WO2020063776A1 - OpenFlow实例配置 - Google Patents

OpenFlow实例配置 Download PDF

Info

Publication number
WO2020063776A1
WO2020063776A1 PCT/CN2019/108242 CN2019108242W WO2020063776A1 WO 2020063776 A1 WO2020063776 A1 WO 2020063776A1 CN 2019108242 W CN2019108242 W CN 2019108242W WO 2020063776 A1 WO2020063776 A1 WO 2020063776A1
Authority
WO
WIPO (PCT)
Prior art keywords
entry
downstream
data packet
instance
destination
Prior art date
Application number
PCT/CN2019/108242
Other languages
English (en)
French (fr)
Inventor
张庆军
Original Assignee
新华三技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 新华三技术有限公司 filed Critical 新华三技术有限公司
Priority to EP19866075.5A priority Critical patent/EP3833084B1/en
Priority to JP2021517004A priority patent/JP7126021B2/ja
Priority to US17/278,578 priority patent/US11876678B2/en
Publication of WO2020063776A1 publication Critical patent/WO2020063776A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H04W24/02—Arrangements for optimising operational condition
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0803—Configuration setting
    • H04L41/084—Configuration by using pre-existing information, e.g. using templates or copying from other elements
    • H04L41/0846—Configuration by using pre-existing information, e.g. using templates or copying from other elements based on copy from other elements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0889—Techniques to speed-up the configuration process
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0895—Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/34—Signalling channels for network management communication
    • H04L41/342—Signalling channels for network management communication between virtual entities, e.g. orchestrators, SDN or NFV entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H04W24/08—Testing, supervising or monitoring using real traffic

