WO2020078428A1

WO2020078428A1 - Method and device enabling a user to access the internet, broadband remote access server, and storage medium

Info

Publication number: WO2020078428A1
Application number: PCT/CN2019/111704
Authority: WO
Inventors: 王健; 朱庆太
Original assignee: 中兴通讯股份有限公司
Priority date: 2018-10-17
Filing date: 2019-10-17
Publication date: 2020-04-23
Also published as: CN111064759A; CN111064759B

Abstract

Disclosed are a method and device enabling a user to access the Internet, a broadband remote access server, and a storage medium. The method enabling a user to access the Internet comprises: upon recovery of a network link of a user, receiving a data message from the user according to an Internet access identifier; and enabling the user to access the Internet according to the received data message, wherein the Internet access identifier is used to indicate that the type of the data message being sent is supported.

Description

User online method, device, broadband remote access server and storage medium

Technical field

The present disclosure relates to the field of communication technology.

Background technique

IPoE technology is a technology in which users use DHCP (Dynamic Host Configuration Protocol) protocol messages to interactively obtain addresses. The user does not need to install any dialing tools, and the user has almost no perception in the process of obtaining the address. BRAS (Broadband Remote Access Server), as a broadband user access device, can be responsible for user address allocation, authentication, billing, and authorization. For IPoE users, BRAS can be used as a DHCP server (DHCP Server) to assign addresses to users, or as a relay (Relay), through the external DHCP server to assign addresses to users.

At present, when the link between the user and the BRAS is disconnected, the BRAS deletes the user entry. After the link is restored, the user has an IP address locally but cannot access the network. Usually, it needs to be renewed after the user renewal time arrives. The lease agreement message is triggered to go online.

Summary of the invention

According to an aspect of the present disclosure, a user online method is provided, including: after a user's network link is restored, receiving a user's data message according to an online mark, and online the user according to the received data message, wherein The on-line mark is used to indicate the type of data message supported for upload.

According to another aspect of the present disclosure, a user online device is provided, including: a data message receiving unit for receiving a user's data message according to an online mark after the user's network link is restored; a trigger unit for The user is online according to the received data message, wherein the online mark is used to indicate the type of the data message supported for transmission.

According to another aspect of an embodiment of the present disclosure, a broadband remote access server is provided, including a memory and a processor, a computer program capable of running on the processor is stored on the memory, and the computer program is controlled by the computer. When the processor executes, the processor executes the user online method as described above.

According to another aspect of the embodiments of the present disclosure, there is provided a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by at least one processor, the at least one processor executes the user as described above Online method.

BRIEF DESCRIPTION

Through the detailed description of the embodiments of the present disclosure, various other advantages and benefits will become clear to those skilled in the art. The drawings are only for the purpose of illustrating the embodiments of the present disclosure, and are not considered as limitations to the present disclosure. And throughout the drawings, the same reference symbols indicate the same components. In the drawings:

FIG. 1 is a flowchart of a user online method according to an embodiment of the present disclosure;

FIG. 2 is a schematic diagram of a process for a user to access a BRAS device;

Figure 3 is a schematic diagram of users going online based on the Forcerenew protocol;

4 is a schematic diagram of a BRAS system according to an embodiment of the present disclosure;

5 is a detailed flowchart of a user online method according to an embodiment of the present disclosure;

6 is a schematic structural diagram of a user online device according to an embodiment of the present disclosure;

7 is a schematic structural diagram of a broadband remote access server according to an embodiment of the present disclosure.

detailed description

Hereinafter, exemplary embodiments of the present disclosure will be described in more detail with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

In the following description, the use of suffixes such as "module", "part" or "unit" used to denote an element is only for the benefit of the present disclosure and has no specific meaning in itself. Therefore, "module", "component" or "unit" can be used in a mixed manner.

The use of prefixes such as "first", "second", etc. for distinguishing elements is only for the benefit of the disclosure, and has no specific meaning in itself.

FIG. 1 is a flowchart of a user online method according to an embodiment of the present disclosure.

As shown in FIG. 1, the method includes steps S101 and S102.

In step S101, after the user's network link is restored, the user's data message is received according to the online mark.

In step S102, the user is online according to the received data message.

According to an embodiment of the present disclosure, the on-line mark is used to indicate a message type that supports the uploaded data message.

