WO2015127852A1 - 无线局域网隧道建立方法、装置及接入网系统 - Google Patents

无线局域网隧道建立方法、装置及接入网系统 Download PDF

Info

Publication number
WO2015127852A1
WO2015127852A1 PCT/CN2015/072497 CN2015072497W WO2015127852A1 WO 2015127852 A1 WO2015127852 A1 WO 2015127852A1 CN 2015072497 W CN2015072497 W CN 2015072497W WO 2015127852 A1 WO2015127852 A1 WO 2015127852A1
Authority
WO
WIPO (PCT)
Prior art keywords
tunnel
configuration parameter
data
access point
bras
Prior art date
Application number
PCT/CN2015/072497
Other languages
English (en)
French (fr)
Inventor
李晋
夏晋伟
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP20176762.1A priority Critical patent/EP3787227B1/en
Priority to EP15755623.4A priority patent/EP3094043B1/en
Publication of WO2015127852A1 publication Critical patent/WO2015127852A1/zh
Priority to US15/248,958 priority patent/US10355878B2/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/12—Setup of transport tunnels
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10—Small scale networks; Flat hierarchical networks
    • H04W84/12—WLAN [Wireless Local Area Networks]

Definitions

  • the present invention relates to communications technologies, and in particular, to a wireless local area network tunnel establishing method, apparatus, and access network system.
  • WLAN Wireless Local Area Network
  • the network structure based on the WLAN technology usually includes a device (STAtion, STA for short), an access point (AP), and an access controller (AC).
  • STAtion STA for short
  • AP access point
  • AC access controller
  • the role of the AP is to connect the STA to the wired network.
  • the AC manages the AP through the Control and Provisioning of Wireless Access Point (CAPWAP) protocol.
  • CAPWAP Wireless Access Point
  • CAPWAP tunnel is established between the AP and the AC as a forwarding channel for control and data packets between the AP and the AC.
  • the invention provides a wireless local area network tunnel establishing method and device and an access network system for reducing controller overhead.
  • a first aspect of the present invention provides a method for establishing a wireless local area network tunnel, including:
  • the access controller sends a first configuration message to the access point device, where the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes an IP address of the at least one broadband access server
  • the binding information of the at least one service set identifier so that the access point device establishes a data tunnel with the at least one broadband access server according to the first tunnel establishment configuration parameter
  • the access controller establishes a control tunnel with at least one of the access point devices.
  • the method further includes:
  • the access controller sends a second configuration message to the broadband access server or the authentication and authorization accounting device, where the second configuration message includes the second tunnel establishment configuration parameter, where the second tunnel is established.
  • the configuration parameter includes binding information of at least one IP address of the access point device and at least one of the service set identifiers.
  • a second aspect of the present invention provides an access controller, including:
  • a sending module configured to send a first configuration message to the access point device, where the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes an IP address of the at least one broadband access server Binding information with the at least one service set identifier, so that the access point device establishes a data tunnel with at least one of the broadband access servers according to the first tunnel establishment configuration parameter;
  • a control tunnel establishing module configured to establish a control tunnel with at least one of the access point devices.
  • the sending module is further configured to send a second configuration message to the broadband access server or the authentication and authorization accounting device, where the second configuration message includes The second tunnel establishes configuration parameters, where the second tunnel establishment configuration parameter includes binding information of at least one IP address of the access point device and at least one of the service set identifiers.
  • a third aspect of the present invention provides an access point device, including:
  • a receiving module configured to receive a first configuration message sent by the access controller, where the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes an IP of at least one broadband access server Binding information of the address and at least one service set identifier;
  • control tunnel establishing module configured to establish a control tunnel with the access controller
  • a data tunnel establishing module configured to establish a data tunnel with at least one of the broadband access servers according to the first tunnel establishment configuration parameter.
  • the method further includes:
  • a sending module configured to send a setup data tunnel request to the at least one broadband access server according to the first tunnel establishment configuration parameter.
  • the receiving module is further configured to receive, by the at least one broadband access server, a data tunnel response message, if The security of the access point device is verified by at least one of the broadband access servers, and the establishing data tunnel response message includes verification pass indication information.
  • the third tunnel establishment configuration parameter further includes at least one service set identifier and at least one virtual Binding information of the area network identifier.
  • the method further includes:
  • an identifier adding module configured to: if the access point device has at least one binding information of the service set identifier and the at least one virtual area network identifier, according to the service set identifier selected by the user, and at least one The binding information of the service set identifier and the at least one virtual area network identifier is added, and the corresponding virtual area network identifier is added to the user data.
  • the sending module is further configured to: pass the user data through the access point device and the broadband access server according to the binding information of the IP address of the at least one broadband access server and the at least one service set identifier.
  • the data tunnel transmits the corresponding broadband access server.
  • a fourth aspect of the present invention provides a broadband access server, including:
  • An acquiring module configured to acquire a second tunnel establishment configuration parameter, where the second tunnel establishment configuration parameter includes binding information of at least one IP address of the access point device and at least one service set identifier;
  • a data tunnel establishing module configured to establish a data tunnel with the at least one access point device according to the second tunnel establishment configuration parameter.
  • the acquiring module is specifically configured to receive a second configuration message sent by an access controller, where the second configuration message includes a second tunnel Establish configuration parameters; or,
  • the obtaining module is specifically configured to acquire the second tunnel establishment configuration parameter from the authentication and authorization accounting device.
  • the method further includes: a receiving module, configured to receive the setup data sent by the at least one access point device Tunnel request.
  • the method further includes: a verification module, configured to establish configuration parameters according to the second tunnel, to at least one of the access point devices Validity of the legality;
  • a sending module configured to send a setup data tunnel response message to the at least one access point device, where the at least one access point device passes the validity verification, the establishing the data tunnel response message includes the verification pass indication information;
  • the data tunnel establishing module is specifically configured to establish a data tunnel with at least one of the access point devices that are verified by legality.
  • a fifth aspect of the present invention provides an access network system, comprising: at least one access controller described in any one of the second aspect or the second aspect, or at least one of the foregoing
  • the access point device described in the third aspect or any feasible implementation of the third aspect and at least one of the above-described fourth aspect or the broadband connection described in any of the possible implementations of the fourth aspect Into the server.
  • the method and device for establishing a WLAN tunnel and the access network system provided by the embodiment of the present invention send a first configuration message to the AP by using the AC, where the first configuration message includes the first tunnel establishment configuration parameter, where the first tunnel establishment configuration
  • the parameter includes binding information of at least one BRAS IP address and at least one SSID. Therefore, the BRAS establishes a data tunnel with the AP, and the AC establishes a control tunnel with the AP, thereby separating the data tunnel from the control tunnel and reducing the unnecessary overhead of the AC.
  • FIG. 1 is a schematic diagram of an access network deployment scenario provided by the prior art
  • FIG. 2 is a schematic flowchart of a method for establishing a wireless local area network tunnel according to an embodiment of the present invention
  • FIG. 3 is a schematic flowchart of another method for establishing a wireless local area network tunnel according to an embodiment of the present disclosure
  • FIG. 4 is a schematic flowchart of another method for establishing a wireless local area network tunnel according to an embodiment of the present disclosure
  • FIG. 5 is a schematic flowchart of another method for establishing a wireless local area network tunnel according to an embodiment of the present disclosure
  • FIG. 6 is a schematic structural diagram of an AC according to an embodiment of the present disclosure.
  • FIG. 7 is a schematic structural diagram of an AP according to an embodiment of the present disclosure.
  • FIG. 8 is a schematic structural diagram of an AP according to an embodiment of the present disclosure.
  • FIG. 9 is a schematic structural diagram of a BRAS according to an embodiment of the present disclosure.
  • FIG. 10 is a schematic structural diagram of another BRAS according to an embodiment of the present disclosure.
  • FIG. 11 is a schematic structural diagram of an access network system according to an embodiment of the present disclosure.
  • FIG. 1 is a schematic diagram of an access network deployment scenario provided by the prior art.
  • an access point device (Access Point, AP for short) provides multiple service set identifiers (Service Set).
  • Identifier referred to as SSID
  • each SSID corresponds to a virtual access point device (Virtual Access Point, VAP for short) and belongs to different operators.
  • VAP mapping to different virtual area networks Virtual Local Area Network, referred to as VLAN
  • the data of different SSIDs are mapped to different VLANs and connected to different operators through a shared access controller (Access Controller, AC for short).
  • Access Controller AC for short
  • Each operator deploys an Authentication Accounting Authorization (AAA) device and an ingress device (Portal) device.
  • the AC forwards user data to the corresponding carrier network according to the VLAN.
  • the AP management VLAN, the AC management VLAN, and the service field point VLAN in the prior art are known.
  • the large-scale deployment of APs is highly complex (such as configuring VLANs, etc.).
  • the tunnel and the data tunnel are not separated, all user data must be forwarded via the AC.
  • the user traffic is bypassed. Because in this mode of operation, each operator authenticates and charges, the AC does not need to perceive traffic; the bypass of user traffic greatly increases the overhead of the AC.
  • the following embodiments of the present invention provide a method, an apparatus, and an access network system for establishing a wireless local area network (Telecommunication) tunnel, thereby separating the control tunnel from the data tunnel, thereby reducing unnecessary overhead of the AC. Simplify the complexity of AP deployment.
  • Telecommunication wireless local area network
  • FIG. 2 is a schematic flowchart of a method for establishing a wireless local area network tunnel according to an embodiment of the present invention.
  • the method is implemented as an access controller (AC).
  • AC access controller
  • Step 100 The AC sends a first configuration message to an access point device (Access Point, AP for short).
  • an access point device Access Point, AP for short.
  • the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes at least one BRAS IP address and at least one SSID binding. Information.
  • the binding information represents the binding relationship between the BRAS and the SSID.
  • the AP when the configuration parameter is established by the first tunnel, when the AP discovers the BRAS corresponding to the SSID provided by the AP, the AP establishes a data tunnel with the at least one BRAS according to the first tunnel establishment configuration parameter.
  • the AP establishes a data tunnel according to the IP address of the BRAS in the first tunnel establishment configuration parameter, and then, for the SSID selected by the user, the AP matches the SSID with the binding information of the BRAS and the SSID to determine a corresponding data tunnel, and the data of the SSID.
  • the data tunnel is sent to the corresponding BRAS.
  • Step 101 The AC establishes a control tunnel with at least one AP.
  • control tunnel established by the AC and the at least one AP is separate from the data tunnel.
  • a CAPWAP tunnel is established between the AP and the AC as the forwarding channel for control packets between the AP and the AC.
  • the AC provided by the embodiment sends a first configuration message to the AP by using the AC, where the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes an IP address of the at least one broadband access server. Binding information for at least one SSID. Therefore, the BRAS establishes a data tunnel with the AP, and the AC establishes a control tunnel with the AP, thereby separating the data tunnel from the control tunnel, thereby reducing unnecessary overhead of the AC.
  • the method further includes:
  • Step 102 The AP sends a second configuration message to the BRAS or the authentication and authorization accounting device.
  • the second configuration message includes a second tunnel establishment configuration parameter, where the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID.
  • the interaction between the AP and the authentication and authorization accounting device, the AP and the BRAS may pass through, but is not limited to, a RADIUS message, that is, the second configuration message may be a RADIUS message.
  • the BRAS selects the corresponding AP according to the binding relationship to establish a data tunnel.
  • the BRAS is directly notified to the binding relationship between the AP and the SSID, and the BRAS is notified by the authentication and authorization accounting device as an example.
  • the embodiments of the present invention are not limited.
  • the second configuration message includes a second tunnel establishment configuration parameter, where the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID, where the binding information represents the binding of the AP and the SSID. Relationship.
  • the implementation manner of the second configuration message is directly sent by the AC to the BRAS.
  • This method needs to modify a large number of existing protocols, in order to make full use of the existing technology protocol framework, avoid unnecessary protocol modification, reduce costs, and pass the AC and certification authorization accounting in the existing agreement.
  • the alternate interaction, as well as the interaction of the authentication and authorization accounting device with the BRAS, can avoid the additional costs described above due to the modification of the protocol. That is, the AC sends a second configuration message including the second tunnel establishment configuration parameter to the authentication and authorization accounting device.
  • the AC obtains the corresponding second tunnel establishment configuration parameter from the authentication and authorization accounting device.
  • the first tunnel establishment configuration parameter further includes binding information of at least one SSID and at least one virtual local area network identifier (VLAN ID).
  • VLAN ID virtual local area network identifier
  • the second tunnel establishment configuration parameter further includes binding information of the at least one SSID and the at least one VLAN ID.
  • a field point VLAN needs to be specifically set up to describe the correspondence between different APs and different BRASs. Otherwise, the BRAS cannot know from the AC which data the data was sent from. In this embodiment, since the AC separately informs the AP and the BRAS of the binding information of the at least one SSID and the at least one VLAN ID, the field point VLAN is not required to identify different APs, thereby simplifying the complexity of the AP deployment.
  • the first tunnel establishment configuration parameter also includes at least The binding information of the SSID and the at least one VLAN ID
  • the second tunnel establishment configuration parameter further includes binding information of the at least one SSID and the at least one VLAN ID, so that the subsequent operator binds the information according to the at least one SSID and the at least one VLAN ID.