Definitions

  • OpenFlow open source flow
  • the OpenFlow standard is applied to a wireless network
  • the AP creates a wireless virtual interface and configures an instance for the wireless virtual interface.
  • the AP needs to delete the instance configured for the wireless virtual interface.
  • FIG. 1 is a schematic architecture diagram of an OpenFlow network according to an embodiment of the present disclosure
  • FIG. 2 is an exemplary schematic diagram of an OpenFlow multi-instance provided by an embodiment of the present disclosure
  • FIG. 3 is a schematic diagram of a wireless network architecture according to an embodiment of the present disclosure.
  • FIG. 4 is an exemplary schematic diagram of an OpenFlow instance configuration result provided by an embodiment of the present disclosure.
  • FIG. 5 is a flowchart of a method for configuring an OpenFlow instance according to an embodiment of the present disclosure
  • FIG. 6 is a flowchart of another method for configuring an OpenFlow instance according to an embodiment of the present disclosure
  • FIG. 7 is a schematic diagram of a centralized uplink forwarding process according to an embodiment of the present disclosure.
  • FIG. 8 is a schematic diagram of a centralized downlink forwarding process according to an embodiment of the present disclosure.
  • FIG. 9 is a schematic diagram of a local uplink forwarding process according to an embodiment of the present disclosure.
  • FIG. 10 is a schematic diagram of a local downlink forwarding process according to an embodiment of the present disclosure.
  • FIG. 11 is a schematic structural diagram of a configuration apparatus for an OpenFlow instance according to an embodiment of the present disclosure
  • FIG. 12 is a schematic structural diagram of another configuration device for an OpenFlow instance according to an embodiment of the present disclosure.
  • FIG. 13 is a schematic structural diagram of an AC according to an embodiment of the present disclosure.
  • FIG. 14 is a schematic structural diagram of an AP according to an embodiment of the present disclosure.
  • FIG. 1 is a schematic architecture diagram of an OpenFlow network provided by an embodiment of the present disclosure.
  • the OpenFlow network includes an OpenFlow device, an OpenFlow controller, and an OpenFlow device and an OpenFlow controller.
  • the secure channel (Secure Channel).
  • the OpenFlow controller is the control center of the virtual network. It can generate a flow table according to the user's configuration or a dynamically running protocol, and send the flow table to the OpenFlow device.
  • the OpenFlow device is used to receive the flow table issued by the OpenFlow controller, and perform packet processing according to the flow table.
  • the OpenFlow device is also used to report device status and events to the OpenFlow controller, such as events such as interface UP or interface DOWN.
  • the OpenFlow device may be an Access Controller (AC) or an AP.
  • the dotted line in Figure 1 is a secure channel, which is used to support communication between the OpenFlow controller and the OpenFlow device.
  • multiple OpenFlow instances can be configured on an OpenFlow device.
  • One OpenFlow instance can be connected to multiple OpenFlow controllers.
  • One OpenFlow controller can also be connected to multiple OpenFlow instances. As shown in FIG. 2, if there are three ports on an OpenFlow device, each port corresponds to an OpenFlow instance, namely OpenFlow instance 1, OpenFlow instance 2, and OpenFlow instance 3.
  • OpenFlow instance 1 is connected to OpenFlow controller 1
  • OpenFlow instance 2 is connected to OpenFlow controller 1 and OpenFlow controller 2
  • OpenFlow instance 3 is connected to OpenFlow controller 3.
  • the wireless virtual interface between the AP and the terminal changes when the terminal accesses the AP or the terminal disconnects from the AP. If the wireless virtual interface between the AP and the terminal changes frequently, this causes the OpenFlow controller to frequently configure instances for the wireless virtual interface of the AP.
  • the terminal when the network is unstable, the terminal will frequently establish and disconnect with the AP; or, when the terminal is at the edge of the AP signal coverage, it will also cause the terminal to establish and disconnect with the AP frequently. connection.
  • the AP reports the wireless virtual interface created for the terminal to the OpenFlow controller, and the OpenFlow controller configures an instance for the wireless virtual interface.
  • the AP deletes the wireless virtual interface, and the OpenFlow controller needs to delete the instance configured for the wireless virtual interface. If the terminal repeatedly connects to the AP and repeatedly disconnects from the AP, the configuration of the OpenFlow controller will oscillate. It can be seen that it is more complicated to implement OpenFlow multiple instances on wireless devices in the prior art.
  • an embodiment of the present disclosure proposes an OpenFlow instance configuration, which is applied to a wireless network.
  • the wireless network includes an SDN controller, AC, multiple APs, and multiple terminals.
  • multiple APs access the AC, which is managed by the AC in a unified manner, and multiple terminals access the AP, and the APs provide services to the terminals.
  • FIG. 3 exemplarily shows an SDN controller, an AC, and AP1 and AP2 connected to the AC.
  • the SDN controller may communicate with the AC or AP through the OpenFlow protocol.
  • the SDN controller may also be referred to as an OpenFlow controller.
  • the SDN controller may be connected to the AC through a switch.
  • AP1 can serve terminal 1 and terminal 2.
  • AP1 communicates with terminal 1 through wireless virtual interface 1, and communicates with terminal 2 through wireless virtual interface 2.
  • AP2 serves terminal 3, and AP2 communicates with terminal 3 through wireless virtual interface 3.
  • the SDN controller can divide an OpenFlow instance for each AP, and the wireless virtual interface created by the AP can be bound to the OpenFlow instance corresponding to the AP. In this way, when the wireless virtual interface on the AP changes, the OpenFlow controller does not need to re-divide OpenFlow instances, reducing the complexity of implementing OpenFlow multi-instance on wireless devices.
  • FIG. 4 an example configured for the wireless device in FIG. 3 in the embodiment of the present disclosure is shown in FIG. 4, where the identifier of AP1 is bound to OpenFlow instance 1, and the identifier of AP2 is bound to OpenFlow instance 2. , And the identity of AP1 and the identity of AP2 are bound to the global OpenFlow instance.
  • the wireless virtual interface created by AP1 belongs to OpenFlow instance 1, for example, wireless virtual interface 1 and wireless virtual interface 2 in FIG. 3 both belong to OpenFlow instance 1.
  • the wireless virtual interfaces created by AP2 belong to OpenFlow instance 2.
  • the wireless virtual interface 3 in FIG. 3 belongs to OpenFlow instance 2.
  • the SDN controller may also create multiple instances for an AP, and establish a correspondence relationship between the wireless virtual interface feature and the instance in advance, and the wireless virtual interface feature is accessed through the wireless virtual interface.
  • the characteristics of the terminal may specifically be the brand and model of the terminal. For example, an instance A and an instance B are created on AP1, and a wireless virtual interface for connecting terminals of brand 1 and brand 2 is preset to belong to instance A, and a wireless virtual interface for connecting terminals of brand 3 and brand 4 belongs to instance B.
  • an embodiment of the present disclosure provides a method for configuring an OpenFlow instance.
  • the method is executed by an AC, and at least one AP accesses the AC.
  • the method includes:
  • the AC obtains configuration information of a global instance and configuration information of an AP instance corresponding to each AP.
  • the global instance is a global OpenFlow instance created by the AC according to the configuration information of the global instance, and is simply referred to as a global instance.
  • An AP instance is an OpenFlow instance created by the AP based on the configuration information of the AP instance. The following are examples for short.
  • the AC receives configuration information of a global instance input by a user or delivered by an SDN controller.
  • the configuration information of the global instance includes the information used to create the global instance and the Internet Protocol (IP) address and port number of the SDN controller, and may also include the IP address and port number of the AC.
  • IP Internet Protocol
  • the AC also receives configuration information of an AP instance corresponding to each AP input by the user or issued by the SDN controller.
  • the AC receives the configuration information of AP instance 1 corresponding to AP1 and the configuration information of AP instance 2 corresponding to AP2.
  • the AC sends configuration information of the corresponding AP instance to each AP, so that each AP creates an AP instance according to the received configuration information of the AP instance, and binds the AP identifier to the created AP instance.
  • the AC sends the configuration information of AP instance 1 to AP1 and the configuration information of AP instance 2 to AP2.
  • AP1 and AP2 receive the configuration information of the AP instance, AP1 creates AP instance 1, AP2 creates AP instance 2, and the identity of AP1 is bound to AP instance 1, and the identity of AP2 is bound to AP instance 2.
  • the AC creates a global instance.
  • the AC binds the AC identity and the AP identity of each AP to the global instance.
  • the identifier of AP1 in FIG. 3 is bound to AP instance 1
  • the identifier of AP2 is bound to AP instance 2
  • the identifier of AP1 and the identifier of AP2 are both bound to the global instance.
  • the AC creates a global instance according to the configuration information of the global instance, and binds the identity of the AC and the identity of each AP to the global instance, and each AP identity is created with the AP.
  • AP instance binding Even if the wireless virtual interface in the AP changes, the binding relationship between the AP's identity and the OpenFlow instance will not change, and there is no need to reconfigure the instance.
  • the method of the configuration example adopted by the disclosed embodiment can reduce the configuration workload and the implementation process is relatively simple.
  • the AC After the AC creates a global instance, it can also receive flow entries from the SDN controller to process packets based on the flow entries.
  • the following methods can be used for processing.
  • the AC receives a first upstream entry sent by the SDN controller, and the first upstream entry is used by the AC to centrally forward an uplink data packet.
  • the first upstream entry includes a destination IP address, a Virtual Local Area Network (VLAN) value, a destination Media Access Control (MAC) address, and a wireless virtual interface identifier of the terminal accessing the AP.
  • VLAN Virtual Local Area Network
  • MAC Media Access Control
  • the first upstream entry can be expressed as: OpenFlow basic matching domain (destination IP address + VLAN value + destination MAC address) + extended matching domain (identity of the wireless virtual interface of the terminal accessing the AP) + Output (destination IP address).
  • the AC When the AC receives the uplink data packet sent by the first AP, the destination IP address, VLAN value, and destination MAC address included in the uplink data packet and the destination IP address, VLAN value, and destination MAC address included in the first upstream entry When both match, the AC determines whether the wireless virtual interface on which the first AP receives the uplink data packet is the wireless virtual interface corresponding to the wireless virtual interface identifier included in the first upstream entry. If so, the AC forwards the uplink data packet to the destination IP address according to the first upstream entry.
  • the AC forwards the uplink data packet according to the output of the first upstream entry.
  • the AC may further receive a first downstream entry sent by the SDN controller, and the first downstream entry is used by the AC to perform centralized forwarding of downlink data packets.
  • the first downstream entry includes a destination IP address, a VLAN value, a destination MAC address, and an AP identifier.
  • the first downstream flow entry may be expressed as: an OpenFlow basic matching domain (destination IP address + VLAN value + destination MAC address) + extended matching domain (AP identifier) + Output (wireless interface identifier connected to the AP).
  • the AC determines whether the first AP used to forward the downlink data packet is the AP corresponding to the AP identifier in the first downstream entry. If so, the AC sends a downlink data packet to the first AP through the wireless interface connected to the first AP according to the first downstream entry.
  • the AC forwards the downstream data packet according to the output of the first downstream entry.
  • the AC receives a second upstream entry sent by the SDN controller, and the second upstream entry is used by the AC to locally forward the uplink data packet.
  • the second upstream entry includes a source IP address, a VLAN value, a source MAC address, and an AP identifier.
  • the second upstream entry may be expressed as: an OpenFlow basic matching domain (source IP address + VLAN value + source MAC address) + extended matching domain (AP identification) + Output (destination IP address).
  • the AC When the AC receives the uplink data packet sent by the second AP, and the uplink data packet includes the source IP address, VLAN value, source MAC address, and source IP address, VLAN value, and source MAC address included in the second upstream entry
  • the AC determines whether the second AP is the AP corresponding to the AP identifier in the second upstream entry; if so, the AC forwards the uplink data packet according to the second upstream entry. Specifically, the AC forwards the uplink data packet to the destination IP address according to the second upstream entry.
  • the AC forwards the uplink data packet according to the output in the second upstream entry.
  • the AC may also receive a second downstream entry sent by the SDN controller.
  • the second downstream entry is used by the AC to locally forward the downstream data packet.
  • the second downstream entry includes a destination IP address, a VLAN value, a destination MAC address, and an AP identifier.
  • the second downstream flow entry may be expressed as: an OpenFlow basic matching domain (destination IP address + VLAN value + destination MAC address) + extended matching domain (AP identification) + Output (AP identification).
  • the AC When the AC receives a downlink data packet and the destination IP address, VLAN value, and destination MAC address included in the downlink data packet match the destination IP address, VLAN value, and destination MAC address included in the second downstream entry, the AC Determine whether the second AP used to forward the downlink data packet is the AP corresponding to the AP identifier in the second downstream entry. If so, the AC sends a downlink data packet to the second AP according to the second downstream entry.
  • the AC forwards the downstream data message according to the output in the second downstream entry.
  • the SDN controller can also deliver flow entries to the AP through the AC, so that The AP processes packets based on the received flow entries.
  • the specific implementation process is as follows:
  • the AC receives the third upstream entry sent by the SDN controller, and then the AC sends the third upstream entry to the second AP, so that when the second AP receives the uplink data packet sent by the terminal and receives the uplink data packet
  • the second AP forwards the uplink data packet to the AC according to the third upstream entry.
  • the third upstream entry is used by the second AP to locally forward uplink data packets.
  • the third upstream entry includes the identifier of the wireless virtual interface, and the dashed virtual interface is used for the terminal to access the second AP.
  • the third upstream entry may be expressed as: OpenFlow extended matching domain (identity of the wireless virtual interface) + Output (AC identity).
  • the AC receives the third downstream entry sent by the SDN controller, and then the AC sends the third downstream entry to the second AP, so that when the second AP receives the downlink data packet sent by the AC, and the downlink data
  • the second AP forwards the downstream data message to the terminal through the third downstream entry.
  • the third downstream entry is used by the second AP to locally forward downlink data packets, and the third downstream entry includes the destination MAC address.
  • the third downstream entry further includes an identifier of a wireless virtual interface, which is used for the terminal to access the second AP.
  • the AC specifically forwards the downlink data packet through the wireless virtual interface corresponding to the identifier of the wireless virtual interface in the third downstream entry.
  • the third downstream flow entry may be expressed as: an OpenFlow basic matching domain (destination MAC address) + Output (identity of a wireless virtual interface).
  • an embodiment of the present disclosure further provides a method for configuring an OpenFlow instance, which is performed by an AP. As shown in FIG. 6, the method includes:
  • the AP obtains configuration information of the AP instance.
  • the AP receives the configuration information of the AP instance entered by the user, or the AP receives the SDN controller to send to the AC, and the AC forwards the configuration information of the AP instance to the AP.
  • An AP instance is an OpenFlow instance created by the AP based on the configuration information of the AP instance. The following are examples for short.
  • the configuration information of the AP instance includes information used to create the AP instance and the IP address and port number of the SDN controller, and may also include the IP address and port number of the AP.
  • the AP creates an AP instance according to the configuration information of the AP instance.
  • the AP binds the AP identifier of the AP to the created AP instance.
  • the wireless virtual interface created by the AP to connect to the terminal also belongs to the AP instance.
  • the AP creates an AP instance according to the configuration information of the AP instance, and binds the AP identifier of the AP to the created AP instance, that is, the AP belongs to the AP instance. Even if the wireless virtual interface in the AP changes, the binding relationship between the AP identity and the AP instance will not change, and changes in the wireless virtual interface on the AP will not affect the division of AP instances. That is, when the AP's wireless virtual interface changes, there is no need to reconfigure the instance. Compared with the method based on the wireless virtual interface configuration example in the prior art, the method based on the AP configuration example used in the embodiment of the present disclosure can reduce the configuration workload and is relatively simple to implement.