The user online method according to an embodiment of the present disclosure may be executed in a BRAS device, the BRAS device may be briefly described as a BRAS, the user's network link may be a link between the user and the BRAS, and the user may be an IPoE user terminal.

The logic of the user online method according to the embodiment of the present disclosure is simple, so that after the link recovery of the link break occurs during the user's lease renewal period, the user can continue to go online without additional operations, nor does the user-side device need to be supported Specific agreements. In particular, the user online method according to the embodiment of the present disclosure can also be used in scenarios where there is no user entry in the BRAS after the BRAS version is upgraded and restarted. The user has obtained the address interactively through the DHCP protocol, but cannot access the network.

According to an embodiment of the present disclosure, receiving the user's data message according to the online mark includes: within the user's lease renewal time, receiving the user's data message according to the online mark.

FIG. 2 is a schematic diagram of a process for a user to access a BRAS device.

Referring to FIG. 2, BRAS serves as a relay (Relay) device, and the process for a user to access BRAS includes steps 1-16.

Step 1: The user initiates a DHCP Discover protocol message, and the Discover protocol message carries Option information.

Step 2: After receiving the user's Discover request protocol message, the BRAS extracts the Option information and sends it to the authentication server AAA for authentication.

Step 3: The authentication server AAA notifies the BRAS after passing the Option information.

Step 4. The BRAS forwards the DHCP request protocol message to the DHCP Server.

In Steps 5 and 6, the DHCP Server replies to the user with DHCP Offer protocol messages through the BRAS. The DHCP Offer protocol messages carry information such as the address allocated to the user and the lease renewal time.

In Steps 7 and 8, the user sends a DHCP Request message to the DHCP server to confirm the address through the BRAS.

In Step 9 and Step 10, the DHCP Server returns the DHCP ACK protocol message to the user through the BRAS to confirm that the IP address is available.

In steps 11 and 12, after 50% of the lease renewal time has passed, the user sends a DHCP Request protocol message (lease renewal request protocol message) to the DHCP server through the BRAS to request the lease renewal, that is, to confirm whether the address can be used continuously.

In step 13 and step 14, if the address can continue to be used, the DHCP Server returns the DHCP ACK protocol message to the user through the BRAS. If the address is unavailable, the DHCP Server returns the DHCP NAK protocol message to the user through the BRAS. In this case, the user sends the DHCP Discover protocol message to the DHCP server again to obtain the address. If the lease renewal time has not been received and the DHCP ACK protocol message sent by the DHCP server has not been received, the user will send a DHCP Discover protocol request message to obtain the address again.

Step 15. The user sends a DHCP Release message to notify the user to go offline.

Step 16, after receiving the DHCP Release message, the BRAS notifies the authentication server AAA to stop accounting, and notifies the DHCP server to release the address.

In the process shown in Figure 2, when the link between the user and the BRAS is disconnected, the BRAS will not be able to receive any protocol messages from the user, so that there are problems of multi-user charging and waste of address resources. In order to solve this problem Problem, BRAS usually supports the following three ways.

Method 1: BRAS sends ARP Request protocol packets to the user regularly, after sending a certain number of times but still not receiving the user's ARP Reply protocol packets, kicks the user offline, notifies the authentication server AAA to stop accounting, and notifies the DHCP server to release Address, after the link is restored, after the user's lease renewal time is reached, the user re-sends the DHCP protocol message to reapply for the address, triggering the go-live.

Method 2: BRAS detects that the user traffic statistics have not reached the threshold within a certain period of time, kicks the user offline, notifies the authentication server AAA to stop accounting, and notifies the DHCP server to release the address. After the link is restored, after the user renewal time is reached, The user re-sends the DHCP protocol message to reapply for the address, which triggers the go-live.

Method 3: As shown in Figure 3, BRAS detects that the user's link is abnormal, and notifies the authentication server AAA to stop accounting. After the link is restored, BRAS sends a DHCPForcerenew protocol message to the user. The user continues by sending a DHCPrequest Rent to come back online.

In the above methods 1 and 2, after the link is restored, the user needs to re-set the network card to trigger the user to send DHCPDiscover before going online, otherwise it can only wait until the lease renewal time expires, the user automatically sends DHCPDiscover to trigger the online, when the lease renewal time Especially for a long time, the user has a long waiting time, which is unbearable for the user. In the third method above, the user terminal needs to support DHCP Forcerenew protocol messages. However, most users currently do not support DHCP Forcerenew protocol messages.