  • a feasible implementation manner is: when the BRAS binds information according to the IP address of the at least one AP and the at least one SSID, and The binding information of the at least one SSID and the at least one VLAN ID is used to verify the legality of the at least one AP.
  • the AP can select one and can support the tunnel type, and inform the corresponding BRAS of the tunnel type.
  • the configuration parameter can be established in the first tunnel to include at least one of the IP addresses corresponding to each BRAS.
  • the tunnel type is implemented.
  • the second tunnel establishment configuration parameter further includes at least one tunnel type corresponding to the IP address of each AP.
  • FIG. 3 is a schematic flowchart of another method for establishing a WLAN tunnel according to an embodiment of the present invention.
  • the executor of the method for establishing a WLAN tunnel shown in FIG. 3 is an AP. Referring to FIG. 3, the method includes the following steps:
  • Step 200 The AP receives the first configuration message sent by the AC.
  • the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes binding information of the IP address of the at least one BRAS and the at least one SSID.
  • Step 201 The AP establishes a control tunnel with the AC.
  • control tunnel established by the AP and the AC is separate from the following data tunnel.
  • a CAPWAP tunnel is established between the AP and the AC as the forwarding channel for control packets between the AP and the AC.
  • Step 202 The AP establishes a configuration parameter according to the first tunnel, and establishes a data tunnel with the at least one BRAS.
  • the AP establishes a data tunnel with the BRAS based on the binding information of the IP address of the at least one BRAS and the at least one SSID provided in the first tunnel establishment configuration parameter.
  • a data tunnel is established with multiple BRASs.
  • the AP establishes a data tunnel according to the IP address of the BRAS in the first tunnel establishment configuration parameter, and then selects the data for the user.
  • the SSID, the AP matches the binding information of the BRAS and the SSID to determine a corresponding data tunnel, and sends the data of the SSID to the corresponding BRAS through the data tunnel.
  • the AP receives the first configuration message sent by the AC through the AP, where the first configuration message includes the first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes the IP address of the at least one broadband access server. Binding information with at least one SSID, and The AP establishes a control tunnel with the AC, and the AP establishes a configuration parameter according to the first tunnel, and establishes a data tunnel with at least one BRAS. Thereby, the data tunnel is separated from the control tunnel, which reduces the unnecessary overhead of the AC.
  • step 200 of FIG. 3 the following steps may also be included:
  • Step 203 The AP sends a data tunneling request to the at least one BRAS according to the first tunnel establishment configuration parameter.
  • the AP learns the SSID corresponding to the service set provided by the AP and meets the binding information of the IP address of at least one BRAS and the at least one SSID in the first tunnel establishment configuration parameter, the AP binds to the SSID provided by itself.
  • the BRAS of the relationship sends the setup data tunnel request. It should be noted that if multiple service sets provided by the AP correspond to different BRASs, and the first tunnel establishment configuration parameter has the binding of the multiple service sets and different BRASs The relationship may be that the AP may separately send a setup data tunnel request to the multiple BRASs.
  • the method may further include: the AP receiving the setup data tunnel response message sent by the at least one BRAS.
  • the establishment of the data tunnel response message includes the verification pass indication information.
  • the BRAS that receives the request verifies the security of the AP that sends the data tunneling request according to the second tunnel establishment configuration parameter that is obtained by the AP.
  • the security of the AP is verified by the at least one BRAS, and the setup data tunnel response message sent by the BRAS includes the verification pass indication information to indicate that the AP can establish a data tunnel with the BRAS.
  • step 202 in FIG. 3 is:
  • the AP establishes a data tunnel with at least one BRAS according to the verification through the indication information and the first tunnel establishment configuration parameter.
  • the BRAS allows the AP to establish a data tunnel with the BRAS.
  • the AP establishes at least one BRAS IP address and at least one provided in the configuration parameter of the first tunnel.
  • the binding information of the SSID can establish a data tunnel with the BRAS. For when multiple BRASs allow the AP to establish a data tunnel with it, a data tunnel is established with multiple BRASs.
  • the first tunnel establishment configuration parameter further includes at least one SSID and at least one Binding information of the VLAN ID.
  • a field point VLAN needs to be specifically set up to describe the correspondence between different APs and different BRASs. Otherwise, the BRAS cannot know from the AC which data the data was sent from. In this embodiment, because the AC informs the AP of the binding information, it is not necessary to add a field point VLAN to identify different APs. Therefore, the complexity of the AP deployment is simplified.
  • the method further includes:
  • the AP adds a corresponding VLAN ID to the user data according to the SSID selected by the user and the binding information of the at least one SSID and the at least one VLAN ID. And transmitting the user data to the corresponding BRAS through the data tunnel of the AP and the BRAS according to the binding information of the IP address of the at least one BRAS and the at least one SSID.
  • the first tunnel establishment configuration parameter further includes at least one tunnel type corresponding to an IP address of each BRAS.
  • FIG. 4 is a schematic flowchart of another method for establishing a WLAN tunnel according to an embodiment of the present invention.
  • the method is implemented as a broadband access server (BRAS).
  • BRAS broadband access server
  • Step 300 The BRAS acquires a second tunnel establishment configuration parameter.
  • the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID.
  • Step 301 The BRAS establishes a data tunnel with the at least one AP according to the second tunnel establishment configuration parameter.
  • the BRAS provided in this embodiment acquires the second tunnel establishment configuration parameter by using the BRAS, where the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID.
  • the BRAS establishes a data tunnel with the at least one AP according to the second tunnel establishment configuration parameter. Thereby, the data tunnel is separated from the control tunnel, which reduces the unnecessary overhead of the AC.
  • step 100 in FIG. 4 can be implemented by any feasible implementation as follows:
  • the broadband access server receives the second configuration message sent by the AC, and the second configuration
  • the information includes a second tunnel establishment configuration parameter.
  • the broadband access server acquires the second tunnel establishment configuration parameter from the authentication and authorization accounting device.
  • the AC sends the second tunnel establishment configuration parameter to the authentication and authorization accounting device in advance.
  • the use of the AC and the authentication and authorization accounting device in the prior art, and the interaction process between the authentication and authorization accounting device and the broadband access server avoids the fact that the AC directly sends the second configuration message to the broadband access server in the first mode.
  • a large number of modifications of the protocol reduce the application cost of the method for establishing a wireless local area network tunnel in the embodiment of the present invention.
  • step 300 of FIG. 4 the method further includes:
  • Step 302 The BRAS receives a setup data tunnel request sent by at least one AP.
  • the BRAS After receiving the data tunneling request sent by the at least one AP, the BRAS can directly establish a data tunnel with the at least one AP according to the second tunnel establishment configuration parameter, and can also perform legality verification on the AP based on the establishment data tunnel request.
  • the method further includes:
  • the BRAS verifies the legality of the at least one AP according to the second tunnel establishment configuration parameter.
  • the establishing a data tunnel response message includes the verification passing indication information, and if the AP fails the legality verification, the establishing the data tunnel response message may further include the verification failure indication information, to indicate the The AP cannot establish a data tunnel.
  • the BRAS sends a setup data tunnel response message to the at least one AP. If at least one AP passes the validity verification, the setup data tunnel response message includes the verification pass indication information.
  • step 302 a feasible implementation manner of step 301 of FIG. 4 is:
  • the BRAS establishes a data tunnel with at least one AP that is verified by legality.
  • a feasible implementation manner is: when the BRAS is bound according to the IP address of the at least one AP and the at least one SSID, and The binding information of the at least one SSID and the at least one VLAN ID is used to verify the legality of the at least one AP.
  • the second tunnel establishment configuration parameter further includes binding information of the at least one SSID and the at least one VLAN ID.
  • a field point VLAN needs to be specifically set up to describe the correspondence between different APs and different BRASs. Otherwise, BRAS It is impossible to know from the AC which data is actually sent from which AP.
  • the AC notifies the binding of at least one SSID of the BRAS to the at least one VLAN ID, and does not need to add a field point VLAN to identify different APs. Therefore, the complexity of the AP deployment is simplified.
  • the AP provides multiple SSIDs
  • the VLAN IDs of the different SSIDs are different, and the carrier cannot be bound according to the binding information of the IP address of the at least one AP and the at least one SSID.
  • the BRAS performs further processing on the corresponding service set belonging to the operator in the BRAS.
  • the second tunnel establishment configuration parameter further includes at least one The binding information of the SSID and the at least one VLAN ID, so that the subsequent operator performs fine control on the service set corresponding to the different SSID according to the binding information of the at least one SSID and the at least one VLAN ID, and the specific implementation of the refined control
  • the program is not limited here.
  • the broadband access server verifies the legality of the at least one AP according to the binding information of the IP address of the at least one AP and the at least one SSID, and the binding information of the at least one SSID and the at least one VLAN ID.
  • the second tunnel establishment configuration parameter further includes at least one tunnel type corresponding to an IP address of each AP.
  • FIG. 5 is a schematic flowchart of another method for establishing a WLAN tunnel according to an embodiment of the present invention.
  • the embodiment combines an AC, an AP, a broadband access server, and an authentication and authorization accounting device.
  • the method includes the following steps:
  • Step 400 Dynamic host configuration protocol (DHCP) process: The AP acquires the IP address of the AP from the DHCP server AP.
  • DHCP Dynamic host configuration protocol
  • the DHCP process includes an interaction message of a discovery message, an offer, a request, a request, and an acknowledgement (ack).
  • Step 401 AC discovery process.
  • the AC discovery process is used by the AP to discover the AC, and the AC discovery process includes a discovery request message and a discovery response message.
  • Step 402 AP/AC association process.
  • the join phase includes a join request message and a join response message (Join Reponse).
  • Step 403 the version update process.
  • step 403 is optional and is used to load the AP version.
  • Step 404 the configuration process.
  • the configuration process includes: configuring a status request and a first configuration message, and the AC sends a first configuration message to the AP.
  • the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes binding information of an IP address and an SSID of the other side BRAS, and optionally, an SSID and a VLAN. Binding information of the ID, based on this information, the AP establishes a data tunnel with the corresponding BRAS. Take Table 1 as an example: the AP provides SSID A1, SSID A2, SSID B1, SSID B2, and SSID C, where SSID A1 and SSID A2 belong to operator A, SSID B1 and SSID B2 belong to carrier B, and SSID C belongs to Carrier C.
  • the IP address of the carrier B of the carrier A (the access gateway of the carrier network) is IP ADDRESS 1
  • the IP address of the BRAS of the operator B is IP ADDRESS 2
  • the IP address of the BRAS of the operator C is IP ADDRESS 3.
  • the operator's BRAS can also carry the tunnel type supported by the BARS (such as L2TP, CAPWAP, GRE, IPSEC, etc.).
  • the AC can also send VLANs corresponding to different SSIDs.
  • the ID for example, the data of the SSID A1 is mapped to the VLAN ID1, and the data of the SSID A2 is mapped to the VLAN ID2, so that the BRAS of the operator A can perform fine control according to the VLAN ID after receiving the packet.
  • Table 1 Binding relationship of BRAS, SSID, and VLAN ID
  • the SSID and VLAN ID relationship may be 1:1; or it may be n:1, but not 1:n.
  • Step 405 Configure an inspection process.
  • the configuration check phase begins when the configuration phase is completed.
  • the configuration check includes a Change State Event Request message and a Change State Event Response message.
  • Step 406 The AC establishes a control channel with the AP.
  • the AP and the AC exchange control packets through the control channel of the CAPWAP tunnel.
  • steps 407 and 408 are two possible implementation manners, and the access network system in the embodiment of the present invention may select one of the steps.
  • Step 407 The AC sends a second configuration message to the BRAS.
  • the second configuration message includes the second tunnel establishment configuration parameter.
  • the second tunnel establishment configuration parameter includes binding information of the IP address and the SSID of the AP, and optionally, the SSID and the VLAN ID are also bound.
  • the BRAS verifies the legitimacy of the AP to which the tunnel establishment request is sent based on this information.
  • Table 2 Take Table 2 as an example: the IP address of AP1 is IP ADDRESS 1, and SSID A1 and SSID A2 are provided. The SSID A1 and SSID A2 are attributed to the carrier A.
  • the AP can carry the IP address in addition to the IP address. Supported tunnel types (eg L2TP, CAPWAP, GRE, IPSec, etc.).
  • the AC can also send a VLAN ID corresponding to the different SSIDs.
  • the data of the SSID A1 is mapped to the VLAN ID1
  • the data of the SSID A2 is mapped to the VLAN ID2, so that the BRAS of the operator A can receive the packet. Fine-grained control based on the VLAN ID.
  • Table 2 Binding relationship between AP, SSID, and VLAN ID
  • step 407 the AC sends the second configuration message to the BRAS.
  • the BRAS obtains the second tunnel establishment configuration parameter from the authentication and authorization accounting device, the AC sends the second configuration message to the authentication. Authorized billing equipment.
  • Step 408 The BRAS initiates an AP authorization check to the authentication and authorization accounting device.
  • the purpose of the authorization check is: after receiving the tunnel establishment request of the AP, the BRAS obtains the second tunnel establishment configuration parameter from the authentication and authorization accounting device. It should be noted that the BRAS may not use the tunnel establishment request of the receiving AP as a trigger condition for initiating the AP authorization check, that is, the BRAS actively obtains the second tunnel establishment configuration parameter from the authentication and authorization accounting device.
  • Step 409 the data channel is established.
  • a data channel is established between the AP and the BARS to forward user data packets.
  • FIG. 6 is a schematic structural diagram of an AC according to an embodiment of the present invention, which can perform various steps of the method shown in FIG. 2, and the functions of the parameters in the embodiment are the same as the functions of the parameters in the corresponding embodiment of FIG. , will not repeat them here.
  • the AC includes: a sending module 10, and a control tunnel establishing module 11.
  • the sending module 10 is configured to send a first configuration message to the AP.
  • the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes binding information of the at least one BARS IP address and the at least one SSID, so that the AP establishes configuration parameters according to the first tunnel.
  • At least one BARS establishes a data tunnel
  • the AP establishes a data tunnel according to the IP address of the BRAS in the first tunnel establishment configuration parameter, and then the AP performs the binding information between the SSID and the BRAS and the SSID for the SSID selected by the user.
  • the matching determines a corresponding data tunnel, and the data of the SSID is sent to the corresponding BRAS through the data tunnel.
