WO2022037621A1 - Address allocation method, device, and system - Google Patents

Abstract

The present application relates to the technical field of communications. Provided are an address allocation method, device, and system. In the solution provided by the present application, an authentication request transmitted by a CP device comprises indication information used for indicating a target address pool corresponding to a target UP device. Therefore, an authentication server can allocate, from the target address pool corresponding to the target UP device according to the indication information, an IP address for a target client device. Since the IP address pools corresponding to the UP devices in an UP backup group are different, it can be ensured that after receiving a message that is transmitted to the target client device, a forwarding device can directly transmit the message to the target UP device. In addition, since the target client device enters an online state from the target UP device, the target UP device can directly transmit the message to the target client device, without needing to perform forwarding by means of other UP devices in the UP backup group, thereby avoiding downlink traffic detour.

Description

Address allocation method, device and system

This application claims the priority of the Chinese patent application with the application number 202010838460.7 and the invention title "Address Assignment Method, Device and System" filed on August 19, 2020, the entire contents of which are incorporated into this application by reference.

technical field

The present application relates to the field of communication technologies, and in particular, to an address allocation method, device and system.

Background technique

A network access system using the separation scheme of the control plane (CP) and the user plane (UP) includes: CP equipment, forwarding equipment, multiple UP equipment, and remote authentication dial in user service , RADIUS) server. The UP device is connected to the CP device through the forwarding device. In addition, in order to ensure the reliability of network access, the UP devices in the network access system can be divided into multiple backup groups, and each backup group includes two UP devices, one of which is the main UP device and the other UP device. For the preparation of UP equipment.

In the related art, two UP devices in each backup group share an Internet protocol (Internet protocol, IP) address pool. When a client device accesses the network through an UP device in the backup group, the RADIUS server can select an IP address from the shared IP address pool as the IP address of the client device. The client device, in turn, can access the network based on the IP address.

To ensure that the forwarding device can normally forward the packets to the client device, each UP device needs to advertise the network segment route of the shared address pool to the forwarding device. Because the priority of the network segment route sent by the master UP device is higher than that of the network route sent by the backup UP device, when the forwarding device receives a packet whose destination address belongs to the shared address pool, it will send the packet. to the main UP device. However, if the recipient of the packet is a client device that accesses the network from the standby UP device, the master UP device needs to forward the packet to the standby UP device, and then the standby UP device sends the packet to the client end device. As a result, the downstream traffic is detoured.

SUMMARY OF THE INVENTION

The present application provides an address allocation method, device and system, which can solve the technical problem of bypassing downlink traffic in the communication system of the related art.

On the one hand, an address allocation method is provided, which is applied to an authentication server in a communication system in which CP and UP are separated, the communication system further includes a CP device and a UP backup group, and the UP backup group includes a plurality of UP devices; the method includes : The authentication server receives an authentication request sent by the CP device to instruct the target client device to be authenticated. The authentication request includes: indication information used to indicate the target address pool corresponding to the target UP device. The instruction information sends an authentication response to the CP device; wherein, the target client device goes online from the target UP device among the multiple UP devices, that is, the target client device accesses the network through the target UP device, and the multiple UP devices The IP address pools corresponding to each UP device in the UP device are different; the authentication response includes the IP address assigned to the target client device, and the IP address is included in the target address pool corresponding to the target UP device.

In the solution provided by the present application, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information in the authentication request. Because the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. In addition, since the target client device goes online from the target UP device, the target UP device can directly send the packet to the target client device, thereby avoiding the detour of downlink traffic.

Optionally, the authentication server stores multiple address pools, and the indication information is the identifier of the target address pool, or the gateway address of the target address pool, and the identifier of the target address pool may be the name of the target address pool; corresponding The process of the authentication server sending an authentication response to the CP device according to the indication information may include: according to the indication information, determining a target address pool from the plurality of address pools, and determining the target client from the target address pool The IP address assigned by the device.

In the solution provided in this application, the CP device can plan the corresponding relationship between the UP device and the address pool. Correspondingly, the authentication server only needs to store each address pool, and determine the target address pool according to the indication information carried in the authentication request. As a result, the data volume of the data to be stored in the authentication server is reduced, and the complexity of data processing of the authentication server can be avoided.

Optionally, the authentication server may also generate a correspondence between the UP device and the address pool. That is, the authentication server can plan the correspondence between the UP device and the address pool.

Optionally, the authentication server stores the correspondence between the UP device and the address pool, the indication information is the identifier of the target UP device, and the identifier of the target UP device can be the IP address of the target UP device; Correspondingly, the authentication server According to the indication information, the process of sending an authentication response to the CP device may include: according to the indication information, determining a target address pool corresponding to the target UP device from the corresponding relationship, and determining from the target address pool as the target client The IP address assigned by the device.

In the solution provided by this application, the authentication server can also plan the corresponding relationship between the UP device and the address pool. Correspondingly, the CP device only needs to carry the identifier of the target UP device in the sent authentication request. Thus, the data amount of data to be stored in the CP device is reduced, and the complexity of data processing of the CP device can be avoided.

Optionally, the multiple UP devices include at least one high-priority UP device and at least one low-priority UP device, and the priority of the routing information advertised by the high-priority UP device is higher than that of the low-priority UP device. The priority of the routing information advertised by the device. Wherein, the high-priority UP device and the low-priority UP device may be determined by the CP device.

In the solution provided in this application, since the IP address pools corresponding to each UP device are different, and the authentication server can assign an IP address to the client device from the target address pool corresponding to the target UP device where the client device goes online, even if the client device is online The device goes online from the low-priority UP device, which can also avoid the bypass of the downstream traffic of the client device.

On the other hand, an address allocation method is provided, which is applied to a CP device in a communication system in which CP and UP are separated, the communication system further includes an authentication server and a UP backup group, and the UP backup group includes a plurality of UP devices; the method Including: the CP device sends an authentication request to the authentication server for instructing to authenticate the target client device, the authentication request includes: indication information for instructing the target address pool corresponding to the target UP device, and then the CP device can receive the authentication The authentication response sent by the server; wherein, the target client device goes online from the target UP device in the plurality of UP devices, and the IP address pools corresponding to each UP device in the plurality of UP devices are different; the authentication response includes for the The IP address assigned by the target client device, and the IP address is included in the target address pool corresponding to the target UP device.

Because the authentication request sent by the CP device includes indication information for indicating the target address pool corresponding to the target UP device. Therefore, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information. Since the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. In addition, since the target client device goes online from the target UP device, the target UP device can directly send the message to the target client device, avoiding the detour of the downstream traffic.

Optionally, the CP device stores a corresponding relationship between the UP device and the address pool; the process of the CP device sending an authentication request to the authentication server for instructing to authenticate the target client device may include: based on the corresponding relationship, determining The indication information, where the indication information is the identifier of the target address pool, or the gateway address of the target address pool.

Optionally, the CP device may also generate a correspondence between the UP device and the address pool. That is, the CP device can plan the correspondence between the UP device and the address pool.

Optionally, the indication information may be the identifier of the target UP device.

In another aspect, an authentication server is provided, which is applied in a communication system in which the CP and UP are separated, the communication system further includes a CP device and an UP backup group, the UP backup group includes a plurality of UP devices, and the IP address corresponding to each UP device is The address pools are different; the authentication server may include at least one module, and the at least one module may be used to implement the address allocation method applied to the authentication server provided by the above aspects.

In another aspect, a CP device is provided, which is applied in a communication system in which the CP and UP are separated, the communication system further includes an authentication server and an UP backup group, the UP backup group includes a plurality of UP devices, and the IP addresses corresponding to each UP device The pools are different; the CP device may include at least one module, and the at least one module may be used to implement the address allocation method applied to the CP device provided by the above aspects.

In yet another aspect, an authentication server is provided, which is applied in a communication system in which CP and UP are separated, the communication system further includes a CP device and a UP backup group, the UP backup group includes a plurality of UP devices, among the plurality of UP devices The IP address pools corresponding to each UP device are different; the authentication server can include: a memory, a processor and a computer program stored on the memory and running on the processor, and when the processor executes the computer program, realize as described above The address allocation method provided by the aspect is applied to the authentication server.

In another aspect, a CP device is provided, which is applied in a communication system in which the CP and UP are separated, the communication system further includes an authentication server and an UP backup group, the UP backup group includes a plurality of UP devices, and the IP addresses corresponding to each UP device The pools are different; the CP device may include: a memory, a processor, and a computer program stored on the memory and running on the processor, and when the processor executes the computer program, the application to the CP as provided in the above-mentioned aspects is implemented. The address assignment method of the device.

In another aspect, a network device is provided, the network device may include: a main control board and an interface board, and the interface board may be used to implement the address allocation method applied to a CP device provided in the above aspect.

In yet another aspect, a network device is provided, the network device is a CP device in a communication system in which CP and UP are separated, the communication system further includes an authentication server and a UP backup group, and the UP backup group includes a plurality of UP devices; the Network equipment includes: main control board and interface board. The main control board includes: a first processor and a first memory. The interface board includes: a second processor, a second memory and an interface card. The main control board and the interface board are coupled. The second memory may be used to store program codes, and the second processor may be used to call the program codes in the second memory to trigger the interface card to perform the following operations: send an authentication request for instructing the target client device to be authenticated to the authentication server, the The authentication request includes: indication information for indicating the target address pool corresponding to the target UP device; receiving an authentication response sent by the authentication server; wherein, the target client device goes online from the target UP device in the plurality of UP devices, and the The IP address pools corresponding to each UP device in the multiple UP devices are different; the authentication response includes the IP address allocated to the target client device, and the IP address is included in the target address pool corresponding to the target UP device.

In yet another aspect, a computer-readable storage medium is provided, and instructions are stored in the computer-readable storage medium, and the instructions are executed by a processor to implement the address allocation method provided by any of the above aspects.

In yet another aspect, there is provided a computer program product comprising instructions which, when run on a computer, cause the computer to perform the address allocation method provided by any of the above aspects.

In yet another aspect, a communication system in which CP and UP are separated is provided, and the communication system includes the authentication server provided by the above-mentioned aspects, the CP device provided by the above-mentioned aspects, and a UP backup group; the UP backup group includes a plurality of UP devices, and the IP address pools corresponding to each UP device in the multiple UP devices are different.

To sum up, the embodiments of the present application provide an address allocation method, device, and system. Because the authentication request sent by the CP device includes indication information for indicating the target address pool corresponding to the target UP device. Therefore, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information. Since the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. Since the target client device goes online from the target UP device, the target UP device can directly send the packet to the target client device without forwarding it through other UP devices in the UP backup group, avoiding the downlink traffic. bypass.

Description of drawings

1 is a schematic structural diagram of a communication system with CU separation provided by an embodiment of the present application;

Figure 2 is a schematic diagram of a downlink traffic bypass;

3 is a flowchart of an address allocation method provided by an embodiment of the present application;

4 is a flowchart of another address allocation method provided by an embodiment of the present application;

5 is a schematic structural diagram of another CU-separated communication system provided by an embodiment of the present application;

6 is a flowchart of another address allocation method provided by an embodiment of the present application;

7 is a schematic structural diagram of an authentication server provided by an embodiment of the present application;

8 is a schematic structural diagram of another authentication server provided by an embodiment of the present application;

9 is a schematic structural diagram of a CP device provided by an embodiment of the present application;

10 is a schematic structural diagram of another CP device provided by an embodiment of the present application;

11 is a schematic structural diagram of an address allocation apparatus provided by an embodiment of the present application;

FIG. 12 is a schematic structural diagram of a network device provided by an embodiment of the present application.

detailed description

The address allocation method, device, and system provided by the embodiments of the present application are described in detail below with reference to the accompanying drawings.

Broadband remote access server (BRAS) is a new type of access gateway for broadband network applications, also known as broadband network gateway (BNG) or virtual BNG (virtual BNG, VBNG). The BRAS is generally deployed in a manner in which the CP device and the UP device are disaggregated. In a BRAS with CP and UP separation (also called CU separation) deployed, multiple UP devices are deployed in a scattered manner, and each UP device acts as the user plane of the BNG (or VBNG), which is used to implement user entries based on the CP device. Forwarding of user packets, and implementing traffic policies based on technologies such as quality of service (QoS) and access control lists (ACL). The CP device can be implemented and deployed centrally using cloud technology. As the control plane of the BNG (or VBNG), it is used to control and manage client devices (also called users) and unify multiple UP devices. manage. For example, the CP device is mainly responsible for going online, delivering configurations, and user entries of client devices. The UP device may also be referred to as a forwarding plane device, so CU separation may also be referred to as forwarding and control separation, that is, forwarding and control separation. A system deployed in this CU separation manner is also referred to as a CU separated communication system, or a transfer control separated communication system.

FIG. 1 is a schematic structural diagram of a communication system with CU separation provided by an embodiment of the present application, and FIG. 1 is described by taking the communication system being a broadband remote access system as an example. As shown in FIG. 1, the system may include: an authentication server 01, a CP device 02, and at least one UP backup group 03, each UP backup group 03 includes multiple UP devices, and the multiple UP devices are backup UP devices for each other. That is, each UP device in the plurality of UP devices can be a primary UP device, and other UP devices can be used as backup UP devices of the primary UP device. Each backup UP device can back up the data in the primary UP device. When the primary UP device fails, the backup UP device can take over the work of the primary UP device, thereby ensuring the reliability of the UP device during operation. For example, a UP backup group 03 is schematically shown in FIG. 1 , and the UP backup group 03 includes an UP device 031 and an UP device 032 . The UP device 031 may serve as a backup UP device of the UP device 032 , and the UP device 032 may also serve as a backup UP device of the UP device 031 .

The CP device 02 is generally deployed in an operator's data center (DC) computer room, also called a core computer room; each UP device can be deployed in different aggregation computer rooms, also called an edge computer room. Also, the CP device 02 may include a plurality of virtual machines (virtual machines, VMs) deployed on a physical server. Each UP device 02 may be a physical physical UP (physic UP, pUP) device, or may also be a virtual UP (virtual UP, vUP) device, for example, the UP device 02 may be a VM deployed on a physical server.

As shown in FIG. 1 , each UP device can establish a communication connection with the CP device 02 through the forwarding device 04 , and each UP device can also establish a communication connection with the client device (not shown in FIG. 1 ) through the access device 05 . The client device may also be referred to as user equipment, which may be a device such as a residential gateway (RGW), a mobile phone, a notebook computer, or a desktop computer. The forwarding device 04 may be a switch or a router, for example, may be a core router (core router, CR). The access device 05 may also be referred to as an access node (access node, AN). The access device 05 may be a switch (switch, SW), an optical line terminal (optical line terminal, OLT), or a digital subscriber line access multiplexer (digital subscriber line access multiplexer, DSLAM) or the like.

Optionally, the authentication server 01 may be a remote authentication dial in user service (remote authentication dial in user service, RADIUS) server. The authentication server 01 supports authentication, authorization and accounting (authentication authorization accounting, AAA) protocols. As shown in FIG. 1 , the authentication server 01 has established a communication connection with the CP device 02 . After the CP device 02 completes the interaction with the client device in dialing protocol packets (also referred to as access protocol packets) through the UP device, the CP device 02 may send an authentication request for the client device to the authentication server 01 . The authentication server 01 can authenticate the client device, and after determining that the client device has passed the authentication, assign an IP address to the client device, and send an authentication response carrying the IP address to the CP device 02 . After receiving the authentication response, the CP device 02 can send the IP address to the client device through the UP device, and the client device can then access the network based on the IP address.

In the communication system of the related art, since each UP device in each UP backup group shares the same IP address pool, each UP device can advertise the network segment route of the same IP address pool to the forwarding device 04 . For example, referring to FIG. 2 , assuming that the UP backup group includes UP device 031 and UP device 032, client device 1 goes online from sub-interface 1 (port1) of UP device 031, and client device 2 goes online from sub-interface 2 (port2) of UP device 032 )online. Then, for both the client device 1 and the client device 2, the authentication server 01 can allocate IP addresses to the client devices in the IP address pool shared by the UP backup group. For each UP backup group, the CP device 02 may also designate at least one UP device with high priority in the UP backup group, and other UP devices are UP devices with low priority. The priority of the routing information (for example, network segment routing) advertised by the UP device with the high priority is higher than the priority of the routing information advertised by the UP device with the low priority.

If in the system shown in FIG. 2 , the UP device 031 is a high-priority UP device, and the UP device 032 is a low-priority UP device, then when the forwarding device 04 receives the packet destined for the client device 2 , the message will be sent to the UP device 031. Since client device 2 goes online from UP device 032, UP device 031 forwards the packet to UP device 032 through the inter-UP protection tunnel, and then the UP device 032 sends the packet to client device 2, resulting in Downstream traffic bypasses. That is, in the solution in the related art, the downlink traffic of the client device going online from the low-priority UP device will be bypassed. The inter-UP protection tunnel may be a label switched path (label switched path, LSP) tunnel.

In order to avoid traffic detour, when each UP device advertises the route to the forwarding device 04, it can also advertise the detailed route of the client device going online from the UP device. The forwarding device 04 may further send the packet addressed to the client device to the UP device to which the client device is connected based on the detailed route. However, due to the large number of client devices going online from each UP device, the amount of data when the UP device sends the detailed route is relatively large, and the route advertisement efficiency is low.

In the communication system provided by the embodiment of the present application, each UP device in the UP backup group corresponds to an IP address pool, and the IP address pools corresponding to different UP devices are different. That is, each UP device in each UP backup group no longer shares the same IP address pool. Correspondingly, when assigning an IP address to a client device, the authentication server 01 may assign an IP address to the client device from the IP address pool corresponding to the UP device to which the client device is connected. Moreover, when each UP device advertises the network segment route to the forwarding device 04, it can advertise the network segment route of its corresponding IP address pool. In this way, when the forwarding device 04 receives a packet addressed to a client device, it can send the packet to the client device to which the destination IP address of the packet belongs based on the IP address pool to which the packet's destination IP address belongs. The UP device can avoid the detour of downstream traffic without the need to publish detailed routes.

In this embodiment of the present application, each IP address pool includes multiple IP addresses of one network segment, so each IP address pool may also be referred to as a network segment.

FIG. 3 is a flowchart of an address allocation method provided by an embodiment of the present application, and the method may be applied to a communication system in which CUs are separated, for example, may be applied to the communication system shown in FIG. 1 . The communication system includes at least one UP backup group, and the IP address pools corresponding to each UP device in each UP backup group are different. Referring to Figure 3, the method includes:

Step 101: The CP device sends an authentication request to the authentication server for instructing to authenticate the target client device, where the authentication request includes: indication information for instructing the target address pool corresponding to the target UP device.

The target client device goes online from the target UP device among the plurality of UP devices, that is, the target client accesses the network through the target UP device. In this embodiment of the present application, after the CP device completes the interaction of dialing protocol packets with the target client device through the target UP device, the CP device may generate an authentication request for instructing the target client device to perform authentication, and send the authentication request to the authentication server.

Step 102: The authentication server sends an authentication response to the CP device, where the authentication response includes the IP address allocated to the target client device, and the IP address is included in the target address pool corresponding to the target UP device.

After receiving the authentication request, the authentication server can authenticate the target client device. After determining that the target client device has passed the authentication, the authentication server may determine the target address pool corresponding to the target UP device based on the indication information. After that, the authentication server may determine to allocate an IP address to the target client device from the target address pool, and send an authentication response carrying the IP address to the CP device.

After receiving the authentication response, the CP device may send the IP address carried in the authentication response to the target client device. The target client device can in turn access the network based on this IP address.

To sum up, the embodiments of the present application provide an address allocation method, because the authentication request sent by the CP device includes indication information for indicating the target address pool corresponding to the target UP device. Therefore, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information. Since the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. Since the target client device goes online from the target UP device, the target UP device can directly send the packet to the target client device without forwarding it through other UP devices in the UP backup group, thus avoiding downlink traffic. detour.

In this embodiment of the present application, in each UP backup group, the IP address pool corresponding to each UP device may be divided by the CP device 02 , or may also be divided by the authentication server 01 .

The following describes the address allocation method provided by the embodiment of the present application by taking the IP address pool corresponding to each UP device divided by the CP device 02 as an example. Referring to Figure 4, the method includes:

Step 201: The CP device exchanges dial-up protocol packets with the target client device through the target UP device.

In this embodiment of the present application, when the target client device goes online based on the dialing protocol, it may first exchange dialing protocol packets with the CP device through the target UP device. The dialing protocol may be an Ethernet-based point-to-point protocol (point to point protocol over Ethernet, PPPoE). Correspondingly, the dial-up protocol message may include: PPPoE active discovery initiation (PPPoE active discovery initiation, PADI) message, PPPoE active discovery service (PPPoE active discovery offer, PADO) message, PPPoE active discovery request (PPPoE active discovery request) message , PADR) message and PPPoE active discovery session (PPPoE active discovery session, PADS) message, etc.

Step 202: The CP device determines, based on the correspondence between the UP device and the address pool, indication information for indicating the target address pool corresponding to the target UP device.

In this embodiment of the present application, the CP device may pre-plan the address pools corresponding to each UP device in each UP backup group, and generate and store the correspondence between the UP devices and the address pools. For example, the CP device may generate and store the correspondence between the identifier of the UP device and the related information of the address pool. After the CP device completes the dialing protocol message through the interaction between the target UP device and the target client device, that is, after the CP device determines that the target client device goes online from the target UP device, it can determine the corresponding relationship of the target UP device based on the corresponding relationship. related information of the target address pool, and determine the related information as the indication information. The relevant information of the address pool may be an identifier of the address pool, or may be a gateway address of the address pool. Correspondingly, the indication information determined by the CP device may be the identifier of the target address pool, or the gateway address of the target address pool. The identifier of the address pool may be the name of the address pool, and the identifier of the UP device may be the IP address of the UP device.

As an example, it is assumed that as shown in FIG. 1 , the UP backup group in the communication system includes UP device 031 and UP device 032 . Table 1 shows the correspondence between the IP address of the UP device stored in the CP device and the name of the address pool. Referring to Table 1, the name of the address pool corresponding to the IP address of the UP device 031: 10.x.x.2 is poo1, and the name of the address pool corresponding to the IP address of the UP device 032: 10.y.y.2 is poo2. Assuming that the target client device goes online from the UP device 031, the CP device 02 may determine, based on the correspondence shown in Table 1, that the name of the target address pool corresponding to the target UP device 031 is poo1.

Table 1

IP address of the UP device	The name of the address pool
10.x.x.2	pool1
10.y.y.2	pool2

Step 203: The CP device sends an authentication request to the authentication server, where the authentication request includes indication information.

After the CP device interacts with the target client device and completes the dialing protocol message, it further needs to send an authentication request to the authentication server for instructing the target client device to be authenticated. In this embodiment of the present application, the authentication request further includes indication information.

Optionally, the CP device may add a type-length-value (type-length-value, TLV) field to the authentication request to carry the indication information. For example, for a communication network supporting Internet protocol version 6 (IPv6), the CP device 01 can add an IPv6 address pool (Framed-IPv6-Pool) attribute in the authentication request, an IPv6 address prefix (Framed-IPv6-Pool) Ipv6-Prefix) attribute, or prefix delegated (prefix delegated, PD) attribute to carry the indication information. For a communication network supporting Internet Protocol Version 4 (IP version 6, IPv4), the CP device 01 may add an address pool (Framed-Pool) attribute or a gateway address attribute to the authentication request to carry the indication information.

For example, if the target client device goes online from the UP device 031, the UP device 031 corresponds to an address pool named pool1, and the gateway address of the address pool is 10.x.x.1. Then, the authentication request may include the name of the target address pool: pool1, or the authentication request may include the gateway address of the target address pool: 10.x.x.1.

If the target client device goes online from the UP device 032, the UP device 032 corresponds to the address pool named pool2, and the gateway address of the address pool is 10.y.y.1. Then, the authentication request may include the name of the target address pool: pool2, or the authentication request may include the gateway address of the target address pool: 10.y.y.1.

Step 204: The authentication server determines the target address pool from a plurality of address pools according to the indication information.

In the embodiment of the present application, multiple address pools are pre-stored in the authentication server. After receiving the authentication request sent by the CP device, the authentication server can authenticate the target client device. Moreover, after it is determined that the target client device has passed the authentication, the target address pool may be determined from a plurality of address pools stored in the target client device based on the indication information.

For example, assuming that the name of the target address pool carried in the authentication request is pool1, the authentication server may determine the address pool named pool1 among the multiple address pools stored in the authentication request as the target address pool.

Step 205: The authentication server determines the IP address allocated to the target client device from the target address pool.

After the authentication server determines the target address pool, it can select an IP address from the target address pool and assign it to the target client device. For example, the authentication server may randomly select an IP address of the target client from the unallocated IP addresses in the target address pool.

For example, it is assumed that the target address pool determined by the authentication server is the address pool named pool1, and the range of IP addresses (ie network segments) included in the address pool named pool1 is 10.xx1 to 10.xx255 . Then the authentication server may randomly select an unassigned IP address from 10.x.x.1 to 10.x.x.255 as the IP address of the target client device. For example, the IP address assigned by the authentication server to the target client device may be 10.x.x.3.

In this embodiment of the present application, the CP device may plan the correspondence between the UP device and the address pool. Correspondingly, the authentication server only needs to store each address pool, and determine the target address pool according to the indication information carried in the authentication request. As a result, the data volume of the data to be stored in the authentication server is reduced, and the complexity of data processing of the authentication server can be avoided.

Step 206: The authentication server sends an authentication response to the CP device, where the authentication response includes the IP address.

The authentication server may send an authentication response for the target client to the CP device, and the authentication response may include an IP address assigned to the target client device. For example, the authentication response may include IP address: 10.x.x.3.

Step 207: The CP device sends the IP address to the target client device through the target UP device.

After receiving the authentication response, the CP device can send the IP address to the target client device through the dialing protocol message through the target UP device. The target client device can in turn access the network based on this IP address. For example, the CP device 02 may send the IP address: 10.x.x.3 to the target client device through the UP device 031 . The dial-up message protocol message may be a PPPoE message or a dynamic host configuration protocol (dynamic host configuration protocol, DHCP) message or the like.

Because the IP addresses allocated by the authentication server to the target client device are all selected from the target address pool corresponding to the target UP device, and the target client device goes online from the target UP device. Therefore, when the UP device advertises the route to the forwarding device, even if it only advertises the network segment route of the corresponding address pool without publishing the detailed route of the client device, it can ensure that the downstream traffic sent by the subsequent forwarding device will not be bypassed.

For example, referring to FIG. 5 , it is assumed that client device 1 goes online from UP device 031 in the UP backup group, and client device 2 goes online from UP device 032 in the UP backup group. Then the authentication server 01 can assign an IP address to the client device 1 in the address pool named pool1 corresponding to the UP device 031, and can assign an IP address to the client device 2 in the address pool named pool2 corresponding to the UP device 032 . Therefore, it can be ensured that for the client device 1, the UP device 031 in the UP backup group is an online UP device of the client device 1, and both the upstream and downstream traffic of the client device 1 are forwarded through the UP device 031. Similarly, for the client device 2, the UP device 032 in the UP backup group is the UP device on which the client device 2 goes online, and both the upstream traffic and the downstream traffic of the client device 2 are forwarded through the UP device 032.

To sum up, the embodiment of the present application provides an address allocation method, because the authentication request sent by the CP device includes indication information for indicating the target address pool corresponding to the target UP device. Therefore, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information. Since the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. Since the target client device goes online from the target UP device, the target UP device can directly send the packet to the target client device without forwarding it through other UP devices in the UP backup group, thus avoiding downlink traffic. detour.

The following describes the address allocation method provided by the embodiment of the present application by taking the IP address pool corresponding to each UP device divided by the authentication server 01 as an example. Referring to Figure 6, the method includes:

Step 301: The CP device exchanges dialing protocol packets with the target client device through the target UP device.

For the implementation process of this step 301, reference may be made to the relevant description of the above-mentioned step 201, which will not be repeated here.

Step 302: The CP device sends an authentication request to the authentication server, where the authentication request includes indication information.

After the CP device interacts with the target client device through the target UP device and completes the dialing protocol message, that is, after the CP device determines that the target client device goes online from the target UP device, it can send a message to the authentication server indicating that the target client The authentication request for the device to authenticate. In this embodiment of the present application, the authentication request further includes indication information. The indication information may be the identification of the target UP device, for example, may be the IP address of the UP device. For an implementation manner of carrying the identifier of the target UP device in the authentication request, reference may be made to the relevant description of the foregoing step 203, which will not be repeated here.

For example, it is assumed that the target client device goes online from the UP device 031, and the IP address of the UP device 031 is 10.x.x.2. Then the authentication request may include the IP address of the target UP device: 10.x.x.2.

Step 303: The authentication server determines the target address pool corresponding to the target UP device from the correspondence between the UP device and the address pool according to the indication information.

In this embodiment of the present application, the authentication server may pre-plan the address pools corresponding to each UP device in each UP backup group, and generate and store the correspondence between the UP devices and the address pools. For example, the authentication server may generate and store the correspondence between the identification (eg, IP address) of the UP device and the related information of the address pool. After receiving the authentication request, the authentication server may determine the relevant information of the target address pool corresponding to the target UP device from the corresponding relationship based on the indication information carried in the authentication request. Wherein, the relevant information of the address pool may be the identifier of the address pool (for example, the name of the address pool), or may be the gateway address of the address pool.

For example, it is assumed that the authentication server stores the corresponding relationship as shown in Table 1, and the IP address of the target UP device carried in the authentication request is 10.x.x.2. Then, the authentication server may determine, based on the correspondence shown in Table 1, that the target address pool corresponding to the target UP device is the address pool named pool1.

In this embodiment of the present application, the authentication server may also plan the correspondence between the UP device and the address pool. Correspondingly, the CP device only needs to carry the identifier of the target UP device in the sent authentication request. Thus, the data amount of data to be stored in the CP device is reduced, and the complexity of data processing of the CP device can be avoided.

Step 304: The authentication server determines the IP address allocated to the target client device from the target address pool.

For the implementation process of this step 304, reference may be made to the relevant description of the above-mentioned step 205, which will not be repeated here.

Step 305: The authentication server sends an authentication response to the CP device, where the authentication response includes the IP address.

For the implementation process of this step 305, reference may be made to the relevant description of the above-mentioned step 206, which will not be repeated here.

Step 306: The CP device sends the IP address to the target client device through the target UP device.

For the implementation process of this step 306, reference may be made to the relevant description of the above-mentioned step 207, which will not be repeated here.

Optionally, the sequence of steps of the address allocation method provided in this embodiment of the present application may be appropriately adjusted, and the steps may be correspondingly increased or decreased according to the situation. Any person skilled in the art who is familiar with the technical scope disclosed in the present application can easily think of any variation of the method, which should be covered by the protection scope of the present application, and thus will not be repeated here.

To sum up, the embodiment of the present application provides an address allocation method, because the authentication request sent by the CP device includes indication information for indicating the target address pool corresponding to the target UP device. Therefore, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information. Since the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. Since the target client device goes online from the target UP device, the target UP device can directly send the packet to the target client device without forwarding it through other UP devices in the UP backup group, thus avoiding downlink traffic. detour.

FIG. 7 is a schematic structural diagram of an authentication server provided by an embodiment of the present application. The authentication server 01 may be applied to a communication system in which CUs are separated, for example, the system shown in FIG. 1 or FIG. 5 . As shown in FIG. 1 and FIG. 5 , the communication system further includes a CP device 02 and an UP backup group 03. The UP backup group 03 includes multiple UP devices, and the IP address pools corresponding to each UP device in the multiple UP devices are different . The plurality of UP devices may include a primary UP device and a backup UP device. In addition, the multiple UP devices include at least one high-priority UP device and at least one low-priority UP device, and the priority of the routing information advertised by the high-priority UP device is higher than that of the low-priority UP device The priority of routing information.

As shown in Figure 7, the authentication server 01 may include:

A receiving module 011, configured to receive an authentication request sent by the CP device 02 and used to instruct the target client device to be authenticated, the authentication request including: indication information used to indicate the target address pool corresponding to the target UP device; wherein the The target client device goes online from the target UP device of the plurality of UP devices. For the functional realization of the receiving module 011, reference may be made to the relevant description of the above-mentioned step 101, step 203 or step 302.

A sending module 012, configured to send an authentication response to the CP device according to the indication information, where the authentication response includes an IP address assigned to the target client device, and the IP address is included in the target address pool corresponding to the target UP device . For the functional realization of the sending module 012, reference may be made to the relevant descriptions of the above step 102, step 206 or step 305.

As an optional implementation manner, the authentication server 01 stores multiple address pools, and the indication information may be the identifier of the target address pool or the gateway address of the target address pool. The sending module 012 can be used for:

According to the indication information, the target address pool is determined from the plurality of address pools; and the IP address allocated for the target client device is determined from the target address pool.

For the functional realization of the sending module 012, reference may also be made to the relevant descriptions of the above-mentioned steps 204 and 205.

As another optional implementation manner, the authentication server 01 stores the correspondence between the UP device and the address pool, and the indication information may be the identifier of the target UP device, such as the IP address of the target UP device. The sending module 012 can be used for:

According to the indication information, the target address pool corresponding to the target UP device is determined from the corresponding relationship; and the IP address allocated to the target client device is determined from the target address pool.

For the functional realization of the sending module 012, reference may be made to the relevant descriptions of the above-mentioned steps 303 and 304.

In this implementation, as shown in FIG. 8 , the authentication server 01 may further include:

The generating module 013 is configured to generate the corresponding relationship between the UP device and the address pool.

To sum up, the embodiment of the present application provides an authentication server, because the authentication request received by the authentication server includes indication information for indicating the target address pool corresponding to the target UP device. Therefore, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information. Since the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. Since the target client device goes online from the target UP device, the target UP device can directly send the packet to the target client device without forwarding it through other UP devices in the UP backup group, thus avoiding downlink traffic. detour.

FIG. 9 is a schematic structural diagram of a CP device provided by an embodiment of the present application. The CP device 02 may be applied to a communication system where CUs are separated, for example, may be applied to the system shown in FIG. 1 or FIG. 5 . 1 and 5, the communication system further includes an authentication server 01 and a UP backup group 03, the UP backup group 03 includes a plurality of UP devices, and the IP address pools corresponding to each UP device are different. The plurality of UP devices may include a primary UP device and a backup UP device. In addition, the multiple UP devices include at least one high-priority UP device and at least one low-priority UP device, and the priority of the routing information advertised by the high-priority UP device is higher than that of the low-priority UP device The priority of routing information.

As shown in Figure 9, the CP device 02 may include:

A sending module 021, configured to send an authentication request to the authentication server 01 for instructing the target client device to be authenticated, the authentication request including: indication information for instructing the target address pool corresponding to the target UP device, wherein the target The client device goes online from the target UP device of the plurality of UP devices. For the functional realization of the sending module 021, reference may be made to the relevant descriptions of the above step 101, step 203 or step 302.

The receiving module 022 is configured to receive an authentication response sent by the authentication server 01, where the authentication response includes an IP address allocated to the target client device, and the IP address is included in the target address pool corresponding to the target UP device. For the functional realization of the receiving module 022, reference may be made to the relevant descriptions of the foregoing step 102, step 206 or step 305.

As an optional implementation manner, the CP device 02 stores the correspondence between the UP device and the address pool; the sending module 021 can be used for:

Based on the corresponding relationship, relevant information of the target address pool corresponding to the target UP device is determined; wherein, the relevant information is the identifier of the target address pool, or the gateway address of the target address pool. For the function implementation of the sending module 021, reference may also be made to the relevant description of the above step 202.

In this implementation, as shown in FIG. 10 , the CP device 02 may further include:

The generating module 023 is configured to generate the corresponding relationship between the UP device and the address pool.

As another optional implementation manner, the authentication server 01 stores the correspondence between the UP device and the address pool. Correspondingly, the indication information may be the identifier of the target UP device, for example, may be the IP address of the target UP device.

To sum up, the embodiment of the present application provides a CP device, because the authentication request sent by the CP device includes indication information for indicating the target address pool corresponding to the target UP device. Therefore, the authentication server may allocate an IP address to the target client device from the target address pool corresponding to the target UP device based on the indication information. Since the IP address pools corresponding to each UP device in the UP backup group are different, it can be ensured that the forwarding device can directly send the packet to the target UP device after receiving the packet sent to the target client device. Since the target client device goes online from the target UP device, the target UP device can directly send the packet to the target client device without forwarding it through other UP devices in the UP backup group, thus avoiding downlink traffic. detour.

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the CP device, the authentication server and each module described above can refer to the corresponding process in the foregoing method embodiments, and will not be repeated here. .

It should be understood that the CP device and the authentication server provided in the embodiments of the present application may also be implemented by an application-specific integrated circuit (ASIC), or a programmable logic device (PLD), and the above-mentioned PLD may be It is a complex programmable logical device (CPLD), a field-programmable gate array (FPGA), a generic array logic (GAL) or any combination thereof. The address allocation method provided by the above method embodiments may also be implemented by software. When the address allocation method provided by the above method embodiments is implemented by software, each module in the CP device and the authentication server may also be software modules.

FIG. 11 is a schematic structural diagram of an address allocation apparatus provided by an embodiment of the present application. The apparatus 1000 may be applied to the authentication server 01 shown in FIG. 7 or FIG. 8 , or may be applied to the authentication server 01 shown in FIG. 9 or FIG. 10 . CP device 02. Referring to FIG. 11 , the apparatus 1100 may include: a processor 1101 , a memory 1102 , a network interface 1103 and a bus 1104 . The bus 1104 is used to connect the processor 1101 , the memory 1102 and the network interface 1103 . The communication connection with other devices can be realized through the network interface 1103 (which may be wired or wireless). A computer program for realizing various application functions is stored in the memory 1102 .

It should be understood that, in this embodiment of the present application, the processor 1101 may be a CPU, and the processor 1101 may also be other general-purpose processors, digital signal processors (digital signal processors, DSPs), ASICs, FPGAs, and graphics processors (graphics processors). processing unit, GPU) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general purpose processor may be a microprocessor or any conventional processor or the like.

Memory 1102 may be volatile memory or nonvolatile memory, or may include both volatile and nonvolatile memory. The non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically programmable Erase programmable read-only memory (electrically EPROM, EEPROM) or flash memory. Volatile memory may be random access memory (RAM), which acts as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), Double data rate synchronous dynamic random access memory (double data date SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous link dynamic random access memory (synchlink DRAM, SLDRAM) and direct Memory bus random access memory (direct rambus RAM, DR RAM).

In addition to the data bus, the bus 1104 may also include a power bus, a control bus, a status signal bus, and the like. However, for clarity of illustration, the various buses are labeled as bus 1104 in the figure.

When the apparatus 1100 is applied to the authentication server 01, in a specific embodiment, the processor 1101 in the apparatus 1100 is configured to receive, through the communication interface, an authentication request sent by the CP device 02 and used to instruct the target client device to be authenticated. The authentication request includes: indication information for indicating the target address pool corresponding to the target UP device, and according to the indication information, sends an authentication response to the CP device through the communication interface; wherein, the target client device is selected from the plurality of UP devices. The target UP device is online, and the authentication response includes the IP address allocated for the target client device, and the IP address is included in the target address pool corresponding to the target UP device. For detailed processing procedures of the processor 1101, please refer to step 102 in the embodiment shown in FIG. 3 , steps 204 to 206 in the embodiment shown in FIG. 4 , and steps 303 to 305 in the embodiment shown in FIG. 6 . The detailed description is not repeated here.

When the apparatus 1100 is applied to the CP device 02, in a specific embodiment, the processor 1101 in the apparatus 1100 is configured to send an authentication request to the authentication server 01 through the communication interface for instructing the target client device to be authenticated. The request includes: indication information for indicating the target address pool corresponding to the target UP device, and receiving an authentication response sent by the authentication server 01; wherein the target client device goes online from the target UP device in the plurality of UP devices, The authentication response includes the IP address assigned to the target client device, and the IP address is included in the target address pool corresponding to the target UP device. For detailed processing procedures of the processor 1101, please refer to step 101 in the embodiment shown in FIG. 3, steps 201 to 203, and step 207 in the embodiment shown in FIG. 4, and steps in the embodiment shown in FIG. 6 The detailed description of step 301, step 302 and step 306 will not be repeated here.

FIG. 12 is a schematic structural diagram of a network device provided by an embodiment of the present application, and the network device may be applied to a communication system such as that shown in FIG. 1 or FIG. 5 . And, the network device may be the CP device 02 in the communication system. As shown in FIG. 12 , the network device may include: a main control board 1201 and at least one interface board (an interface board is also called a line card or a service board), for example, an interface board 1202 and an interface board 1203 are shown in FIG. 12 . In the case of multiple interface boards, a switch fabric board 1204 may be included, and the switch fabric board 1204 is used to complete data exchange among the interface boards.

The main control board 1201 is used to complete functions such as system management, equipment maintenance, and protocol processing. The interface boards 1202 and 1203 are used to provide various service interfaces (eg, POS interface, GE interface, ATM interface, etc.), and realize packet forwarding. There are mainly three types of functional units on the main control board 1201: a system management control unit, a system clock unit and a system maintenance unit. The main control board 1201 , the interface board 1202 and the interface board 1203 are connected to the system backplane through the system bus to realize intercommunication. The interface board 1202 includes one or more central processing units 12021. The central processing unit 12021 is used to control and manage the interface board 1202, communicate with the central processing unit 12011 on the main control board 1201, and perform packet forwarding processing. The forwarding table entry memory 12024 on the interface board 1202 is used to store the forwarding table entry, and the central processing unit 12021 can forward the message by searching the forwarding table entry stored in the forwarding table entry memory 12024 .

The interface board 1202 includes one or more physical interface cards 12023 for receiving the message sent by the previous hop node, and sending the processed message to the next hop node according to the instruction of the central processing unit 12021 . The specific implementation process will not be repeated here. The specific functions of the central processing unit 12021 are also not repeated here.

It can be understood that the sending module 021 and the receiving module 022 in the CP device may be located in the interface board 1202 , and the generating module 023 may be located in the main control board 1201 .

It can also be understood that, as shown in FIG. 12 , this embodiment includes multiple interface boards and adopts a distributed forwarding mechanism. Under this mechanism, the structure of the interface board 1203 is basically the same as that of the interface board 1202 , and the interface board 1203 The operations above are basically similar to those of the interface board 1202, and are not repeated for brevity. In addition, it can be understood that the central processing unit 12021 and/or the network processor 12022 in the interface board 1202 in FIG. 12 may be dedicated hardware or chips. For example, an application-specific integrated circuit may be used to implement the above functions. Special hardware or chip processing is adopted for the so-called forwarding plane. In another implementation manner, the central processing unit 12021 and/or the network processor 12022 may also use a general-purpose processor, such as a general-purpose CPU, to implement the functions described above.

In addition, it should be understood that there may be one or more main control boards 1201, and when there are more than one main control board, it may include an active main control board and a backup main control board. There may be one or more interface boards. The stronger the data processing capability of the device, the more interface boards are provided. In the case of multiple interface boards, the multiple interface boards can communicate with each other through one or more switch fabric boards. When there are multiple interface boards, they can jointly implement load sharing and redundant backup. Under the centralized forwarding architecture, the device does not need a switching network board, and the interface board is responsible for the processing function of the service data of the entire system. Under the distributed forwarding architecture, the device includes multiple interface boards, which can realize data exchange among the multiple interface boards through the switching network board, and provide large-capacity data exchange and processing capabilities. Therefore, the data access and processing capabilities of network devices in a distributed architecture are greater than those in a centralized architecture. The specific architecture used depends on the specific networking deployment scenario, and there is no restriction here.

In a specific embodiment, the memory 12012 and the memory 12024 may be read-only memory (ROM) or other types of static storage devices that can store static information and instructions, random access memory (RAM) Or other types of dynamic storage devices that can store information and instructions, and can also be electrically erasable programmable read-only memory (EEPROM), compact disc read-only Memory (CD- ROM) or other optical disc storage, optical disc storage (including compact disc, laser disc, optical disc, digital versatile disc, blu-ray disc, etc.), magnetic disc or other magnetic storage device, or capable of carrying or storing desired in the form of instructions or data structures program code and any other medium that can be accessed by a computer, but is not limited thereto. The memory 12024 in the interface board 1202 may exist independently and be connected to the central processing unit 12021 through a communication bus; or, the memory 12024 may also be integrated with the central processing unit 12021. The memory 12012 in the main control board 1201 may exist independently and be connected to the central processing unit 12011 through a communication bus; or, the memory 12012 may also be integrated with the central processing unit 12011.

The memory 12024 is used for storing program codes, and the execution is controlled by the central processing unit 12021, and the memory 12012 is used for storing the program codes, and the execution is controlled by the central processing unit 12011. The central processing unit 12021 and/or the central processing unit 12011 can implement the address allocation method applied to the CP device provided by the above method embodiments by executing program codes. One or more software modules may be included in the program code stored in memory 12024 and/or memory 12012. The one or more software modules may be functional modules provided in the embodiments shown in any of the above-mentioned Figures 7 to 10 .

In a specific embodiment, the physical interface card 12023 can be a device that uses any transceiver to communicate with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area network (wireless local area networks, WLAN), etc.

Embodiments of the present application further provide a computer-readable storage medium, where instructions are stored in the computer-readable storage medium, and the instructions can be executed by a processor to implement the steps executed by the authentication server 01 in the foregoing method embodiments.

Embodiments of the present application further provide a computer-readable storage medium, where instructions are stored in the computer-readable storage medium, and the instructions can be executed by a processor to implement the steps executed by the CP device 02 in the foregoing method embodiments.

The embodiments of the present application also provide a computer program product containing instructions, when the computer program product runs on a computer, the computer program product causes the computer to perform the steps performed by the authentication server 01 in the above method embodiments.

The embodiments of the present application also provide a computer program product containing instructions, when the computer program product runs on a computer, the computer program product causes the computer to execute the steps executed by the CP device 02 in the above method embodiments.

The embodiment of the present application further provides a communication system in which the CP and UP are separated. As shown in FIG. 1 and FIG. 5 , the communication system may include: an authentication server 01, a CP device 02, and a UP backup group 03. The UP backup group 03 It includes multiple UP devices, and the IP address pools corresponding to each UP device in the multiple UP devices are different.

The authentication server 01 may be the authentication server shown in FIG. 7 or FIG. 8 , or include the device shown in FIG. 11 . The CP device 02 may be the device shown in FIG. 9 or FIG. 10 , or include the device shown in FIG. 11 .

The above embodiments may be implemented in whole or in part by software, hardware, firmware or any other combination. When implemented in software, the above-described embodiments may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded or executed on a computer, all or part of the processes or functions described in the embodiments of the present application are generated. The computer may be a general purpose computer, special purpose computer, computer network, or other programmable device. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be downloaded from a website site, computer, server, or data center Transmission to another website site, computer, server, or data center is by wire (eg, coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (eg, infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, a data center, or the like that contains one or more sets of available media. The usable media may be magnetic media (eg, floppy disks, hard disks, magnetic tapes), optical media (eg, DVDs), or semiconductor media. The semiconductor medium may be a solid state drive (SSD).

The term "at least one" in this application means one or more, and the term "plurality" in this application means two or more, for example, a plurality of UP devices means two or more UP equipment. The terms "system" and "network" are often used interchangeably herein.

The above are only optional embodiments of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of various equivalents within the technical scope disclosed in the present application. Modifications or substitutions of the present application shall be included within the scope of protection of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (20)

1. An address allocation method, characterized in that it is applied to an authentication server in a communication system in which a control plane CP and a user plane UP are separated, the communication system further comprising a CP device and a UP backup group, and the UP backup group includes a plurality of UPs device; the method includes:

   Receive an authentication request sent by the CP device for instructing to authenticate the target client device, the authentication request including: indication information for indicating the target address pool corresponding to the target UP device, wherein the target client device Go online from the target UP device in the multiple UP devices, and the Internet Protocol IP address pools corresponding to each UP device in the multiple UP devices are different;

   According to the indication information, send an authentication response to the CP device, where the authentication response includes the IP address assigned to the target client device, and the IP address is included in the target address pool corresponding to the target UP device .
2. The method according to claim 1, wherein the authentication server stores a plurality of address pools, and the indication information includes an identifier of the target address pool or a gateway address of the target address pool;

   According to the indication information, send an authentication response to the CP device, including:

   determining the target address pool from the plurality of address pools according to the indication information;

   The IP address assigned to the target client device is determined from the target address pool.
3. The method according to claim 1, wherein the authentication server stores the correspondence between the UP device and the address pool, and the indication information includes the identifier of the target UP device;

   According to the indication information, send an authentication response to the CP device, including:

   According to the indication information, determine the target address pool corresponding to the target UP device from the corresponding relationship;

   The IP address assigned to the target client device is determined from the target address pool.
4. The method according to claim 3, wherein the method further comprises:

   Generate the correspondence between the UP device and the address pool.
5. The method according to any one of claims 1 to 4, wherein the plurality of UP devices include at least one high-priority UP device and at least one low-priority UP device, and the high-priority UP device The priority of the advertised routing information is higher than the priority of the routing information advertised by the low-priority UP device.
6. An address allocation method, characterized in that it is applied to a CP device in a communication system in which a control plane CP and a user plane UP are separated, the communication system further comprising an authentication server and a UP backup group, wherein the UP backup group includes a plurality of UPs device; the method includes:

   Send an authentication request to the authentication server for instructing the target client device to be authenticated, the authentication request including: indication information for indicating the target address pool corresponding to the target UP device, wherein the target client device is from The target UP device in the plurality of UP devices is online, and the Internet Protocol IP address pools corresponding to each UP device in the plurality of UP devices are different;

   Receive an authentication response sent by the authentication server, where the authentication response includes an IP address assigned to the target client device, and the IP address is included in a target address pool corresponding to the target UP device.
7. The method according to claim 6, wherein the CP device stores a correspondence between the UP device and the address pool; sending an authentication request to the authentication server for instructing the target client device to be authenticated, comprising: :

   Based on the corresponding relationship, the indication information is determined, where the indication information is the identifier of the target address pool or the gateway address of the target address pool.
8. The method according to claim 7, wherein the method further comprises:

   Generate the correspondence between the UP device and the address pool.
9. The method according to claim 6, wherein the indication information is an identifier of the target UP device.
10. An authentication server, characterized in that it is applied to a communication system in which a control plane CP and a user plane UP are separated, the communication system further includes a CP device and an UP backup group, and the UP backup group includes a plurality of UP devices; the authentication The server includes:

    a receiving module, configured to receive an authentication request sent by the CP device and used to instruct the target client device to be authenticated, where the authentication request includes: indication information used to indicate the target address pool corresponding to the target UP device, wherein the The target client device goes online from the target UP device in the multiple UP devices, and the Internet Protocol IP address pools corresponding to each UP device in the multiple UP devices are different;

    A sending module, configured to send an authentication response to the CP device according to the indication information, where the authentication response includes an IP address assigned to the target client device, and the IP address is included in the corresponding IP address of the target UP device in the target address pool.
11. The authentication server according to claim 10, wherein the authentication server stores a plurality of address pools, and the indication information includes an identifier of the target address pool or a gateway address of the target address pool; The sending module described above is used to:

    determining the target address pool from the plurality of address pools according to the indication information;

    The IP address assigned to the target client device is determined from the target address pool.
12. The authentication server according to claim 10, wherein the authentication server stores the correspondence between the UP device and the address pool, and the indication information includes the identifier of the target UP device; the sending module is used for :

    According to the indication information, determine the target address pool corresponding to the target UP device from the corresponding relationship;

    The IP address assigned to the target client device is determined from the target address pool.
13. The authentication server according to claim 12, wherein the authentication server further comprises:

    The generating module is used to generate the correspondence between the UP device and the address pool.
14. The authentication server according to any one of claims 10 to 13, wherein the plurality of UP devices include at least one high-priority UP device and at least one low-priority UP device, and the high-priority UP device The priority of the routing information advertised by the device is higher than the priority of the routing information advertised by the low-priority UP device.
15. A control plane CP device, characterized in that it is applied to a communication system in which the CP and the user plane UP are separated, the communication system further comprising an authentication server and an UP backup group, the UP backup group including a plurality of UP devices; the CP Equipment includes:

    A sending module, configured to send an authentication request to the authentication server for instructing the target client device to be authenticated, the authentication request including: indication information for instructing the target address pool corresponding to the target UP device, wherein the The target client device goes online from the target UP device in the multiple UP devices, and the Internet Protocol IP address pools corresponding to each UP device in the multiple UP devices are different;

    A receiving module, configured to receive an authentication response sent by the authentication server, where the authentication response includes an IP address assigned to the target client device, and the IP address is included in the target address pool corresponding to the target UP device .
16. The CP device according to claim 15, wherein the CP device stores the correspondence between the UP device and the address pool; the sending module is used for:

    Based on the corresponding relationship, the indication information is determined, where the indication information is the identifier of the target address pool or the gateway address of the target address pool.
17. The CP device according to claim 16, wherein the CP device further comprises:

    The generating module is used to generate the correspondence between the UP device and the address pool.
18. The CP device according to claim 15, wherein the indication information is an identifier of the target UP device.
19. A computer-readable storage medium, characterized in that the computer-readable storage medium stores instructions, and the instructions are executed by a processor to implement the method according to any one of claims 1 to 9.
20. A communication system in which a control plane CP and a user plane UP are separated, wherein the system comprises: the authentication server according to any one of claims 10 to 14, and the authentication server according to any one of claims 15 to 18 A CP device, and an UP backup group, where the UP backup group includes multiple UP devices, and the Internet Protocol IP address pools corresponding to each UP device in the multiple UP devices are different.

Images