Network access method, device and system

Abstract

The application provides a network access method, device and system, and belongs to the technical field of communication. In the scheme provided by the application, when it is determined that the controller meets the takeover condition, the CP device can control the target client device to access the network through a target UP device in the alternative UP device based on the correspondence between the target service level issued by the controller and the alternative UP device. Since the CP device can take over the work of the controller, it can ensure that the CP device can control the client device to normally access the network in the case of controller failure or busy, thereby ensuring the reliability of network access.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, in particular to a network access method, device and system. BACKGROUND

[0002] The network access system adopting the CP and UP separation scheme can include a CP device, a UP device, a software defined network (SDN) controller and a remote authentication dial in user service (RADIUS) server.

[0003] When performing network access, the client device can send an authentication request to the CP device. The CP device can further send the authentication request to the RADIUS server. The RADIUS server can send service level agreement (SLA) information of the client device to the CP device in response to the authentication request after determining that the client device passes the authentication. The CP device can further report the SLA information to the SDN controller. The SDN controller can determine the UP device corresponding to the client device based on the SLA information, and send an identifier of the UP device to the CP device. The CP device can control the client device to access the UP device, that is, the client device can interact with the CP device through the UP device.

[0004] However, if the SDN controller fails, the CP device cannot determine the UP device corresponding to the client device, and thus cannot implement network access of the client device, and the reliability of network access is low. SUMMARY

[0005] The present application provides a network access method, device and system, which can solve the technical problem of low reliability of network access in the related art.

[0006] In one aspect, a network access method is provided, which is applied to a CP device in a CP and UP separated communication system. The CP device can receive a correspondence between a target service level and candidate UP devices in the communication system sent by a controller, and can control a target client device to access a network through a target UP device according to the correspondence when determining that the controller meets a takeover condition, wherein the service level of the target client device is the target service level, and the target UP device is included in the candidate UP devices.

[0007] Since the CP device can take over the controller, it can ensure that the CP device can control the client device to access the network normally in the case of controller failure or being busy, and ensure the reliability of network access.

[0008] Optionally, after determining that the controller meets the takeover condition, the CP device can further send, to the controller, access information of the target client device accessing the network in the stage when the controller meets the takeover condition, after determining that the controller meets a recovery condition.

[0009] After determining that the controller meets the recovery condition, i.e., after determining that the CP device recovers from the failure state or the busy state, the CP device can synchronize, to the controller, access information of the target client device accessing the network during the takeover of the CP device, so that the controller can later perform statistics and calculation. Then, the CP device can exit the takeover mode.

[0010] Optionally, the process of determining that the controller meets the recovery condition by the CP device can include periodically sending a probe message to the controller, and determining that the controller meets the recovery condition if a number of continuously received probe response messages is greater than a number threshold, wherein the probe response message is a message in response to the probe message.

[0011] The CP device determines that the controller meets the recovery condition only when the number of continuously received probe response messages is greater than the number threshold, which can ensure that the controller has indeed recovered from the failure state or the busy state, and avoid the problem of frequent switching of the CP device into the takeover mode due to multiple shocks of the controller in a short period.

[0012] Optionally, the process of determining that the controller meets the takeover condition by the CP device can include periodically sending a probe message to the controller, and determining that the controller meets the takeover condition if a probe response message sent by the controller is not received within a first target time period after sending the probe message or a packet loss rate of the probe response message is greater than a packet loss rate threshold, wherein the probe response message is a message in response to the probe message; or sending a notification message associated with the target client device to the controller, and determining that the controller meets the takeover condition if a notification response message sent by the controller is not received within a second target time period after sending the notification message, wherein the notification response message is a message in response to the notification message.

[0013] The CP device detects whether the controller meets the takeover condition by periodically sending a probe message, which can ensure that the controller meets the takeover condition is detected in time, i.e., the timeliness of detection is ensured. The CP device detects whether the controller meets the takeover condition by sending a notification message, which can avoid occupying too many computing resources by additionally sending periodic probe messages, i.e., the performance of the CP device can be ensured not to be affected.