  • the control tunnel establishing module 11 is configured to establish a control tunnel with at least one AP.
  • control tunnel established by the AC and the at least one AP is separate from the data tunnel.
  • the forwarding channel of the message is separate from the data tunnel.
  • the AC provided by the embodiment sends a first configuration message to the AP by using the sending module, where the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes at least one BARS IP address and at least one Binding information of the SSID, so that the AP establishes a data tunnel with at least one BARS according to the first tunnel establishment configuration parameter.
  • the control tunnel establishment module establishes a control tunnel with the AP, thereby separating the data tunnel from the control tunnel and reducing the unnecessary overhead of the AC.
  • the sending module 10 is further configured to send a second configuration message to the BRAS or the authentication and authorization accounting device.
  • the second configuration message includes a second tunnel establishment configuration parameter, where the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID.
  • the interaction between the AP and the authentication and authorization accounting device, the AP and the BRAS may pass through, but is not limited to, a RADIUS message, that is, the second configuration message may be a RADIUS message.
  • the sending module 10 After the sending module 10 sends the first tunnel establishment configuration parameter to the AP, the sending module 10 notifies the BRAS of the binding relationship between the AP and the SSID, thereby The BRAS is configured to select a corresponding AP to establish a data tunnel according to the binding relationship. However, the sending module 10 informs the BRAS of the binding relationship between the AP and the SSID. The sending module 10 directly informs the BRAS of the binding relationship between the AP and the SSID, and the BRAS is notified by the authentication and authorization accounting device.
  • the embodiments of the present invention are not limited to other possible implementation manners.
  • the second configuration message includes a second tunnel establishment configuration parameter, where the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID, where the binding information represents the binding of the AP and the SSID. Relationship.
  • the sending module 10 directly sends the second configuration message to the BRAS.
  • This method needs to modify a large number of existing protocols, in order to make full use of the existing technology protocol framework, avoid unnecessary protocol modification, reduce costs, and interact with the authentication and authorization accounting device in the existing protocol, as well as authentication and authorization accounting.
  • the interaction of the device with the BRAS can avoid the additional costs described above due to the modification of the protocol. That is, the sending module 10 sends a second configuration message including the second tunnel establishment configuration parameter to the authentication and authorization accounting device.
  • the BRAS needs to establish a data tunnel with the AP, the corresponding second tunnel establishment configuration parameter is obtained from the authentication and authorization accounting device. number.
  • the first tunnel establishment configuration parameter further includes binding information of the at least one SSID and the at least one VLAN ID.
  • a field point VLAN needs to be specifically set up to describe the correspondence between different APs and different BRASs. Otherwise, the BRAS cannot know from the AC which data the data was sent from. In this embodiment, the AC notifies the AP of the binding information, and does not need to add a site VLAN to identify different APs. Therefore, the complexity of the AP deployment is simplified.
  • the first tunnel establishment configuration parameter also includes at least The binding information of the SSID and the at least one VLAN ID, so that the subsequent operator performs fine control on the service set corresponding to the different SSID according to the binding information of the at least one SSID and the at least one VLAN ID, and is specific to the refined control Implementation options are not limited here.
  • a feasible implementation manner is: when the BRAS binds information according to the IP address of the at least one AP and the at least one SSID, and The binding information of the at least one SSID and the at least one VLAN ID is used to verify the legality of the at least one AP.
  • the second tunnel establishment configuration parameter further includes binding information of the at least one SSID and the at least one VLAN ID.
  • the BARS may bind the information according to the IP address of the at least one AP and the at least one SSID, and the at least one SSID and the at least one The binding information of the VLAN ID is used to verify the legality of at least one AP.
  • the first tunnel establishment configuration parameter further includes at least one tunnel type corresponding to an IP address of each BARS.
  • the second tunnel establishment configuration parameter further includes at least one tunnel type corresponding to the IP address of each AP.
  • FIG. 7 is a schematic structural diagram of an AP according to an embodiment of the present invention.
  • the AP can perform various steps of the method shown in FIG. 3.
  • the AP includes: a receiving module 20, and a control tunnel.
  • the receiving module 20 is configured to send, by the AC, a first configuration message.
  • the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes binding information of the IP address of the at least one BRAS and the at least one SSID.
  • the control tunnel establishing module 21 is configured to establish a control tunnel with the AC.
  • the data tunnel establishing module 23 is configured to establish a data tunnel with the at least one BRAS according to the first tunnel establishment configuration parameter.
  • the AP establishes a data tunnel according to the IP address of the BRAS in the first tunnel establishment configuration parameter, and then the AP matches the binding information of the BRAS and the SSID to determine the corresponding data tunnel for the SSID selected by the user.
  • the data of the SSID is sent to the corresponding BRAS through the data tunnel.
  • control tunnel establishing module 21 and the data tunnel establishing module 23 in this embodiment may be two independent modules, or may be combined into one module, which is not limited herein.
  • the AP provided by the embodiment receives the first configuration message sent by the AC by the receiving module, where the first configuration message includes the first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes at least one BRAS IP address and at least An SSID binding information, and the control tunnel establishing module establishes a control tunnel with the AC, and the data tunnel establishing module establishes a configuration parameter with the first tunnel to establish a data tunnel with the at least one BRAS.
  • the data tunnel is separated from the control tunnel, which reduces the unnecessary overhead of the AC.
  • FIG. 8 is a schematic structural diagram of an AP according to an embodiment of the present invention.
  • the AP further includes: a sending module 22 and an identifier adding module 24.
  • the sending module 22 is configured to send a setup data tunnel request to the at least one BRAS according to the first tunnel establishment configuration parameter.
  • the receiving module 20 is further configured to receive a data tunneling response message sent by at least one BRAS, and if the security of the AP is verified by at least one BRAS, the data tunnel is established.
  • the response message contains the verification pass indication information.
  • the data tunnel establishing module 23 is configured to establish a data tunnel with the at least one BRAS according to the verification by using the indication information and the first tunnel establishment configuration parameter.
  • the first tunnel establishment configuration parameter further includes binding information of the at least one SSID and the at least one VLAN ID.
  • a field point VLAN needs to be specifically set up to describe the correspondence between different APs and different BRASs. Otherwise, the BRAS cannot know from the AC which data the data was sent from. In this embodiment, because the AC informs the AP of the binding information, it is not necessary to add a field point VLAN to identify different APs. Therefore, the complexity of the AP deployment is simplified.
  • the identifier adding module 24 is configured to: after the data tunnel establishing module 23 establishes a data tunnel with the at least one BRAS, if the AP has binding information of at least one SSID and at least one VLAN ID, according to the SSID selected by the user, and at least one SSID and at least Bind information of a VLAN ID to add the corresponding VLAN ID to the user data.
  • the sending module 22 is further configured to send the user data to the corresponding BRAS through the data tunnel of the AP and the BRAS according to the binding information of the IP address of the at least one BRAS and the at least one SSID.
  • the first tunnel establishment configuration parameter further includes at least one tunnel type corresponding to the IP address of each BRAS.
  • FIG. 9 is a schematic structural diagram of a BRAS according to an embodiment of the present invention.
  • the BRAS can perform various steps of the method shown in FIG. 4.
  • the BRAS includes: an obtaining module 30 and a data tunnel establishing module 32.
  • the obtaining module 30 is configured to acquire a second tunnel establishment configuration parameter.
  • the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID.
  • the data tunnel establishing module 32 is configured to establish a data tunnel with the at least one AP according to the second tunnel establishment configuration parameter.
  • the BRAS acquires the second tunnel establishment configuration parameter by the acquiring module, where the second tunnel establishment configuration parameter includes binding information of the IP address of the at least one AP and the at least one SSID.
  • the data tunnel establishing module establishes a data tunnel with the at least one AP according to the second tunnel establishment configuration parameter. Thereby, the data tunnel is separated from the control tunnel, which reduces the unnecessary overhead of the AC.
  • obtaining the second tunnel establishment configuration parameter by the obtaining module 30 in FIG. 9 may be implemented by any feasible implementation manner as follows:
  • the obtaining module 30 is configured to receive a second configuration message sent by the access controller, where the second configuration message includes a second tunnel establishment configuration parameter.
  • the obtaining module 30 is specifically configured to acquire a second tunnel establishment configuration parameter from the authentication and authorization accounting device.
  • the AC sends the second tunnel establishment configuration parameter to the authentication and authorization accounting device in advance.
  • the use of the AC and the authentication and authorization accounting device in the prior art, and the interaction process between the authentication and authorization accounting device and the broadband access server avoids the fact that the AC directly sends the second configuration message to the broadband access server in the first mode.
  • a large number of modifications of the protocol reduce the application cost of the method for establishing a wireless local area network tunnel in the embodiment of the present invention.
  • FIG. 10 is a schematic structural diagram of another BRAS according to an embodiment of the present invention.
  • the BRAS further includes: a receiving module 31, a verification module 33, and a sending module 34.
  • the receiving module 31 is configured to receive a setup data tunnel request sent by at least one AP.
  • the data tunnel establishing module 32 may directly establish a data tunnel with the at least one AP according to the second tunnel establishment configuration parameter, or may also perform a data tunnel request request according to the The AP performs legality verification.
  • the verification module 33 is configured to establish at least the configuration parameter according to the second tunnel. The legality of an AP is verified.
  • the sending module 34 is configured to send a setup data tunnel response message to the at least one AP, and if the at least one AP passes the validity verification, the establish data tunnel response message includes the verification pass indication information.
  • the data tunnel establishing module 32 is specifically configured to establish a data tunnel with at least one AP that is verified by legality.
  • the second tunnel establishment configuration parameter further includes binding information of the at least one SSID and the at least one VLAN ID.
  • a field point VLAN needs to be specifically set up to describe the correspondence between different APs and different BRASs. Otherwise, the BRAS cannot know from the AC which data the data was sent from. In this embodiment, The AC informs the BRAS of the binding information, and does not need to add a site VLAN to identify different APs, thus simplifying the complexity of AP deployment.
  • the AP provides multiple SSIDs
  • the VLAN IDs of the different SSIDs are different, and the carrier cannot be bound according to the binding information of the IP address of the at least one AP and the at least one SSID.
  • the BRAS performs further processing on the corresponding service set belonging to the operator in the BRAS.
  • the second tunnel establishment configuration parameter further includes at least one The binding information of the SSID and the at least one VLAN ID, so that the subsequent operator performs fine control on the service set corresponding to the different SSID according to the binding information of the at least one SSID and the at least one VLAN ID, and the specific implementation of the refined control
  • the program is not limited here.
  • the verification module 32 is configured to verify the legality of the at least one access point device according to the binding information of the IP address of the at least one AP and the at least one SSID, and the binding information of the at least one SSID and the at least one VLAN ID.
  • the second tunnel establishment configuration parameter further includes at least one tunnel type corresponding to the IP address of each AP.
  • FIG. 11 is a schematic structural diagram of an access network system according to an embodiment of the present invention. It is to be noted that FIG. 11 includes various devices related to the embodiment of the present invention, and the other devices shown in FIG. 11 further include: a router (Router) ), the entry device (Portal), the switch (SW), the specific role of these devices will not be described here. Different BRASs may belong to different operators. For example, Figure 11 contains two operators, Operator A and Operator B.
  • the access network system includes: at least one AC, at least one AP, and at least one broadband access server.
  • the AC can perform various steps of the method shown in FIG. 2, and the AP can perform various steps of the method shown in FIG. 3, and the broadband access server can perform various steps of the method shown in FIG.
  • the access network system sends a first configuration message to the AP by using the AC, where the first configuration message includes a first tunnel establishment configuration parameter, where the first tunnel establishment configuration parameter includes at least one BRAS IP address and Binding information of the at least one SSID, and the AP establishes a control tunnel with the AC.
  • the AC sends a second configuration message to the BRAS, where the second configuration message includes the second tunnel establishment configuration parameter; or, the BRAS slave authentication authorization
  • the accounting device acquires a second tunnel establishment configuration parameter.
  • the AC sends the second tunnel establishment configuration parameter to the authentication and authorization accounting device in advance, where the second tunnel establishment configuration parameter includes Binding information of at least one AP's IP address and at least one SSID.
  • the BRAS establishes a data tunnel with at least one AP according to the second tunnel establishment configuration parameter. Thereby, the data tunnel is separated from the control tunnel, which reduces the unnecessary overhead of the AC.
  • the data tunnel and the control tunnel are not separated, so a field point VLAN needs to be specifically set up to describe the correspondence between different APs and different BRASs. Otherwise, the BRAS cannot know from the AC which data the data was sent from.
  • the AC notifies the AP and the BRAS to bind the at least one SSID to the at least one VLAN ID, and does not need to add a field point VLAN to identify different APs. Therefore, the complexity of the AP deployment is simplified.
  • first tunnel establishment configuration parameter and the second tunnel establishment configuration parameter are optimized in this embodiment, other related information may also be included, and the optimized information has been described in the foregoing embodiment of the present invention. No longer.
  • the aforementioned program can be stored in a computer readable storage medium.
  • the program when executed, performs the steps including the foregoing method embodiments; and the foregoing storage medium includes various media that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明提供一种无线局域网隧道建立方法、装置及接入网系统。通过AC向AP发送第一配置消息，其中，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BRAS的IP地址与至少一个SSID的绑定信息，以使AP根据第一隧道建立配置参数与BRAS建立数据隧道，同时AC与AP建立控制隧道，从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。

