Virtual private network access method and device for mobile user

Abstract

The invention discloses a virtual private network access method and a virtual private network access device for a mobile user. The method and the device support the mobile user to access the virtual private network. The method comprises the following steps of: establishing a permanent layer 2 tunneling protocol (L2TP) channel between an L2TP network server (LNS) and a first L2TP access concentrator (LAC), and also establishing the permanent L2TP channel between the LNS and a second LAC in an LAC active initiation way; establishing a public session and synchronizing the second LAC after an L2TP session between a terminal and the first LAC is established; and when the terminal moves from a first LAC network into a second LAC network, rapidly accessing the LNS and establishing the L2TP session without changing an Internet protocol (IP) address of the terminal. The LACs and the LNS are provided with a terminal information table entry and a revocation timer, the LNS is also provided with a message synchronization device for conveniently realizing LAC information synchronization. By the method and the device, the terminal can access the virtual private network by using the same IP address when the terminal moves, so that all service applications based on network IP and network rights are not changed during roaming.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a virtual private network access method and device for mobile users. Background technique [0002] Virtual Private Network (VPN, Virtual Private Network) provides the establishment of private networks in different regions and departments within the enterprise through the public network. VPDN (Virtual Private Dial-up Network) refers to using the dial-up function of the public network to access the virtual private network inside the enterprise, so as to provide access services for mobile office workers such as business trips. Simply put, VPDN provides an economical and effective point-to-point connection between remote users and the internal network of the enterprise. L2TP (Layer 2 tunneling Protocol) is a technology that encapsulates PPP (Point-to-Point Protocol) link layer data packets and transmits them through tunnels. It is currently the most widely used technol...

AI Technical Summary

Problems solved by technology

The problem now is that when the same remote end user accesses through an L2TP tunnel at different times and different places, the LAC device connected to the end user side changes, and the L2TP tunnel and LNS device established with the LNS device on the private enterprise network side The IP address assigned to the remote terminal user will change. At this time, all services based on the original IP address of the terminal device will be interrupted, and all applications need to be updated before they can be applied, which will have a great impact on the functional services of the entire network.

Images