[0014] Optionally, the process in which the CP device controls the target client device to access the network through the target UP device according to the correspondence relationship can include: determining the load of the at least one candidate UP device; determining the target UP device from the plurality of candidate UP devices according to the load balancing algorithm based on the load of the at least one candidate UP device; and controlling the target client device to access the network through the target UP device.

[0015] Determining the target UP device based on the load balancing algorithm can achieve load sharing of the plurality of candidate UP devices and ensure load balancing of each UP device.

[0016] Optionally, before controlling the target client device to access the network through the target UP device according to the correspondence relationship, the CP device can obtain the service level of the target client device from an authentication response sent by the authentication server during the process in which the target client device is online; or the CP device receives an updated service level of the target client device sent by the authentication server after the target client device is online.

[0017] Based on the method provided in the present application, after the CP device is in the takeover mode, the CP device can not only control the target client device to access the network through the target UP device during the process in which the target client device is online, but also control the target client device to migrate to the target UP device after the target client device is online. The working flexibility of the CP device in the takeover mode is higher, and the reliability of the communication system is effectively improved.

[0018] Optionally, the process in which the CP device controls the target client device to access the network through the target UP device according to the correspondence relationship can include: sending a user entry of the target client device to the target UP device; and sending a switching instruction to a migration function device, the switching instruction being used to instruct the migration function device to send a packet of the target client device to the target UP device.

[0019] By sending the switching instruction to the migration function device, it can be ensured that the migration function device can connect the link between the target client device and the target UP device, so as to realize reliable access or migration of the target client device.

[0020] In another aspect, a network access method is provided. The method is applied to a controller in a communication system with CP and UP separation. The method comprises: sending, to a CP device in the communication system, a correspondence between a target service level and candidate UP devices in the communication system, the correspondence being used by the CP device to control a target client device to access a network through a target UP device according to the correspondence when the controller meets a takeover condition, wherein the target client device has a service level of the target service level, and the target UP device is included in the candidate UP devices.

[0021] Optionally, the method further comprises: receiving access information of the target client device accessing the network in a stage when the controller meets the takeover condition, which is sent by the CP device.

[0022] Optionally, the candidate UP devices include at least one reference UP device managed by the CP device, and the target UP device belongs to the at least one reference UP device.

[0023] In yet another aspect, a CP device is provided. The CP device is applied to a communication system with CP and UP separation. The CP device comprises at least one module, and the at least one module can be used to implement the network access method provided in the above aspect and applied to the CP device.

[0024] In yet another aspect, a controller is provided. The controller is applied to a communication system with CP and UP separation. The controller comprises at least one module, and the at least one module can be used to implement the network access method provided in the above aspect and applied to the CP device.

[0025] In yet another aspect, a CP device is provided. The CP device is applied to a communication system with CP and UP separation. The CP device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the network access method provided in the above aspect and applied to the CP device is implemented.

[0026] In yet another aspect, a controller is provided. The controller is applied to a communication system with CP and UP separation. The controller comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the network access method provided in the above aspect and applied to the CP device is implemented.

[0027] In yet another aspect, a computer readable storage medium is provided. The computer readable storage medium stores instructions. When the instructions are executed on a computer, the computer performs the network access method provided in any of the above aspects.

[0028] In still another aspect, a computer program product containing instructions, which when the computer program product is executed on a computer, causes the computer to perform the network access method provided in any of the above aspects.

[0029] In still another aspect, a CP and UP separated communication system is provided, which can include at least one UP device, a CP device provided in the above aspect, and a controller provided in the above aspect.