The user online method implemented according to the present disclosure can effectively solve the above-mentioned defects in the first and second ways, so that the user can trigger the online without additional operations after the link recovery of the link break occurs within the user's lease renewal time. It also does not require users to support a specific protocol, thus effectively solving the defects of the third way.

According to an embodiment of the present disclosure, before receiving the user's data message according to the online mark, it may further include: configuring the online mark through a configuration command.

According to an embodiment of the present disclosure, receiving the user's data message according to the online mark may include: receiving a data message matching the online mark.

For example, the BRAS device turns on the data packet sending switch of the user-side interface of the BRAS through a configuration command, and sets an on-line flag, for example, a Flag flag, which indicates the type of data message supported to be sent. After the user's data message reaches the BRAS device, the BRAS can decide whether to send the data message to the BRAS control plane according to the Flag flag. For example, when the user's data message arrives at the BRAS device, the characteristic value of the data message indicating the type of the message can be matched with the Flag ID. When the two match, the data message is sent to the BRAS control plane. In other words, the control plane of the BRAS can receive data packets that match the Flag.

For example, the user's data message may include an ARP message, an IP message, etc. When the on-line flag indicates that the data message supported for transmission is an IP message, the IP message in the user's data message may be Send to the control surface of BRAS. The above description is only an example, and the online mark is not limited to one type of message, and may also identify multiple types of messages.

According to an implementation of the present disclosure, receiving a data packet matching the online mark may include: limiting a speed of receiving a data packet matching the online mark. For example, when a user's data packet matches the online mark, the BRAS forwarding plane sends the data packet to the control plane. To prevent a large number of packet attacks by illegal users and network congestion, the forwarding plane can send the data packet to the control plane. The speed of data messages is limited.

According to an embodiment of the present disclosure, going online according to the received user message may include: obtaining user authentication information from the received data message, authenticating the user according to the user authentication information, and going online when the authentication is successful The user.

According to an embodiment of the present disclosure, the obtaining user authentication information from the received data message may further include: extracting characteristic information of the data message source from the received data message as the user authentication information.

For example, the characteristic information of the data packet source may include the IP (Internet Protocol) address of the data packet source and the MAC (Media Access Control) address of the data packet source, and user authentication information It can include the user's IP address and the user's MAC address.

According to an embodiment of the present disclosure, going online to the user according to the received data message may further include: before obtaining the user verification information from the received data message, performing legality verification on the received data message. When the received data message is legal, the user authentication information is obtained from the received data message. Verifying the legitimacy of data packets can effectively prevent the attack of abnormal data packets and can effectively control the number of user routing table entries. Legitimacy verification includes but is not limited to verifying whether the user's IP address is the same as the BRAS gateway address network segment.

According to an embodiment of the present disclosure, after going online to the user according to the received data message, it may also include: when receiving the user's lease renewal request data message, going offline to the user and according to the lease renewal request Go online with the user, and / or, when the online time after the user quickly goes online reaches a preset online time threshold, if the user does not receive the user's lease renewal request data packet, the user is offline, and / or Or, when the online duration after the user quickly goes online reaches the preset lease renewal request time, if the user's lease renewal request data packet is not received, the user is offline, and / or, the online is removed mark.

According to an embodiment of the present disclosure, removing the online mark may include removing the online mark through a configuration command. For example, the configuration command should support de-configuration. After the de-configuration of the online mark, the fast online function does not take effect. The de-configuration method includes manually deleting the configured online mark and the fast online function automatically invalidates after timeout.

By going online through the user method according to the disclosed embodiment, the user may not carry the DHCP-related information obtained during the initial go-live, and there is no DHCP information of the user on the BRAS, so the priority of the user going-on method according to the disclosed embodiment should be low Priority for online interaction of user protocol data messages. In addition, after the user quickly goes online, after the lease renewal time reaches 50% (that is, the lease renewal request time), the lease renewal DHCP request message will be sent. After receiving the protocol message, the device will quickly go online with the same MAC user Go offline and follow the lease renewal protocol online process. The DHCP protocol online priority should be higher than the fast online mode. Moreover, BRAS can limit the online time of user users after they go online quickly to prevent illegal users from occupying bandwidth resources for a long time. For example, an online duration threshold greater than the lease renewal time is set. After the online duration threshold is reached, if the user still does not send the lease renewal request protocol packet, the fast online user is kicked off the line to release resources.

4 is a schematic diagram of a BRAS system according to an embodiment of the present disclosure.

