WO2016169246A1 - 接入汇聚装置和认证注册方法 - Google Patents

接入汇聚装置和认证注册方法 Download PDF

Info

Publication number
WO2016169246A1
WO2016169246A1 PCT/CN2015/094231 CN2015094231W WO2016169246A1 WO 2016169246 A1 WO2016169246 A1 WO 2016169246A1 CN 2015094231 W CN2015094231 W CN 2015094231W WO 2016169246 A1 WO2016169246 A1 WO 2016169246A1
Authority
WO
WIPO (PCT)
Prior art keywords
module
access module
optical
access
optical access
Prior art date
Application number
PCT/CN2015/094231
Other languages
English (en)
French (fr)
Inventor
刁渊炯
李明生
江晓林
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2016169246A1 publication Critical patent/WO2016169246A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/40—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using virtualisation of network functions or resources, e.g. SDN or NFV entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/34—Signalling channels for network management communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/34—Signalling channels for network management communication
    • H04L41/344—Out-of-band transfers

Definitions

  • the present invention relates to the field of communications, and in particular to an access aggregation device and an authentication registration method.
  • access aggregation devices are implemented on closed hardware and software systems, such as device configuration management, link state collection, topology calculation and release, packet storage, modification, forwarding, and multi-level traffic monitoring. They are all concentrated in the same device and consume a large amount of dedicated input, output, storage, and computing resources. And specific software functions must be developed, verified, and deployed on specific hardware, both in terms of hardware and software implementation, as well as network device management and energy consumption, adding complexity and cost.
  • VPN virtual private network
  • the present invention provides an access aggregation device and an authentication registration method to at least solve the problem that the access aggregation device management and deployment in the related art are inflexible.
  • an access aggregation device comprising: an interface module configured to access one or more access modules, wherein the one or more access modules are hardware modules, The access module is managed by a network function module, the network function module is configured to access a network function of the aggregation device, and the physical medium access function of the access aggregation device is distributed to the one or more access modules; And a switching module, configured to connect the network function module and the one or more access modules, and exchange a message between the network function module and the one or more access modules.
  • the network function module is implemented by virtualizing a virtual network function module VNF in the NFV through a network function.
  • the network function implemented by the network function module includes at least one of: performing configuration management on the packet switching module; performing configuration management on the one or more access modules; and centralizing the user side network terminal Configuration management; driving topology management and/or centralized control between the virtual network controller and the packet switching module, the one or more access modules, and the user-side network terminal.
  • the access aggregation device includes at least one of the following: an optical fiber line terminal OLT, and a cable modem termination system CMTS.
  • the access module implements functions of the physical layer device PHY and the media access control MAC layer.
  • the access module includes at least one of the following: an optical access module, a distributed access module, where the optical access module is configured to implement a medium to Ethernet medium other than Ethernet.
  • the distributed access module is configured to interface with a standard Ethernet interface of the access aggregation device or with a small pluggable device SFP access module, and is configured to implement media conversion.
  • the optical access module includes: an electrical signal processing module and a controller, wherein the controller has an address address of an addressable IP address or a non-IP address, and the electrical signal processing module includes: Layer user network side interface UNI PHY, physical layer network node interface NNI PHY, data link layer bridging unit connecting user network side interface UNI and network node interface NNI data link layer; said UNI PHY and said NNI PHY, setting An interface function defined for the specified communication protocol; the data link layer bridging unit is configured to manage packets forwarded between the UNI PHY and the NNI PHY; the controller is configured to The management address controls the electrical signal processing module to forward the message to the user side device or the network side device corresponding to the management address.
  • the electrical signal processing module includes: Layer user network side interface UNI PHY, physical layer network node interface NNI PHY, data link layer bridging unit connecting user network side interface UNI and network node interface NNI data link layer; said UNI PHY and said NNI PHY, setting An interface function defined for the specified
  • the data link layer corresponding to the UNI PHY and the NNI PHY has a medium access control MAC and a logical link control LLC function.
  • the data link layer bridge includes: a packet buffer component and a traffic flow management component; the packet buffer component is configured to cache the message of the data link layer; the TM component, setting To manage the message.
  • the packet buffer component is a random access memory RAM
  • the TM component is a multi-core central processing unit CPU or a network processor.
  • the optical access module further includes a photoelectric conversion driving circuit configured to perform conversion between the optical signal and the electrical signal.
  • the photoelectric conversion driving circuit includes: a transmitter and a receiver; the transmitter is configured to modulate an electrical signal sent by the electrical signal processing unit into an optical signal, and transmit the optical signal; And arranged to demodulate the received optical signal into an electrical signal and send the electrical signal to the electrical signal processing module.
  • the emitter comprises: a semiconductor laser
  • the receiver comprising: a semiconductor photodetector.
  • the photoelectric conversion drive circuit comprises a combination of one or more sets of the semiconductor laser and the semiconductor photodetector.
  • the optical access module further includes: a power module configured to obtain power input by the DC power source, wherein the power is used to work by the optical access module.
  • the optical access module is applicable to an optical module slot of a switch or a router.
  • the distributed access module is configured to implement conversion of a hybrid fiber-coax network HFC limited television medium to an Ethernet medium.
  • the method further includes at least one of: the distributed access module is further configured to perform flow identification and classification when the point-to-multipoint conversion to the point-to-point logical connection; when the distributed access module and the When the access aggregation device is connected, at least one of a virtual local area network (VLAN) VLAN tag, a virtual scalable local area network VxLAN tag, a multi-protocol label switching MPLS label, and an IP tunnel label is used as the flow label.
  • VLAN virtual local area network
  • the packet switching module includes a network interface card NIC and an Ethernet switch.
  • the network function module and the one or more access modules are connected by the NIC.
  • the plurality of access modules are connected by the Ethernet switch.
  • an authentication registration method of an optical access module using the apparatus of any of the above comprising: the network function module receiving physical location information of the optical access module and the light a device identifier of the access module; the network function module authenticates the optical access module according to the device identifier of the optical access module; and the authentication of the optical access module by the network function module And the network function module sends management configuration information to the optical access module corresponding to the physical location information, where the network function module establishes a management channel with the optical access module according to the management configuration information.
  • the network function module comprises a virtualized optical line terminal vOLT.
  • the network function module sends the management configuration information to the optical access module, where the at least one of the following is included:
  • the vOLT receives the management IP request of the optical access module, and the vOLT delivers the management medium access control MAC configured to the optical access module, and the vOLT is configured to pass the authentication of the optical access module.
  • Management IP in the case that the vOLT authenticates the optical access module, and the optical access module initiates 802.1x authentication
  • the vOLT replies to the optical access module by using a LAN-based extended authentication protocol EAPoL, and the vOLT carries the management MAC and the management IP of the vOLT by using a type length value TLV.
  • the network function module establishes a management channel with the optical access module according to the management configuration information, and includes at least one of the following: a management channel is established between the optical access module and the vOLT by using a management IP; A management channel is established between the optical access module and the vOLT through an Ethernet maintenance communication channel ETH-MCC.
  • the physical location information of the optical access module includes: a port number where the optical access module is located, and a slot number where the optical access module is located.
  • the device identifier of the optical access module includes: a MAC address of the optical access module, and a sequence number of the optical access module.
  • an authentication registration method for an optical access module using the apparatus of any of the above comprising: receiving, by a first network function module of the plurality of network function modules, optical access An authentication request of the module; the first network function module forwards the authentication request to a centralized authentication and authorization charging AAA server; and in the case that the AAA server authenticates the optical access module, the first The network function module sends the management configuration information of the corresponding network function module to the optical access module.
  • the network function module comprises a virtualized optical line terminal vOLT.
  • the sending, by the first network function module, the corresponding network function module management configuration information to the optical access module includes: sending, by the first vOLT, an 802.1x response message to the optical access module, the response message
  • the management IP of the corresponding vOLT and the MAC of the corresponding vOLT are included; the first vOLT allocates the management IP of the vOLT corresponding to the optical access module by using a dynamic host configuration protocol subsequent protocol.
  • an authentication registration method for an optical access module using the apparatus comprising: discovering that the optical access module is in place when the access aggregation device finds The access aggregation device reads the device identifier of the optical access module, and the access aggregation device reports the physical location information of the optical access module and the device identifier of the optical access module to the network function module. The access aggregation device receives an authentication message from the network function module to the optical access module, where the network function module authenticates the optical access module according to the device identifier of the optical access module.
  • the network function module comprises a virtualized optical line terminal vOLT.
  • the method further includes: the access aggregation device Receiving an advertisement of the management IP and interface information of the vOLT; the access aggregation device notifying the vOLT of the management IP and interface information of the access aggregation device; and the access aggregation device establishing management control with the vOLT aisle.
  • the access aggregation device advertises the management IP of the access aggregation device to the vOLT, including: a static pre-configuration management IP, and a management IP obtained by using a dynamic host configuration protocol.
  • the accessing the aggregation device to read the device identifier of the optical access module includes: the access aggregation device reads the device identifier of the optical access module through the two-wire serial bus I2C control bus.
  • the access aggregation device reports the physical location information of the optical access module and the device identifier of the optical access module to the virtualized optical line terminal vOLT, where the access aggregation device passes the network configuration protocol.
  • the NETCONF or the network management protocol SNMP reports the physical location information of the optical access module and the device identifier of the optical access module to the virtualized optical line terminal vOLT.
  • the physical location information of the optical access module includes: a port number where the optical access module is located, and a slot number where the optical access module is located.
  • the device identifier of the optical access module includes: a MAC address of the optical access module, and a sequence number of the optical access module.
  • the access aggregation device comprising: an interface module, is configured to access one or more access modules, wherein the one or more access modules are hardware modules, and the access module is subjected to network functions.
  • the management of the module, the network function module implements a network function of the access aggregation device, the physical medium access function of the access aggregation device is distributed to the one or more access modules; the message exchange module is set to be connected
  • the network function module and the one or more access modules exchange messages between the network function module and the one or more access modules.
  • FIG. 1 is a block diagram showing the structure of an access aggregation device according to an embodiment of the present invention
  • FIG. 2 is a structural block diagram of an optical access module according to an embodiment of the present invention.
  • FIG. 3 is a block diagram showing the structure of an optical access module according to an alternative embodiment of the present invention.
  • FIG. 4 is a schematic diagram of a location of an optical access module in a network device according to an embodiment of the present invention.
  • FIG. 5 is a structural block diagram of an embodiment of a GPON OLT optical access module according to an alternative embodiment of the present invention.
  • FIG. 6 is a schematic diagram of implementing software-definable controlled forwarding of an optical access module in accordance with an alternative embodiment of the present invention.
  • FIG. 7 is a flowchart of a method for implementing a software-defined flow table by an optical access module according to an embodiment of the present invention.
  • FIG. 8 is a structural block diagram of a message exchange module 14 in an access aggregation device according to an embodiment of the present invention.
  • FIG. 9 is a flowchart 1 of an authentication registration method of an optical access module according to an embodiment of the present invention.
  • FIG. 10 is a second flowchart of a method for authenticating an optical access module according to an embodiment of the present invention.
  • FIG. 11 is a flowchart 3 of an authentication registration method of an optical access module according to an embodiment of the present invention.
  • FIG. 12 is a structural block diagram 1 of an authentication registration apparatus of an optical access module according to an embodiment of the present invention.
  • FIG. 13 is a second structural block diagram of an authentication and registration device of an optical access module according to an embodiment of the present invention.
  • FIG. 14 is a structural block diagram 3 of an authentication registration apparatus of an optical access module according to an embodiment of the present invention.
  • FIG. 15 is a schematic diagram of a network architecture of a virtual access network in accordance with a preferred implementation of the present invention.
  • 16 is a flow chart showing the authentication and registration of an optical access module on a general-purpose Ethernet switch (access aggregation device B) according to a preferred embodiment of the present invention
  • FIG. 17 is a flow chart showing the authentication and registration on a network card port of a general-purpose server (access aggregation device A) according to a preferred embodiment of the present invention
  • FIG. 18 is a diagram showing locations of virtualized access aggregation devices A and B in an access network according to an embodiment of the present invention.
  • FIG. 19 is a schematic diagram of an apparatus for accessing an aggregation device A according to an embodiment of the present invention.
  • FIG. 20 is a schematic diagram of an apparatus for accessing an aggregation device B according to an embodiment of the present invention.
  • FIG. 21 is a schematic diagram of functions of a vOLT according to an embodiment of the present invention.
  • FIG. 22 is a schematic diagram of functions of an access module according to an embodiment of the present invention.
  • FIG. 23 is a schematic diagram of an embodiment of an SFP OLT of an optical access module according to an embodiment of the present invention.
  • FIG. 24 is a schematic diagram of an embodiment of an R-CCAP module of a distributed access module according to an embodiment of the present invention.
  • FIG. 25 is a schematic diagram of centralized control of an access aggregation network by using a vOLT residing in the access aggregation device A according to an embodiment of the present invention
  • FIG. 26 is a schematic diagram of an embodiment of a hybrid networking compatible with a legacy access aggregation device according to an embodiment of the present invention.
  • FIG. 27 is a schematic diagram of an embodiment of a vOLT deployed in a network cloud platform according to an embodiment of the present invention.
  • 28 is a schematic diagram of a conventional optical module.
  • FIG. 1 is a structural block diagram of an access aggregation device according to an embodiment of the present invention. As shown in FIG. 1, the access aggregation device includes an interface module 12 and a message exchange. Module 14, the access aggregation device will be described below.
  • the interface module 12 is configured to access one or more access modules, where the one or more access modules are hardware modules, the access module is managed by a network function module, and the network function module implements access to the aggregation device.
  • the network function, the physical medium access function of the access aggregation device is distributed to one or more access modules;
  • the message exchange module 14 is configured to connect the network function module and one or more access modules, in the network function module and Packets are exchanged between one or more access modules.
  • the interface module 12 can freely access a plurality of hardware modules, and realizes any expansion of the hardware functions, and the device separately deploys the hardware and software of the traditional access aggregation device, and the software part can be a network function.
  • the module is implemented, and the functions of the software part can be freely set, so that accessing the network convergence device, the network terminal and the like are more compact in hardware and software, and the management and deployment of the access aggregation device existing in the related technology are inflexible.
  • the problem in turn, achieves the effect of improving the flexibility of access aggregation device management and deployment.
  • the network function module is implemented by virtualizing the virtual network function module VNF in the NFV through a network function, and may also be implemented in other manners.
  • the above network function module can implement multiple functions.
  • the network function implemented by the network function module can include at least one of the following: configuring and managing the message switching module 14; for one or more The access module performs configuration management; centrally configures and manages the user-side network terminal; drives the virtual network controller to perform topology discovery and/or centralized control between the packet exchange module 14, one or more access modules, and the user-side network terminal. .
  • the foregoing access aggregation device may include at least one of the following: an optical line termination OLT, and a cable modem termination system CMTS.
  • the network function module may be a virtual fiber line terminal vOLT.
  • the foregoing access module may be configured to implement functions of the physical layer device PHY and the media access control MAC layer.
  • the foregoing access module may have multiple types.
  • the access module includes at least one of the following: an optical access module, a distributed access module, where the optical access module is configured. Divide by Medium-to-Ethernet media conversion outside the Ethernet; the distributed access module is configured to interface with a standard Ethernet interface of the access aggregation device, or with a small pluggable device SFP access module, configured to implement Media conversion.
  • the optical access module includes: an electrical signal processing module 202 and a controller 204, wherein the controller 204 is addressable.
  • IP or non-IP management address the electrical signal processing module 202 includes: a physical layer user network side interface (User Network Interface UNI) PHY222, a physical layer network node interface (Network to Network Interface abbreviated as NNI) PHY242, a connected user network The side interface UNI and the network node interface NNI data link layer data link layer bridging unit 262;
  • UNI PHY 222 and NNI PHY 242 set to implement the interface functions defined by the specified communication protocol
  • a data link layer bridging unit 262 is configured to manage packets forwarded between the UNI PHY 222 and the NNI PHY 242;
  • the controller 204 is configured to control the electrical signal processing module to forward the packet to the user side device or the network side device corresponding to the management address according to the management address.
  • an optical access module including an electrical signal processing module and a controller
  • the electrical signal processing module includes: a UNI PHY and an NNI PHY, and a user network side interface UNI and a network node interface NNI data.
  • the data link layer bridge of the link layer can be seen that the optical access module integrates the functions of the PHY interface and the data link layer, and saves dedicated GPON, EPON and other line cards, thereby solving the related art common Ethernet switch.
  • IP routers cannot directly connect optical networks to various networks such as ODN and HFC. Instead, Ethernet must be connected to OLTs, CMTSs, etc. under switches and IP routers, reducing the number of active devices that operators need to purchase. kind.
  • the data link layer corresponding to the UNI PHY and the NNI PHY is also provided with a medium access control MAC and a logical link control LLC function.
  • the user-side UNI PHY and the network-side NNI PHY implement the functions defined by the protocol standard, and the corresponding data link layer has various embodiments:
  • the implementation of the UNI PHY adopts the function of the PMD defined by the ITU-T G.984.2 standard and the function of the transport layer defined by the G.984.3 standard.
  • the data link layer implements the control and management of the service virtual port GEMport of the transport layer multi-user point-to-point logical connection defined by the G.984.3 and G.984.4 standards;
  • the UNI PHY implements the functions of IEEE 802.3Clause 60, 65, and the data link layer implements IEEE 802.3Clause 57, 64 for the transport layer multi-user point-to-point logic. Control and management of connected Logical Link Identifiers (LLIDs).
  • LLIDs Logical Link Identifiers
  • the NNI PHY on the network side adopts the PHY defined by the IEEE 802.3 standard, and the data link layer implements the functions of the MAC and LLC defined by the IEEE802.3 standard.
  • the NNI PHY on the network side can be connected through the switch, the optical module slot on the router, and the physical side PHY of the switch and the Ethernet port of the router.
  • the data link layer bridge involved in this embodiment may further include: a packet buffer component and a traffic flow management component; a packet buffer component, configured to cache a packet of a data link layer; a TM component, setting To manage the message.
  • the packet buffer unit is a random access memory (Random-Access Memory for short)
  • the TM unit is a multi-core central processing unit (CPU) or a network processor.
  • the data link layer bridge in this embodiment is used for performing packet parsing, modification, forwarding, and traffic policing functions on data packets forwarded between the UNI PHY and the NNI PHY.
  • the data link layer bridge is composed of a packet buffer for buffering packets and a traffic flow management (Traffic & Flow Management for short) for processing messages.
  • Packet Buffer is implemented in RAM as hardware, and TM is implemented as hardware in CPU or network processor.
  • the optical access module in this embodiment may further include: a photoelectric conversion driving circuit configured to perform conversion between the optical signal and the electrical signal.
  • the photoelectric conversion driving circuit includes: a receiver and a transmitter; wherein the transmitter is configured to modulate an electrical signal transmitted by the electrical signal processing unit into an optical signal and transmit the optical signal; and the receiver is configured to receive the received light The signal is demodulated into an electrical signal and sent to the electrical signal processing module.
  • the emitter comprises: a semiconductor laser
  • the receiver comprising: a semiconductor photodetector.
  • the photoelectric conversion drive circuit includes a combination of one or more sets of semiconductor lasers and semiconductor photodetectors.
  • the photoelectric conversion drive circuit is composed of a receiver and a transmitter.
  • the transmitter typically includes a semiconductor laser, such as a distributed feedback laser, configured to modulate the electrical signal transmitted by the UNI PHY into an optical signal transmission.
  • the receiver typically includes a semiconductor photodetector, such as an avalanche photodiode, configured to demodulate the optical signal received by the user side fiber into an electrical signal for transmission to the UNI PHY.
  • a pre-demultiplexed/multiplexed WDM wavelength division multiplexing device is also required, and the driver circuit portion may also include multiple sets of lasers and photodetectors.
  • the optical access module of the embodiment may further include: a power module configured to obtain power input by the DC power source, wherein the power is used to work for the optical access module. That is, the power module obtains DC power input from the optical module slot of the switch and the router, and then allocates it to other components of the optical access module. It may also include an Electrically Erasable Programmable Read-Only Memory (EEPROM), which is configured to store information, and the EEPROM is powered off without losing information.
  • EEPROM Electrically Erasable Programmable Read-Only Memory
  • the optical access module related to this embodiment is applicable to a switch module slot of a general switch and a router.
  • the present invention provides an optical access module that integrates PHY and MAC functions in a miniaturized XFP, SFP, and CFP
  • FIG. 3 is a structural block diagram of an optical access module according to an alternative embodiment of the present invention
  • the optical access module includes: a photoelectric conversion drive driver, an electric signal processing module, a power module, a controller, and an electrically erasable read-only read-only and power-off information.
  • the memory is an EEPROM.
  • the electrical signal processing module includes: a UNI PHY and a data link layer connected to the user side, an NNI PHY and a data link layer connected to the network side, and a data link layer connected to the UNI data link layer and the NNI data link layer. bridge.
  • the implementation of the UNI PHY adopts the function of the PMD defined by the ITU-T G.984.2 standard and the function of the transport layer defined by the G.984.3 standard.
  • the data link layer implements the control and management of the service virtual port GEMport of the transport layer multi-user point-to-point logical connection defined by the G.984.3 and G.984.4 standards;
  • the UNI PHY implements the functions of IEEE 802.3Clause 60, 65, and the data link layer implements the IEEE 802.3Clause 57, 64 control of the LLID of the transport layer multi-user point-to-point logical connection. management.
  • the NNI PHY on the network side adopts the PHY defined by the IEEE 802.3 standard, and the data link layer implements the functions of the MAC and LLC defined by the IEEE802.3 standard.
  • the NNI PHY on the network side can be connected through the switch, the optical module slot on the router, and the physical layer PHY of the switch and the Ethernet port of the router.
  • the data link layer bridge is used to perform packet parsing, modification, forwarding, and traffic policing on data packets forwarded between the UNI PHY and the NNI PHY. It consists of a packet buffer Packet Buffer for buffering messages and a Traffic Flow ManagementTM for processing messages. Packet Buffer is implemented in RAM as hardware, and TM is implemented as hardware in a multi-core CPU or network processor.
  • the controller in this alternative embodiment has an addressable IPv4/IPv6 or non-IP (such as an Ethernet MAC address) management address, and can forward packets through the TM, so that the controller and the user side or the network side device carry the device. Internal communication.
  • the controller receives the control signal interface provided by the optical module slot, such as an Inter-Integrated Circuit (I2C) signal, and receives control of the upper-level CPU from the out-of-band channel.
  • I2C Inter-Integrated Circuit
  • the power module obtains DC power input from the optical module slot of the switch and router, and then distributes it to other components of the optical access module.
  • the photoelectric conversion driving module is composed of a receiving unit (corresponding to the receiver in the embodiment) and a transmitting unit (corresponding to the transmitter in the embodiment); wherein the transmitting unit generally includes a semiconductor laser, such as a distributed feedback laser, It is set to modulate the electrical signal sent by the UNI PHY into an optical signal transmission.
  • the receiving unit typically includes a semiconductor photodetector, such as an avalanche photodiode, configured to demodulate the optical signal received by the user side fiber into an electrical signal for transmission to the UNI PHY.
  • a pre-demultiplexed/multiplexed WDM wavelength division multiplexing device is also required, and the driver circuit portion may also include multiple sets of lasers and photodetectors.
  • the optical access module of the optional embodiment is integrated with the PHY and MAC layer functions, and the dedicated GPON, EPON, and other line cards are saved. It is only necessary to insert an optical access module into the optical module slot of a universal switch or router to provide user access of such a shared medium such as PON ODN. Significantly reduce the types of active equipment that operators need to purchase. And the optical access module can be deployed on demand according to the development of the ODN network. That is to say, the optional embodiment overcomes the common Ethernet switch and the IP router in the related art cannot directly connect the network of the ODN, the HFC and the like with the optical module, but must hang the OLT and the CMTS under the switch and the router.
  • the device fails to meet the requirements of the operator to reduce the type of equipment, reduce the cost of network construction, and flexibly connect to the network such as ODN and HFC on demand, provide an XFP, SFP, CFP, etc. that can be directly plugged into the switch and IP router.
  • a device for miniaturizing a packaged optical access module If the device fails to meet the requirements of the operator to reduce the type of equipment, reduce the cost of network construction, and flexibly connect to the network such as ODN and HFC on demand, provide an XFP, SFP, CFP, etc. that can be directly plugged into the switch and IP router.
  • FIG. 4 is a schematic diagram of a location of an optical access module in a network device according to an embodiment of the present invention.
  • a general-purpose Ethernet switch implements electrical signal processing between multiple ports, which may be multiple Ethernet packets are exchanged between ports.
  • Each port has its own IEEE 802.3 MAC, LLC, and PHY functions.
