WO2017215492A1

WO2017215492A1 - Device detection method and apparatus

Info

Publication number: WO2017215492A1
Application number: PCT/CN2017/087342
Authority: WO
Inventors: 江文娜
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-06-16
Filing date: 2017-06-06
Publication date: 2017-12-21
Also published as: CN107517138A

Abstract

Provided are a device detection method and apparatus. The method comprises: when access authentication of an access device is passed, sending an address resolution protocol (ARP) detection message to the access device; and determining an on-line state of the access device according to response information with which the access device responds to the ARP detection message. By means of the present invention, the problems in the prior art of non-commonality and being unable to detect an on-line state of an access device in time are solved, so that the universality and timely acquisition of the on-line state of the access device are achieved, and management, such as the charging of the access device, is more flexible and accurate according to the detected on-line state.

Description

Device detection method and device

Technical field

The present invention relates to the field of Ethernet communications, and in particular to a device detection method and apparatus.

Background technique

The Institute of Electrical and Electronics Engineers (IEEE) 802.1x protocol optimizes the authentication method and authentication architecture, making it widely used in Ethernet access. On some of the access devices, such as the Internet Protocol Phone (IPPHONE), the network access server cannot implement the access through the standard protocol packets because the 802.1x client cannot be installed. Control of the device. Media Access Control (MAC) authentication solves the access authentication management of such access devices. However, how to detect the online status of access devices in time is still problematic. Most of the existing online detection mechanisms need to be implemented by special protocols, and specific deployments need to be made in dumb terminals, so that they are not universal.

For the related art, the online state problem of the access device cannot be detected universally and in time, and an effective solution has not been proposed.

Summary of the invention

The present invention provides a device detection method and apparatus to at least solve the problem that the online state of an access device cannot be detected universally and in a timely manner in the related art.

According to an aspect of an embodiment of the present invention, a device detection method is provided, including:

After the access authentication of the access device is passed, the address resolution protocol (ARP) detection packet is sent to the access device.

And determining, according to the response information of the foregoing ARP detection packet, the access device determines an online state of the access device.

In the embodiment of the present invention, performing access authentication on the access device includes:

And accessing the access device according to the user name and password of the foregoing access device stored in advance.

In the embodiment of the present invention, before sending the ARP detection packet to the access device, the method further includes:

Obtain the IP address of the above access device.

In the embodiment of the present invention, obtaining the IP address of the access device includes:

Obtaining an ARP request packet sent by the access device;

The IP address of the access device is parsed according to the ARP request packet.

In the embodiment of the present invention, determining, according to the response information of the ARP detection packet, that the access device responds to the online status of the access device, includes:

And setting, according to the response information of the ARP detection packet, the online detection flag of the access device, where the online detection flag is set to be valid when the response information is acquired, and the response information is not obtained. When the above online detection flag is set to be invalid;

The online status of the access device is determined according to the online detection flag bit and the online detection flag bit of the last ARP detection.

In the embodiment of the present invention, determining the online state of the access device according to the online detection flag bit and the online detection flag bit of the last ARP detection includes:

When the online detection flag bit and the online detection flag bit of the previous ARP detection are invalid, it is determined that the online state of the access device is offline.

In the embodiment of the present invention, the foregoing ARP detection packet includes:

a source network protocol IP field and a source media access control MAC field, where the source IP field and the source MAC field are configured through a specified command line of a network access server (NAS); or

The ARP detection packet includes: source network protocol IP field and source media access control MAC address. The field and the destination IP address field, where the source MAC field is configured as the MAC address of the network access server NAS, and the source IP field is configured as the third layer of the virtual local area network (VLAN) where the access device is located. The interface address or the broadcast IP address; the destination IP address field is configured as the IP address of the access device.

According to another aspect of an embodiment of the present invention, a device detecting apparatus is provided, including:

The sending module is configured to send an address resolution protocol ARP detection packet to the access device after the access authentication of the access device is passed;

The determining module is configured to determine an online state of the access device according to the response information of the access device in response to the ARP detection packet.

In the embodiment of the present invention, the device further includes:

The obtaining module is configured to obtain an IP address of the access device.

In the embodiment of the present invention, the determining module includes:

The setting unit is configured to set an online detection flag bit of the access device according to the response information of the access device in response to the ARP detection message, where the online detection flag bit is set to be valid when the response information is acquired, when Setting the above online detection flag bit to be invalid when the response information is not acquired;

The determining unit is configured to determine the online state of the access device according to the online detection flag bit and the online detection flag bit of the last ARP detection.

According to still another embodiment of the present invention, there is also provided a storage medium comprising a stored program, wherein the program is executed to perform the method of any of the above.

According to still another embodiment of the present invention, there is also provided a processor for running a program, wherein the program is executed to perform the method of any of the above.

After the access authentication of the access device is passed, the ARP detection packet is sent to the access device, and the access device determines the response device according to the response information of the ARP detection packet. online status. The invention solves the problem that the online state of the access device cannot be detected universally and in a timely manner, thereby achieving universal and timely access to the access device. The online status of the backup makes the management of the accounting of the access device more flexible and accurate according to the detected online status.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flow chart of a device detecting method according to an embodiment of the present invention;

2 is a flow chart of a device detection method according to an example of the present invention;

3 is a block diagram showing the structure of a device detecting apparatus according to an embodiment of the present invention;

4 is a block diagram showing another structure of a device detecting device according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

A device detection method is provided in this embodiment. FIG. 1 is a flowchart of a device detection method according to an embodiment of the present invention. As shown in FIG. 1 , the process includes the following steps:

Step S102: After the access authentication of the access device passes, send an address resolution protocol ARP detection packet to the access device.

Step S104: Determine, according to the response information of the ARP detection packet, the access device determines an online state of the access device.

After the access authentication of the access device is passed through the foregoing steps, the access device is configured. The device is configured to send an address resolution protocol (ARP) packet, and the access device determines the online state of the access device according to the response information of the ARP detection packet, which solves the problem that the existing device needs to be deployed in the access device. The problem of the online status of the access device is detected in a versatile and timely manner, so that the online status of the access device is obtained in a universal and timely manner, and the management of the charging of the access device is more flexible and accurate according to the detected online state.

In an optional example, performing access authentication on the access device in step S102 may include performing access authentication on the access device according to the user name and password of the access device that is stored in advance. After the access authentication of the access device is passed, the method further includes: obtaining an IP address of the access device, before sending the ARP detection packet to the access device. The obtaining the IP address of the access device includes: obtaining an ARP request packet sent by the access device, and parsing the IP address of the access device according to the ARP request packet.

The access device initiates an authentication request to the Radius server through a network access server (NAS). In the foregoing technical solution, after the authentication request of the access device is passed, the ARP request packet sent by the access device needs to be obtained. After the access device passes the authentication, the access device obtains the information of the service gateway through the address allocation of the Dynamic Host Configuration Protocol (DHCP). When the access device resolves the gateway information, it must send an ARP request to the gateway. Text. After the ARP request packet is obtained by the NAS device, the IP address information of the access device is parsed. When the ARP request packet is awaiting, the ARP timeout timer is set. If the timer expires, the ARP request packet sent by the access device is not received.

In a preferred example, step S104 can be implemented by the following scheme:

Step A: setting an online detection flag bit of the access device according to the response information of the access device in response to the ARP detection message, where the online detection flag is set to be valid when the response information is acquired, when the response information is Setting the above online detection flag is invalid when not acquired;

Step B: determining the online state of the access device according to the online detection flag bit and the online detection flag bit of the last ARP detection.

Preferably, step B can be specifically implemented by: when the online detection flag is And when the online detection flag bit of the previous ARP detection is invalid, it is determined that the online state of the access device is offline. The ARP detection packet may include: a source network protocol IP field and a source media access control MAC field, where the source IP field and the source MAC field are configured through a specified command line of the network access server NAS; or the ARP detection report The source network protocol IP field, the source media access control MAC field, and the destination IP address field, where the source MAC field is configured as the MAC address of the network access server NAS, and the source IP field is configured as the access device. The Layer 3 interface address or the broadcast IP address of the VLAN of the virtual local area network; the destination IP address field is configured as the IP address of the access device.

Specifically, the padding field in the ARP detection packet sent by the NAS device to the access device, including the source IP address and the source MAC address, may be configured through the command line of the NAS. If not specified, the configuration may be as follows: The MAC address of the NAS is used by the MAC. The source IP address is preferred to the Layer 3 interface address of the vlan on the NAS. If no Layer 3 interface is configured, the broadcast IP address is used. The destination IP address field in the ARP packet uses the IP address of the obtained access device. The detection can be performed by using the on-line detection. When the timing interval arrives, the ARP detection packet is sent to the access device. The NAS sets an online detection flag for the access device that is authenticated by the access authentication. When an ARP detection packet is sent to the access device, the online detection flag is updated according to the response information of the access device. After receiving the ARP response message, the flag is valid and the online detection timer is reset. If the response information is not received, the validity of the online detection flag of the access device is checked before the ARP detection packet is sent again. If the flag is invalid, the online status of the access device is invalid. The NAS will be based on the specific application scenario. The access device manages, for example, when the online management of the access device is determined to be invalid, the MAC address entry on the access device is deleted, and the notification server clears the access device.

Based on the above technical solution, a specific example is provided, and FIG. 2 is a flowchart of a device detecting method according to an example of the present invention. As shown in FIG. 2, the foregoing process specifically includes the following steps:

Step S202: The access device actively initiates an access authentication request. The dumb terminal of the 802.1x client cannot be installed, and the authentication is requested by the MAC authentication method of the NAS. After the access device passes the authentication, the NAS adds the MAC address of the access device to the MAC address management table of the NAS.

Step S204: Start acquiring an ARP request packet timeout timer, and wait for the ARP of the access device. Request a message. After the access device is authenticated and has obtained its own IP address, it will send an ARP request packet to request next hop information. The NAS retrieves the ARP request packet and parses the IP address information of the access device. After the ARP request packet timeout timer expires and the ARP response message is not received, the access device is considered offline.

Step S206: After obtaining the IP address of the access device, the NAS enables the online detection timer and sets the online detection flag. When the timing interval arrives, the NAS sends an ARP detection packet, and updates the online detection flag according to the response information.

Step S208: Receive the ARP response information, set the online detection flag bit of the access device to be valid, and repeat step S206. If the ARP response packet is not received, but the online detection flag is valid, step S206 is repeated when the timing interval arrives; if the current and previous online detection flag are invalid, the NAS performs offline identification, offline or Redirect and other operations, and notify the server user to go offline.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a plurality of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the above-described methods of various embodiments of the present invention.

In the embodiment, a device detecting device is also provided. As shown in FIG. 3, the device is used to implement the foregoing embodiments and preferred embodiments, and details are not described herein. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 3 is a structural block diagram of a device detecting apparatus according to an embodiment of the present invention. As shown in FIG. 3, the device includes the following modules:

The sending module 32 is configured to: after the access authentication of the access device passes, The device sends an address resolution protocol ARP detection packet.

The determining module 34 is connected to the sending module 32 and configured to determine the online state of the access device according to the response information of the access device in response to the ARP detection message.

After the access authentication of the access device is passed, the sending module 32 sends an address resolution protocol ARP detection packet to the access device, and the determining module 34 responds to the ARP of the sending module 32 according to the access device. The response information of the detection packet determines the online state of the access device, which solves the problem that the existing technology needs to be additionally deployed in the access device, and the online state of the access device cannot be detected in a universal manner and in time, thereby achieving universal The online status of the access device is known in time, and the management of the charging of the access device is more flexible and accurate according to the detected online state.

FIG. 4 is another structural block diagram of a device detecting apparatus according to an embodiment of the present invention. As shown in FIG. 4, the device further includes: an obtaining module 33, configured to acquire the access, in addition to the sending module 32 and the determining module 34. IP address of the device. The determining module 34 includes: a setting unit 342, configured to set an online detection flag of the access device according to the response information of the access device in response to the ARP detection message, where the online detection is set when the response information is acquired. The flag bit is valid, and the online detection flag bit is set to be invalid when the response information is not acquired; the determining unit 344 is connected to the setting unit 342, and is set to be based on the online detection flag bit and the online detection flag bit of the last ARP detection. Determine the online status of the access device.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple In the processor.

In summary, the embodiment of the present invention solves the problem that the existing technology needs to be additionally deployed in the access device, and the online state of the access device cannot be detected in a timely manner, thereby achieving universal and timely access. The online status of the device makes the management of the accounting of the access device more flexible and accurate according to the detected online status.

Embodiments of the present invention also provide a storage medium including a stored program, wherein the program described above executes the method of any of the above.

Optionally, in the embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.

Embodiments of the present invention also provide a processor for running a program, wherein the program is executed to perform the steps of any of the above methods.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

According to the foregoing technical solution provided by the embodiment of the present invention, after the access authentication of the access device is passed, the ARP detection packet is sent to the access device, and the response information of the ARP detection packet is determined according to the access device. The online status of the above access device. Solved the existing technology During the operation, the problem of the online status of the access device cannot be detected universally and in a timely manner, so that the online status of the access device can be obtained in a universal and timely manner, and the management of the access device is more flexible according to the detected online state. accurate.

Claims

A device detection method includes:

After the access authentication of the access device is passed, the address resolution protocol ARP detection packet is sent to the access device;

Determining an online state of the access device according to the response information of the access device in response to the ARP detection packet.
The method of claim 1, wherein performing access authentication on the access device comprises:

And performing access authentication on the access device according to the user name and password of the access device that are stored in advance.
The method of claim 1, wherein before the sending the ARP detection message to the access device, the method further includes:

Obtain an IP address of the access device.
The method of claim 3, wherein obtaining the IP address of the access device comprises:

Obtaining an ARP request packet sent by the access device;

And parsing an IP address of the access device according to the ARP request packet.
The method according to claim 1, wherein determining the online status of the access device according to the response information of the access device in response to the ARP detection message comprises:

Setting an online detection flag bit of the access device according to the response information of the access device in response to the ARP detection packet, where the online detection flag bit is set to be valid when the response information is acquired, Setting the online detection flag bit to be invalid when the response information is not acquired;

Determining an online state of the access device according to the online detection flag bit and an online detection flag bit of the last ARP detection.
The method according to claim 5, wherein determining the online state of the access device according to the online detection flag bit and the online detection flag bit of the last ARP detection comprises:

When the online detection flag bit and the online detection flag bit of the last ARP detection are invalid, it is determined that the online state of the access device is offline.
The method according to any one of claims 1 to 6, wherein the ARP detection message comprises:

a source network protocol IP field and a source medium access control MAC field, where the source IP field and the source MAC field are configured through a specified command line of the network access server NAS; or

The ARP detection packet includes: a source network protocol IP field, a source media access control MAC field, and a destination IP address field, where the source MAC field is configured as a MAC address of a network access server NAS, and the source IP field The configuration is the Layer 3 interface address or the broadcast IP address of the virtual local area network VLAN where the access device is located. The destination IP address field is configured as the IP address of the access device.
A device detecting device comprising:

a sending module, configured to send an address resolution protocol ARP detection packet to the access device after the access authentication of the access device is passed;

And a determining module, configured to determine an online state of the access device according to the response information of the access device in response to the ARP detection packet.
The device of claim 8 wherein the device further comprises:

The obtaining module is configured to obtain an IP address of the access device.
The apparatus of claim 8 wherein said determining module comprises:

a setting unit, configured to set an online detection flag bit of the access device according to the response information of the access device in response to the ARP detection message, where the online detection flag bit is set when the response information is acquired In order to be effective, setting the online detection flag bit to be invalid when the response information is not acquired;

The determining unit is configured to determine an online state of the access device according to the online detection flag bit and an online detection flag bit of the last ARP detection.
A storage medium, the storage medium comprising a stored program, wherein the program is executed to perform the method of any one of claims 1 to 7.
A processor for running a program, wherein the program is executed to perform the method of any one of claims 1 to 7.