Description

无线局域网隧道建立方法、装置及接入网系统
本申请要求于2014年2月28日提交中国专利局、申请号为CN 201410073210.3、发明名称为“无线局域网隧道建立方法、装置及接入网系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及通信技术，尤其涉及一种无线局域网隧道建立方法、装置及接入网系统。
背景技术
随着数据业务需求的迅速增长，且由于2G/3G(第二代/第三代)无线网络对数据承载的能力有限，通过无线局域网(Wireless Local Area Network，简称：WLAN)分流数据业务已成为运营商首选的解决方案。
基于WLAN技术的网络结构中通常包括站点(STAtion，简称：STA)、接入点(Access Point，简称：AP)、接入控制器(Access Controller，简称：AC)等设备。其中，AP的作用是将STA与有线网络连接起来，AC通过无线接入点控制和配置(Control And Provisioning of Wireless Access Point，简称CAPWAP)协议实现对AP的管理。通常，AP和AC间建立起CAPWAP隧道，作为AP和AC之间控制和数据报文的转发通道。
但是，采用现有技术，当AC旁挂于宽带接入服务器(Broadband Remote Access Server，简称：BRAS)时，由于用户数据都需要经过AC进行转发，因此，增大了AC的开销，并且在现有的AC组网方式下，AC与BRAS间需要配置大量的场点VLAN(Virtual Local Area Network，虚拟局域网)来获取不同AP与不同BRAS之间的绑定关系，因此，采用现有技术大大增加了AC配置、管理和维护的工作量和成本。
发明内容
本发明提供一种无线局域网隧道建立方法、装置及接入网系统，用于降低控制器额外开销。
本发明的第一个方面是提供一种无线局域网隧道建立方法，包括：
接入控制器向接入点设备发送第一配置消息，所述第一配置消息包含第一隧道建立配置参数，其中，所述第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息，以使所述接入点设备根据所述第一隧道建立配置参数与至少一个所述宽带接入服务器建立数据隧道；
所述接入控制器与至少一个所述接入点设备建立控制隧道。
结合第一个方面，在第一种可能的实现方式中，还包括：
所述接入控制器向所述宽带接入服务器或者认证授权记账设备发送第二配置消息，其中所述第二配置消息包含所述第二隧道建立配置参数，其中，所述第二隧道建立配置参数包含至少一个所述接入点设备的IP地址与至少一个所述服务集标识的绑定信息。
本发明的第二个方面是提供一种接入控制器，包括：
发送模块，用于向接入点设备发送第一配置消息，所述第一配置消息包含第一隧道建立配置参数，其中，所述第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息，以使所述接入点设备根据所述第一隧道建立配置参数与至少一个所述宽带接入服务器建立数据隧道；
控制隧道建立模块，用于与至少一个所述接入点设备建立控制隧道。
结合第二个方面，在第一种可能的实现方式中，所述发送模块，还用于向所述宽带接入服务器或者认证授权记账设备发送第二配置消息，所述第二配置消息包含第二隧道建立配置参数，其中，所述第二隧道建立配置参数包含至少一个所述接入点设备的IP地址与至少一个所述服务集标识的绑定信息。
本发明的第三个方面是提供一种接入点设备，包括：
接收模块，用于接收接入控制器发送的第一配置消息，所述第一配置消息包含第一隧道建立配置参数，其中，所述第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息；
控制隧道建立模块，用于与所述接入控制器建立控制隧道；
数据隧道建立模块，用于根据所述第一隧道建立配置参数，与至少一个所述宽带接入服务器建立数据隧道。
结合第三个方面，在第一种可能的实现方式中，还包括：
发送模块，用于根据所述第一隧道建立配置参数向至少一个所述宽带接入服务器发送建立数据隧道请求。
结合第三个方面的第一种可能的实现方式，在第二种可能的实现方式中，所述接收模块，还用于接收至少一个所述宽带接入服务器发送的建立数据隧道响应消息，若所述接入点设备的安全性通过至少一个所述宽带接入服务器验证，则所述建立数据隧道响应消息包含验证通过指示信息。
结合第三个方面或第三个方面上述任意一种可能的实现方式，在第三种可能的实现方式中，所述第一隧道建立配置参数还包含至少一个所述服务集标识与至少一个虚拟区域网标识的绑定信息。
结合第三个方面第三种可能的实现方式，在第四种可能的实现方式中，还包括：
标识添加模块，用于若所述接入点设备存在至少一个所述服务集标识与至少一个所述虚拟区域网标识的绑定信息，则根据用户选择的所述服务集标识，以及至少一个所述服务集标识与至少一个所述虚拟区域网标识的绑定信息，为用户数据添加相应的所述虚拟区域网标识；
所述发送模块，还用于根据至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息，将所述用户数据通过所述接入点设备与所述宽带接入服务器的所述数据隧道发送对应的所述宽带接入服务器。
本发明的第四个方面是提供一种宽带接入服务器，包括：
获取模块，用于获取第二隧道建立配置参数，其中，所述第二隧道建立配置参数包含至少一个所述接入点设备的IP地址与至少一个所述服务集标识的绑定信息；
数据隧道建立模块，用于根据所述第二隧道建立配置参数与至少一个所述接入点设备建立数据隧道。
结合第四个方面，在第一种可能的实现方式中，所述获取模块，具体用于接收接入控制器发送的第二配置消息，所述第二配置消息包含第二隧 道建立配置参数；或者，
所述获取模块，具体用于从认证授权记账设备获取所述第二隧道建立配置参数。
结合第四个方面或第四个方面的第一种可能的实现方式，在第二种可能的实现方式中，还包括：接收模块，用于接收至少一个所述接入点设备发送的建立数据隧道请求。
结合第四个方面的第二种可能的实现方式，在第三种可能的实现方式中，还包括：验证模块，用于根据所述第二隧道建立配置参数对至少一个所述接入点设备的合法性进行验证；
发送模块，用于向至少一个所述接入点设备发送建立数据隧道响应消息，若至少一个所述接入点设备通过合法性验证，则所述建立数据隧道响应消息包含验证通过指示信息；
所述数据隧道建立模块，具体用于与通过合法性验证的至少一个所述接入点设备建立数据隧道。
本发明的第五个方面是提供一种接入网系统，包括：至少一个上述第二个方面或第二个方面的任意一种可行的实现中所述的的接入控制器、至少一个上述第三个方面或第三个方面的任意一种可行的实现中所述的接入点设备和至少一个上述第四个方面或第四个方面的任意一种可行的实现中所述的宽带接入服务器。
本发明实施例提供的无线局域网隧道建立方法、装置及接入网系统，通过AC向AP发送第一配置消息，其中，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BRAS的IP地址与至少一个SSID的绑定信息。从而使得BRAS与AP建立数据隧道，AC与AP建立控制隧道，从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
附图说明
为了更清楚地说明本发明实施例或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图做一简单地介绍，显而易见 地，下面描述中的附图是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动性的前提下，还可以根据这些附图获得其他的附图。
图1为现有技术提供的一种接入网部署场景示意图；
图2为本发明实施例提供的一种无线局域网隧道建立方法的流程示意图；
图3为本发明实施例提供的另一种无线局域网隧道建立方法的流程示意图；
图4为本发明实施例提供的另一种无线局域网隧道建立方法的流程示意图；
图5为本发明实施例提供的另一种无线局域网隧道建立方法的流程示意图；
图6为本发明实施例提供的一种AC的结构示意图；
图7为本发明实施例提供的一种AP的结构示意图；
图8为本发明实施例提供的一种AP的结构示意图；
图9为本发明实施例提供的一种BRAS的结构示意图；
图10为本发明实施例提供的另一种BRAS的结构示意图；
图11为本实施例提供的一种接入网系统的结构示意图。
具体实施方式
为使本发明实施例的目的、技术方案和优点更加清楚，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
图1为现有技术提供的一种接入网部署场景示意图，如图1所示，该图1中，一个接入点设备(Access Point，简称：AP)提供多个服务集标识(Service Set Identifier，简称SSID)，每个SSID对应一个虚拟接入点设备(Virtual Access Point，简称：VAP)，归属于不同的运营商。VAP映射到不同的虚拟区域网 (Virtual Local Area Network，简称：VLAN)，即每个运营商的用户数据可基于VLAN来区分。不同SSID的数据映射到不同的VLAN，通过共用的接入控制器(Access Controller，简称：AC)连到不同的运营商。各运营商部署认证授权记账(Authentication Accounting Authorization，简称：AAA)设备和入口设备(Portal)设备，AC根据VLAN，将用户数据转发到对应的运营商网络。根据图1可知，现有技术中的AP管理VLAN、AC管理VLAN和业务场点VLAN。AP大规模部署复杂度高(如配置VLAN等)。并且，由于制隧道和数据隧道没有分离，所有用户数据都必须经由AC转发，在图1的部署场景中，导致用户流量绕行。由于在该运营模式下，各运营商各自认证计费，AC不需要感知流量；用户流量的绕行大大增加了AC的开销。
为了解决上述现有技术产生的问题，本发明下述各个实施例提供一种无线局域网隧道建立方法、装置及接入网系统，从而将控制隧道与数据隧道分离，降低AC不必要的开销，同时简化AP部署的复杂度。
图2为本发明实施例提供的一种无线局域网隧道建立方法的流程示意图，该方法的执行主体为接入控制器(Access Controller，简称AC)，参照图2，该方法包括如下步骤：
步骤100、AC向接入点设备(Access Point，简称：AP)发送第一配置消息。
为了能够将数据隧道与控制隧道分离，需要在AP与宽带接入服务器(Broadband Remote Access Server，简称：BRAS)建立数据隧道，因此，需要将BRAS与SSID的绑定关系告知AP，从而使得AP根据该绑定关系选择相应的BRAS进行数据隧道的建立，具体的，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BRAS的IP地址与至少一个SSID的绑定信息。该绑定信息即表征BRAS与SSID的绑定关系。需要说明的是，通过该第一隧道建立配置参数，当AP发现与自身提供的SSID对应的BRAS时，则AP根据第一隧道建立配置参数与至少一个BRAS器建立数据隧道，需要说明的是，AP根据第一隧道建立配置参数中BRAS的IP地址建立数据隧道，之后对于用户选择的SSID，AP将该SSID与上述BRAS与SSID的绑定信息进行匹配确定相应的数据隧道，将该SSID的数据通过该数据隧道发送给对应的BRAS。