  • the PMD sublayer function of the PHY is related to the medium used by the port, such as the traditional RJ45 twisted pair interface, or SFP, XFP, or CFP and other optical module slots (Cage), the electrical characteristics of these slots are in line with industry standards defined by the MSA (Multi-Source Agreement) organization, such as SFF-8431, SFF-8472, INF-8077i, etc., by inserting SFP, XFP,
  • MSA Multi-Source Agreement
  • the optical module of the CFP package implements the photoelectric conversion function of the PMD sublayer.
  • the optical access module in the technical solution of the present invention also implements the PON MAC function of the multi-user shared ODN as the medium, and the back-to-back user-side PON MAC and the network-side Ethernet MAC in the data. Bridging of the link layer.
  • the optical modules in the optical access module and related technologies are packaged in the same hardware and can be directly inserted into the optical module slots of the switch.
  • FIG. 5 is a structural block diagram of an embodiment of a GPON OLT optical access module according to an alternative embodiment of the present invention.
  • the implementation of the UNI PHY adopts the function of the PMD defined by the ITU-T G.984.2 standard and G.984.3.
  • the function of the transport layer defined by the standard.
  • the data link layer implements the control and management of the GEM of the transport layer multi-user point-to-point logical connection defined by the G.984.3 and G.984.4 standards.
  • the data link layer can decapsulate the IEEE 802.3 MAC from the GEM package of the GEMport.
  • the data transfer channel (Serdes) provided by the module slot and the PHY connection of the universal switch Ethernet port.
  • the controller provides an addressable IP address and IP protocol stack for communicating with other devices on the user side network terminal or remote side of the network side.
  • FIG. 6 is a schematic diagram of implementing software-definable controlled forwarding by an optical access module according to an optional embodiment of the present invention.
  • the controller of the optical access module may be loaded with an OpenFlow agent, and the SDN is controlled.
  • the principle of forwarding and separating, the remote OpenFlow controller controls the packet forwarding behavior of the optical access module through the OpenFlow protocol.
  • the OpenFlow Agent converts the control of the OpenFlow controller into an internal command of the optical access module, and performs software programming on the flowable table defined by the structure in the Bridging to implement the change of the packet forwarding behavior of the user.
  • the flow table is forwarded in the system design, and the structure and forwarding logic of the flow table are fixed.
  • the process of redefining the flow table of the controller is as follows: In the forwarding state, when the number of packets in the receive buffer is zero, the packet forwarding pipeline of the optical access module does not immediately enter the Idle state. It checks whether the controller needs to process the next batch of packets in the pipeline.
  • FIG. 7 is a flowchart of a method for implementing a software-defined flow table by an optical access module according to an embodiment of the present invention. As shown in FIG. 7, the steps of the method include:
  • Step S702 Entering a forwarding state
  • Step S704 checking the table
  • Step S706 forwarding
  • Step S708 determining whether the to-be-sent is greater than zero, when the determination result is yes, executing step S704; if the determination result is no, executing step S710;
  • Step S710 determining whether the controller wants to modify the flow table; when the determination result is no, step S712 is performed; when the determination result is yes, step S714 is performed;
  • Step S712 Ending to the idle state
  • Step S714 Modify the flow table structure
  • Step S716 The reporting controller is modified, and the packet forwarding can be resumed.
  • the distributed access module described above is configured to implement a hybrid fiber-coax network HFC limited television medium to Ethernet medium conversion.
  • the distributed access module may also implement at least one of the following functions: the distributed access module further Set the flow identification and classification when the point-to-multipoint conversion to the point-to-point logical connection; when the distributed access module and the access aggregation device are connected, the virtual local area network VLAN tag, the virtual scalable local area network VxLAN tag, At least one of the multi-protocol label switching MPLS label and the IP tunnel label is identified as a flow label.
  • FIG. 8 is a structural block diagram of a message exchange module 14 in an access aggregation device according to an embodiment of the present invention.
  • the message exchange module 14 includes a network interface card NIC 142 and an Ethernet switch 144, wherein the Ethernet The number of network switches can be multiple.
  • the message exchange module 14 is configured to connect the network function module and one or more access modules.
  • the network function module and one or more access modules can be connected through the NIC 142 described above. .
  • the plurality of access modules described above may be connected by an Ethernet switch 144.
  • FIG. 9 is an authentication registration method of an optical access module according to an embodiment of the present invention.
  • Step S902 the network function module receives the physical location information of the optical access module and the device identifier of the optical access module;
  • Step S904 The network function module authenticates the optical access module according to the device identifier of the optical access module.
  • Step S906 in the case that the network function module passes the authentication of the optical access module, the network function module sends management configuration information to the optical access module corresponding to the physical location information, and the network function module is configured according to the management configuration information. Establish a management channel with the optical access module.
  • the network function module receives the physical location information of the optical access module and the device identifier of the optical access module, and the network function module authenticates the optical access module according to the device identifier, and the optical function module connects the optical access module.
  • the network function module establishes a management channel with the optical access module according to the management configuration information, and solves the problem that the network function module cannot effectively register the optical access module by using the above authentication registration mode. The discovery, authentication and registration of the optical access module by the network function module is realized.
  • the network function module may include a virtualized optical line terminal vOLT.
  • vOLT virtualized optical line terminal
  • the vOLT may send the management configuration information to the optical access module in multiple manners, where the vOLT receives the optical interface in the case that the vOLT passes the authentication of the optical access module.
  • the management IP address of the incoming module the vOLT sends a management MAC and a management IP configured for the optical access module;
  • the vOLT answers the optical access module by using the LAN-based extended authentication protocol EAPoL, and the vOLT passes the type length.
  • the value TLV carries the management MAC and management IP of the vOLT.
  • the vOLT establishes a management channel with the optical access module according to the management configuration information, and the method includes: establishing, by the management module, the management channel between the optical access module and the vOLT; A management channel is established between the optical access module and the vOLT through the Ethernet maintenance communication channel ETH-MCC.
  • the physical location information of the optical access module includes: a port number where the optical access module is located, and a slot number where the optical access module is located.
  • the device identifier of the optical access module includes: a MAC address of the optical access module, and a serial number of the optical access module.
  • FIG. 10 is a flowchart 2 of an authentication registration method of an optical access module according to an embodiment of the present invention. As shown in FIG. 10, the process includes the following steps:
  • Step S1002 The first network function module of the plurality of network function modules receives the authentication request of the optical access module
  • Step S1004 The first network function module forwards the authentication request to a centralized authentication and authorization charging AAA server;
  • Step S1006 When the AAA server authenticates the optical access module, the first network function module sends management configuration information of the corresponding network function module to the optical access module.
  • the first network function module of the plurality of virtualized optical line termination network function modules receives the authentication request of the optical access module, and the first network function module forwards the authentication request to the centralized authentication and authorization accounting server (Authentication) Authorization and accounting (AAA), in the case that the AAA server authenticates the optical access module, the first network function module sends management configuration information of the corresponding network function module to the optical access module,
  • AAA Authentication
  • the network function module becomes a proxy server, and the cross-network function module authentication of the optical access module is completed, and the network function module cannot effectively provide light.
  • the access module performs authentication registration, and realizes the discovery, authentication, and registration of the optical access module by the network function module.
  • the network function module may include a virtualized optical line terminal vOLT.
  • vOLT virtualized optical line terminal
  • the first vOLT sends the corresponding vOLT management configuration information to the optical access module in multiple manners, where the method includes: the first vOLT sends an 802.1x response message to the optical access module, where The response message includes: a management IP of the corresponding vOLT and a MAC of the corresponding vOLT; the first vOLT allocates a management IP of the vOLT corresponding to the optical access module by using a dynamic host configuration protocol subsequent protocol.
  • FIG. 11 is a flowchart 3 of an authentication registration method of an optical access module according to an embodiment of the present invention. As shown in FIG. 11, the process includes the following steps:
  • Step S1102 When the access aggregation device finds that the optical access module is in place, the access aggregation device reads the device identifier of the optical access module.
  • Step S1104 The access aggregation device reports the physical location information of the optical access module and the device identifier of the optical access module to the network function module.
  • Step S1106 Receive an authentication message of the network function module to the optical access module, where the network function module authenticates the optical access module according to the device identifier of the optical access module.
  • the access aggregation device uploads the authentication information of the optical access module to the network function module, and after receiving the authentication of the optical access module, the network function module receives the authentication message of the optical function module to the optical access module, thereby solving the problem.
  • the network function module cannot effectively authenticate the optical access module, and realizes the discovery, authentication and registration of the optical access module by the network function module.
  • the network function module may include a virtualized optical line terminal vOLT.
  • vOLT virtualized optical line terminal
  • the access aggregation device receives the management IP address of the vOLT before the access aggregation device reads the device identifier of the optical access module.
  • the interface information is advertised to the vOLT to advertise the management IP and interface information of the access aggregation device; the access aggregation device establishes a management control channel with the vOLT.
  • the IP address of the access aggregation device that the access aggregation device advertises to the vOLT may include: a static pre-configuration management IP, and a management IP obtained by using a dynamic host configuration protocol.
  • the access aggregation device reads the device identification of the optical access module through the two-wire serial bus I2C control bus.
  • the access aggregation device reports the physical location information of the optical access module and the device identifier of the optical access module to the virtualized optical line terminal vOLT through the network configuration protocol NETCONF or the network management protocol SNMP.
  • the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation.
  • the technical solution of the present invention which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk,
  • the optical disc includes a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the method of various embodiments of the present invention.
  • an authentication registration device for an optical access module is further provided, and the device is located in the terminal.
  • the device is used to implement the above embodiments and preferred embodiments, and the description thereof has been omitted.
  • the term "module” may implement a combination of software and/or hardware of a predetermined function.
  • the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.
  • the following device embodiments are described by taking a network function module as a virtualized optical line terminal vOLT as an example:
  • FIG. 12 is a structural block diagram 1 of an authentication registration apparatus of an optical access module according to an embodiment of the present invention. As shown in FIG. 12, the apparatus includes:
  • the first receiving module 122 is configured to receive the physical location information of the optical access terminal and the device identifier of the optical access module
  • the first authentication module 124 is connected to the first receiving module 122, and is configured to
  • the vOLT authenticates the optical access module according to the device identifier of the optical access module
  • the first sending module 126 is connected to the first authentication module 124, and is configured to pass the authentication of the optical access module by the vOLT.
  • the establishing module 128 is connected to the first sending module 126, and is configured to be the vOLT according to the management configuration information and the optical access module. Establish a management channel.
  • the first sending module 126 can include:
  • a sending unit configured to receive a management IP request of the optical access module, where the vOLT receives a management IP request of the optical access module, where the vOLT sends a management MAC and a configuration of the optical access module Management IP;
  • the portable unit is configured to answer the optical access by using the extended authentication protocol EAPoL based on the local area network, in the case that the vOLT passes the authentication of the optical access module, and the optical access module initiates the 802.1x authentication.
  • the module, the vOLT carries the management MAC and the management IP of the vOLT by the type length value TLV.
  • the establishing module 128 includes: a first management channel unit, configured to establish a management channel between the optical access module and the vOLT through management IP; and a second management channel unit, configured as the optical access module A management channel is established between the vOLT and the vOLT through the Ethernet maintenance communication channel ETH-MCC.
  • FIG. 13 is a structural block diagram 2 of an authentication registration apparatus of an optical access module according to an embodiment of the present invention. As shown in FIG. 13, the apparatus includes:
  • the second receiving module 132 is configured to receive an authentication request of the first vOLT of the plurality of virtualized optical line terminals vOLT to receive the optical access module, and the second authentication module 134 is connected to the second receiving module 132, and is configured as the first
  • the vOLT forwards the authentication request to the centralized authentication and authorization charging AAA server;
  • the second sending module 136 is connected to the second authentication module 134, and is configured to authenticate the optical access module in the AAA server.
  • the first vOLT sends the management configuration information corresponding to the vOLT to the optical access module.
  • the second sending module 136 can include:
  • the response unit is configured to send the 802.1x response message to the optical access module, where the response message includes: a management IP of the corresponding vOLT and a MAC of the corresponding vOLT;
  • the configuration unit is configured to allocate, by the first vOLT, the management IP of the vOLT corresponding to the optical access module by using a dynamic host configuration protocol subsequent protocol.
  • FIG. 14 is a structural block diagram 3 of an authentication registration apparatus of an optical access module according to an embodiment of the present invention. As shown in FIG. 14, the apparatus includes:
  • the reading module 142 is configured to: when the access aggregation device finds that the optical access module is in place, the access aggregation device reads the device identifier of the optical access module; the reporting module 144 is connected to the reading module 142. And the access aggregation device is configured to report the physical location information of the optical access module and the device identifier of the optical access module to the virtualized optical line terminal vOLT.
  • the third authentication module 146 is connected to the reporting module 144, and is configured to Receiving the authentication message of the vOLT to the optical access module, where the vOLT authenticates the optical access module according to the device identifier of the optical access module.
  • the device further includes: an advertisement receiving module, configured to receive, by the access aggregation device, a management IP and interface information of the vOLT;
  • the sending module is configured to notify the vOLT of the management IP and interface information of the access aggregation device, and the management control module is configured to establish a management control channel between the access aggregation device and the vOLT.
  • an authentication registration system for an optical access module including: an optical access module, an access aggregation device, and a virtualized optical line terminal vOLT; the vOLT includes the device in the foregoing embodiment;
  • the incoming convergence device includes the apparatus of the above embodiment.
  • FIG. 15 is a schematic diagram of a network architecture of a virtual access network according to a preferred implementation of the present invention.
  • the network is composed of a network cloud platform, access aggregation devices A and B, and user-side network terminals.
  • the network cloud platform can use a common data infrastructure such as an Internet Data Center (IDC) or a data center.
  • IDC Internet Data Center
  • the access aggregation devices A and B remotely connect to the network cloud platform through the metropolitan area network.
  • Access aggregation device A includes the capabilities of the general server's IT infrastructure, so the network function virtualization module can be distributed on the access aggregation device A and the network cloud platform as needed, such as vOLT, virtual broadband network gateway control device (virtualization Broadband) Functional modules such as Network Gateway (vBNG), Virtualization Communications Control Application (vCCAP), and Virtualization Custom Premise Equipment (vCPE) can be flexibly
  • the server runs on the virtual machines in access aggregation device A and network cloud platform.
  • the access aggregation device B uses a universal Ethernet switch and does not have the capability of loading a virtual machine. It needs to rely on the network function virtualization function provided by the access aggregation device A to assist the work.
  • the access aggregation device B supports the OpenFlow protocol and is controlled by a Software Defined Network (SDN) controller in the aggregation device A.
  • SDN Software Defined Network
  • Access aggregation devices A and B provide standard Ethernet interfaces, such as the 10G network port of the Institute of Electrical and Electronics Engineers (IEEE), or multi-source agreement (Multi-Source Agreement). Standard Small Form-Factor Pluggable (SFP+) slots for MSA). These interfaces connect optical access modules to the user side.
  • the optical access module performs the medium conversion function of the PON to Ethernet data message.
  • the preferred embodiment provides automatic discovery of the optical access module through the vOLT under the virtualized optical line terminal (vOLT) architecture, and authenticates and registers them to realize plug and play.
  • the optical access module may be an SFP physical package optical module that resides on a universal Ethernet switch (access aggregation device B) or a general-purpose server (access aggregation device A) network card port where the vOLT is located.
  • the method for the vOLT to automatically discover, authenticate, and register the optical access module includes the following steps:
  • the access aggregation device finds that the optical access module is in place.
  • the access aggregation device A or B reads the management MAC address and serial number (as the device identifier) of the optical access module through the I2C control bus.
  • the access aggregation device A or B reports the optical access module by using a Network Configuration Protocol (NETCONF) or a Simple Network Management Protocol (SNMP) trap.
  • NETCONF Network Configuration Protocol
  • SNMP Simple Network Management Protocol
  • the physical location information of the port and the slot and the physical address (Media Access Control, MAC) and serial number of the optical access module are reported to the vOLT.
  • the vOLT checks the serial number of the optical access module to check whether it is a resource managed by itself. If it is authenticated (or the optical access module is required to further initiate 802.1x authentication).
  • the vOLT tells the access aggregation device A or B (Authenticator) to pass the authentication.
  • the subsequent optical access module requests the management IP through the Dynamic Host Configuration Protocol (DHCP), the configuration is delivered.
  • the parameter includes the MAC and IP of the vOLT.
  • the vOLT can be in the Extensible Authentication Protocol OVER LAN (EAPOL) response to the optical access module.
  • the vMAC management MAC and IP can also be carried by the type-length-value (TLV).
  • the optical access module and the vOLT can establish a management channel by using the management IP, or can also use a layer 2 connection, such as the Ethernet maintenance communication channel of the Y.1731 (Ethernet maintenance).
  • the communication channel (referred to as ETH-MCC) establishes a management channel, and the optical access module directly accepts the management and control of the vOLT.
  • the authentication and registration of the optical access module is completed.
  • the optical access module is automatically inserted, authenticated, and registered to realize the plug-and-play of the optical access module, which is consistent with the network configuration and operation and maintenance automation of the network operator under the access network virtualization architecture. Demand.
  • the optical access module on the universal Ethernet switch (accessing the aggregation device B) is summarized in the preferred embodiment, and one vOLT instance represents a certain management domain, in order to let the vOLT know its own management boundary.
  • the operator should first assign all the resource identifiers that the vOLT needs to manage to the vOLT through the human-computer interaction interface. This can be defined by the data model such as the SNMP Management Information Base (MIB) or the YANG language.
  • MIB SNMP Management Information Base
  • YANG language the binding relationship between the optical access module and the vOLT is software definable.
  • FIG. 16 is a flow chart showing the authentication and registration of an optical access module on a general-purpose Ethernet switch (access aggregation device B) according to a preferred embodiment of the present invention, as shown in FIG.
  • Step S1602 Accessing the vOLT control virtual switch (vSwitch) in the aggregation device A, and advertising the management IP address to the access aggregation device B through the Link Layer Discovery Protocol (LLDP) protocol.
  • vSwitch vOLT control virtual switch
  • LLDP Link Layer Discovery Protocol
  • step S1604 after the access aggregation device B is powered on, the LLDP advertises its own management IP to the vOLT.
  • the management IP address can be statically pre-configured or obtained through a DHCP client.
  • the topology discovery is performed between the aggregation device B and the vOLT.
  • the aggregation device B registers with the vOLT authentication and accepts the vOLT control with the vOLT as the virtual network controller.
  • the Chassis ID (such as the bridge MAC address) of the LLDP of the two parties is used as one of the authentication factors, and the vOLT and the access aggregation device B are uniquely identified.
  • the vOLT and the access aggregation device B complete the mutual discovery.
  • the vOLT can establish a management control channel to the access aggregation device B, and then perform management control on the access aggregation device B through the NetConf protocol/OpenFlow protocol.
  • Step S1606 After the optical access module is inserted into the access aggregation device B, the access aggregation device B finds that the optical access module is in place.
  • step S1608 the access aggregation device B reads the management MAC address and serial number (as the device identifier) of the optical access module through the I2C control bus.
  • the access aggregation device B reports the physical location information such as the port and the slot where the optical access module is located, and the MAC address and serial number of the optical access module, and reports the problem.
  • the vOLT checks the serial number of the optical access module to check whether it is a resource managed by itself. If yes, the optical access module is required to initiate 802.1x authentication.
  • Step S1612 the optical access module (suppliant) initiates the authentication of the 802.1x EAPoL to the vOLT authentication server (Authentication Server).
  • the vOLT tells the access aggregation device B (Authenticator) that the optical access module passes the authentication, and the vOLT can carry the management MAC and IP of the vOLT through the extended TLV in the EAPoL response to the optical access module, or in the subsequent light.
  • the access module manages the IP address through DHCP
  • the configuration parameters are delivered including the MAC and IP of the vOLT.
  • the topology discovery is completed between the optical access module and the vOLT, and the vOLT is controlled by the vOLT as a virtual network controller.
  • the management module can be used to establish a management channel between the access module and the vOLT, or a Layer 2 connection, such as the ETH-MCC of the Y.1731.
  • the topology discovery is performed between the optical access module and the vOLT.
  • the optical access module and the vOLT can establish a management channel by using the management IP, or can be connected by using a layer 2, such as the ETH-MCC of the Y.1731. Management channel, the optical access module directly accepts the management and control of the vOLT.
  • the optical access module obtains the authorization of the vOLT, accepts the authentication registration of the ONT to the vOLT, completes the topology discovery between the ONT and the vOLT, and the management channel between the access module and the ONT follows the existing methods such as OMCC.
  • one aggregation access network is one management domain and only one vOLT.
  • the authentication of the optical access module can be centralized authentication across the vOLT.
  • the first vOLT acts as a proxy server (Radius Proxy), and the optical access module is authenticated.
  • the request is forwarded to the centralized AAA (Authentication, Authorization, Accounting) server.
  • AAA Authentication, Authorization, Accounting
  • the content of the response message is extended by the 802.1x, or when the DHCP assigns the optical access module to manage the IP.
  • the configuration is delivered, the management IP and MAC of the corresponding vOLT are rewritten, and the optical access module is reset to register with the correct vOLT.
  • FIG. 17 is a flow chart showing the process of authentication and registration on a network card port of a general-purpose server (access aggregation device A) according to a preferred embodiment of the present invention, as shown in FIG. Including the following steps:
  • Step S1702 After the optical access module is inserted into the NIC port of the general-purpose server (accessing the aggregation device A), the access aggregation device A finds that the optical access module is in place.
  • step S1704 the access aggregation device A reads the management MAC address and the serial number (as the device identifier) of the optical access module through the I2C control bus.
  • step S1706 the access aggregation device A reports the physical location information such as the port where the optical access module is located, and the MAC address and serial number of the optical access module, and reports the vOLT to the vOLT.
  • the vOLT checks the serial number of the optical access module to check whether it is a resource managed by itself. If yes, the optical access module is required to initiate 802.1x authentication.
  • Step S1708 the optical access module (suppliant) initiates the authentication of the 802.1x EAPoL to the vOLT (Authentication Server).
  • the vOLT tells the access aggregation device A (Authenticator) that the optical access module passes the authentication, and the vOLT can carry the management MAC and IP of the vOLT through the extended TLV in the EAPoL response to the optical access module, or in the subsequent light.
  • the access module manages the IP address through DHCP
  • the configuration parameters are delivered including the MAC and IP of the vOLT.
  • the topology discovery is performed between the optical access module and the vOLT, and a Layer 3 or Layer 2 management channel is established between the optical access module and the vOLT, and the optical access module directly accepts management and control of the vOLT.
  • the topology discovery is completed between the optical access module and the vOLT, and the vOLT is controlled by the vOLT as a virtual network controller.
  • the management module can be used to establish a management channel between the access module and the vOLT, or a Layer 2 connection, such as the ETH-MCC of the Y.1731.
  • step S1712 the optical access module obtains the authorization of the vOLT, accepts the authentication registration of the ONT to the vOLT, completes the topology discovery between the ONT and the vOLT, and the management channel between the access module and the ONT follows the existing methods such as OMCC.
  • the present invention will be further described below by taking the network function module as the virtualized optical line terminal vOLT as an example.
  • a method for virtualizing an access aggregation device is also proposed, which is used to implement a device for accessing an aggregation device, thereby solving the problem that the entire access network device cannot be implemented under the existing telecommunication transmission network architecture.
  • the flat-end unified management of the devices at the end, the access aggregation device and the terminal device architecture are complex and costly, and the network service provider and the user itself cannot perform real-time monitoring and customization definition of the access network devices.
  • the program mainly includes:
  • the network function of the access aggregation device is centralized, and is implemented by a virtualized optical line terminal (Virtual Optical Line Terminal, vOLT for short) module.
  • vOLT Virtual Optical Line Terminal
  • the vOLT and the access module are connected by a packet exchange network (communication with the above-mentioned packet exchange module) composed of a common IT device, and the packet exchange network includes a network interface card of the x86 server. NIC), Ethernet switches, and Ethernet connections between them.
  • a packet exchange network (communication with the above-mentioned packet exchange module) composed of a common IT device, and the packet exchange network includes a network interface card of the x86 server. NIC), Ethernet switches, and Ethernet connections between them.
  • vOLT can refer to Network Function Virtualization (Network Function Virtualization,
  • Network Function Virtualization The module concept of the Virtual Network Feature (VNF) in the NFV) architecture can be referred to the ETSI GS NFV 002 Network Function Virtualization Architectural Framework.
  • Accessing the aggregation device comprising: a virtual optical line terminal vOLT, an access module, and a message exchange network for connecting the vOLT and the access module.
  • the virtual optical line terminal vOLT centrally configures and manages the message exchange network, the access module, and the user side network terminal, and drives the virtual network controller between the message exchange network, the access module, and the user side network terminal.
  • the topology discovery and network connection are centrally controlled; vOLT adopts the VNF implementation method in NFV and runs in the virtual machine of the general IT server.
  • the above access module can be further subdivided into two types: an optical access module and a distributed access module.
  • the access module implements the functions of a physical layer device (PHYsical layer device, PHY for short) and a media access control (MAC) layer.
  • PHY Physical layer device
  • MAC media access control
  • the PHY can process signals transmitted and received in the optical medium.
  • the optical access module uses a small pluggable device SFP, a 10 Gigabit small pluggable device XFP, a compact pluggable device CSFP and other hardware packaging methods to achieve a small size.
  • the above-mentioned message exchange network is composed of a server's universal network interface card NIC and a plurality of Ethernet switches, and is connected by Ethernet. It implements two ways of connecting between the vOLT and the access module.
  • the universal network interface card connects multiple access modules and the vOLT constitutes the access aggregation device A.
  • the purpose of the universal network interface card is to exchange packets between multiple access modules, vOLTs, and uplink metropolitan area networks.
  • the Ethernet switch connects multiple access modules to form an access aggregation device B.
  • the purpose of the Ethernet switch is to exchange packets between multiple access modules, access aggregation device A, and uplink metropolitan area network.
  • the vOLT can also be deployed on the network cloud platform to access the aggregation device B through the remote connection of the metropolitan area network.
  • the foregoing access module may further include: a PHY of a User&Network Interface (UNI), a PHY of a Network-Network Interface (NNI), and UNI PHY and NNI.
  • the PHYs are transparently bridged through the MAC layer.
  • the function of transparent bridging includes two components: message buffering (Buffering) and packet parsing, modification, and traffic management (Traffic & Flow Management).
  • Buffering is implemented by a random access memory (RAM) memory hardware included in the access module.
  • Traffic&Flow Management is implemented by the network processor included in the access module or the hardware of a Central Processing Unit (CPU).
  • the optical access module may further include an SFP OLT optical access module to implement a Gigabit passive optical network.
  • Gigabit Passive Optical Network abbreviated as GPON
  • EPON Epoxy
  • XGPON 10 Gigabit Passive Optical Network
  • the MAC layer function and the dynamic bandwidth allocation (Dynamic Bandwidth Allocation, DBA for short) and the traffic classification function on the point-to-multipoint (P2MP) PON shared medium.
  • DBA Dynamic Bandwidth Allocation
  • the above-mentioned distributed access module may also include a remote (multi-service) converged cable access platform (Remote Converged Cable Access Platform, R-CCAP for short) access module, which can be connected to the access aggregation through an Ethernet connection.
  • R-CCAP Remote Converged Cable Access Platform
  • R-CCAP Remote Converged Cable Access Platform
  • the optical module slot (such as the SFP Cage) provided by the external interface of the access aggregation device can be inserted into the optical access module in the embodiment of the present invention, and can also be inserted into the traditional optical module to provide IEEE 802.3 compliance. Ethernet access.
  • the conventional optical module only provides the driving of the physical layer (including the transmission direction, the electrical signal is converted into the optical signal excited by the laser; and the receiving direction, the optical signal is detected and converted into an electrical signal).
  • a method which automatically discovers an access module through a vOLT, and authenticates and configures the access module.
  • the method realizes plug-and-play multi-media integrated access. Specific steps are as follows:
  • Step 1 Install the vOLT in the server virtual machine connected to the aggregation device A, establish a connection between the vOLT and the universal network interface board, and then connect the Ethernet switch of the aggregation device B through the universal network interface board. Complete the connection between the vOLT and the packet switching network.
  • Step 2 Insert an optical access module into the SFP slot of the access aggregation device, or connect the distributed access module with the Ethernet interface of the access aggregation device. Complete the connection between the access module and the packet switching network.
  • Step 3 The access aggregation device reports the information of the access module to the vOLT, and completes automatic discovery of the access module by the vOLT.
  • Step 4 The vOLT requires the access module to register with the vOLT. Before the registration, the access module cannot send and receive packets through the packet switching network and other access modules or the metropolitan area network.
  • Step 5 The vOLT authenticates the access module, and the vOLT adds it to the component of the access aggregation device. At this time, the access module can send and receive messages through the packet switching network and other access modules or the metropolitan area network.
  • Step 6 The vOLT discovers and connects the user side network terminal device by controlling and configuring the access module, and requires the user side network terminal to register with the vOLT. After the user side network terminal completes registration, the vOLT completes the user. It is connected to the network of the metropolitan area network, and can control the user-side network terminal, the access module, and the packet switching network on the connection.
  • FIG. 18 is a diagram showing the locations of virtualized access aggregation devices A and B in an access network, in accordance with an embodiment of the present invention.
  • the device for the virtualized access aggregation device provided in the embodiment of the present invention is placed in the access network, and the traditional access aggregation device (traditional OLT, cable modem terminal system (Cable Modem Termination System) , referred to as CMTS)), network cloud platform, and user-side network terminal equipment are connected to form an access aggregation network connecting users and metropolitan area networks. among them,
  • CMTS cable modem terminal system
  • Network Cloud Platform Consists of various vNF modules running in a virtual machine environment running on a virtualized IT infrastructure (including virtualized computing, storage, network input and output interfaces). These IT infrastructures can be as small as one server or as large as a data center (DC).
  • DC data center
  • the access aggregation device includes the traditional OLT device and the CMTS device, and includes the newly added access aggregation device A and the access aggregation device B.
  • Access aggregation device A includes a general-purpose IT server, which has a universal NIC interface card (Ethernet interface card), and also includes a new optical access module and a distributed access module.
  • NIC interface card Ethernet interface card
  • vOLT module The general IT server in access aggregation device A can load vNF, and various vNF modules running on it include virtual network controller, including but not limited to new vOLT (virtual optical line) Terminal function) Module and Virtual Converged Cable Access (vCCAP) function module.
  • vOLT and vCCAP are differentiated by administrative domain, and most of the same network functions use the same software process. However, because the management domain is different, vOLT and vCCAP usually run on different virtual machines, but this does not prevent some operators from being integrated access operators of PON and Cable. In this case, vOLT and vCCAP can be merged and put into vOLT. The controlling entity of the same administrative domain.
  • vOLT also includes the functionality of vCCAP when not specifically stated in the subsequent description.
  • the vOLT can adjust the working status of each component in the solution globally. If necessary, the service traffic can be concentrated to a certain access aggregation device to reduce the energy consumption of other access aggregation devices.
  • Access aggregation device B includes a universal Ethernet switch, and also includes a new optical access module and a distributed access module.
  • Optical access module After the optical access module is inserted into the SFP slot of the access aggregation device, the conversion from other media to the Ethernet medium is realized.
  • SFP OLT module An embodiment of an optical access module for implementing PON-to-Ethernet media conversion such as GPON/XGPON and implementing flow identification for point-to-multipoint conversion to point-to-point logical connection with Classification, in the access aggregation device, high-speed uplink packet access (High Speed Uplink Packe, referred to as VLAN), Virtual eXtensible Local Area Network (VxLAN), multi-protocol label switching (Multi- Protocol Label Switching (referred to as MPLS) label, Internet Protocol (IP) tunnel label, and other different methods are identified as flow labels.
  • VLAN High Speed Uplink Packe
  • VxLAN Virtual eXtensible Local Area Network
  • MPLS Multi- Protocol Label Switching
  • IP Internet Protocol
  • Distributed access module It is connected to the standard Ethernet interface of the access aggregation device or to the SFP access module. Achieve the conversion of two different media.
  • R-CCAP module An embodiment of a distributed access module for implementing HFC cable media to Ethernet media conversion and implementing point-to-multipoint conversion to point-to-point logical connection flow IDs and classifications can be identified as flow labels by using various methods such as VLAN, VxLAN, MPLS label, and IP tunnel label when connecting to the access aggregation device.
  • User-side network terminal equipment belongs to the operator network equipment, and the operator integrates it into the management and control domain of the operator by authenticating and authorizing it. Including cable modem (Cable Modem, abbreviated as CM), optical network terminal (Optical Network Terminal, referred to as ONT) and so on.
  • cable modem Cable Modem, abbreviated as CM
  • ONT optical Network Terminal
  • the access aggregation device 2) and the network cloud platform 1) are remotely connected through the metropolitan area network. Under the control of the service orchestration function of the network cloud platform, the access aggregation device 2) establishes a network connection through a router on the edge of the metropolitan area network and the metropolitan area network or an access device (other OLT, etc.) in other areas in the metropolitan area network, and completes Business communication.
  • the vNF module 1.1) can be loaded into the network cloud platform 1) and access aggregation device A 2.1).
  • the scope is that the vNF of the entire metropolitan area network is loaded to the network cloud platform, and the scope is that the vNF of an access area is loaded to the access aggregation device A.
  • the vOLT is responsible for centralized control of an access area and is suitable for loading to the access aggregation device A.
  • the Authentication, Authorization, and Accounting (AAA) module is responsible for the entire network authentication, authorization, and accounting functions.
  • the virtual IP Multimedia Subsystem (vIMS) is responsible for the entire network IP. Voice over IP (VoIP) signaling control, suitable for loading to the network cloud platform.
  • VoIP Voice over IP
  • the partial vNF function can be deployed to the access aggregation device A in a distributed manner, or can be deployed to the network cloud platform, such as a virtual edgeband (virtual Broadband Network Gateway, vBNG for short), and a virtual customer terminal (virtual customer premises equipment v, CPE for short). ) Function, virtual content delivery network (vCDN) function, etc. Network operators, service providers, and end users configure vNF through the open interfaces provided by the network cloud platform to implement their own services. Various vNFs are connected through the network.
  • the PON network management domain is implemented by loading vOLT or vCCAP respectively. Control management and control management of the Cable Network Management Domain.
  • Access aggregation device B 2.2 does not have the ability to load the vNF module. It connects to the universal NIC interface card of the aggregation device A through the Ethernet interface, and works under the control and management of the access aggregation device A 2.1).
  • the access aggregation device A 2.1) and the access aggregation device B 2.2) provide various physical medium access modes, such as PON and HFC, by inserting the optical access module 2.3) or connecting the distributed access module 2.4).
  • the optical access module 2.3) or the distributed access module 2.4) is directly connected to the user-side network terminal device 3).
  • Configuration, management configuration protocol uses NetConf, CLI, Simple Network Management Protocol (SNMP).
  • vOLT controls the virtual network controller to control these components to complete topology discovery and network connection.
  • the control protocol adopts OpenFlow.
  • the virtual network controller can serve multiple vOLTs at the same time, and access the aggregation device B, the optical access module, the distributed access module, and the user-side network terminal according to the management domain of the different vOLTs to form a virtual connection belonging to the vOLT.
  • the network controller can serve multiple vOLTs at the same time, and access the aggregation device B, the optical access module, the distributed access module, and the user-side network terminal according to the management domain of the different vOLTs to form a virtual connection belonging to the vOLT.
  • Access aggregation device B 2.2 has the ability to exchange Ethernet packets.
  • access aggregation devices A and B remotely connect to the network cloud platform and users in other areas through the metropolitan area network.
  • the user network terminal is connected through the optical access module and the distributed access module.
  • the access aggregation device A includes the capabilities of the general server's IT infrastructure, so the virtualized network function vNF module can be distributed on the access aggregation device A and the network cloud platform as needed, such as vOLT, vBNG, vCCAP, vCPE and other functional modules. It can be flexibly deployed to run on virtual machines in access aggregation device A and network cloud platform. In traditional aggregation transport networks, these features are fully tied to dedicated hardware.
  • the media conversion function is reserved on the user access side, and is completed by an optical access module and a distributed access module attached to the aggregation access device, where other media will be uniformly converted to Ethernet data messages or IEEE. 802.3 Ethernet encapsulation is used as a tunnel transmission method.
  • FIG. 19 is a schematic diagram of an apparatus for accessing an aggregation device A having the capability of loading a vOLT module according to an embodiment of the present invention.
  • the access aggregation device A is implemented by using a general-purpose IT server, and the lower layer is physical hardware.
  • the network input/output device is a general network interface card (NIC).
  • NIC network interface card
  • Above the physical layer is the hypervisor hypervisor, such as Linux KVM, VMWare ESXi, etc., which virtualizes the physical hardware into logical hardware and provides it to the operating system running on the virtual machine, such as Linux.
  • the Hypervisor provides a virtual network interface vNIC to the virtual machine VM when the abstract universal network interface card NIC is provided, and provides a virtual switch vSwitch function for the network between the virtual machines. Communication and communication through physical network ports and other hosts outside the server.
  • vSwitch such as the heavy software CPU participation, the method of reading and writing memory multiple times, the hardware acceleration on the general network interface card, the slight participation of the CPU, and the method of reducing the number of memory reads and writes.
  • a standard Ethernet interface is provided on the universal network interface card of the access aggregation device A, such as an IEEE 10 Gigabit Ethernet port or an SFP+ slot (SFP Cage) conforming to the MSA standard. These interfaces can connect the optical access module to the user side.
  • a distributed access module or other access aggregation device (traditional OLT, CMTS, etc.) is connected to the metropolitan area network to the network side.
  • the universal network interface card provides a bus interface such as PCIe to the inside of the device to connect to other components such as the CPU.
  • the optical module slot (SFP Cage) can be inserted into a traditional optical module to provide point-to-point (P2P) Ethernet user access.
  • FIG. 20 is a schematic diagram of a device for accessing an aggregation device B according to an embodiment of the present invention.
  • the access aggregation device B can work under the management control of the vOLT included in the access aggregation device A. As shown in FIG. 20, the universal Ethernet is used.
  • the network switch implements a schematic diagram of accessing the aggregation device B. Accessing the aggregation device B, without the ability of the virtual machine to load, depends on the vOLT function provided by the access aggregation device A to assist the work.
  • the access aggregation device B supports the OpenFlow protocol and can accept the Ethernet switching device controlled by the virtual network controller in the aggregation device A.
  • the controller can forward the forwarding rule to the access aggregation device B in advance.
  • the service must be forwarded from the aggregation device B to the aggregation device A, which is in the aggregation device A.
  • the forwarding rule is sent to the access aggregation device B for forwarding.
  • the access aggregation device B provides a standard Ethernet interface, such as an IEEE 10 Gigabit Ethernet port or an SFP+ slot (SFP Cage) that conforms to the MSA standard. These interfaces can connect optical access modules and distributed access modules to the user side.
  • optical module slot SFP Cage
  • SFP Cage can also be plugged into a traditional optical module to provide point-to-point P2P Ethernet user access.
  • FIG. 21 is a schematic diagram of a function of a vOLT according to an embodiment of the present invention.
  • a vOLT residing in the access aggregation device A can be end-to-end (from a low-level network terminal to a high-level aggregation switching device). Configure and control a single device and the topology connections between these devices.
  • the user needs to go through the user-side network terminal device, the access module, and the packet switching network.
  • the network near the user side has a low network location, poor security, and close to the metropolitan area network.
  • the network location is high, and the security and reliability are high.
  • the function of vOLT is roughly divided into three layers:
  • the bottom layer 1 is the discovery and drive (configuration and control) of the topology.
  • the vOLT has similar functions to the traditional OLT and CMTS, and performs centralized security authentication on the network terminal and the access module. After the authentication is passed, the vOLT assigns a management address (which may be an IP address or a non-IP address) to the network terminal and the access module. For example, a MAC address, an Optical Network Unit Identity (ONUID), etc., establish a management and control channel (where the network terminal and the access module do not have a physical connection directly to the vOLT, and need to pass a high-level vSwitch or The Ethernet switch establishes an in-band management channel).
  • a management address which may be an IP address or a non-IP address
  • ONUID Optical Network Unit Identity
  • the authentication method can adopt the Extensible Authentication Protocol (EAP) method defined by IETF RFC3748, such as EAPoL (802.1x) or EAPoRADIUS (RFC3579), and is compatible with the traditional network terminal ONT GPON/EPON registration authentication method. . It is necessary to authenticate network terminals and access modules with poor physical security. Only through vOLT authentication can they join the network topology.
  • the low-order device is Suppliant in EAP, the high-order device is Authenticator, and vOLT is used as Authentication Server.
  • the authentication extends from the high-level device to the low-level device, first authenticating the access module, and then authenticating the network terminal. High-level devices automatically discover the existence of low-level devices and report them to vOLT for plug-and-play.
  • the middle layer 2 is the abstraction of the topology, and the upper layer provides the state of the elements constituting the topology such as devices, ports, and links.
  • the top layer 3 is a variety of service functions, such as calculating the shortest path, resource-constrained traffic engineering calculation, link and port performance statistics, and link and port alarm reporting.
  • each component supports the OpenFlow protocol, and the network terminal and the access module are directly vested and controlled by the vOLT.
  • the packet switching network part (that is, the vSwitch and the Ethernet switch) belongs to and is controlled by the virtual network controller, and the vOLTs of the plurality of different management domains control the packet switching network by driving the virtual network controller to implement the packet exchange network part resources.
  • FIG. 22 is a schematic diagram of functions of an access module according to an embodiment of the present invention.
  • the access module includes one user side UNI PHY and one network side NNI PHY, which are transparently bridged by a MAC layer. IP packet processing can be run on top of the transparent bridging function.
  • Bridging Transparent Bridging
  • Buffering Message Enumeration
  • Traffic & Flow Management Message Parsing, Modification, Traffic Management
  • Buffering is implemented by the RAM memory hardware included in the access module.
  • Traffic&Flow Management is implemented by the hardware of the network processor or general-purpose CPU included in the access module.
  • FIG. 23 is a schematic diagram of an embodiment of an SFP OLT of an optical access module according to an embodiment of the present invention.
  • the hardware encapsulation of the SFP OLT optical access module follows a Multi-Source Agreement (MSA).
  • MSA Multi-Source Agreement
  • the optical access module obtains power supply, data transmission and management control from the electrical interface of the SFP slot (SFP Cage) of the access aggregation device.
  • SFP Cage SFP slot
  • a UNI PHY, an NNI PHY, and a transparent bridging function are added.
  • Enhanced the processing power of the controller CPU Driving TM Traffic & Flow Management
  • Bridging and processing vOLT management and control messages to the optical access module.
  • TM Traffic & Flow Management
  • the UNI PHY can realize the physical media association layer interface (Physical Media Dependent, PMD for short) and the physical medium attachment layer (Physical Media Attachment) defined by the 10G EPON standard (IEEE 802.3-2012 Clause 75, 76) through the configuration of the controller CPU.
  • PMD Physical Media Dependent
  • PCS Physical Coding Sublayer
  • the UNI PHY can realize the PMD (ITU-T G.987.2) defined by the XGPON standard and the 10G GPON Transmission Convergence (XGTC) (ITU-T G.987.3) through the configuration of the controller CPU.
  • PMD ITU-T G.987.2
  • XGTC 10G GPON Transmission Convergence
  • the NNI PHY can realize the PHY function composed of PMD, PMA, PCS defined by the 10GBASE-R (IEEE 802.3-2012Clause 49, 51, 52) standard through the configuration of the controller CPU;
  • the TM in Bridging can realize the MPG (MultiPoint MAC Control) function of 10G EPON and the DBA dynamic bandwidth allocation function of multiple LLIDs through the configuration of the controller CPU;
  • MPG MultiPoint MAC Control
  • the TM in Bridging can realize the PLOAM protocol processing function of XGPON and the DBA dynamic bandwidth allocation function of multiple T-CONT through the configuration of the controller CPU;
  • the controller CPU can parse the OpenFlow flow table sent by the vOLT and write it to the TM for the TM to complete the flow classification, header modification, packet encapsulation and forwarding of the packet.
  • the header modification is such as adding a VLAN tag, and the packet encapsulation is performed in a VxLAN encapsulation.
  • the above components can be implemented in separate devices, but given the small size of the SFP package, the UNI PHY, NNI PHY, and Bridging functions are typically implemented using an integrated single chip.
  • FIG. 24 is a schematic diagram of an embodiment of an R-CCAP module of a distributed access module according to an embodiment of the present invention. As shown in FIG. 24, the logical connection of the R-CCAP is similar to that of the optical access module, and includes a UNI PHY, an NNI PHY, Bridging and controlling the CPU. the difference lies in:
  • R-CCAP The physical package of R-CCAP is a stand-alone device that requires a separate power input, such as a -48V DC input or a 110-240V AC input.
  • UNI PHY has large volume and power consumption, and is implemented by independent devices.
  • the HFC network uses RF analog modulation
  • the receiving direction requires high-speed A/D analog-to-digital conversion
  • the transmission direction requires D/A digital-to-analog conversion.
  • More complex modulation and demodulation algorithms are needed, such as QAM (Quadrature Amplitude Modulation) 64-1024 modulation and demodulation.
  • the NNI PHY is connected to the aggregation device at a long distance (10-80 km).
  • the electrical interface must be converted to an optical interface. Therefore, the SFP transceiver is added on the SMF transceiver to transmit data packets on the SMF single-mode fiber.
  • FIG. 25 is a schematic diagram of centralized control of an access aggregation network by using a vOLT residing in the access aggregation device A according to an embodiment of the present invention.
  • the SDN virtual is loaded into the virtual machine of the access aggregation device A.
  • vOLT configures static data of these resources through NetConf scripts, and drives the virtual network controller to deliver pre-configured forwarding rules.
  • the status information of the port and the link is dynamically collected in real time through the OpenFlow protocol, and the control information such as the forwarding rule and the traffic token is delivered.
  • vOLT uses different methods to establish management control channels for different components in the network:
  • the control channel can be automatically established by the internal control bus for the vSwitch inside the aggregation device A.
  • an in-band management channel can be used, or a dedicated out-of-band management channel can be used. Establish connections using their respective management IPs.
  • optical access module, distributed access module, and user-side terminal of the aggregation device A and B are usually unable to establish a dedicated out-of-band management channel because of network connection conditions.
  • the optical access module reads the serial number and management MAC address of the optical access module from the I2C bus through the inserted access aggregation device, and the simple aggregation management device (Simple Network Management Protocol, referred to as SNMP)
  • the trap trap is reported to the vOLT to implement topology discovery, and then the management control channel is established by using the Ethernet maintenance communication channel ETH-MCC defined in ITU-T Y.1731.
  • the distributed access module and the access aggregation device use the Link Layer Discovery Protocol (LLDP) to implement mutual discovery.
  • the access aggregation device uses the SNMP trap to implement distributed access.
  • the management address (IP) of the module is reported to the vOLT, and then a management connection is established between the vOLT and the distributed access module.
  • Various user-side terminals continue to use the current in-band management channel establishment mode.
  • the GPON ONT completes the topology discovery between the SFP OLT optical access module and the ONT through the PLOAM message, and then establishes the OMCC management channel.
  • the topology discovery is implemented by using the Multi-Point Control Protocol (MPCP) protocol, and then the SFP OLT module is established by using Operation Administration and Maintenance (OAM).
  • MPCP Multi-Point Control Protocol
  • OAM Operation Administration and Maintenance
  • the management channel of the ONT For Cable Modem, topology discovery and management channel establishment using DOCSIS or HomePlug AV Method, establish a management channel of Cable Modem to R-CCAP distributed access module. Future next-generation PONs may use some new in-band channel mechanisms, such as the AMCC management channel.
  • the control CPU in the distributed access module or the optical access module will serve as the management agent of the vOLT, and forward the management control messages such as NetConf/OpenFlow of the vOLT. .
  • the vOLT may first deliver the configuration to the access module, and then when the network terminal goes online, the access module delivers the configuration to the network terminal.
  • FIG. 26 is a schematic diagram of an embodiment of a hybrid networking compatible with a traditional access aggregation device according to an embodiment of the present invention.
  • the figure illustrates an access aggregation device (such as a conventional OLT) that does not complete network function virtualization.
  • the traditional OLT is a closed system of software and hardware integration. As a traditional access aggregation device, it connects to the access aggregation device A or B in the solution through the Ethernet uplink interface.
  • the user-side ONT device connected under the traditional OLT is still Controlled by a traditional OLT. Rather than being controlled by the vOLT module already virtualized in this scenario.
  • All the traffic of the traditional OLT is forwarded to the access aggregation device of the solution through the specified VLAN configured on the traditional OLT. Because the function of the OLT is not virtualized, the virtual network controller cannot control the PON port and the ONT port of the OLT, but each user can still distinguish from the information assigned to them by the IP address, so it can still be connected.
  • the aggregation device A is loaded with network functions related to non-user ports such as vBNG and vCDN to implement virtualization of these network functions.
  • FIG. 27 is a schematic diagram of an embodiment of a vOLT deployed in a network cloud platform according to an embodiment of the present invention.
  • the figure illustrates an embodiment in which a vOLT is deployed in a network cloud platform.
  • the network cloud platform provides a virtual machine environment required for the operation of the vOLT, and provides a connection of the metropolitan area network.
  • the vOLT accesses the aggregation device B through the metropolitan area network connection, which is equivalent to extending the packet switching network to the entire metropolitan area network.
  • the difference is that the vOLT needs to access the aggregation device B across the routed IP network.
  • the vOLT can connect to a larger number of access aggregation devices and access modules through the metropolitan area network.
  • the vOLT uses VxLAN and other technologies to establish a logical private network of its own management domain on the IP routed network (by different VNI fields in the VxLAN header and other management domains on the metropolitan area network).
  • the logical private network is connected as a packet switching network to the convergence device B and the access module.
  • FIG. 28 is a schematic diagram of a conventional optical module, which provides a driver of a physical layer, including a transmitter, an electrical signal converted into a laser-excited optical signal; and a receiving direction, an optical signal detection and conversion For electrical signals.
  • Controller and Electrically Erasable Programmable Read-Only Memory (EEPROM) are mainly used to report characteristic parameter information of optical modules (such as working wavelength, supported bit rate, and supplier). Information) and so on.
  • the network architecture will be more flat, management and control will be more concise and efficient, and network management can be directly implemented from end to end, thereby reducing operation and maintenance costs and improving Management efficiency;
  • network administrators and users can freely design and define networks through software, and query and monitor current network status through similar APP interface, making network management more intelligent;
  • third, through network virtualization, access Network aggregation devices, network terminals and other devices are more compact in hardware and software, and will be more environmentally friendly in terms of cost and power consumption, greatly improving efficiency.
  • modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein.
  • the steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software.
  • the access aggregation device and the authentication registration method provided by the embodiments of the present invention have the following beneficial effects: the problem of inflexible management and deployment of the access aggregation device existing in the related art is solved, thereby improving access The effect of the flexibility of aggregation device management and deployment.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Abstract

本发明提供了一种接入汇聚装置和认证注册方法，其中，该接入汇聚装置包括：接口模块12，设置为接入一个或多个接入模块，其中，该一个或多个接入模块为硬件模块，该接入模块受到网络功能模块的管理，网络功能模块实现接入汇聚设备的网络功能，该接入汇聚设备的物理媒介接入功能分布到一个或多个接入模块；报文交换模块14，设置为连接网络功能模块和一个或多个接入模块，在网络功能模块和一个或多个接入模块之间交换报文。通过本发明，解决了相关技术中存在的接入汇聚设备管理和部署不灵活的问题，进而达到了提高接入汇聚设备管理和部署的灵活性的效果。

Description

接入汇聚装置和认证注册方法 技术领域
本发明涉及通信领域，具体而言，涉及一种接入汇聚装置和认证注册方法。
背景技术
在传统传输网络中，接入汇聚设备是在封闭的硬件和软件系统上实现的，设备配置管理、链路状态收集、拓扑运算和发布、报文存储、修改、转发、多等级流量监管等功能都集中于同一个设备中实现，消耗大量专用的输入输出、存储、运算资源。并且特定软件功能，必须在特定硬件上开发、验证、部署，无论是在硬件和软件实现上，还是网络设备管理和能源功耗上，都增加了其复杂度和成本。
此外，从运维角度而言，随着网络的发展，网络和服务提供者(比如运营商、服务商、互联网企业等)和用户希望能对网络的设备单元进行自定义的设计和灵活控制，比如企业用户的虚拟专用网(Virtual Private Network，简称为VPN)业务，需要实时地修改拓扑、配置带宽、进行安全审计。家庭用户需要更灵活地实现带宽实时分配，以满足不同家庭成员、不同业务的快速变化、随时了解自己的消费行为。
上述这些问题在现有的电信网络架构下都难以实现，因此如何实现对于包括接入汇聚设备和终端设备在内的接入全网设备的端到端管理和灵活部署，成为下一代接入网络需要解决的重要问题。
针对相关技术中存在的接入汇聚设备管理和部署不灵活的问题，目前尚未提出有效的解决方案。
发明内容
本发明提供了一种接入汇聚装置和认证注册方法，以至少解决相关技术中存在的接入汇聚设备管理和部署不灵活的问题。
根据本发明的一个方面，提供了一种接入汇聚装置，包括：接口模块，设置为接入一个或多个接入模块，其中，所述一个或多个接入模块为硬件模块，所述接入模块受到网络功能模块的管理，所述网络功能模块实现接入汇聚设备的网络功能，所述接入汇聚设备的物理媒介接入功能分布到所述一个或多个接入模块；报文交换模块，设置为连接所述网络功能模块和所述一个或多个接入模块，在所述网络功能模块和所述一个或多个接入模块之间交换报文。
可选地，所述网络功能模块通过网络功能虚拟化NFV中的虚拟网络功能模块VNF实现。
可选地，所述网络功能模块实现的网络功能包括以下至少之一：对所述报文交换模块进行配置管理；对所述一个或多个接入模块进行配置管理；对用户侧网络终端集中配置管理；驱动虚拟网络控制器对报文交换模块、所述一个或多个接入模块和所述用户侧网络终端之间的拓扑发现和/或集中控制。
可选地，所述接入汇聚设备包括以下至少之一：光纤线路终端OLT、电缆调制解调器终端系统CMTS。
可选地，所述接入模块实现了物理层设备PHY和媒体接入控制MAC层两部分的功能。
可选地，所述接入模块包括以下至少之一：光接入模块、分布式接入模块，其中，所述光接入模块设置为实现除以太网之外的其他媒介到以太网的媒介转换；所述分布式接入模块设置为和所述接入汇聚设备的标准以太网接口对接，或者和小型可插拔设备SFP接入模块对接，设置为实现媒介的转换。
可选地，所述光接入模块包括：电信号处理模块和控制器，其中，所述控制器具有可寻址的IP地址或非IP地址的管理地址，所述电信号处理模块包括：物理层用户网络侧接口UNI PHY、物理层网络节点接口NNI PHY、连接用户网络侧接口UNI与网络节点接口NNI数据链路层的数据链路层桥接单元；所述UNI PHY和所述NNI PHY，设置为实现指定通信协议定义的接口功能；所述数据链路层桥接单元，设置为对所述UNI PHY和所述NNI PHY之间转发的报文进行管理；所述控制器，设置为依据所述管理地址控制所述电信号处理模块将报文转发到与所述管理地址对应的用户侧设备或网络侧设备。
可选地，与所述UNI PHY和所述NNI PHY对应的数据链路层具有介质访问控制MAC和逻辑链路控制LLC功能。
可选地，所述数据链路层桥包括：分组缓存组件和交通流量管理TM组件；所述分组缓存组件，设置为缓存所述数据链路层的所述报文；所述TM组件，设置为对所述报文进行管理。
可选地，所述分组缓存组件为随机存储器RAM，所述TM组件为多核中央处理器CPU或网络处理器。
可选地，所述光接入模块还包括光电转换驱动电路，设置为执行光信号与电信号之间的转换。
可选地，所述光电转换驱动电路包括：发射器和接收器；所述发射器，设置为将所述电信号处理单元发送的电信号调制成光信号，并发射该光信号；所述接收器，设置为将接收到的光信号解调成电信号，并将该电信号发送到所述电信号处理模块。
可选地，所述发射器包括：半导体激光器，所述接收器包括：半导体光检测器。
可选地，所述光电转换驱动电路包括一组或多组所述半导体激光器和所述半导体光检测器的组合。
可选地，所述光接入模块还包括：电源模块，设置为获取直流电源输入的电能，其中，所述电能用于供所述光接入模块工作。
可选地，所述光接入模块适用于交换机、路由器的光模块插槽。
可选地，所述分布式接入模块设置为实现混合光纤-同轴电缆网HFC有限电视媒介到以太网媒介的转换。
可选地，还包括以下至少之一：所述分布式接入模块还设置为点到多点转换到点到点逻辑连接时的流标识和分类；当所述分布式接入模块和所述接入汇聚设备对接时，利用虚拟局域网VLAN标签、虚拟可扩展局域网VxLAN标签、多协议标签交换MPLS标签、IP隧道标签中的至少之一作为流标签进行标识。
可选地，所述报文交换模块包括网络接口卡NIC和以太网交换机。
可选地，通过所述NIC连接所述网络功能模块和所述一个或多个接入模块。
可选地，通过所述以太网交换机连接所述多个接入模块。
根据本发明的另一方面，还提供了一种利用上述任一项所述的装置的光接入模块的认证注册方法，包括：网络功能模块接收光接入模块的物理位置信息和所述光接入模块的设备标识；所述网络功能模块根据所述光接入模块的设备标识对所述光接入模块进行认证；在所述网络功能模块对所述光接入模块的认证通过的情况下，所述网络功能模块向所述物理位置信息对应的所述光接入模块发送管理配置信息，所述网络功能模块根据所述管理配置信息与所述光接入模块建立管理通道。
可选地，所述网络功能模块包括虚拟化光线路终端vOLT。
可选地，在所述网络功能模块对所述光接入模块的认证通过的情况下，所述网络功能模块向所述光接入模块发送管理配置信息包括以下至少之一：在所述vOLT对所述光接入模块的认证通过的情况下，所述vOLT接收所述光接入模块的管理IP请求，所述vOLT下发对所述光接入模块配置的管理媒体接入控制MAC和管理IP；在所述vOLT对所述光接入模块的认证通过的情况下，以及所述光接入模块发起802.1x的认 证情况下，所述vOLT通过基于局域网的扩展认证协议EAPoL应答所述光接入模块，所述vOLT通过类型长度值TLV携带所述vOLT的管理MAC和管理IP。
可选地，所述网络功能模块根据所述管理配置信息与所述光接入模块建立管理通道包括下面至少之一：所述光接入模块和所述vOLT之间通过管理IP建立管理通道；所述光接入模块和所述vOLT之间通过以太网维护通信信道ETH-MCC建立管理通道。
可选地，所述光接入模块的物理位置信息包括：所述光接入模块所在的端口号，所述光接入模块所在的槽位号。
可选地，所述光接入模块的设备标识包括：所述光接入模块的MAC地址、所述光接入模块的序列号。
根据本发明的另一方面，还提供了一种利用上述任一项所述的装置的光接入模块的认证注册方法，包括：多个网络功能模块中的第一网络功能模块接收光接入模块的认证请求；所述第一网络功能模块将所述认证请求转发给集中的认证授权计费AAA服务器；在所述AAA服务器对所述光接入模块认证通过的情况下，所述第一网络功能模块向所述光接入模块发送对应的网络功能模块的管理配置信息。
可选地，所述网络功能模块包括虚拟化光线路终端vOLT。
可选地，所述第一网络功能模块向所述光接入模块发送对应的网络功能模块管理配置信息包括：第一vOLT发送802.1x的应答消息给所述光接入模块，所述应答消息包括：对应的vOLT的管理IP和对应的vOLT的MAC；所述第一vOLT通过动态主机配置协议后续协议DHCP分配所述光接入模块对应的vOLT的管理IP。
根据本发明的另一方面，还提供了一种利用上述任一项所述的装置的光接入模块的认证注册方法，包括：在接入汇聚设备发现所述光接入模块在位的情况下，所述接入汇聚设备读取光接入模块的设备标识；所述接入汇聚设备向网络功能模块上报所述光接入模块的物理位置信息和所述光接入模块的设备标识；所述接入汇聚设备接收所述网络功能模块对所述光接入模块的认证消息，其中，所述网络功能模块根据所述光接入模块的设备标识对所述光接入模块进行认证。
可选地，所述网络功能模块包括虚拟化光线路终端vOLT。
可选地，在所述接入汇聚设备是通用以太网交换机的情况下，在所述接入汇聚设备读取光接入模块的设备标识之前，所述方法还包括：所述接入汇聚设备接收所述vOLT的管理IP和接口信息的通告；所述接入汇聚设备向所述vOLT通告所述接入汇聚设备的管理IP和接口信息；所述接入汇聚设备与所述vOLT建立管理控制通道。
可选地，所述接入汇聚设备向所述vOLT通告所述接入汇聚设备的管理IP包括：静态预配置管理IP、通过动态主机配置协议方式获取的管理IP。
可选地，所述接入汇聚设备读取光接入模块的设备标识包括：所述接入汇聚设备通过两线式串行总线I2C控制总线读取光接入模块的设备标识。
可选地，所述接入汇聚设备向虚拟化光线路终端vOLT上报所述光接入模块的物理位置信息和所述光接入模块的设备标识包括：所述接入汇聚设备通过网络配置协议NETCONF或者网络管理协议SNMP向虚拟化光线路终端vOLT上报所述光接入模块的物理位置信息和所述光接入模块的设备标识。
可选地，所述光接入模块的物理位置信息包括：所述光接入模块所在的端口号，所述光接入模块所在的槽位号。
可选地，所述光接入模块的设备标识包括：所述光接入模块的MAC地址、所述光接入模块的序列号。
通过本发明，采用接入汇聚装置，包括：接口模块，设置为接入一个或多个接入模块，其中，所述一个或多个接入模块为硬件模块，所述接入模块受到网络功能模块的管理，所述网络功能模块实现接入汇聚设备的网络功能，所述接入汇聚设备的物理媒介接入功能分布到所述一个或多个接入模块；报文交换模块，设置为连接所述网络功能模块和所述一个或多个接入模块，在所述网络功能模块和所述一个或多个接入模块之间交换报文。解决了相关技术中存在的接入汇聚设备管理和部署不灵活的问题，进而达到了提高接入汇聚设备管理和部署的灵活性的效果。
附图说明
此处所说明的附图用来提供对本发明的进一步理解，构成本申请的一部分，本发明的示意性实施例及其说明用于解释本发明，并不构成对本发明的不当限定。在附图中：
图1是根据本发明实施例的接入汇聚装置的结构框图；
图2是根据本发明实施例的光接入模块的结构框图；
图3是根据本发明可选实施例的光接入模块结构框图；
图4是根据本发明实施例的光接入模块在网络设备中的位置的示意图；
图5是根据本发明可选实施例的GPON OLT光接入模块实施例的结构框图；
图6是根据本发明可选实施例的光接入模块实现软件可定义的受控转发的示意 图；
图7是根据本发明实施例的光接入模块实现软件定义流表的方法的流程图；
图8是根据本发明实施例的接入汇聚装置中报文交换模块14的结构框图；
图9是根据本发明实施例的一种光接入模块的认证注册方法的流程图一；
图10是根据本发明实施例的一种光接入模块的认证注册方法的流程图二；
图11是根据本发明实施例的一种光接入模块的认证注册方法的流程图三；
图12是根据本发明实施例的一种光接入模块的认证注册装置的结构框图一；
图13是根据本发明实施例的一种光接入模块的认证注册装置的结构框图二；
图14是根据本发明实施例的一种光接入模块的认证注册装置的结构框图三；
图15是根据本发明优选实施的虚拟接入网的网络架构的示意图；
图16是根据本发明优选实施的通用以太网交换机(接入汇聚设备B)上的光接入模块的认证与注册的流程示意图；
图17是根据本发明优选实施的通用服务器(接入汇聚设备A)网卡端口上的认证与注册的流程示意图；
图18是根据本发明实施例的虚拟化接入汇聚设备A和B在接入网络中的位置；
图19是根据本发明实施例的接入汇聚设备A的设备示意图；
图20是根据本发明实施例的接入汇聚设备B的设备示意图；
图21是根据本发明实施例的vOLT的功能示意图；
图22是根据本发明实施例的接入模块的功能示意图；
图23是根据本发明实施例的光接入模块的SFP OLT的实施例示意图；
图24是根据本发明实施例的分布式接入模块的R-CCAP模块的实施例示意图；
图25是根据本发明实施例的使用驻留在接入汇聚设备A中的vOLT对接入汇聚网络集中控制的示意图；
图26是根据本发明实施例的兼容传统接入汇聚设备混合组网的实施例示意图；
图27是根据本发明实施例的vOLT部署在网络云平台中的实施例示意图；
图28是传统光模块的示意图。
具体实施方式
下文中将参考附图并结合实施例来详细说明本发明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互组合。
在本实施例中提供了一种接入汇聚装置，图1是根据本发明实施例的接入汇聚装置的结构框图，如图1所示，该接入汇聚装置包括接口模块12和报文交换模块14，下面对该接入汇聚装置进行说明。
接口模块12，设置为接入一个或多个接入模块，其中，该一个或多个接入模块为硬件模块，该接入模块受到网络功能模块的管理，网络功能模块实现接入汇聚设备的网络功能，该接入汇聚设备的物理媒介接入功能分布到一个或多个接入模块；报文交换模块14，设置为连接网络功能模块和一个或多个接入模块，在网络功能模块和一个或多个接入模块之间交换报文。
在上述装置中，接口模块12可以自由接入多个硬件模块，实现了硬件功能的任意扩展，并且，上述装置将传统的接入汇聚设备的硬件和软件分开部署，软件部分可以是由网络功能模块实现，可以自由设置软件部分的功能，从而使得接入网络汇聚设备、网络终端等设备在硬件和软件上实现起来更为简洁，解决了相关技术中存在的接入汇聚设备管理和部署不灵活的问题，进而达到了提高接入汇聚设备管理和部署的灵活性的效果。
在一个可选的实施例中，上述的网络功能模块通过网络功能虚拟化NFV中的虚拟网络功能模块VNF实现，当然，也可以通过其他方式实现。
上述的网络功能模块可以实现多种功能，在一个可选的实施例中，上述网络功能模块实现的网络功能可以包括以下至少之一：对报文交换模块14进行配置管理；对一个或多个接入模块进行配置管理；对用户侧网络终端集中配置管理；驱动虚拟网络控制器对报文交换模块14、一个或多个接入模块和用户侧网络终端之间的拓扑发现和/或集中控制。
上述的接入汇聚设备可以包括以下至少之一：光纤线路终端OLT、电缆调制解调器终端系统CMTS。其中，当该接入汇聚设备为OLT时，上述的网络功能模块可以是虚拟光纤线路终端vOLT。
在一个可选的实施例中，上述的接入模块可以设置为实现物理层设备PHY和媒体接入控制MAC层两部分的功能。
上述的接入模块的类型可以有多种，在一个可选的实施例中，上述接入模块包括以下至少之一：光接入模块、分布式接入模块，其中，该光接入模块设置为实现除以 太网之外的其他媒介到以太网的媒介转换；该分布式接入模块设置为和接入汇聚设备的标准以太网接口对接，或者和小型可插拔设备SFP接入模块对接，设置为实现媒介的转换。
图2是根据本发明实施例的光接入模块的结构框图，如图2所示，该光接入模块包括：电信号处理模块202和控制器204，其中，控制器204具有可寻址的IP或非IP的管理地址，电信号处理模块202包括：物理层用户网络侧接口(User Network Interface简称为UNI)PHY222、物理层网络节点接口(Network to Network Interface简称为NNI)PHY242、连接用户网络侧接口UNI与网络节点接口NNI数据链路层的数据链路层桥接单元262；
UNI PHY222和NNI PHY242，设置为实现指定通信协议定义的接口功能；
数据链路层桥接单元262，设置为对UNI PHY222和NNI PHY242之间转发的报文进行管理；
控制器204，设置为依据管理地址控制电信号处理模块将报文转发到与管理地址对应的用户侧设备或网络侧设备。
通过本实施例，提供了一种包括电信号处理模块和控制器的光接入模块，其中，电信号处理模块包括：UNI PHY和NNI PHY、以及连接用户网络侧接口UNI与网络节点接口NNI数据链路层的数据链路层桥，可见该光接入模块集成了PHY的接口和数据链路层的功能，节省了专用的GPON、EPON等线卡，从而解决了相关技术中通用以太网交换机、IP路由器无法直接用光模块连接ODN、HFC等多种媒介的网络，而必须在以太网在交换机、IP路由器下挂OLT、CMTS等设备的问题，减少了运营商需要采购的有源设备的种类。
在本实施例中还涉及到了与UNI PHY和NNI PHY对应的数据链路层具有介质访问控制MAC和逻辑链路控制LLC功能。
基于此，用户侧的UNI PHY和网络侧NNI PHY实现指定协议标准定义的功能的方式，以及对应的数据链路层有多种实施例：
1)对于GPON的ODN作为传输媒介时，UNI PHY的实现采用ITU-T G.984.2标准定义的PMD的功能和G.984.3标准定义的传输层的功能。数据链路层实现G.984.3和G.984.4标准定义的对传输层多用户点到点逻辑连接的业务虚端口GEMport的控制和管理；
2)对于EPON的ODN作为传输媒介时，UNI PHY实现IEEE 802.3Clause 60，65的功能，数据链路层实现IEEE 802.3Clause 57，64的对传输层多用户点到点逻辑 连接的逻辑链路标记(Logical Link Identifier，简称为LLID)的控制和管理。
网络侧的NNI PHY采用IEEE 802.3标准定义的PHY，数据链路层实现IEEE802.3标准定义的MAC和LLC的功能。网络侧的NNI PHY可以通过交换机、路由器上的光模块插槽和交换机、路由器的以太网端口的物理侧PHY相连。
可选地，对于本实施例中涉及到的数据链路层桥还可以包括：分组缓存组件和交通流量管理TM组件；分组缓存组件，设置为缓存数据链路层的报文；TM组件，设置为对报文进行管理。该分组缓存单元为随机存储器(Random-Access Memory简称为RAM)，该TM单元为多核中央处理器中央处理器(Central Processing Unit简称为CPU)或网络处理器。
也就是说，在本实施例的数据链路层桥用于对UNI PHY和NNI PHY之间转发的数据报文进行报文解析、修改、转发和流量监管等功能。数据链路层桥由用于缓存报文的分组缓存Packet Buffer和对报文进行处理的交通流量管理(Traffic&Flow Management简称为TM)组成。Packet Buffer用RAM作为硬件实现，TM用CPU或网络处理器作为硬件实现。
可选地，本实施例中的光接入模块还可以包括：光电转换驱动电路，设置为执行光信号与电信号之间的转换。
该光电转换驱动电路包括：接收器和发射器；其中，发射器，设置为将电信号处理单元发送的电信号调制成光信号，并发送该光信号；接收器，设置为将接收到的光信号解调成电信号，并将该电信号发送到电信号处理模块。在本实施例的一个可选实施方式中，发射器包括：半导体激光器，接收器包括：半导体光检测器。且光电转换驱动电路包括一组或多组半导体激光器和半导体光检测器的组合。
