WO2009152734A1 - 一种绑定/解绑定的处理方法、系统和装置 - Google Patents

一种绑定/解绑定的处理方法、系统和装置 Download PDF

Info

Publication number
WO2009152734A1
WO2009152734A1 PCT/CN2009/072184 CN2009072184W WO2009152734A1 WO 2009152734 A1 WO2009152734 A1 WO 2009152734A1 CN 2009072184 W CN2009072184 W CN 2009072184W WO 2009152734 A1 WO2009152734 A1 WO 2009152734A1
Authority
WO
WIPO (PCT)
Prior art keywords
dhcp
message
specific
dhcp message
unit
Prior art date
Application number
PCT/CN2009/072184
Other languages
English (en)
French (fr)
Inventor
郑若滨
李宏宇
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP09765373A priority Critical patent/EP2288088A4/en
Publication of WO2009152734A1 publication Critical patent/WO2009152734A1/zh
Priority to US12/967,448 priority patent/US20110080842A1/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/2854—Wide area networks, e.g. public data networks
    • H04L12/2856—Access arrangements, e.g. Internet access
    • H04L12/2863—Arrangements for combining access network resources elements, e.g. channel bonding
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q11/00—Selecting arrangements for multiplex systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses
    • H04L61/5014—Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13097—Numbering, addressing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13109—Initializing, personal profile
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13204—Protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13208—Inverse multiplexing, channel bonding, e.g. TSSI aspects
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13389—LAN, internet
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00—Reducing energy consumption in communication networks
    • Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Definitions

