BGP (Border Gateway Protocol) gateway equipment and method for realizing gateway on-off function by utilizing equipment

Abstract

The invention discloses BGP (Border Gateway Protocol) gateway equipment and a method for realizing a gateway on-off function by utilizing the equipment. The BGP gateway equipment comprises a BGP controller, an authentication server and two border routers, wherein the authentication server establishes a message connection relationship with the BGP controller; the two border routers are mutually connected, one border router is used for accessing an Internet and establishing a BGP connection relationship with the BGP controller, and the other border router is used for gathering an Intranet flow. In the invention, the BGP connection relationship is established between the BGP controller and the border router, and a routing table state in the border router is indirectly controlled by increasing and deleting a routing table entry in the BGP controller, thereby achieving the purpose whether an Intranet is controlled to be in communication with the Internet or not, fulfilling the special gateway equipment on-off function, and avoiding the problem that a local area network can not visit the Internet caused by single point faults of arranging and upgrading expensive special gateway equipment and connecting in series gateway equipment with another gateway equipment. Bandwidth upgrading of an outbound can not influence the BGP controller, and the BGP controller can not be required to upgrade a corresponding physical link and the processing capability.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a BGP gateway device and a method for realizing the on-off gateway function by using the device. Background technique [0002] For a local area network (such as a campus network), due to the needs of billing and security, it is generally necessary to deploy authentication servers and gateway devices at the egress to control the access of users in the network to the external network. The characteristic of this dedicated gateway mode is that the gateway devices are generally connected in series on the egress link, and according to the instructions of the authentication server, a certain IP address is allowed or blocked to enter and exit the LAN. However, the disadvantages of this mode are very obvious: 1. Gateway devices are generally dedicated devices, and the price is relatively expensive; 2. Gateway devices are generally connected in series on the egress link, whic...

AI Technical Summary

Problems solved by technology

[0004] The technical problems to be solved by the present invention are: firstly, realize the function of the dedicated on-off gateway device at low cost; secondly, avoid the problem that the entire internal network cannot access the external network caused by a single point of failure when the dedicated gateway device is connected in series; thirdly , to avoid the problem that the dedicated gateway device must be upgraded with the bandwidth of the egress link

Images