[0030] In summary, the embodiments of the present application provide a network access method, device and system. In the scheme provided in the present application, the CP device can control the target client device to access the network through the target UP device in the alternative UP device based on the correspondence between the target service level issued by the controller and the alternative UP device when it is determined that the controller meets the takeover condition. Since the CP device can take over the work of the controller, it can ensure that the CP device can control the client device to normally access the network in the case of controller failure or busy, thereby ensuring the reliability of network access. BRIEF DESCRIPTION OF DRAWINGS

[0031] Figure 1 is a structural schematic diagram of a control and control separation communication system provided by an embodiment of the present application;

[0032] Figure 2 is a structural schematic diagram of another control and control separation communication system provided by an embodiment of the present application;

[0033] Figure 3 is a structural schematic diagram of still another control and control separation communication system provided by an embodiment of the present application;

[0034] Figure 4 is a flowchart of a network access method provided by an embodiment of the present application;

[0035] Figure 5 is a flowchart of another network access method provided by an embodiment of the present application;

[0036] Figure 6 is a flowchart of a method for controlling a target client device to access a network through a target UP device provided by an embodiment of the present application;

[0037] Figure 7 is a flowchart of still another network access method provided by an embodiment of the present application;

[0038] Figure 8 is a structural schematic diagram of a CP device provided by an embodiment of the present application;

[0039] Figure 9 is a structural schematic diagram of another CP device provided by an embodiment of the present application;

[0040] Figure 10 is a structural schematic diagram of a controller provided by an embodiment of the present application.

[0041] Figure 11 is a structural schematic diagram of a network access device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0042] The network access method, device and system provided by the embodiments of the present application are described in detail below with reference to the drawings.

[0043] A broadband remote access server (BRAS) is a new type of access gateway for broadband network applications, also known as a broadband network gateway (BNG) or a virtual BNG (VBNG). The BRAS is generally deployed in a way of separating CP equipment and UP equipment (CU separation). In the CU separation deployed BRAS, multiple UP equipment is deployed in a scattered manner, and each UP equipment serves as a user plane of the BNG (or VBNG) and is used to implement user message forwarding based on a user table item issued by the UP equipment, and implement traffic policy based on quality of service (QoS) and access control list (ACL) and the like. The CP equipment can be implemented by using cloud technology and deployed in a centralized manner, and serves as a control plane of the BNG (or VBNG) and is used to implement control and management of a client device (also referred to as a user) and unified management of multiple UP equipment. For example, the CP equipment is mainly responsible for online of the client device, issuing configuration and user table item and the like. The UP equipment can also be referred to as a forwarding plane device, and therefore the CU separation can also be referred to as separation of forwarding and control, i.e., separation of forwarding and control. The system deployed in the way of the CU separation is also referred to as a CU separation communication system or a forwarding and control separation communication system.

[0044] Figure 1 is a structural schematic diagram of a forwarding and control separation communication system provided by an embodiment of the present application, and Figure 1 The communication system is taken as a broadband remote access system for description. As shown in Figure 1 the system can include at least one CP equipment 01 and multiple UP equipment 02. At least one means one or more, and multiple means two or more than two. Figure 1Take a CP device 01 as an example. The CP device 01 is generally deployed in an operator's data center (DC) room, also known as a core room. Each UP device 02 can be deployed in different aggregation rooms, also known as edge rooms. Each UP device 02 can establish a communication connection with at least one client device 03 through a forwarding device 04 (for example, an access layer and an aggregation layer forwarding device 04), and interact with data. The CP device 01 and each UP device 02 can also establish a communication connection through a forwarding device 04 (for example, a core layer forwarding device 04), and interact with data.

[0045] Among them, the client device 03 can also be called a user device, which can be a mobile phone, a notebook computer or a desktop computer, etc. The forwarding device 04 connected to the CP device 01 can be a switch or a router, etc., and the forwarding device 04 can also be connected to a backbone network. The forwarding device 04 connected to the client device 03 can also be called an access node (AN), which can be a switch (SW), an optical line terminal (OLT) or a digital subscriber line access multiplexer (DSLAM), etc. The AN can encapsulate an outer virtual local area network (VLAN) in a message representing the location of the client device 03. The SF device 07 can receive the message based on the QinQ technology. Among them, QinQ is also called double VLAN, which is a technology that encapsulates user private network VLAN tags in public network VLAN tags, so that the message carries two-layer VLAN tags to traverse the operator's backbone network.