  • the embodiments of the present invention relate to the field of communications technologies, and in particular, to a binding, debinding, processing method, system, and apparatus.
  • IPTV Internet Protocol Television
  • xDSL Digital Subscriber Line
  • DSL bundling technology improves bandwidth by multiplexing more than two pairs of DSL lines simultaneously.
  • DSL line bundling there are bundles of intra-board bundling, inter-board bundling, and digital Subscriber Line Access Multiplexer (DSLAM).
  • DSLAM digital Subscriber Line Access Multiplexer
  • the prior art provides a method for implementing bundling by aggregating at a link layer, and bundling multiple links through an Ethernet protocol at a link layer, specifically by extending an optional media access control (Media Access Control) , MAC) Link Aggregation Sublayer between CLIENT (client) sublayer and MAC/optional MAC Sublayer (optional MAC sublayer)
  • Media Access Control Media Access Control
  • MAC Media Access Control
  • Link convergence sublayer to achieve multi-link aggregation
  • Link aggregation control protocol Link aggregation control protocol
  • LACP Aggregation Control Protocol
  • the system distributes multiple frames to different ports through a frame distribution algorithm, and performs aggregation at the opposite end of the system, and the frames of the same session are forwarded through a single port.
  • DHCP Dynamic Host Configuration Protocol
  • IP Internet Protocol
  • the embodiments of the present invention provide a method, a system, and a device for binding/unbinding, so that each AN corresponding to a bundle link can receive a DHCP packet, and thus can implement the DHCP packet according to the received DHCP packet. Bind or unbind a port with a MAC/IP address.
  • an embodiment of the present invention provides a binding processing system, including: an IP edge node and an access node AN,
  • the IP edge node is configured to listen to the received dynamic host configuration protocol (DHCP) message, and after receiving the specific DHCP message, forward the specific DHCP message to each AN corresponding to the bundle link, where the specific The DHCP packet is a DHCP acknowledgement packet or a DHCP response packet.
  • DHCP dynamic host configuration protocol
  • the access node M is configured to receive a specific DHCP message sent by the IP edge node, and parse and obtain an IP address or a media access control MAC address carried by the specific DHCP message, according to the IP address. Or a MAC address, performing binding of the port of the AN to the IP address or MAC address.
  • the embodiment of the present invention further provides a processing system for unbinding, including: a remote gateway RG and an access node AN, where the RG is configured to listen to the received dynamic host configuration protocol DHCP message, and listens to After the specific DHCP message is sent, the specific DHCP message is forwarded to each AN corresponding to the bundle link, and the specific DHCP message is a DHCP release message.
  • a processing system for unbinding including: a remote gateway RG and an access node AN, where the RG is configured to listen to the received dynamic host configuration protocol DHCP message, and listens to After the specific DHCP message is sent, the specific DHCP message is forwarded to each AN corresponding to the bundle link, and the specific DHCP message is a DHCP release message.
  • the access node AN is configured to receive a specific DHCP message sent by the RG, and parse and obtain an IP address or a media access control MAC address carried by the specific DHCP message, according to the IP address or MAC address. An address, performing debinding of the port of the AN with the IP address or MAC address.
  • an embodiment of the present invention further provides an IP edge node, including:
  • the link bundling unit is configured to listen to the received DHCP message, and after the specific DHCP message is monitored, forward the specific DHCP message to each AN corresponding to the bundle link, where the specific DHCP message is sent.
  • the text is a DHCP acknowledgement message or a DHCP response message;
  • the core network side interface unit is configured to perform packet exchange with the core network side
  • the interface unit on the aggregation network is used to exchange packets with the aggregation network.
  • the embodiment of the present invention further provides a remote gateway RG, including:
  • a link bundling unit configured to listen to the received DHCP message, and after the specific DHCP message is monitored, the specific The DHCP message is forwarded to each AN corresponding to the bundle link, and the specific DHCP message is a DHCP release message.
  • a user side interface unit configured to perform packet interaction with the user side network
  • the signal conversion unit is configured to perform signal conversion on the message sent by the user side network.
  • the embodiment of the present invention further provides a binding/unbinding processing method, including:
  • the specific DHCP message After the specific DHCP message is received, the specific DHCP message is forwarded to each AN corresponding to the bundle link, and the AN is instructed to connect the AN to the port of the AN according to the specific DHCP message.
  • the IP address or the medium access control MAC address is bound/unbound.
  • the specific DHCP message includes a DHCP acknowledgement packet, a DHCP response packet, or a DHCP release packet.
  • the embodiment of the present invention further provides a binding/unbinding processing method, including:
  • the layer 2 control protocol L2CP control message is generated, and the L2CP control message is sent to each AN corresponding to the bundle link, where the L2CP control message indicates the bundle link.
  • the corresponding ANs bind/unbind the port carried in the L2CP control packet with the IP or MAC address.
  • the embodiment of the present invention further provides a binding/unbinding processing system, including: an IP edge node and an access node AN,
  • the IP edge node is configured to listen to the received DHCP message, and after receiving the specific DHCP message, generate a layer 2 control protocol L2CP control message, and send the L2CP control message to the bundle link.
  • the AN is configured to receive the L2CP control packet sent by the IP edge node, parse and obtain the port carried in the L2CP control packet, and the IP or MAC address information, and according to the obtained port, and the IP address. Or MAC address information, binding/unbinding the port with an IP or MAC address.
  • an embodiment of the present invention further provides an IP edge node, including:
  • An access control unit configured to listen to the received DHCP message, and after receiving the specific DHCP message, generate an L2CP control message, where the L2CP control message indicates that each AN pair corresponding to the bundle link
  • the port carried in the L2CP control packet is bound or de-bound with the IP address or the MAC address.
  • the specific DHCP packet includes a DHCP acknowledgement packet, a DHCP response packet, or a DHCP release packet.
  • a link bundling unit configured to provide the access control unit with port information of each AN corresponding to the bundle link
  • a core network side interface unit configured to perform packet exchange with the core network side
  • the interface unit on the aggregation network is used to exchange packets with the aggregation network.
  • each M corresponding to the bundle link The device can receive a specific DHCP packet sent by the IP edge node, and can bind or unbind the port of the AN with the obtained IP address or MAC address according to the IP address or MAC address carried by the specific DHCP packet.
  • the embodiment of the present invention provides an implementation method for binding or unbinding a port of an AN with a MAC or an IP address.
  • FIG. 2 is a schematic diagram of an implementation system capable of bundling lines in a DSL and P0N application scenario
  • FIG. 3 is a flowchart of a method for binding/unbinding according to an embodiment of the present invention.
  • FIG. 4 is a structural diagram of a processing system bound to an embodiment of the present invention.
  • FIG. 5 is a structural diagram of an IP edge node according to an embodiment of the present invention.
  • FIG. 6 is a schematic diagram of a connection relationship of a processing system bound to an embodiment of the present invention.
  • FIG. 7 is a schematic diagram of an implementation process of binding an AN port to a MAC/IP address according to an embodiment of the present invention
  • FIG. 8 is a flowchart of binding a port to a MAC/IP address according to an embodiment of the present invention.
  • FIG. 9 is a structural diagram of a processing system for unbinding according to an embodiment of the present invention.
  • Figure 10 is a structural diagram of an RG according to an embodiment of the present invention.
  • FIG. 11 is a schematic diagram of an implementation process of debinding a port of an AN with a MAC/IP address according to an embodiment of the present invention
  • FIG. 12 is a flowchart of debinding a port with a MAC/IP address according to an embodiment of the present invention
  • FIG. 13 is a schematic diagram of an implementation manner of a forwarding control unit of an RG and an IP edge node according to an embodiment of the present invention
  • FIG. 14 is a schematic diagram of another implementation manner of a forwarding control unit of an RG and an IP edge node according to an embodiment of the present invention
  • FIG. 15 is a structural diagram of a processing system for binding/unbinding according to an embodiment of the present invention
  • FIG. 16 is a structural diagram of an IP edge node according to an embodiment of the present invention.
  • 17 is a flowchart of a method for processing binding/unbinding according to an embodiment of the present invention.
  • FIG. 18 is a schematic diagram of implementation of a binding/unbinding processing system according to an embodiment of the present invention.
  • FIG. 19 is a flowchart of a method for processing binding or unbinding of a port and a MAC/IP address of an AN according to an embodiment of the present invention.
  • the embodiments of the present invention provide a binding/unbinding processing method, which implements binding or unbinding of a port and a MAC/IP address in a bundled scenario of an inter-AN, thereby being illegal.
  • MAC/IP address packets are blocked, and attacks against network-side devices are prevented by illegal MAC address or IP address packets.
  • FIG. 1 a schematic diagram of an implementation system that is bundled across an AN is taken as an example of an application scenario, where the system can be mainly used. It consists of three parts: Remote Gateway (RG), IP edge node/aggregation switch and multiple access nodes ANx, ...,
  • RG Remote Gateway
  • IP edge node/aggregation switch and multiple access nodes ANx, ...
  • the RG includes a user side interface unit, a link bundling unit, and a plurality of modems Modem 1, ..., Modem n.
  • the user side interface unit is connected to the user side network on the one hand to receive and send data packets of the user side network, and is connected to the link bundling unit on the other hand.
  • the link bundling unit is the main part of the bundling implementation. It is mainly used to implement load balancing on multiple links in the uplink direction and to recover the downlink data packets.
  • the link bundling unit can implement the technology by the following technologies, for example: it can be implemented based on the Institute of Electrical and Electronics Engineers (IEEE) 802. 3ad, or based on the IEEE 802. 3ah.
  • IEEE Institute of Electrical and Electronics Engineers
  • Modem Modem 1 is used for modulation and demodulation of DSL signals.
  • the IP edge node/aggregation switch includes an aggregation network side interface unit, a link bundling unit, and a core network side interface unit.
  • the aggregation network side interface unit is connected to the aggregation network side and the access nodes Mx, ..., and ANy, and is configured to receive and send the packets of the aggregation network, and forward the packets sent by the link bundling unit to multiple chains on the aggregation network side.
  • the packet is forwarded to the link bundling unit by sending the packets sent by multiple links on the aggregation network side.
  • the link bundling unit of the IP edge node/aggregation switch corresponds to the link bundling unit in the RG, and is used to implement load sharing of data in the downlink direction on the link and organization recovery of data in the uplink direction; It can also be implemented by a variety of techniques.
  • the core network side interface unit is connected to the core network on the one hand to receive and send data packets on the core network side, and is connected to the link binding unit on the other hand.
  • the access nodes ANx, ..., ANy may be multiple DSLAMs corresponding to the bundled lines.
  • the implementation of the cross-AN bundling includes fragmenting the frames, then load-sharing to multiple links for transmission, and including multiple ways of sharing the session load on multiple different links.
  • the access fiber can also be bundled to increase the bandwidth.
  • P0N passive optical network
  • the signal conversion unit in FIG. 2 corresponds to the modem in the DSL application scenario, and corresponds to the optical module responsible for the photoelectric conversion processing in the P0N application scenario, and the access line corresponds to the access loop in the DSL application scenario, and the corresponding optical fiber in the P0N application scenario. .
  • the port on the AN is bound to the MAC/IP address.
  • the DHCP acknowledgement packet (DHCP ACK) or DHCP reply packet (DHCP REPLY) is monitored in the normal DHCP process.
  • the DHCP server sends the configuration parameters such as the IP address to the DHCP client through DHCP ACK or DHCP REPLY packets.
  • a DHCP ACK or DHCP REPLY message can parse the MAC/IP address information to bind the corresponding port to the MAC/IP address.
  • FIG. 3 it is a flowchart of a method for binding/unbinding a binding according to an embodiment of the present invention, including:
  • Step S301 Listening to the received DHCP message.
  • step S302 after listening to the specific DHCP message, the specific DHCP message is forwarded to each AN corresponding to the bundle link, so that the AN can port the port and the IP address or MAC address to the AN according to the specific DHCP message. Binding/unbinding is performed.
  • the specific DHCP message includes a DHCP acknowledgement packet, a DHCP response packet, or a DHCP release packet.
  • the IP edge node or the RG monitors the received DHCP message, and after monitoring a specific DHCP message, for example, a DHCP acknowledgement message, a DHCP response message, or a DHCP release message, the IP edge node or the RG
  • the specific DHCP packet is forwarded to each AN corresponding to the bundle link.
  • the IP edge node or the RG may broadcast a specific DHCP message to all ANs corresponding to the bundle link.
  • the binding/unbinding of the port of the AN to the IP address or MAC address according to the specific DHCP message may be:
  • the AN resolves and obtains the IP address or MAC address carried in a specific DHCP packet, and binds/unbinds the port of the AN with the IP address or MAC address according to the obtained IP address or MAC address.
  • the AN After the AN binds/unbinds the port of the AN with the IP address or MAC address according to the specific DHCP message, the AN forwards the specific DHCP message to the remote gateway RG or the IP edge node, and receives multiple copies. After the same specific DHCP message, the RG or IP edge node forwards only one specific DHCP message and discards the same specific DHCP message.
  • the binding/unbinding processing method is implemented to forward the specific DHCP message to the respective ANs corresponding to the bundle link, so that each AN can listen to the DHCP message and implement the corresponding AN. Bind/unbind a port with an IP address or a MAC address. This prevents attacks on the network-side device from being illegal.
  • FIG. 4 it is a structural diagram of a processing system bound to an embodiment of the present invention, including: an IP edge node 41 and an access node AN42.
  • the IP edge node 41 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, forward the specific DHCP message to each AN42 corresponding to the bundle link, and the specific DHCP message may be DHCP.
  • the acknowledgment message or the DHCP response message; the access node AN42 is configured to receive the specific DHCP message sent by the IP edge node 41, and parse and obtain the IP address or MAC address carried by the specific DHCP message, according to the obtained IP address. Address or MAC address, the binding of the port of AN42 to the IP address or MAC address. It should be noted that only one access node AN is schematically illustrated in FIG. 4, however, the number of access nodes AN in the bound processing system may also be multiple.
  • the binding processing system further includes: a remote gateway RG43, configured to receive the specific forwarding of each AN42 corresponding to the bundle link After receiving the same specific DHCP message, the DHCP message forwards a specific DHCP message to the user-side network and discards the same specific DHCP message.
  • a remote gateway RG43 configured to receive the specific forwarding of each AN42 corresponding to the bundle link After receiving the same specific DHCP message, the DHCP message forwards a specific DHCP message to the user-side network and discards the same specific DHCP message.
  • the IP edge node 41 forwards the specific DHCP message (for example, a DHCP acknowledgement message or a DHCP response message) to each AN 42 corresponding to the bundle link, thereby making each AN 42 You can bind the port corresponding to AN42 to an IP address or MAC address by listening to DHCP packets.
  • specific DHCP message for example, a DHCP acknowledgement message or a DHCP response message
  • FIG. 5 it is a structural diagram of an IP edge node 41 according to an embodiment of the present invention, including:
  • the link bundling unit 411 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, forward the specific DHCP message to each AN42 corresponding to the bundle link, where the specific DHCP message is DHCP acknowledgement packet or DHCP response packet;
  • the core network side interface unit 412 is configured to perform packet exchange with the core network side.
  • the aggregation network side interface unit 413 is configured to perform packet exchange with the aggregation network side.
  • the link bundling unit 411 may include: a DHCP PROXY subunit 4111, a forwarding control subunit 4112, and a frame broadcast/unicast subunit 4113.
  • the DHCP PROXY sub-unit 4111 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, send the indication information to the forwarding control sub-unit 4112, and instruct the forwarding control sub-unit 4112 to send the specific DHCP message to the frame. Broadcast/unicast subunit 4113;
  • the forwarding control sub-unit 4112 is configured to send a specific DHCP message to the frame broadcast/unicast sub-unit 4113 according to the indication information sent by the DHCP PROXY sub-unit 4111;
  • the frame broadcast/unicast sub-unit 4113 is configured to receive a specific DHCP message sent by the forwarding control sub-unit 4112, and broadcast a specific DHCP message to all the ANs 42 corresponding to the bundle link. In addition, the frame broadcast/unicast subunit 4113 can also implement unicasting of a message to a specific port.
  • the DHCP PROXY subunit 4111 in the link bundling unit 411 monitors the received DHCP message, and after receiving the specific DHCP message, instructs the forwarding control subunit 4112 to listen to the specific DHCP message.
  • the text (for example, a DHCP acknowledgement message or a DHCP response message) is forwarded to the frame broadcast/unicast sub-unit 4113, and the specific broadcast message is forwarded by the frame broadcast/unicast sub-unit 4113 to each AN42 corresponding to the bundle link. Therefore, the AN 42 can be configured to bind the port of the AN 42 to the IP or MAC address according to the IP or MAC address carried in the specific DHCP message.
  • the connection relationship of the processing system is bound to the embodiment of the present invention.
  • the DHCP PROXY function is added to the link bundling unit 411 of the IP edge node 41.
  • the link bundling unit 411 of the IP edge node 41 is responsible for DHCP packets after adding the DHCP PROXY subunit 4111. Perform special processing or special processing only for specific DHCP messages, such as DHCP acknowledgement packets or DHCP response packets. After the specific DHCP message is detected, the indication information is sent to the forwarding control subunit 4112, and the forwarding control subunit 4112 is instructed to send the specific DHCP message to the frame broadcast/unicast subunit 4113.
  • the DHCP PROXY subunit 4111 may also be located between the link bundling unit 411 and the core network side interface unit 412, or between the link bundling unit 411 and the convergence network side interface unit 413, but the chain.
  • the road bundling unit 411 needs to be able to perceive the content perceived by the DHCP PROXY subunit 4111.
  • the AN42 has a DHCP RELAY function.
  • the AN senses the DHCP message through the DHCP relay unit set in the internal device to implement binding of the port of the AN42 to the MAC/IP address. Then forward the specific DHCP message or all DHCP messages to RG43.
  • the RG 43 includes: a link bundling unit 431, configured to listen to a DHCP message sent by the M42, and after forwarding a specific DHCP message, for example, a DHCP ACK or a DHCP REPLY message, forward a specific DHCP message to The user side network discards other identical DHCP packets.
  • a link bundling unit 431 configured to listen to a DHCP message sent by the M42, and after forwarding a specific DHCP message, for example, a DHCP ACK or a DHCP REPLY message, forward a specific DHCP message to The user side network discards other identical DHCP packets.
  • the RG43 can also include:
  • the user side network unit 432 is configured to perform packet interaction with the user side network.
  • the signal conversion unit 433 is configured to perform signal conversion on the message exchanged between the RG43 and the AN42.
  • the link bundling unit 431 can include:
  • the DHCP PROXY sub-unit 4311 is configured to listen to the DHCP message sent by the M42, and after receiving a specific DHCP message, for example, a DHCP ACK or a DHCP REPLY message, trigger the same DHCP ACK that the link bundling unit 431 will receive. Or a DHCP REPLY message, forwarding a specific DHCP message to the user side network, and discarding other identical DHCP messages.
  • a specific DHCP message for example, a DHCP ACK or a DHCP REPLY message
  • a DHCP REPLY message forwarding a specific DHCP message to the user side network, and discarding other identical DHCP messages.
  • the DHCP server In the process of implementing parameter allocation such as address through the DHCP protocol, the DHCP server finally delivers parameters such as the address finally assigned to the user terminal through DHCP ACK or DHCP REPLY.
  • the link bundling unit 411 in the IP edge node 41 listens to the received DHCP message through the DHCP PROXY sub-unit 4111. After listening to the DHCP ACK or DHCP REPLY message, the link bundling unit 411 triggers the report. The message is specially processed, and the message is forwarded by the frame broadcast/unicast sub-unit 4113 to all the links that are bundled, and the normal bundle distribution operation is not performed;
  • the link bundling unit 431 in the RG 43 listens to the DHCP message sent by the AN 42 through the DHCP PROXY sub-unit 4311. After listening to the DHCP ACK or DHCP REPLY message sent by each link, the user-side interface unit 432 only passes through the user-side interface unit 432. Forward one copy to the user side network and discard the other identical messages. As shown in FIG. 8, a flowchart for binding a port to a MAC/IP address according to an embodiment of the present invention is shown.
  • Figure 8 shows an example in which only two AN42s (AN x and AN y) are included in the system, but in an actual application scenario, the embodiment of the present invention is not limited thereto, and the binding system may correspond to any multiple (two The processing of the plurality of AN42 scenes may be derived from the method described in the embodiment of the present invention, and the processing of the DHCP message is the same for the plurality of ANs 42.
  • Step S801 the IP edge node 41 listens to the DHCP ACK or DHCP REPLY message entering the binding system.
  • Step S802 The IP edge node 41 performs special processing on the DHCP packet, and forwards the DHCP packet to the plurality of ANs 42 corresponding to the bundled link in a complete manner (for example, not performing the fragmentation processing on the DHCP packet). Specifically, the IP edge node 41 broadcasts the DHCP ACK/DHCP REPLY message to all ANs 42 corresponding to the bundle link. In Fig. 8, a plurality of AN42s corresponding to the bundle link are represented by AN x and AN y.
  • Step S803 After receiving the DHCP message, the multiple ANs of the bundle link perform the binding of the corresponding port and the IP/MAC address on the AN42 by parsing the IP address and the MAC address allocated in the packet.
  • Step S804 The multiple ANs 42 corresponding to the bundle link send a DHCP ACK/DHCP REPLY message to the RG43.
  • Step S805 After receiving the same number of DHCP messages, the RG43 also needs to perform special processing on the received multiple DHCP messages. For the same DHCP message, only one copy is forwarded and the other DHCP messages are the same. throw away.
  • the link bundling unit 411 in the IP edge node 41 does not perform normal packet distribution processing on the DHCP packet after receiving the DHCP message, but completely forwards the DHCP message to each bundle.
  • the AN42 of the link enables the AN42 corresponding to each bundle link to receive the DHCP packet, so that the DHCP RELAY in the AN42 can sense the DHCP packet, and the port and the MAC/IP address are bound.
  • the processing of the DHCP message may be performed on the specific DHCP message, and the specific DHCP message includes at least a DHCP ACK/DHCP REPLY message; or all DHCP messages. Both are processed as described above.
  • a structural diagram of a processing system that is unbound according to an embodiment of the present invention includes: a remote gateway RG91 and an access node fine 2.
  • the RG91 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, the specific DHCP message is completely forwarded to each AN92 corresponding to the bundle link, and the specific DHCP message is a DHCP release message.
  • the access node AN92 is configured to receive the specific DHCP message sent by the RG91, parse and obtain the IP address or MAC address carried by the specific DHCP message, and perform the port and IP address of the AN92 according to the obtained IP address or MAC address. Unbinding of the MAC address. It should be noted that only one access node AN is schematically illustrated in FIG. 9, but the debinding processing system is connected. The number of ingress nodes AN may also be plural.
  • the unbind processing system may further include: an IP edge node 93, configured to receive a specific DHCP message forwarded by each AN92 corresponding to the bundle link, after receiving multiple copies of the same specific DHCP message. Only one specific DHCP message is forwarded to the core network side, and other identical specific DHCP messages are discarded.
  • an IP edge node 93 configured to receive a specific DHCP message forwarded by each AN92 corresponding to the bundle link, after receiving multiple copies of the same specific DHCP message. Only one specific DHCP message is forwarded to the core network side, and other identical specific DHCP messages are discarded.
  • the user When the user releases the DHCP connection, the user sends a DHCP RELEASE message.
  • the unbind processing system and the RG91 listen to the DHCP RELEASE packet to unbind the port from the MAC address. After detecting the DHCP RELEASE packet, the RG91 copies the DHCP RELEASE packet to each port corresponding to the binding system, so that each AN92 corresponding to each port can receive the DHCP RELEASE packet to implement unbinding. .
  • FIG. 10 it is a structural diagram of an RG according to an embodiment of the present invention, including:
  • the link bundling unit 911 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, the specific DHCP message is completely forwarded to each AN92 corresponding to the bundle link, and the specific DHCP message can be Release the message for DHCP;
  • the user side interface unit 912 is configured to perform packet interaction with the user side network.
  • the signal conversion unit 913 is configured to perform signal conversion on the message exchanged between the RG91 and the AN92.
  • the signal conversion unit 913 is used for signal modulation; in the P0N access technology, the signal conversion unit 913 is used for photoelectric conversion processing.
  • the link bundling unit 911 includes a DHCP PROXY subunit 9111, a forwarding control subunit 9112, and a frame broadcast/unicast subunit 9113, where
  • the DHCP PROXY subunit 9111 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, send the indication information to the forwarding control subunit 9112, and instruct the forwarding control subunit 9112 to send the specific DHCP message to the frame. Broadcast/unicast subunit 9113;
  • the forwarding control subunit 9112 is configured to send a specific DHCP message to the frame broadcast/unicast subunit 9113 according to the indication information sent by the DHCP PROXY subunit 9111;
  • the frame broadcast/unicast sub-unit 9113 is configured to receive a specific DHCP message sent by the forwarding control sub-unit 9112, and broadcast the specific DHCP message to all ANs corresponding to the bundle link.
  • the RG 91 after the DHCP PROXY subunit 9111 of the link bundling unit 911 listens to a specific DHCP message (for example, a DHCP release message), instructs the forwarding control subunit 9112 to send a specific DHCP message to the frame broadcast/single.
  • the broadcast sub-unit 9113 is completely forwarded by the frame broadcast/unicast sub-unit 9113 to the respective ANs 92 corresponding to the bundle link, so that each AN 92 can listen to the DHCP message to implement the port corresponding to the IP92 and the IP or The MAC address is unbound.
  • the link bundling unit 911 in the RG91 monitors the received DHCP message through the DHCP PROXY sub-unit 9111. After listening to the DHCP RELEASE message, it sends an indication message to the forwarding control sub-unit 9112, indicating the forwarding control sub-unit.
  • the 9112 sends the DHCP RELEASE message to the frame broadcast/unicast subunit 9113, and the frame broadcast/unicast subunit 9113 forwards it completely to all the links corresponding to the bundle without performing the normal bundle distribution operation.
  • the IP edge node 93 listens to the DHCP message sent by the core network side. After listening to the DHCP RELEASE message sent from each AN92 corresponding to the bundle link, only one copy is sent for the same DHCP RELEASE message. Go to the core network side and discard other identical messages.
  • the IP edge node 93 includes:
  • the link bundling unit 931 is configured to listen to the DHCP message sent by the core network. After listening to the DHCP RELEASE message sent by each AN92 corresponding to the bundle link, only one copy is sent for the same DHCP RELEASE message. To the core network side, and discard other identical messages;
  • the core network side interface unit 932 is configured to perform packet exchange with the core network side.
  • the aggregation network side interface unit 933 is configured to perform packet exchange with the aggregation network side.
  • the link bundling unit 931 includes:
  • the DHCP PROXY sub-unit 9311 is configured to listen to the DHCP message sent by the core network. After the DHCP RELEASE message is received, the triggering link bundling unit 931 will forward the same DHCP RELEASE message to only one copy. On the core network side, discard other identical messages.
  • FIG. 12 it is a flowchart for debinding a port and a MAC/IP address according to an embodiment of the present invention.
  • FIG. 12 illustrates an example in which only two AN92s (AN x, AN y) are included in the system, but In an actual application scenario, the bundled system may correspond to any number of bundled (two or more) links and the AN92 corresponding to the bundled link, and multiple AN92s process DHCP packets in the same way, so any multiple AN92s.
  • the processing method of the scene can also be derived from the method expressed in the embodiment of the present invention.
  • Step S1201 The RG91 listens to the DHCP RELEASE packet entering the bundling system.
  • step S1202 the RG91 performs the special processing on the DHCP RELEASE packet, and does not perform the normal distribution operation of the bundled packet, but forwards it to multiple AN92s corresponding to the bundle link, which may be: RG91 will send the DHCP RELEASE packet. Broadcast to all AN92s corresponding to the bundle link.
  • a plurality of AN92s corresponding to the bundle link are represented by AN x and AN y.
  • Step S1203 After receiving the DHCP message, the plurality of ANs 92 of the bundle link respectively parse the IP/MAC address and the like in the DHCP RELEASE message, and perform unbinding of the corresponding port and the IP/MAC address on the AN92. .
  • step S1204 the plurality of ANs 92 corresponding to the bundle link send the DHCP RELEASE message to the IP edge node 93.
  • step S1205 after receiving the same number of DHCP messages, the IP edge node 93 needs to perform special processing on the received multiple DHCP packets. For the same DHCP message, only one copy is forwarded and the other DHCP messages are received. The text is discarded.
  • the link bundling unit 911 of the RG 91 after receiving the DHCP message, does not process the DHCP message as a normal distribution message of the binding system, but completely forwards the DHCP message to each bundle link.
  • the corresponding AN92 enables the AN92 corresponding to each bundle link to receive the DHCP packet. Therefore, the DHCP RELAY in the AN92 can sense the DHCP packet, thereby unbinding the port of the AN92 and the MAC/IP address. .
  • the processing of the DHCP message may be performed on the specific DHCP message, and the specific DHCP message includes at least the DHCP RELEASE message; or all the DHCP messages may be processed.
  • the method for binding and unbinding a port to a MAC address and an IP address is required.
  • the RG and the IP edge node are required to be aware of a specific DHCP packet and do not perform normal binding on a specific DHCP packet.
  • the distribution operation forwards the specific DHCP message completely to each AN corresponding to the bundle link.
  • the forwarding control unit 131 is located on the MAC client 132, and the packet forwarding device is implemented based on the IEEE 802.3ad technology. .
  • the frame broadcast/unicast unit 133 is a unit specially added to the implementation technology of the IEEE 802.3ad for the internal broadcast of the bundled system and the specific unicast, and the function may be to be responsible for broadcasting the message for all ports and for specific The port is unicast and only for the transmission direction.
  • the frame broadcast/unicast unit 133 can distribute the received message according to the IEEE 802.3ad distribution method and the distribution method of the embodiment of the present invention.
  • the forwarding control unit 131 is integrated on the MAC client 132, and the forwarding control unit 131 is controlled by the DHCP PROXY unit 134 to send the forwarded data to the Frame Distributor unit 135. Or a new frame broadcast/unicast unit 133.
  • I indicates the downlink of the message
  • II indicates the control of the forwarding control unit 131 by the DHCP PROXY unit 134, and controls the forwarding flow of the message
  • III indicates The MAC client 132 performs uplink processing on the message, and forwards the message to the DHCP PROXY unit 134.
  • the DHCP PROXY unit 134 is configured to listen to the DHCP message and perform special operations on it, and control the forwarding process of the packet by the MAC client 132 in the downlink direction.
  • the frame broadcast type is forwarded to the specific DHCP message.
  • a specific DHCP packet is forwarded to each port of the bundle.
  • the DHCP PROXY unit 134 listens to DHCP messages and forwards only one DHCP packet received from multiple links, and discards the same packets.
  • the DHCP PROXY unit 134 monitors the DHCP message, and controls the forwarding in the MAC client 132 after listening to a specific DHCP message, for example, a DHCP ACK/REPLY or DHCP RELEASE message.
  • the control unit 131 sends the message to the frame broadcast/unicast unit 133 for processing.
  • the forwarding control unit 131 forwards the DHCP message after receiving the DHCP message.
  • the frame broadcast/unicast unit 133 broadcasts the DHCP message to the port corresponding to the bundling, and performs the special processing on the specific DHCP message in the bundling system. , that is, the specific DHCP message is completely forwarded to each corresponding AN.
  • FIG. 14 another implementation manner of the forwarding control unit of the RG and the IP edge node is provided in the embodiment of the present invention.
  • the forwarding control unit 131 is integrated on the frame distribution unit 141, and the packet forwarding device is Implemented based on IEEE 802. 3ad technology.
  • the frame broadcast/unicast unit 133 is a unit specially added to the implementation technology of the IEEE 802.3ad for the internal broadcast of the bundled system and the specific unicast, and the function may be to be responsible for broadcasting the message for all ports and for specific The port is unicast and only for the transmission direction.
  • the frame broadcast/unicast unit 133 can distribute the received message according to the IEEE 802.3ad distribution method and the distribution method of the embodiment of the present invention.
  • the forwarding control unit 131 is integrated on a frame distribution unit 141, and the forwarding control unit 131 is controlled by the DHCP PROXY unit 134 to send the forwarded data to the Frame Distributor unit 135.
  • frame broadcast/unicast unit 133 as shown in FIG. 14, I indicates the downlink of the message, and the message passes from the DHCP PROXY unit 134 through the MAC client 132 to the forwarding control unit 131 in the frame distribution unit 141, and II indicates DHCP PROXY.
  • the unit 134 controls the forwarding control unit 131 to control the flow direction of the packet forwarding.
  • III indicates that the frame distribution unit 141 performs uplink processing on the packet, and the forwarding packet passes through the MAC client 132 to the DHCP PROXY unit 134.
  • the DHCP PROXY unit 134 is configured to listen to the DHCP message and perform special operations on it, and control the forwarding process of the packet by the MAC client 132 in the downlink direction.
  • the frame broadcast type is forwarded to the specific DHCP message.
  • a specific DHCP packet is forwarded to each port of the bundle.
  • the same DHCP packet received from the uplink in the uplink direction is forwarded only one packet, and the other packets are discarded.
  • the DHCP PROXY unit 134 listens to the DHCP message, and controls the forwarding control in the frame distribution module 141 after listening to a specific DHCP message, such as a DHCP ACK/REPLY or DHCP RELEASE message.
  • Unit 131 sends the message to frame broadcast/unicast unit 133 for processing.
  • the forwarding control unit 131 forwards the DHCP message to the frame broadcast/unicast unit 133.
  • the frame broadcast/unicast unit 133 After receiving the DHCP message, the frame broadcast/unicast unit 133 broadcasts the port corresponding to the bundling, thereby realizing The specific processing of a specific DHCP packet is performed in the bundled system, that is, the DHCP packet is completely forwarded to each corresponding AN.
  • the receiving of a specific DHCP message is still performed by the IEEE 802. 3ad system, and the special processing of the specific DHCP message is implemented by the DHCP PROXY function.
  • the specific DHCP message is sent, the first specific DHCP message is forwarded normally, and the same specific DHCP message received subsequently is discarded.
  • the foregoing packet forwarding device implements broadcasting of the packet in the bundled system and binding to the specific port in the binding system.
  • Unicast corresponding to the implementation of the Transmission Sublayer in Figure 13 and the implementation of the Aggregator in Figure 14.
  • L2C Layer 2 Control
  • a structural diagram of a processing system for binding/unbinding includes: an IP edge node 151 and an access node AN152.
  • the IP edge node 151 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, generate a Layer 2 Control Protocol (L2CP) control message, and send the L2CP control message.
  • L2CP Layer 2 Control Protocol
  • the AN 152 is configured to receive the L2CP control packet sent by the IP edge node 151, parse and obtain the port carried in the L2CP control packet, and the IP or MAC address information, and according to the obtained port, and the IP or MAC address information, The port is bound/unbound with an IP or MAC address. It should be noted that only one access node AN is schematically illustrated in FIG. 15, but the number of access nodes AN in the binding/unbinding processing system may also be multiple.
  • the binding/unbinding processing system further includes: a remote gateway RG 153, configured to receive the DHCP message sent by each AN 152 corresponding to the binding link.
  • the IP edge node 151 listens to the DHCP message, and controls the AN152 to bind or unbind the port of the AN152 with the MAC/IP through the L2CP control message.
  • FIG. 16 it is a structural diagram of an IP edge node according to an embodiment of the present invention, including:
  • the access control unit 1511 is configured to listen to the received DHCP message, and after receiving the specific DHCP message, generate an L2CP control message, where the L2CP control message indicates each AN152 to the L2CP control message corresponding to the bundle link.
  • the port to be carried is bound or unbound with the IP address or the MAC address.
  • the specific DHCP message includes a DHCP acknowledgement packet, a DHCP response packet, or a DHCP release packet.
  • the link bundling unit 1512 is configured to provide the access control unit 1511 with port information of each AN corresponding to the bundling link, and the core network side interface unit 1513 is configured to perform packet exchange with the core network side.
  • the aggregation network side interface unit 1514 is configured to perform packet exchange with the aggregation network side.
  • the access control unit 1511 includes:
  • the DHCP PROXY subunit 15111 is configured to monitor the received DHCP message.
  • the L2C sub-unit 15112 is configured to: after the DHCP PROXY sub-unit 15111 listens to the specific DHCP message, generate an L2CP control message, where the L2CP control message is used to indicate that each AN152 corresponding to the bundle link controls the L2CP control message. Carrying end The port is bound or unbound with an IP or MAC address.
  • Each AN 152 binds or unbinds the port carried in the L2CP control packet with the IP or MAC address, thereby binding or unbinding the port and the IP/MAC address.
  • the method for processing binding/unbinding according to the embodiment of the present invention includes:
  • Step S1701 Listening to the received DHCP message.
  • Step S1702 After listening to the specific DHCP message, generate an L2CP control message, and send the L2CP control message to each AN152 corresponding to the bundle link, where the L2CP control message indicates each AN152 pair corresponding to the bundle link.
  • the port carried in the L2CP control packet is bound/unbound with an IP or MAC address.
  • Binding/unbinding the port carried by the L2CP control packet with the IP address or the MAC address of the L2CP control packet is as follows:
  • Each AN 152 corresponding to the bundle link receives the L2CP control packet, parses and obtains the port carried in the L2CP control packet, and the IP or MAC address information, and the port of the AN 152 according to the obtained port and the IP or MAC address information. Bind/unbind IP or MAC address.
  • the IP edge node 151 listens to the DHCP message, and generates a corresponding L2CP control message, and controls the AN152 to implement binding or solution of the port and MAC/IP of the AN152 by using the L2CP control message. Bind.
  • the IP edge node 151 in this embodiment adds an access control unit 1511, and the access control unit 1511 includes a DHCP PROXY subunit 15111. And the L2C subunit 15112; in this embodiment, the processing and message interaction performed by the DHCP PROXY subunit 15111, the L2C subunit 15112, and the link bundling unit 1512 are as follows:
  • the DHCP PROXY sub-unit 15111 is configured to monitor the DHCP message sent by the uplink bundling system and the DHCP message to be sent to the bundling system in the downlink, and is responsible for triggering the L2C sub-unit 15112 to initiate L2C control of the AN152.
  • the trigger conditions include but are not limited to:
  • the link bundling unit 1512 needs to provide the L2C subunit 15112 with the AN 152 bundled with the user RG 153 and Port information.
  • the L2C subunit 15112 After the L2C subunit 15112 triggers the control of the AN 152 by the DHCP PROXY subunit 15111, the L2C subunit 15112 first obtains the port information corresponding to the AN 152 and AN 152 bundled with the user DSL through the link bundling unit 1512, plus the slave DHCP PROXY subunit 15111.
  • the obtained MAC and IP address information is used to generate binding or debinding commands for the ports of the corresponding AN152 and AN152, that is, corresponding L2CP control messages, and send corresponding L2CP control messages to each AN152.
  • the RG 153 in this embodiment includes: a link bundling unit 1531, configured to listen to a DHCP message sent by the AN 152, after listening to a specific DHCP message, for example, a DHCP ACK, a DHCP REPLY, or a DHCP RELEASE message, Forward one copy to the user side network and discard the other identical messages.
  • a link bundling unit 1531 configured to listen to a DHCP message sent by the AN 152, after listening to a specific DHCP message, for example, a DHCP ACK, a DHCP REPLY, or a DHCP RELEASE message, Forward one copy to the user side network and discard the other identical messages.
  • the RG 153 further includes: a user side network unit 1532, configured to perform message interaction with the user side network.
  • the signal conversion unit 1533 is configured to perform signal conversion on the message exchanged between the RG 153 and the AN 152.
  • the following describes the processing method for the IP edge node 151 to implement binding or unbinding of the port and MAC/IP address of the AN 152 through the L2CP control message.
  • the flowchart is shown in FIG. 19, and only one AN is identified in FIG. 19, and the actual implementation is implemented.
  • the IP edge node 151 generates an L2CP control packet corresponding to each AN 152 of the bundled link and sends it to each corresponding AN 152 to implement control of each AN 152 corresponding to the bundle link.
  • the description is made by using only one AN 152 as an example.
  • the method includes: Step S1901:
  • the IP edge node 151 listens to a specific DHCP message and listens to a specific DHCP message, for example: DHCP.
  • the binding/unbinding of the corresponding ports of multiple AN152s is controlled to generate L2CP control packets.
  • the L2CP control packet controls binding/unbinding of corresponding ports of multiple ANs 152.
  • the binding of the port of the AN152 to the MAC/IP address is controlled.
  • the DHCP RELEASE message is received, the unbinding of the port and MAC/IP address of the AN152 is performed. control.
  • IP edge node 151 The necessary steps for the internal implementation of the IP edge node 151 are as follows:
  • the L2CP control packet that controls the binding/unbinding of the corresponding port of the plurality of 152s is generated by the foregoing steps.
  • the IP edge node 151 sends the corresponding L2CP control packet to each AN 152 corresponding to the bundle link. .
  • step S1902 the transmission of the L2CP control message is sent directly to the plurality of AN152s corresponding to the bundle link without going through the bundling system.
  • Step S1903 After receiving the L2CP control message, each AN152 parses the L2CP control message to obtain one or more types including the type of operation (binding/unbinding), the corresponding port, and the MAC/IP address information. And according to the L2CP control message implementation Bind or unbind a port with a MAC/IP address.
  • the IP edge node 151 listens to the DHCP message, and generates a corresponding L2CP control message, and controls the AN152 to implement binding or solution of the port and MAC/IP of the AN152 by using the L2CP control message. Bind.
  • the present invention can be implemented by hardware, or can be implemented by means of software plus necessary general hardware platform, and the technical solution of the present invention. It can be embodied in the form of a software product that can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), including a number of instructions for making a computer device (may It is a personal computer, a server, or a network device, etc.) that performs the methods described in various embodiments of the present invention.
  • a non-volatile storage medium which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.
  • a computer device may It is a personal computer, a server, or a network device, etc.
  • modules in the apparatus in the embodiments may be distributed in the apparatus of the embodiment according to the description of the embodiments, or may be correspondingly changed in one or more apparatuses different from the embodiment.
  • the modules of the above embodiments may be combined into one module, or may be further split into a plurality of sub-modules.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Small-Scale Networks (AREA)