  • the AP After the AP creates an AP instance, if the AP supports local forwarding, the AP receives the upstream and downstream entries sent by the AC.
  • the upstream entry is the third upstream entry in the foregoing embodiment, and the downstream entry is the third downstream entry in the foregoing embodiment.
  • the upstream entry is used by the AP to locally forward the uplink data message, and the downstream entry is used by the AP to locally forward the downlink data message.
  • the upstream entry includes an identifier of a wireless virtual interface, and the wireless virtual interface is used for the terminal to access the AP, that is, the terminal establishes a connection with the AP through the wireless virtual interface.
  • the upstream entry may be expressed as: OpenFlow extended matching domain (identity of a wireless virtual interface) + Output (AC identity).
  • the AP When the AP receives the uplink data packet sent by the terminal, and the wireless virtual interface receiving the uplink data packet is the wireless virtual interface corresponding to the identifier of the wireless virtual interface included in the upstream entry, the AP forwards it to the AC according to the upstream entry. Upstream data packets.
  • the AP forwards the upstream data packet according to the output in the upstream entry, that is, the AC is identified to the AC according to the AC identification in the output.
  • the corresponding AC forwards the uplink data packet.
  • the downstream entry includes the destination MAC address.
  • the downstream flow entry may be expressed as: an OpenFlow basic matching domain (destination MAC address) + Output (identity of a wireless virtual interface).
  • the AP When the AP receives the downlink data packet sent by the AC and the destination MAC address included in the downlink data packet is the destination MAC address in the downstream entry, the AP forwards the downstream data packet to the terminal through the downstream entry.
  • the AP forwards the data packet to the terminal through the wireless virtual interface corresponding to the wireless virtual interface identifier in the downlink entry.
  • the AP forwards the downlink data packet according to the output in the downstream entry, that is, according to the identifier of the wireless virtual interface in the output. Forward the downlink data message to a wireless virtual interface corresponding to the identifier of the wireless virtual interface.
  • the AC can create a global instance and bind the identity of the AC, the identity of AP1, and the identity of AP2 to the global instance.
  • AP1 creates AP instance 1 and binds the identity of AP1 to AP instance 1.
  • AP2 creates AP instance 2 and binds the identity of AP2 to AP instance 2. Assume that AP1 supports centralized forwarding and AP2 supports local forwarding.
  • FIG. 7 is an exemplary schematic diagram of a centralized uplink forwarding process.
  • AP1 supports centralized forwarding, and the SDN controller does not need to issue an upstream entry for AP1.
  • Upstream entry OpenFlow basic matching domain (destination IP address + VLAN value + destination MAC value) + extended matching domain (identity of the wireless virtual interface of the terminal accessing the AP) + Output (destination IP address).
  • AP1 forwards the uplink data message in the direction of the arrow in FIG. 7. That is, AP1 forwards the uplink data packet to the AC's Layer 2 forwarding module through wireless forwarding.
  • the AC's Layer 2 forwarding module forwards the upstream data packet to the Layer 3 forwarding module, and the Layer 3 forwarding module forwards the upstream data packet to AC wireless forwarding module.
  • the wireless forwarding module sends the uplink data message to the layer 2 forwarding module, and the layer 2 forwarding module forwards the uplink data message according to the destination IP address in the uplink data message.
  • the first upstream entry in the AC may replace the Layer 2 forwarding module and the Layer 3 forwarding module in FIG. 7. That is, after receiving the uplink data message sent by the terminal 1, AP1 forwards the uplink data message to the wireless forwarding module of the AC by wireless forwarding.
  • the AC determines that the destination IP address, VLAN value, and destination MAC address in the uplink data packet match the basic matching field in the first upstream entry, and the wireless virtual interface on which AP1 receives the uplink data packet is the first uplink.
  • the AC determines that the upstream data packet matches the first upstream entry, and the AC forwards the upstream data to the uplink data by the wireless forwarding module according to the first upstream entry. The packet is forwarded to the destination IP address.
  • FIG. 8 is an exemplary schematic diagram of a centralized downlink forwarding process.
  • AP1 supports centralized forwarding, and the SDN controller does not need to issue a downstream entry for AP1.
  • Downstream flow entry OpenFlow basic matching domain (destination IP address + VLAN value + destination MAC address) + extended matching domain (AP identification) + Output (radio interface identification connected to the AP).
  • the AC can forward the downlink data message according to the arrow sequence in FIG. 8.
  • the downstream entry in the AC may replace the Layer 2 forwarding module and the Layer 3 forwarding module in FIG. 8. That is, after the AC receives the downlink data message, if it is determined that the destination IP address, VLAN value, and destination MAC address in the downlink data message match the basic matching field in the downstream entry, and it is used to forward the downlink data message AP1 is the AP corresponding to the AP identifier in the first downstream entry, the AC determines that the downstream data packet matches the first downstream entry, and the AC connects the AP according to the first downstream entry The wireless interface sends a downlink data message to AP1, and then AP1 forwards the downlink data message to the terminal.
  • FIG. 9 is an exemplary schematic diagram of a local uplink forwarding process.
  • AP2 supports local forwarding
  • the second upstream entry received by the AC is: OpenFlow basic matching domain (source IP address) + VLAN value + source MAC address) + extended matching domain (AP ID) + Output (destination IP address);
  • the third upstream entry received by AP2 is the OpenFlow extended matching domain (identity of the wireless virtual interface) + Output (AC Identification).
  • AP2 can forward the uplink data message according to the arrow sequence in FIG. 9.
  • the second upstream entry of the AC may replace the Layer 2 forwarding module and the third layer forwarding module of the AC in FIG. 9, and the second upstream entry of AP2 may replace the Layer 2 forwarding of AP2 in FIG. 9. Module.
  • AP2 determines that the uplink data packet matches the third upstream entry in AP2, and then AP2 forwards the uplink data packet to the AC according to the third upstream entry.
  • the AC After the AC receives the upstream data packet, if it determines that the destination IP address, VLAN value, and destination MAC address in the upstream data packet match the basic matching domain in the second upstream entry stored in the AC, and sends the upstream data
  • the AP2 of the message is the AP corresponding to the AP identifier in the second upstream entry, then the AC determines that the upstream data packet matches the second upstream entry, and the AC forwards the destination according to the second upstream entry.
  • the IP address forwards the uplink data packet.
  • FIG. 10 is an exemplary schematic diagram of a local downlink forwarding process.
  • AP2 supports local forwarding
  • the second downstream flow entry received by the AC is: OpenFlow basic matching domain (destination IP address) + VLAN value + destination MAC address) + extended matching domain (AP identifier) + Output (AP identifier);
  • the third downstream entry received by AP2 is: OpenFlow basic matching domain (destination MAC address) + Output (wireless virtual interface) Logo).
  • AP2 can forward the downlink data packet according to the arrow sequence in FIG. 10.
  • the AC's second downstream entry can replace the AC's Layer 2 forwarding in FIG. 10. Module and Layer 3 forwarding module.
  • the third downstream entry of AP2 can replace the layer 2 forwarding module of AP2 in FIG. 10.
  • the AC determines that the downstream IP address, VLAN value, and destination MAC address in the downlink data message match the basic matching field in the second downstream entry, and according to the downlink data message, It is determined that AP2 used to forward the downlink data packet is the AP corresponding to the AP identifier in the second downstream entry, then the AC determines that the downstream data packet matches the second downstream entry, and the AC according to the second Downstream entry, which forwards the downlink data message to AP2.
  • AP2 After AP2 receives the downlink data message, if it is determined that the destination MAC address in the downlink data message is the destination MAC address in the third downstream flow entry stored by itself, AP2 determines that the downlink data message is related to the third downstream flow. The entries match, and then AP2 forwards the downlink data message to the terminal through the wireless virtual interface corresponding to the identifier of the wireless virtual interface in the third downstream entry.
  • the embodiment of the present disclosure also provides an apparatus for configuring an OpenFlow instance.
  • the apparatus is applied to an AC.
  • the apparatus includes: an obtaining module 1101, a sending module 1102, and a creating module 1103 And binding module 1104.
  • the obtaining module 1101 is configured to obtain configuration information of a global instance and configuration information of an AP instance corresponding to each AP.
  • a sending module 1102 is configured to send configuration information of a corresponding AP instance to each AP, so that each AP creates an AP instance according to the received configuration information of the AP instance, and binds the AP identifier to the created AP instance. .
  • the creating module 1103 is configured to create a global instance according to the configuration information of the global instance obtained by the obtaining module 1101.
  • a binding module 1104 is configured to bind the AC identity and the AP identity of each AP to a global instance.
  • the apparatus further includes a determination module 1105.
  • the obtaining module 1101 is configured to receive a first upstream entry sent by a software-defined network SDN controller.
  • the first upstream entry is used by the AC to centrally forward uplink data packets.
  • the first upstream entry includes a destination Internet protocol. IP address, VLAN value of virtual local area network, destination media access control MAC address, and identification of the wireless virtual interface of the terminal accessing the AP.
  • the judging module 1105 is configured to receive an uplink data packet sent by the first AP, and the destination IP address, VLAN value, destination MAC address included in the uplink data packet, and the destination IP address and VLAN included in the first upstream entry. When both the value and the destination MAC address match, determine whether the wireless virtual interface on which the first AP receives the uplink data packet is the wireless virtual interface corresponding to the wireless virtual interface identifier included in the first upstream entry;
  • the sending module 1102 is configured to: if the wireless virtual interface of the first AP receiving the uplink data packet is the wireless virtual interface corresponding to the wireless virtual interface identifier included in the first upstream entry, the sending module 1102 according to the first upstream entry, Forward uplink data packets to the destination IP address;
  • the obtaining module 1101 is further configured to receive a first downstream entry sent by the SDN controller.
  • the first downstream entry is used by the AC to centrally forward downlink data packets.
  • the first downstream entry includes the destination IP. Address, VLAN value, destination MAC address, and AP identification;
  • the judging module 1105 is further configured to receive a downlink data packet and the destination IP address, VLAN value, destination MAC address included in the downlink data packet, and the destination IP address, VLAN value, and destination included in the first downstream entry. When both MAC addresses match, determine whether the first AP used to forward the downlink data packet is the AP corresponding to the AP identifier in the first downstream entry;
  • the sending module 1102 is further configured to: if the first AP used to forward the downlink data message is the AP corresponding to the AP identifier in the first downstream entry, the sending module 1102 according to the first downstream table Item, sending a downlink data message to the first AP through a wireless interface connected to the first AP.
  • the obtaining module 1101 is further configured to receive a second upstream entry sent by the SDN controller.
  • the second upstream entry is used by the AC to locally forward uplink data packets.
  • the second upstream entry includes the source. IP address, VLAN value, source MAC address, and AP identification.
  • the determining module 1105 is further configured to receive an uplink data packet sent by the second AP, and the uplink data packet includes a source IP address, a VLAN value, a source MAC address, and a source IP address included in the second upstream entry.
  • the uplink data packet includes a source IP address, a VLAN value, a source MAC address, and a source IP address included in the second upstream entry.
  • the sending module 1102 is further configured to: if the second AP is an AP corresponding to the AP identifier in the second upstream entry, the sending module 1102 forwards the uplink data packet according to the second upstream entry.
  • the obtaining module 1101 is further configured to receive a second downstream entry sent by the SDN controller.
  • the second downstream entry is used by the AC to locally forward downlink data packets.
  • the second downstream entry includes the purpose. IP address, VLAN value, destination MAC address, and AP identification.
  • the judging module 1105 is further configured to receive a downlink data packet and the destination IP address, VLAN value, destination MAC address included in the downlink data packet, and the destination IP address, VLAN value, and destination MAC included in the second downstream entry. When all addresses match, it is determined whether the second AP used to forward the downlink data packet is the AP corresponding to the AP identifier in the second downstream entry.
  • the sending module 1102 is further configured to: if the second AP used to forward downlink data packets is the AP corresponding to the AP identifier in the second downstream entry, the sending module 1102 sends the second AP to the second AP according to the second downstream entry. Send a downlink data message.
  • the obtaining module 1101 is further configured to receive a third upstream entry sent by the SDN controller, the third upstream entry is used by the second AP to locally forward the uplink data packet, and the third upstream entry Including the identifier of the wireless virtual interface, which is used for the terminal to access the second AP;
  • the sending module 1102 is further configured to send a third uplink entry to the second AP, so that when the second AP receives the uplink data packet sent by the terminal, and the wireless virtual interface receiving the uplink data packet is the third uplink When the wireless virtual interface corresponding to the identifier of the wireless virtual interface included in the entry, the sending module 1102 forwards the uplink data packet to the AC according to the third upstream entry.
  • the obtaining module 1101 is further configured to receive a third downstream entry sent by the SDN controller, the third downstream entry is used by the second AP to locally forward downlink data packets, and the third downstream entry Include the destination MAC address.
  • the sending module 1102 is further configured to send a third downlink entry to the second AP, so that when the second AP receives the downlink data packet sent by the AC, and the destination MAC address included in the downlink data packet is the third downlink When the destination MAC address in the entry is forwarded to the terminal through the third downstream entry.
  • the embodiment of the present disclosure further provides a configuration device for an OpenFlow instance.
  • the device is applied to an AP.
  • the device includes an acquisition module 1201, a creation module 1202, and a binding module.
  • the obtaining module 1201 is configured to obtain configuration information of an AP instance.
  • a creating module 1202 is configured to create an AP instance according to the configuration information of the AP instance obtained by the obtaining module 1201.
  • a binding module 1203 is configured to bind the AP identifier of the AP to the created AP instance.
  • the apparatus further includes: a sending module 1204.
  • the obtaining module 1201 is further configured to receive an upstream entry sent by the access controller AC when the AP supports local forwarding.
  • the upstream entry is used by the AP to locally forward an uplink data packet.
  • the upstream entry includes Identification of the wireless virtual interface.
  • the wireless virtual interface is used for the terminal to access the AP.
  • a sending module 1204 is configured to receive an uplink data packet sent by the terminal and the wireless virtual interface receiving the uplink data packet is a wireless virtual interface corresponding to the identifier of the wireless virtual interface included in the upstream entry, according to the upstream table. The item forwards the uplink data packet to the AC.
  • the obtaining module 1201 is further configured to receive a downstream entry sent by the AC when the AP supports local forwarding, and the downstream entry is used by the AP to locally forward a downlink data packet.
  • the downstream entry includes Destination media access control MAC address.
  • the sending module 1204 is further configured to forward the downlink data to the terminal through the downstream entry when the downstream data packet sent by the AC is received and the destination MAC address included in the downstream data packet is the destination MAC address in the downstream entry. Message.
  • an embodiment of the present disclosure also provides an AC.
  • the AC includes a processor 1301, a communication interface 1302, a memory 1303, and a communication bus 1304.