步骤101、AC与至少一个AP建立控制隧道。
需要说明的是，AC与至少一个AP建立的控制隧道与上述数据隧道是分开的。AP和AC间建立起CAPWAP隧道，作为AP和AC之间控制报文的转发通道。
本实施例提供的AC，通过AC向AP发送第一配置消息，其中，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个SSID的绑定信息。从而使得BRAS与AP建立数据隧道，同时AC与AP建立控制隧道，从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
优选的，在图1所示各个步骤的基础上，还包括：
步骤102、AP向BRAS或者认证授权记账设备发送第二配置消息。
其中。第二配置消息包含第二隧道建立配置参数，其中，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息。需要说明的是，本步骤102与上述图1中的各个步骤没有直接的前后关系，只要保证，在BRAS与AP建立数据隧道之前，执行步骤102即可。
需要说明的是，AP与认证授权记账设备，AP与BRAS的交互可以通过但不限定于RADIUS消息，即第二配置消息具体可以为RADIUS消息。
基于与步骤100相同的理由，为了使得AP与BRAS建立数据隧道，另一种可行的方式为，在将第一隧道建立配置参数发送给AP的基础上，将AP与SSID的绑定关系告知BRAS，从而使得BRAS根据该绑定关系选择相应的AP进行数据隧道的建立。但是，将AP与SSID的绑定关系告知BRAS的方式有多种，此处仅以直接将AP与SSID的绑定关系告知BRAS，以及经认证授权记账设备告知BRAS为例进行说明，对于其他可行的实现方式，本发明实施例并不做限定。具体的，第二配置消息包含第二隧道建立配置参数，其中，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息，该绑定信息即表征AP与SSID的绑定关系。
需要说明的是，对于AC向BRAS直接发送第二配置消息的实现方式。该方式需要修改大量的现有协议，为了尽量利用现有技术的协议构架，避免不必要的协议修改，降低成本，通过现有协议中AC与认证授权记账设 备的交互，以及认证授权记账设备与BRAS的交互即可以避免上述因为修改协议造成的额外成本。即，AC向认证授权记账设备发送包含第二隧道建立配置参数的第二配置消息，当BRAS需要与AP建立数据隧道时，从认证授权记账设备获取相应的第二隧道建立配置参数。
优选的，上述第一隧道建立配置参数还包含至少一个SSID与至少一个虚拟区域网标识(Virtual Local Area Network Identity，简称：VLAN ID)的绑定信息。
优选的，当第一隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息时，则第二隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息。
由于现有技术中，数据隧道与控制隧道未实现分离，所以需要专门设立一个场点VLAN来说明不同AP与不同BRAS的对应关系。否则，BRAS无法从AC处获知数据具体是从哪一个AP发送来的。而本实施例中，由于AC分别告知AP和BRAS至少一个SSID与至少一个VLAN ID的绑定信息，因此，不需要增设场点VLAN来辨识不同的AP，因此，简化了AP部署的复杂度。
需要说明的是，当AP提供了多个SSID时，此时不同SSID对应的VLAN ID是不同的，仅根据上述至少一个AP的IP地址与至少一个SSID的绑定信息，运营商无法根据该绑定信息在BRAS对具体的属于该运营商的相应服务集进行进一步的处理，为了运营商在后续的精细化控制(例如测流控制，计费)，因此，第一隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息，第二隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息，以便后续运营商根据至少一个SSID与至少一个VLAN ID的绑定信息，对不同SSID对应的服务集进行精细化控制，并且，对于精细化控制的具体实现方案此处不做限定。进一步的，对于涉及BARS根据第二隧道建立配置参数对至少一个AP的合法性进行验证，一种可行的实现方式为：当BRAS根据至少一个AP的IP地址与至少一个SSID的绑定信息，以及至少一个SSID与至少一个VLANID的绑定信息，对至少一个AP的合法性进行验证。
优选的，当BRAS支持多种隧道类型(如：L2TP，CAPWAP，GRE， IPSEC等等)时，AP可以选择一个自身也能够支持隧道类型，并告知相应BRAS该隧道类型，具体的，可以通过在第一隧道建立配置参数还包含每个BRAS的IP地址对应的至少一种隧道类型来实现。
类似的，当AP支持多种隧道类型(如：L2TP，CAPWAP，GRE，IPSEC等等)时，BRAS可以选择一个自身也能够支持隧道类型，并告知相应AP该隧道类型，具体的，可以通过在第二隧道建立配置参数还包含每个AP的IP地址对应的至少一种隧道类型。
图3为本发明实施例提供的另一种无线局域网隧道建立方法的流程示意图，图3所示无线局域网隧道建立方法的执行主体为AP，参照图3，该方法包括如下步骤：
步骤200、AP接收AC发送的第一配置消息。
具体点，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BRAS的IP地址与至少一个SSID的绑定信息。
步骤201、AP与AC建立控制隧道。
需要说明的是，AP与AC建立的控制隧道与下述数据隧道是分开的。AP和AC间建立起CAPWAP隧道，作为AP和AC之间控制报文的转发通道。
步骤202、AP根据第一隧道建立配置参数，与至少一个BRAS建立数据隧道。
具体的，AP基于第一隧道建立配置参数中提供的至少一个BRAS的IP地址与至少一个SSID的绑定信息，既可以与该BRAS建立数据隧道。对于当多个BRAS允许该AP与其建立数据隧道时，则与多个BRAS建立数据隧道，需要说明的是，AP根据第一隧道建立配置参数中BRAS的IP地址建立数据隧道，之后对于用户选择的SSID，AP将该SSID与上述BRAS与SSID的绑定信息进行匹配确定相应的数据隧道，将该SSID的数据通过该数据隧道发送给对应的BRAS。
本实施例提供的AP，通过AP接收AC发送的第一配置消息，其中，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个SSID的绑定信息，并 且，AP与AC建立控制隧道，AP根据第一隧道建立配置参数，与至少一个BRAS建立数据隧道。从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
进一步的，在图3步骤200之后，还可以包括如下步骤：
步骤203、AP根据第一隧道建立配置参数向至少一个BRAS发送建立数据隧道请求。
具体的，当AP获知自身提供的服务集对应的SSID，满足上述第一隧道建立配置参数中至少一个BRAS的IP地址与至少一个SSID的绑定信息时，则向与自身提供的SSID具有绑定关系的BRAS发送该建立数据隧道请求，需要说明的是，若AP提供的多个服务集对应不同的BRAS，并且，上述第一隧道建立配置参数中具有该多个服务集与不同BRAS的绑定关系，则AP可以向该多个BRAS分别发送建立数据隧道请求。
进一步的，在步骤203之后，还可以包括：AP接收至少一个BRAS发送的建立数据隧道响应消息。
具体的，若AP的安全性通过至少一个BRAS验证，则建立数据隧道响应消息包含验证通过指示信息。需要说明的是，当AP向上述至少一个BRAS发送建立数据隧道请求后，接收到请求的BRAS根据其获取到的第二隧道建立配置参数对发送建立数据隧道请求的AP的安全性进行验证，若AP的安全性通过至少一个BRAS验证，则BRAS发送的建立数据隧道响应消息包含验证通过指示信息，用以指示AP可以与该BRAS建立数据隧道。
进一步的，上述图3中步骤202的一种可行的实现方式为：
AP根据验证通过指示信息和第一隧道建立配置参数，与至少一个BRAS建立数据隧道。
具体的，当建立数据隧道响应消息包含验证通过指示信息，说明该BRAS允许AP与该BRAS建立数据隧道，此时，AP基于第一隧道建立配置参数中提供的至少一个BRAS的IP地址与至少一个SSID的绑定信息，既可以与该BRAS建立数据隧道。对于当多个BRAS允许该AP与其建立数据隧道时，则与多个BRAS建立数据隧道。
优选的，第一隧道建立配置参数还包含至少一个SSID与至少一个 VLAN ID的绑定信息。
由于现有技术中，数据隧道与控制隧道未实现分离，所以需要专门设立一个场点VLAN来说明不同AP与不同BRAS的对应关系。否则，BRAS无法从AC处获知数据具体是从哪一个AP发送来的。而本实施例中，由于AC告知AP相关的绑定信息，不需要增设场点VLAN来辨识不同的AP，因此，简化了AP部署的复杂度。
优选的，在图3步骤202之后，还包括：
若AP存在至少一个SSID与至少一个VLAN ID的绑定信息，则AP根据用户选择的SSID，以及至少一个SSID与至少一个VLAN ID的绑定信息，为用户数据添加相应的VLAN ID。并根据至少一个BRAS的IP地址与至少一个SSID的绑定信息，将用户数据通过AP与BRAS的数据隧道发送给对应的BRAS。
优选的，第一隧道建立配置参数还包含每个BRAS的IP地址对应的至少一种隧道类型。
图4为本发明实施例提供的另一种无线局域网隧道建立方法的流程示意图，该方法的执行主体为宽带接入服务器(Broadband Remote Access Server，简称：BRAS)，参照图4，该方法包括如下步骤：
步骤300、BRAS获取第二隧道建立配置参数。
具体的，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息。
步骤301、BRAS根据二隧道建立配置参数与至少一个AP建立数据隧道。
本实施例提供的BRAS，通过BRAS获取第二隧道建立配置参数，其中，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息。BRAS根据所述第二隧道建立配置参数与至少一个AP建立数据隧道。从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
进一步的，对于图4中步骤100可以通过如下任意一种种可行的实现方式实现：
方式一：宽带接入服务器接收AC发送的第二配置消息，第二配置消 息包含第二隧道建立配置参数。
方式二：宽带接入服务器从认证授权记账设备获取第二隧道建立配置参数。
需要说明的，对于方式二，AC会预先将第二隧道建立配置参数发送给认证授权记账设备。并且，由于利用现有技术中AC与认证授权记账设备，以及认证授权记账设备与宽带接入服务器的交互流程，避免了方式一中AC直接向宽带接入服务器发送第二配置消息时造成协议的大量修改，降低了本发明实施例无线局域网隧道建立方法的应用成本。
进一步的，在图4步骤300之后，还包括：
步骤302、BRAS接收至少一个AP发送的建立数据隧道请求。
在接收到至少一个AP发送的建立数据隧道请求后，BRAS可以直接根据二隧道建立配置参数与至少一个AP建立数据隧道，也可以基于该建立数据隧道请求对该AP进行合法性验证。