As shown in FIG. 4, the BRAS system includes users, BRAS devices, an authentication server AAA, and a DHCP server (DHCP server).

The user is used to connect to the BRAS device through a network cable or connect to the BRAS device through a switch.

The BRAS device acts as a relay for connecting to the authentication server AAA and DHCP Server through the network cable.

The authentication server AAA is used to authorize users for authentication and accounting.

DHCP Server is used to assign IP addresses to users.

In the BRAS system, the BRAS device acts as a relay. After detecting that the user's link is disconnected, in order to avoid multiple charging and improve address utilization, it will delete the local user information, notify the authentication server AAA to stop charging, and notify the DHCP Server Release the user address.

The BRAS device includes a message receiving unit and a trigger unit. The trigger unit is used to notify the message receiving unit whether it supports data message triggering on-line. It is also used to receive and parse the data packets delivered by the receiving unit. The module does not interact with the DHCP server.

5 is a detailed flowchart of a user online method according to an embodiment of the present disclosure.

As shown in FIG. 5, in step 201, the user obtains an address through DHCP protocol packet interaction.

In step 202, after the user's link with the BRAS device is disconnected for a period of time, the BRAS device will delete the local user forwarding entry, notify the authentication server AAA to stop accounting, and notify the DHCP server in order to avoid multiple charging and waste of address resources. Free the address.

In step 203, after the link between the user and the BRAS device is restored, if the user's lease renewal time is up, step 204 is performed, otherwise step 205 is performed.

In step 204, the user obtains an address by actively sending a DHCP protocol message.

In step 205, the user data message arrives at the BRAS device, and the receiving unit determines whether the fast online function is turned on. If it is turned on, step 206 is executed, otherwise step 207 is executed.

In step 206, the receiving unit sends the user's data message to the triggering unit, and the triggering unit verifies the validity of the data message, and sends the user's IP, MAC, Vlan, domain and other relevant information to the authentication server AAA for authentication. If verification and authentication are passed, step 208 is executed; otherwise, step 207 is executed.

In step 207, the trigger unit discards the data message sent by the user, and user traffic cannot be forwarded.

In step 208, the trigger unit device goes online to the user by adding user forwarding table and routing information, and the user traffic is forwarded normally.

6 is a schematic structural diagram of a user online device according to an embodiment of the present disclosure.

As shown in FIG. 6, the user online device includes a data message receiving unit 10 and a trigger unit 12.

The data message receiving unit 10 is used to receive the user's data message according to the online mark after the network link is restored.

The trigger unit 12 is used to go online to the user according to the received data message.

The logic of the user online device according to the embodiment of the present disclosure is simple, so that after the link recovery of the link break occurs during the user's lease renewal period, the user can continue to go online without additional operations, and does not require support from the user-side equipment. Specific agreements. In particular, the user online device according to the embodiment of the present disclosure can be used in scenarios where the version is upgraded and restarted, and the user lease renewal time is relatively long, which can effectively avoid the problem that the user has an address locally but cannot access the network.

According to an embodiment of the present disclosure, the user online device further includes: a control unit (not shown) configured to configure the online tag through a configuration command.

According to an embodiment of the present disclosure, the user data receiving unit 10 may receive the user's data message according to the online mark within the user's lease renewal time.

According to an embodiment of the present disclosure, the user data receiving unit 10 may receive a data message matching the online mark.

According to an embodiment of the present disclosure, the user data receiving unit 10 may limit the speed of receiving data packets matching the online mark.

According to an embodiment of the present disclosure, the trigger unit 12 may obtain user verification information from the data message received by the user data receiving unit 10, authenticate the user according to the user verification information, and notify the trigger unit 12 to go online when the authentication is successful The user.

According to an embodiment of the present disclosure, the trigger unit 12 may extract the characteristic information of the data message source from the received data message as the user authentication information.

According to an embodiment of the present disclosure, the trigger unit 12 may perform legality verification on the user data packet received by the user data receiving unit 10 before acquiring the user verification information from the data packet received by the user data receiving unit 10, in When it is verified that the data message received by the user data receiving unit 10 is legal, the user verification information is obtained from the data message received by the user data receiving unit 10.

According to an embodiment of the present disclosure, after the user is online according to the received data message, the trigger unit 12 may log off the user when receiving the user's lease renewal request data message, and according to the user The lease renewal request goes online to the user, and / or, when the online time after the user quickly goes online reaches a preset online time threshold, if the user's lease renewal request data packet is not received, the offline Said user, and / or, when the user's online duration reaches the preset lease renewal request time quickly after going online, if the user does not receive the user's lease renewal request data packet, the user can be offline, and / or Or, the online mark may be removed.

According to an embodiment of the present disclosure, the control unit may remove the online mark through a configuration command.

As shown in FIG. 7, the broadband remote access server includes a memory 20 and a processor 22. The memory 22 stores a computer program capable of running on the processor 22. The computer program is controlled by the processor 22 During execution, the processor 22 executes the user online method according to an embodiment of the present disclosure.

An embodiment of the present disclosure also provides a computer-readable storage medium that stores a computer program, and when the computer program is executed by at least one processor, the at least one processor executes a user according to an embodiment of the present disclosure Online method.

It should be noted that in this article, the terms "include", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device that includes a series of elements includes not only those elements It also includes other elements that are not explicitly listed, or include elements inherent to this process, method, article, or device. Without more restrictions, the element defined by the sentence "include one ..." does not exclude that there are other identical elements in the process, method, article or device that includes the element.

The sequence numbers of the above-mentioned embodiments of the present disclosure are for description only, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the embodiments of the present disclosure can be implemented by software, hardware, and a combination of software and hardware. Based on this understanding, the embodiments of the present disclosure can be embodied in the form of software products, which are stored in a storage medium (such as ROM / RAM, magnetic disk, and optical disk), and include several instructions to make a terminal (It may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to perform the methods described in the embodiments of the present disclosure.

The embodiments of the present disclosure have been described above with reference to the drawings, but the present disclosure is not limited to the above-mentioned specific implementations. The above-mentioned specific implementations are only schematic, not limiting, and those of ordinary skill in the art Under the inspiration of this disclosure, many forms can be made without departing from the scope of the disclosure and the scope of protection of the claims, all of which fall within the protection of this disclosure.

Claims

A user online method, including:

After the user's network link is restored, the user's data message is received according to the online mark,

Go online with the user according to the received data message,

Wherein, the online mark is used to indicate the type of the data message supported to be sent.
The method according to claim 1, wherein before receiving the user's data message according to the online mark includes:

Configure the online tag through a configuration command.
The method of claim 1, wherein receiving the user's data message according to the online mark includes:

Receiving a data message matching the online mark.
The method of claim 3, wherein receiving the data message matching the online mark includes:

Limit the speed of receiving data packets matching the online mark.
The method of claim 1, wherein receiving the user's data message according to the online mark includes:

During the user's lease renewal time, the user's data message is received according to the online mark.
The method according to claim 1, wherein going online according to the received user message comprises:

Obtain user authentication information from the received data message;

Authenticate the user according to the user verification information;

The user is online when the authentication is successful.
The method of claim 6, wherein the obtaining user authentication information from the received data message comprises:

Extract the characteristic information of the data message source from the received data message as the user authentication information.
The method according to claim 6, wherein going online according to the received user message further comprises:

Before obtaining user authentication information from the received data message, verify the validity of the received data message,

When the verification is legal, the user verification information is obtained from the received data packet.
The method according to any one of claims 1-8, wherein after the user is online according to the received data message, the method further comprises:

Upon receiving the user's lease renewal request data message, log off the user and re-launch the user according to the lease renewal request, and / or,

When the online duration after the user goes online reaches a preset online duration threshold, if the user's lease renewal request data packet is not received, the user is offline, and / or,

When the online duration of the user after going online reaches the preset time for renewal of the lease request, if the user does not receive the lease renewal request data message, the user is offline.
The method according to any one of claims 1-8, wherein after going online to the user according to the received data message, the method further comprises: removing the online mark.
The method of claim 10, wherein removing the online mark includes removing the online mark through a configuration command.
A user online device includes:

The data message receiving unit is used to receive the user's data message according to the online mark after the user's network link is restored;

The trigger unit is used to go online to the user according to the received data message,

Wherein, the online mark is used to indicate the type of the data message supported to be sent.
A broadband remote access server includes a memory and a processor, and the memory stores a computer program capable of running on the processor, and when the computer program is executed by the processor, the processor executes The user online method according to any one of claims 1-10.
A computer-readable storage medium on which a computer program is stored, and when the computer program is executed by at least one processor, the at least one processor executes the user online method according to any one of claims 1-10 .