[0046] In the embodiments of the present application, the CP device 01 can include a plurality of virtual machines (VMs) deployed on a physical server. Each UP device 02 can be an entity physical UP (pUP) device, or can also be a virtual UP (vUP) device, for example, the UP device 02 can be a VM deployed on a physical server. The CP device 01 is responsible for the control and management of users.

[0047] The CP device 01 and each UP device 02 can be connected via a service interface, a management interface, and a control interface. The service interface is typically a virtual extensible local area network (VXLAN) interface. After receiving packets (such as access protocol packets and service packets) from the client device 03, the UP device 02 can send them to the CP device 01 for processing via the service interface. The management interface is typically a network configuration protocol (NETCONF) interface. The CP device 01 can use this management interface to issue configurations to each UP device 02, and each UP device 02 can use this management interface to report its operating status to the CP device 01. The control interface is typically a control plane and user plane separated protocol (CUSP) interface. After the CP device 01 processes the access protocol packets sent by the client device 03 and brings the client device 03 online, it can use this control interface to send user entries to the corresponding UP device 02. The user entries typically include the routing table of the client device 03 and information such as QoS.

[0048] Figure 2 This is a structural diagram of another communication system with separate control and transfer provided by an embodiment of the present application. Figure 2 As shown, AN 04 can connect to multiple client devices 03, where each client device 03 can access the network through a UP device 02. Figure 2 3 client devices 03, namely U1, U2 and U3, and 3 UP devices 03, namely UP1, UP2 and UP3, are shown. The client device U1 accesses the network through UP1, the client device U2 accesses the network through UP2, and the client device U3 accesses the network through UP3.

[0049] Figure 3 This is a structural diagram of another communication system with separate control and transfer provided by an embodiment of the present application. Figure 1 and Figure 3As shown, the communication system also includes an authentication server 05, which can be a remote authentication dial-in user service (RADIUS) server. The authentication server 05 stores the service level of the client device 03 and supports the authentication, authorization, and accounting (AAA) protocol. The RADIUS server 05 is connected to the CP device 01. After the CP device 01 completes the interaction of access protocol messages with the client device 03 through the UP device, it can send an authentication request for the client device 03 to the RADIUS server 05. The RADIUS server 05 can authenticate the client device 03 and send the SLA information of the client device 03 to the CP device 01. The SLA information includes the service level of the client device 03.

[0050] Continue to refer Figure 3 The communication system also includes a controller 06, and a migration function (string function, SF) device 07 connected to the controller 06 and each UP device 02 respectively. The controller 06 can be a software defined network (SDN) controller, or a network control engine (NCE). The controller 06 creates layer 2 tunnels (layer2tunnels) between the SF device 07 and each UP device 02. In addition, the controller 06 stores the correspondence between the service level of the client device 03 and the identifier of the UP device 02. The controller 06 can migrate the client device 03 according to the service level of the client device 03, so that the message of the client device 03 can be sent to the CP device 01 through the corresponding target UP device.

[0051] The SF device 07 is used to realize the migration of the client device 03 under the instruction of the controller 06. For example, when the controller 06 needs to migrate the client device 03 from UP1 to UP2, it can send a switching instruction to the SF device 07, and the SF device 07 can forward the message sent by the client device 03 to the UP2 in response to the switching instruction. The SF device 07 can be a physical device independent of AN 04, for example, a router or switch independent of AN 04. Or the SF device 07 can also be a software component set in AN 04. In the embodiment of the present application, in order to realize the migration of the client device 03, it is necessary to ensure that the second-layer access network of the communication system is fully interconnected, that is, Figure 2 and Figure 3As shown, it is required to ensure the connection of the AN 04 and all UP devices 02. For example, the full interconnection of the layer 2 access network can be simulated through VXLAN tunnels. The SF device 07 can send the packet (including the packet header of the layer 2 tunnel) from the client device 03 to the UP device 02 through the layer 2 tunnel. The layer 2 tunnel can be a VLAN, a virtual leased line (VLL), a virtual private LAN service (VPLS), a VXLAN or an SRV6. The SRV6 is a network forwarding technology combining the segment routing (SR) technology and the Internet protocol version 6 (IPv6) technology.