对于需要对AP进行合法性验证的场景，则在步骤302之后，还包括：
BRAS根据第二隧道建立配置参数对至少一个AP的合法性进行验证。
具体的，若至少一个AP通过合法性验证，则建立数据隧道响应消息包含验证通过指示信息，若AP未通过合法性验证，则建立数据隧道响应消息还可以包含验证未通过指示信息，以指示该AP无法建立数据隧道。
BRAS向至少一个AP发送建立数据隧道响应消息，若至少一个AP通过合法性验证，则建立数据隧道响应消息包含验证通过指示信息。
因此，基于步骤302，图4步骤301的一种可行的实现方式为：
BRAS与通过合法性验证的至少一个AP建立数据隧道。
进一步的，对于涉及BRAS根据第二隧道建立配置参数对至少一个AP的合法性进行验证，一种可行的实现方式为：当BRAS根据至少一个AP的IP地址与至少一个SSID的绑定信息，以及至少一个SSID与至少一个VLAN ID的绑定信息，对至少一个AP的合法性进行验证。
优选的，第二隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息。
由于现有技术中，数据隧道与控制隧道未实现分离，所以需要专门设立一个场点VLAN来说明不同AP与不同BRAS的对应关系。否则，BRAS 无法从AC处获知数据具体是从哪一个AP发送来的。而本实施例中，由于AC告知BRAS的至少一个SSID与至少一个VLAN ID的绑定信息，不需要增设场点VLAN来辨识不同的AP，因此，简化了AP部署的复杂度。
需要说明的是，当AP提供了多个SSID时，此时不同SSID对应的VLAN ID是不同的，仅根据上述至少一个AP的IP地址与至少一个SSID的绑定信息，运营商无法根据该绑定信息在BRAS对具体的属于该运营商的相应服务集进行进一步的处理，为了BRAS在后续的精细化控制(例如测流控制，计费)，因此，第二隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息，以便后续运营商根据至少一个SSID与至少一个VLAN ID的绑定信息，对不同SSID对应的服务集进行精细化控制，并且，对于精细化控制的具体实现方案此处不做限定。
需要说明的是，上述宽BRAS根据第二隧道建立配置参数对至少一个AP的合法性进行验证的一种可行的实现方式为：
宽带接入服务器根据至少一个AP的IP地址与至少一个SSID的绑定信息，以及至少一个SSID与至少一个VLAN ID的绑定信息，对至少一个AP的合法性进行验证。
进一步的，第二隧道建立配置参数还包含每个AP的IP地址对应的至少一种隧道类型。
图5为本发明实施例提供的另一种无线局域网隧道建立方法的流程示意图，参照图5可知，本实施例通过结合AC、AP、宽带接入服务器和认证授权记账设备，从整体上对上述个各实施例以及优选的可行实现方式进行进一步说明，参照5，该方法包括如下步骤：
步骤400、动态主机配置协议(Dynamic host configuration protocol，简称：DHCP)过程：AP从DHCP服务器AP获取AP的IP地址。
具体的，该DHCP过程包含发现消息(discovery)、提供消息(offer)、请求消息(request)、请求消息(request)和确认消息(ack)的交互消息。
步骤401、AC发现过程。
具体的，AC发现过程用于AP发现AC，AC发现过程包含发现请求消息(Discover request)和发现响应消息(Discover response)。
步骤402、AP/AC关联过程。
具体的，当AP决策选择AC后，开始加入阶段。该加入阶段包含加入请求消息(Join request)和加入响应消息(Join Reponse)。
步骤403、版本更新过程。
需要说明的是，步骤403为可选，用于加载AP版本。
步骤404、配置过程。
该配置过程包括，配置状态请求和第一配置消息，AC向AP发送第一配置消息。
具体的，在该第一配置消息中包含第一隧道建立配置参数，该第一隧道建立配置参数包含另一侧BRAS的IP地址与SSID的绑定信息，可选地，还可以携带SSID与VLAN ID的绑定信息，AP根据这个信息与对应的BRAS建立数据隧道。以表1为例：AP提供SSID A1、SSID A2、SSID B1、SSID B2和SSID C，其中SSID A1和SSID A2归属于运营商A，SSID B1和SSID B2归属于运营商B，SSID C归属于运营商C。运营商A的BRAS(运营商网络的接入网关)的IP地址为IP ADDRESS 1，运营商B的BRAS的IP地址为IP ADDRESS 2，运营商C的BRAS的IP地址为IP ADDRESS 3。可选地，运营商的BRAS除了必须提供IP地址外，还可携带BARS支持的隧道类型(如：L2TP，CAPWAP，GRE，IPSEC等等)可选地，AC还可下发对应不同SSID的VLAN ID，比如SSID A1的数据映射到VLAN ID1，SSID A2的数据映射到VLAN ID2，这样运营商A的BRAS收到报文后可根据VLAN ID再进行精细化控制。
表1：BRAS、SSID、VLAN ID的绑定关系
Figure PCTCN2015072497-appb-000001
Figure PCTCN2015072497-appb-000002
其中，参照表一可知，SSID和VLAN ID关系：可以是1:1；或者，也可以是n:1，但不能是1：n。
步骤405、配置检查过程。
具体的，当配置阶段完成后开始配置检查阶段。该配置检查包含变更状态事件请求(Change State Event Request)消息和变更状态事件响应(Change State Event Response)消息。
步骤406、AC与AP建立控制通道。
具体的，AP与AC间通过CAPWAP隧道的控制通道交互控制报文。
需要说明的是，下述步骤407与步骤408为两种可行的实现方式，本发明实施例中的接入网系统择一运行其中一种步骤即可。
步骤407、AC向BRAS发送第二配置消息。
具体的，该第二配置消息包含第二隧道建立配置参数，进一步的，第二隧道建立配置参数包含AP的IP地址与SSID的绑定信息，可选地，还可携带SSID与VLAN ID的绑定信息，BRAS根据这个信息验证向其发送隧道建立请求的AP的合法性。以表2为例：AP1的IP地址为IP ADDRESS 1，提供SSID A1、SSID A2，其中SSID A1和SSID A2归属于运营商A，可选地，AP除了必须提供IP地址外，还可携带其支持的隧道类型(如：L2TP，CAPWAP，GRE，IPSec等等)。可选地，AC还可下发对应不同SSID的VLAN ID，比如针对AP1，SSID A1的数据映射到VLAN ID1，SSID A2的数据映射到VLAN ID2，这样运营商A的BRAS收到报文后可根据VLAN ID再进行精细化控制。
表2：AP、SSID、VLAN ID的绑定关系
Figure PCTCN2015072497-appb-000003
Figure PCTCN2015072497-appb-000004
需要说明的是，步骤407中AC将第二配置消息发送给了BRAS，显然，若采用BRAS向认证授权记账设备获取第二隧道建立配置参数的方案，则AC将第二配置消息发送给认证授权记账设备。
步骤408、BRAS向认证授权记账设备发起AP授权检查。
具体的，该授权检查目的为：BRAS收到AP的隧道建立请求后到认证授权记账设备获取上述第二隧道建立配置参数。需要说明的是，BRAS也可以不以收到AP的隧道建立请求作为发起AP授权检查的触发条件，即BRAS主动从认证授权记账设备获取上述第二隧道建立配置参数。
步骤409、数据通道建立。
具体的，AP与BARS间建立数据通道转发用户数据报文。
图6为本发明实施例提供的一种AC的结构示意图，其可以执行图2所示方法的各个步骤，并且本实施例中的各个参数的作用与图2对应实施例中各个参数的作用相同，此处不再赘述。参照图6，该AC包括：发送模块10、控制隧道建立模块11。
发送模块10，用于向AP发送第一配置消息。
具体的，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BARS的IP地址与至少一个SSID的绑定信息，以使AP根据第一隧道建立配置参数与至少一个BARS建立数据隧道，需要说明的是，AP根据第一隧道建立配置参数中BRAS的IP地址建立数据隧道，之后对于用户选择的SSID，AP将该SSID与上述BRAS与SSID的绑定信息进行匹配确定相应的数据隧道，将该SSID的数据通过该数据隧道发送给对应的BRAS。
控制隧道建立模块11，用于与至少一个AP建立控制隧道。
需要说明的是，AC与至少一个AP建立的控制隧道与上述数据隧道是分开的。AP和AC间建立起CAPWAP隧道，作为AP和AC之间控制 报文的转发通道。
本实施例提供的AC，通过发送模块向AP发送第一配置消息，其中，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BARS的IP地址与至少一个SSID的绑定信息，以使AP根据第一隧道建立配置参数与至少一个BARS建立数据隧道。控制隧道建立模块与AP建立控制隧道，从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
进一步的，发送模块10，还用于向BRAS或者认证授权记账设备发送第二配置消息.
具体的，第二配置消息包含第二隧道建立配置参数，其中，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息。需要说明的是，AP与认证授权记账设备，AP与BRAS的交互可以通过但不限定于RADIUS消息，即第二配置消息具体可以为RADIUS消息。
为了使得AP与BRAS建立数据隧道，另一种可行的方式为，在发送模块10将第一隧道建立配置参数发送给AP的基础上，发送模块10将AP与SSID的绑定关系告知BRAS，从而使得BRAS根据该绑定关系选择相应的AP进行数据隧道的建立。但是，发送模块10将AP与SSID的绑定关系告知BRAS的方式有多种，此处仅以发送模块10直接将AP与SSID的绑定关系告知BRAS，以及经认证授权记账设备告知BRAS为例进行说明，对于其他可行的实现方式，本发明实施例并不做限定。具体的，第二配置消息包含第二隧道建立配置参数，其中，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息，该绑定信息即表征AP与SSID的绑定关系。
需要说明的是，对于发送模块10向BRAS直接发送第二配置消息的实现方式。该方式需要修改大量的现有协议，为了尽量利用现有技术的协议构架，避免不必要的协议修改，降低成本，通过现有协议中AC与认证授权记账设备的交互，以及认证授权记账设备与BRAS的交互即可以避免上述因为修改协议造成的额外成本。即，发送模块10向认证授权记账设备发送包含第二隧道建立配置参数的第二配置消息，当BRAS需要与AP建立数据隧道时，从认证授权记账设备获取相应的第二隧道建立配置参 数。
优选的，第一隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息。
由于现有技术中，数据隧道与控制隧道未实现分离，所以需要专门设立一个场点VLAN来说明不同AP与不同BRAS的对应关系。否则，BRAS无法从AC处获知数据具体是从哪一个AP发送来的。而本实施例中，由于AC告知AP相关绑定信息，不需要增设场点VLAN来辨识不同的AP，因此，简化了AP部署的复杂度。
