodiment. For example, this embodiment is applicable to establishment of a GRE tunnel in a scenario of a heterogeneous access network, and is also applicable to establishment of a GRE tunnel in a scenario of a WLAN network. Specific implementation solutions under a variety of network architectures are described in detail in subsequent embodiments.
The method of this embodiment may be implemented by an access point on a terminal side. As shown in FIG. 1, the method may be performed according to the following process:
101: The AP receives a first packet, where the first packet carries an address of the GW.
102: The AP configures a GRE tunnel to the GW, where a source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW.
103: The AP receives a second packet sent by user equipment.
104: The AP performs GRE tunnel encapsulation for the second packet to form a third packet.
105: The AP sends the third packet to the GW by using the GRE tunnel, where the third packet carries the address of the AP.
In the technical solution of this embodiment, the first packet may be a newly-defined packet, and may also use a conventional packet that used in various interaction processes, for example, a packet based on the Control And Provisioning of Wireless Access Points (CAPWAP), and a packet in a process of Radius authentication, so long as the packet enables the AP and the GW to obtain corresponding addresses. In this embodiment, there is no need to separately store an address of a peer end in the AP and the GW by using static configuration. Instead, the AP and the GW obtain and store the address of the peer end in a dynamic interaction process. In addition, data interacted in the GRE tunnel is actually encapsulated and sent by using the address of the peer end as a destination address without a need to maintain a status of the GRE tunnel. Therefore, a dynamic GRE tunnel can be flexibly and easily established, and signaling costs are low.
The technical solution of this embodiment of the present application may be applicable to a variety of network architectures, and be implemented by using an existing process. Details are described as follows:

Embodiment 2

FIG. 2A is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 2 of the present application. FIG. 2B to FIG. 2D are schematic diagrams of a network architecture that is applicable to Embodiment 2 of the present application. As shown in FIG. 2B, FIG. 2C, and FIG. 2D, the network is a WLAN network that mainly includes an AP, an AC, and a GW. In FIG. 2B, the AC is in bypass mode, and data is forwarded by each AP. In FIG. 2C, the AC is located in a data forwarding path, the data transmitted by each AP is collectively forwarded by the AC. In FIG. 2D, the AC and the GW are integrated, which means that the GW combines a function of the AC; alternatively, the AC may be integrated with the AP, and the function of the AC is implemented by the AP.
With regard to a network condition of the WLAN, in this embodiment, the AP specifically obtains an address of the GW by using a packet interacted between the AP and the AC.
201: The AP initiates a CAPWAP discovery and registration process to the AC.
After the AP powers on and starts, the AP initiates the CAPWAP discovery and registration process to the AC.
202: The AC sends a CAPWAP packet that carries the address of the GW to the AP.
In a data negotiation process between the AP and the AC, the AC configures the address of the GW for the AP by using a CAPWAP protocol.
203: The AP obtains the address of the GW from the CAPWAP packet.
In 203, the AP receives the CAPWAP packet sent by the AC, and obtains the address of the GW from the CAPWAP packet. Herein, the CAPWAP packet is equivalent to a first packet, and the AP may obtain the address of the GW from the first packet. In different network architectures, the CAPWAP packet may be sent by the AC, or by a network element that functions as the AC.
In the foregoing embodiment, the AP receives the CAPWAP packet sent by the AC, where the CAPWAP packet carries the address of the GW. The CAPWAP packet is used to configure the address of the GW for the AP; therefore, no additional process is required, and this facilitates improvement and popularization.
This embodiment may specifically implement the configuration of the address of the GW by adding an attribute to a CAPWAP packet. The CAPWAP packet includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW. For example, the CAPWAP packet may be a configuration state response packet in the CAPWAP. The packet carries the GW address configuration attribute, that is, a GW Address element.
A format of the CAWWAP configuration state response packet is as follows:
A format of the GW Address element is defined as follows:
Type indicates that a type of the element is GW Address element, and a value that does not conflict with RFC5415 can be selected. Length indicates a length of the value. The value is, for example, an IP address of the GW. The IP address may be an IPv4 address or an IPv6 address. When load balancing is used, the value may be a plurality of GW addresses that implement the load balancing and a cost value of the GW.

Embodiment 3

FIG. 3A is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 3 of the present application. This embodiment provides another implementation manner that an AP obtains an address of a GW. As shown in FIG. 3A, the method includes the following:
301: The AP sends a Radius access request to the GW.
Specifically, when the AP powers on and starts, the AP initiates a user access authentication process, that is, the AP sends the Radius access request.
302: The GW forwards the Radius access request to an authentication server.
303: The authentication server sends a Radius access response to the GW.
304: The GW sends the Radius access response that carries the address of the GW to the AP.
305: The AP obtains the address of the GW from the Radius access response that carries the address of the GW.
In the foregoing embodiment, the AP initiates the Radius access request to the authentication server by using the GW; and the AP receives the Radius access response returned by the GW, where the Radius access response carries the address of the GW. The foregoing solution may be applicable to a WLAN network shown in FIG. 2B to FIG. 2D, and may also be applicable to a heterogeneous access network. On the WLAN network shown in FIG. 2C, only a rule that the AC forwards a Radius access request to the GW and that the AC forwards a Radius access response to the AP need to be added. Details are not described herein again.
Aggregation of the AC and the GW on the WLAN network is used as an example. As shown in FIG. 2D, the AP initiates a Radius access request to the authentication server by using the GW. The authentication server may be an authentication authorization accounting (AAA) proxy. That is, after the AP initiates a user authentication process to the GW, the GW initiates the Radius access request to the authentication server. When the authentication server returns the Radius access response to the AP by using the GW, the GW includes its own address in the Radius access response, and the AP obtains the address of the GW from the Radius access response after the AP receives the Radius access response.
FIG. 3B is a schematic structural diagram of the heterogeneous access network that is applicable to Embodiment 3 of the present application. As shown in FIG. 3B, the network includes: a home gateway (HG), an access network A and an access network B that run different network protocols, a gateway A, a gateway B, and an aggregation gateway (AG). The HG is equivalent to the AP, and the AG is equivalent to the GW. An independent AC may not be set; instead, a function of the AC may be integrated into another network element. The heterogeneous access network mainly refers to an access network of an aggregation architecture that is formed by interconnecting access networks running different network protocols, for example, an access network formed by interconnection of different protocol clusters such as the Transmission Control Protocol (TCP)/Internet Protocol (IP), and the Internetwork Packet Exchange protocol (IPX)/Sequenced Packet Exchange protocol (SPX). User access bandwidth may be enhanced by binding multiple links.
In a scenario of the heterogeneous access network, the HG initiates the Radius access request to the authentication server by using the AG. When the Radius access response returned by the authentication server is returned to the HG by using the AG, the AG includes its own address in the Radius access response, and the HG obtains the address of the AG from the Radius access response.
In this embodiment, the Radius access response includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW. An advantage in doing this is that it may reduce a signaling overhead for establishing a GRE tunnel, and improve efficiency in establishing the GRE tunnel. For example, the GW address configuration attribute included in the Radius access response may be an extended Radius attribute that carries the address of the GW. A format of the attribute is:
A value of Type is a reserved value. Length indicates a length of a string. String indicates, for example, an IP address of the GW. The address may be an IPv4 address or an IPv6 address.

Embodiment 4

FIG. 4 is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 4 of the present application. The method provides a manner for configuring an address of an AP for a GW. As shown in FIG. 4, the method may include the following:
401: User equipment sends a second packet to the AP.
402: The AP performs GRE tunnel encapsulation for the second packet to form a third packet, where an address of the GW is a destination address of the GRE encapsulation.
403: The AP sends the third packet to the GW.
404: The GW learns the address of the AP from the third packet.
In the foregoing embodiment, after the address of the GW is configured as a destination address of the GRE tunnel on an AP side, the AP encapsulates and sends upstream data to be sent, so that the GW obtains the address of the AP from the upstream data, where the destination address of the GRE tunnel on the AP side is adopted as the destination address of the encapsulation. This embodiment may also be applicable to the scenarios shown in FIG. 2B to FIG. 2D, and may also be applicable to the heterogeneous access network shown in FIG. 3B.

Embodiment 5

FIG. 5 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 5 of the present application. This method may also be applicable to a variety of network architectures of an AP and a GW. The method of this embodiment may be implemented by an access point on a terminal side. As shown in FIG. 5, the method may be performed according to the following process:
501: The AP sends a fourth packet to the GW, where the fourth packet carries an address of the AP, and the fourth packet is used to instruct the GW to configure a GRE tunnel to the AP, and a source address of the GRE tunnel is an address of the GW, and a destination address of the GRE tunnel is the address of the AP.
502: The AP receives a fifth packet sent by the GW by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure a GRE tunnel to the GW.
In a technical solution of this embodiment, the fourth packet may be a newly-defined packet, and may also use an existing packet in various interaction processes, for example, a CAPWAP-based packet, and a packet in a process of Radius authentication, so long as the packet enables the AP and the GW to obtain corresponding addresses. In this embodiment, there is no need to separately store an address of a peer end in the AP and the GW by using static configuration. Instead, the AP and the GW obtain and store the address of the peer end in a dynamic interaction process. In addition, data interacted in the GRE tunnel is actually encapsulated and sent by using the address of the peer end as a destination address without a need to maintain a status of the GRE tunnel. Therefore, a dynamic GRE tunnel can be flexibly and easily established, and signaling costs are low.
The technical solution of this embodiment of the present application may be applicable to a variety of network architectures, and be implemented by using an existing process. Details are described as follows:

Embodiment 6

FIG. 6 is a signaling flowchart of a method for implementing a GRE tunnel according to Embodiment 6 of the present application. As shown in FIG. 6, this embodiment provides a manner used by a GW to obtain an address of an AP. The method specially includes:
601: The AP sends a Radius access request that carries the address of the AP to the GW.
602: The GW obtains the address of the AP from the Radius access request.
603: The GW forwards the Radius access request to an authentication server.
In the foregoing embodiment, the AP initiates the Radius access request to the authentication server by using the GW, where the Radius access request carries the address of the AP, so that the GW obtains the address of the AP from the Radius access request. The foregoing solution may be applicable to the WLAN network shown in FIG. 2B to FIG. 2D, and may also be applicable to the heterogeneous access network shown in FIG. 3B.
An AC that is deployed in a data transmission path on a WLAN network and is responsible for route forwarding is used as an example. As shown in FIG. 2C, when the AP accesses the WLAN network, the AC completes a user authentication process. That is, the AP initiates, by using the AC, the Radius access request to the authentication server by using the GW, and the AP includes its own address in the Radius access request. The GW obtains the address of the AP from the Radius access request when the Radius access request passes the GW.
In a scenario of the heterogeneous access network, when an HG initiates the Radius access request to the authentication server by using an AG, the HG includes its own address in the Radius access request. The AG obtains the address of the HG from the Radius access request when the Radius access request passes the AG.
In this embodiment, the Radius access request includes at least an AP address configuration attribute, and the AP address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the AP address configuration attribute, and a value of the attribute value field is the address of the AP. An advantage in doing this is that it may reduce a signaling overhead for establishing the GRE tunnel, and improve efficiency in establishing the GRE tunnel. For example, the AP address configuration attribute included in the Radius access request may be an extended Radius attribute that carries the address of the AP. A format of the attribute is:
A value of Type is a reserved value. Length indicates a length of a string. String indicates, for example, an IP address of the AP. The address may be an IPv4 address or an IPv6 address.
Optionally, on the basis of the foregoing embodiment, if the AP obtains two or more addresses of the GW, the AP obtains an access cost of each GW from a first address configuration message, and selects a GW with a lower access cost. The AP configures an address of the GW with a lower access cost locally as a destination address of the GRE tunnel.

Embodiment 7

FIG. 7 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 7 of the present application. The method may be applicable to establishment of a GRE tunnel between an AP and a GW. There are a variety of network architectures that include the AP and the GW. The network architectures may all be applicable to a technical solution of this embodiment. The method of this embodiment may be implemented by a GW on a network side. As shown in FIG. 7, the method may be performed according to the following process:
701: The GW sends a first packet to the AP, where the first packet carries an address of the GW, and the first packet is used to instruct the AP to configure a GRE tunnel to the GW. A source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW.
702: The GW receives a third packet sent by the AP by using the GRE tunnel, where the third packet carries the address of the AP, and the third packet is used to instruct the GW to configure a GRE tunnel to the AP.
In this embodiment, the first packet may be a newly-defined packet, and may also use an existing packet in various interaction processes, for example, a CAPWAP-based packet and a packet in a process of Radius authentication, so long as the packet enables the AP and the GW to obtain corresponding addresses. In this embodiment, there is no need to separately store an address of a peer end in the AP and the GW by using static configuration. Instead, the AP and the GW obtain and store the address of the peer end in a dynamic interaction process. In addition, data interacted in the GRE tunnel is actually encapsulated and sent by using the address of the peer end as a destination address without a need to maintain a status of the GRE tunnel. Therefore, a dynamic GRE tunnel can be flexibly and easily established, and signaling costs are low.
That the GW sends a first packet to the AP may specifically be: the GW receives a Radius access response returned by an authentication server, and sends the Radius access response that carries the address of the GW to the AP directly or by using an AC. Refer to the process described in the foregoing Embodiment 3. Details are not described herein again.
In this embodiment, the Radius access response includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW. Refer to the process of Embodiment 3. Details are not described herein again.
That the GW receives a third packet sent by the AP may specifically be: the GW receives upstream data sent by the AP by using the GRE tunnel, where a destination address for encapsulating the upstream data is the address of the GW, and the GW obtains, by parsing, the address of the AP from the upstream data. That is, the third packet is formed by encapsulating the upstream data; in other words, the third packet is formed by performing GRE tunnel encapsulation for a second packet after the AP receives the second packet sent by user equipment. Refer to the process described in the foregoing Embodiment 4. Details are not described herein again.

Embodiment 8

FIG. 8 is a flowchart of a method for implementing a GRE tunnel according to Embodiment 8 of the present application. The method may be applicable to establishment of the GRE tunnel between an AP and a GW. There are a variety of network architectures that include the AP and the GW, and the network architectures may all be applicable to a technical solution of the embodiment. The method of this embodiment may be implemented by a GW on a network side. As shown in FIG. 8, the method may be performed according to the following process:
801: The GW receives a fourth packet sent by the AP, where the fourth packet carries an address of the AP.
802: The GW configure a GRE tunnel to the AP, where a source address of the GRE tunnel is an address of the GW, and a destination address the GRE tunnel is the address of the AP.
803: The GW sends a fifth packet to the AP by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure the GRE tunnel to the GW.
In this embodiment, the fourth packet may be a newly-defined packet, and may also use an existing packet in various interaction processes, for example, a CAPWAP-based packet, and a packet in a process of Radius authentication, so long as the packet enables the AP and the GW to obtain corresponding addresses. In this embodiment, there is no need to separately store an address of a peer end in the AP and the GW by using static configuration. Instead, the AP and the GW obtain and store the address of the peer end in a dynamic interaction process. In addition, data interacted in the GRE tunnel is actually encapsulated and sent by using the address of the peer end as a destination address without a need to maintain a status of the GRE tunnel. Therefore, a dynamic GRE tunnel can be flexibly and easily established, and signaling costs are low.
That the GW receives a fourth packet sent by the AP may specifically be: the GW receives a Radius access response returned by an authentication server, and the GW sends the Radius access response that carries the address of the GW to the AP directly or by using an AC, so that the AP obtains the address of the GW from the Radius access response. Refer to the process described in the foregoing Embodiment 3. Details are not described herein again.
Optionally, on the basis of the foregoing embodiment, the method may further include: the GW sends its own access cost to the AP, so that the AP selects a GW according to access costs of at least two GWs. Specifically, to prevent a data transmission failure of the GRE tunnel caused by a fault, multiple GRE tunnels may be configured for the AP. In this case, when the AP selects the GRE tunnel to transmit data, it may weigh and preferentially select, according to an access cost (for example, a cost value) of a GW at the peer end of the GRE tunnel, a GRE tunnel with a lower access cost. An advantage in doing this is that it may provide an alternative GRE tunnel for data transmission, and ensure reliability of the data transmission.
Optionally, on the basis of the foregoing embodiment, the address of the AP or the address of the GW may be an IP address of the AP or an IP address of the GW.

Embodiment 9

FIG. 9 is a schematic structural diagram of an access point according to Embodiment 9 of the present application. As shown in FIG. 9, the access point may include: a first receiving module 91, a first configuring module 92, a second receiving module 93, an encapsulating module 94, and a first sending module 95, where the first receiving module 91 may be configured to receive a first packet, and the first packet carries an address of a GW; the first configuring module 92 may be configured to configure a GRE tunnel to the GW, where a source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW; the second receiving module 93 may be configured to receive a second packet sent by user equipment; the encapsulating module 94 may be configured to perform the GRE tunnel encapsulation for the second packet to form a third packet; and the first sending module 95 may be configured to send the third packet to the GW by using the GRE tunnel, where the third packet carries the address of the AP.
Optionally, the first receiving module 91 is specifically configured to receive a Control and Provisioning of Wireless Access Points CAPWAP packet sent by an AC, where the CAPWAP packet carries the address of the GW.
Optionally, the CAPWAP packet includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW
Optionally, the first receiving module 91 is specifically configured to initiate a Radius access request to an authentication server by using the GW, and receive a Radius access response returned by the GW, where the Radius access response carries the address of the GW.
Optionally, the Radius access response includes at least the GW address configuration attribute, and the GW address configuration attribute includes the type field, the length field, and the attribute value field, where the value of the type field is used to identify the attribute as the GW address configuration attribute, and the value of the attribute value field is the address of the GW.
An apparatus in this embodiment may be used to perform the technical solution in method embodiments shown in FIG. 1 to FIG. 4. For a specific function, refer to the foregoing method embodiments. Details are not described herein again.

Embodiment 10

FIG. 10 is a schematic structural diagram of an access point according to Embodiment 10 of the present application. As shown in FIG. 10, the access point may include: a second sending module 1001 and a third receiving module 1002, where the second sending module 1001 may be configured to send a fourth packet to a GW, and the fourth packet carries an address of an AP and is used to instruct the GW to configure a GRE tunnel to the AP, where a source address of the GRE tunnel is an address the GW, and a destination address of the GRE tunnel is the address of the AP. The third receiving module 1002 may be configured to receive a fifth packet sent by the GW by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure a GRE tunnel to the GW.
Optionally, the second sending module 1001 is specifically configured to initiate a Radius access request to an authentication server via the GW, where the Radius access request carries the address of the AP, so that the GW obtains the address of the AP from the Radius access request.
Optionally, the Radius access request includes at least an AP address configuration attribute, and the AP address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the AP address configuration attribute, and a value of the attribute value field is the address of the AP.
An apparatus of this embodiment may be used to perform the technical solution in method embodiments shown in FIG. 5 and FIG. 6. For a specific function, refer to the foregoing method embodiments. Details are not described herein again.

Embodiment 11

FIG. 11 is a schematic structural diagram of a gateway according to Embodiment 11 of the present application. As shown in FIG. 11, the gateway may include: a third sending module 1101 and a fourth receiving module 1102, where the third sending module 1101 may be configured to send a first packet to an access point AP, and the first packet carries an address of the GW and is used to instruct the AP configure a GRE tunnel to the GW, where a source address of the GRE tunnel is an address the AP, and a destination address of the GRE tunnel is the address of the GW The fourth receiving module 1102 may be configured to receive a third packet sent by the AP by using the GRE tunnel, where the third packet carries the address of the AP, and the third packet is used to instruct the GW to configure a GRE tunnel to the AP.
Optionally, the third sending module 1101 is specifically configured to receive a Radius access response returned by an authentication server, and send the Radius access response that carries the address of the GW to the AP directly or by using an access controller AC.
Optionally, the Radius access response includes at least a GW address configuration attribute, and the GW address configuration attribute includes a type field, a length field, and an attribute value field, where a value of the type field is used to identify the attribute as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.
Optionally, the third packet is formed by performing GRE tunnel encapsulation for a second packet after the AP receives the second packet sent by user equipment.
An apparatus in this embodiment may be used to perform the technical solution in the method embodiment shown in FIG. 7. For a specific function, refer to the foregoing method embodiment. Details are not described herein again.

Embodiment 12

FIG. 12 is a schematic structural diagram of a gateway according to Embodiment 12 of the present application. As shown in FIG. 12, the gateway may include: a fifth receiving module 1201, a second configuring module 1202, and a fourth sending module 1203. The fifth receiving module 1201 may be configured to receive a fourth packet sent by an access point AP, and the fourth packet carries an address of the AP. The second configuring module 1202 may be configured to configure a GRE tunnel to the AP, where a source address of the GRE tunnel is an address of a GW, and a destination address of the GRE tunnel is the address of the AP. The fourth sending module 1203 may be configured to send a fifth packet to the AP by using the GRE tunnel, where the fifth packet carries the address of the GW, and the fifth packet is used to instruct the AP to configure a GRE tunnel to the GW.
An apparatus in this embodiment may be used to perform the technical solution in the method embodiment shown in FIG. 8. For a specific function, refer to the foregoing method embodiment. Details are not described herein again.

Embodiment 13

FIG. 13 is a schematic structural diagram of an access point according to Embodiment 13 of the present application. As shown in FIG. 13, the access point may include: a transmitter 1301, a receiver 1302, a memory 1303, and a processor 1304 that is separately connected to the transmitter 1301, the receiver 1302, and the memory 1303. The memory 1303 stores a group of program code, and the processor 1304 is configured to invoke the program code stored in the memory 1303, which may perform the technical solution in the method embodiments shown in FIG. 1 to FIG. 6. For a specific function, refer to the foregoing method embodiments. Details are not described herein again.

Embodiment 14

FIG. 14 is a schematic structural diagram of a gateway according to Embodiment 14 of the present application. As shown in FIG. 14, the access point may include: a transmitter 1401, a receiver 1402, a memory 1403, and a processor 1404 that is separately connected to the transmitter 1401, the receiver 1402, and memory 1403. The memory 1403 stores a group of program code, and the processor 1404 is configured to invoke the program code stored in the memory 1403, which may perform the technical solutions in the method embodiments shown in FIG. 7 and FIG. 8. For a specific function, refer to the foregoing method embodiments. Details are not described herein again.
A person of ordinary skill in the art may understand that all or a part of the method embodiments may be implemented by a program instructing relevant hardware. The foregoing program may be stored in a computer readable storage medium. When the program runs, the method embodiments are performed. The foregoing storage medium includes any medium that may store program code, such as a ROM, a RAM, a magnetic disk, or an optical disc.
Finally, it should be noted that the foregoing embodiments are merely intended for describing the technical solutions of the present application, other than limiting the present application. Although the present application is described in detail with reference to the foregoing embodiments, persons of ordinary skill in the art should understand that they may still make modifications to the technical solutions described in the foregoing embodiments, or make equivalent substitutions to some or all the technical features thereof, without departing from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

What is claimed is:

1. A method for implementing a generic routing encapsulation (GRE) tunnel by an access point (AP), comprising:

receiving a Control And Provisioning of Wireless Access Points (CAPWAP) packet sent by an access controller (AC), wherein the CAPWAP packet carries an address of a gateway (GW);

configuring a GRE tunnel from the AP to the GW, wherein a source address of the GRE tunnel is an address of the AP, and a destination address of the GRE tunnel is the address of the GW;

receiving a packet sent by a user equipment;

performing GRE tunnel encapsulation for the packet sent by the user equipment to form a encapsulated packet; and

sending the encapsulated packet to the GW by using the GRE tunnel.

2. The method according to claim 1, wherein the CAPWAP packet comprises a GW address configuration attribute, and the GW address configuration attribute comprises a type field, and an attribute value field, wherein a value of the type field is used to identify the attribute field as the GW address configuration attribute, and a value of the attribute value field is the address of the GW

3. An access point (AP), comprising:

a processor; and

a non-transitory computer readable medium which contains computer-executable instructions that, when executed by the processor, causes the AP to perform the steps of:

receiving a Control And Provisioning of Wireless Access Points (CAPWAP) packet sent by an access controller (AC) that carries an address of a gateway (GW);

receiving a packet sent by a user equipment;

sending the encapsulated packet to the GW by using the GRE tunnel.

4. The access point according to claim 3, wherein the CAPWAP packet comprises a GW address configuration attribute, and the GW address configuration attribute comprises a type field, and an attribute value field, wherein a value of the type field is used to identify the attribute field as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.

5. A non-transitory computer readable medium which contains computer-executable instructions, wherein the computer-executable instructions, when executed by a processor, enables an access point (AP) to perform operations comprising:

receiving a packet sent by user equipment;

sending the encapsulated packet to the GW by using the GRE tunnel.

6. The non-transitory computer readable medium according to claim 5, wherein the CAPWAP packet comprises a GW address configuration attribute, and the GW address configuration attribute comprises a type field, and an attribute value field, wherein a value of the type field is used to identify the attribute field as the GW address configuration attribute, and a value of the attribute value field is the address of the GW.