[0052] Optionally, as shown in Figure 1 and Figure 3 , the communication system further includes a UP string function (USF) device 08 (not shown in Figure 1 ) connected with the SDN controller 06, and a dynamic host configuration protocol (DHCP) server 09 (not shown in Figure 3 ) connected with the CP device 01. The USF 08 can be a functional node for formulating a migration policy. The USF 08 can issue the migration policy to the SND controller 06, so that the SND controller 06 can migrate the client device 03 based on the migration policy. The migration policy can include the correspondence between the service level and the UP device. The USF 08 can be a software component and can be integrated in the SDN controller 06. The DHCP server 09 is used for centralized management and allocation of Internet protocol (IP) addresses.

[0053] Optionally, in the embodiments of the present application, the communication connection between the client device 01 and the AN 04, and between the AN 04 and the SF device 07 can be established based on the VLAN or QinQ technology. The communication connection between the SF device 07 and the UP device 02 can be established based on the QinQ technology of the SRV6 EVPN L2VPN. The EVPN refers to an Ethernet VPN. The communication connection between the UP device 02 and the CP device 01 can be established based on the native IP, the multi-protocol label switching (MPLS) or the SRV6 technology.

[0054] Figure 4 is a flowchart of a network access method provided by an embodiment of the present application, which can solve the problem that a client device cannot access a network due to controller failure. The method can be applied to a CU-separated communication system, for example, can be applied to the communication system shown in any of the accompanying drawings. Figures 1 to 3 Figure 4 The method comprises the following steps.

[0055] Step 101: The controller sends a target service level and a corresponding relationship with alternative UP devices to a CP device.

[0056] The target service level corresponds to one or more alternative UP devices. The controller can send the corresponding relationship between the target service level and the alternative UP devices to the CP device managed by the controller after power-on. Accordingly, the CP device can receive the corresponding relationship between the target service level and the alternative UP devices sent by the controller and store the corresponding relationship.

[0057] Step 102: The CP device determines that the controller meets the takeover condition.

[0058] After the CP device receives the corresponding relationship sent by the controller, it can periodically detect whether the controller meets the takeover condition. If the CP device determines that the controller meets the takeover condition, it can continue to step 103.

[0059] Step 103: The CP device controls a target client device to access the network through a target UP device according to the corresponding relationship.

[0060] After the CP device determines that the controller meets the takeover condition, it can control a target client device to access the network through a target UP device according to the corresponding relationship. The service level of the target client device is the target service level, and the target UP device is included in the alternative UP devices corresponding to the target service level.

[0061] In summary, the present application provides a network access method. When the CP device determines that the controller meets the takeover condition, it can control a target client device to access the network through a target UP device in the alternative UP devices based on the corresponding relationship between the target service level and the alternative UP devices sent by the controller. Since the CP device can take over the work of the controller, it can ensure that the client device can access the network normally under the condition that the controller fails or is busy, thereby ensuring the reliability of network access.

[0062] Figure 5 ​is a flowchart of another network access method provided by an embodiment of the present application, which can solve the problem that the client device cannot access the network due to the controller failure. The method can be applied to a CU-separated communication system, for example, the communication system shown in any of the accompanying drawings. Figures 1 to 3 Referring to Figure 5 , the method comprises the following steps.

[0063] Step 201: The controller sends the correspondence between service levels and UP devices to the CP device.

[0064] In an embodiment of the present application, the controller pre-stores the correspondence between service levels and UP devices in the communication system. The correspondence records a plurality of different service levels and one or more UP devices corresponding to each service level, which can be referred to as a UP group or a UP pool. Different service levels correspond to different UP devices. The higher the service level, the better the performance of the corresponding UP device. The performance of the UP device refers to the data processing rate, the data flow that can be processed, and the quality of service of the UP device. The service level refers to the service level of the client device. Alternatively, the correspondence stored in the controller can be configured before the controller is shipped, or can be manually configured by the operation and maintenance personnel, or can be issued by the USF.

[0065] The controller can send the correspondence to the CP device after power-on. Since the correspondence may be updated (for example, a new service level is added, or the UP device corresponding to a service level is updated), the controller can periodically send the latest correspondence to the CP device, or can send the updated correspondence to the CP device after detecting that the correspondence is updated. After receiving the correspondence between service levels and UP devices sent by the controller, the CP device can store the correspondence.

[0066] For example, assuming that the service levels of each client device 03 in the communication system include gold, silver, and copper, the correspondence stored in the controller can be as shown in Table 1. Referring to Table 1, the UP devices corresponding to the service level gold include UP1, UP2, and UP3; the UP devices corresponding to the service level silver include UP4 and UP5, and the UP devices corresponding to the service level copper include UP6.

[0067] Table 1

[0068] Service level UP device Gold UP1, UP2, UP3 Silver UP4, UP5 Copper UP6

[0069] In an embodiment of the present application, the controller can manage one or more CP devices, wherein each CP device can manage one or more UP devices, and the UP devices managed by different CP devices are different. For the scenario that the controller manages multiple CP devices, as an optional implementation, the controller can respectively distribute the corresponding relationship stored by the controller to each CP device. That is, the controller distributes the same corresponding relationship to each CP device. By directly distributing the same corresponding relationship to each CP device, the distribution efficiency of the corresponding relationship can be effectively improved.

[0070] For the scenario that the controller manages multiple CP devices, as another optional implementation, the controller can first determine at least one reference UP device managed by each CP device. Then for each CP device, the controller can distribute the corresponding relationship containing the at least one reference UP device managed by the CP device to the CP device. That is, the controller can distribute different corresponding relationships to each CP device.

[0071] For example, assuming that the controller manages two CP devices, CP1 and CP2, wherein CP1 manages UP1, UP2 and UP3, and CP2 manages UP4, UP5 and UP6. According to Table 1, the controller can distribute the corresponding relationship between the service level gold and UP1, UP2 and UP3 to CP1, and can distribute the corresponding relationship between the service level silver and UP4 and UP5, and the corresponding relationship between the service level copper and UP6 to CP2.

[0072] Alternatively, if CP1 manages UP1, UP2, UP3 and UP4, and CP2 manages UP5 and UP6. The controller can distribute the corresponding relationship between the service level gold and UP1, UP2 and UP3 to CP1, and can distribute the corresponding relationship between the service level silver and UP4 and UP5, and the corresponding relationship between the service level copper and UP6 to CP2.

[0073] Based on the reference UP device managed by the CP device, the corresponding relationship containing the reference UP device is distributed to the CP device, which can reduce the amount of data sent to the CP device, and can effectively improve the efficiency of the CP device querying and determining the UP device corresponding to a certain client device.

[0074] In step 202, the CP device determines the target service level of the target client device.

[0075] In an embodiment of the present application, the target client device can be a client device to be accessed to the network, that is, a client device being online. Alternatively, the target client device can also be a client device having accessed to the network, that is, a client device having completed online.

[0076] As an optional implementation, after the target client device is online, the CP device can send an authentication request for the target client device to the authentication server (e.g., the RADIUS server 05) after the CP device completes the interaction with the target client in the access protocol message. The authentication server can send an authentication response for the target client device to the CP device in response to the authentication request, and the target service level of the target client device is carried in the authentication response. Accordingly, the CP device can obtain the service level of the target client device from the authentication response sent by the authentication server. The authentication server stores the service levels of the registered client devices, and the service level of each client device is determined according to the service handled by the client device.

[0077] As another optional implementation, the service level of the target client device can be updated after the target client device is online. For example, the authentication server 05 updates the service level of the target client device after the target client device changes the service handled by the target client device. In addition, the authentication server can send the updated target service level of the target client device to the CP device after determining that the service level of the target client device is updated. Accordingly, the CP device can receive the updated target service level of the target client device sent by the authentication server.

[0078] As another optional implementation, the CP device can also pre-obtain and store the service levels of the client devices sent by the authentication server. After the CP device completes the interaction with the target client in the access protocol message during the online process of the target client device, the CP device can directly obtain the target service level of the target client device from the local device.

[0079] Step 203: The CP device detects whether the controller meets the takeover condition.

[0080] In the embodiment of the present application, after the CP device receives the correspondence between the service level of the client device and the UP device sent by the controller, the CP device can detect whether the controller meets the takeover condition. If it is detected that the controller meets the takeover condition, the CP device can enter the takeover mode and then perform step 204. If it is detected that the controller does not meet the takeover condition, the CP device can end the execution of the method provided in the embodiment of the present application and continue to perform the original process. The original process includes: the CP device reports the target service level of the target client device to the controller; the controller determines the target UP device corresponding to the target client device according to the target service level and sends the identifier of the target UP device to the CP device; and the CP device controls the target client device to access the network through the target UP device.

[0081] As an optional implementation, after receiving the corresponding relationship sent by the controller, the CP device can periodically send a probe message to the controller. For example, the probe message can be sent to the controller by a packet Internet groper (ping). If the CP device does not receive a probe response message sent by the controller within a first target time period after sending the probe message, or the packet loss rate of the received probe response message is greater than a packet loss rate threshold, the CP device can determine that the controller is in a fault state or in a busy state, and further determine that the controller satisfies the takeover condition.

[0082] The probe response message is a message in response to the probe message. The first target time period and the packet loss rate threshold are both fixed values pre-stored in the CP device. In addition, the first target time period can be an upper limit value of the time required for the controller to respond to the probe message when the controller is working normally, and the packet loss rate threshold can be an upper limit value of the packet loss rate of the probe response message sent by the controller when the controller is working normally. The CP device detects whether the controller satisfies the takeover condition by periodically sending the probe message, which can ensure that the controller satisfying the takeover condition is detected in a timely manner, i.e., the timeliness of detection can be ensured.

[0083] As another optional implementation, the CP device can send a notification message associated with a target client device to the controller during the process of the target client device going online or after the target client device goes online. If a notification response message sent by the controller is not received within a second target time period after sending the notification message, the CP device can determine that the controller is in a fault state or in a busy state, and further determine that the controller satisfies the takeover condition.

[0084] The notification message can be a message for reporting a target service level of the target client device to the controller during the process of the target client device going online. Alternatively, the notification message can be a message for reporting that the target client device has completed going online to the controller, for example, the notification message can be a message for reporting access information of the target client device. Alternatively, the notification message can be a message for reporting that the target client device has completed migration to the controller. The notification response message is a message in response to the notification message. The second target time period is a fixed value pre-stored in the CP device, and the second target time period can be an upper limit value of the time required for the controller to respond to the notification message when the controller is working normally.

[0085] The CP device detects whether the controller satisfies the takeover condition by sending the notification message, which can avoid occupying too many computing resources due to additional sending of the probe message, i.e., the performance of the CP device can be ensured not to be affected.

[0086] Step 204, the CP device determines the target UP device corresponding to the target client device according to the correspondence.

[0087] If the CP device determines that the controller meets the takeover condition, the CP device can enter the takeover mode, i.e., the CP device can replace the controller to implement the access and migration of the client device and the like. In the embodiments of the present application, after the CP device enters the takeover mode, the CP device can determine the target UP device corresponding to the target client device according to the correspondence obtained in advance.

[0088] As described above, each service level recorded in the correspondence can correspond to one or more UP devices. If the target service level of the target client device corresponds to only one candidate UP device, the CP device can directly determine the candidate UP device as the target UP device corresponding to the target client device. If the target service level of the target client device corresponds to multiple candidate UP devices, the CP device can select one candidate UP device from the multiple candidate UP devices as the target UP device corresponding to the target client device.