Description

一种绑定 /解绑定的处理方法、 系统和装置 本申请要求于 2008年 6月 17日提交中国专利局、 申请号为 200810127008. 9、 发明名称为 "一 种绑定 /解绑定的处理方法、 系统和装置"的中国专利申请的优先权， 其全部内容通过引用结合在本 申请中。 技术领域
本发明实施例涉及通信技术领域， 特别涉及一种绑定 /解绑定的处理方法、 系统和装置。 发明背景 随着用户对接入带宽的需求， 运营商运营网络电视 （Internet Protocol Television, IPTV) 等视频增值业务的迫切需求， 以及企业接入对带宽越来越高的需求的急剧增长， 传统的数字用户线 (Digital Subscriber Line, xDSL) 接入方式越来越难满足日益增加的带宽需求。
由于现在许多用户仍然依赖铜线接入， 因此现有技术采用 DSL捆绑技术， 以使铜线接入满足日益 增加的带宽需求。 DSL捆绑技术通过同时复用两对以上的 DSL线路来实现带宽的提升。
在 DSL线路捆绑的方式上， 存在板内捆绑、 板间捆绑及跨数字用户线路接入复用器 （Digital Subscriber Line Access Multiplexer, DSLAM) 的捆绑方式， 前两种在实际应用上存在诸多的限制， 而跨 DSLAM的捆绑方式为运营商提供了更加灵活的捆绑方式， 适用范围较广。
现有技术提供了一种通过在链路层聚合来实现捆绑的方法， 在链路层通过以太网协议实现多个 链路的捆绑， 具体可通过扩展可选的位于媒体访问控制（Media Access Control , MAC) CLIENT (客 户端） 子层及 MAC/optional MAC Sublayer (可选的 MAC子层）之间的 Link Aggregation Sublayer
(链路汇聚子层） 来实现多链路的汇聚， 同时现有技术还扩展了链路汇聚控制协议 （Link
Aggregation Control Protocol , LACP) 来实现汇聚 （Aggregation) 各功能实体之间的信息交互。
在上述方法的实现系统中， 系统通过帧分发算法将多个帧分发到不同的端口， 在系统的对端实 现聚合， 同一个会话的帧通过一个单一端口转发。
现在用户接入越来越依赖动态主机配置协议 (Dynamic Host Configuration Protocol , DHCP ) 的方式， 用户终端通过 DHCP协议动态获取因特网协议 （Internet Protocol , IP) 地址等配置信息， 从而实现用户的动态接入。
但是发明人发现现有技术中： 在跨 AN捆绑的场景下， 数据报文分别通过不同的数据链路或线路 传送， 另外在 DHCP接入的场景下， M等节点通过 DHCP Snooping监听 DHCP报文来实现端口与 MAC/IP 地址的绑定或解绑定。 因此， 当 DHCP报文也如普通报文一样被分段传送或在某个单一链路上被传送 时， 并不是每个 AN节点都能接收到 DHCP报文， 也就无法通过监听 DHCP报文来实现端口与 MAC/IP地址 的绑定或解绑定。 发明内容 本发明实施例提供一种绑定 /解绑定的处理方法、 系统和装置， 以实现捆绑链路对应的各个 AN 均能接收到 DHCP报文， 从而可以根据接收到的 DHCP报文实现端口与 MAC/IP地址的绑定或解绑定。
为达到上述目的， 本发明实施例一方面提供一种绑定的处理系统， 包括： IP边缘节点和接入节 点 AN，
所述 IP边缘节点， 用于监听接收的动态主机配置协议 DHCP报文， 在监听到特定的 DHCP报文之 后， 将所述特定的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP确认报 文或 DHCP应答报文；
所述接入节点 M， 用于接收所述 IP边缘节点发送的特定的 DHCP报文， 解析并获取所述特定的 DHCP报文携带的 IP地址或媒体接入控制 MAC地址， 根据所述 IP地址或 MAC地址， 进行所述 AN的 端口与所述 IP地址或 MAC地址的绑定。
另一方面， 本发明实施例还提供一种解绑定的处理系统， 包括： 远程网关 RG和接入节点 AN， 所述 RG， 用于监听接收的动态主机配置协议 DHCP报文， 在监听到特定的 DHCP报文之后， 将所 述特定的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP释放报文；
所述接入节点 AN, 用于接收所述 RG发送的特定的 DHCP报文， 解析并获取所述特定的 DHCP报 文携带的 IP地址或媒体接入控制 MAC地址， 根据所述 IP地址或 MAC地址， 进行所述 AN的端口与所 述 IP地址或 MAC地址的解绑定。
再一方面， 本发明实施例还提供一种 IP边缘节点， 包括：
链路捆绑单元， 用于监听接收的 DHCP报文， 在监听到所述特定的 DHCP报文之后， 将所述特定 的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP确认报文或 DHCP应答报 文；
核心网侧接口单元， 用于与核心网侧进行报文交互；
汇聚网侧接口单元， 用于与汇聚网侧进行报文交互。
再一方面， 本发明实施例还提供一种远程网关 RG， 包括：
链路捆绑单元， 用于监听接收的 DHCP报文， 在监听到所述特定的 DHCP报文之后， 将所述特定 的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP释放报文；
用户侧接口单元， 用于与用户侧网络进行报文交互；
信号转换单元， 用于对所述用户侧网络发送的报文进行信号转换。
再一方面， 本发明实施例还提供一种绑定 /解绑定的处理方法， 包括：
监听接收的动态主机配置协议 DHCP报文；
在监听到特定的 DHCP报文之后， 将所述特定的 DHCP报文转发给捆绑链路对应的各个 AN， 并指 示所述 AN根据所述特定的 DHCP报文对所述 AN的端口与所述 IP地址或媒体接入控制 MAC地址进行 绑定 /解绑定， 所述特定的 DHCP报文包括 DHCP确认报文、 DHCP应答报文或 DHCP释放报文。
再一方面， 本发明实施例还提供一种绑定 /解绑定的处理方法， 包括：
监听接收的 DHCP报文；
在监听到特定的 DHCP报文之后， 生成层二控制协议 L2CP控制报文， 并将所述 L2CP控制报文发 送至捆绑链路对应的各个 AN, 所述 L2CP控制报文指示所述捆绑链路对应的各个 AN对所述 L2CP控 制报文携带的端口与 IP或 MAC地址进行绑定 /解绑定。
再一方面， 本发明实施例还提供一种绑定 /解绑定的处理系统， 包括： IP 边缘节点和接入节点 AN,
所述 IP边缘节点， 用于监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， 生成层二控制 协议 L2CP控制报文， 并将所述 L2CP控制报文发送至捆绑链路对应的各个 AN;
所述 AN, 用于接收所述 IP边缘节点发送的 L2CP控制报文， 解析并获取所述 L2CP控制报文中 携带的端口， 以及 IP或 MAC地址信息， 并根据所述获取的端口， 以及 IP或 MAC地址信息， 对所述 端口与 IP或 MAC地址进行绑定 /解绑定。
再一方面， 本发明实施例还提供一种 IP边缘节点， 包括：
接入控制单元， 用于监听接收的 DHCP报文， 并在监听到特定的 DHCP报文之后， 生成 L2CP控制 报文， 所述 L2CP控制报文指示所述捆绑链路对应的各个 AN对所述 L2CP控制报文携带的端口与 IP 或 MAC地址进行绑定 /解绑定， 所述特定的 DHCP报文包括 DHCP确认报文、 DHCP应答报文或 DHCP释 放报文；
链路捆绑单元， 用于为所述接入控制单元提供捆绑链路对应的各个 AN的端口信息； 核心网侧接口单元， 用于与核心网侧进行报文交互；
汇聚网侧接口单元， 用于与汇聚网侧进行报文交互。
与现有技术相比， 本发明实施例具有以下优点： 通过本发明实施例， 捆绑链路对应的各个 M均 能接收 IP边缘节点发送的特定的 DHCP报文， 从而可以根据所述特定的 DHCP报文携带的 IP地址或 MAC地址， 将 AN的端口与获取的 IP地址或 MAC地址进行绑定或解绑定。 本发明实施例在跨 AN捆绑 场景下， 为 AN的端口与 MAC或 IP地址的绑定或解绑定提供了一种实现方法。 附图简要说明 图 1为跨 AN捆绑的实现系统的示意图；
图 2为在 DSL和 P0N应用场景下， 都能对线路进行捆绑的实现系统示意图；
图 3为本发明实施例绑定 /解绑定的处理方法的流程图；
图 4为本发明实施例绑定的处理系统的结构图；
图 5为本发明实施例 IP边缘节点的结构图；
图 6为本发明实施例绑定的处理系统的连接关系示意图；
图 7为本发明实施例将 AN的端口与 MAC/IP地址进行绑定的实施过程示意图；
图 8为本发明实施例将端口与 MAC/IP地址进行绑定的流程图；
图 9为本发明实施例解绑定的处理系统的结构图；
图 10为本发明实施例 RG的结构图；
图 11为本发明实施例将 AN的端口与 MAC/IP地址进行解绑定的实施过程示意图；
图 12为本发明实施例将端口与 MAC/IP地址进行解绑定的流程图；
图 13为本发明实施例提供的一种 RG及 IP边缘节点的转发控制单元的实现方式示意图； 图 14为本发明实施例提供的另一种 RG及 IP边缘节点的转发控制单元的实现方式示意图； 图 15为本发明实施例绑定 /解绑定的处理系统的结构图；
图 16为本发明实施例 IP边缘节点的结构图；
图 17为本发明实施例绑定 /解绑定的处理方法的流程图；
图 18为本发明实施例绑定 /解绑定的处理系统的实现示意图；
图 19为本发明实施例实现 AN的端口与 MAC/IP地址绑定或解绑定的处理方法流程图。 实施本发明的方式 本发明实施例提供一种绑定 /解绑定的处理方法， 在跨 AN的捆绑场景下， 实现了端口与 MAC/IP 地址的绑定或解绑定， 从而可以对非法 MAC/IP地址报文进行阻止， 避免了非法 MAC/IP地址报文对 网络侧设备的攻击。
如图 1所示， 为跨 AN捆绑的实现系统的示意图， 以 DSL作为应用场景为例， 所述系统可以主要 包括三个部分：远程网关（Remote Gateway, RG)、 IP边缘节点 /汇聚开关和多个接入节点 ANx、……、
ANy。
其中， RG包括用户侧接口单元、 链路捆绑单元及多个调制解调器 Modem 1、 ……、 Modem n。 用户侧接口单元一方面与用户侧网络相连以接收和发送用户侧网络的数据报文， 另一方面与链 路捆绑单元相连。
链路捆绑单元为捆绑实现的主要部分，主要用于实现数据在上行方向的多个链路上的负荷分担， 以及对下行的数据报文重新进行恢复处理。 链路捆绑单元可以通过以下技术实现技术， 例如： 可以 基于美国电气及电子工程师学会 （Institute of Electrical and Electronics Engineers, IEEE) 802. 3ad实现， 也可以基于 IEEE 802. 3ah实现。
调制解调器 Modem 1、 ……、 Modem n用于 DSL信号的调制解调。
另一方面， IP边缘节点 /汇聚开关包括汇聚网侧接口单元、 链路捆绑单元及核心网侧接口单元。 汇聚网侧接口单元与汇聚网侧及接入节点 Mx、……、 ANy相连，用于接收和发送汇聚网的报文， 将链路捆绑单元发送的报文转发至汇聚网侧的多个链路， 并将汇聚网侧的多个链路发送的报文转发 至链路捆绑单元。
IP边缘节点 /汇聚开关的链路捆绑单元与 RG中的链路捆绑单元对应， 用于实现下行方向上的数 据在链路上的负荷分担， 以及对上行方向上数据的组织恢复； 相类似地， 其也可通过多种技术实现。
核心网侧接口单元一方面与核心网相连以接收和发送核心网侧的数据报文， 另一方面与链路捆 绑单元相连。
另外， 接入节点 ANx、 ……、 ANy可以为捆绑线路对应的多个 DSLAM。
跨 AN捆绑的实现方法包括对帧进行分片， 然后负荷分担到多条链路上进行传送， 还包括将会话 负荷分担到多条不同的链路上等多种方式。
另外， 在无源光网络 （Passive Optical Network, P0N) 应用场景下， 也可以对接入光纤进行 捆绑以提高带宽。 在实现系统的架构上， 只需要将图 1中的调制解调器改成 P0N技术下的光模块即 可， 因此在 DSL和 P0N应用场景下， 都能对线路进行捆绑的实现系统如图 2所示。
图 2中的信号转换单元在 DSL应用场景下对应调制解调器， 在 P0N应用场景中对应负责光电转 换处理的光模块， 接入线路在 DSL应用场景下对应接入环路， 在 P0N应用场景下对应光纤。
由于通过对 DHCP报文进行监听实现 AN上的端口与 MAC/IP地址的绑定， 是通过在 DHCP的正常 流程中对 DHCP确认报文 （DHCP ACK)或 DHCP应答报文 (DHCP REPLY)进行监听来实现的， DHCP服务 器将 IP地址等配置参数通过 DHCP ACK或 DHCP REPLY报文下发给 DHCP客户端， 此时 AN如能监听到 DHCP ACK或 DHCP REPLY报文， 则能解析出 MAC/IP地址信息， 从而实现将相应端口与 MAC/IP地址 进行绑定。
如图 3所示， 为本发明实施例绑定 /解绑定的处理方法的流程图， 包括：
步骤 S301 , 监听接收的 DHCP报文。
步骤 S302,在监听到特定的 DHCP报文之后，将特定的 DHCP报文转发给捆绑链路对应的各个 AN, 以供 AN根据该特定的 DHCP报文对该 AN的端口与 IP地址或 MAC地址进行绑定 /解绑定，所述特定的 DHCP报文包括 DHCP确认报文、 DHCP应答报文或 DHCP释放报文。
本发明实施例中， IP边缘节点或 RG监听接收的 DHCP报文， 在监听到特定的 DHCP报文， 例如： DHCP确认报文、 DHCP应答报文或 DHCP释放报文之后， IP边缘节点或 RG将特定的 DHCP报文转发给 捆绑链路对应的各个 AN。具体而言， IP边缘节点或 RG可以将特定的 DHCP报文向捆绑链路对应的所 有 AN广播。
其中， AN根据该特定的 DHCP报文对该 AN的端口与 IP地址或 MAC地址进行绑定 /解绑定具体可 以为：
AN解析并获取特定的 DHCP报文携带的 IP地址或 MAC地址， 并根据获取的 IP地址或 MAC地址， 对该 AN的端口与 IP地址或 MAC地址进行绑定 /解绑定。
在 AN根据特定的 DHCP报文对该 AN的端口与 IP地址或 MAC地址进行绑定 /解绑定之后， 该 AN 转发特定的 DHCP报文至远程网关 RG或 IP边缘节点， 在接收到多份相同的特定的 DHCP报文之后， 该 RG或 IP边缘节点仅转发一份特定的 DHCP报文， 丢弃其他相同的特定的 DHCP报文。
上述绑定 /解绑定的处理方法， 实现了将监听到的特定的 DHCP报文转发给捆绑链路对应的各个 AN, 从而使每个 AN都可以通过监听 DHCP报文， 实现将 AN对应的端口与 IP或 MAC地址的绑定 /解绑 定， 有效防止了非法 MAC/IP地址报文对网络侧设备的攻击， 提高了网络侧设备的接入安全性。
如图 4所示，为本发明实施例绑定的处理系统的结构图，包括： IP边缘节点 41和接入节点 AN42。
IP边缘节点 41，用于监听接收的 DHCP报文，在监听到特定的 DHCP报文之后，将该特定的 DHCP 报文转发给捆绑链路对应的各个 AN42， 该特定的 DHCP报文可以为 DHCP确认报文或 DHCP应答报文； 接入节点 AN42， 用于接收 IP边缘节点 41发送的特定的 DHCP报文， 解析并获取该特定的 DHCP 报文携带的 IP地址或 MAC地址，根据获取的 IP地址或 MAC地址，进行 AN42的端口与 IP地址或 MAC 地址的绑定。 需要注意的是， 图 4中仅示意性地画出一个接入节点 AN， 不过， 所述绑定的处理系统 中接入节点 AN的数目也可以为多个。
该绑定的处理系统还包括： 远程网关 RG43, 用于接收捆绑链路对应的各个 AN42转发的特定的 DHCP报文， 在接收到多份相同的特定的 DHCP报文之后， 转发一份特定的 DHCP报文至用户侧网络， 丢弃其他相同的特定的 DHCP报文。
上述绑定的处理系统， IP边缘节点 41通过将监听到的特定的 DHCP报文 (例如： DHCP确认报文 或 DHCP应答报文）转发给捆绑链路对应的各个 AN42, 从而使每个 AN42都可以通过监听 DHCP报文， 实现对 AN42对应的端口与 IP地址或 MAC地址进行绑定。
如图 5所示， 为本发明实施例 IP边缘节点 41的结构图， 包括：
链路捆绑单元 411， 用于监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， 将该特定的 DHCP报文转发给捆绑链路对应的各个 AN42， 其中该特定的 DHCP报文为 DHCP确认报文或 DHCP应答 报文；
核心网侧接口单元 412， 用于与核心网侧进行报文交互；
汇聚网侧接口单元 413， 用于与汇聚网侧进行报文交互。
其中， 链路捆绑单元 411可以包括： DHCP PROXY子单元 4111、 转发控制子单元 4112和帧广播 / 单播子单元 4113，
DHCP PROXY子单元 4111， 用于监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， 向转发 控制子单元 4112发送指示信息， 指示转发控制子单元 4112将特定的 DHCP报文发送至帧广播 /单播 子单元 4113;
转发控制子单元 4112， 用于根据 DHCP PROXY子单元 4111发送的指示信息， 将特定的 DHCP报 文发送至帧广播 /单播子单元 4113;
帧广播 /单播子单元 4113， 用于接收转发控制子单元 4112发送的特定的 DHCP报文， 并将特定 的 DHCP报文向捆绑链路对应的所有 AN 42广播。 另外， 帧广播 /单播子单元 4113还可以实现将报文 对特定的端口进行单播。
在上述 IP边缘节点 41中， 链路捆绑单元 411中的 DHCP PROXY子单元 4111监听接收的 DHCP报 文， 在监听到特定的 DHCP报文之后指示转发控制子单元 4112将监听到的特定的 DHCP报文 (例如： DHCP确认报文或 DHCP应答报文)转发给帧广播 /单播子单元 4113， 由帧广播 /单播子单元 4113将该 特定的 DHCP报文转发给捆绑链路对应的各个 AN42， 从而可以使 AN42根据该特定的 DHCP报文携带 的 IP或 MAC地址， 实现该 AN42的端口与 IP或 MAC地址进行绑定。
如图 6所示， 为本发明实施例绑定的处理系统的连接关系示意图， 本发明实施例在 IP边缘节点 41的链路捆绑单元 411上增加 DHCP PROXY功能。
其中， IP边缘节点 41的链路捆绑单元 411增加 DHCP PROXY子单元 4111后， 负责对 DHCP报文 进行特殊处理， 或者只对特定的 DHCP报文， 例如： DHCP确认报文或 DHCP应答报文进行特殊处理。 在监听到特定的 DHCP报文之后， 向转发控制子单元 4112发送指示信息， 指示转发控制子单元 4112 将特定的 DHCP报文发送至帧广播 /单播子单元 4113
另外， 在其他实施例中， DHCP PROXY子单元 4111也可以位于链路捆绑单元 411与核心网侧接 口单元 412之间， 或位于链路捆绑单元 411与汇聚网侧接口单元 413之间， 但链路捆绑单元 411需 要能感知 DHCP PROXY子单元 4111感知到的内容。
AN42具有 DHCP RELAY ( DHCP中继） 功能， AN通过设置于其内部的 DHCP中继单元感知 DHCP报 文， 以实现 AN42的端口与 MAC/IP地址的绑定。 然后将特定的 DHCP报文或全部的 DHCP报文转发给 RG43 o
RG43包括： 链路捆绑单元 431， 用于监听 M42发送的 DHCP报文， 在监听到特定的 DHCP报文， 例如： DHCP ACK或 DHCP REPLY报文后， 转发一份所述特定的 DHCP报文至用户侧网络， 而丢弃其它 相同的 DHCP报文。
该 RG43还可包括：
用户侧网络单元 432， 用于与用户侧网络进行报文交互。
信号转换单元 433， 用于对 RG43和 AN42交互的报文进行信号转换。
其中， 链路捆绑单元 431可以包括：
DHCP PROXY子单元 4311， 用于监听 M42发送的 DHCP报文， 在监听到特定的 DHCP报文， 例如： DHCP ACK或 DHCP REPLY报文后， 触发链路捆绑单元 431将接收到的相同的 DHCP ACK或 DHCP REPLY 报文， 转发一份所述特定的 DHCP报文至用户侧网络， 而丢弃其它相同的 DHCP报文。
在通过 DHCP协议实现地址等参数分配的过程中， DHCP服务器最后通过 DHCP ACK或 DHCP REPLY 下发最终分配给用户终端的地址等参数。 本发明实施例将 AN42的端口与 MAC/IP地址进行绑定的实 施过程， 如图 7所示， 主要包括两部分的处理：
( 1 ) IP边缘节点 41中的链路捆绑单元 411通过 DHCP PROXY子单元 4111监听接收的 DHCP报 文， 当监听到前述的 DHCP ACK或 DHCP REPLY报文后， 触发链路捆绑单元 411将该报文进行特殊处 理， 由帧广播 /单播子单元 4113将该报文转发至进行捆绑的所有链路中， 而并不进行正常的捆绑分 发操作；
( 2 ) RG43中的链路捆绑单元 431通过 DHCP PROXY子单元 4311监听 AN42发送过来的 DHCP报 文， 当监听到各个链路发送的 DHCP ACK或 DHCP REPLY报文后， 只通过用户侧接口单元 432转发一 份至用户侧网络， 而丢弃其它相同报文。 如图 8所示， 为本发明实施例将端口与 MAC/IP地址进行绑定的流程图，
图 8以系统中只包含两个 AN42 (AN x、 AN y) 为例进行说明， 但在实际的应用场景中， 但是本 发明实施例并不局限于此， 捆绑系统可能对应任意多个 （两个及以上）链路及链路上的 AN42, 且多 个 AN42对 DHCP报文的处理方法是相同的，因此任意多个 AN42场景的处理也可以从本发明实施例表 述的方法中推导出来。
具体包括以下步骤：
步骤 S801， IP边缘节点 41监听到进入捆绑系统的 DHCP ACK或 DHCP REPLY报文。
步骤 S802， IP边缘节点 41对该 DHCP报文进行特殊处理， 将该 DHCP报文完整地 （比如， 不对 该 DHCP包文进行分片处理）转发给多条捆绑链路对应的多个 AN42。具体可以为： IP边缘节点 41将 DHCP ACK/DHCP REPLY报文向捆绑链路对应的所有 AN42广播。 图 8中通过 AN x、 AN y表示捆绑链 路对应的多个 AN42。
步骤 S803, 捆绑链路对应的多个 AN42在接收到 DHCP报文后， 分别通过解析报文中分配的 IP 地址及 MAC地址， 在该 AN42上执行相应端口与 IP/MAC地址的绑定。
步骤 S804, 捆绑链路对应的多个 AN42都将 DHCP ACK/DHCP REPLY报文发送至 RG43。
步骤 S805， RG43在接收到多份相同的 DHCP报文后， 也需要对接收的多份 DHCP报文进行特殊处 理， 对于相同的 DHCP报文， 仅转发一份并将其他相同的 DHCP报文都丢弃。
本发明实施例 IP边缘节点 41中的链路捆绑单元 411在接收到 DHCP报文后， 不对 DHCP报文进 行捆绑系统正常的报文分发处理， 而是将 DHCP报文完整地转发给每一个捆绑链路对应的 AN42， 使 得每个捆绑链路对应的 AN42都能接收到 DHCP报文， 从而 AN42中的 DHCP RELAY都能感知到 DHCP报 文， 进而实现端口与 MAC/IP地址的绑定。
并且，本发明实施例中， 对 DHCP报文的处理可以是对特定的 DHCP报文都进行上述处理， 特定的 DHCP报文至少包括 DHCP ACK/DHCP REPLY报文； 或者是对所有的 DHCP报文都进行上述处理。
如图 9所示， 为本发明实施例解绑定的处理系统的结构图， 包括： 远程网关 RG91和接入节点 細2。
RG91 , 用于监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， 将该特定的 DHCP报文完整 地转发给捆绑链路对应的各个 AN92, 该特定的 DHCP报文为 DHCP释放报文；
接入节点 AN92, 用于接收 RG91发送的特定的 DHCP报文， 解析并获取特定的 DHCP报文携带的 IP地址或 MAC地址， 根据获取的 IP地址或 MAC地址， 进行 AN92的端口与 IP地址或 MAC地址的解 绑定。 需要注意的是， 图 9中仅示意性地画出一个接入节点 AN， 不过， 所述解绑定的处理系统中接 入节点 AN的数目也可以为多个。
进一步地， 该解绑定的处理系统还可以包括： IP 边缘节点 93， 用于接收捆绑链路对应的各个 AN92转发的特定的 DHCP报文， 在接收到多份相同的特定的 DHCP报文之后， 仅转发一份特定的 DHCP 报文至核心网侧， 丢弃其他相同的特定的 DHCP报文。
用户在主动释放 DHCP连接的时候发送 DHCP RELEASE (DHCP释放） 报文， 上述解绑定的处理系 统， RG91通过监听 DHCP RELEASE报文， 实现端口与 MAC/IP的解绑定。 RG91在检测到 DHCP RELEASE 报文后将该 DHCP RELEASE报文复制到捆绑系统对应的每个端口进行发送， 这样每个端口对应的每个 AN92就都能接收到 DHCP RELEASE报文从而实现解绑定。
如图 10所示， 为本发明实施例 RG的结构图， 包括：
链路捆绑单元 911，用于监听接收的 DHCP报文，在监听到特定的 DHCP报文之后，将特定的 DHCP 报文完整地转发给捆绑链路对应的各个 AN92, 该特定的 DHCP报文可以为 DHCP释放报文；
用户侧接口单元 912， 用于与用户侧网络进行报文交互；
信号转换单元 913， 用于对 RG91和 AN92交互的报文进行信号转换。 例如： 在 DSL接入技术中， 信号转换单元 913用于进行信号调制； 在 P0N接入技术中， 信号转换单元 913用于进行光电转换处 理。
其中， 链路捆绑单元 911包括 DHCP PROXY子单元 9111、 转发控制子单元 9112和帧广播 /单播 子单元 9113， 其中，
DHCP PROXY子单元 9111， 用于监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， 向转发 控制子单元 9112发送指示信息， 指示转发控制子单元 9112将特定的 DHCP报文发送至帧广播 /单播 子单元 9113;
转发控制子单元 9112， 用于根据 DHCP PROXY子单元 9111发送的指示信息， 将特定的 DHCP报 文发送至帧广播 /单播子单元 9113;
帧广播 /单播子单元 9113， 用于接收转发控制子单元 9112发送的特定的 DHCP报文， 并将该特 定的 DHCP报文向捆绑链路对应的所有 AN92广播。
上述 RG91 ,在链路捆绑单元 911的 DHCP PROXY子单元 9111监听到特定的 DHCP报文（例如： DHCP 释放报文)之后， 指示转发控制子单元 9112将特定的 DHCP报文发送至帧广播 /单播子单元 9113， 由 帧广播 /单播子单元 9113完整地将其转发给捆绑链路对应的各个 AN92, 从而使每个 AN92都可以通 过监听 DHCP报文， 实现将 AN92对应的端口与 IP或 MAC地址解绑定。
本发明实施例将 AN92的端口与 MAC/IP地址进行解绑定的实施过程， 如图 11所示， 主要包括两 个部分：
( 1 ) RG91中的链路捆绑单元 911通过 DHCP PROXY子单元 9111监听接收的 DHCP报文， 当监听 到前述的 DHCP RELEASE报文后， 向转发控制子单元 9112发送指示信息， 指示转发控制子单元 9112 将 DHCP RELEASE报文发送至帧广播 /单播子单元 9113， 由帧广播 /单播子单元 9113将其完整的转发 至捆绑对应的所有链路中， 而并不进行正常的捆绑分发操作。
( 2 ) IP边缘节点 93监听核心网侧发送过来的 DHCP报文，当监听到从捆绑链路对应的各个 AN92 发送过来的 DHCP RELEASE报文后， 对于相同的 DHCP RELEASE报文， 只转发一份至核心网侧， 而丢 弃其它相同的报文。
其中， IP边缘节点 93包括：
链路捆绑单元 931，用于监听核心网侧发送过来的 DHCP报文，在监听到捆绑链路对应的各个 AN92 发送过来的 DHCP RELEASE报文后， 对于相同的 DHCP RELEASE报文， 只转发一份至核心网侧， 而丢 弃其它相同的报文；
核心网侧接口单元 932， 用于与核心网侧进行报文交互；
汇聚网侧接口单元 933， 用于与汇聚网侧进行报文交互。
其中， 链路捆绑单元 931包括：
DHCP PROXY子单元 9311， 用于监听核心网侧发送过来的 DHCP报文， 在监听到 DHCP RELEASE报 文后， 触发链路捆绑单元 931将接收到的相同的 DHCP RELEASE报文， 只转发一份至核心网侧， 而丢 弃其它相同的报文。
如图 12所示， 为本发明实施例将端口与 MAC/IP地址进行解绑定的流程图， 图 12以系统中只包 含两个 AN92 (AN x、 AN y) 为例进行说明， 但在实际的应用场景中， 捆绑系统可能对应任意多个捆 绑 （两个及以上）链路及捆绑链路对应的 AN92, 且多个 AN92对 DHCP报文的处理方法是相同的， 因 此任意多个 AN92场景的处理方法也可以从本发明实施例表述的方法中推导出来。
步骤 S1201 , RG91监听到进入捆绑系统的 DHCP RELEASE报文。
步骤 S1202, RG91对该 DHCP RELEASE报文进行特殊处理， 并不对其进行捆绑的正常分发操作， 而是将其转发至捆绑链路对应的多个 AN92中， 具体可以为： RG91将 DHCP RELEASE报文向捆绑链路 对应的所有 AN92广播。 图 12中通过 AN x、 AN y表示捆绑链路对应的多个 AN92。
步骤 S1203， 捆绑链路对应的多个 AN92在接收到 DHCP报文后， 分别解析 DHCP RELEASE报文中 的 IP/MAC地址等信息， 在该 AN92上执行相应端口与 IP/MAC地址的解绑定。
步骤 S1204, 捆绑链路对应的多个 AN92都将 DHCP RELEASE报文发送至 IP边缘节点 93。 步骤 S1205， IP边缘节点 93在接收到多份相同的 DHCP报文后， 需要对接收的多份 DHCP报文进 行特殊处理， 对于相同的 DHCP报文， 仅转发一份并将其他相同的 DHCP报文都丢弃。
本发明实施例中 RG91的链路捆绑单元 911在接收到 DHCP报文后，不对 DHCP报文做捆绑系统正 常的分发报文的处理， 而是完整的将 DHCP报文转发给每一个捆绑链路对应的 AN92, 使得每一个捆 绑链路对应的 AN92都能接收到 DHCP报文， 因此， AN92中的 DHCP RELAY都能感知到 DHCP报文， 从 而实现 AN92的端口与 MAC/IP地址的解绑定。
本发明实施例中，对 DHCP报文的处理可以是对特定的 DHCP报文都进行上述的处理，特定的 DHCP 报文至少包括 DHCP RELEASE报文； 或者也可以对所有的 DHCP报文都进行处理，
上述对端口与 MAC/IP地址进行绑定与解绑定的方法， 在具体实现时， RG及 IP边缘节点均需要 能感知特定的 DHCP报文， 并且对特定的 DHCP报文不进行正常的捆绑分发操作而是将该特定的 DHCP 报文完整地转发至捆绑链路对应的每一个 AN。 本发明实施例提供的一种 RG及 IP边缘节点的转发控 制单元的实现方式， 如图 13所示， 转发控制单元 131位于 MAC客户端 132上， 该报文转发装置基于 IEEE 802. 3ad技术实现。
其中， 帧广播 /单播单元 133是在 IEEE 802. 3ad的实现技术中增加的专门针对捆绑系统内部广 播及特定单播的单元， 其功能可以是负责将报文针对所有端口进行广播及对特定端口进行单播， 且 只针对发送方向； 通过帧广播 /单播单元 133， 可以将接收的报文按照 IEEE 802. 3ad的分发方式及 本发明实施例的分发方式进行分发。
在本发明实施例中， 转发控制单元 131集成在 MAC客户端 （MAC Client ) 132上， 该转发控制 单元 131受 DHCP PROXY单元 134控制， 将转发的数据送至帧分发器 (Frame Distributor) 单元 135 或新增的帧广播 /单播单元 133。 图 13中 I表示报文的下行， 经过 DHCP PROXY单元 134到 MAC客户 端 132中的转发控制单元 131， II表示 DHCP PROXY单元 134对转发控制单元 131的控制， 控制报文 的转发流向， III表示 MAC客户端 132对报文的上行处理， 将报文转发至 DHCP PROXY单元 134。
DHCP PROXY单元 134: 负责监听 DHCP报文并对其做特殊操作， 下行方向控制 MAC客户端 132对 报文的转发处理， 本发明实施例中对特定的 DHCP报文做帧广播类型的转发， 即将特定的 DHCP报文 向捆绑的每个端口转发。 DHCP PROXY单元 134监听 DHCP报文， 对接收自多个链路上行相同的 DHCP 报文， 只转发一份， 将其它相同的报文丢弃。
在本发明实施例提供的捆绑系统中， DHCP PROXY单元 134监听 DHCP报文，当监听到特定的 DHCP 报文， 例如： DHCP ACK/REPLY或 DHCP RELEASE报文后， 控制 MAC客户端 132中的转发控制单元 131 将该报文送至帧广播 /单播单元 133进行处理。 转发控制单元 131接收到上述 DHCP报文后将其转发 至帧广播 /单播单元 133， 帧广播 /单播单元 133在接收到这些 DHCP报文后向捆绑对应的端口进行广 播， 通过上述操作， 实现了对特定 DHCP报文在捆绑系统中进行特殊处理， 即完整的将特定的 DHCP 报文转发给每一个对应的 AN。
如图 14所示， 为本发明实施例提供的另一种 RG及 IP边缘节点的转发控制单元的实现方式， 图 14中， 转发控制单元 131集成在帧分发单元 141上， 该报文转发装置基于 IEEE 802. 3ad技术实现。
其中， 帧广播 /单播单元 133是在 IEEE 802. 3ad的实现技术中增加的专门针对捆绑系统内部广 播及特定单播的单元， 其功能可以是负责将报文针对所有端口进行广播及对特定端口进行单播， 且 只针对发送方向； 通过帧广播 /单播单元 133， 可以将接收的报文按照 IEEE 802. 3ad的分发方式及 本发明实施例的分发方式进行分发。
在本发明实施例中， 转发控制单元 131集成在帧分发 （Frame Distribution) 单元 141上， 该 转发控制单元 131受 DHCP PROXY单元 134控制， 将转发的数据送至帧分发器 (Frame Distributor) 单元 135或帧广播 /单播单元 133， 如图 14所示， I表示报文的下行， 报文从 DHCP PROXY单元 134 经过 MAC客户端 132到帧分发单元 141中的转发控制单元 131， II表示 DHCP PROXY单元 134对转发 控制单元 131的控制， 控制报文转发的流向， III表示帧分发单元 141对报文的上行处理， 转发报 文经过 MAC客户端 132至 DHCP PROXY单元 134。
DHCP PROXY单元 134: 负责监听 DHCP报文并对其做特殊操作， 下行方向控制 MAC客户端 132对 报文的转发处理， 本发明实施例中对特定的 DHCP报文做帧广播类型的转发， 即将特定的 DHCP报文 向捆绑的每个端口转发； 对接收自多个链路上行方向的相同的 DHCP报文， 只转发一份， 而将其它相 同的报文丢弃。
在本发明实施例提供的捆绑系统中， DHCP PROXY单元 134监听 DHCP报文，当监听到特定的 DHCP 报文， 例如 DHCP ACK/REPLY或 DHCP RELEASE报文后， 控制帧分发模块 141中的转发控制单元 131 将该报文送至帧广播 /单播单元 133进行处理。 转发控制单元 131接收到上述 DHCP报文后将其转发 至帧广播 /单播单元 133， 帧广播 /单播单元 133在接收到这些 DHCP报文后向捆绑对应的端口进行广 播， 从而实现了在捆绑系统中对特定的 DHCP报文进行特殊处理， 即完整的将 DHCP报文转发给每一 个对应的 AN。
本发明实施例中， 特定 DHCP报文， 例如 DHCP ACK/REPLY或 DHCP RELEASE报文的接收仍然走 IEEE 802. 3ad的系统， 而通过 DHCP PROXY功能实现对特定 DHCP报文的特殊处理， 在接收到上述特 定 DHCP报文后， 仅正常转发第一个特定 DHCP报文， 对后续接收到的相同的特定 DHCP报文丢弃。
此外， 上述的报文转发的装置实现了在捆绑系统下对报文在捆绑对应端口的广播及对特定端口 的单播， 对应图 13中的 Transmission Sublayer (传输子层） 的实现以及图 14中 Aggregator (汇 聚器） 的实现。
下面介绍的实施例采用二层控制 （Layer 2 Control , L2C) 方式实现绑定 /解绑定的处理方法和 系统。
如图 15所示， 为本发明实施例绑定 /解绑定的处理系统的结构图， 包括： IP边缘节点 151和接 入节点 AN152,
IP边缘节点 151， 用于监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， 生成二层控制 协议 (Layer 2 Control Protocol , L2CP)控制报文， 并将所述 L2CP控制报文发送至捆绑链路对应 的各个 AN152;
AN152, 用于接收 IP边缘节点 151发送的 L2CP控制报文， 解析并获取该 L2CP控制报文中携带 的端口， 以及 IP或 MAC地址信息， 并根据获取的端口， 以及 IP或 MAC地址信息， 对端口与 IP或 MAC地址进行绑定 /解绑定。 需要注意的是， 图 15中仅示意性地画出一个接入节点 AN， 不过， 所述 绑定 /解绑定的处理系统中接入节点 AN的数目也可以为多个。
该绑定 /解绑定的处理系统还包括： 远程网关 RG153, 用于接收绑定链路对应的各个 AN152发送 的 DHCP报文。
上述绑定 /解绑定的处理系统， IP边缘节点 151监听 DHCP报文，并通过 L2CP控制报文控制 AN152 对 AN152的端口与 MAC/IP进行绑定或解绑定。
如图 16所示， 为本发明实施例 IP边缘节点的结构图， 包括：
接入控制单元 1511， 用于监听接收的 DHCP报文， 并在监听到特定的 DHCP报文之后， 生成 L2CP 控制报文， 该 L2CP控制报文指示捆绑链路对应的各个 AN152对 L2CP控制报文携带的端口与 IP或 MAC地址进行绑定或解绑定， 该特定的 DHCP报文包括 DHCP确认报文、 DHCP应答报文或 DHCP释放报 文；
链路捆绑单元 1512， 用于为接入控制单元 1511提供捆绑链路对应的各个 AN的端口信息； 核心网侧接口单元 1513， 用于与核心网侧进行报文交互；
汇聚网侧接口单元 1514， 用于与汇聚网侧进行报文交互。
其中， 接入控制单元 1511包括：
DHCP PROXY子单元 15111， 用于监听接收的 DHCP报文；
L2C子单元 15112， 用于在 DHCP PROXY子单元 15111监听到特定的 DHCP报文之后， 生成 L2CP 控制报文， 该 L2CP控制报文可用于指示捆绑链路对应的各个 AN152将所述 L2CP控制报文携带的端 口与 IP或 MAC地址进行绑定或解绑定。
上述 IP边缘节点 151， 接入控制单元 1511的 DHCP PROXY子单元 15111监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， L2C子单元 15112生成 L2CP控制报文， 控制捆绑链路对应的各个 AN152对 L2CP控制报文携带的端口与 IP或 MAC地址进行绑定或解绑定， 从而实现了端口与 IP/MAC 地址的绑定或解绑定。
如图 17所示， 为本发明实施例绑定 /解绑定的处理方法， 包括：
步骤 S1701 , 监听接收的 DHCP报文。
步骤 S1702, 在监听到特定的 DHCP报文之后， 生成 L2CP控制报文， 并将该 L2CP控制报文发送 至捆绑链路对应的各个 AN152, 该 L2CP控制报文指示捆绑链路对应的各个 AN152对所述 L2CP控制 报文携带的端口与 IP或 MAC地址进行绑定 /解绑定。
捆绑链路对应的各个 AN152对所述 L2CP控制报文携带的端口与 IP或 MAC地址进行绑定 /解绑定 具体可以为：
捆绑链路对应的各个 AN152接收 L2CP控制报文， 解析并获取该 L2CP控制报文中携带的端口， 以及 IP或 MAC地址信息， 根据获取的端口， 以及 IP或 MAC地址信息， 对 AN152的端口与 IP或 MAC 地址进行绑定 /解绑定。
上述绑定 /解绑定的处理方法， IP边缘节点 151监听 DHCP报文， 并生成相应的 L2CP控制报文， 通过该 L2CP控制报文控制 AN152实现 AN152的端口与 MAC/IP的绑定或解绑定。
本实施例绑定 /解绑定的处理系统的实现示意图如图 18所示，本实施例中的 IP边缘节点 151增 加了接入控制单元 1511， 该接入控制单元 1511包括 DHCP PROXY子单元 15111及 L2C子单元 15112; 本实施例中， DHCP PROXY子单元 15111、 L2C子单元 15112及链路捆绑单元 1512各自进行的处 理及报文交互如下：
DHCP PROXY子单元 15111用于监听上行捆绑系统发送的 DHCP报文， 以及下行即将发送至捆绑 系统的 DHCP报文， 负责触发 L2C子单元 15112发起 L2C对 AN152的控制。其中， 触发条件包括但不 限于：
( 1 ) 监听到下行的即将发送至捆绑系统的 DHCP ACK或 DHCP REPLY报文时， 触发对 AN152的端 口与 MAC/IP地址绑定控制；
( 2 )监听到上行的从捆绑系统过来的 DHCP RELEASE报文时， 触发对 AN152的端口及 MAC/IP地 址的解绑定控制， 等等。
在本实施例中，链路捆绑单元 1512需要向 L2C子单元 15112提供与用户 RG153捆绑的 AN152及 端口信息。
L2C子单元 15112在 DHCP PROXY子单元 15111触发对 AN152的控制后， L2C子单元 15112首先 通过链路捆绑单元 1512获得与用户 DSL捆绑的 AN152及 AN152相应的端口信息，加上从 DHCP PROXY 子单元 15111获得的 MAC及 IP地址信息， 生成对相应 AN152及 AN152的端口的绑定或解绑定命令， 即相应的 L2CP控制报文， 并向各个 AN152发送相应的 L2CP控制报文。
另外， 本实施例中的 RG153包括： 链路捆绑单元 1531， 用于监听 AN152发送的 DHCP报文， 在 监听到特定的 DHCP报文， 例如： DHCP ACK、 DHCP REPLY或 DHCP RELEASE报文后， 只转发一份至用 户侧网络， 而丢弃其它相同报文。
该 RG153还包括： 用户侧网络单元 1532， 用于与用户侧网络进行报文交互。
信号转换单元 1533， 用于对 RG153和 AN152交互的报文进行信号转换。
下面描述 IP边缘节点 151通过 L2CP控制报文实现 AN152的端口与 MAC/IP地址绑定或解绑定的 处理方法， 其流程图如图 19所示， 图 19中只标识了一个 AN， 实际实现中， IP边缘节点 151生成与 捆绑链路的各个 AN152对应的 L2CP控制报文并发送到各个相应的 AN152来实现对捆绑链路对应的每 个 AN152进行控制， 并不是只有一个 AN152, 本实施例仅以一个 AN152为例进行说明， 具体包括： 步骤 S1901 , IP边缘节点 151监听特定的 DHCP报文， 在监听到特定的 DHCP报文， 例如： DHCP
ACK/DHCP REPLY或 DHCP RELEASE报文后， 控制多个 AN152对应端口的绑定 /解绑定， 生成 L2CP控 制报文。 所述 L2CP控制报文对多个 AN152的对应端口的绑定 /解绑定进行控制。
在监听到 DHCP ACK/DHCP REPLY报文后， 对 AN152的端口与 MAC/IP地址的绑定进行控制； 在监 听到 DHCP RELEASE报文后， 对 AN152的端口与 MAC/IP地址的解绑定进行控制。
其中 IP边缘节点 151内部实施的必要步骤有：
a) 监听并感知到 DHCP报文来自捆绑系统；
b) 获得发送 DHCP报文的用户的捆绑链路对应的多个 AN152及其端口的信息；
c ) 通过 DHCP PROXY子单元 15111获取 DHCP报文中的 IP/MAC地址信息；
最后通过上述的步骤生成对多个 AN152的对应端口的绑定 /解绑定进行控制的 L2CP控制报文； 步骤 S1902, IP边缘节点 151向捆绑链路对应的各个 AN152发送相应的 L2CP控制报文。
在步骤 S1902 中， L2CP控制报文的发送不经过捆绑系统而是直接发送至捆绑链路对应的多个 AN152 o
步骤 S1903， 各个 AN152在接收到 L2CP控制报文后， 解析 L2CP控制报文， 获取包括操作的类 型 （绑定 /解绑定）、 对应的端口和 MAC/IP地址信息中的一种或几种， 并根据该 L2CP控制报文实施 端口与 MAC/IP地址的绑定或解绑定。
上述绑定 /解绑定的处理方法， IP边缘节点 151监听 DHCP报文， 并生成相应的 L2CP控制报文， 通过该 L2CP控制报文控制 AN152实现 AN152的端口与 MAC/IP的绑定或解绑定。
通过以上的实施方式的描述， 本领域的技术人员可以清楚地了解到本发明可以通过硬件实现， 也可以可借助软件加必要的通用硬件平台的方式来实现基于这样的理解， 本发明的技术方案可以以 软件产品的形式体现出来， 该软件产品可以存储在一个非易失性存储介质 （可以是 CD-R0M， U盘， 移动硬盘等） 中， 包括若干指令用以使得一台计算机设备 （可以是个人计算机， 服务器， 或者网络 设备等）执行本发明各个实施例所述的方法。
本领域技术人员可以理解附图只是一个优选实施例的示意图， 附图中的模块或流程并不一定是 实施本发明所必须的。
本领域技术人员可以理解实施例中的装置中的模块可以按照实施例描述进行分布于实施例的装 置中， 也可以进行相应变化位于不同于本实施例的一个或多个装置中。 上述实施例的模块可以合并 为一个模块， 也可以进一步拆分成多个子模块。
上述本发明实施例序号仅仅为了描述， 不代表实施例的优劣。
以上公开的仅为本发明的几个具体实施例， 但是， 本发明并非局限于此， 任何本领域的技术人 员能思之的变化都应落入本发明的保护范围。

Claims

权利要求
1、 一种绑定的处理系统， 其特征在于， 包括： IP边缘节点和接入节点 AN，
所述 IP边缘节点， 用于监听接收的动态主机配置协议 DHCP报文， 在监听到特定的 DHCP报文之 后， 将所述特定的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP确认报 文或 DHCP应答报文；
所述接入节点 M， 用于接收所述 IP边缘节点发送的特定的 DHCP报文， 解析并获取所述特定的 DHCP报文携带的 IP地址或媒体接入控制 MAC地址， 根据所述 IP地址或 MAC地址， 进行所述 AN的 端口与所述 IP地址或 MAC地址的绑定。
2、 如权利要求 1所述绑定的处理系统， 其特征在于， 还包括：
远程网关 RG， 用于接收所述捆绑链路对应的各个 AN转发的所述特定的 DHCP报文， 在接收到多 份相同的特定的 DHCP报文之后， 转发所述特定的 DHCP报文中的一份至用户侧网络， 并丢弃其他特 定的 DHCP报文。
3、 一种解绑定的处理系统， 其特征在于， 包括： 远程网关 RG和接入节点 AN，
所述 RG， 用于监听接收的动态主机配置协议 DHCP报文， 在监听到特定的 DHCP报文之后， 将所 述特定的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP释放报文； 所述接入节点 AN, 用于接收所述 RG发送的特定的 DHCP报文， 解析并获取所述特定的 DHCP报 文携带的 IP地址或媒体接入控制 MAC地址， 根据所述 IP地址或 MAC地址， 进行所述 AN的端口与所 述 IP地址或 MAC地址的解绑定。
4、 如权利要求 3所述解绑定的处理系统， 其特征在于， 还包括：
IP边缘节点， 用于接收所述捆绑链路对应的各个 AN转发的所述特定的 DHCP报文， 在接收到多 份相同的特定的 DHCP报文之后， 转发所述特定的 DHCP报文中的一份至核心网侧， 并丢弃其他特定 的 DHCP报文。
5、 一种 IP边缘节点， 其特征在于， 包括：
链路捆绑单元， 用于监听接收的 DHCP报文， 在监听到所述特定的 DHCP报文之后， 将所述特定 的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP确认报文或 DHCP应答报 文；
核心网侧接口单元， 用于与核心网侧进行报文交互；
汇聚网侧接口单元， 用于与汇聚网侧进行报文交互。
6、 如权利要求 5所述 IP边缘节点， 其特征在于， 所述链路捆绑单元包括： 动态主机配置协议 代理 DHCP PROXY子单元、 转发控制子单元和帧广播 /单播子单元，
所述 DHCP PROXY子单元， 用于监听接收的 DHCP报文， 在监听到所述特定的 DHCP报文之后， 向 所述转发控制子单元发送指示信息，指示所述转发控制子单元将所述特定的 DHCP报文发送至所述帧 广播 /单播子单元；
所述转发控制子单元， 用于根据所述 DHCP PROXY子单元发送的指示信息， 将所述特定的 DHCP 报文发送至所述帧广播 /单播子单元；
所述帧广播 /单播子单元， 用于接收所述转发控制子单元发送的所述特定的 DHCP报文， 并将所 述特定的 DHCP报文向捆绑链路对应的所有 M广播。
7、 一种远程网关 RG， 其特征在于， 包括：
链路捆绑单元， 用于监听接收的 DHCP报文， 在监听到所述特定的 DHCP报文之后， 将所述特定 的 DHCP报文转发给捆绑链路对应的各个 AN, 所述特定的 DHCP报文为 DHCP释放报文；
用户侧接口单元， 用于与用户侧网络进行报文交互；
信号转换单元， 用于对所述用户侧网络发送的报文进行信号转换。
8、 如权利要求 7所述 RG， 其特征在于， 所述链路捆绑单元包括： 动态主机配置协议代理 DHCP PROXY子单元、 转发控制子单元和帧广播 /单播子单元，
所述 DHCP PROXY子单元， 用于监听接收的 DHCP报文， 在监听到所述特定的 DHCP报文之后， 向 所述转发控制子单元发送指示信息，指示所述转发控制子单元将所述特定的 DHCP报文发送至所述帧 广播 /单播子单元；
所述转发控制子单元， 用于根据所述 DHCP PROXY子单元发送的指示信息， 将所述特定的 DHCP 报文发送至所述帧广播 /单播子单元；
所述帧广播 /单播子单元， 用于接收所述转发控制子单元发送的所述特定的 DHCP报文， 并将所 述特定的 DHCP报文向捆绑链路对应的所有 M广播。
9、 一种绑定 /解绑定的处理方法， 其特征在于， 包括：
监听接收的动态主机配置协议 DHCP报文；
在监听到特定的 DHCP报文之后， 将所述特定的 DHCP报文转发给捆绑链路对应的各个 AN， 并指 示所述 AN根据所述特定的 DHCP报文对所述 AN的端口与所述 IP地址或媒体接入控制 MAC地址进行 绑定 /解绑定， 所述特定的 DHCP报文包括 DHCP确认报文、 DHCP应答报文或 DHCP释放报文。
10、 如权利要求 9绑定 /解绑定的处理方法， 其特征在于， 所述 M根据所述特定的 DHCP报文对 所述 AN的端口与所述 IP地址或媒体接入控制 MAC地址进行绑定 /解绑定具体包括： 所述 AN解析并获取所述特定的 DHCP报文携带的 IP地址或 MAC地址；
根据所述获取的 IP地址或 MAC地址， 对所述 AN的端口与所述 IP地址或 MAC地址进行绑定 /解 绑定。
11、 如权利要求 9所述绑定 /解绑定的处理方法， 其特征在于， 所述 AN根据所述特定的 DHCP报 文对所述 M的端口与所述 IP地址或媒体接入控制 MAC地址进行绑定 /解绑定之后， 还包括：
所述 M转发所述特定的 DHCP报文至远程网关 RG或 IP边缘节点， 在接收到多份相同的特定的 DHCP报文之后， 所述 RG或 IP边缘节点转发一份所述特定的 DHCP报文， 并丢弃其他特定的 DHCP报 文。
12、 一种绑定 /解绑定的处理方法， 其特征在于， 包括：
监听接收的 DHCP报文；
在监听到特定的 DHCP报文之后， 生成层二控制协议 L2CP控制报文， 并将所述 L2CP控制报文发 送至捆绑链路对应的各个 AN, 所述 L2CP控制报文指示所述捆绑链路对应的各个 AN对所述 L2CP控 制报文携带的端口与 IP或 MAC地址进行绑定 /解绑定。
13、 如权利要求 12所述绑定 /解绑定的处理方法， 其特征在于， 所述捆绑链路对应的各个 AN对 所述 L2CP控制报文携带的端口与 IP或 MAC地址进行绑定 /解绑定具体包括：
所述捆绑链路对应的各个 AN接收所述 L2CP控制报文；
解析并获取所述 L2CP控制报文中携带的端口， 以及 IP或 MAC地址信息；
根据获取的端口， 以及 IP或 MAC地址信息， 对所述端口与 IP或 MAC地址进行绑定 /解绑定。
14、 一种绑定 /解绑定的处理系统， 其特征在于， 包括： IP边缘节点和接入节点 AN，
所述 IP边缘节点， 用于监听接收的 DHCP报文， 在监听到特定的 DHCP报文之后， 生成层二控制 协议 L2CP控制报文， 并将所述 L2CP控制报文发送至捆绑链路对应的各个 AN;
所述 AN, 用于接收所述 IP边缘节点发送的 L2CP控制报文， 解析并获取所述 L2CP控制报文中 携带的端口， 以及 IP或 MAC地址信息， 并根据所述获取的端口， 以及 IP或 MAC地址信息， 对所述 端口与 IP或 MAC地址进行绑定 /解绑定。
15、 一种 IP边缘节点， 其特征在于， 包括：
接入控制单元， 用于监听接收的 DHCP报文， 并在监听到特定的 DHCP报文之后， 生成 L2CP控制 报文， 所述 L2CP控制报文指示所述捆绑链路对应的各个 AN对所述 L2CP控制报文携带的端口与 IP 或 MAC地址进行绑定 /解绑定， 所述特定的 DHCP报文包括 DHCP确认报文、 DHCP应答报文或 DHCP释 放报文； 链路捆绑单元， 用于为所述接入控制单元提供捆绑链路对应的各个 AN的端口信息； 核心网侧接口单元， 用于与核心网侧进行报文交互；
汇聚网侧接口单元， 用于与汇聚网侧进行报文交互。
16、 如权利要求 15所述 IP边缘节点， 其特征在于， 所述接入控制单元包括：
DHCP PROXY子单元， 用于监听接收的 DHCP报文；
层二控制 L2C子单元， 用于在所述 DHCP PROXY子单元监听到所述特定的 DHCP报文之后， 生成 L2CP控制报文， 所述 L2CP控制报文指示所述捆绑链路对应的各个 AN对所述 L2CP控制报文携带的 端口与 IP或 MAC地址进行绑定 /解绑定。
PCT/CN2009/072184 2008-06-17 2009-06-08 一种绑定/解绑定的处理方法、系统和装置 WO2009152734A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP09765373A EP2288088A4 (en) 2008-06-17 2009-06-08 PROCESS PROCESS, SYSTEM AND DEVICE FOR CONNECTING / SOLVING
US12/967,448 US20110080842A1 (en) 2008-06-17 2010-12-14 Binding/unbinding processing method, system, and apparatus

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200810127008.9 2008-06-17
CN2008101270089A CN101610206B (zh) 2008-06-17 2008-06-17 一种绑定/解绑定的处理方法、系统和装置

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US12/967,448 Continuation US20110080842A1 (en) 2008-06-17 2010-12-14 Binding/unbinding processing method, system, and apparatus

Publications (1)

Publication Number Publication Date
WO2009152734A1 true WO2009152734A1 (zh) 2009-12-23

Family

ID=41433690

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2009/072184 WO2009152734A1 (zh) 2008-06-17 2009-06-08 一种绑定/解绑定的处理方法、系统和装置

Country Status (4)

Country Link
US (1) US20110080842A1 (zh)
EP (1) EP2288088A4 (zh)
CN (1) CN101610206B (zh)
WO (1) WO2009152734A1 (zh)

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102137109B (zh) * 2011-03-18 2013-08-28 华为技术有限公司 一种访问控制方法、接入设备及系统
CN102413044B (zh) * 2011-11-16 2015-02-25 华为技术有限公司 一种DHCP Snooping绑定表生成的方法、装置、设备及系统
CN105704261B (zh) * 2012-02-03 2019-03-29 联想(北京)有限公司 一种解决ip地址冲突的方法、电子设备和计算机
CN103795581B (zh) * 2012-10-29 2018-05-11 新华三技术有限公司 地址处理方法和设备
CN103209092B (zh) * 2013-02-28 2016-03-30 成都西加云杉科技有限公司 广播风暴抑制方法及系统
CN104113491A (zh) * 2013-04-22 2014-10-22 中兴通讯股份有限公司 一种数据传输方法及装置
CN103731514B (zh) * 2013-12-29 2017-01-18 国云科技股份有限公司 一种虚拟网络管理方法
CN104158723B (zh) * 2014-08-15 2017-04-19 深圳市蜂联科技有限公司 一种开放式智能网关平台共享用户账号的实现方法
CN108153160A (zh) * 2017-12-26 2018-06-12 陈占辉 一种无线智能家居的控制系统及其控制方法
US10404747B1 (en) * 2018-07-24 2019-09-03 Illusive Networks Ltd. Detecting malicious activity by using endemic network hosts as decoys
CN109495539B (zh) * 2018-09-26 2021-08-31 深圳爱根斯通科技有限公司 防止子设备被误删除的方法、装置、电子设备及存储介质
CN112443871B (zh) * 2019-08-29 2022-02-25 宁波方太厨具有限公司 楼宇集中式排烟系统中室内吸油烟机的解除绑定方法
CN113973101A (zh) * 2020-07-25 2022-01-25 华为技术有限公司 一种表项信息处理方法及装置
CN114070636B (zh) * 2021-11-22 2023-08-11 迈普通信技术股份有限公司 安全控制方法、装置，交换机，服务器及网络系统

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1885763A (zh) * 2006-07-06 2006-12-27 华为技术有限公司 一种防止ip地址泄露的方法
CN1901552A (zh) * 2005-07-20 2007-01-24 华为技术有限公司 无线接入技术中对动态ip地址进行处理的方法
US20070121617A1 (en) * 2005-11-29 2007-05-31 Cisco Technology, Inc. Extending sso for DHCP snooping to two box redundancy
WO2007064523A1 (en) * 2005-11-30 2007-06-07 Thomson Licensing Method and apparatus for providing a stable clock signal
CN101098290A (zh) * 2006-06-29 2008-01-02 中兴通讯股份有限公司 一种在an上实现ip地址防欺骗的装置及其方法
CN101115063A (zh) * 2007-08-30 2008-01-30 中兴通讯股份有限公司 宽带接入设备中防止mac地址/ip地址欺骗的方法
CN101123800A (zh) * 2006-08-11 2008-02-13 华为技术有限公司 WiMAX多边缘系统和WiMAX与有线网络互连的多边缘系统

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101083444B1 (ko) * 2004-04-28 2011-11-14 테크노버스, 인크. 이더넷 수동 광 통신망에서 ｌ3-어웨어 스위칭을 하는 방법및 장치

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1901552A (zh) * 2005-07-20 2007-01-24 华为技术有限公司 无线接入技术中对动态ip地址进行处理的方法
US20070121617A1 (en) * 2005-11-29 2007-05-31 Cisco Technology, Inc. Extending sso for DHCP snooping to two box redundancy
WO2007064523A1 (en) * 2005-11-30 2007-06-07 Thomson Licensing Method and apparatus for providing a stable clock signal
CN101098290A (zh) * 2006-06-29 2008-01-02 中兴通讯股份有限公司 一种在an上实现ip地址防欺骗的装置及其方法
CN1885763A (zh) * 2006-07-06 2006-12-27 华为技术有限公司 一种防止ip地址泄露的方法
CN101123800A (zh) * 2006-08-11 2008-02-13 华为技术有限公司 WiMAX多边缘系统和WiMAX与有线网络互连的多边缘系统
CN101115063A (zh) * 2007-08-30 2008-01-30 中兴通讯股份有限公司 宽带接入设备中防止mac地址/ip地址欺骗的方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2288088A4 *

Also Published As

Publication number Publication date
EP2288088A1 (en) 2011-02-23
CN101610206A (zh) 2009-12-23
CN101610206B (zh) 2012-04-18
US20110080842A1 (en) 2011-04-07
EP2288088A4 (en) 2011-06-08

Similar Documents

Publication Publication Date Title
WO2009152734A1 (zh) 一种绑定/解绑定的处理方法、系统和装置
CN1232081C (zh) 网络通信中组播报文的转发方法
EP2036283B1 (en) Method and apparatus for reliably delivering multicast data
EP2671352B1 (en) System and method for aggregating and estimating the bandwidth of multiple network interfaces
EP2587755B1 (en) Method, apparatus and system for implementing multicast
US20080137669A1 (en) Network of nodes
JP2008507159A (ja) イーサネット（登録商標）受動光ネットワークにおけるｌ３−アウェアスイッチングの方法と装置
RU2556464C2 (ru) Способ и соответствующее устройство совместного использования трафика при групповой передаче
WO2010034255A1 (zh) 数据传输方法及网络节点和数据传输系统
WO2007061566A1 (en) Enhanced multicast vlan registration
WO2016062106A1 (zh) 报文处理方法、装置及系统
WO2012034309A1 (zh) Nat网络中sip终端间文件传输的方法、终端及系统
US20080095093A1 (en) IP multicast service system, switching device, and group selection transmission method used therefor
WO2011017982A1 (zh) 媒体业务处理系统、方法及终端
WO2009082905A1 (fr) Procédé système et dispositif commutateur permettant l'établissement dynamique de réseau local virtuel de multidiffusion
WO2011009369A1 (zh) 一种实现rtp数据流多路复用的信令协商方法和装置
WO2009033388A1 (fr) Procédé d'utilisation d'un système de sécurité étendue, système et appareil de sécurité étendue
EP2685665B1 (en) Multicast transmission using a unicast protocol
WO2011072583A1 (zh) 用户接入方法、系统及接入服务器、接入设备
WO2008141572A1 (fr) Procédé et système servant à réaliser un contrôle d'entretien sur des sessions clients
WO2011140873A1 (zh) 光传输层的数据传输方法及装置
EP2043300A1 (en) Data transmission network, method, network element and pro-gram
WO2012079374A1 (zh) 对虚拟串口和物理串口进行绑定的方法、装置及系统
WO2009015570A1 (fr) Dispositif et procédé de traitement de message
JP4285101B2 (ja) リアルタイムデータ通信システム、リアルタイムデータ通信装置およびリアルタイムデータ通信方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09765373

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2009765373

Country of ref document: EP