需要说明的是，当AP提供了多个SSID时，此时不同SSID对应的VLAN ID是不同的，仅根据上述至少一个AP的IP地址与至少一个SSID的绑定信息，运营商无法根据该绑定信息在BRAS对具体的属于该运营商的相应服务集进行进一步的处理，为了运营商在后续的精细化控制(例如测流控制，计费)，因此，第一隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息，以便后续运营商根据至少一个SSID与至少一个VLAN ID的绑定信息，对不同SSID对应的服务集进行精细化控制，并且，对于精细化控制的具体实现方案此处不做限定。进一步的，对于涉及BARS根据第二隧道建立配置参数对至少一个AP的合法性进行验证，一种可行的实现方式为：当BRAS根据至少一个AP的IP地址与至少一个SSID的绑定信息，以及至少一个SSID与至少一个VLAN ID的绑定信息，对至少一个AP的合法性进行验证。
第二隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息，可选的，BARS可以根据至少一个AP的IP地址与至少一个SSID的绑定信息，以及至少一个SSID与至少一个VLAN ID的绑定信息，对至少一个AP的合法性进行验证。
优选的，第一隧道建立配置参数还包含每个BARS的IP地址对应的至少一种隧道类型。
第二隧道建立配置参数还包含每个AP的IP地址对应的至少一种隧道类型。
图7为本发明实施例提供的一种AP的结构示意图，该AP能够执行图3所示方法的各个步骤，参照图7，该AP包括：接收模块20、控制隧 道建立模块21、数据隧道建立模块23。
接收模块20，用于AC发送的第一配置消息。
具体的，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BRAS的IP地址与至少一个SSID的绑定信息。
控制隧道建立模块21，用于与AC建立控制隧道。
数据隧道建立模块23，用于根据第一隧道建立配置参数，与至少一个BRAS建立数据隧道。
需要说明的是，AP根据第一隧道建立配置参数中BRAS的IP地址建立数据隧道，之后对于用户选择的SSID，AP将该SSID与上述BRAS与SSID的绑定信息进行匹配确定相应的数据隧道，将该SSID的数据通过该数据隧道发送给对应的BRAS。
需要说明的是，本实施中的控制隧道建立模块21与数据隧道建立模块23可以为两个独立的模块，也可以合并为一个模块，此处不予限定。
本实施例提供的AP，通过接收模块接收AC发送的第一配置消息，其中，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BRAS的IP地址与至少一个SSID的绑定信息，并且，控制隧道建立模块与AC建立控制隧道，数据隧道建立模块根据第一隧道建立配置参数，与至少一个BRAS建立数据隧道。从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
在图7基础上，图8为本发明实施例提供的一种AP的结构示意图，参照图8，该AP还包括：发送模块22、标识添加模块24。
发送模块22，用于根据第一隧道建立配置参数向至少一个BRAS发送建立数据隧道请求。
进一步的，在发送模块22发送建立数据隧道请求的基础上，接收模块20，还用于接收至少一个BRAS发送的建立数据隧道响应消息，若AP的安全性通过至少一个BRAS验证，则建立数据隧道响应消息包含验证通过指示信息。
优选的，数据隧道建立模块23，具体用于根据验证通过指示信息和第一隧道建立配置参数，与至少一个BRAS建立数据隧道。
优选的，第一隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息。
由于现有技术中，数据隧道与控制隧道未实现分离，所以需要专门设立一个场点VLAN来说明不同AP与不同BRAS的对应关系。否则，BRAS无法从AC处获知数据具体是从哪一个AP发送来的。而本实施例中，由于AC告知AP相关的绑定信息，不需要增设场点VLAN来辨识不同的AP，因此，简化了AP部署的复杂度。
标识添加模块24，用于在数据隧道建立模块23与至少一个BRAS建立数据隧道之后，若AP存在至少一个SSID与至少一个VLAN ID的绑定信息，根据用户选择的SSID，以及至少一个SSID与至少一个VLAN ID的绑定信息，为用户数据添加相应的VLAN ID。
发送模块22，还用于根据至少一个BRAS的IP地址与至少一个SSID的绑定信息，将用户数据通过AP与BRAS的数据隧道发送对应的BRAS。
第一隧道建立配置参数还包含每个BRAS的IP地址对应的至少一种隧道类型。
图9为本发明实施例提供的一种BRAS的结构示意图，该BRAS可以执行图4所示方法的各个步骤，参照图9，该BRAS包括：获取模块30、数据隧道建立模块32。
获取模块30，用于获取第二隧道建立配置参数。
具体的，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息。
数据隧道建立模块32，用于根据第二隧道建立配置参数与至少一个AP建立数据隧道。
本实施例提供的BRAS，通过获取模块获取第二隧道建立配置参数，其中，第二隧道建立配置参数包含至少一个AP的IP地址与至少一个SSID的绑定信息。数据隧道建立模块根据所述第二隧道建立配置参数与至少一个AP建立数据隧道。从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
进一步的，对于图9中获取模块30获取第二隧道建立配置参数可以通过如下任意一种可行的实现方式实现：
方式一：获取模块30，具体用于接收接入控制器发送的第二配置消息，第二配置消息包含第二隧道建立配置参数。
方式二：获取模块30，具体用于从认证授权记账设备获取第二隧道建立配置参数。
需要说明的，对于方式二，AC会预先将第二隧道建立配置参数发送给认证授权记账设备。并且，由于利用现有技术中AC与认证授权记账设备，以及认证授权记账设备与宽带接入服务器的交互流程，避免了方式一中AC直接向宽带接入服务器发送第二配置消息时造成协议的大量修改，降低了本发明实施例无线局域网隧道建立方法的应用成本。
在图9的基础上，图10为本发明实施例提供的另一种BRAS的结构示意图，参照图10，BRAS还包括：接收模块31、验证模块33、发送模块34。
接收模块31，用于接收至少一个AP发送的建立数据隧道请求。
进一步的，在接收模块31接收到至少一个AP发送的建立数据隧道请求后，数据隧道建立模块32可以直接根据二隧道建立配置参数与至少一个AP建立数据隧道，也可以基于该建立数据隧道请求对该AP进行合法性验证。
具体的，对于需要对AP进行合法性验证的场景，在接收模块31，收至少一个AP发送的建立数据隧道请求之后，可选的，验证模块33，用于根据第二隧道建立配置参数对至少一个AP的合法性进行验证。
发送模块34，用于向至少一AP发送建立数据隧道响应消息，若至少一个AP通过合法性验证，则所述建立数据隧道响应消息包含验证通过指示信息。
则数据隧道建立模块32，具体用于与通过合法性验证的至少一个AP建立数据隧道。
优选的，第二隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息。
由于现有技术中，数据隧道与控制隧道未实现分离，所以需要专门设立一个场点VLAN来说明不同AP与不同BRAS的对应关系。否则，BRAS无法从AC处获知数据具体是从哪一个AP发送来的。而本实施例中，由 于AC告知BRAS相关的绑定信息，不需要增设场点VLAN来辨识不同的AP，因此，简化了AP部署的复杂度。
需要说明的是，当AP提供了多个SSID时，此时不同SSID对应的VLAN ID是不同的，仅根据上述至少一个AP的IP地址与至少一个SSID的绑定信息，运营商无法根据该绑定信息在BRAS对具体的属于该运营商的相应服务集进行进一步的处理，为了BRAS在后续的精细化控制(例如测流控制，计费)，因此，第二隧道建立配置参数还包含至少一个SSID与至少一个VLAN ID的绑定信息，以便后续运营商根据至少一个SSID与至少一个VLAN ID的绑定信息，对不同SSID对应的服务集进行精细化控制，并且，对于精细化控制的具体实现方案此处不做限定。
验证模块32，具体用于根据至少一个AP的IP地址与至少一个SSID的绑定信息，以及至少一个SSID与至少一个VLAN ID的绑定信息，对至少一个接入点设备的合法性进行验证。
第二隧道建立配置参数还包含每个AP的IP地址对应的至少一种隧道类型。
图11为本实施例提供的一种接入网系统的结构示意图，需要说明的是，图11包含与本发明实施例相关的各个设备，对于图11中示出其他设备还包括：路由器(Router)、入口设备(Portal)、交换机(SW)，这些设备的具体作用此处不做赘述。不同的BRAS可能属于不同的运营商，例如图11中包含两个运营商Operator A和Operator B。参照图11，该接入网系统包括：至少一个AC、至少一个AP，至少一个宽带接入服务器。
其中，AC可以执行图2所示方法的各个步骤，AP可以执行图3所示方法的各个步骤，宽带接入服务器可以执行图4所示方法的各个步骤。
本实施例提供的接入网系统，通过AC向AP发送第一配置消息，其中，第一配置消息包含第一隧道建立配置参数，其中，第一隧道建立配置参数包含至少一个BRAS的IP地址与至少一个SSID的绑定信息，并且，AP与AC建立控制隧道，可选的，AC向BRAS发送第二配置消息，其中，第二配置消息包含第二隧道建立配置参数；或者，BRAS从认证授权记账设备获取第二隧道建立配置参数。需要说明的是，AC预先将第二隧道建立配置参数发送给认证授权记账设备，其中，第二隧道建立配置参数包含 至少一个AP的IP地址与至少一个SSID的绑定信息。BRAS根据第二隧道建立配置参数与至少一个AP建立数据隧道。从而实现了将数据隧道与控制隧道分离，降低了AC不必要的开销。
进一步的，由于现有技术中，数据隧道与控制隧道未实现分离，所以需要专门设立一个场点VLAN来说明不同AP与不同BRAS的对应关系。否则，BRAS无法从AC处获知数据具体是从哪一个AP发送来的。而本实施例中，由于AC分别告知AP与BRAS至少一个SSID与至少一个VLANID的绑定信息，不需要增设场点VLAN来辨识不同的AP，因此，简化了AP部署的复杂度。
需要说明的是，本实施例中第一隧道建立配置参数和第二隧道建立配置参数优化后，还可以包含其他相关信息，本发明上述实施例中已经对这些优化的信息进行了说明，此处不再赘述。
本领域普通技术人员可以理解：实现上述各方法实施例的全部或部分步骤可以通过程序指令相关的硬件来完成。前述的程序可以存储于一计算机可读取存储介质中。该程序在执行时，执行包括上述各方法实施例的步骤；而前述的存储介质包括：ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。
最后应说明的是：以上各实施例仅用以说明本发明的技术方案，而非对其限制；尽管参照前述各实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分或者全部技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明各实施例技术方案的范围。

Claims (14)

  1. 一种无线局域网隧道建立方法，其特征在于，包括：
    接入控制器向接入点设备发送第一配置消息，所述第一配置消息包含第一隧道建立配置参数，其中，所述第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息，以使所述接入点设备根据所述第一隧道建立配置参数与至少一个所述宽带接入服务器建立数据隧道；
    所述接入控制器与至少一个所述接入点设备建立控制隧道。
  2. 根据权利要求1所述的方法，其特征在于，还包括：
    所述接入控制器向所述宽带接入服务器或者认证授权记账设备发送第二配置消息，其中所述第二配置消息包含所述第二隧道建立配置参数，其中，所述第二隧道建立配置参数包含至少一个所述接入点设备的IP地址与至少一个所述服务集标识的绑定信息。
  3. 一种接入控制器，其特征在于，包括：
    发送模块，用于向接入点设备发送第一配置消息，所述第一配置消息包含第一隧道建立配置参数，其中，所述第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息，以使所述接入点设备根据所述第一隧道建立配置参数与至少一个所述宽带接入服务器建立数据隧道；
    控制隧道建立模块，用于与至少一个所述接入点设备建立控制隧道。
  4. 根据权利要求3所述的接入控制器，其特征在于，所述发送模块，还用于向所述宽带接入服务器或者认证授权记账设备发送第二配置消息，所述第二配置消息包含第二隧道建立配置参数，其中，所述第二隧道建立配置参数包含至少一个所述接入点设备的IP地址与至少一个所述服务集标识的绑定信息。
  5. 一种接入点设备，其特征在于，包括：
    接收模块，用于接收接入控制器发送的第一配置消息，所述第一配置消息包含第一隧道建立配置参数，其中，所述第一隧道建立配置参数包含至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息；
    控制隧道建立模块，用于与所述接入控制器建立控制隧道；
    数据隧道建立模块，用于根据所述第一隧道建立配置参数，与至少一个所述宽带接入服务器建立数据隧道。
  6. 根据所述权利要求5所述的接入点设备，其特征在于，还包括：
    发送模块，用于根据所述第一隧道建立配置参数向至少一个所述宽带接入服务器发送建立数据隧道请求。
  7. 根据所述权利要求6所述的接入点设备，其特征在于，所述接收模块，还用于接收至少一个所述宽带接入服务器发送的建立数据隧道响应消息，若所述接入点设备的安全性通过至少一个所述宽带接入服务器验证，则所述建立数据隧道响应消息包含验证通过指示信息。
  8. 根据所述权利要求5-7任意一项所述的接入点设备，其特征在于，所述第一隧道建立配置参数还包含至少一个所述服务集标识与至少一个虚拟区域网标识的绑定信息。
  9. 根据所述权利要求8所述的接入点设备，其特征在于，还包括：
    标识添加模块，用于若所述接入点设备存在至少一个所述服务集标识与至少一个所述虚拟区域网标识的绑定信息，则根据用户选择的所述服务集标识，以及至少一个所述服务集标识与至少一个所述虚拟区域网标识的绑定信息，为用户数据添加相应的所述虚拟区域网标识；
    所述发送模块，还用于根据至少一个宽带接入服务器的IP地址与至少一个服务集标识的绑定信息，将所述用户数据通过所述接入点设备与所述宽带接入服务器的所述数据隧道发送对应的所述宽带接入服务器。
  10. 一种宽带接入服务器，其特征在于，包括：
    获取模块，用于获取第二隧道建立配置参数，其中，所述第二隧道建立配置参数包含至少一个所述接入点设备的IP地址与至少一个所述服务集标识的绑定信息；
    数据隧道建立模块，用于根据所述第二隧道建立配置参数与至少一个所述接入点设备建立数据隧道。
  11. 根据权利要求10所述的宽带接入服务器，其特征在于，所述获取模块，具体用于接收接入控制器发送的第二配置消息，所述第二配置消息包含第二隧道建立配置参数；或者，
    所述获取模块，具体用于从认证授权记账设备获取所述第二隧道建立 配置参数。
  12. 根据权利要求10或11所述的宽带接入服务器，其特征在于，还包括：接收模块，用于接收至少一个所述接入点设备发送的建立数据隧道请求。
  13. 根据权利要求12所述的宽带接入服务器，其特征在于，还包括：
    验证模块，用于根据所述第二隧道建立配置参数对至少一个所述接入点设备的合法性进行验证；
    发送模块，用于向至少一个所述接入点设备发送建立数据隧道响应消息，若至少一个所述接入点设备通过合法性验证，则所述建立数据隧道响应消息包含验证通过指示信息；
    所述数据隧道建立模块，具体用于与通过合法性验证的至少一个所述接入点设备建立数据隧道。
  14. 一种接入网系统，其特征在于，包括：至少一个权利要求3-4任意一个所述的接入控制器、至少一个权利要求5-9任意一个所述的接入点设备和至少一个权利要求10-13任意一个所述的宽带接入服务器。
PCT/CN2015/072497 2014-02-28 2015-02-09 无线局域网隧道建立方法、装置及接入网系统 WO2015127852A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP20176762.1A EP3787227B1 (en) 2014-02-28 2015-02-09 Method for establishing wireless local area network tunnel, apparatus, and access network system
EP15755623.4A EP3094043B1 (en) 2014-02-28 2015-02-09 Method and apparatus for establishing wireless local area network tunnel and access network system
US15/248,958 US10355878B2 (en) 2014-02-28 2016-08-26 Method for establishing wireless local area network tunnel, apparatus, and access network system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410073210.3A CN104883687B (zh) 2014-02-28 2014-02-28 无线局域网隧道建立方法、装置及接入网系统
CN201410073210.3 2014-02-28

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/248,958 Continuation US10355878B2 (en) 2014-02-28 2016-08-26 Method for establishing wireless local area network tunnel, apparatus, and access network system

Publications (1)

Publication Number Publication Date
WO2015127852A1 true WO2015127852A1 (zh) 2015-09-03

Family

ID=53950987

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/072497 WO2015127852A1 (zh) 2014-02-28 2015-02-09 无线局域网隧道建立方法、装置及接入网系统

Country Status (4)

Country Link
US (1) US10355878B2 (zh)
EP (2) EP3787227B1 (zh)
CN (1) CN104883687B (zh)
WO (1) WO2015127852A1 (zh)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105306619A (zh) * 2015-10-19 2016-02-03 苏州汉明科技有限公司 一种ac对于位于nat内部的多ap的管理方法
CN106793013A (zh) * 2017-01-22 2017-05-31 深圳国人通信股份有限公司 基于l2tp的无线接入系统及其交互方法
CN106850760A (zh) * 2016-12-30 2017-06-13 华为软件技术有限公司 地理位置获取方法及装置
EP3352428A4 (en) * 2015-10-28 2018-08-29 Huawei Technologies Co., Ltd. Load sharing method, apparatus and system

Families Citing this family (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107317768B (zh) * 2016-04-27 2020-01-03 新华三技术有限公司 流量调度方法及装置
CN105813169B (zh) * 2016-05-12 2020-02-04 上海斐讯数据通信技术有限公司 一种无线网络部署方法及系统
CN107786613B (zh) * 2016-08-30 2020-05-12 新华三技术有限公司 宽带远程接入服务器bras转发实现方法和装置
CN108337182B (zh) * 2017-01-20 2020-06-02 华为技术有限公司 一种报负载分担方法及网络设备
CN107547244B (zh) * 2017-05-25 2020-11-20 新华三技术有限公司 一种表项处理方法及装置
CN109428852B (zh) * 2017-07-18 2023-09-15 中兴通讯股份有限公司 通信隧道端点地址分离方法、终端、ePDG及存储介质
CN107257558B (zh) * 2017-07-25 2020-07-28 锐捷网络股份有限公司 报文转发方法及装置
CN109152096B (zh) * 2018-09-27 2020-09-25 安科讯(福建)科技有限公司 Eps架构的报文传输方法及计算机可读存储介质
CN110035476B (zh) * 2019-03-22 2021-12-17 北京星网锐捷网络技术有限公司 无线网络控制方法、无线接入点、接入控制器及系统
CN112202799B (zh) * 2020-10-10 2022-05-10 杭州盈高科技有限公司 一种实现用户和/或终端与ssid绑定的认证系统及方法
CN112333711B (zh) * 2020-10-30 2022-04-01 新华三大数据技术有限公司 无线网络提供方法、装置及存储介质
CN114125868A (zh) * 2021-11-24 2022-03-01 山东省邮电规划设计院有限公司 一种用于无线网络设备的共享方法、设备及介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080089305A1 (en) * 2006-10-13 2008-04-17 Huawei Technologies Co., Ltd. System and method for broadband mobile access network
CN101771612A (zh) * 2010-01-13 2010-07-07 华为技术有限公司 隧道建立方法、设备及网络系统
US20110103344A1 (en) * 2009-11-04 2011-05-05 Cisco Technology, Inc. Neighbor Discovery Message Handling to Support Roaming of Wireless Mobile Client Devices
CN102685725A (zh) * 2012-05-11 2012-09-19 中国联合网络通信集团有限公司 信息接收方法、信息发送方法、装置及系统
CN103220650A (zh) * 2012-01-18 2013-07-24 华为技术有限公司 一种WiFi终端访问不同业务域的方法和装置

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3695538B2 (ja) * 2003-06-04 2005-09-14 日本電気株式会社 ネットワークサービス接続方法／プログラム／記録媒体／システム、アクセスポイント、無線利用者端末
WO2005107161A1 (fr) * 2004-04-28 2005-11-10 Beijing Jiaxun Feihong Electrical Co., Ltd. Systeme et procede de communications d'un reseau de telecommunications ip et leur application
US20090129386A1 (en) * 2005-04-29 2009-05-21 Johan Rune Operator Shop Selection
CN101009627A (zh) * 2006-12-27 2007-08-01 华为技术有限公司 一种业务绑定的方法和设备
CN102215456B (zh) * 2010-04-07 2013-11-06 华为技术有限公司 一种组播控制方法和装置

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080089305A1 (en) * 2006-10-13 2008-04-17 Huawei Technologies Co., Ltd. System and method for broadband mobile access network
US20110103344A1 (en) * 2009-11-04 2011-05-05 Cisco Technology, Inc. Neighbor Discovery Message Handling to Support Roaming of Wireless Mobile Client Devices
CN101771612A (zh) * 2010-01-13 2010-07-07 华为技术有限公司 隧道建立方法、设备及网络系统
CN103220650A (zh) * 2012-01-18 2013-07-24 华为技术有限公司 一种WiFi终端访问不同业务域的方法和装置
CN102685725A (zh) * 2012-05-11 2012-09-19 中国联合网络通信集团有限公司 信息接收方法、信息发送方法、装置及系统

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105306619A (zh) * 2015-10-19 2016-02-03 苏州汉明科技有限公司 一种ac对于位于nat内部的多ap的管理方法
EP3352428A4 (en) * 2015-10-28 2018-08-29 Huawei Technologies Co., Ltd. Load sharing method, apparatus and system
US10623320B2 (en) 2015-10-28 2020-04-14 Huawei Technologies Co., Ltd. Load sharing method, apparatus, and system
CN106850760A (zh) * 2016-12-30 2017-06-13 华为软件技术有限公司 地理位置获取方法及装置
CN106850760B (zh) * 2016-12-30 2020-10-27 华为技术有限公司 地理位置获取方法及装置
CN106793013A (zh) * 2017-01-22 2017-05-31 深圳国人通信股份有限公司 基于l2tp的无线接入系统及其交互方法

Also Published As

Publication number Publication date
EP3094043B1 (en) 2020-07-15
EP3787227B1 (en) 2022-07-27
EP3094043A4 (en) 2017-01-04
CN104883687A (zh) 2015-09-02
EP3094043A1 (en) 2016-11-16
US10355878B2 (en) 2019-07-16
CN104883687B (zh) 2019-02-26
US20160373273A1 (en) 2016-12-22
EP3787227A1 (en) 2021-03-03

Similar Documents

Publication Publication Date Title
WO2015127852A1 (zh) 无线局域网隧道建立方法、装置及接入网系统
KR101814969B1 (ko) 네트워크에 액세스하는 시스템 및 방법
US11729619B2 (en) Methods and apparatus for wireless communication using a security model to support multiple connectivity and service contexts
JP6441951B2 (ja) システム間モビリティのためのサービングゲートウェイ拡張
US9167430B2 (en) Access method and system, and mobile intelligent access point
JP5602937B2 (ja) リレーノードと構成エンティティの間の接続性の確立
US20150365278A1 (en) Mobile network iot convergence
US8611358B2 (en) Mobile network traffic management
WO2012130085A1 (zh) 与网管系统建立连接的方法、设备及通信系统
CN106304401B (zh) 一种公共wlan架构下的数据隧道建立方法和ap
WO2019157968A1 (zh) 一种通信方法、装置及系统
WO2014071685A1 (zh) 基于移动网络的租户网络业务实现方法、系统及网元
JP2018512788A (ja) トラフィックフロー分割方法およびトラフィックフロー分割装置
US9118588B2 (en) Virtual console-port management
WO2018054272A1 (zh) 数据的发送方法和装置、计算机存储介质
WO2012022212A1 (zh) 用户设备接入方法、装置及系统
US20170041247A1 (en) Wireless access gateway
US20150319669A1 (en) Forwarding of service requests by a wireless controller
WO2010081396A1 (zh) 毫微级接入点的入网方法、装置和系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15755623

Country of ref document: EP

Kind code of ref document: A1

REEP Request for entry into the european phase

Ref document number: 2015755623

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2015755623

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE