WO2018019216A1 - Ap接入控制 - Google Patents

Ap接入控制 Download PDF

Info

Publication number
WO2018019216A1
WO2018019216A1 PCT/CN2017/094210 CN2017094210W WO2018019216A1 WO 2018019216 A1 WO2018019216 A1 WO 2018019216A1 CN 2017094210 W CN2017094210 W CN 2017094210W WO 2018019216 A1 WO2018019216 A1 WO 2018019216A1
Authority
WO
WIPO (PCT)
Prior art keywords
port number
master
connection request
address
internal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2017/094210
Other languages
English (en)
French (fr)
Inventor
郭玮维
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
New H3C Technologies Co Ltd
Original Assignee
New H3C Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by New H3C Technologies Co Ltd filed Critical New H3C Technologies Co Ltd
Publication of WO2018019216A1 publication Critical patent/WO2018019216A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2514—Translation of Internet protocol [IP] addresses between local and global IP addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2517—Translation of Internet protocol [IP] addresses using port numbers

Definitions

  • a WLAN (Wireless Local Area Networks) system can include two main parts, one is an Access Point (AP) and the other is an Access Point Controller (AC).
  • the AP can establish a connection with the AC.
  • the AP can be connected to the AP or the AP can be accessed by the AC.
  • the AC can send some access configurations to the AP.
  • the SSID Service Set Identifier
  • the cloud AC may include an AC pool, where the AC pool may include multiple ACs for connecting to the AP, and the AP may establish a connection and interact with the AC in the cloud AC through the Internet.
  • Each AC can occupy a public IP address. The existence of a large number of ACs in the cloud will cause a great waste of public IP resources.
  • FIG. 1 is a schematic structural diagram of a cloud AC deployment according to an example of the present application.
  • FIG. 2 is a schematic flowchart of an AP access control method according to an example of the present application.
  • FIG. 3 is a schematic diagram of tunnel forwarding of a message according to an example of the present application.
  • FIG. 4 is a hardware structural diagram of an access control AC device according to an example of the present application.
  • FIG. 5 is a functional block diagram of an AP access control logic according to an example of the present application.
  • FIG. 6 is a functional block diagram of AP access control logic provided in accordance with an example of the present application.
  • the AC deployed in the cloud can be called a cloud AC, and the AP needs to connect to the cloud AC through the internet.
  • a cloud AC 12 and an authentication server 13 may be disposed in the data center 11, wherein the authentication server 13 may include an AAA server 131, a Portal server 132, and the like.
  • the AP can connect to the cloud AC 12 via the Internet and a gateway.
  • AP 14 and AP 15 are connected to gateway 16
  • AP 17 is connected to gateway 18, and gateway 16 and gateway 18 are both connected to cloud AC 12 via Internet 19, so that AP 14, AP 15, and AP 17 can also pass.
  • the respective connected gateways and Internet 19 are connected to the cloud AC 12.
  • the cloud AC 12 may include an active AC (Anchor AC) 121 and at least one internal AC (Inner AC), for example, an internal AC 122, an internal AC 123, and an internal AC 124.
  • Anchor AC Active AC
  • Inner AC Inner AC
  • the cloud AC 12 may Includes a larger number of internal ACs.
  • Each internal AC can be connected to the master AC 121 and the authentication server 13, respectively.
  • the active AC in the cloud AC can be set.
  • the AC 121 can occupy a public IP address.
  • the internal AC does not occupy the public IP address.
  • the internal AC has a private IP address and can interact with the active AC or the authentication server through the private IP address. Therefore, the cloud AC provided in the present disclosure occupies only one public network IP address regardless of the number of internal ACs.
  • FIG. 2 illustrates a schematic flowchart of an AP access control method, which may be performed by a master AC in a cloud AC, as shown in FIG. 2, and in conjunction with FIG. 1, the method may include the following steps 201 to 203.
  • Step 201 The master AC can receive the discovery request packet sent by the AP, and can allocate an AC to the AP according to a predetermined rule.
  • all APs can preset the domain name or IP address of the master AC at the factory.
  • the AP 14 in FIG. 1 can obtain the IP address of the master AC 121 through the DNS server through the domain name of the master AC 121 preset in the device, that is, the public network of the master AC 121. IP address.
  • the AP 14 can send a Discovery Request Message to the master AC 121 according to the IP address of the master AC 121.
  • the master AC 121 may allocate an AC to the AP 14, and the allocated AC may be an internal AC of at least one of the internal ACs, or may be the master AC itself.
  • the master AC or the internal AC can use the port number identifier.
  • the master AC 121 can The IP address of the AP 14 or the AP identifier runs a hash algorithm to obtain a port number, and selects the master AC or the internal AC corresponding to the port number, and assigns it to the AP 14 to establish a connection with the AP 14.
  • the port number obtained by running the hash algorithm above may be the proxy port number of the internal AC or the access port number of the active AC.
  • the master AC 121 can assign a proxy port number to each internal AC of the connection, and different internal ACs have different proxy port numbers.
  • the allocation mode of the proxy port number is not limited, for example, it may be randomly assigned, or may be incrementally allocated.
  • the main control AC 121 can set the private IP address of the internal AC, the access port number of the internal AC (that is, the protocol port number of the protocol port that interacts with the AP, the internal AC can listen to the protocol port and wait for the AP to connect), and the internal AC.
  • the mapping between the proxy port numbers is stored in the address translation entry of the master AC 121. As shown in Table 1 below, an address translation entry on the master AC 121 is illustrated.
  • Table 1 Address translation entries of the master AC
  • each internal AC may be stored on the main control AC 121, and when receiving the discovery request message sent by the AP 14, an internal AC is selected from the plurality of internal ACs to be allocated to the AP 14 according to a predetermined rule.
  • the main control AC 121 allocates an internal AC to the AP 14, there may be multiple predetermined rules, and the present example is not limited.
  • the master AC 121 may perform hashing according to the AP identifier of the AP 14 (the identifier may be an AP name), and obtain the proxy port number, and assign the internal AC corresponding to the proxy port number obtained by the hash to the AP 14 . .
  • the master AC 121 may perform hashing according to the IP address of the AP 14 to obtain a proxy port number, and select an internal AC corresponding to the proxy port number to be assigned to the AP 14. .
  • the master AC 121 can determine the AC corresponding to the AP 14 according to the corresponding relationship between the AP 14 and the AC configured on the master AC 121, that is, the AP can be assigned to the AP according to the service requirement.
  • the AP corresponds to an internal AC or to the active AC.
  • step 202 is continued.
  • Step 202 When the allocated AC is an internal AC of the at least one internal AC, the master AC may return the proxy port number of the allocated AC and the public network IP address of the master AC to the AP. Discovery response message.
  • the master AC 121 may return a Discovery Response message to the AP 14, and the public response IP address of the master AC 121 may be carried in the discovery response packet. And the proxy port number corresponding to the internal AC assigned to the AP 14 in step 201.
  • Step 203 The master AC can receive a connection request message sent by the AP, where the connection request message includes: a proxy port number of the internal AC, and the public network IP address.
  • the AP 14 may send a connection request message to the master AC 121 according to the IP address of the master AC 121 included in the discovery response message.
  • the request packet may carry the proxy port number of the internal AC included in the foregoing discovery response packet, and establish a connection with the internal AC corresponding to the proxy port number.
  • Step 204 The master AC may replace the proxy port number in the connection request packet with the assigned access port number of the AC, and may replace the public network IP address in the connection request packet with the allocated The private IP address of the AC to obtain the translated connection request packet.
  • Step 205 The master AC can forward the converted connection request message to the allocated AC, so that the allocated AC establishes a connection with the AP according to the received connection request message.
  • the master AC 121 can replace the proxy port number carried in the connection request packet with the corresponding internal AC according to the address translation entry stored in the master control AC 121. Enter the port number, and you can replace the public IP address of the AC 01 of the connection request packet with the private IP address of the internal AC that is queried, so as to obtain the converted connection request packet.
  • the master AC 121 can forward the converted connection request message to the corresponding internal AC, so that the corresponding internal AC can establish a connection with the AP 14 according to the received connection request message.
  • the internal AC can establish a connection with the AP 14 by referring to a technical means that the AC and the AP establish a connection, which are well known to those skilled in the art.
  • the cloud AC is configured as a master-controlled AC and an internal AC connection, and only the active AC occupies the public network IP address, and the internal AC uses the private network IP, and the active AC forwards the AP.
  • the connection request is made to the internal AC.
  • This method is equivalent to hiding the internal AC in the cloud AC.
  • the cloud AC interacts with the external network through the active AC.
  • the cloud AC only occupies one public IP address. No matter the number of internal ACs, it does not increase the number of public ACs. The occupation of network IP resources, thereby saving IP address resources.
  • each internal AC in the cloud AC shares the same public IP address, that is, the public IP address of the active AC.
  • the active AC can allocate different proxy ports to each internal AC.
  • AC pass Different types of proxy port numbers can be distinguished. This way, the number of internal ACs in the cloud AC can be expanded indefinitely. Regardless of the number of internal ACs, the master AC can be distinguished by different proxy port numbers. The management of the AC is also very convenient.
  • the active AC can allocate an internal AC to the AP and forward the interaction between the AP and the internal AC.
  • the active AC can also establish a connection with the AP.
  • the master AC allocates an AC to the AP according to a predetermined rule in step 201, for example, according to a preset correspondence, or by a hash algorithm, if the obtained port number is the access port of the master AC itself. If the number is the same, the active AC can carry the access port number of the master AC itself in the discovery response packet returned to the AP.
  • the AP can directly send the connection request carrying the access port number of the master AC to the master AC. Message. After receiving the connection request message, the master AC does not need to perform the above-mentioned related proxy port number and public network IP address translation operation, and can establish a connection with the AP.
  • the AP's offline process can refer to the technical means of AP offline, which is well known to those skilled in the art, and will not be described in detail herein.
  • the AP can forward authentication packets and data packets.
  • the local authentication mode of the cloud authentication can be used.
  • the data traffic of the user can be forwarded through the AP.
  • the internal AC and the authentication server for example, the AAA server and the portal server
  • the internal AC and the authentication server can directly pass the private network IP address of the intranet if the authentication server and the internal AC in the cloud are in the same intranet. Interact.
  • the authentication server can establish a VPN (Virtual Private Network) tunnel between the active AC and the active AC of the cloud AC, and the authentication between the internal AC and the authentication server is forwarded through the VPN tunnel. Message.
  • VPN Virtual Private Network
  • the master AC 31 deployed on the intranet of the authentication server can be connected to each authentication server, for example, the AAA server 32 and the portal server 33.
  • the master AC 31 can be associated with the cloud AC.
  • the AC 121 establishes a VPN tunnel through which the internal AC can interact with the authentication server.
  • the application provides an access control AC device for use as a master AC device in a cloud AC, and the cloud AC further includes at least one internal AC respectively connected to the master AC.
  • FIG. 4 is a hardware structural diagram of an access control AC device according to an example of the present application.
  • the AC device can include a processor 401, a machine readable storage medium 402 that stores machine executable instructions.
  • Processor 401 and machine readable storage medium 402 can communicate via system bus 403. And, by reading and executing machine executable instructions in the machine readable storage medium 402 corresponding to the logic of the AP access control, the processor 401 can perform the AP access control described above. method.
  • the machine-readable storage medium 402 referred to herein can be any electronic, magnetic, optical, or other physical storage device that can contain or store information such as executable instructions, data, and the like.
  • the machine-readable storage medium may be: RAM (Radom Access Memory), volatile memory, non-volatile memory, flash memory, storage drive (such as a hard disk drive), solid state drive, any type of storage disk. (such as a disc, DVD, etc.), or a similar storage medium, or a combination thereof.
  • the AP access control logic may include a discovery receiving module 51, a response sending module 52, a connection receiving module 53, and an address converting module 54.
  • the discovery receiving module 51 may be configured to receive a discovery request packet sent by the AP, and allocate an AC to the AP according to a predetermined rule, where the cloud AC further includes at least one internal AC respectively connected to the master AC. .
  • the response sending module 52 is configured to: when the allocated AC is an internal AC of the at least one internal AC, return a proxy port number carrying the allocated AC to the AP and a public network IP of the master AC The address of the discovery response message.
  • the connection receiving module 53 is configured to receive a connection request message sent by the AP, where the connection request message includes the proxy port number and the public network IP address.
  • the address translation module 54 may be configured to replace the proxy port number in the connection request packet with the assigned access port number of the AC, and replace the public network IP address in the connection request packet with the allocated The private network IP address of the internal AC to obtain the converted connection request message, and forward the converted connection request message to the allocated AC, so that the allocated AC is based on the received The converted connection request message establishes a connection with the AP.
  • the above-mentioned discovery receiving module 51 may be specifically configured to perform a hash to obtain a port number according to an IP address or an AP identifier of the AP, and allocate an AC corresponding to the port number to the AP;
  • the AC corresponding to the port number is one of the at least one internal AC or the master AC.
  • the discovery receiving module 51 may be specifically configured to allocate an AC corresponding to the AP to the AP according to the corresponding relationship between the AP and the AC configured on the active AC.
  • the AP access control logic further includes an AC management module 55, as shown in FIG. 6, configured to respectively allocate a corresponding proxy port number for at least one internal AC connected to the master AC;
  • the mapping between the private IP address, access port number, and proxy port number of the AC is stored in the address translation entry.
  • the address translation module 54 may be specifically configured to determine, according to the address translation entry, The internal AC corresponding to the proxy port number in the connection request packet; the proxy port number in the connection request packet is replaced with the determined internal AC access port number, and the public network in the connection request packet is The IP address is replaced with the private IP address of the determined internal AC.
  • the response sending module 52 is further configured to: when the allocated AC is the master AC, return a discovery response packet carrying the access port number of the master AC to the AP;
  • the ingress control logic further includes a connection processing module 56 as shown in FIG. 6, which is configured to establish a connection with the AP when receiving a connection request message carrying the access port number of the master AC.
  • the foregoing AP access control logic further includes a tunnel forwarding module 57 as shown in FIG. 6, which can be used for a master AC connected to the authentication server to establish a virtual private network VPN tunnel; and forward the An authentication packet between the internal AC and the authentication server.
  • a tunnel forwarding module 57 as shown in FIG. 6, which can be used for a master AC connected to the authentication server to establish a virtual private network VPN tunnel; and forward the An authentication packet between the internal AC and the authentication server.
  • machine readable storage medium comprising machine executable instructions, such as machine readable storage medium 402 of FIG. 4, the machine executable instructions being executable by a processor in a host AC device 401 is executed to implement the AP access control method described above.
  • the processor 501 can perform the following operations:
  • the allocated AC is an internal AC in the at least one internal AC, returning, to the AP, a discovery response message carrying the proxy port number of the assigned AC and the public network IP address of the master AC;
  • connection request message includes the proxy port number and the public network IP address
  • the proxy port number in the connection request packet is replaced with the assigned access port number of the AC, and the public network IP address in the connection request packet is replaced with the private IP address of the assigned AC.
  • the AP is assigned an AC according to a predetermined rule
  • the machine executable instructions causing the processor to: perform a hash according to an IP address or an AP identifier of the AP, and obtain the port number Corresponding AC is allocated to the AP; wherein the AC corresponding to the port number is an internal AC of the at least one internal AC or The master AC.
  • the AP is allocated an AC according to a predetermined rule
  • the machine executable instruction causes the processor to: correspond to the AP according to a correspondence between an AP and an AC configured in advance on the master AC.
  • the AC is assigned to the AP.
  • the machine executable instructions further cause the processor to: respectively assign a corresponding proxy port number for at least one internal AC connected to the master AC; and connect the private network IP address of each internal AC
  • the mapping between the port number and the proxy port number is stored in the address translation entry.
  • the proxy port number in the connection request message is replaced with the assigned access port number of the AC
  • the public network IP address in the connection request packet is replaced with the private address of the assigned AC.
  • the machine executable instruction causes the processor to: determine, according to the address translation entry, an internal AC corresponding to a proxy port number in the connection request message; and to send the connection request packet
  • the proxy port number in the replacement is replaced by the determined access port number of the internal AC
  • the public network IP address in the connection request packet is replaced with the determined private IP address of the internal AC.
  • the machine executable instructions further cause the processor to: return, when the assigned AC is the master AC, a discovery response message carrying an access port number of the master AC to the AP And when the connection request message carrying the access port number of the master AC is received, establishing a connection with the AP.
  • the machine executable instructions further cause the processor to: establish a virtual private network VPN tunnel with a master AC connected to the authentication server; and forward the internal AC to the authentication server through the VPN tunnel Authentication message.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本申请提供一种AP接入控制方法和一种主控AC设备，其中方法包括：主控AC接收AP发送的发现请求报文，并根据预定规则为AP分配AC；当分配的AC是所述至少一个内部AC中的一个内部AC时，向AP返回携带主控AC为所分配的AC分配的代理端口号以及主控AC的公网IP地址的发现响应报文。主控AC可接收AP发送的连接请求报文，该连接请求报文中包括：代理端口号以及公网IP地址。主控AC可将连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将公网IP地址替换为内部AC的私网IP地址后转发给该AC。

Description

AP接入控制
相关申请的交叉引用
本专利申请要求于2016年7月26日提交的、申请号为201610601026.0、发明名称为“一种AP接入控制方法和装置”的中国专利申请的优先权，该申请的全文以引用的方式并入本文中。
背景技术
WLAN(Wireless Local Area Networks，无线局域网)系统可包括两个主要部分，一个是AP(Access Point，接入点)，一个是AC(Access Point Controller，接入控制器)。AP可以与AC建立连接,可被称为AP上线或AP接入，由AC对AP进行管理，例如，AC可以向AP下发一些接入配置，比如，SSID(Service Set Identifier，服务集标识)信息、加密方式等。当将AC部署在云端时，该AC可以称为“云AC”。相关技术中，云AC可以包括一个AC池，该AC池中可以包括多个用于连接AP的AC，AP可以通过互联网与云AC中的AC之间建立连接，并进行交互。每个AC可以占用一个公网IP地址，云端大量AC的存在将对公网IP资源造成很大浪费。
附图说明
图1是根据本申请一示例提供的一种云AC部署的示意性结构图。
图2是根据本申请一示例提供的一种AP接入控制方法的示意性流程图。
图3是根据本申请一示例提供的一种报文的隧道转发示意图。
图4是根据本申请一示例提供的一种接入控制AC设备的硬件结构图。
图5是根据本申请一示例提供的一种AP接入控制逻辑的功能模块框图。
图6是根据本申请一示例提供的AP接入控制逻辑的功能模块框图。
具体实施方式
下面将结合本申请实施例中的附图，对本申请实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本申请一部分实施例，而不是全部的实施例。基于本申请中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本申请保护的范围。
在云端部署的AC可称为云AC，AP需要通过互联网(internet)与云AC连接。在图1示例的一种云AC部署的示意性结构中，数据中心11中可以设置云AC 12和认证服务器13，其中，认证服务器13可以包括AAA服务器131、Portal服务器132等。AP可以通过互联网以及网关与云AC 12连接。例如，如图1示例，AP 14和AP 15连接在网关16上，AP 17连接网关18，网关16和网关18都通过互联网19连接云AC 12，从而AP 14、AP 15和AP 17也可以通过各自连接的网关及互联网19与云AC 12连接。
本例子中，云AC 12中可以包括主控AC(Anchor AC)121以及至少一个内部AC(Inner AC)，例如，内部AC 122、内部AC 123和内部AC 124，当然，该云AC 12中可以包括更多数量的内部AC。各内部AC可以分别与主控AC 121、以及认证服务器13连接。
为了节省云AC中的AC数量较多时对公网IP地址资源，本公开中，可以设置云AC中的主控AC，如图1所示的AC 121，可占用一个公网IP地址，而各个内部AC并不占用公网IP，内部AC具有私网IP地址，并可以通过该私网IP地址与主控AC或认证服务器之间进行交互。因此，在本公开提供的云AC，不论其内部AC的数量的多少，都只占用一个公网IP地址。
图2示例了AP接入控制方法的示意性流程图，该方法可以由云AC中的主控AC执行，如图2所示，并结合图1，该方法可以包括如下所示步骤201至步骤203。
步骤201，主控AC可接收AP发送的发现请求报文，并可根据预定规则为AP分配AC。
本例子中，所有AP可以在出厂时均预置主控AC的域名或IP地址。以预置域名为例，例如图1中的AP 14可以通过预置在设备内部的主控AC 121的域名，经DNS服务器查找得到主控AC 121的IP地址，即主控AC 121的公网IP地址。AP 14可以根据主控AC 121的IP地址，向主控AC 121发送发现请求报文(Discovery Request Message)。
主控AC 121在接收到上述发现请求报文后，可以为AP 14分配AC，所分配的AC可以是其中至少一个内部AC中的一个内部AC，或者也可以是主控AC本身。其中，不论是主控AC或者内部AC可以都使用端口号标识，主控AC 121在接收到发现请求报文时，可以根据 AP 14的IP地址或者AP标识运行哈希算法得到一个端口号，并选择该端口号对应的主控AC或者内部AC，分配给AP 14，使之与AP 14建立连接。
上述运行哈希算法得到的端口号可以为内部AC的代理端口号或者主控AC的接入端口号。
本例子中，主控AC 121可以为连接的每一个内部AC分配一个代理端口号，不同的内部AC具有不同的代理端口号。该代理端口号的分配方式不做限制，比如可以随机分配，或者也可以递增分配等。主控AC 121可以将内部AC的私网IP地址、内部AC的接入端口号(即与AP交互的协议端口的协议端口号，内部AC可以监听该协议端口等待AP连接)、以及内部AC的代理端口号之间的对应关系，存储在主控AC 121的地址转换表项中。如下表1，示例了一种主控AC 121上的地址转换表项。
内部AC的私网IP 内部AC的接入端口号 内部AC的代理端口号
172.176.1.2 5246 10023
表1 主控AC的地址转换表项
主控AC 121上可以存储针对每个内部AC的上述对应关系，并在接收到AP 14发送的发现请求报文时，根据预定规则由多个内部AC中选择一个内部AC分配给AP 14。主控AC 121为AP 14分配内部AC时，所依据的预定规则可以有多种，本例子不做限制，
例如，主控AC 121可以根据AP 14的AP标识(该标识可以是AP名称)，执行哈希得到所述代理端口号，并将哈希得到的该代理端口号对应的内部AC分配给AP 14。
再例如，主控AC 121可根据AP 14的IP地址进行哈希得到代理端口号，选择该代理端口号对应的内部AC分配给AP 14。.
再例如，主控AC 121还可以根据预先在主控AC 121上配置的AP 14与AC的对应关系，确定出AP 14对应的AC，即可以是根据业务需要，指定将某个AP分配在某个AC下，比如，将AP与一个内部AC对应，或者与主控AC对应。
本例子中，假设主控AC根据预定规则为AP选择的AC是内部AC，则继续执行步骤202。
步骤202，当分配的AC是上述至少一个内部AC中的一个内部AC时，所述主控AC可向所述AP返回所分配的AC的代理端口号以及所述主控AC的公网IP地址的发现响应报文。
例如，主控AC 121在接收到上述发现请求报文后，可以向AP 14返回一个发现响应报文(Discovery Response Message)，在该发现响应报文中可携带主控AC 121的公网IP地址、以及在步骤201中为AP 14分配的内部AC对应的代理端口号。
步骤203，主控AC可接收AP发送的连接请求报文，所述连接请求报文包括：所述内部AC的代理端口号、以及所述公网IP地址。
本例子中，AP 14在接收到主控AC 121发送的发现响应报文时，可以根据发现响应报文中包括的主控AC 121的IP地址向主控AC 121发送连接请求报文，该连接请求报文中可携带前述的发现响应报文中包括的内部AC的代理端口号，以与该代理端口号对应的内部AC建立连接。
步骤204，主控AC可将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，并可将该连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址，以得到转换后的连接请求报文。
步骤205：主控AC可将转换后的连接请求报文转发给所分配的AC，以使得所分配的AC根据接收到的所述转换后的连接请求报文与所述AP建立连接。
例如，主控AC 121在接收到AP 14发送的连接请求报文后，可以依据主控AC 121存储的地址转换表项，将连接请求报文中携带的代理端口号替换为对应内部AC的接入端口号,并可以将连接请求报文中的主控AC 121的公网IP地址替换为对应该查询到的内部AC的私网IP地址，从而得到转换后的连接请求报文。
主控AC 121可以将转换后的连接请求报文转发给对应的内部AC，以使得该对应的内部AC可根据收到的该转换后的连接请求报文与AP 14建立连接。例如，该内部AC收到前述转换后的连接请求报文后，可以借鉴本领域技术人员熟知的AC与AP建立连接的技术手段，与AP 14建立连接。
本例子的AP接入控制方法，通过将云AC设置为主控AC和内部AC连接的架构，并且只有主控AC占用公网IP地址，内部AC使用私网IP，由主控AC转发AP的连接请求给内部AC。这种方式相当于将内部AC都隐藏在云AC内部，云AC对外通过主控AC与外部网络交互，云AC只占用一个公网IP即可，不论内部AC的数量多少，不会增加对公网IP资源的占用，从而节省了IP地址资源。
上述方式中，云AC内部的各个内部AC共享相同的公网IP地址即主控AC的公网IP地址，并且，主控AC可以通过为各个内部AC分配不同的代理端口号，将不同的内部AC通 过不同的代理端口号进行区分，这种方式可以使得云AC内部的内部AC的数量可以无限扩充，不论内部AC的数量增加多少，主控AC只要通过不同的代理端口号区分即可，对内部AC的管理也非常方便。
此外，主控AC不仅可以为AP分配内部AC，并转发AP与内部AC之间的交互报文，并且，该主控AC本身也可以与AP建立连接。
例如，当主控AC在步骤201中根据预定规则为AP分配AC时，例如，根据预设的对应关系分配，或者通过哈希算法分配，如果得到的端口号是主控AC自身的接入端口号，则主控AC可以在向AP返回的发现响应报文中携带主控AC自身的接入端口号.该AP可以直接向主控AC发送携带该主控AC的接入端口号的连接请求报文。主控AC在接收到该连接请求报文后，不需要执行上述相关代理端口号和公网IP地址转换操作，可与该AP建立连接。
AP与云AC，如内部AC或主控AC，建立连接后，AP的下线过程可借鉴本领域技术人员熟知的AP下线的技术手段，这里不再详述。
AP与云AC连接后，AP可以转发用户的认证报文和数据报文。其中，在数据报文转发时，可以使用云端认证本地转发的方式，比如用户的数据流量可以通过AP转发。而在认证报文的转发时，如果认证服务器和上述云AC中的内部AC位于同一内网，则内部AC与认证服务器(例如，AAA服务器、Portal服务器)可以直接通过该内网的私网IP进行交互。
而当内部AC与认证服务器不在同一内网时，可以在认证服务器所在的内网额外部署一台主控AC。认证服务器可通过该额外部署的主控AC与云AC的主控AC之间建立VPN(Virtual Private Network，虚拟专用网络)隧道，通过该VPN隧道，转发所述内部AC与认证服务器之间的认证报文。
例如参见图3所示，认证服务器所在的内网部署的主控AC31，可以分别与各个认证服务器连接，例如，AAA服务器32和Portal服务器33，，该主控AC31可以与云AC中的主控AC 121建立VPN隧道，通过该VPN隧道，内部AC可以与认证服务器之间进行交互。
本申请提供一种接入控制AC设备，用作云AC中的主控AC设备，所述云AC还包括分别与所述主控AC连接的至少一个内部AC。
参见图4，图4是根据本申请一示例提供的一种接入控制AC设备的硬件结构图。该AC设备可包括处理器401、存储有机器可执行指令的机器可读存储介质402。处理器401与机器可读存储介质402可经由系统总线403通信。并且，通过读取并执行机器可读存储介质402中与AP接入控制的逻辑对应的机器可执行指令，处理器401可执行上文描述的AP接入控制 方法。
本文中提到的机器可读存储介质402可以是任何电子、磁性、光学或其它物理存储装置，可以包含或存储信息，如可执行指令、数据，等等。例如，机器可读存储介质可以是：RAM(Radom Access Memory，随机存取存储器)、易失存储器、非易失性存储器、闪存、存储驱动器(如硬盘驱动器)、固态硬盘、任何类型的存储盘(如光盘、DVD等)，或者类似的存储介质，或者它们的组合。
如图5所示，从功能上划分，上述AP接入控制逻辑可以包括发现接收模块51、响应发送模块52、连接接收模块53以及地址转换模块54。
其中，上述发现接收模块51，可用于接收AP发送的发现请求报文，并根据预定规则为所述AP分配AC其中，所述云AC还包括分别与所述主控AC连接的至少一个内部AC。
上述响应发送模块52，可用于当分配的AC是所述至少一个内部AC中的一个内部AC时，向所述AP返回携带所分配的AC的代理端口号以及所述主控AC的公网IP地址的发现响应报文。
上述连接接收模块53，可用于接收所述AP发送的连接请求报文，所述连接请求报文中包括所述代理端口号以及所述公网IP地址。
上述地址转换模块54，可用于将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的所述内部AC的私网IP地址，以得到转换后的连接请求报文，并将所述转换后的连接请求报文转发给所分配的AC，以使得该所分配的AC根据接收到的所述转换后的连接请求报文与所述AP建立连接。
根据一个示例，上述发现接收模块51，可具体用于根据所述AP的IP地址或者AP标识，执行哈希得到端口号，并将该端口号对应的AC分配给所述AP；其中，所述端口号对应的AC为所述至少一个内部AC中的一个内部AC或者所述主控AC。
根据一个示例，上述发现接收模块51，可具体用于根据预先在所述主控AC上配置的AP与AC的对应关系，将所述AP对应的AC分配给该AP。
根据一个示例，上述AP接入控制逻辑还包括如图6所示的AC管理模块55，可用于为连接所述主控AC的至少一个内部AC，分别分配对应的代理端口号；将每个内部AC的私网IP地址、接入端口号、代理端口号的对应关系，存储在地址转换表项中。
根据一个示例，上述地址转换模块54，可具体用于根据所述地址转换表项，确定与所述 连接请求报文中的代理端口号对应的内部AC；将所述连接请求报文中的代理端口号替换为所确定的内部AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所确定的内部AC的私网IP地址。
根据一个示例，上述响应发送模块52，还可用于当分配的AC是所述主控AC时，向所述AP返回携带所述主控AC的接入端口号的发现响应报文；上述AP接入控制逻辑还包括如图6所示的连接处理模块56，可用于接收到携带有所述主控AC的接入端口号的连接请求报文时，与所述AP建立连接。
根据一个示例，上述AP接入控制逻辑还包括如图6所示的隧道转发模块57，可用于与认证服务器连接的主控AC，建立虚拟专用网络VPN隧道；通过所述VPN隧道，转发所述内部AC与所述认证服务器之间的认证报文。
根据本公开的示例，还提供了一种包括机器可执行指令的机器可读存储介质，例如图4中的机器可读存储介质402，所述机器可执行指令可由主控AC设备中的处理器401执行以实现以上描述的AP接入控制方法。
具体地，通过调用并执行机器可读存储介质402中与AP接入控制逻辑对应的机器可执行指令，所述处理器501可执行以下操作：
接收AP发送的发现请求报文；
根据预定规则为所述AP分配AC；
当分配的AC是所述至少一个内部AC中一个内部AC时，向所述AP返回携带所分配的AC的代理端口号以及所述主控AC的公网IP地址的发现响应报文；
接收所述AP发送的连接请求报文，所述连接请求报文中包括所述代理端口号以及所述公网IP地址；
将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址，以得到转换后的连接请求报文；
将所述转换后的连接请求报文转发给所分配的AC，以使得该所分配的AC根据接收到的所述转换后的连接请求报文与所述AP建立连接。
根据一个示例，在根据预定规则为所述AP分配AC，所述机器可执行指令促使所述处理器：根据所述AP的IP地址或者AP标识，执行哈希得到端口号，并将该端口号对应的AC分配给所述AP；其中，所述端口号对应的AC为所述至少一个内部AC中的一个内部AC或 者所述主控AC。
根据一个示例，在根据预定规则为所述AP分配AC，所述机器可执行指令促使所述处理器：根据预先在所述主控AC上配置的AP与AC的对应关系，将所述AP对应的AC分配给该AP。
根据一个示例，所述机器可执行指令还促使所述处理器：为连接所述主控AC的至少一个内部AC，分别分配对应的代理端口号；将每个内部AC的私网IP地址、接入端口号、代理端口号的对应关系，存储在地址转换表项中。
根据一个示例，在将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址时，所述机器可执行指令促使所述处理器：根据所述地址转换表项，确定与所述连接请求报文中的代理端口号对应的内部AC；将所述连接请求报文中的代理端口号替换为所确定的内部AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所确定的内部AC的私网IP地址。
根据一个示例，所述机器可执行指令还促使所述处理器：当分配的AC是所述主控AC时，向所述AP返回携带所述主控AC的接入端口号的发现响应报文；接收到携带有所述主控AC的接入端口号的连接请求报文时，与所述AP建立连接。
根据一个示例，所述机器可执行指令还促使所述处理器：与认证服务器连接的主控AC，建立虚拟专用网络VPN隧道；通过所述VPN隧道，转发所述内部AC与认证服务器之间的认证报文。需要说明的是，在本文中，诸如第一和第二等之类的关系术语仅仅用来将一个实体或者操作与另一个实体或操作区分开来，而不一定要求或者暗示这些实体或操作之间存在任何这种实际的关系或者顺序。术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含，从而使得包括一系列要素的过程、方法、物品或者设备不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、物品或者设备所固有的要素。在没有更多限制的情况下，由语句“包括一个……”限定的要素，并不排除在包括所述要素的过程、方法、物品或者设备中还存在另外的相同要素。
以上对本发明实施例所提供的方法和装置进行了详细介绍，本文中应用了具体个例对本发明的原理及实施方式进行了阐述，以上实施例的说明只是用于帮助理解本发明的方法及其核心思想；同时，对于本领域的一般技术人员，依据本发明的思想，在具体实施方式及应用范围上均会有改变之处，综上所述，本说明书内容不应理解为对本发明的限制。

Claims (15)

  1. 一种接入点AP接入控制方法，包括：
    云接入控制器AC中的主控AC接收AP发送的发现请求报文，其中，所述云AC还包括分别与所述主控AC连接的至少一个内部AC；
    所述主控AC根据预定规则为所述AP分配AC；
    当分配的AC是所述至少一个内部AC中的一个内部AC时，所述主控AC向所述AP返回携带所分配的AC的代理端口号以及所述主控AC的公网IP地址的发现响应报文；
    所述主控AC接收所述AP发送的连接请求报文，所述连接请求报文中包括所述代理端口号以及所述公网IP地址；
    所述主控AC将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址，以得到转换后的连接请求报文；
    所述主控AC将所述转换后的连接请求报文转发给所分配的AC，以使得该所分配的AC根据接收到的所述转换后的连接请求报文与所述AP建立连接。
  2. 根据权利要求1所述的方法，其中，根据预定规则为所述AP分配AC，包括：
    所述主控AC根据所述AP的IP地址或者AP标识，执行哈希得到端口号，
    所述主控AC将该端口号对应的AC分配给所述AP；其中，所述端口号对应的AC为所述至少一个内部AC中的一个内部AC或者所述主控AC。
  3. 根据权利要求1所述的方法，其中，根据预定规则为所述AP分配AC，包括：
    所述主控AC根据预先在所述主控AC上配置的AP与AC的对应关系，将所述AP对应的AC分配给该AP。
  4. 根据权利要求1所述的方法，还包括：
    所述主控AC为连接所述主控AC的至少一个内部AC，分别分配对应的代理端口号；
    所述主控AC将每个内部AC的私网IP地址、接入端口号、代理端口号的对应关系，存储在地址转换表项中。
  5. 根据权利要求4所述的方法，其中，将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址，包括：
    所述主控AC根据所述地址转换表项，确定与所述连接请求报文中的代理端口号对应的内部AC；
    所述主控AC将所述连接请求报文中的代理端口号替换为所确定的内部AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所确定的内部AC的私网IP地址。
  6. 根据权利要求1所述的方法，还包括：
    当分配的AC是所述主控AC时，所述主控AC向所述AP返回携带所述主控AC的接入端口号的发现响应报文；
    所述主控AC在接收到所述AP发送的携带有所述主控AC的接入端口号的连接请求报文时，与所述AP建立连接。
  7. 根据权利要求1所述的方法，还包括：
    所述主控AC与认证服务器连接的主控AC，建立虚拟专用网络VPN隧道；
    所述主控AC通过所述VPN隧道，转发所述内部AC与所述认证服务器之间的认证报文。
  8. 一种接入控制AC设备，用作云AC中的主控AC设备，所述云AC还包括分别与所述主控AC连接的至少一个内部AC，其中，所述AC设备包括处理器，通过调用机器可读存储介质上存储的与AP接入控制逻辑对应的机器可执行指令，所述处理器被促使：
    接收AP发送的发现请求报文；
    根据预定规则为所述AP分配AC；
    当分配的AC是所述至少一个内部AC中的一个内部AC时，向所述AP返回携带所分配的AC的代理端口号以及所述AC设备的公网IP地址的发现响应报文；
    接收所述AP发送的连接请求报文，所述连接请求报文中包括所述代理端口号以及所述公网IP地址；
    将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址，以得到转换后的连接请求报文；
    将所述转换后的连接请求报文转发给所分配的AC，以使得该所分配的AC根据接收到的所述转换后的连接请求报文与所述AP建立连接。
  9. 根据权利要求8所述的AC设备，其中，在根据预定规则为所述AP分配AC时，所述机器可执行指令促使所述处理器：
    根据所述AP的IP地址或者AP标识，执行哈希得到端口号，并
    将该端口号对应的AC分配给所述AP；其中，所述端口号对应的AC为所述至少一个内部AC中的一个内部AC或者所述AC设备。
  10. 根据权利要求8所述的AC设备，其中，在根据预定规则为所述AP分配AC时，所述机器可执行指令促使所述处理器：
    根据预先在所述AC设备上配置的AP与AC的对应关系，将所述AP对应的AC分配给该AP。
  11. 根据权利要求8所述的AC设备，其中，所述机器可执行指令还促使所述处理器：
    为连接所述AC设备的至少一个内部AC，分别分配对应的代理端口号；
    将每个内部AC的私网IP地址、接入端口号、代理端口号的对应关系，存储在地址转换表项中。
  12. 根据权利要求11所述的设备，其中，在将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址时，所述机器可执行指令促使所述处理器：
    根据所述地址转换表项，确定与所述连接请求报文中的代理端口号对应的内部AC；
    将所述连接请求报文中的代理端口号替换为所确定的内部AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所确定的内部AC的私网IP地址。
  13. 根据权利要求8所述的设备，其中，所述机器可执行指令还促使所述处理器：
    当分配的AC是所述AC设备时，向所述AP返回携带所述AC设备的接入端口号的发现响应报文；
    接收到携带有所述AC设备的接入端口号的连接请求报文时，与所述AP建立连接。
  14. 根据权利要求8所述的设备，所述机器可执行指令还促使所述处理器：
    与认证服务器连接的主控AC，建立虚拟专用网络VPN隧道；
    通过所述VPN隧道，转发所述内部AC与所述认证服务器之间的认证报文。
  15. 一种机器可读存储介质，其上存储有与AP接入控制逻辑对应的机器可执行指令，通过调用所述机器可执行指令，云接入控制AC中的主控AC被促使：
    接收AP发送的发现请求报文；
    根据预定规则为所述AP分配所述云AC中的AC，所述云AC还包括与所述主控AC连接的至少一个内部AC；
    当分配的AC是所述至少一个内部AC中的一个内部AC时，向所述AP返回携带所分配的AC的代理端口号以及所述AC设备的公网IP地址的发现响应报文；
    接收所述AP发送的连接请求报文，所述连接请求报文中包括所述代理端口号以及所述公网IP地址；
    将所述连接请求报文中的代理端口号替换为所分配的AC的接入端口号，将所述连接请求报文中的公网IP地址替换为所分配的AC的私网IP地址，以得到转换后的连接请求报文；
    将所述转换后的连接请求报文转发给所分配的AC，以使得该所分配的AC根据接收到的所述转换后的连接请求报文与所述AP建立连接。
PCT/CN2017/094210 2016-07-26 2017-07-25 Ap接入控制 Ceased WO2018019216A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610601026.0A CN107659930A (zh) 2016-07-26 2016-07-26 一种ap接入控制方法和装置
CN201610601026.0 2016-07-26

Publications (1)

Publication Number Publication Date
WO2018019216A1 true WO2018019216A1 (zh) 2018-02-01

Family

ID=61016349

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/094210 Ceased WO2018019216A1 (zh) 2016-07-26 2017-07-25 Ap接入控制

Country Status (2)

Country Link
CN (1) CN107659930A (zh)
WO (1) WO2018019216A1 (zh)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108848198B (zh) * 2018-05-07 2021-06-29 上海中兴易联通讯股份有限公司 一种多业务转发模式AP的Portal差异化推送方法
CN108901082B (zh) * 2018-06-20 2020-11-20 新华三技术有限公司 一种接入方法及装置
KR102719971B1 (ko) * 2018-12-17 2024-10-22 삼성전자주식회사 전자 장치 및 전자 장치의 제어 방법
CN110753135A (zh) * 2019-10-10 2020-02-04 深圳震有科技股份有限公司 一种ip地址配置方法、配置设备及存储介质
CN113518383B (zh) * 2021-06-23 2024-02-27 杭州萤石软件有限公司 网络管理方法、装置、系统、设备及计算机可读存储介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030154285A1 (en) * 2002-02-13 2003-08-14 International Business Machines Corporation Method and system for assigning network addreses
CN101465889A (zh) * 2008-12-03 2009-06-24 北京星网锐捷网络技术有限公司 网络地址转换设备及其响应地址解析协议请求的方法
CN104113879A (zh) * 2014-08-13 2014-10-22 成都西加云杉科技有限公司 部署有云AC的WiFi通信系统和通信方法
CN104185192A (zh) * 2014-08-12 2014-12-03 福建星网锐捷网络有限公司 一种管理设备的访问方法及相关设备
CN105657746A (zh) * 2016-01-05 2016-06-08 上海斐讯数据通信技术有限公司 一种基于ap邻接关系的无线终端快速漫游系统和方法

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030154285A1 (en) * 2002-02-13 2003-08-14 International Business Machines Corporation Method and system for assigning network addreses
CN101465889A (zh) * 2008-12-03 2009-06-24 北京星网锐捷网络技术有限公司 网络地址转换设备及其响应地址解析协议请求的方法
CN104185192A (zh) * 2014-08-12 2014-12-03 福建星网锐捷网络有限公司 一种管理设备的访问方法及相关设备
CN104113879A (zh) * 2014-08-13 2014-10-22 成都西加云杉科技有限公司 部署有云AC的WiFi通信系统和通信方法
CN105657746A (zh) * 2016-01-05 2016-06-08 上海斐讯数据通信技术有限公司 一种基于ap邻接关系的无线终端快速漫游系统和方法

Also Published As

Publication number Publication date
CN107659930A (zh) 2018-02-02

Similar Documents

Publication Publication Date Title
US10536563B2 (en) Packet handling based on virtual network configuration information in software-defined networking (SDN) environments
JP5711754B2 (ja) スマートクライアントルーティング
CN108347493B (zh) 混合云管理方法、装置和计算设备
US20180324245A1 (en) Load Balancing Method, Apparatus, and System
CN105144652A (zh) 软件定义的网络中的地址解析
CN104618243B (zh) 路由方法、装置及系统、网关调度方法及装置
WO2017186181A1 (zh) 网络访问控制
US9509603B2 (en) System and method for route health injection using virtual tunnel endpoints
WO2018028606A1 (zh) 转发策略配置
CN103441932B (zh) 一种主机路由表项生成方法及设备
US20150304450A1 (en) Method and apparatus for network function chaining
CN108600074B (zh) 组播数据报文的转发方法及装置
WO2018019216A1 (zh) Ap接入控制
CN104185192B (zh) 一种管理设备的访问方法及相关设备
CN107094110B (zh) 一种dhcp报文转发方法及装置
US10764241B2 (en) Address assignment and data forwarding in computer networks
CN114556868B (zh) 虚拟专用网络vpn客户端的专用子网络
CN104580505A (zh) 一种租户隔离方法及系统
WO2015158250A1 (zh) 一种资源分配方法、报文通信方法及装置
JP2017528052A5 (zh)
WO2020181735A1 (zh) 一种提供网络地址转换nat服务的方法及控制器
CN106936680A (zh) 云计算平台异构网络之间互通的系统及方法
WO2018161795A1 (zh) 一种路由优先级配置方法、设备以及控制器
CN103561122A (zh) IPv6地址配置方法、IPv6客户端及服务器
CN106921610A (zh) 访问控制方法和网络设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17833519

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17833519

Country of ref document: EP

Kind code of ref document: A1