  • the processor 1301, the communication interface 1302, and the memory 1303 are completed through the communication bus 1304. Communication with each other,
  • the processor 1301 is configured to implement steps performed by the AC in the foregoing method embodiment when executing a program stored in the memory 1303.
  • the communication bus mentioned in the AC may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc.
  • PCI Peripheral Component Interconnect
  • EISA Extended Industry Standard Architecture
  • the communication bus can be divided into an address bus, a data bus, a control bus, and the like.
  • the figure only uses a thick line to represent, but it does not mean that there is only one bus or one type of bus.
  • the communication interface is used for communication between the AC and other devices.
  • the memory may include random access memory (Random Access Memory, RAM), and may also include non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory.
  • NVM non-Volatile Memory
  • the memory may also be at least one storage device located far from the foregoing processor.
  • the aforementioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc .; it may also be a digital signal processor (Digital Signal Processing, DSP), special integration Circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.
  • CPU central processing unit
  • NP network processor
  • DSP Digital Signal Processing
  • ASIC Application Specific Integrated Circuit
  • FPGA Field-Programmable Gate Array
  • an embodiment of the present disclosure further provides an AC, including a processor and a machine-readable storage medium.
  • the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the processor is executable by the machine.
  • machine-executable instructions further cause the processor to:
  • the first upstream entry is used by the AC to centrally forward uplink data packets.
  • the first upstream entry includes the destination Internet protocol IP address and the virtual LAN VLAN. Value, destination media access control MAC address, and identification of the wireless virtual interface of the terminal accessing the AP;
  • the destination IP address, VLAN value, and destination MAC address included in the uplink data packet and the destination IP address, VLAN value, and destination MAC address included in the first upstream entry are both When matching, determine whether the wireless virtual interface on which the first AP receives the uplink data packet is the wireless virtual interface corresponding to the wireless virtual interface identifier included in the first upstream entry;
  • Machine-executable instructions also cause the processor to:
  • the first downstream entry is used by the AC to centrally forward downstream data packets.
  • the first downstream entry includes the destination IP address, VLAN value, and destination MAC. Address and AP identification;
  • the destination IP address, VLAN value, and destination MAC address included in the downlink data message match the destination IP address, VLAN value, and destination MAC address included in the first downstream entry, it is determined Whether the first AP used to forward the downlink data packet is the AP corresponding to the AP identifier in the first downstream entry;
  • machine-executable instructions further cause the processor to:
  • the second upstream entry is used by the AC to locally forward uplink data packets.
  • the second upstream entry includes the source IP address, VLAN value, source MAC address, and AP. Identification
  • the source IP address, VLAN value, source MAC address included in the uplink data packet, and the source IP address, VLAN value, and source MAC address included in the second upstream entry are both When matching, determine whether the second AP is the AP corresponding to the AP identifier in the second upstream entry;
  • Machine-executable instructions also cause the processor to:
  • the second downstream entry is used by the AC to locally forward downstream data packets.
  • the second downstream entry includes the destination IP address, VLAN value, destination MAC address, and AP. Identification
  • the judgment is used. Whether the second AP that forwards the downlink data packet is the AP corresponding to the AP identifier in the second downstream entry;
  • machine-executable instructions further cause the processor to:
  • the third upstream entry is used by the second AP to locally forward uplink data packets.
  • the third upstream entry includes the identifier of the wireless virtual interface. Access the second AP at the terminal;
  • Machine-executable instructions also cause the processor to:
  • the third downstream entry is used by the second AP to locally forward the downlink data packet, and the third downstream entry includes the destination MAC address;
  • the second AP sends a third downlink entry to the second AP, so that when the second AP receives a downlink data packet sent by the AC, and the destination MAC address included in the downlink data packet is the destination MAC address in the third downstream entry At this time, the downlink data packet is forwarded to the terminal through the third downlink flow entry.
  • the embodiments of the present disclosure further provide a machine-readable storage medium, which is applicable to AC.
  • the machine-readable storage medium stores machine-executable instructions that can be executed by a processor. When called and executed by a processor, machine-executable instructions cause the processor to:
  • machine-executable instructions further cause the processor to:
  • the first upstream entry is used by the AC to centrally forward uplink data packets.
  • the first upstream entry includes the destination Internet protocol IP address and the virtual LAN VLAN. Value, destination media access control MAC address, and identification of the wireless virtual interface of the terminal accessing the AP;
  • the destination IP address, VLAN value, and destination MAC address included in the uplink data packet and the destination IP address, VLAN value, and destination MAC address included in the first upstream entry are both When matching, determine whether the wireless virtual interface on which the first AP receives the uplink data packet is the wireless virtual interface corresponding to the wireless virtual interface identifier included in the first upstream entry;
  • Machine-executable instructions also cause the processor to:
  • the first downstream entry is used by the AC to centrally forward downstream data packets.
  • the first downstream entry includes the destination IP address, VLAN value, and destination MAC. Address and AP identification;
  • the destination IP address, VLAN value, and destination MAC address included in the downlink data message match the destination IP address, VLAN value, and destination MAC address included in the first downstream entry, it is determined Whether the first AP used to forward the downlink data packet is the AP corresponding to the AP identifier in the first downstream entry;
  • machine-executable instructions further cause the processor to:
  • the second upstream entry is used by the AC to locally forward uplink data packets.
  • the second upstream entry includes the source IP address, VLAN value, source MAC address, and AP. Identification
  • the source IP address, VLAN value, source MAC address included in the uplink data packet, and the source IP address, VLAN value, and source MAC address included in the second upstream entry are both When matching, determine whether the second AP is the AP corresponding to the AP identifier in the second upstream entry;
  • Machine-executable instructions also cause the processor to:
  • the second downstream entry is used by the AC to locally forward downstream data packets.
  • the second downstream entry includes the destination IP address, VLAN value, destination MAC address, and AP. Identification
  • the judgment is used. Whether the second AP that forwards the downlink data packet is the AP corresponding to the AP identifier in the second downstream entry;
  • machine-executable instructions further cause the processor to:
  • the third upstream entry is used by the second AP to locally forward uplink data packets.
  • the third upstream entry includes the identifier of the wireless virtual interface. Access the second AP at the terminal;
  • Machine-executable instructions also cause the processor to:
  • the third downstream entry is used by the second AP to locally forward the downlink data packet, and the third downstream entry includes the destination MAC address;
  • the second AP sends a third downlink entry to the second AP, so that when the second AP receives a downlink data packet sent by the AC, and the destination MAC address included in the downlink data packet is the destination MAC address in the third downstream entry At this time, the downlink data packet is forwarded to the terminal through the third downlink flow entry.
  • the embodiments of the present disclosure also provide a machine-executable instruction.
  • the machine-executable instruction can be stored in a machine-readable storage medium and applied to the AC.
  • the machine-executable instruction is called and executed by the processor.
  • the instructions cause the processor to execute:
  • each AP send configuration information of the corresponding AP instance to each AP separately, so that each AP creates an AP instance according to the received configuration information of the AP instance, and binds the AP identifier to the created AP instance;
  • machine-executable instructions further cause the processor to:
  • the first upstream entry is used by the AC to centrally forward uplink data packets.
  • the first upstream entry includes the destination Internet protocol IP address and the virtual LAN VLAN. Value, destination media access control MAC address, and identification of the wireless virtual interface of the terminal accessing the AP;
  • the destination IP address, VLAN value, and destination MAC address included in the uplink data packet and the destination IP address, VLAN value, and destination MAC address included in the first upstream entry are both When matching, determine whether the wireless virtual interface on which the first AP receives the uplink data packet is the wireless virtual interface corresponding to the wireless virtual interface identifier included in the first upstream entry;
  • Machine-executable instructions also cause the processor to:
  • the first downstream entry is used by the AC to centrally forward downstream data packets.
  • the first downstream entry includes the destination IP address, VLAN value, and destination MAC. Address and AP identification;
  • the destination IP address, VLAN value, and destination MAC address included in the downlink data message match the destination IP address, VLAN value, and destination MAC address included in the first downstream entry, it is determined Whether the first AP used to forward the downlink data packet is the AP corresponding to the AP identifier in the first downstream entry;
  • machine-executable instructions further cause the processor to:
  • the second upstream entry is used by the AC to locally forward uplink data packets.
  • the second upstream entry includes the source IP address, VLAN value, source MAC address, and AP. Identification
  • the source IP address, VLAN value, source MAC address included in the uplink data packet, and the source IP address, VLAN value, and source MAC address included in the second upstream entry are both When matching, determine whether the second AP is the AP corresponding to the AP identifier in the second upstream entry;
  • Machine-executable instructions also cause the processor to:
  • the second downstream entry is used by the AC to locally forward downstream data packets.
  • the second downstream entry includes the destination IP address, VLAN value, destination MAC address, and AP. Identification
  • the judgment is used. Whether the second AP that forwards the downlink data packet is the AP corresponding to the AP identifier in the second downstream entry;
  • machine-executable instructions further cause the processor to:
  • the third upstream entry is used by the second AP to locally forward uplink data packets.
  • the third upstream entry includes the identifier of the wireless virtual interface. Access the second AP at the terminal;
  • Machine-executable instructions also cause the processor to:
  • the third downstream entry is used by the second AP to locally forward the downlink data packet, and the third downstream entry includes the destination MAC address;
  • the second AP sends a third downlink entry to the second AP, so that when the second AP receives a downlink data packet sent by the AC, and the destination MAC address included in the downlink data packet is the destination MAC address in the third downstream entry At this time, the downlink data packet is forwarded to the terminal through the third downlink flow entry.
  • An embodiment of the present disclosure further provides an AP.
  • the AP includes a processor 1401, a communication interface 1402, a memory 1403, and a communication bus 1404.
  • the processor 1401, the communication interface 1402, and the memory 1403 are completed through the communication bus 1404. Communication with each other,
  • the memory 1403 is configured to store a computer program
  • the processor 1401 is configured to implement steps performed by the AP in the foregoing method embodiment when executing a program stored in the memory 1403.
  • the communication bus mentioned in the AP may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc.
  • PCI Peripheral Component Interconnect
  • EISA Extended Industry Standard Architecture
  • the communication bus can be divided into an address bus, a data bus, a control bus, and the like.
  • the figure only uses a thick line to represent, but it does not mean that there is only one bus or one type of bus.
  • the communication interface is used for communication between the AP and other devices.
  • the memory may include random access memory (Random Access Memory, RAM), and may also include non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory.
  • NVM non-Volatile Memory
  • the memory may also be at least one storage device located far from the foregoing processor.
  • the aforementioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc .; it may also be a digital signal processor (Digital Signal Processing, DSP), special integration Circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.
  • CPU central processing unit
  • NP network processor
  • DSP Digital Signal Processing
  • ASIC Application Specific Integrated Circuit
  • FPGA Field-Programmable Gate Array
  • an embodiment of the present disclosure further provides an AP, including a processor and a machine-readable storage medium.
  • the machine-readable storage medium stores machine-executable instructions that can be executed by the processor. The execution of the instructions prompts:
  • machine-executable instructions cause the processor to:
  • the AP When the AP supports local forwarding, it receives upstream entries sent by the access controller AC.
  • the upstream entries are used by the AP to locally forward uplink data packets.
  • the upstream entries include the identifier of the wireless virtual interface.
  • the virtual interface is used for the terminal to access the AP;
  • the uplink data is forwarded to the AC according to the upstream entry Message
  • Machine-executable instructions cause the processor:
  • the AP When the AP supports local forwarding, it receives downstream entries sent by the AC.
  • the downstream entries are used by the AP to locally forward downlink data packets.
  • the downstream entries include the destination media access control MAC address.
  • the downstream data message is forwarded to the terminal through the downstream entry.
  • an embodiment of the present disclosure further provides a machine-readable storage medium, which can be applied to an AP.
  • the machine-readable storage medium stores machine-executable instructions that can be executed by a processor. When called and executed by a processor, machine-executable instructions cause the processor to execute:
  • machine-executable instructions cause the processor to:
  • the AP When the AP supports local forwarding, it receives upstream entries sent by the access controller AC.
  • the upstream entries are used by the AP to locally forward uplink data packets.
  • the upstream entries include the identifier of the wireless virtual interface.
  • the virtual interface is used for the terminal to access the AP;
  • the uplink data is forwarded to the AC according to the upstream entry Message
  • Machine-executable instructions cause the processor:
  • the AP When the AP supports local forwarding, it receives downstream entries sent by the AC.
  • the downstream entries are used by the AP to locally forward downlink data packets.
  • the downstream entries include the destination media access control MAC address.
  • the downstream data message is forwarded to the terminal through the downstream entry.
  • the embodiments of the present disclosure further provide a machine-executable instruction.
  • the machine-executable instruction can be stored in a machine-readable storage medium and applied to an AP.
  • the machine-executable instruction When called and executed by a processor, the machine-executable instruction The instructions cause the processor to execute:
  • machine-executable instructions cause the processor to:
  • the AP When the AP supports local forwarding, it receives upstream entries sent by the access controller AC.
  • the upstream entries are used by the AP to locally forward uplink data packets.
  • the upstream entries include the identifier of the wireless virtual interface.
  • the virtual interface is used for the terminal to access the AP;
  • the uplink data is forwarded to the AC according to the upstream entry Message
  • Machine-executable instructions cause the processor:
  • the AP When the AP supports local forwarding, it receives downstream entries sent by the AC.
  • the downstream entries are used by the AP to locally forward downlink data packets.
  • the downstream entries include the destination media access control MAC address.
  • the downstream data message is forwarded to the terminal through the downstream entry.
  • the computer program product includes one or more computer instructions.
  • the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be from a website site, computer, server, or data center Transmission by wire (for example, coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (for example, infrared, wireless, microwave, etc.) to another website site, computer, server, or data center.
  • the computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server, a data center, and the like that includes one or more available medium integration.
  • the available medium may be a magnetic medium (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (Solid State Disk (SSD)), and the like.
  • a magnetic medium for example, a floppy disk, a hard disk, a magnetic tape
  • an optical medium for example, a DVD
  • a semiconductor medium for example, a solid state disk (Solid State Disk (SSD)