也就是说，在本实施例中，光电转换驱动电路由接收器和发射器组成。发射器通常包括半导体激光器，如分布式反馈激光器，设置为将UNI PHY发送的电信号调制成光信号发送。接收器通常包括半导体光检测器，如雪崩光电二极管，设置为将用户侧光纤接收的光信号解调成电信号，发送给UNI PHY。当在同一光纤内使用多个波长传输信号时，还需要前置解/合波的WDM波分复用器件，驱动电路部分也可以包含多组激光器和光检测器。
可选地，本实施例的光接入模块还可以包括：电源模块，设置为获取直流电源输入的电能，其中，电能用于供光接入模块工作。即该电源模块从交换机、路由器的光模块插槽获取直流电源输入，然后分配给光接入模块的其他部件。还可以包括：电可擦只读存储器(Electrically Erasable Programmable Read-Only Memory，简称为EEPROM)，设置为存储信息，该EEPROM掉电也不丢失信息。此外，需要说明的 是，本实施例涉及到的光接入模块适用于通用的交换机、路由器的关模块插槽。
下面结合本发明可选实施例对本发明进行举例说明；
本可选实施例提供了一种在小型化的XFP、SFP、CFP中集成PHY和MAC功能的光接入模块，图3是根据本发明可选实施例的光接入模块结构框图；如图3所示，该光接入模块包括：光电转换的驱动电路(driver)、电信号处理模块、电源模块(power module)、控制器(Controller)和掉电也不丢失信息的电可擦只读存储器为EEPROM。
其中，电信号处理模块包括：连接用户侧的UNI PHY和数据链路层，连接网络侧的NNI PHY和数据链路层，以及连接UNI数据链路层和NNI数据链路层的数据链路层桥。
对于本可选实施例的用户侧的UNI PHY和数据链路层有多种实施方式：
1)对于GPON的ODN作为传输媒介时，UNI PHY的实现采用ITU-T G.984.2标准定义的PMD的功能和G.984.3标准定义的传输层的功能。数据链路层实现G.984.3和G.984.4标准定义的对传输层多用户点到点逻辑连接的业务虚端口GEMport的控制和管理；
2)对于EPON的ODN作为传输媒介时，UNI PHY实现IEEE 802.3Clause 60，65的功能，数据链路层实现IEEE 802.3Clause 57，64的对传输层多用户点到点逻辑连接的LLID的控制和管理。
网络侧的NNI PHY采用IEEE 802.3标准定义的PHY，数据链路层实现IEEE802.3标准定义的MAC和LLC的功能。网络侧的NNI PHY可以通过交换机、路由器上的光模块插槽和交换机、路由器的以太网端口的物理层PHY相连。
此外，数据链路层桥用于对UNI PHY和NNI PHY之间转发的数据报文进行报文解析、修改、转发和流量监管等功能。它由用于缓存报文的分组缓存Packet Buffer和对报文进行处理的交通流量管理TM组成。Packet Buffer用RAM作为硬件实现，TM用多核CPU或网络处理器作为硬件实现。
本可选实施例中的控制器具有可寻址的IPv4/IPv6或非IP(如以太网MAC地址)的管理地址，可以通过TM转发报文，使控制器和用户侧或网络侧设备进行带内通信。另外，控制器通过光模块插槽提供的控制信号接口，如两线式串行总线(Inter－Integrated Circuit简称为I2C)信号，从带外通道接受上一级CPU的控制。
电源模块从交换机、路由器的光模块插槽获取直流电源输入，然后分配给光接入模块的其他部件。
光电转换驱动模块，由接收单元(对应于本实施例中的接收器)和发送单元(对应于本实施例中的发射器)组成；其中，发送单元通常包括半导体激光器，如分布式反馈激光器，设置为将UNI PHY发送的电信号调制成光信号发送。接收单元通常包括半导体光检测器，如雪崩光电二极管，设置为将用户侧光纤接收的光信号解调成电信号，发送给UNI PHY。当在同一光纤内使用多个波长传输信号时，还需要前置解/合波的WDM波分复用器件，驱动电路部分也可以包含多组激光器和光检测器。
通过本可选实施例，采用可选实施例的光接入模块，与相关技术中的光模块技术相比，集成了PHY和MAC层功能，节省了专用的GPON、EPON等线卡。只需要在通用的交换机、路由器的光模块插槽中，插入光接入模块，即可提供PON ODN等这种共享媒介的用户接入。显著减少了运营商需要采购的有源设备的种类。并且光接入模块可以根据ODN网络的发展情况按需部署。也就是说，本可选实施例克服了相关技术中存在的通用以太网交换机、IP路由器无法直接用光模块连接ODN、HFC等多种媒介的网络，而必须在交换机、路由器下挂OLT、CMTS等设备，导致无法满足运营商减少设备种类、降低建网成本、灵活地按需连接ODN、HFC等网络的诉求的问题，提供一种可直接插入交换机、IP路由器的采用XFP、SFP、CFP等小型化封装的光接入模块的装置。
下面结合附图对本可选实施例进行详细的说明；
图4是根据本发明实施例的光接入模块在网络设备中的位置的示意图，如图4所示，一个通用的以太网交换机实现了多个端口之间的电信号处理，可以在多个端口之间实现以太网报文的交换。每个端口都有自己的IEEE 802.3的MAC、LLC和PHY功能，其中PHY的PMD子层功能是和端口使用的媒介相关的，如传统的RJ45的双绞线接口，也可以是SFP、XFP、CFP等光模块插槽(Cage)，这些插槽的电气特性符合MSA(Multi-Source Agreement)组织定义的业界标准，如SFF-8431、SFF-8472、INF-8077i等，通过插入SFP、XFP、CFP封装的光模块实现PMD子层的光电转换功能。本发明技术方案中的光接入模块除了实现普通光模块的光电转换功能，还实现了多用户共享的ODN作为媒介的PON MAC功能，以及背靠背的用户侧PON MAC和网络侧以太网MAC在数据链路层的桥接。光接入模块和相关技术中的光模块采用相同的硬件封装，可以直接插入交换机的光模块插槽。
图5是根据本发明可选实施例的GPON OLT光接入模块实施例的结构框图，如图5所示，UNI PHY的实现采用ITU-T G.984.2标准定义的PMD的功能和G.984.3标准定义的传输层的功能。数据链路层实现G.984.3和G.984.4标准定义的对传输层多用户点到点逻辑连接的GEMport的控制和管理，数据链路层可以从GEMport的GEM封装中，解封装出IEEE 802.3MAC层以上的数据，桥接到网络侧，然后通过交换机光 模块插槽提供的数据传输通道(Serdes)和通用交换机以太网端口的PHY连接。在链路桥接层以上，控制器提供可寻址的IP地址和IP协议栈，用于和用户侧网络终端或网络侧的远程连接的其他设备通信。
图6是根据本发明可选实施例的光接入模块实现软件可定义的受控转发的示意图，如图6所示，光接入模块的控制器中可以装载OpenFlow Agent，采用SDN的控制和转发分离的原理，远程的OpenFlow控制器通过OpenFlow协议对光接入模块的报文转发行为进行控制。OpenFlow Agent将OpenFlow控制器的控制转换成光接入模块的内部指令，对Bridging中结构可定义的流表进行软件编程，实现对用户报文转发行为的变更。
相关技术中的PON OLT在处理报文时，转发的流表在系统设计时，流表的结构和转发逻辑就已经固定；本可选实施例中增加了控制器对流表重新定义的过程为：在转发状态中，当接收缓存中的报文数是零以后，光接入模块的报文转发流水线不会立即进入Idle(空闲)状态，它会检查控制器是否需要在流水线处理下一批报文前，修改流表的结构和处理流程；如果需要修改，则对流水线中的流表结构和处理顺序按控制器的指令进行重新编排；编排完成后，通知控制器，流水线进入Pendding状态，等待控制器对流水线下一步状态迁移的指令。图7是根据本发明实施例的光接入模块实现软件定义流表的方法的流程图，如图7所示，该方法的步骤包括：
步骤S702：进入转发状态；
步骤S704：查表；
步骤S706：转发；
步骤S708：判断待发送的是否大于零，在判断结果为是时执行步骤S704；在判断结果为否时，执行步骤S710；
步骤S710：判断控制器是否要修改流表；在判断结果为否时，执行步骤S712；在判断结果为是时，执行步骤S714；
步骤S712：结束到idle状态；
步骤S714：修改流表结构；
步骤S716：上报控制器修改完成，可恢复报文转发。
在一个可选的实施例中，上述的分布式接入模块设置为实现混合光纤-同轴电缆网HFC有限电视媒介到以太网媒介的转换。
其中，上述的分布式接入模块还可以实现如下功能至少之一：分布式接入模块还 设置为点到多点转换到点到点逻辑连接时的流标识和分类；当该分布式接入模块和所述接入汇聚设备对接时，利用虚拟局域网VLAN标签、虚拟可扩展局域网VxLAN标签、多协议标签交换MPLS标签、IP隧道标签中的至少之一作为流标签进行标识。
图8是根据本发明实施例的接入汇聚装置中报文交换模块14的结构框图，如图8所示，该报文交换模块14包括网络接口卡NIC142和以太网交换机144，其中，该以太网交换机的数量可以为多个。
由上述可知，报文交换模块14设置为连接网络功能模块和一个或多个接入模块，在一个可选的实施例中，可以通过上述的NIC142连接网络功能模块和一个或多个接入模块。
在另一个可选的实施例中，可以通过以太网交换机144连接上述的多个接入模块。
根据本发明的另一方面，还提供了一种利用上述任一项的装置的光接入模块的认证注册方法，图9是根据本发明实施例的一种光接入模块的认证注册方法的流程图一，如图9所示，该流程包括如下步骤：
步骤S902，网络功能模块接收光接入模块的物理位置信息和该光接入模块的设备标识；
步骤S904，网络功能模块根据该光接入模块的设备标识对该光接入模块进行认证；
步骤S906，在网络功能模块对该光接入模块的认证通过的情况下，该网络功能模块向该物理位置信息对应的该光接入模块发送管理配置信息，该网络功能模块根据该管理配置信息与该光接入模块建立管理通道。
通过上述步骤，网络功能模块接收光接入模块的物理位置信息和该光接入模块的设备标识，网络功能模块根据设备标识对该光接入模块进行认证，在该网络功能模块对该光接入模块的认证通过的情况下，网络功能模块根据该管理配置信息与该光接入模块建立管理通道，通过上述认证注册方式，解决了网络功能模块无法有效给光接入模块进行认证注册的问题，实现了网络功能模块对光接入模块的发现、认证和注册。
在一个可选的实施例中，上述网络功能模块可以包括虚拟化光线路终端vOLT，下面以vOLT为例进行说明。
在本实施例中，该vOLT向该光接入模块发送管理配置信息可以有多种方式，其中，包括：在该vOLT对该光接入模块的认证通过的情况下，该vOLT接收该光接入模块的管理IP请求，该vOLT下发对该光接入模块配置的管理MAC和管理IP；在该 vOLT对该光接入模块的认证通过的情况下，以及该光接入模块发起802.1x的认证情况下，该vOLT通过基于局域网的扩展认证协议EAPoL应答该光接入模块，该vOLT通过类型长度值TLV携带该vOLT的管理MAC和管理IP。
在本实施例中，该vOLT根据该管理配置信息与该光接入模块建立管理通道的方式有很多种，其中，包括：该光接入模块和该vOLT之间通过管理IP建立管理通道；该光接入模块和该vOLT之间通过以太网维护通信信道ETH-MCC建立管理通道。
在本发明的实施例中，该光接入模块的物理位置信息包括：该光接入模块所在的端口号，该光接入模块所在的槽位号。该光接入模块的设备标识包括：该光接入模块的MAC地址、该光接入模块的序列号。
在本实施例中提供了一种界面处理方法，图10是根据本发明实施例的一种光接入模块的认证注册方法的流程图二，如图10所示，该流程包括如下步骤：
步骤S1002，多个网络功能模块中的第一网络功能模块接收光接入模块的认证请求；
步骤S1004，该第一网络功能模块将该认证请求转发给集中的认证授权计费AAA服务器；
步骤S1006，在该AAA服务器对该光接入模块认证通过的情况下，该第一网络功能模块向该光接入模块发送对应网络功能模块的管理配置信息。
通过上述步骤，多个虚拟化光线路终端网络功能模块中的第一网络功能模块接收光接入模块的认证请求，第一网络功能模块将该认证请求转发给集中的认证授权计费服务器(Authentication、Authorization and Accounting，简称为AAA)，在该AAA服务器对该光接入模块认证通过的情况下，该第一网络功能模块向该光接入模块发送对应网络功能模块的管理配置信息，在上述实施例中，在光接入模块要接入多个网络功能模块的情况，该网络功能模块成为代理服务器，完成了光接入模块的跨网络功能模块认证，解决了网络功能模块无法有效给光接入模块进行认证注册的问题，实现了网络功能模块对光接入模块的发现、认证和注册。
在一个可选的实施例中，上述网络功能模块可以包括虚拟化光线路终端vOLT，下面以vOLT为例进行说明。
在本实施例中，第一vOLT向该光接入模块发送对应的vOLT管理配置信息可以有多种方式，其中，包括：该第一vOLT发送802.1x的应答消息给该光接入模块，该应答消息包括：对应的vOLT的管理IP和对应的vOLT的MAC；该第一vOLT通过动态主机配置协议后续协议DHCP分配该光接入模块对应的vOLT的管理IP。
在本实施例中提供了一种界面处理方法，图11是根据本发明实施例的一种光接入模块的认证注册方法的流程图三，如图11所示，该流程包括如下步骤：
步骤S1102，在该接入汇聚设备发现该光接入模块在位的情况下，接入汇聚设备读取光接入模块的设备标识；
步骤S1104，该接入汇聚设备向网络功能模块上报该光接入模块的物理位置信息和该光接入模块的设备标识；
步骤S1106，接收该网络功能模块对该光接入模块的认证消息，其中，该网络功能模块根据该光接入模块的设备标识对该光接入模块进行认证。
通过上述步骤，接入汇聚设备将光接入模块的认证信息上传给网络功能模块，该网络功能模块对光接入模块认证完后，接收网络功能模块对光接入模块的认证消息，从而解决了网络功能模块无法有效给光接入模块进行认证注册的问题，实现了网络功能模块对光接入模块的发现、认证和注册。
在一个可选的实施例中，上述网络功能模块可以包括虚拟化光线路终端vOLT，下面以vOLT为例进行说明。
在本实施例中，在该接入汇聚设备是通用以太网交换机的情况下，在该接入汇聚设备读取光接入模块的设备标识之前，该接入汇聚设备接收该vOLT的管理IP和接口信息的通告；该接入汇聚设备向该vOLT通告该接入汇聚设备的管理IP和接口信息；该接入汇聚设备与该vOLT建立管理控制通道。其中，该接入汇聚设备向该vOLT通告该接入汇聚设备的管理IP可以包括：静态预配置管理IP、通过动态主机配置协议方式获取的管理IP。
在上述实施例中，接入汇聚设备通过两线式串行总线I2C控制总线读取光接入模块的设备标识。该接入汇聚设备通过网络配置协议NETCONF或者网络管理协议SNMP向虚拟化光线路终端vOLT上报该光接入模块的物理位置信息和该光接入模块的设备标识。
通过以上的实施方式的描述，本领域的技术人员可以清楚地了解到根据上述实施例的方法可借助软件加必需的通用硬件平台的方式来实现，当然也可以通过硬件，但很多情况下前者是更佳的实施方式。基于这样的理解，本发明的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质(如ROM/RAM、磁碟、光盘)中，包括若干指令用以使得一台终端设备(可以是手机，计算机，服务器，或者网络设备等)执行本发明各个实施例该的方法。
在本实施例中还提供了一种光接入模块的认证注册装置，该装置位于终端中。该装置用于实现上述实施例及优选实施方式，已经进行过说明的不再赘述。如以下所使用的，术语“模块”可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现，但是硬件，或者软件和硬件的组合的实现也是可能并被构想的。如下装置实施例均以网络功能模块为虚拟化光线路终端vOLT为例进行说明：
图12是根据本发明实施例的一种光接入模块的认证注册装置的结构框图一，如图12所示，该装置包括：
第一接收模块122，设置为虚拟化光线路终端vOLT接收光接入模块的物理位置信息和该光接入模块的设备标识；第一认证模块124，连接至上述第一接收模块122，设置为该vOLT根据该光接入模块的设备标识对该光接入模块进行认证；第一发送模块126，连接至上述第一认证模块124，设置为在该vOLT对该光接入模块的认证通过的情况下，该vOLT向该物理位置信息对应的该光接入模块发送管理配置信息；建立模块128，连接至上述第一发送模块126，设置为该vOLT根据该管理配置信息与该光接入模块建立管理通道。
在本实施例中，该第一发送模块126可以包括：
下发单元，设置为在该vOLT对该光接入模块的认证通过的情况下，该vOLT接收该光接入模块的管理IP请求，该vOLT下发对该光接入模块配置的管理MAC和管理IP；
携带单元，设置为在该vOLT对该光接入模块的认证通过的情况下，以及该光接入模块发起802.1x的认证情况下，该vOLT通过基于局域网的扩展认证协议EAPoL应答该光接入模块，该vOLT通过类型长度值TLV携带该vOLT的管理MAC和管理IP。
在本实施例中，该建立模块128包括：第一管理通道单元，设置为该光接入模块和该vOLT之间通过管理IP建立管理通道；第二管理通道单元，设置为该光接入模块和该vOLT之间通过以太网维护通信信道ETH-MCC建立管理通道。
图13是根据本发明实施例的一种光接入模块的认证注册装置的结构框图二，如图13所示，该装置包括：
第二接收模块132，设置为多个虚拟化光线路终端vOLT中的第一vOLT接收光接入模块的认证请求；第二认证模块134，连接至上述第二接收模块132，设置为该第一vOLT将该认证请求转发给集中的认证授权计费AAA服务器；第二发送模块136，连接至上述第二认证模块134，设置为在该AAA服务器对该光接入模块认证通过的情 况下，该第一vOLT向该光接入模块发送对应vOLT的管理配置信息。
在本实施例中，第二发送模块136可以包括：
应答单元，设置为该第一vOLT发送802.1x的应答消息给该光接入模块，该应答消息包括：对应的vOLT的管理IP和对应的vOLT的MAC；
配置单元，设置为该第一vOLT通过动态主机配置协议后续协议DHCP分配该光接入模块对应的vOLT的管理IP。
图14是根据本发明实施例的一种光接入模块的认证注册装置的结构框图三，如图14所示，该装置包括：
读取模块142，设置为在该接入汇聚设备发现该光接入模块在位的情况下，接入汇聚设备读取光接入模块的设备标识；上报模块144，连接至上述读取模块142，设置为该接入汇聚设备向虚拟化光线路终端vOLT上报该光接入模块的物理位置信息和该光接入模块的设备标识；第三认证模块146，连接至上述上报模块144，设置为接收该vOLT对该光接入模块的认证消息，其中，该vOLT根据该光接入模块的设备标识对该光接入模块进行认证。
在本实施例中，在该接入汇聚设备是通用以太网交换机的情况下，该装置还包括：通告接收模块，设置为该接入汇聚设备接收该vOLT的管理IP和接口信息的通告；通告发送模块，设置为该接入汇聚设备向该vOLT通告该接入汇聚设备的管理IP和接口信息；管理控制模块，设置为该接入汇聚设备与该vOLT建立管理控制通道。
在本实施例中，还提供了一种光接入模块的认证注册系统，包括：光接入模块，接入汇聚设备，虚拟化光线路终端vOLT；该vOLT包括上述实施例的装置；该接入汇聚设备包括上述实施例的装置。
下面结合优选实施例和实施方式对本发明进行详细说明。
图15是根据本发明优选实施的虚拟接入网的网络架构的示意图，如图15所示，该网络由网络云平台、接入汇聚设备A和B、用户侧网络终端组成。网络云平台可以使用互联网数据中心(Internet Data Center，简称为IDC)，数据中心等通用IT基础设施。接入汇聚设备A和B通过城域网远程连接网络云平台。接入汇聚设备A包括了通用服务器的IT基础设施的能力，所以网络功能虚拟化模块可以按需分布在接入汇聚设备A和网络云平台中，如vOLT、虚拟宽带网络网关控制设备(virtualization Broadband Network Gateway，简称为vBNG)、虚拟通讯控制应用程序(virtualization Communications Control Application，简称为vCCAP)、虚拟用户驻地设备(virtualization Custom Premise Equipment，简称为vCPE)等功能模块可以被灵活的部 署到接入汇聚设备A和网络云平台中的虚拟机上运行。接入汇聚设备B使用通用以太网交换机，没有虚拟机加载的能力，需要依赖接入汇聚设备A提供的网络功能虚拟化功能协助工作。接入汇聚设备B支持OpenFlow协议，接受汇聚设备A中的软件定义网络(Software Defined Network,SDN)控制器控制。接入汇聚设备A、B提供标准的以太网接口，如电气和电子工程师协会(Institute of Electrical and Electronics Engineers，简称为IEEE)的万兆网口，或符合多源协议(Multi-Source Agreement，简称为MSA)标准的小型可插拔(Small Form-Factor Pluggable，简称为SFP+)插槽，这些接口向用户侧连接光接入模块。光接入模块完成PON到以太网数据报文的媒介转换功能。
本优选实施例提供了虚拟化光线路终端(vOLT，virtualization Optical Line Terminal)架构下，通过vOLT对光接入模块地自动发现，并对它们进行认证和注册，实现即插即用。其中光接入模块可以是驻留在通用以太网交换机(接入汇聚设备B)或者vOLT所在的通用服务器(接入汇聚设备A)网卡端口上的一种SFP物理封装的光模块。
在本优选实施中，vOLT对光接入模块自动发现，认证和注册的方法包括以下步骤：
第一步，当光接入模块插入接入汇聚设备A或B后，接入汇聚设备发现光接入模块在位。
第二步，接入汇聚设备A或B通过I2C控制总线，读取光接入模块的管理MAC地址和序列号(作为设备标识)。
第三步，接入汇聚设备A或B通过网络配置协议(Network Configuration Protocol，简称为NETCONF)或网络管理协议(Simple Network Management Protocol，简称为SNMP)陷阱(trap)的方法上报将光接入模块所在的端口、槽位等物理位置信息和光接入模块的物理地址(Media Access Control，简称为MAC)和序列号，上报vOLT。vOLT检查该光接入模块的序列号，检查是否是自己管理的资源，若是通过认证(或者要求光接入模块进一步发起802.1x的认证)。
第四步，vOLT告诉接入汇聚设备A或B(Authenticator)，通过了认证，在后续光接入模块通过动态主机配置协议(Dynamic Host Configuration Protocol，简称为DHCP)请求管理IP时，下发配置参数包含vOLT的MAC和IP(若要求光接入模块进一步发起了802.1x的认证，vOLT可以在给光接入模块的基于局域网的扩展认证协议(Extensible Authentication Protocol OVER LAN，简称为EAPOL)应答中，也可通过扩展类型长度值(type-length-value，简称为TLV)携带vOLT的管理MAC和IP)。
至此，光接入模块和vOLT之间完成拓扑发现，光接入模块和vOLT之间可以用管理IP建立管理通道，也可以用2层连接，如Y.1731的以太网维护通信信道(Ethernet maintenance communication channel，简称为ETH-MCC)建立管理通道，光接入模块直接接受vOLT的管理和控制。光接入模块的认证与注册工作完成。
通过上述优选实施例，通过光接入模块的自动发现，认证和注册，实现光接入模块的即插即用，符合接入网络虚拟化架构下网络运营者对网络配置与运维自动化、简单化的需求。
另外一个实施例中，通用以太网交换机(接入汇聚设备B)上的光接入模块，在本优选实施例汇总，1个vOLT实例代表了一定的管理域，为了让vOLT了解自己的管理边界，操作员应该先将该vOLT需要管理的所有资源标识，通过人机交互界面配置给vOLT，这可以用SNMP管理信息库(Management Information Base，简称为MIB)或YANG语言等数据模型定义。本方案中，光接入模块和vOLT的绑定关系是软件可定义的。
图16是根据本发明优选实施的通用以太网交换机(接入汇聚设备B)上的光接入模块的认证与注册的流程示意图，如图16所示。
步骤S1602，接入汇聚设备A中的vOLT控制虚拟交换机(vSwitch)，通过链路层发现协议(Link Layer Discovery Protocol,简称为LLDP)协议，将自己的管理IP地址通告给接入汇聚设备B。
步骤S1604，接入汇聚设备B上电后，通过LLDP向vOLT通告了自己的管理IP。管理IP可以是静态预配置的，也可以是通过DHCP终端(Client)方式获取的。
汇聚设备B和vOLT之间完成拓扑发现，汇聚设备B向vOLT认证注册，并以vOLT作为虚拟网络控制器接受vOLT的控制。认证中以双方LLDP的Chassis ID(如bridge MAC地址)作为认证因子之一，唯一标识vOLT和接入汇聚设备B。vOLT和接入汇聚设备B完成了相互发现，vOLT可以向接入汇聚设备B建立管理控制通道，然后通过NetConf协议/OpenFlow协议对接入汇聚设备B进行管理控制。
步骤S1606，当光接入模块插入接入汇聚设备B后，接入汇聚设备B发现光接入模块在位。
步骤S1608，接入汇聚设备B通过I2C控制总线，读取光接入模块的管理MAC地址和序列号(作为设备标识)。
步骤S1610，接入汇聚设备B通过Netconf或SNMP trap的方法上报将光接入模块所在的端口、槽位等物理位置信息和光接入模块的MAC地址和序列号，上报 vOLT。vOLT检查该光接入模块的序列号，检查是否是自己管理的资源，如果是则要求光接入模块发起802.1x的认证。
步骤S1612，光接入模块(suppliant)发起802.1x EAPoL向vOLT认证服务器(Authentication Server)进行认证。
步骤S1614，vOLT告诉接入汇聚设备B(Authenticator)，光接入模块通过了认证，vOLT可以在给光接入模块的EAPoL应答中，通过扩展TLV携带vOLT的管理MAC和IP，或在后续光接入模块通过DHCP请求管理IP时，下发配置参数包含vOLT的MAC和IP。
光接入模块和vOLT之间完成拓扑发现，并以vOLT作为虚拟网络控制器接受vOLT的控制。接入模块和vOLT之间可以用管理IP建立管理通道，也可以用2层连接，如Y.1731的ETH-MCC建立管理通道。
在本实施例中，光接入模块和vOLT之间完成拓扑发现，光接入模块和vOLT之间可以用管理IP建立管理通道，也可以用2层连接，如Y.1731的ETH-MCC建立管理通道，光接入模块直接接受vOLT的管理和控制。
光接入模块获得vOLT的授权，接受ONT向vOLT的认证注册，完成ONT和vOLT之间的拓扑发现，接入模块和ONT之间的管理通道沿用OMCC等现有方法。
上述实施例说明了1个汇聚接入网络是1个管理域，只有1个vOLT。当有多个管理域，即存在多个vOLT实例时，对光接入模块的认证可以采用跨vOLT的集中认证，这时首个vOLT作为代理服务器(Radius Proxy)，将光接入模块的认证请求转发给集中的AAA(认证(Authentication)、授权(Authorization)、记账(Accounting))服务器，认证通过后，再通过扩展802.1x的应答消息内容，或后续DHCP分配光接入模块管理IP时的配置下发，重新写入对应的vOLT的管理IP和MAC，重置光接入模块，使其向正确的vOLT注册。
图17是根据本发明优选实施的通用服务器(接入汇聚设备A)网卡端口上的认证与注册的流程示意图，如图17所示。包括如下步骤：
步骤S1702，当光接入模块插入通用服务器(接入汇聚设备A)网卡端口后，接入汇聚设备A发现光接入模块在位。
步骤S1704，接入汇聚设备A通过I2C控制总线，读取光接入模块的管理MAC地址和序列号(作为设备标识)。
步骤S1706，接入汇聚设备A通过Netconf或SNMP trap的方法上报将光接入模块所在的端口等物理位置信息和光接入模块的MAC地址和序列号，上报vOLT。 vOLT检查该光接入模块的序列号，检查是否是自己管理的资源，如果是则要求光接入模块发起802.1x的认证。
步骤S1708，光接入模块(suppliant)发起802.1x EAPoL向vOLT(Authentication Server)进行认证。
步骤S1710，vOLT告诉接入汇聚设备A(Authenticator)，光接入模块通过了认证，vOLT可以在给光接入模块的EAPoL应答中，通过扩展TLV携带vOLT的管理MAC和IP，或在后续光接入模块通过DHCP请求管理IP时，下发配置参数包含vOLT的MAC和IP。
在本实施例中，光接入模块和vOLT之间完成拓扑发现，光接入模块和vOLT之间建立3层或2层管理通道，光接入模块直接接受vOLT的管理和控制。
光接入模块和vOLT之间完成拓扑发现，并以vOLT作为虚拟网络控制器接受vOLT的控制。接入模块和vOLT之间可以用管理IP建立管理通道，也可以用2层连接，如Y.1731的ETH-MCC建立管理通道。
步骤S1712，光接入模块获得vOLT的授权，接受ONT向vOLT的认证注册，完成ONT和vOLT之间的拓扑发现，接入模块和ONT之间的管理通道沿用OMCC等现有方法。
下面以网络功能模块为虚拟化的光线路终端vOLT为例继续对本发明进行说明。
在本实施例中，还提出了一种接入汇聚设备虚拟化方法，采用该方法来实现接入汇聚设备的装置，从而解决在现有电信传输网络架构下对于整个接入网络设备无法实现端到端的设备扁平化统一管理，接入汇聚设备和终端设备架构复杂且成本高，同时网络服务提供商和用户自身无法对接入网络设备进行实时监控和客制化定义的问题。其中，该方案主要包括：
1)将接入汇聚设备的网络功能进行集中，并由虚拟化的光纤线路终端(Virtual Optical Line Terminal，简称为vOLT)模块实现。
2)将接入汇聚设备的物理媒介接入功能分布到小型化的接入模块实现，并提供标准化的业务流映射和上联物理接口。
3)vOLT和接入模块二者之间采用通用的IT设备组成的报文交换网络(同上述的报文交换模块)进行连接，报文交换网络包括x86服务器的网卡(Network Interface Card，简称为NIC)、以太网交换机以及它们之间的以太网连接。
其中，vOLT的实现可以参考网络功能虚拟化(Network Function Virtualization， 简称为NFV)架构中虚拟网络功能(Virtual Network Feature，简称为VNF)的模块概念，具体可参考ETSI GS NFV 002Network Function Virtualization Architectural Framework的相关描述。
为了解决上述问题，本发明实施例中提出了一种装置，该装置的主要特征在于：
1.接入汇聚设备，包括：虚拟光线路终端vOLT、接入模块和用于连接vOLT和接入模块的报文交换网络。
该虚拟光线路终端vOLT，对报文交换网络、接入模块、用户侧网络终端集中配置和运维管理，并驱动虚拟网络控制器对报文交换网络、接入模块、用户侧网络终端之间的拓扑发现和网络连接进行集中控制；vOLT采用了NFV中的VNF的实现方法，运行在通用IT服务器的虚拟机中。
2.上述的接入模块，可进一步细分为光接入模块和分布式接入模块2种。接入模块实现了物理层设备(PHYsical layer device，简称为PHY)和媒体接入控制(Media Access Control，简称为MAC)层两部分的功能，PHY可以处理光纤媒介中发送和接收的信号。其中，光接入模块采用小型可插拔设备SFP、10千兆小型可插拔设备XFP、紧凑型可插拔设备CSFP等硬件封装方式实现了体积的小型化。
3.上述的报文交换网络，由服务器的通用网络接口卡NIC和多个以太网交换机组成，用以太网连接在一起。它实现了vOLT和接入模块之间的2种连接方式。
方式一：通用网络接口卡连接多个接入模块和vOLT组成接入汇聚设备A。通用网络接口卡的用途在于交换多个接入模块、vOLT、上联城域网这三者之间的报文。
方式二：以太网交换机连接多个接入模块组成接入汇聚设备B。以太网交换机的用途在于交换多个接入模块、接入汇聚设备A、上联城域网这三者之间的报文。
其中，vOLT还可以部署在网络云平台，通过城域网远程连接接入汇聚设备B。
上述的接入模块还可以近一步包括：1个用户侧网络接口(User&Network Interface，简称为UNI)的PHY，1个网络侧网络接口(Network&Network Interface，简称为NNI)的PHY，以及UNI PHY和NNI PHY之间通过MAC层透明桥接。透明桥接(Bridging)的功能包含了报文缓存(Buffering)和报文解析、修改、流量管理(Traffic&Flow Management)的2个部件。Buffering通过接入模块包含的随机存取存储器(Random Access Memory，简称为RAM)存储器硬件实现。Traffic&Flow Management通过接入模块包含的网络处理器或通用中央处理器(Central Processing Unit，简称为CPU)的硬件实现。
上述的光接入模块还可以包括SFP OLT光接入模块，实现千兆无源光网络 (Gigabit Passive Optical Network，简称为GPON)/以太无源光网络(Ethernet Passive Optical Network，简称为EPON)/10千兆无源光网络(10Gigabit Passive Optical Network，简称为XGPON)等PON OLT的PHY和MAC层功能，以及点到多点(Point2Multiple Point，简称为P2MP)PON共享媒介上的动态带宽分配(Dynamic Bandwidth Allocation，简称为DBA)和流分类功能。
上述的分布式接入模块还可以包括远端(多业务)融合的Cable接入平台(Remote Converged Cable Access Platform，简称为R-CCAP)接入模块，可以通过以太网连接下挂在接入汇聚设备下，实现HomePlug AV或有线电缆数据服务接口规范(Data Over Service Interface Specifications，简称为DOCSIS)的分布式PHY和MAC功能，以及点到多点的混合光纤-同轴电缆网(hybrid fibr&cable，简称为HFC)媒介上的射频(Radio Frequency，简称为RF)信道带宽分配和流分类功能。
接入汇聚设备对外接口提供的光模块插槽(如SFP Cage)(同上述的接口)，除了可以插入本发明实施例中的光接入模块，也可以插入传统的光模块，提供符合IEEE 802.3的以太网接入。传统光模块只提供物理层的驱动(包括发送方向的，电信号转换为激光器激发的光信号；和接收方向的，光信号检测并转换为电信号)。
在本发明实施例中，还提供了一种方法，通过vOLT对接入模块自动发现，并对接入模块进行认证和配置。该方法实现了即插即用的多媒介综合接入。具体步骤如下：
步骤一：在接入汇聚设备A的服务器虚拟机中装载vOLT，建立vOLT和通用网络接口板的连接，然后通过通用网络接口板连接汇聚设备B的以太网交换机。完成vOLT和报文交换网络的连接。
步骤二：在接入汇聚设备的SFP插槽内插入光接入模块，或用接入汇聚设备的以太网接口连接分布式接入模块。完成接入模块和报文交换网络的连接。
步骤三：接入汇聚设备将接入模块的信息上报vOLT，完成vOLT对接入模块的自动发现。
步骤四：vOLT要求接入模块向vOLT认证注册，未注册前接入模块不能通过报文交换网络和其他接入模块或城域网发送和接收报文。
步骤五：通过vOLT认证的接入模块，vOLT将其加入接入汇聚设备的组成。这时该接入模块可以通过报文交换网络和其他接入模块或城域网发送和接收报文。
步骤六：vOLT通过控制和配置接入模块来发现和连接用户侧网络终端设备，并要求用户侧网络终端向vOLT注册。当用户侧网络终端完成注册后，vOLT完成了用户 和城域网的网络连接，并可控制该连接上的用户侧网络终端、接入模块、报文交换网络。
下面结合具体的应用场景对本发明进行说明。
图18是根据本发明实施例的虚拟化接入汇聚设备A和B在接入网络中的位置。如图11所示，本发明实施例中所提供的虚拟化接入汇聚设备的装置，放置到接入网络中，和传统的接入汇聚设备(传统OLT，电缆调制解调器终端系统(Cable Modem Termination System，简称为CMTS))、网络云平台、用户侧网络终端设备相连接，组成了连接用户和城域网络的接入汇聚网络。其中，
1)网络云平台：由运行在虚拟机环境下的各种vNF模块组成，它们运行在虚拟化的IT基础设施(包括虚拟化的计算、存储、网络输入输出接口)之上。这些IT基础设施可以小到一台服务器，也可以大到一个数据中心(Data Center，简称为DC)。
2)接入汇聚设备：包括传统OLT设备、CMTS设备，还包括新增的接入汇聚设备A和接入汇聚设备B。
2.1)接入汇聚设备A：包括通用IT服务器，该服务器具备通用NIC接口卡(以太网接口卡)、还包括新增的光接入模块和分布式接入模块。
2.1.1)vOLT模块：接入汇聚设备A中的通用IT服务器可以装载vNF，其上运行的各种vNF模块中，包括虚拟网络控制器，还包括但不限于新增的vOLT(虚拟光线路终端功能)模块和虚拟融合有线接入(Virtual Converged Cable Access，简称为vCCAP)功能模块。vOLT和vCCAP是按管理域不同进行的区分，大部分相同的网络功能使用相同的软件进程。但因为管理域不同，vOLT和vCCAP通常运行在不同的虚拟机上，但这不妨碍有些运营商是PON和Cable的综合接入运营商，这时可以将vOLT和vCCAP进行合并，放入vOLT作为同一个管理域的控制实体。后续描述中未特别说明时，vOLT也包含了vCCAP的功能。vOLT通过集中网络的管理功能，可以全局的调整本方案中各个部件的工作状态，必要时可以将业务流量集中到某几个接入汇聚设备，降低其他接入汇聚设备的能源消耗。
2.2)接入汇聚设备B：包括通用以太网交换机、还包括新增的光接入模块和分布式接入模块。
2.3)光接入模块：使用接入汇聚设备的SFP插槽，插入光接入模块后，实现其他媒介到以太网媒介的转换。
2.3.1)SFP OLT模块：一种光接入模块的实施例，用于实现GPON/XGPON等PON到以太网的媒介转换，并且实现点到多点转换到点到点逻辑连接时的流标识和 分类，在接入汇聚设备内，可以用高速上行分组接入(High Speed Uplink Packe，简称为VLAN)、虚拟可扩展局域网(Virtual eXtensible Local Area Network，简称为VxLAN)、多协议标签交换(Multi-Protocol Label Switching，简称为MPLS)标签、互联网协议(Internet Protocol，简称为IP)隧道标签等各种不同方法作为流标签进行标识。
2.4)分布式接入模块：和接入汇聚设备的标准以太网接口对接，或和SFP接入模块对接。实现两种不同媒介的转换。
2.4.1)R-CCAP模块：一种分布式接入模块的实施例，用于实现HFC有线电视媒介到以太网媒介的转换，并且实现点到多点转换到点到点逻辑连接时的流标识和分类，和接入汇聚设备对接时，可以用VLAN、VxLAN、MPLS标签、IP隧道标签等各种不同方法作为流标签进行标识。
3)用户侧网络终端设备：属于运营商网络设备，运营商通过对其认证、授权，使其纳入运营商的管理和控制域。包括电缆调制解调器(Cable Modem，简称为CM)、光网络终端(Optical Network Terminal，简称为ONT)等。
上述模块之间的关系如下：
接入汇聚设备2)和网络云平台1)之间通过城域网远程连接。在网络云平台的业务编排功能的控制下，接入汇聚设备2)通过城域网和城域网边缘的路由器或城域网内其他区域的接入设备(其他OLT等)建立网络连接，完成业务通信。
vNF模块1.1)可以装载到网络云平台1)、接入汇聚设备A 2.1)中。作用域是整个城域网的vNF装载到网络云平台，作用域是某个接入区域的vNF装载到接入汇聚设备A。如vOLT负责某个接入区域的集中控制，适合装载到接入汇聚设备A。如鉴权、授权及计费服务器(Authentication Authorization and Accounting，简称为AAA)模块负责全网认证、授权、计费功能，虚拟IP多媒体子系统(virtual IP Multimedia Subsystem，简称为vIMS)负责全网IP电话(Voice over IP，简称VoIP)的信令控制，适合装载到网络云平台。部分vNF功能可以分布式部署到接入汇聚设备A，也可以集中部署到网络云平台，如虚拟边缘节点(virtual Broadband Network Gateway，简称为vBNG)，虚拟用户终端(virtual Customer Premises Equipmentv，简称为CPE)功能，虚拟内容分发网络(virtual Content Delivery Network，简称为vCDN)功能等。网络运营商、服务提供商和最终用户都通过网络云平台提供的开放接口配置vNF，实现自身业务的编排。各种vNF之间通过网络连接。
接入汇聚设备A 2.1)中，通过装载vOLT或vCCAP分别实现对PON网络管理域 的控制管理和对Cable网络管理域的控制管理。
接入汇聚设备B 2.2)不具备装载vNF模块的能力，它通过以太网接口连接接入汇聚设备A的通用NIC接口卡，在接入汇聚设备A 2.1)的控制和管理下工作。
接入汇聚设备A 2.1)和接入汇聚设备B 2.2)通过插入光接入模块2.3)或连接分布式接入模块2.4)提供各种不同的物理媒介接入方式，如PON、HFC。光接入模块2.3)或分布式接入模块2.4)和用户侧网络终端设备3)直接相连。
接入汇聚设备A中的vOLT 2.1.1)，对接入汇聚设备B 2.2)、光接入模块2.3)、分布式接入模块2.4)、用户侧网络终端模块3)，进行集中的管理和配置，管理配置协议使用NetConf、CLI、简单网络管理协议(Simple Network Management Protocol，简称为SNMP)等。另外，vOLT通过驱动虚拟网络控制器，控制这些部件完成拓扑发现和网络连接，控制协议采用OpenFlow。虚拟网络控制器可以同时服务多个vOLT，为不同的vOLT按管理域切分接入汇聚设备B、光接入模块、分布式接入模块、用户侧网络终端，组成归属于该vOLT的虚拟接入网络。
接入汇聚设备B 2.2)具备以太网包交换的能力。
如图18所示，接入汇聚设备A和B通过城域网远程连接网络云平台和其他地区的用户。通过光接入模块和分布式接入模块连接用户网络终端。
接入汇聚设备A包括了通用服务器的IT基础设施的能力，所以虚拟化网络功能vNF模块可以按需分布在接入汇聚设备A和网络云平台中，如vOLT、vBNG、vCCAP、vCPE等功能模块可以被灵活的部署到接入汇聚设备A和网络云平台中的虚拟机上运行。而在传统的汇聚传输网络中，这些功能完全和专用的硬件绑定。
媒介转换功能被保留在用户接入侧，用附着在汇聚接入设备上的光接入模块和分布式接入模块完成，其他媒介将在此被统一转换到以太网数据报文，或用IEEE 802.3以太网封装作为隧道传输方式。
图19是根据本发明实施例的接入汇聚设备A的设备示意图，该接入汇聚设备A具有装载vOLT模块的能力。如图19所示，是使用通用IT服务器实现的接入汇聚设备A，最下层是物理硬件，其中的网络输入输出设备是通用的网络接口卡(Network Interface Card，简称为NIC)。在物理层之上是超级管理程序Hypervisor，如Linux的KVM、VMWare ESXi等，它将物理硬件虚拟化成逻辑硬件，提供给上层运行在虚拟机内的操作系统，如Linux。Hypervisor在抽象通用网络接口卡NIC时，对虚拟机VM提供虚拟网络接口vNIC，另外提供虚拟交换机vSwitch功能，用于虚拟机之间的网络 通信以及通过物理网口和服务器之外的其他主机的通信。vSwitch的实现有多种方案，如纯软件CPU重度参与，多次读写内存的实现方法，也有在通用网络接口卡上用硬件加速，CPU轻度参与，减少内存读写次数的方法。
接入汇聚设备A的通用网络接口卡上提供标准的以太网接口，如IEEE的万兆网口，或符合MSA标准的SFP+插槽(SFP Cage)，这些接口向用户侧可以连接光接入模块、分布式接入模块或其他接入汇聚设备(传统OLT、CMTS等)，向网络侧连接城域网。通用网络接口卡向设备内部提供PCIe等总线接口连接CPU等其他部件。光模块插槽(SFP Cage)除了可以插入光接入模块，也可以插入传统的光模块提供点到点(Point 2Point，简称为P2P)的以太网用户接入。
图20是根据本发明实施例的接入汇聚设备B的设备示意图，该接入汇聚设备B能在接入汇聚设备A包含的vOLT的管理控制下工作，如图20所示，是使用通用以太网交换机实现接入汇聚设备B的示意图。接入汇聚设备B，没有虚拟机加载的能力，需要依赖接入汇聚设备A提供的vOLT功能协助工作。在本实施例中，接入汇聚设备B是支持OpenFlow协议，可以接受汇聚设备A中的虚拟网络控制器控制的以太网交换设备。对于低延时、大吞吐量要求的业务，控制器可以预先下发转发规则给接入汇聚设备B，而缺省的，业务必须从汇聚设备B转发到汇聚设备A，由汇聚设备A中的vOLT等虚拟网络功能模块处理后，再下发转发规则给接入汇聚设备B，进行转发。接入汇聚设备B提供标准的以太网接口，如IEEE的万兆网口，或符合MSA标准的SFP+插槽(SFP Cage)，这些接口向用户侧可以连接光接入模块、分布式接入模块或其他接入汇聚设备，向网络侧连接城域网和接入汇聚设备A。光模块插槽(SFP Cage)除了可以插入光接入模块，也可以插入传统的光模块提供点到点P2P的以太网用户接入。
图21是根据本发明实施例的vOLT的功能示意图，如图21所示，驻留在接入汇聚设备A中的vOLT，可以端到端地(从低位的网络终端到高位的汇聚交换设备)对单个设备和这些设备之间的拓扑连接进行配置和控制。用户要获得运营商的服务，建立网络连接时，需要经过用户侧网络终端设备、接入模块和报文交换网络。靠近用户侧的设备网络位置低，安全性可靠性差，靠近城域网的设备，网络位置高，安全性和可靠性高。vOLT的功能大致分为3层：
1)最下面第1层是拓扑的发现和驱动(配置和控制)。vOLT具有和传统OLT、CMTS类似的功能，对网络终端和接入模块进行集中的安全认证。认证通过后，vOLT为网络终端和接入模块分配管理地址(可以是IP地址；也可以是非IP的地址， 如MAC地址、光纤网络单元标识(Optical Network Unit Identify，简称为ONUID)等)，建立管理和控制的通道(其中，网络终端和接入模块没有直接到vOLT的物理连接，需要通过高位的vSwitch或以太网交换机建立带内管理通道)。认证方法可以采用IETF RFC3748定义的可扩展认证协议(Extensible Authentication Protocol，简称为EAP)的方法，如EAPoL(802.1x)或EAPoRADIUS(RFC3579)，同时兼容传统的网络终端ONT的GPON/EPON注册认证方法。对于物理安全性较差的网络终端和接入模块进行认证是必须的，只有通过vOLT的认证，它们才能加入网络拓扑。低位设备是EAP中的Suppliant，高位设备是Authenticator，vOLT作为Authentication Server。认证从高位设备向低位设备延伸，首先认证接入模块，然后认证网络终端。高位设备会对低位设备的存在进行自动发现，并上报到vOLT，实现即插即用。
2)中间的第2层是拓扑的抽象，向上层提供设备、端口、链路等构成拓扑的元素的状态。
3)最上面的第3层是各种业务功能，如计算最短路径、资源约束的流量工程计算、链路和端口的性能统计、链路和端口的告警上报等。
在本实施例中，各部件都支持OpenFlow协议，网络终端和接入模块直接归属和受控于vOLT。而报文交换网络部分(即vSwitch和以太网交换机)归属于和受控于虚拟网络控制器，多个不同管理域的vOLT通过驱动虚拟网络控制器控制报文交换网络实现报文交换网络部分资源的互斥和共享。
图22是根据本发明实施例的接入模块的功能示意图，如图22所示，接入模块包含1个用户侧UNI PHY和1个网络侧NNI PHY，它们之间通过MAC层透明桥接。透明桥接功能之上可以运行IP报文处理功能。Bridging(透明桥接)的功能包含了Buffering(报文缓存)和Traffic&Flow Management(报文解析、修改、流量管理)的2个组成部分。Buffering通过接入模块包含的RAM存储器硬件实现。Traffic&Flow Management通过接入模块包含的网络处理器或通用CPU的硬件实现。
图23是根据本发明实施例的光接入模块的SFP OLT的实施例示意图，如图23所示，SFP OLT光接入模块的硬件封装遵循多源协议(Multi-Source Agreement，简称为MSA)组织定义的业界标准，如SFF-8431、SFF8472等，光接入模块从接入汇聚设备的SFP插槽(SFP Cage)的电气接口获得供电、数据传输和管理控制。在传统的SFP transceiver模块的driver驱动和SFP插槽的电气接口之间，增加了1个UNI PHY、1个NNI PHY和1个透明桥接功能(Bridging)功能。增强了控制器CPU的处理能力来 驱动Bridging中的TM(Traffic&Flow Management)和处理vOLT对光接入模块的管理和控制消息。对于SFP OLT的实施例，
1)UNI PHY通过控制器CPU的配置可以实现10G EPON标准(IEEE 802.3-2012 Clause 75，76)定义的物理介质关联层接口(Physical Media Dependent，简称为PMD)、物理介质附着层(Physical Medium Attachment，简称为PMA)、物理编码子层(Physical Coding sublayer，简称为PCS)组成的PHY功能；
2)UNI PHY通过控制器CPU的配置可以实现XGPON标准定义的PMD(ITU-T G.987.2)和10G GPON传输聚合层(XGPON Transmission Convergence，简称为XGTC)(ITU-T G.987.3)组成的PHY功能；
3)NNI PHY通过控制器CPU的配置可以实现10GBASE-R(IEEE 802.3-2012Clause 49，51，52)标准定义的PMD、PMA、PCS组成的PHY功能；
4)Bridging中的TM通过控制器CPU的配置可以实现10G EPON的MPMC(MultiPoint MAC Control)功能，多LLID的DBA动态带宽分配功能；
5)Bridging中的TM通过控制器CPU的配置可以实现XGPON的PLOAM协议处理功能，多T-CONT的DBA动态带宽分配功能；
6)控制器CPU可以解析vOLT下发的OpenFlow流表，并写入TM，供TM完成对报文的流分类、报头修改、报文封装和转发。报头修改如增加VLAN tag，报文封装如进行VxLAN的封装。
上述的各部件可以用独立器件实现，但考虑到SFP封装的尺寸较小，UNI PHY、NNI PHY和Bridging功能一般采用集成的单个芯片实现。
图24是根据本发明实施例的分布式接入模块的R-CCAP模块的实施例示意图，如图24所示，R-CCAP的逻辑连接和光接入模块类似，包含了UNI PHY、NNI PHY、Bridging和控制CPU。不同之处在于：
1)R-CCAP的物理封装是一个独立的设备，需要单独的供电输入，如-48V的直流输入或110-240V的交流输入。
2)UNI PHY的体积和功耗较大，采用独立器件实现，比如HFC网络采用的是RF模拟调制，接收方向需要高速的A/D模数转换，发送方向需要D/A数模转换，另外需要较复杂的调制解调算法，如QAM(Quadrature amplitude modulation)64～1024的调制解调。
3)NNI PHY连接接入汇聚设备的距离较远(10-80公里)，电气接口必需转换为光接口，所以在网络侧增加了SFP transceiver在SMF单模光纤上传输数据报文。
图25是根据本发明实施例的使用驻留在接入汇聚设备A中的vOLT对接入汇聚网络集中控制的示意图，如图25所示，接入汇聚设备A的虚拟机中至少装载SDN虚拟网络控制器的功能和类比传统OLT功能的vOLT功能，操作人员通向vOLT导入管理域内所有用户侧终端、接入模块、接入汇聚设备等部件的标识，当这些资源上线后，会自动发现可注册的vOLT，并上报自己的设备标识，vOLT对他们进行认证注册，并建立网络拓扑的逻辑连接，vOLT通过NetConf脚本配置这些资源的静态数据，驱动虚拟网络控制器下发预先配置的转发规则等，通过OpenFlow协议动态实时地收集端口、链路等状态信息，下发转发规则，流量令牌等控制信息。
vOLT分别采用不同的方法建立到网络中不同部件的管理控制通道：
1)对汇聚设备A内部的vSwitch等可以采用内部的控制总线自动建立控制通道。
2)对汇聚设备B可以使用带内管理通道，也可以使用专用的带外管理通道。采用各自的管理IP建立连接。
汇聚设备A和B用户侧的光接入模块、分布式接入模块、用户侧终端，因为受网络连接条件的限制，通常无法建立专门的带外管理通道。
3)光接入模块通过插入的接入汇聚设备从I2C总线读取的光接入模块的序列号和管理MAC地址，由接入汇聚设备通过简单网络管理协议(Simple Network Management Protocol，简称为SNMP)陷阱trap的方式上报vOLT，实现拓扑发现，然后采用ITU-T Y.1731中定义的以太网维护通信信道ETH-MCC的方法建立管理控制通道。
4)分布式接入模块和接入汇聚设备之间通过链路层发现协议(Link Layer Discovery Protocol，简称为LLDP)，实现相互发现，接入汇聚设备通过SNMP trap的方式，将分布式接入模块的管理地址(IP)上报vOLT，然后vOLT和分布式接入模块间建立管理连接。
5)各种用户侧终端，则继续沿用目前的带内管理通道建立方式，比如GPON的ONT通过PLOAM消息完成SFP OLT光接入模块和ONT之间的拓扑发现，然后建立OMCC管理通道。同理，对于EPON，采用多点控制协议(Multi-Point Control Protocol，简称为MPCP)协议完成拓扑发现，然后用扩展操作、管理和维护(Operation Administration and Maintenance，简称为OAM)建立SFP OLT模块到ONT的管理通道。对于Cable Modem，采用DOCSIS或HomePlug AV的拓扑发现和管理通道建立方 法，建立Cable Modem到R-CCAP分布式接入模块的管理通道。未来的下一代PON，可能会采用一些新的带内通道机制，如AMCC管理通道。本实施例中，为避免网络终端建立巨量的管理控制通道到vOLT，分布式接入模块或光接入模块中的控制CPU将作为vOLT的管理代理，转发vOLT的NetConf/OpenFlow等管理控制消息。另外，即使在用户侧网络终端离线的情况下，vOLT也可以先将配置下发到接入模块，然后在网络终端上线时，由接入模块下发配置给网络终端。
图26是根据本发明实施例的兼容传统接入汇聚设备混合组网的实施例示意图，如图26所示，该图说明了未完成网络功能虚拟化的接入汇聚设备(如传统的OLT)在本实施例的网络架构下的工作方式。传统的OLT是个封闭的软硬件集成的系统，它作为传统的接入汇聚设备，通过以太网上联接口连接本方案中的接入汇聚设备A或B，但传统OLT下连接的用户侧ONT设备还是由传统的OLT控制。而不是由本方案中已经虚拟化的vOLT模块控制。传统的OLT的所有的流量都经由传统OLT上配置的指定VLAN转发到本方案的接入汇聚设备处理。因为该OLT的功能没有虚拟化，所以虚拟网络控制器无法控制到该OLT的PON端口和ONT端口，但每个用户还是可以从分配给他们的IP地址等信息中区分出来，所以仍可以在接入汇聚设备A中装载vBNG、vCDN等非用户端口相关的网络功能，实现这些网络功能的虚拟化。
图27是根据本发明实施例的vOLT部署在网络云平台中的实施例示意图，如图27所示，该图说明了vOLT部署在网络云平台中的实施例。网络云平台提供了vOLT运行需要的虚拟机环境，提供了城域网的连接。vOLT通过城域网连接接入汇聚设备B，这相当于将报文交换网络扩展到了整个城域网的范围。不同之处在于，这时vOLT需要跨越路由的IP网络连接接入汇聚设备B，vOLT通过城域网可以连接更多数量的接入汇聚设备和接入模块。本实施例中，vOLT采用VxLAN等技术在IP路由的网络上建立自己管理域的逻辑私有网络(通过VxLAN报头中VNI字段的不同和城域网上的其他管理域隔离)。将该逻辑私有网络作为报文交换网络连接接入汇聚设备B和接入模块。
图28是传统光模块的示意图，它提供物理层的驱动(driver)，包括发送方向(transmitter)的，电信号转换为激光器激发的光信号；和接收方向(receiver)的，光信号检测并转换为电信号。控制器(Controller)和带电可擦可编程只读存储器(Electrically Erasable Programmable Read-Only Memory，简称为EEPROM)，主要用于上报光模块的特性参数信息(如工作波长、支持的比特速率、供应商信息)等。采 用SFP的物理封装方式，它可以插入接入汇聚设备的光模块插槽(如SFP Cage)，提供以太网用户的接入。
通过本发明上述实施例，可以达到以下有益效果：一是网络架构将更为扁平化，管理和控制将更为简洁高效，可以实现直接从端到端的网络管理，从而降低运维成本，并提高管理效率；二是网络管理人员和用户可以通过软件自由设计和定义网络，并通过类似APP界面来查询和监控当前的网络状态，使得网络管理更为智能化；三是通过网络虚拟化，接入网络汇聚设备、网络终端等设备在硬件和软件上实现起来更为简洁，在成本和功耗上也将更为绿色环保，极大提高效率。
显然，本领域的技术人员应该明白，上述的本发明的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，可选地，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。
工业实用性
如上所述，本发明实施例提供的一种接入汇聚装置和认证注册方法具有以下有益效果：解决了相关技术中存在的接入汇聚设备管理和部署不灵活的问题，进而达到了提高接入汇聚设备管理和部署的灵活性的效果。

Claims (38)

  1. 一种接入汇聚装置，包括：
    接口模块，设置为接入一个或多个接入模块，其中，所述一个或多个接入模块为硬件模块，所述接入模块受到网络功能模块的管理，所述网络功能模块实现接入汇聚设备的网络功能，所述接入汇聚设备的物理媒介接入功能分布到所述一个或多个接入模块；
    报文交换模块，设置为连接所述网络功能模块和所述一个或多个接入模块，在所述网络功能模块和所述一个或多个接入模块之间交换报文。
  2. 根据权利要求1所述的装置，其中，所述网络功能模块通过网络功能虚拟化NFV中的虚拟网络功能模块VNF实现。
  3. 根据权利要求1或2所述装置，其中，所述网络功能模块实现的网络功能包括以下至少之一：
    对所述报文交换模块进行配置管理；对所述一个或多个接入模块进行配置管理；对用户侧网络终端集中配置管理；驱动虚拟网络控制器对报文交换模块、所述一个或多个接入模块和所述用户侧网络终端之间的拓扑发现和/或集中控制。
  4. 根据权利要求1至3中任一项所述的装置，其中，所述接入汇聚设备包括以下至少之一：光纤线路终端OLT、电缆调制解调器终端系统CMTS。
  5. 根据权利要求1所述的装置，其中，所述接入模块设置为实现物理层设备PHY和媒体接入控制MAC层两部分的功能。
  6. 根据权利要求5所述的装置，其中，所述接入模块包括以下至少之一：光接入模块、分布式接入模块，其中，所述光接入模块设置为实现除以太网之外的其他媒介到以太网的媒介转换；所述分布式接入模块设置为和所述接入汇聚设备的标准以太网接口对接，或者和小型可插拔设备SFP接入模块对接，设置为实现媒介的转换。
  7. 根据权利要求6所述的装置，其中，所述光接入模块包括：电信号处理模块和控制器，其中，所述控制器具有可寻址的IP地址或非IP地址的管理地址，所述电信号处理模块包括：物理层用户网络侧接口UNI PHY、物理层网络节点接口NNI PHY、连接用户网络侧接口UNI与网络节点接口NNI数据链路层的数据链路层桥接单元；
    所述UNI PHY和所述NNI PHY，设置为实现指定通信协议定义的接口功能；
    所述数据链路层桥接单元，设置为对所述UNI PHY和所述NNI PHY之间转发的报文进行管理；
    所述控制器，设置为依据所述管理地址控制所述电信号处理模块将报文转发到与所述管理地址对应的用户侧设备或网络侧设备。
  8. 根据权利要求1所述的光接入模块，其中，与所述UNI PHY和所述NNI PHY对应的数据链路层具有介质访问控制MAC和逻辑链路控制LLC功能。
  9. 根据权利要求8所述的光接入模块，其中，所述数据链路层桥包括：分组缓存组件和交通流量管理TM组件；
    所述分组缓存组件，设置为缓存所述数据链路层的所述报文；
    所述TM组件，设置为对所述报文进行管理。
  10. 根据权利要求9所述的光接入模块，其中，
    所述分组缓存组件为随机存储器RAM，所述TM组件为多核中央处理器CPU或网络处理器。
  11. 根据权利要求7所述的光接入模块，其中，还包括：
    光电转换驱动电路，设置为执行光信号与电信号之间的转换。
  12. 根据权利要求11所述的光接入模块，其中，所述光电转换驱动电路包括：发射器和接收器；
    所述发射器，设置为将所述电信号处理单元发送的电信号调制成光信号，并发射该光信号；
    所述接收器，设置为将接收到的光信号解调成电信号，并将该电信号发送到所述电信号处理模块。
  13. 根据权利要求12所述的光接入模块，其中，所述发射器包括：半导体激光器，所述接收器包括：半导体光检测器。
  14. 根据权利要求13所述的光接入模块，其中，所述光电转换驱动电路包括一组或多组所述半导体激光器和所述半导体光检测器的组合。
  15. 根据权利要求7所述的光接入模块，其中，还包括：
    电源模块，设置为获取直流电源输入的电能，其中，所述电能用于供所述光接入模块工作。
  16. 根据权利要求7至15任一项所述的光接入模块，其中，所述光接入模块适用于交换机、路由器的光模块插槽。
  17. 根据权利要求6所述的装置，其中，所述分布式接入模块设置为实现混合光纤-同轴电缆网HFC有限电视媒介到以太网媒介的转换。
  18. 根据权利要求17所述的装置，其中，还包括以下至少之一：
    所述分布式接入模块还设置为点到多点转换到点到点逻辑连接时的流标识和分类；
    当所述分布式接入模块和所述接入汇聚设备对接时，利用虚拟局域网VLAN标签、虚拟可扩展局域网VxLAN标签、多协议标签交换MPLS标签、IP隧道标签中的至少之一作为流标签进行标识。
  19. 根据权利要求1所述的装置，其中，所述报文交换模块包括网络接口卡NIC和以太网交换机。
  20. 根据权利要求19所述的装置，其中，通过所述NIC连接所述网络功能模块和所述一个或多个接入模块。
  21. 根据权利要求19所述的装置，其中，通过所述以太网交换机连接所述多个接入模块。
  22. 一种利用权利要求1至21中任一项所述的装置的光接入模块的认证注册方法，包括：
    网络功能模块接收光接入模块的物理位置信息和所述光接入模块的设备标识；
    所述网络功能模块根据所述光接入模块的设备标识对所述光接入模块进行认证；
    在所述网络功能模块对所述光接入模块的认证通过的情况下，所述网络功能模块向所述物理位置信息对应的所述光接入模块发送管理配置信息，所述网络功能模块根据所述管理配置信息与所述光接入模块建立管理通道。
  23. 根据权利要求22所述的方法，其中，所述网络功能模块包括虚拟化光线路终端vOLT。
  24. 根据权利要求23所述的方法，其中，在所述网络功能模块对所述光接入模块的认证通过的情况下，所述网络功能模块向所述光接入模块发送管理配置信息包括以下至少之一：
    在所述vOLT对所述光接入模块的认证通过的情况下，所述vOLT接收所述 光接入模块的管理IP请求，所述vOLT下发对所述光接入模块配置的管理媒体接入控制MAC和管理IP；
    在所述vOLT对所述光接入模块的认证通过的情况下，以及所述光接入模块发起802.1x的认证情况下，所述vOLT通过基于局域网的扩展认证协议EAPoL应答所述光接入模块，所述vOLT通过类型长度值TLV携带所述vOLT的管理MAC和管理IP。
  25. 根据权利要求23所述的方法，其中，所述网络功能模块根据所述管理配置信息与所述光接入模块建立管理通道包括下面至少之一：
    所述光接入模块和所述vOLT之间通过管理IP建立管理通道；
    所述光接入模块和所述vOLT之间通过以太网维护通信信道ETH-MCC建立管理通道。
  26. 根据权利要求22至25任一项所述的方法，其中于，所述光接入模块的物理位置信息包括：所述光接入模块所在的端口号，所述光接入模块所在的槽位号。
  27. 根据权利要求22至25任一项所述的方法，其中，所述光接入模块的设备标识包括：所述光接入模块的MAC地址、所述光接入模块的序列号。
  28. 一种利用权利要求1至21中任一项所述的装置的光接入模块的认证注册方法，包括：
    多个网络功能模块中的第一网络功能模块接收光接入模块的认证请求；
    所述第一网络功能模块将所述认证请求转发给集中的认证授权计费AAA服务器；
    在所述AAA服务器对所述光接入模块认证通过的情况下，所述第一网络功能模块向所述光接入模块发送对应的网络功能模块的管理配置信息。
  29. 根据权利要求28所述的方法，其中，所述网络功能模块包括虚拟化光线路终端vOLT。
  30. 根据权利要求29所述的方法，其中，所述第一网络功能模块向所述光接入模块发送对应的网络功能模块管理配置信息包括：
    第一vOLT发送802.1x的应答消息给所述光接入模块，所述应答消息包括：对应的vOLT的管理IP和对应的vOLT的MAC；
    所述第一vOLT通过动态主机配置协议后续协议DHCP分配所述光接入模块 对应的vOLT的管理IP。
  31. 一种利用权利要求1至21中任一项所述的装置的光接入模块的认证注册方法，包括：
    在接入汇聚设备发现所述光接入模块在位的情况下，所述接入汇聚设备读取光接入模块的设备标识；
    所述接入汇聚设备向网络功能模块上报所述光接入模块的物理位置信息和所述光接入模块的设备标识；
    所述接入汇聚设备接收所述网络功能模块对所述光接入模块的认证消息，其中，所述网络功能模块根据所述光接入模块的设备标识对所述光接入模块进行认证。
  32. 根据权利要求31所述的方法，其中，所述网络功能模块包括虚拟化光线路终端vOLT。
  33. 根据权利要求32所述的方法，其中，在所述接入汇聚设备是通用以太网交换机的情况下，在所述接入汇聚设备读取光接入模块的设备标识之前，所述方法还包括：
    所述接入汇聚设备接收所述vOLT的管理IP和接口信息的通告；
    所述接入汇聚设备向所述vOLT通告所述接入汇聚设备的管理IP和接口信息；
    所述接入汇聚设备与所述vOLT建立管理控制通道。
  34. 根据权利要求33所述的方法，其中，所述接入汇聚设备向所述vOLT通告所述接入汇聚设备的管理IP包括：
    静态预配置管理IP、通过动态主机配置协议方式获取的管理IP。
  35. 根据权利要求32所述的方法，其中，所述接入汇聚设备读取光接入模块的设备标识包括：
    所述接入汇聚设备通过两线式串行总线I2C控制总线读取光接入模块的设备标识。
  36. 根据权利要求31所述的方法，其中，所述接入汇聚设备向虚拟化光线路终端vOLT上报所述光接入模块的物理位置信息和所述光接入模块的设备标识包括：
    所述接入汇聚设备通过网络配置协议NETCONF或者网络管理协议SNMP向虚拟化光线路终端vOLT上报所述光接入模块的物理位置信息和所述光接入模块 的设备标识。
  37. 根据权利要求31至34任一项所述的方法，其中，所述光接入模块的物理位置信息包括：所述光接入模块所在的端口号，所述光接入模块所在的槽位号。
  38. 根据权利要求31至34任一项所述的方法，其中，所述光接入模块的设备标识包括：所述光接入模块的MAC地址、所述光接入模块的序列号。
PCT/CN2015/094231 2015-04-24 2015-11-10 接入汇聚装置和认证注册方法 WO2016169246A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510202492.7 2015-04-24
CN201510202492.7A CN106161077B (zh) 2015-04-24 2015-04-24 接入汇聚装置和认证注册方法

Publications (1)

Publication Number Publication Date
WO2016169246A1 true WO2016169246A1 (zh) 2016-10-27

Family

ID=57144381

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/094231 WO2016169246A1 (zh) 2015-04-24 2015-11-10 接入汇聚装置和认证注册方法

Country Status (2)

Country Link
CN (1) CN106161077B (zh)
WO (1) WO2016169246A1 (zh)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018090677A1 (zh) * 2016-11-21 2018-05-24 华为技术有限公司 一种nf组件异常的处理方法、设备及系统
CN112788006A (zh) * 2020-12-30 2021-05-11 锐捷网络股份有限公司 免认证mac地址的确定方法及装置
CN112948184A (zh) * 2021-02-03 2021-06-11 重庆大学 一种基于多通信模式的信息收发控制系统
CN113645078A (zh) * 2021-08-16 2021-11-12 烽火通信科技股份有限公司 一种网管业务自动延展的方法及系统
CN113938332A (zh) * 2021-09-09 2022-01-14 中国联合网络通信集团有限公司 控制方法及通信装置
CN115208612A (zh) * 2022-05-10 2022-10-18 北京市遥感信息研究所 一种复杂组网安全体系架构

Families Citing this family (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108933760B (zh) * 2017-05-25 2021-01-08 中国电信股份有限公司 安全业务控制方法和系统
CN109327318B (zh) * 2017-07-31 2021-09-28 上海层峰网络科技有限公司 一种sdn管理网络架构和建立sdn管理网络的方法
CN109688586B (zh) * 2017-10-19 2021-12-07 中兴通讯股份有限公司 一种网络功能认证的方法、装置及计算机可读存储介质
EP3721596B1 (en) * 2017-12-04 2022-11-02 Telefonaktiebolaget LM Ericsson (publ) Network management device and centralized authorization server for netconf
CN108833284B (zh) * 2018-08-01 2021-04-06 郑州市景安网络科技股份有限公司 一种云平台和idc网络的通信方法及装置
CN108900362B (zh) * 2018-08-13 2021-07-30 郑州云海信息技术有限公司 一种云网络接入层物理链路拓扑生成方法和装置
US11296783B2 (en) 2019-03-27 2022-04-05 Juniper Networks, Inc. Managing satellite devices within a branch network
CN109905785B (zh) * 2019-03-29 2021-05-28 新华三技术有限公司 一种报文转发方法及装置
CN110121123A (zh) * 2019-05-10 2019-08-13 江西山水光电科技股份有限公司 一种pon聚合拉远设备管理方法
CN110535682A (zh) * 2019-07-19 2019-12-03 浪潮思科网络科技有限公司 一种sdn网络中设备告警信息的分析装置及方法
CN114884808B (zh) * 2019-08-30 2024-09-24 华为技术有限公司 一种网络管理的方法及设备
CN110855451B (zh) * 2019-11-18 2021-10-01 中国航空工业集团公司沈阳飞机设计研究所 一种非总线信号切换系统
CN111865419B (zh) * 2020-07-07 2021-09-28 东南大学 一种基于积木式架构的面向5g的智能光接入网局端云系统
CN114338522B (zh) * 2020-11-27 2024-04-05 成都市伏羲科技有限公司 基于标识管理的IPv6编址与组网方法
CN113794580B (zh) * 2021-08-04 2023-12-29 新华三大数据技术有限公司 一种网络设备的管理方法及装置
CN114024756B (zh) * 2021-11-09 2024-04-09 迈普通信技术股份有限公司 接入认证方法、装置、电子设备及计算机可读存储介质
CN114845421A (zh) * 2022-03-25 2022-08-02 中盈优创资讯科技有限公司 一种无线接入设备管理方法及装置

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2157745A1 (en) * 2008-08-19 2010-02-24 Nokia Siemens Networks OY Method for routing data traffic in an access node and access node
CN102098799A (zh) * 2011-01-26 2011-06-15 北京邮电大学 一种实现异构网络融合的智能认知无线网络系统
CN104301812A (zh) * 2014-09-19 2015-01-21 中国电力科学研究院信息通信研究所 一种光网络系统和网络功能虚拟化方法

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101471898B (zh) * 2007-12-28 2011-12-28 华为技术有限公司 一种接入网的保护方法、系统和虚拟接入边缘节点

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2157745A1 (en) * 2008-08-19 2010-02-24 Nokia Siemens Networks OY Method for routing data traffic in an access node and access node
CN102098799A (zh) * 2011-01-26 2011-06-15 北京邮电大学 一种实现异构网络融合的智能认知无线网络系统
CN104301812A (zh) * 2014-09-19 2015-01-21 中国电力科学研究院信息通信研究所 一种光网络系统和网络功能虚拟化方法

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018090677A1 (zh) * 2016-11-21 2018-05-24 华为技术有限公司 一种nf组件异常的处理方法、设备及系统
US11178000B2 (en) 2016-11-21 2021-11-16 Huawei Technologies Co., Ltd. Method and system for processing NF component exception, and device
CN112788006A (zh) * 2020-12-30 2021-05-11 锐捷网络股份有限公司 免认证mac地址的确定方法及装置
CN112788006B (zh) * 2020-12-30 2023-03-24 锐捷网络股份有限公司 免认证mac地址的确定方法及装置
CN112948184A (zh) * 2021-02-03 2021-06-11 重庆大学 一种基于多通信模式的信息收发控制系统
CN112948184B (zh) * 2021-02-03 2023-07-21 重庆大学 一种基于多通信模式的信息收发控制系统
CN113645078A (zh) * 2021-08-16 2021-11-12 烽火通信科技股份有限公司 一种网管业务自动延展的方法及系统
CN113645078B (zh) * 2021-08-16 2023-10-27 烽火通信科技股份有限公司 一种网管业务自动延展的方法及系统
CN113938332A (zh) * 2021-09-09 2022-01-14 中国联合网络通信集团有限公司 控制方法及通信装置
CN113938332B (zh) * 2021-09-09 2023-07-18 中国联合网络通信集团有限公司 控制方法及通信装置
CN115208612A (zh) * 2022-05-10 2022-10-18 北京市遥感信息研究所 一种复杂组网安全体系架构
CN115208612B (zh) * 2022-05-10 2023-10-13 北京市遥感信息研究所 一种复杂组网安全系统

Also Published As

Publication number Publication date
CN106161077B (zh) 2019-07-09
CN106161077A (zh) 2016-11-23

Similar Documents

Publication Publication Date Title
WO2016169246A1 (zh) 接入汇聚装置和认证注册方法
TWI555355B (zh) 一種同軸電纜媒體轉換器及流量交換的方法
TWI559705B (zh) 光纖同軸混合網路的統一網路管理系統和方法
US11038711B2 (en) Separating control plane function and forwarding plane function of broadband remote access server
US12021561B1 (en) Data provisioning
Lee et al. Design and implementation of a GPON-based virtual OpenFlow-enabled SDN switch
US8565235B2 (en) System and method for providing transparent LAN services
KR100563657B1 (ko) 이더넷 수동형 광가입자망에서 ｖｌａｎ 인식 및 ｌｌｉｄ관리 기능을 갖는 공유 랜 에뮬레이션 방법 및 장치
US9755749B2 (en) ONU, communication system and communication method for ONU
Parol et al. Towards networks of the future: SDN paradigm introduction to PON networking for business applications
WO2012139453A1 (zh) 一种dpoe系统及基于该系统业务自动配置方法和网络
EP3468219B1 (en) Method and apparatus for generating forwarding entries for devices in optical network
EP3244571B1 (en) Configuration data distribution method and apparatus
WO2022001840A1 (zh) 一种无源光网络的业务发放方法
WO2015021595A1 (zh) 业务通道配置方法和光线路终端以及无源光网络
JP7167161B2 (ja) 通信ネットワークおよび関連デバイス
EP2683113A1 (en) Energy efficient ethernet power management via SIEPON protocol
WO2016101525A1 (zh) 光网络单元dpu设备管理方法、装置及系统
WO2010028578A1 (zh) 一种光网络设备上感知服务提供商的方法、设备和系统
CN106162387B (zh) 光接入模块的认证注册方法、装置及系统
CN110073672A (zh) 一种管理光网络单元onu的方法、装置及系统
JP5294529B2 (ja) データストリームフィルタリング装置及び方法
US20030208525A1 (en) System and method for providing transparent lan services
Parol et al. Future proof access networks for B2B applications
Slyne et al. FLATLANd: A novel SDN-based telecoms network architecture enabling NFV and metro-access convergence

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15889729

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15889729

Country of ref document: EP

Kind code of ref document: A1