Method for keeping port open of fire-proof wall/address converting device in soft exhanging net

Abstract

A method for holding NAT port open of firewall / address converter in soft exchange network, the boundary access control (BAC) equipment periodicity sending OPTIONS message to SIP terminal used as heart beat signal to keep the UDP terminal always in open state, SIP terminal and soft exchange can make information exchange penetrating firewall to realize safety SIP communication, SIP terminal responding back the OPTIONS message and sending register message to BAC in exception occurred, the technological key in said invention is adopting OPTIONS message as connection signal to send opposite terminal unit.

Description

technical field [0001] The present invention relates to a method for keeping the ports of firewall and / or address translation equipment open in a soft-switching network. The method for the device to keep the UDP port used in the softswitch communication process open belongs to the technical field of the next generation network communication with the softswitch as the core. Background technique [0002] The next generation network (NGN, Next Generation Network) technology with softswitch as the core has gone through the initial protocol research and equipment research and development stage, and entered the commercial deployment stage of NGN. During this stage, technical issues such as network organization, QoS assurance measures, and network and service security began to receive more attention. [0003] In order to ensure the network security of NGN, a border access control device (BAC, Border Access Control) is added in the NGN network, which is located between the softswit...

AI Technical Summary

Problems solved by technology

(2) Terminals (including soft terminals or IAD devices) may be located in the private network. These terminal devices must support the traversal function of the network address translation NAT device in order to enter the soft switching network for communication; that is, the NAT device changes the network layer of the data packet Address, but it cannot change the relevant parameters indicating the communication address in the SIP protocol, and requires BAC equipment to convert messages; when the communication party cannot directly perform media communication due to the deployment of firewalls or strictly symmetrical address translation equipment NAT, etc., BAC equipment is required media transfer

[0022] The above 6 requirements will be a test for the performance of BAC, and it seems difficult to satisfy them at the same time

Images