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

AC获取全局实例的配置信息和每个AP对应的AP实例的配置信息；AC分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例绑定；AC根据全局实例的配置信息，创建全局实例；AC将AC标识以及每个AP的AP标识与全局实例绑定。

Description

OpenFlow实例配置
相关申请的交叉引用
本公开要求于2018年9月28日提交中国专利局、申请号为201811140453.9发明名称为“一种OpenFlow实例的配置方法及装置”的中国专利公开的优先权，其全部内容通过引用结合在本公开中。
背景技术
在软件定义网络(Software Defined Network，SDN)架构中，控制器与转发层之间的通信接口标准定义为OpenFlow(开源流)，OpenFlow可以实现控制面和数据面的分离。
若将OpenFlow标准应用于无线网络中，当终端接入接入点(Access Point,AP)时，AP创建无线虚接口，并为该无线虚接口配置实例；当终端断开与AP的连接时，AP需删除为该无线虚接口配置的实例。
附图简要说明
图1为本公开实施例提供的一种OpenFlow网络的架构示意图；
图2为本公开实施例提供的一种OpenFlow多实例的示例性示意图；
图3为本公开实施例提供的一种无线网络架构的示意图；
图4为本公开实施例提供的一种OpenFlow实例配置结果的示例性示意图；
图5为本公开实施例提供的一种OpenFlow实例的配置方法的流程图；
图6为本公开实施例提供的另一种OpenFlow实例的配置方法的流程图；
图7为本公开实施例提供的一种集中上行转发流程的示意图；
图8为本公开实施例提供的一种集中下行转发流程的示意图；
图9为本公开实施例提供的一种本地上行转发流程的示意图；
图10为本公开实施例提供的一种本地下行转发流程的示意图；
图11为本公开实施例提供的一种OpenFlow实例的配置装置的结构示意图；
图12为本公开实施例提供的另一种OpenFlow实例的配置装置的结构示意图；
图13为本公开实施例提供的一种AC的结构示意图；
图14为本公开实施例提供的一种AP的结构示意图。
具体实施方式
下面将结合本公开实施例中的附图，对本公开实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本公开一部分实施例，而不是全部的实施例。基于本公开中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本公开保护的范围。
本公开实施例应用于OpenFlow网络中，如图1所示，图1为本公开实施例提供的一种OpenFlow网络的架构示意图，OpenFlow网络中包括OpenFlow设备、OpenFlow控制器以及OpenFlow设备和OpenFlow控制器之间的安全通道(Secure Channel)。
OpenFlow控制器是虚拟网的控制中心，可以根据用户的配置或者动态运行的协议生成流表，并将流表发送至OpenFlow设备。
OpenFlow设备用于接收OpenFlow控制器下发的流表，并根据流表进行报文处理。OpenFlow设备还用于向OpenFlow控制器上报设备状态和事件，如接口UP或接口DOWN等事件。其中，OpenFlow设备可以为接入控制器(Access Controller，AC)或AP。
图1中的虚线为安全通道，用于支持OpenFlow控制器与OpenFlow设备之间的通信。
目前，OpenFlow设备上可配置多个OpenFlow实例，一个OpenFlow实例可连接多个OpenFlow控制器，一个OpenFlow控制器也可连接多个OpenFlow实例。如图2所示，若一个OpenFlow设备上存在三个端口，每个端口对应一个OpenFlow实例，分别为OpenFlow实例1、OpenFlow实例2和OpenFlow实例3。其中，OpenFlow实例1连接于OpenFlow控制器1，OpenFlow实例2连接于OpenFlow控制器1和OpenFlow控制器2，OpenFlow实例3连接于OpenFlow控制器3。
若图2中的OpenFlow设备为AP，当终端接入AP或者终端断开与AP之 间的连接时，AP与终端之间的无线虚接口会发生变化。如果AP与终端之间的无线虚接口频繁地发生变化，这使得OpenFlow控制器频繁地为AP的无线虚接口配置实例。
例如，当出现网络不稳定的情况，会使得终端频繁地与AP建立连接并断开连接；或者，当终端处于AP信号覆盖范围的边缘时，也会使得终端频繁地与AP建立连接并断开连接。
例如，终端接入AP后，AP向OpenFlow控制器上报为该终端创建的无线虚接口，OpenFlow控制器为该无线虚接口配置实例，但是，在短时间内，终端又断开与AP的连接，AP删除该无线虚接口，OpenFlow控制器则需再删除为该无线虚接口配置的实例。若终端反复连接AP，又反复断开与AP的连接，会导致OpenFlow控制器的配置振荡，可见现有技术中在无线设备上实现OpenFlow多实例较为复杂。
为了解决上述问题，本公开实施例提出OpenFlow实例配置，应用于无线网络。无线网络包括SDN控制器、AC、多个AP以及多个终端。其中，多个AP接入AC，由AC进行统一管理，多个终端接入AP，由AP为终端提供服务。如图3所示，图3示例性地示出了一个SDN控制器、一个AC、以及与AC连接的AP1和AP2。
其中，SDN控制器可通过OpenFlow协议与AC或AP通信，在本公开实施例中，SDN控制器也可称为OpenFlow控制器。可选地，SDN控制器可通过交换机与AC相连。AP1可服务于终端1和终端2，AP1通过无线虚接口1与终端1通信，通过无线虚接口2与终端2通信。AP2服务于终端3，AP2通过无线虚接口3与终端3通信。
为了解决在无线设备上实现OpenFlow多实例较为复杂的问题，本公开实施例中，SDN控制器可分别为每个AP划分一个OpenFlow实例，AP创建的无线虚接口可与AP对应的OpenFlow实例绑定，如此，当AP上的无线虚接口出现变化时，OpenFlow控制器无需重新划分OpenFlow实例，降低在无线设备上实现OpenFlow多实例的复杂度。
结合图3所示的无线网络架构，本公开实施例中为图3中的无线设备配置的实例如图4所示，其中，AP1的标识绑定OpenFlow实例1，AP2的标识 绑定OpenFlow实例2，且AP1的标识和AP2的标识均绑定到全局OpenFlow实例。
当终端接入AP1时，AP1创建的无线虚接口均属于OpenFlow实例1，例如，图3中的无线虚接口1和无线虚接口2均属于OpenFlow实例1。当终端接入AP2时，AP2创建的无线虚接口均属于OpenFlow实例2，例如，图3中的无线虚接口3属于OpenFlow实例2。
可选地，在一种可能的实现方式中，SDN控制器也可以为一个AP创建多个实例，预先建立无线虚接口特征与实例的对应关系，无线虚接口特征为通过该无线虚接口接入的终端的特征，终端的特征具体可以为终端的品牌、型号等。例如，在AP1上创建实例A和实例B，预先设置用于连接品牌1和品牌2的终端的无线虚接口属于实例A，用于连接品牌3和品牌4的终端的无线虚接口属于实例B。
以下结合具体实施例对本公开实施例提供的OpenFlow实例的配置方法进行描述。
如图5所示，本公开实施例提供了一种OpenFlow实例的配置方法，该方法的执行主体为AC，至少一个AP接入该AC，该方法包括：
S501、AC获取全局实例的配置信息和每个AP对应的AP实例的配置信息。
在本公开实施例中，全局实例为AC根据全局实例的配置信息创建的全局OpenFlow实例，简称为全局实例。AP实例为AP根据AP实例的配置信息创建的OpenFlow实例，简称为AP实例。下文均已简称进行举例说明。
具体地，AC接收用户输入的或SDN控制器下发的全局实例的配置信息。全局实例的配置信息包括用于创建全局实例的信息和SDN控制器的互联网协议(Internet Protocol，IP)地址和端口号，还可以包括AC的IP地址和端口号。
AC还接收用户输入的或SDN控制器下发的每个AP对应的AP实例的配置信息。
例如，结合图3，AC接收AP1对应的AP实例1的配置信息，以及AP2对应的AP实例2的配置信息。
S502、AC分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例绑定。
例如，在图3中，AC向AP1发送AP实例1的配置信息，向AP2发送AP实例2的配置信息。AP1、AP2接收到AP实例的配置信息后，AP1创建AP实例1，AP2创建AP实例2，且AP1的标识绑定AP实例1，AP2的标识绑定AP实例2。
S503、根据全局实例的配置信息，AC创建全局实例。
S504、AC将AC标识以及每个AP的AP标识与全局实例绑定。
示例性地，如图4所示，图3中的AP1的标识绑定AP实例1，AP2的标识绑定AP实例2，AP1的标识和AP2的标识均绑定至全局实例。
采用本公开实施例提供的OpenFlow实例的配置方法，AC根据全局实例的配置信息创建全局实例，并将AC的标识以及每个AP的标识与全局实例绑定，且每个AP标识与AP所创建的AP实例绑定。即使AP中的无线虚接口发生变化，AP的标识与OpenFlow实例之间的绑定关系也不会发生变化，无需重新配置实例，相比于现有技术中基于无线虚接口配置实例的方法，本公开实施例采用的配置实例的方法可以减小配置工作量，实现过程较为简单。
AC在创建全局实例之后，还可接收到SDN控制器下发的流表项，以根据流表项对报文进行处理。
在第一种可能的实施方式中，针对集中转发方式，可按照以下方法进行处理。
AC接收SDN控制器发送的第一上行流表项，第一上行流表项用于AC对上行数据报文进行集中转发。
其中，第一上行流表项包括目的IP地址、虚拟局域网(Virtual Local Area Network,VLAN)值、目的媒体访问控制(Media Access Control，MAC)地址，以及终端接入AP的无线虚接口标识。
可选的，第一上行流表项可表示为：OpenFlow基本匹配域(目的IP地址+VLAN值+目的MAC地址)+扩展匹配域(终端接入AP的无线虚接口标识)+Output(目的IP地址)。
当AC接收到第一AP发送的上行数据报文，且上行数据报文包括的目的IP地、VLAN值、目的MAC地址与第一上行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，AC判断第一AP接收上行数据报文的无线虚接口是否为第一上行流表项包括的无线虚接口标识对应的无线虚接口。如果是，则AC根据第一上行流表项，向目的IP地址转发上行数据报文。
换言之，若AC接收到的上行数据报文与第一上行流表项中的基本匹配域和扩展匹配域均匹配成功，则AC根据第一上行流表项的output转发该上行数据报文。
在这种实施方式中，AC还可以接收SDN控制器发送的第一下行流表项，第一下行流表项用于AC对下行数据报文进行集中转发。
其中，第一下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识。
可选的，第一下行流表项可表示为：OpenFlow基本匹配域(目的IP地址+VLAN值+目的MAC地址)+扩展匹配域(AP标识)+Output(连接AP的无线接口标识)。
当AC接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，AC判断用于转发下行数据报文的第一AP是否为第一下行流表项中的AP标识对应的AP。如果是，则AC根据第一下行流表项，通过连接第一AP的无线接口向第一AP发送下行数据报文。
换言之，若AC接收到的下行数据报文与第一下行流表项中的基本匹配域和扩展匹配域均匹配成功，则AC根据第一下行流表项的output转发该下行数据报文。
在第二种可能的实施方式中，针对本地转发方式，可按照以下方法进行处理。
AC接收SDN控制器发送的第二上行流表项，第二上行流表项用于AC对上行数据报文进行本地转发。
其中，第二上行流表项包括源IP地址、VLAN值、源MAC地址以及AP标识。
可选的，第二上行流表项可表示为：OpenFlow基本匹配域(源IP地址+VLAN值+源MAC地址)+扩展匹配域(AP标识)+Output(目的IP地址)。
当AC接收到第二AP发送的上行数据报文，且上行数据报文包括的源IP地址、VLAN值、源MAC地址与第二上行流表项包括的源IP地址、VLAN值、源MAC地址均匹配时，AC判断第二AP是否为第二上行流表项中的AP标识对应的AP；如果是，则AC根据第二上行流表项转发上行数据报文。具体地，AC根据第二上行流表项向目的IP地址转发上行数据报文。
换言之，若AC接收到的上行数据报文与第二上行流表项中的基本匹配域和扩展匹配域均匹配成功，则AC根据第二上行流表项中的output转发该上行数据报文。
在这种实施方式中，AC还可以接收SDN控制器发送的第二下行流表项。第二下行流表项用于AC对下行数据报文进行本地转发。
其中，第二下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
可选的，第二下行流表项可表示为：OpenFlow基本匹配域(目的IP地址+VLAN值+目的MAC地址)+扩展匹配域(AP标识)+Output(AP标识)。
当AC接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第二下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，AC判断用于转发下行数据报文的第二AP是否为第二下行流表项中的AP标识对应的AP。如果是，则AC根据第二下行流表项，向第二AP发送下行数据报文。
换言之，若AC接收到的下行数据报文与第二下行流表项中的基本匹配域和扩展匹配域均匹配成功，则AC根据第二下行流表项中的output转发该下行数据报文。
可以理解的是，采用本地转发方式还需由AP对报文进行转发和封装，所以在上述第二种实现方式的基础上，SDN控制器还可以通过AC向AP下发流表项，以使得AP根据接收到的流表项对报文进行处理，具体实现过程如下：
AC接收SDN控制器发送的第三上行流表项，然后，AC向第二AP发送第三上行流表项，以使得当第二AP接收到终端发送的上行数据报文，且接收 上行数据报文的无线虚接口为第三上行流表项包括的无线虚接口的标识对应的无线虚接口时，第二AP根据第三上行流表项向AC转发该上行数据报文。
其中，第三上行流表项用于第二AP对上行数据报文进行本地转发，第三上行流表项包括无线虚接口的标识，该虚线虚接口用于终端接入第二AP。
可选的，第三上行流表项可表示为：OpenFlow扩展匹配域(无线虚接口的标识)+Output(AC标识)。
此外，AC接收SDN控制器发送的第三下行流表项，然后，AC向第二AP发送第三下行流表项，以使得当第二AP接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为第三下行流表项中的MAC地址时，第二AP通过第三下行流表项向终端转发该下行数据报文。
其中，第三下行流表项用于第二AP对下行数据报文进行本地转发，第三下行流表项包括目的MAC地址。
第三下行流表项还包括无线虚接口的标识，该无线虚接口用于终端接入第二AP。AC具体通过第三下行流表项中的无线虚接口的标识对应的无线虚接口转发下行数据报文。
可选的，第三下行流表项可表示为：OpenFlow基本匹配域(目的MAC地址)+Output(无线虚接口的标识)。
对应于图5所示的实施例，本公开实施例还提供一种OpenFlow实例的配置方法，由AP执行，如图6所示，该方法包括：
S601、AP获取AP实例的配置信息。
其中，AP接收用户输入的AP实例的配置信息，或者AP接收SDN控制器发送给AC，AC再向AP转发AP实例的配置信息。AP实例为AP根据AP实例的配置信息创建的OpenFlow实例，简称为AP实例。下文均以简称进行举例说明。
可选地，AP实例的配置信息包括用于创建AP实例的信息和SDN控制器的IP地址和端口号，还可以包括AP的IP地址和端口号。
S602、根据AP实例的配置信息，AP创建AP实例。
S603、AP将AP的AP标识与所创建的AP实例绑定。
其中，在AP将AP标识与所创建的AP实例绑定后，AP创建的用于连接 终端的无线虚接口也属于该AP实例。
采用本公开实施例提供的OpenFlow实例的配置方法，AP根据AP实例的配置信息创建AP实例，并将AP的AP标识与所创建的AP实例绑定，即该AP属于AP实例。即使AP中的无线虚接口发生变化，AP标识与AP实例之间的绑定关系也不会发生变化，AP上无线虚接口的变化不会影响到AP实例的划分。即当AP的无线虚接口发生变化时，无需重新配置实例。相比与现有技术中基于无线虚接口配置实例的方法，本公开实施例采用的基于AP配置实例的方法可以减少配置工作量，实现较为简单。
在AP创建AP实例后，在AP支持本地转发的情况下，AP接收AC发送的上行流表项和下行流表项。该上行流表项为上述实施例中的第三上行流表项，该下行流表项为上述实施例中的第三下行流表项。该上行流表项用于AP对上行数据报文进行本地转发，该下行流表项用于AP对下行数据报文进行本地转发。
其中，上行流表项包括无线虚接口的标识，该无线虚接口用于终端接入AP，即终端通过该无线虚接口与AP建立连接。
可选的，该上行流表项可表示为：OpenFlow扩展匹配域(无线虚接口的标识)+Output(AC标识)。
当AP接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为上行流表项包括的无线虚接口的标识对应的无线虚接口时，AP根据上行流表项向AC转发上行数据报文。
换言之，若AP接收到的上行数据报文与上行流表项中的扩展匹配域匹配，则AP根据上行流表项中的output转发上行数据报文，即根据output中的AC标识向该AC标识对应的AC转发上行数据报文。
下行流表项包括目的MAC地址。可选的，该下行流表项可表示为：OpenFlow基本匹配域(目的MAC地址)+Output(无线虚接口的标识)。
当AP接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为下行流表项中的目的MAC地址时，AP通过下行流表项向终端转发下行数据报文。
具体地，AP通过下行流表项中的无线虚接口标识对应的无线虚接口，向 终端转发数据报文。
换言之，若AP接收到的下行数据报文与下行流表项中的基本匹配域匹配，则AP根据下行流表项中的output转发下行数据报文，即根据output中的无线虚接口的标识，向该无线虚接口的标识对应的无线虚接口转发该下行数据报文。
以下结合具体的例子对本公开实施例提供的OpenFlow实例的配置方法进行说明，结合图3和图4，AC可创建全局实例，将AC的标识、AP1的标识和AP2的标识与全局实例绑定。AP1创建AP实例1，并将AP1的标识与AP实例1绑定。AP2创建AP实例2，并将AP2的标识与AP实例2绑定。假设AP1支持集中转发，AP2支持本地转发。
如图7所示，图7为集中上行转发流程的示例性示意图，在图7的场景中，AP1支持集中转发，SDN控制器无需为AP1下发上行流表项，可为AC下发第一上行流表项：OpenFlow基本匹配域(目的IP地址+VLAN值+目的MAC值)+扩展匹配域(终端接入AP的无线虚接口标识)+Output(目的IP地址)。
目前，AP1通过射频口接收到终端1发送的上行数据报文后，按照图7中的箭头方向对上行数据报文进行转发。即AP1通过无线转发方式将上行数据报文转发至AC的二层转发模块，AC的二层转发模块再将上行数据报文转发至三层转发模块，三层转发模块将上行数据报文转发给AC的无线转发模块。然后，无线转发模块再将上行数据报文发送至二层转发模块，由二层转发模块根据上行数据报文中的目的IP地址对上行数据报文进行转发。
在本公开实施例中，AC中的第一上行流表项可代替图7中的二层转发模块和三层转发模块。即AP1接收到终端1发送的上行数据报文后，通过无线转发方式将上行数据报文转发至AC的无线转发模块。
若AC确定上行数据报文中的目的IP地址、VLAN值、目的MAC地址与第一上行流表项中的基本匹配域相匹配，且AP1接收该上行数据报文的无线虚接口为第一上行流表项中的无线虚接口标识对应的无线虚接口，则AC确定该上行数据报文与第一上行流表项匹配，进而AC根据第一上行流表项,由无线转发模块将该上行数据报文转发至目的IP地址。
如图8所示，图8为集中下行转发流程的示例性示意图，在图8的场景 中，AP1支持集中转发，SDN控制器无需为AP1下发下行流表项，可为AC下发第一下行流表项：OpenFlow基本匹配域(目的IP地址+VLAN值+目的MAC地址)+扩展匹配域(AP标识)+Output(连接AP的无线接口标识)。
目前，AC接收到下行数据报文后可按照图8中的箭头顺序对下行数据报文进行转发。在本公开实施例中，AC中的下行流表项可替换图8中的二层转发模块和三层转发模块。即AC接收到下行数据报文后，若确定下行数据报文中的目的IP地址、VLAN值、目的MAC地址与下行流表项中的基本匹配域相匹配，且用于转发该下行数据报文的AP1为第一下行流表项中的AP标识对应的AP，则AC确定该下行数据报文与第一下行流表项匹配，进而AC根据第一下行流表项，通过连接AP的无线接口向AP1发送下行数据报文，再由AP1向终端转发该下行数据报文。
如图9所示，图9为本地上行转发流程的示例性示意图，在图9的场景中，AP2支持本地转发，AC接收到的第二上行流表项为：OpenFlow基本匹配域(源IP地址+VLAN值+源MAC地址)+扩展匹配域(AP标识)+Output(目的IP地址)；AP2接收到的第三上行流表项为OpenFlow扩展匹配域(无线虚接口的标识)+Output(AC标识)。
目前AP2接收到来自终端的上行数据报文后可按照图9中的箭头顺序对上行数据报文进行转发。在本公开实施例中，AC的第二上行流表项可替换图9中AC的二层转发模块和三层转发模块，AP2的第二上行流表项可替换图9中AP2的二层转发模块。
即AP2接收到来自终端的上行数据报文后，若AP2接收该上行数据报文的无线虚接口为第三上行流表项的扩展匹配域中的无线虚接口的标识对应的无线虚接口，则AP2确定该上行数据报文与AP2中的第三上行流表项匹配，进而AP2根据该第三上行流表项，向AC转发该上行数据报文。AC接收到该上行数据报文后，若确定上行数据报文中的目的IP地址、VLAN值、目的MAC地址与自身存储的第二上行流表项中的基本匹配域匹配，且发送该上行数据报文的AP2为第二上行流表项中的AP标识对应的AP，则AC确定该上行数据报文与该第二上行流表项匹配，进而AC根据该第二上行流表项，向目的IP地址转发该上行数据报文。
如图10所示，图10为本地下行转发流程的示例性示意图，在图10的场景中，AP2支持本地转发，AC接收到的第二下行流表项为：OpenFlow基本匹配域(目的IP地址+VLAN值+目的MAC地址)+扩展匹配域(AP标识)+Output(AP标识)；AP2接收到的第三下行流表项为：OpenFlow基本匹配域(目的MAC地址)+Output(无线虚接口的标识)。
目前AP2接收到下行数据报文后可按照图10中的箭头顺序对下行数据报文进行转发，在本公开实施例中，AC的第二下行流表项可替换图10中AC的二层转发模块和三层转发模块，AP2的第三下行流表项可替换图10中AP2的二层转发模块。
即AC接收到下行数据报文后，若确定下行数据报文中的目的IP地址、VLAN值、目的MAC地址与第二下行流表项中的基本匹配域相匹配，且根据该下行数据报文确定用于转发该下行数据报文的AP2为第二下行流表项中的AP标识对应的AP，则AC确定该下行数据报文与该第二下行流表项匹配，进而AC根据该第二下行流表项，向AP2转发该下行数据报文。
AP2接收到下行数据报文后，若确定下行数据报文中的目的MAC地址为自身存储的第三下行流表项中的目的MAC地址，则AP2确定该下行数据报文与该第三下行流表项匹配，进而AP2通过第三下行流表项中的无线虚接口的标识对应的无线虚接口，向终端转发该下行数据报文。
对应于图5的方法实施例，本公开实施例还提供一种OpenFlow实例的配置装置，该装置应用于AC，如图11所示，该装置包括：获取模块1101、发送模块1102、创建模块1103和绑定模块1104。
获取模块1101，用于获取全局实例的配置信息和每个AP对应的AP实例的配置信息。
发送模块1102，用于分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例绑定。
创建模块1103，用于根据获取模块1101获取的全局实例的配置信息，创建全局实例。
绑定模块1104，用于将AC标识以及每个AP的AP标识与全局实例绑定。
可选地，该装置还包括：判断模块1105。
获取模块1101，用于接收软件定义网络SDN控制器发送的第一上行流表项，第一上行流表项用于AC对上行数据报文进行集中转发，第一上行流表项包括目的互联网协议IP地址、虚拟局域网VLAN值、目的媒体访问控制MAC地址以及终端接入AP的无线虚接口的标识。
判断模块1105，用于当接收到第一AP发送的上行数据报文，且上行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一上行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断第一AP接收上行数据报文的无线虚接口是否为第一上行流表项包括的无线虚接口标识对应的无线虚接口；
发送模块1102，用于如果第一AP接收上行数据报文的无线虚接口为第一上行流表项包括的无线虚接口标识对应的无线虚接口，则发送模块1102根据第一上行流表项，向目的IP地址转发上行数据报文；
获取模块1101，还用于接收SDN控制器发送的第一下行流表项，第一下行流表项用于AC对下行数据报文进行集中转发，第一下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
判断模块1105，还用于当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第一AP是否为第一下行流表项中的AP标识对应的AP；
可选地，发送模块1102，还用于如果用于转发下行数据报文的第一AP为第一下行流表项中的AP标识对应的AP，则发送模块1102根据第一下行流表项，通过连接第一AP的无线接口向第一AP发送下行数据报文。
可选地，获取模块1101，还用于接收SDN控制器发送的第二上行流表项，第二上行流表项用于AC对上行数据报文进行本地转发，第二上行流表项包括源IP地址、VLAN值、源MAC地址以及AP标识。
判断模块1105，还用于当接收到第二AP发送的上行数据报文，且上行数据报文包括的源IP地址、VLAN值、源MAC地址与第二上行流表项包括的源IP地址、VLAN值、源MAC地址均匹配时，判断第二AP是否为第二 上行流表项中的AP标识对应的AP。
发送模块1102，还用于如果第二AP为第二上行流表项中的AP标识对应的AP，则发送模块1102根据第二上行流表项转发上行数据报文。
可选地，获取模块1101，还用于接收SDN控制器发送的第二下行流表项，第二下行流表项用于AC对下行数据报文进行本地转发，第二下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识。
判断模块1105，还用于当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第二下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第二AP是否为第二下行流表项中的AP标识对应的AP。
发送模块1102，还用于如果用于转发下行数据报文的第二AP为第二下行流表项中的AP标识对应的AP，则发送模块1102根据第二下行流表项，向第二AP发送下行数据报文。
可选地，获取模块1101，还用于接收SDN控制器发送的第三上行流表项，第三上行流表项用于第二AP对上行数据报文进行本地转发，第三上行流表项包括无线虚接口的标识，无线虚接口用于终端接入第二AP；
发送模块1102，还用于向第二AP发送第三上行流表项，以使得当第二AP接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为第三上行流表项包括的无线虚接口的标识对应的无线虚接口时，发送模块1102根据第三上行流表项向AC转发上行数据报文。
可选地，获取模块1101，还用于接收SDN控制器发送的第三下行流表项，第三下行流表项用于第二AP对下行数据报文进行本地转发，第三下行流表项包括目的MAC地址。
发送模块1102，还用于向第二AP发送第三下行流表项，以使得当第二AP接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为第三下行流表项中的目的MAC地址时，通过第三下行流表项向终端转发下行数据报文。
对应于图6所示的方法实施例，本公开实施例还提供一种OpenFlow实例的配置装置，该装置应用于AP，如图12所示，该装置包括：获取模块1201、 创建模块1202和绑定模块1203。
获取模块1201，用于获取AP实例的配置信息。
创建模块1202，用于根据获取模块1201获取的AP实例的配置信息创建AP实例。
绑定模块1203，用于将AP的AP标识与所创建的AP实例绑定。
可选地，该装置还包括：发送模块1204。
获取模块1201，还用于在AP支持本地转发的情况下，接收接入控制器AC发送的上行流表项，上行流表项用于AP对上行数据报文进行本地转发，上行流表项包括无线虚接口的标识，无线虚接口用于终端接入AP。
发送模块1204，用于当接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据上行流表项向AC转发上行数据报文。
可选地，获取模块1201，还用于在AP支持本地转发的情况下，接收AC发送的下行流表项，下行流表项用于AP对下行数据报文进行本地转发，下行流表项包括目的媒体访问控制MAC地址。
发送模块1204，还用于当接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为下行流表项中的目的MAC地址时，通过下行流表项向终端转发下行数据报文。
本公开实施例还提供了一种AC，如图13所示，包括处理器1301、通信接口1302、存储器1303和通信总线1304，其中，处理器1301，通信接口1302，存储器1303通过通信总线1304完成相互间的通信，
存储器1303，用于存放计算机程序；
处理器1301，用于执行存储器1303上所存放的程序时，实现上述方法实施例中由AC执行的步骤。
上述AC提到的通信总线可以是外设部件互连标准(Peripheral Component Interconnect，PCI)总线或扩展工业标准结构(Extended Industry Standard Architecture，EISA)总线等。该通信总线可以分为地址总线、数据总线、控制总线等。为便于表示，图中仅用一条粗线表示，但并不表示仅有一根总线或一种类型的总线。
通信接口用于上述AC与其他设备之间的通信。
存储器可以包括随机存取存储器(Random Access Memory，RAM)，也可以包括非易失性存储器(Non-Volatile Memory，NVM)，例如至少一个磁盘存储器。可选的，存储器还可以是至少一个位于远离前述处理器的存储装置。
上述的处理器可以是通用处理器，包括中央处理器(Central Processing Unit，CPU)、网络处理器(Network Processor，NP)等；还可以是数字信号处理器(Digital Signal Processing，DSP)、专用集成电路(Application Specific Integrated Circuit，ASIC)、现场可编程门阵列(Field-Programmable Gate Array，FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件。
基于相同的技术构思，本公开实施例还提供一种AC，包括处理器和机器可读存储介质，机器可读存储介质存储有能够被处理器执行的机器可执行指令，处理器被机器可执行指令促使：
获取全局实例的配置信息和每个AP对应的AP实例的配置信息；
分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例绑定；
根据全局实例的配置信息，创建全局实例；
将AC标识以及每个AP的AP标识与全局实例绑定。
可选地，机器可执行指令还促使处理器：
接收软件定义网络SDN控制器发送的第一上行流表项，第一上行流表项用于AC对上行数据报文进行集中转发，第一上行流表项包括目的互联网协议IP地址、虚拟局域网VLAN值、目的媒体访问控制MAC地址以及终端接入AP的无线虚接口的标识；
当接收到第一AP发送的上行数据报文，且上行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一上行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断第一AP接收上行数据报文的无线虚接口是否为第一上行流表项包括的无线虚接口标识对应的无线虚接口；
如果是，则根据第一上行流表项，向目的IP地址转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第一下行流表项，第一下行流表项用于AC对下行数据报文进行集中转发，第一下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第一AP是否为第一下行流表项中的AP标识对应的AP；
如果是，则根据第一下行流表项，通过连接第一AP的无线接口向第一AP发送下行数据报文。
可选地，机器可执行指令还促使处理器：
接收SDN控制器发送的第二上行流表项，第二上行流表项用于AC对上行数据报文进行本地转发，第二上行流表项包括源IP地址、VLAN值、源MAC地址以及AP标识；
当接收到第二AP发送的上行数据报文，且上行数据报文包括的源IP地址、VLAN值、源MAC地址与第二上行流表项包括的源IP地址、VLAN值、源MAC地址均匹配时，判断第二AP是否为第二上行流表项中的AP标识对应的AP；
如果是，则根据第二上行流表项转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第二下行流表项，第二下行流表项用于AC对下行数据报文进行本地转发，第二下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第二下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第二AP是否为第二下行流表项中的AP标识对应的AP；
如果是，则根据第二下行流表项，向第二AP发送下行数据报文。
可选地，机器可执行指令还促使处理器：
接收SDN控制器发送的第三上行流表项，第三上行流表项用于第二AP对上行数据报文进行本地转发，第三上行流表项包括无线虚接口的标识，无线虚接口用于终端接入第二AP；
向第二AP发送第三上行流表项，以使得当第二AP接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为第三上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据第三上行流表项向AC转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第三下行流表项，第三下行流表项用于第二AP对下行数据报文进行本地转发，第三下行流表项包括目的MAC地址；
向第二AP发送第三下行流表项，以使得当第二AP接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为第三下行流表项中的目的MAC地址时，通过第三下行流表项向终端转发下行数据报文。
基于相同的技术构思，本公开实施例还提供了一种机器可读存储介质，该机器可读存储介质可应用于AC，机器可读存储介质存储有能够被处理器执行的机器可执行指令，在被处理器调用和执行时，机器可执行指令促使处理器：
获取全局实例的配置信息和每个AP对应的AP实例的配置信息；
分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例绑定；
根据全局实例的配置信息，创建全局实例；
将AC标识以及每个AP的AP标识与全局实例绑定。
可选地，机器可执行指令还促使处理器：
接收软件定义网络SDN控制器发送的第一上行流表项，第一上行流表项用于AC对上行数据报文进行集中转发，第一上行流表项包括目的互联网协议 IP地址、虚拟局域网VLAN值、目的媒体访问控制MAC地址以及终端接入AP的无线虚接口的标识；
当接收到第一AP发送的上行数据报文，且上行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一上行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断第一AP接收上行数据报文的无线虚接口是否为第一上行流表项包括的无线虚接口标识对应的无线虚接口；
如果是，则根据第一上行流表项，向目的IP地址转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第一下行流表项，第一下行流表项用于AC对下行数据报文进行集中转发，第一下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第一AP是否为第一下行流表项中的AP标识对应的AP；
如果是，则根据第一下行流表项，通过连接第一AP的无线接口向第一AP发送下行数据报文。
可选地，机器可执行指令还促使处理器：
接收SDN控制器发送的第二上行流表项，第二上行流表项用于AC对上行数据报文进行本地转发，第二上行流表项包括源IP地址、VLAN值、源MAC地址以及AP标识；
当接收到第二AP发送的上行数据报文，且上行数据报文包括的源IP地址、VLAN值、源MAC地址与第二上行流表项包括的源IP地址、VLAN值、源MAC地址均匹配时，判断第二AP是否为第二上行流表项中的AP标识对应的AP；
如果是，则根据第二上行流表项转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第二下行流表项，第二下行流表项用于AC对下行数据报文进行本地转发，第二下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第二下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第二AP是否为第二下行流表项中的AP标识对应的AP；
如果是，则根据第二下行流表项，向第二AP发送下行数据报文。
可选地，机器可执行指令还促使处理器：
接收SDN控制器发送的第三上行流表项，第三上行流表项用于第二AP对上行数据报文进行本地转发，第三上行流表项包括无线虚接口的标识，无线虚接口用于终端接入第二AP；
向第二AP发送第三上行流表项，以使得当第二AP接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为第三上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据第三上行流表项向AC转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第三下行流表项，第三下行流表项用于第二AP对下行数据报文进行本地转发，第三下行流表项包括目的MAC地址；
向第二AP发送第三下行流表项，以使得当第二AP接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为第三下行流表项中的目的MAC地址时，通过第三下行流表项向终端转发下行数据报文。
基于相同的技术构思，本公开实施例还提供了一种机器可执行指令，机器可执行指令可存储于机器可读存储介质，并应用于AC，在被处理器调用和执行时，机器可执行指令促使处理器执行：
获取全局实例的配置信息和每个AP对应的AP实例的配置信息；
分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例 绑定；
根据全局实例的配置信息，创建全局实例；
将AC标识以及每个AP的AP标识与全局实例绑定。
可选地，机器可执行指令还促使处理器：
接收软件定义网络SDN控制器发送的第一上行流表项，第一上行流表项用于AC对上行数据报文进行集中转发，第一上行流表项包括目的互联网协议IP地址、虚拟局域网VLAN值、目的媒体访问控制MAC地址以及终端接入AP的无线虚接口的标识；
当接收到第一AP发送的上行数据报文，且上行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一上行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断第一AP接收上行数据报文的无线虚接口是否为第一上行流表项包括的无线虚接口标识对应的无线虚接口；
如果是，则根据第一上行流表项，向目的IP地址转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第一下行流表项，第一下行流表项用于AC对下行数据报文进行集中转发，第一下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第一下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第一AP是否为第一下行流表项中的AP标识对应的AP；
如果是，则根据第一下行流表项，通过连接第一AP的无线接口向第一AP发送下行数据报文。
可选地，机器可执行指令还促使处理器：
接收SDN控制器发送的第二上行流表项，第二上行流表项用于AC对上行数据报文进行本地转发，第二上行流表项包括源IP地址、VLAN值、源MAC地址以及AP标识；
当接收到第二AP发送的上行数据报文，且上行数据报文包括的源IP地 址、VLAN值、源MAC地址与第二上行流表项包括的源IP地址、VLAN值、源MAC地址均匹配时，判断第二AP是否为第二上行流表项中的AP标识对应的AP；
如果是，则根据第二上行流表项转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第二下行流表项，第二下行流表项用于AC对下行数据报文进行本地转发，第二下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
当接收到下行数据报文，且下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与第二下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发下行数据报文的第二AP是否为第二下行流表项中的AP标识对应的AP；
如果是，则根据第二下行流表项，向第二AP发送下行数据报文。
可选地，机器可执行指令还促使处理器：
接收SDN控制器发送的第三上行流表项，第三上行流表项用于第二AP对上行数据报文进行本地转发，第三上行流表项包括无线虚接口的标识，无线虚接口用于终端接入第二AP；
向第二AP发送第三上行流表项，以使得当第二AP接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为第三上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据第三上行流表项向AC转发上行数据报文；
或者，
机器可执行指令还促使处理器：
接收SDN控制器发送的第三下行流表项，第三下行流表项用于第二AP对下行数据报文进行本地转发，第三下行流表项包括目的MAC地址；
向第二AP发送第三下行流表项，以使得当第二AP接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为第三下行流表项中的目的MAC地址时，通过第三下行流表项向终端转发下行数据报文。
本公开实施例还提供了一种AP，如图14所示，包括处理器1401、通信接口1402、存储器1403和通信总线1404，其中，处理器1401，通信接口1402，存储器1403通过通信总线1404完成相互间的通信，
存储器1403，用于存放计算机程序；
处理器1401，用于执行存储器1403上所存放的程序时，实现上述方法实施例中由AP执行的步骤。
上述AP提到的通信总线可以是外设部件互连标准(Peripheral Component Interconnect，PCI)总线或扩展工业标准结构(Extended Industry Standard Architecture，EISA)总线等。该通信总线可以分为地址总线、数据总线、控制总线等。为便于表示，图中仅用一条粗线表示，但并不表示仅有一根总线或一种类型的总线。
通信接口用于上述AP与其他设备之间的通信。
存储器可以包括随机存取存储器(Random Access Memory，RAM)，也可以包括非易失性存储器(Non-Volatile Memory，NVM)，例如至少一个磁盘存储器。可选的，存储器还可以是至少一个位于远离前述处理器的存储装置。
上述的处理器可以是通用处理器，包括中央处理器(Central Processing Unit，CPU)、网络处理器(Network Processor，NP)等；还可以是数字信号处理器(Digital Signal Processing，DSP)、专用集成电路(Application Specific Integrated Circuit，ASIC)、现场可编程门阵列(Field-Programmable Gate Array，FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件。
基于相同的技术构思，本公开实施例还提供了一种AP，包括处理器和机器可读存储介质，机器可读存储介质存储有能够被处理器执行的机器可执行指令，处理器被机器可执行指令促使：
获取AP实例的配置信息；
根据AP实例的配置信息创建AP实例；
将AP的AP标识与所创建的AP实例绑定。
可选地，机器可执行指令促使处理器：
在AP支持本地转发的情况下，接收接入控制器AC发送的上行流表项， 上行流表项用于AP对上行数据报文进行本地转发，上行流表项包括无线虚接口的标识，无线虚接口用于终端接入AP；
当接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据上行流表项向AC转发上行数据报文；
或者，
机器可执行指令促使处理器：
在AP支持本地转发的情况下，接收AC发送的下行流表项，下行流表项用于AP对下行数据报文进行本地转发，下行流表项包括目的媒体访问控制MAC地址；
当接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为下行流表项中的目的MAC地址时，通过下行流表项向终端转发下行数据报文。
基于相同的技术构思，本公开实施例还提供了一种机器可读存储介质，该机器可读存储介质可应用于AP，机器可读存储介质存储有能够被处理器执行的机器可执行指令，在被处理器调用和执行时，机器可执行指令促使处理器执行：
获取AP实例的配置信息；
根据AP实例的配置信息创建AP实例；
将AP的AP标识与所创建的AP实例绑定。
可选地，机器可执行指令促使处理器：
在AP支持本地转发的情况下，接收接入控制器AC发送的上行流表项，上行流表项用于AP对上行数据报文进行本地转发，上行流表项包括无线虚接口的标识，无线虚接口用于终端接入AP；
当接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据上行流表项向AC转发上行数据报文；
或者，
机器可执行指令促使处理器：
在AP支持本地转发的情况下，接收AC发送的下行流表项，下行流表项用于AP对下行数据报文进行本地转发，下行流表项包括目的媒体访问控制MAC地址；
当接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为下行流表项中的目的MAC地址时，通过下行流表项向终端转发下行数据报文。
基于相同的技术构思，本公开实施例还提供了一种机器可执行指令，机器可执行指令可存储于机器可读存储介质，并应用于AP，在被处理器调用和执行时，机器可执行指令促使处理器执行：
获取AP实例的配置信息；
根据AP实例的配置信息创建AP实例；
将AP的AP标识与所创建的AP实例绑定。
可选地，机器可执行指令促使处理器：
在AP支持本地转发的情况下，接收接入控制器AC发送的上行流表项，上行流表项用于AP对上行数据报文进行本地转发，上行流表项包括无线虚接口的标识，无线虚接口用于终端接入AP；
当接收到终端发送的上行数据报文，且接收上行数据报文的无线虚接口为上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据上行流表项向AC转发上行数据报文；
或者，
机器可执行指令促使处理器：
在AP支持本地转发的情况下，接收AC发送的下行流表项，下行流表项用于AP对下行数据报文进行本地转发，下行流表项包括目的媒体访问控制MAC地址；
当接收到AC发送的下行数据报文，且下行数据报文包括的目的MAC地址为下行流表项中的目的MAC地址时，通过下行流表项向终端转发下行数据报文。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时，可以全部或部分地以计算机程序产品的形 式实现。所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机程序指令时，全部或部分地产生按照本公开实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一个计算机可读存储介质传输，例如，所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质，(例如，软盘、硬盘、磁带)、光介质(例如，DVD)、或者半导体介质(例如固态硬盘Solid State Disk(SSD))等。
需要说明的是，在本文中，诸如第一和第二等之类的关系术语仅仅用来将一个实体或者操作与另一个实体或操作区分开来，而不一定要求或者暗示这些实体或操作之间存在任何这种实际的关系或者顺序。而且，术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含，从而使得包括一系列要素的过程、方法、物品或者设备不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、物品或者设备所固有的要素。在没有更多限制的情况下，由语句“包括一个……”限定的要素，并不排除在包括所述要素的过程、方法、物品或者设备中还存在另外的相同要素。
本说明书中的各个实施例均采用相关的方式描述，各个实施例之间相同相似的部分互相参见即可，每个实施例重点说明的都是与其他实施例的不同之处。尤其，对于装置实施例而言，由于其基本相似于方法实施例，所以描述的比较简单，相关之处参见方法实施例的部分说明即可。
以上所述仅为本公开的较佳实施例而已，并非用于限定本公开的保护范围。凡在本公开的精神和原则之内所作的任何修改、等同替换、改进等，均包含在本公开的保护范围内。

Claims (14)

  1. 一种OpenFlow实例的配置方法，其中，所述方法应用于接入控制器AC，至少一个接入点AP接入所述AC，所述方法包括：
    获取全局实例的配置信息和每个AP对应的AP实例的配置信息；
    分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例绑定；
    根据所述全局实例的配置信息，创建全局实例；
    将AC标识以及每个AP的AP标识与所述全局实例绑定。
  2. 根据权利要求1所述的方法，其中，所述方法还包括：
    接收软件定义网络SDN控制器发送的第一上行流表项，所述第一上行流表项用于所述AC对上行数据报文进行集中转发，所述第一上行流表项包括目的互联网协议IP地址、虚拟局域网VLAN值、目的媒体访问控制MAC地址以及终端接入AP的无线虚接口标识；
    当接收到第一AP发送的上行数据报文，且所述上行数据报文包括的目的IP地址、VLAN值、目的MAC地址与所述第一上行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断所述第一AP接收所述上行数据报文的无线虚接口是否为所述第一上行流表项包括的无线虚接口标识对应的无线虚接口；
    如果是，则根据所述第一上行流表项，向所述目的IP地址转发所述上行数据报文；
    或者，
    所述方法还包括：
    接收所述SDN控制器发送的第一下行流表项，所述第一下行流表项用于所述AC对下行数据报文进行集中转发，所述第一下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
    当接收到下行数据报文，且所述下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与所述第一下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发所述下行数据报文的第一AP是否为 所述第一下行流表项中的AP标识对应的AP；
    如果是，则根据所述第一下行流表项，通过连接所述第一AP的无线接口向所述第一AP发送所述下行数据报文。
  3. 根据权利要求1所述的方法，其中，所述方法还包括：
    接收SDN控制器发送的第二上行流表项，所述第二上行流表项用于所述AC对上行数据报文进行本地转发，所述第二上行流表项包括源IP地址、VLAN值、源MAC地址以及AP标识；
    当接收到第二AP发送的上行数据报文，且所述上行数据报文包括的源IP地址、VLAN值、源MAC地址与所述第二上行流表项包括的源IP地址、VLAN值、源MAC地址均匹配时，判断所述第二AP是否为所述第二上行流表项中的AP标识对应的AP；
    如果是，则根据所述第二上行流表项转发所述上行数据报文；
    或者，
    所述方法还包括：
    接收SDN控制器发送的第二下行流表项，所述第二下行流表项用于所述AC对下行数据报文进行本地转发，所述第二下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
    当接收到下行数据报文，且所述下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与所述第二下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发所述下行数据报文的第二AP是否为所述第二下行流表项中的AP标识对应的AP；
    如果是，则根据所述第二下行流表项，向所述第二AP发送所述下行数据报文。
  4. 根据权利要求1或3所述的方法，其中，所述方法还包括：
    接收SDN控制器发送的第三上行流表项，所述第三上行流表项用于第二AP对上行数据报文进行本地转发，所述第三上行流表项包括无线虚接口的标识，所述无线虚接口用于终端接入所述第二AP；
    向所述第二AP发送所述第三上行流表项，以使得当所述第二AP接收到终端发送的上行数据报文，且接收所述上行数据报文的无线虚接口为所述第 三上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据所述第三上行流表项向所述AC转发所述上行数据报文；
    或者，
    所述方法还包括：
    接收SDN控制器发送的第三下行流表项，所述第三下行流表项用于所述第二AP对下行数据报文进行本地转发，所述第三下行流表项包括目的MAC地址；
    向所述第二AP发送所述第三下行流表项，以使得当所述第二AP接收到所述AC发送的下行数据报文，且所述下行数据报文包括的目的MAC地址为所述第三下行流表项中的目的MAC地址时，通过所述第三下行流表项向终端转发所述下行数据报文。
  5. 一种OpenFlow实例的配置方法，所述方法应用于接入点AP，所述方法包括：
    获取AP实例的配置信息；
    根据所述AP实例的配置信息创建AP实例；
    将所述AP的AP标识与所创建的AP实例绑定。
  6. 根据权利要求5所述的方法，所述方法还包括：
    在所述AP支持本地转发的情况下，接收接入控制器AC发送的上行流表项，所述上行流表项用于所述AP对上行数据报文进行本地转发，所述上行流表项包括无线虚接口的标识，所述无线虚接口用于终端接入AP；
    当接收到终端发送的上行数据报文，且接收所述上行数据报文的无线虚接口为所述上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据所述上行流表项向所述AC转发所述上行数据报文；
    或者，
    所述方法还包括：
    在所述AP支持本地转发的情况下，接收所述AC发送的下行流表项，所述下行流表项用于所述AP对下行数据报文进行本地转发，所述下行流表项包括目的媒体访问控制MAC地址；
    当接收到所述AC发送的下行数据报文，且所述下行数据报文包括的目的 MAC地址为所述下行流表项中的目的MAC地址时，通过所述下行流表项向终端转发所述下行数据报文。
  7. 一种AC，包括处理器和机器可读存储介质，所述机器可读存储介质存储有能够被所述处理器执行的机器可执行指令；所述机器可执行指令促使所述处理器：
    获取全局实例的配置信息和每个AP对应的AP实例的配置信息；
    分别向每个AP发送对应的AP实例的配置信息，以使得每个AP根据接收到的AP实例的配置信息创建AP实例，并将AP标识与所创建的AP实例绑定；
    根据所述全局实例的配置信息，创建全局实例；
    将AC标识以及每个AP的AP标识与所述全局实例绑定。
  8. 根据权利要求7所述的AC，所述机器可执行指令还促使所述处理器：
    接收软件定义网络SDN控制器发送的第一上行流表项，所述第一上行流表项用于所述AC对上行数据报文进行集中转发，所述第一上行流表项包括目的互联网协议IP地址、虚拟局域网VLAN值、目的媒体访问控制MAC地址以及终端接入AP的无线虚接口的标识；
    当接收到第一AP发送的上行数据报文，且所述上行数据报文包括的目的IP地址、VLAN值、目的MAC地址与所述第一上行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断所述第一AP接收所述上行数据报文的无线虚接口是否为所述第一上行流表项包括的无线虚接口标识对应的无线虚接口；
    如果是，则根据所述第一上行流表项，向所述目的IP地址转发所述上行数据报文；
    或者，
    所述机器可执行指令还促使所述处理器：
    接收所述SDN控制器发送的第一下行流表项，所述第一下行流表项用于所述AC对下行数据报文进行集中转发，所述第一下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
    当接收到下行数据报文，且所述下行数据报文包括的目的IP地址、VLAN 值、目的MAC地址与所述第一下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发所述下行数据报文的第一AP是否为所述第一下行流表项中的AP标识对应的AP；
    如果是，则根据所述第一下行流表项，通过连接所述第一AP的无线接口向所述第一AP发送所述下行数据报文。
  9. 根据权利要求7所述的AC，所述机器可执行指令还促使所述处理器：
    接收SDN控制器发送的第二上行流表项，所述第二上行流表项用于所述AC对上行数据报文进行本地转发，所述第二上行流表项包括源IP地址、VLAN值、源MAC地址以及AP标识；
    当接收到第二AP发送的上行数据报文，且所述上行数据报文包括的源IP地址、VLAN值、源MAC地址与所述第二上行流表项包括的源IP地址、VLAN值、源MAC地址均匹配时，判断所述第二AP是否为所述第二上行流表项中的AP标识对应的AP；
    如果是，则根据所述第二上行流表项转发所述上行数据报文；
    或者，
    所述机器可执行指令还促使所述处理器：
    接收SDN控制器发送的第二下行流表项，所述第二下行流表项用于所述AC对下行数据报文进行本地转发，所述第二下行流表项包括目的IP地址、VLAN值、目的MAC地址以及AP标识；
    当接收到下行数据报文，且所述下行数据报文包括的目的IP地址、VLAN值、目的MAC地址与所述第二下行流表项包括的目的IP地址、VLAN值、目的MAC地址均匹配时，判断用于转发所述下行数据报文的第二AP是否为所述第二下行流表项中的AP标识对应的AP；
    如果是，则根据所述第二下行流表项，向所述第二AP发送所述下行数据报文。
  10. 根据权利要求7或9所述的AC，所述机器可执行指令还促使所述处理器：
    接收SDN控制器发送的第三上行流表项，所述第三上行流表项用于第二AP对上行数据报文进行本地转发，所述第三上行流表项包括无线虚接口的标 识，所述无线虚接口用于终端接入所述第二AP；
    向所述第二AP发送所述第三上行流表项，以使得当所述第二AP接收到终端发送的上行数据报文，且接收所述上行数据报文的无线虚接口为所述第三上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据所述第三上行流表项向所述AC转发所述上行数据报文；
    或者，
    所述机器可执行指令还促使所述处理器：
    接收SDN控制器发送的第三下行流表项，所述第三下行流表项用于所述第二AP对下行数据报文进行本地转发，所述第三下行流表项包括目的MAC地址；
    向所述第二AP发送所述第三下行流表项，以使得当所述第二AP接收到所述AC发送的下行数据报文，且所述下行数据报文包括的目的MAC地址为所述第三下行流表项中的目的MAC地址时，通过所述第三下行流表项向终端转发所述下行数据报文。
  11. 一种AP，包括处理器和机器可读存储介质，所述机器可读存储介质存储有能够被所述处理器执行的机器可执行指令；所述机器可执行指令促使所述处理器：
    获取AP实例的配置信息；
    根据所述AP实例的配置信息创建AP实例；
    将所述AP的AP标识与所创建的AP实例绑定。
  12. 根据权利要求11所述的AP，所述机器可执行指令促使所述处理器：
    在所述AP支持本地转发的情况下，接收接入控制器AC发送的上行流表项，所述上行流表项用于所述AP对上行数据报文进行本地转发，所述上行流表项包括无线虚接口的标识，所述无线虚接口用于终端接入AP；
    当接收到终端发送的上行数据报文，且接收所述上行数据报文的无线虚接口为所述上行流表项包括的无线虚接口的标识对应的无线虚接口时，根据所述上行流表项向所述AC转发所述上行数据报文；
    或者，
    所述机器可执行指令促使所述处理器：
    在所述AP支持本地转发的情况下，接收所述AC发送的下行流表项，所述下行流表项用于所述AP对下行数据报文进行本地转发，所述下行流表项包括目的媒体访问控制MAC地址；
    当接收到所述AC发送的下行数据报文，且所述下行数据报文包括的目的MAC地址为所述下行流表项中的目的MAC地址时，通过所述下行流表项向终端转发所述下行数据报文。
  13. 一种机器可读存储介质，存储有机器可执行指令，在被处理器调用和执行时，所述机器可执行指令促使所述处理器实现权利要求1-4任一项所述的方法。
  14. 一种机器可读存储介质，存储有机器可执行指令，在被处理器调用和执行时，所述机器可执行指令促使所述处理器实现权利要求5-6任一项所述的方法。
PCT/CN2019/108242 2018-09-28 2019-09-26 OpenFlow实例配置 WO2020063776A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP19866075.5A EP3833084B1 (en) 2018-09-28 2019-09-26 Openflow instance configuration
JP2021517004A JP7126021B2 (ja) 2018-09-28 2019-09-26 ＯｐｅｎＦｌｏｗインスタンスの構成
US17/278,578 US11876678B2 (en) 2018-09-28 2019-09-26 OpenFlow instance configuration

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811140453.9A CN109041086B (zh) 2018-09-28 2018-09-28 一种OpenFlow实例的配置方法及装置
CN201811140453.9 2018-09-28

Publications (1)

Publication Number Publication Date
WO2020063776A1 true WO2020063776A1 (zh) 2020-04-02

Family

ID=64615334

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/108242 WO2020063776A1 (zh) 2018-09-28 2019-09-26 OpenFlow实例配置

Country Status (5)

Country Link
US (1) US11876678B2 (zh)
EP (1) EP3833084B1 (zh)
JP (1) JP7126021B2 (zh)
CN (1) CN109041086B (zh)
WO (1) WO2020063776A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113505618A (zh) * 2021-07-22 2021-10-15 三维通信股份有限公司 建立通信连接的方法、装置、存储介质及电子装置

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109041086B (zh) 2018-09-28 2020-10-20 新华三技术有限公司 一种OpenFlow实例的配置方法及装置
CN113098834B (zh) * 2020-01-08 2023-04-07 钉钉控股（开曼）有限公司 访问控制方法、装置、设备和系统
CN113079518A (zh) * 2021-03-29 2021-07-06 新华三技术有限公司 一种报文转发方法、装置及设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104158916A (zh) * 2013-05-13 2014-11-19 中兴通讯股份有限公司 设备接入网络的方法和装置
US20150200849A1 (en) * 2012-09-29 2015-07-16 Alcatel Lucent Method operating in a fixed access network and ues
CN104837147A (zh) * 2014-02-12 2015-08-12 中兴通讯股份有限公司 无线访问接入点的配置方法及系统
CN109041086A (zh) * 2018-09-28 2018-12-18 新华三技术有限公司 一种OpenFlow实例的配置方法及装置

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160330077A1 (en) * 2014-01-08 2016-11-10 Interdigital Patent Holding, Inc. WiFi VIRTUAL NETWORK SOLUTION
CN104582004B (zh) * 2015-01-13 2018-04-06 成都西加云杉科技有限公司 基于sdn的wlan分层组网系统及方法
CN104780106B (zh) * 2015-04-30 2018-05-08 新华三技术有限公司 多实例实现方法及装置
CN105591953B (zh) * 2015-09-18 2019-09-06 新华三技术有限公司 一种OpenFlow实例的实现方法和装置
EP3318084B1 (en) * 2015-09-23 2020-07-29 Google LLC Systems and methods for mobility management in a distributed software defined network packet core system
WO2019084340A1 (en) * 2017-10-26 2019-05-02 Sophos Limited SYSTEM AND METHOD FOR PROVIDING SECURE VLAN IN A WIRELESS NETWORK

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150200849A1 (en) * 2012-09-29 2015-07-16 Alcatel Lucent Method operating in a fixed access network and ues
CN104158916A (zh) * 2013-05-13 2014-11-19 中兴通讯股份有限公司 设备接入网络的方法和装置
CN104837147A (zh) * 2014-02-12 2015-08-12 中兴通讯股份有限公司 无线访问接入点的配置方法及系统
CN109041086A (zh) * 2018-09-28 2018-12-18 新华三技术有限公司 一种OpenFlow实例的配置方法及装置

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
HP: "HP OpenFlow Switches", OPENFLOW CONFIGURATION GUIDE, vol. XP009526228 HP Part Number: 5998-3605, 30 September 2012 (2012-09-30), pages 1 - 50, XP009526228 *
See also references of EP3833084A4 *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113505618A (zh) * 2021-07-22 2021-10-15 三维通信股份有限公司 建立通信连接的方法、装置、存储介质及电子装置

Also Published As

Publication number Publication date
US20220006699A1 (en) 2022-01-06
JP2022502925A (ja) 2022-01-11
CN109041086B (zh) 2020-10-20
US11876678B2 (en) 2024-01-16
EP3833084A1 (en) 2021-06-09
EP3833084A4 (en) 2021-09-29
EP3833084B1 (en) 2024-02-28
CN109041086A (zh) 2018-12-18
JP7126021B2 (ja) 2022-08-25

Similar Documents

Publication Publication Date Title
US11716669B2 (en) Internet of things service routing method
WO2021218397A1 (zh) 用于实现业务连续性的方法及相关设备
WO2020063776A1 (zh) OpenFlow实例配置
US20220239701A1 (en) Control access to domains, servers, and content
US10003540B2 (en) Flow forwarding method, device, and system
EP3142310B1 (en) Method, device, and system for configuring flow entries
US20160301603A1 (en) Integrated routing method based on software-defined network and system thereof
WO2018059284A1 (zh) 一种数据传输的方法及网络设备
WO2015149563A1 (zh) 通信方法、系统、资源池管理系统、交换机和控制装置
WO2017107814A1 (zh) 一种传播QoS策略的方法、装置及系统
US11558491B2 (en) Information-centric networking over 5G or later networks
WO2019184653A1 (zh) 链路配置方法和控制器
WO2021174943A1 (zh) 数据转发方法、装置、设备和存储介质
WO2021254366A1 (zh) 切片数据传输方法及装置、电子设备及计算机可读存储介质
KR101746105B1 (ko) 서비스 체이닝이 가능한 오픈플로우 스위치
KR101767472B1 (ko) Sdn 기반의 제어기의 데이터 경로 변경 방법
JP6275180B2 (ja) 設定情報生成装置、ネットワーク制御装置、方法、及び、プログラム
CN108737277A (zh) 一种报文转发方法及装置
WO2015188682A1 (zh) 业务链的处理方法、装置与系统
CN109274590B (zh) 移动宽带路由器的远程管理方法及电路
WO2023178988A1 (zh) 用户面流量路由配置方法、装置和系统
KR101739097B1 (ko) 오픈플로우 스위치의 서비스 체이닝 방법
KR101739100B1 (ko) 서비스 체이닝 가능한 오픈플로우 스위치 제어 방법 및 그 제어기
WO2022213981A1 (zh) 信息处理方法、装置和通信设备
WO2017012315A1 (zh) 业务监听控制方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19866075

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2019866075

Country of ref document: EP

Effective date: 20210302

ENP Entry into the national phase

Ref document number: 2021517004

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE