WO2005076563A1 - Procede de communication directe entre le cote client d'exploitation et de maintenance et des dispositifs a distance - Google Patents

Procede de communication directe entre le cote client d'exploitation et de maintenance et des dispositifs a distance Download PDF

Info

Publication number
WO2005076563A1
WO2005076563A1 PCT/CN2005/000151 CN2005000151W WO2005076563A1 WO 2005076563 A1 WO2005076563 A1 WO 2005076563A1 CN 2005000151 W CN2005000151 W CN 2005000151W WO 2005076563 A1 WO2005076563 A1 WO 2005076563A1
Authority
WO
WIPO (PCT)
Prior art keywords
client
maintenance
tcp
proxy
telnet
Prior art date
Application number
PCT/CN2005/000151
Other languages
English (en)
Chinese (zh)
Inventor
Jianjun Wang
Hailong Li
Original Assignee
Huawei Technologies Co., Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co., Ltd filed Critical Huawei Technologies Co., Ltd
Publication of WO2005076563A1 publication Critical patent/WO2005076563A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks

Definitions

  • the invention relates to a method for direct communication between an operation and maintenance client and a remote device in a communication device network.
  • the remote device only allows the rear management module (BAM) of the centralized maintenance center to establish a TCP connection with the remote device itself, and the operation and maintenance client cannot directly establish a TCP connection with the remote device.
  • BAM rear management module
  • FIG. 1 is a schematic diagram of communication between a BAM and a BTS and an operation and maintenance client in the prior art.
  • the BAM 101 of the centralized maintenance center has two IP addresses: one is an external IP and the same network segment as the operation and maintenance client 104
  • the remote device BTS 103 10.12.XXX.XXX
  • Telnet server in the remote device BTS 103
  • the centralized maintenance center BAM101 as a Telnet client can directly log in to the Telnet server in the remote device BTS 103 using the Telnet protocol.
  • the remote device BTS103 only allows the centralized maintenance center BAM to access itself using the internal IP address, so the operation and maintenance client 104 cannot directly Telnet to the remote device BTS103's Telnet Server.
  • the security system of the centralized maintenance center BAM101 includes user authority management and client authority management.
  • the security management module of the centralized maintenance center BAM101 authenticates the foregoing permissions, and only users who pass the authentication can access the centralized maintenance center BAM 101 through an operation and maintenance client 104. Summary of the invention
  • an object of the present invention is to provide a method for direct communication between an operation and maintenance client and a remote device, so that the operation and maintenance client can directly and securely communicate with the remote device.
  • a method for direct communication between an operation and maintenance client and a remote device includes the following steps:
  • the TCP / IP proxy establishes a correspondence between the remote device IP address, the port number of the remote device, and the proxy port of the remote device;
  • the TCP / IP proxy establishes a TCP / IP connection between the operation and maintenance client and the centralized maintenance center and a TCP / IP connection between the centralized maintenance center and the remote device according to the corresponding relationship in step 2.
  • the operation and maintenance client When the operation and maintenance client sends information to the remote device, it first sends the TCP / IP agent to the centralized maintenance center through the TCP / IP connection between the operation and maintenance client and the centralized maintenance center.
  • the TCP / IP proxy forwards this information directly to the remote device through the TCP / IP connection between the centralized maintenance center and the remote device;
  • the remote device When the remote device sends information to the operation and maintenance client, it first sends the TCP / IP proxy to the centralized maintenance center through the TCP / IP connection between the remote device and the centralized maintenance center; the TCP / IP proxy passes the information through the centralized maintenance center The TCP / IP connection with the operation and maintenance client is forwarded directly to the operation and maintenance client.
  • the step 1 may specifically include the following steps:
  • the user sends an operation and maintenance command for starting the agent to the centralized maintenance center at the operation and maintenance client;
  • the security management module therein authenticates the user. If the user and the operation and maintenance client have the authority to send the operation and maintenance command to start the agent, the centralized maintenance center executes the startup. Agent command; if not, the centralized maintenance center returns a command execution failure, prompting the user or the operation and maintenance client that they do not have permission.
  • the step 2 may further include: creating a listening addressing point;
  • the step 3 may specifically include the following steps:
  • the operation and maintenance client initiates a Telnet request to the TCP / IP proxy of the centralized maintenance center; 32) The listening addressing point receives the request and immediately creates a service addressing point to establish a Telnet connection with the operation and maintenance client; The client addressing point establishes a Telnet connection with the remote device;
  • the step 4 may specifically include the following steps:
  • the operation and maintenance client sends information to the Telnet agent through the Telnet connection;
  • step 5 may specifically include the following steps:
  • the remote device sends the information to the Telnet agent through the Telnet connection;
  • the client addressing point of the Telnet proxy receives the information, and the service addressing point created at the same time as the client addressing point forwards the information to the operation and maintenance client through a Telnet connection.
  • the step 32 may further include: establishing a service address point and a client address point that are established at the same time-a correspondence relationship and storing them;
  • the step 42 may further include: the Telnet agent retrieves the client addressing point corresponding to the service addressing point according to the correspondence between the service addressing point and the client addressing point;
  • the step 52 may further include: The Telnet agent retrieves the service addressing point corresponding to the client addressing point according to the correspondence between the service addressing point and the client addressing point.
  • the method may further include: when the system does not need the operation and maintenance client to communicate directly with the remote device, the centralized maintenance center stops the TCP / IP proxy operation.
  • the method for direct communication between the operation and maintenance client and the remote device of the present invention starts the centralized maintenance center through the authorized operation and maintenance client.
  • the TCP / IP proxy establishes a virtual TCP / IP connection from the operation and maintenance client to the centralized maintenance center to the remote device, and the operation and maintenance client communicates directly with the remote device through the virtual TCP / IP connection.
  • the authority to start the agent is centrally managed by the centralized maintenance center, which solves the contradiction between the security and convenience of remote device access in centralized maintenance, as long as the authorized user starts TCP / IP through the operation and maintenance client.
  • Proxy you can directly access the remote device, stop the proxy when you do not need to communicate.
  • the present invention can also implement port transfer, transferring a certain port to a user-designated port, and facilitating centralized management.
  • FIG. 1 is a schematic diagram of communication between a BAM and a BTS and an operation and maintenance client in the prior art
  • FIG. 2 is a schematic diagram of a connection between a BAM and a BTS and an operation and maintenance client in a preferred embodiment of the present invention
  • FIG. 3 is a schematic flowchart of the process of establishing a virtual Telnet connection between the operation and maintenance client and the BTS in the embodiment shown in FIG. 2.
  • the method for direct communication between an operation and maintenance client and a remote device of the present invention starts a TCP / IP proxy of a centralized maintenance center through an authorized operation and maintenance client, and establishes a virtual process from the operation and maintenance client to the centralized maintenance center to the remote device.
  • TCP / IP connection The operation and maintenance client communicates directly with the remote device through the virtual TCP / IP connection.
  • the TCP / IP proxy in the present invention may be a Telnet proxy, an FTP proxy, or a TFTP proxy.
  • FIG. 2 is a schematic diagram of a connection between a BAM, a BTS, and an operation and maintenance client according to a preferred embodiment of the present invention.
  • the TCP / IP proxy-the Telnet proxy 201 is set in the centralized maintenance center BAM200.
  • the BAM200 of the centralized maintenance center can Telnet to the Telnet server of the BTS, using the default port number 23 of the Telnet protocol.
  • the operation and maintenance client 230 can log in to the BAM200 through an Ethernet connection, but cannot directly Telnet to the BTS220.
  • the maintenance client 230 can directly Telnet to the BTS220 and communicate with the BTS220 to implement remote maintenance and management.
  • FIG. 3 is a schematic flowchart of establishing a virtual Telnet connection between the operation and maintenance client and the BTS in the embodiment shown in FIG. 2 for communication, which includes the following steps:
  • Step 301 The user authenticated by the centralized maintenance center logs in to the centralized maintenance center B AM200 through the operation and maintenance client, and starts the Telnet agent 201 on the B AM.
  • the Telnet agent 201 establishes the remote device IP address and the port number of the remote device. Correspondence between the original port number and the proxy port of the operation and maintenance client. As shown in Table 1:
  • the Telnet proxy 201 also creates an addressing point (Socket), called Listen Socket, which is specifically used to listen for Telnet connection requests from the operation maintenance client designated port (such as: 1001).
  • Socket Socket
  • Listen Socket an addressing point
  • step 302 the operation and maintenance client 230 executes Telnet 10.71.11.82 1001, (10.71.11.82 is BAM IP), that is, the Telnet client initiates a Telnet request, and the port number is bandit.
  • Step 303 The Listen Socket receives the request, and immediately creates a new Socket, called a Server Socket, to establish a connection with the operation and maintenance client 230, and simultaneously creates another Socket, called a Client Socket, to establish a connection with the Telnet Server of the BTS 220.
  • a Server Socket a new Socket
  • Client Socket another Socket
  • Telnet Server a new Socket
  • This Server Socket has a one-to-one correspondence with the Client Socket established at the same time. This establishes two Telnet connections from BAM 200 to the operation and maintenance client 230 and BAM 200 to BTS 220.
  • Step 304 When the operation and maintenance client 230 sends information to the BTS 220, the information is first sent to the Telnet agent 201, and the server socket of the Telnet agent 201 receives the information, and retrieves the client socket corresponding to the server socket. This information is forwarded to the Telnet Server of the BTS 220.
  • step 305 when the BTS 220 sends information to the operation and maintenance client 230, the information is first sent to the Telnet agent 201, and the client socket of the Telnet agent 201 receives the information and retrieves the server socket corresponding to the client socket. Forward to the operation and maintenance client 230.
  • mutual retrieval can be performed according to the correspondence between Server Socket and Client Socket, and a virtual Telnet connection between multiple operation and maintenance clients 230 and one or more BTS 220 can be established through one Telnet proxy 201.
  • a virtual Telnet connection between multiple operation and maintenance clients 230 and one or more BTS 220 can be established through one Telnet proxy 201.
  • a Telnet agent 201 only needs to establish a Listen Socket, and different operation and maintenance clients 230 establish different Server Socket and Client Socket, an operation and maintenance client 230 communicates with BTS220 Server Socket and Client Socket one-to-one correspondence, as shown in Figure 2 Server Socket 1 and Client Socket 1 corresponding, they correspond to the operation and maintenance client 1 230.
  • the Telnet agent 201 can accurately forward the information to the operation and maintenance client 230 or the BTS 220 according to the corresponding relationship.
  • the implementation steps of establishing a virtual Telnet connection between multiple operation and maintenance clients 230 and multiple remote devices BTS 220 are similar to a single remote device: First, start a TCP / IP proxy to another remote device BTS 220, and the system creates a new Listen Socket. If there is an operation and maintenance client connected to the BTS 220, the TCP / IP proxy creates a pair of Server Socket and Client Socket, and establishes a virtual Telnet connection with the remote device.
  • the operation and maintenance client only needs to specify the external network IP of the centralized maintenance center and the port number specified by the user to implement port transfer.
  • Table 1 maps the IP address of the remote device and the Telnet port number 23 to port 1001 designated by the user.
  • the Telnet agent establishes a Telnet virtual connection between the operation and maintenance client and the remote device, so that the original port 23 is transferred to the user-specified port 1001.
  • the TCP / IP proxy in this embodiment is a Telnet proxy. In actual applications, it can also be an FTP proxy or a TFTP proxy.
  • the FTP proxy or TFTP proxy establishes the BAM 200 to the operation and maintenance client according to the FTP or TFTP protocol. End 230 and two FTP or TFTP connections from BAM 200 to BTS 220.
  • the method for direct communication between an operation and maintenance client and a remote device well solves the contradiction between access security and convenience of remote device access during centralized maintenance, and can also implement a port Transfer for convenient centralized management.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

L'invention porte sur un procédé de communication directe entre le côté client d'exploitation et d'entretien et les dispositifs à distance, qui établit le serveur proxy TCP/IP dans le centre d'entretien commun, et sa procédure de communication permettant 1) aux clients d'accéder au centre d'entretien commun par le côté client d'exploitation et de maintenance, et d'activer le serveur proxy TCP/IP du centre d'entretien commun ; 2) au serveur proxy TCP/IP d'établir la relation associée parmi les adresses IP des dispositifs à distance, le numéro de port des dispositifs à distance, et le port proxy des dispositifs à distance ; 3) au serveur proxy TCP/IP d'établir la connexion TCP/IP avec le côté client d'exploitation et de maintenance et des dispositifs à distance respectifs ; 4) au côté client d'exploitation et de maintenance communiquant avec les dispositifs à distance, d'envoyer d'abord les informations au serveur proxy TCP/IP du centre de maintenance commun par la connexion TCP/IP ; au serveur proxy TCP/IP d'envoyer ensuite directement les informations au côté client d'exploitation et de maintenance ou aux dispositifs à distance. Cette invention permet de résoudre efficacement les problèmes de cohérence liés à la sécurité d'accès des dispositifs à distance et permet d'assurer une utilisation pratique pendant la maintenance commune. Elle permet également de procéder à un transfert de ports et de simplifier la gestion commune.
PCT/CN2005/000151 2004-02-03 2005-02-03 Procede de communication directe entre le cote client d'exploitation et de maintenance et des dispositifs a distance WO2005076563A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200410001098.9 2004-02-03
CNB2004100010989A CN100574207C (zh) 2004-02-03 2004-02-03 一种操作维护客户端与远程设备直接通信的方法

Publications (1)

Publication Number Publication Date
WO2005076563A1 true WO2005076563A1 (fr) 2005-08-18

Family

ID=34832054

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2005/000151 WO2005076563A1 (fr) 2004-02-03 2005-02-03 Procede de communication directe entre le cote client d'exploitation et de maintenance et des dispositifs a distance

Country Status (2)

Country Link
CN (1) CN100574207C (fr)
WO (1) WO2005076563A1 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111010289A (zh) * 2019-11-22 2020-04-14 国网江西省电力有限公司电力科学研究院 一种用于就地化变电站的全景网络配置检测方法

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100466537C (zh) * 2005-09-12 2009-03-04 珠海金山软件股份有限公司 检测网络中计算机接入状态的装置和检测方法
US20090210519A1 (en) * 2008-02-18 2009-08-20 Microsoft Corporation Efficient and transparent remote wakeup
CN102984237B (zh) * 2012-11-20 2016-05-11 北京思特奇信息技术股份有限公司 一种基于socket连接的数据传输系统及方法
CN105119926B (zh) * 2015-09-07 2018-01-23 中科宇图天下科技有限公司 一种基于Socket连接的多通道双工通讯方法
CN105306567B (zh) * 2015-10-23 2019-07-19 小米科技有限责任公司 用于终端连接的方法及装置
CN108347462B (zh) * 2017-01-23 2021-02-23 阿里巴巴集团控股有限公司 一种传输操作数据的方法及设备
CN109729187B (zh) * 2019-01-09 2022-08-30 广州视源电子科技股份有限公司 一种代理通信方法、系统、装置及存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1999016002A1 (fr) * 1997-09-26 1999-04-01 Parmeshwar Gobin Interface client integree de rapport sur les factures basee sur le web
JP2002335271A (ja) * 2001-05-08 2002-11-22 Yoshihiro Maruyama プライベートアドレス（ｉｐアドレス）上に位置するインターネットサーバをインターネットに公開するための方法及びその方法を利用したシステム。
CN1437358A (zh) * 2002-02-07 2003-08-20 华为技术有限公司 基于远程登录互联网协议的网络设备中继管理的实现方法

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1999016002A1 (fr) * 1997-09-26 1999-04-01 Parmeshwar Gobin Interface client integree de rapport sur les factures basee sur le web
JP2002335271A (ja) * 2001-05-08 2002-11-22 Yoshihiro Maruyama プライベートアドレス（ｉｐアドレス）上に位置するインターネットサーバをインターネットに公開するための方法及びその方法を利用したシステム。
CN1437358A (zh) * 2002-02-07 2003-08-20 华为技术有限公司 基于远程登录互联网协议的网络设备中继管理的实现方法

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111010289A (zh) * 2019-11-22 2020-04-14 国网江西省电力有限公司电力科学研究院 一种用于就地化变电站的全景网络配置检测方法
CN111010289B (zh) * 2019-11-22 2022-08-16 国网江西省电力有限公司电力科学研究院 一种用于就地化变电站的全景网络配置检测方法

Also Published As

Publication number Publication date
CN100574207C (zh) 2009-12-23
CN1652508A (zh) 2005-08-10

Similar Documents

Publication Publication Date Title
US7542572B2 (en) Method for securely and automatically configuring access points
JP3864312B2 (ja) ８０２．１ｘプロトコルベースマルチキャスト制御方法
US5822434A (en) Scheme to allow two computers on a network to upgrade from a non-secured to a secured session
US8515078B2 (en) Mass subscriber management
US8605582B2 (en) IP network system and its access control method, IP address distributing device, and IP address distributing method
JP6884818B2 (ja) Ｖｘｌａｎ実装方法、ネットワークデバイス、および通信システム
WO2005076563A1 (fr) Procede de communication directe entre le cote client d'exploitation et de maintenance et des dispositifs a distance
CA2419853A1 (fr) Acheminement par paquets independant de la position et acces securise dans un environnement reseau sans fil a courte portee
WO2019148135A2 (fr) Enregistrement d'un dispositif de l'internet des objets (ido) au moyen d'une fonction non clonable physiquement
JP2005516544A (ja) 制御されたマルチキャストのシステム及び実行方法
JP5239341B2 (ja) ゲートウェイ、中継方法及びプログラム
WO2007041918A1 (fr) Méthode et système d’obtention de clé hôte ssh de dispositif géré
JP2006524017A (ja) 公的認証サーバで無線ｌａｎアクセスを制御するｉｄマッピング機構
WO2016192608A2 (fr) Procédé d'authentification, système d'authentification et dispositif associé
US20040010713A1 (en) EAP telecommunication protocol extension
US8397278B2 (en) Configuring interfaces of a switch using templates
US20150249639A1 (en) Method and devices for registering a client to a server
WO2006058493A1 (fr) Procede et systeme d'authentification de domaine et d'autorite de reseau
JP4592789B2 (ja) 通信制御装置、通信制御方法および通信制御処理プログラム
JP2005521329A (ja) オートコンフィギュレーション構成を有する情報ルーティングデバイス
KR100763131B1 (ko) 공중 무선랜 서비스를 위한 망접속 및 서비스 등록 방법
WO2010000157A1 (fr) Procédé de configuration, équipement et système de dispositif d'accès
JP2006033206A (ja) 認証システム、ネットワーク集線装置及びそれらに用いる認証方法並びにそのプログラム
JP2008066907A (ja) パケット通信装置
JP4495049B2 (ja) パケット通信サービスシステム、パケット通信サービス方法、エッジ側ゲートウェイ装置、およびセンタ側ゲートウェイ装置

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
NENP Non-entry into the national phase

Ref country code: DE

WWW Wipo information: withdrawn in national office

Country of ref document: DE

122 Ep: pct application non-entry in european phase