[0089] Optionally, in order to realize load sharing of the multiple candidate UP devices, the CP device can determine the load of at least one candidate UP device when determining the target UP device. Then, the CP device can determine the target UP device from the multiple candidate UP devices according to the load of the at least one candidate UP device by using a load balancing algorithm. For example, the CP device can determine the load of each candidate UP device, and then determine the UP device with the smallest load from the multiple candidate UP devices as the target UP device. Alternatively, the CP device can determine the load of each candidate UP device, and then randomly select one candidate UP device with a load less than a load threshold from one or more candidate UP devices as the target UP device. Alternatively, the CP device can determine the load of each candidate UP device in sequence, and can directly determine the candidate UP device with a load less than a load threshold as the target UP device after determining the candidate UP device with a load less than a load threshold, without determining the load of other candidate UP devices. Wherein, the load of each candidate UP device can be determined according to the number of client devices currently accessing the network through the candidate UP device and the number of sessions of each client device, i.e., the load of each candidate UP device can be measured according to the total number of sessions currently carried by the candidate UP device.

[0090] For example, assuming that the correspondence between service levels stored in the CP device and UP devices is shown in Table 1, and the target service level of the target client device determined by the CP device in step 202 is gold, the CP device can determine that the target service level gold corresponds to three candidate UP devices: UP1, UP2 and UP3. Assuming that the load of UP1 among the three candidate UP devices is the smallest, the CP device can determine that the target UP device corresponding to the target client device is UP1.

[0091] Alternatively, the CP device can also determine multiple target UP devices corresponding to the target client device according to the correspondence, and take one of the multiple target UP devices as a main target UP device and the others as backup target UP devices. When controlling the target client device to access the network, the CP device can first control the target client device to access the network through the main target UP device, and when detecting that the main target UP device fails, can control the target client device to access the network through the backup target UP device.

[0092] The above is an example in which the candidate UP devices corresponding to the target server level are all UP devices managed by the CP device. As described in step 201, for the scenario in which the controller manages multiple CP devices, the UP devices in the correspondence received by each CP device can include UP devices managed by other CP devices. Therefore, in the embodiments of the present application, when determining the target UP device, the CP device can first filter out reference UP devices managed by the CP device from the candidate UP devices corresponding to the target service level, and then determine the target UP device from the reference UP devices. That is, the target UP device finally determined by the CP device belongs to at least one reference UP device managed by the CP device.

[0093] Step 205, the CP device controls the target client device to access the network through the target UP device.

[0094] After determining the target UP device corresponding to the target client device, the CP device can control the target client device to access the network through the target UP device. In the embodiments of the present application, as shown in FIG. 2, the process of controlling the target client device to access the network through the target UP device can include the following steps: Figure 6

[0095] Step 2051, the CP device sends a user entry of the target client device to the target UP device.

[0096] ​After determining the target UP device, the CP device can send the user table entry of the target client device to the target UP device. The user table entry may include information such as the routing table and QoS of the target client device. The user table entry may also be called a session table. By sending the user table entry of the target client device to the target UP device, it can be ensured that the target UP device can forward the target client device's message based on the user table entry, that is, it can be ensured that the target client device can access the network through the target UP device. In addition, before sending the switching instruction to the SF device, the user table entry is sent to the target UP device. This ensures that after the SF device switches the traffic path, the target UP device can forward the message based on the user table entry sent in advance, thereby reducing the packet loss rate of the target client device's message.

[0097] Step 2052: The CP device sends a switching instruction to the SF device.

[0098] In this embodiment of the present application, after the CP device determines the target UP device, it also needs to send a switching instruction to the SF device. The switching instruction may include the identifier of the target UP device and the identifier of the VLAN corresponding to the target client device. The switching instruction is used to instruct the SF device to send the target client device's message to the target UP device.

[0099] Step 2053: The SF device sends the message of the target client device to the target UP device.

[0100] In the embodiments of this application, Figure 3 As shown, the SF device 07 can be connected to different UP devices 02 through different tunnels. For example, it can be connected to UP1 through tunnel T1, connected to UP2 through tunnel T2, and connected to UP3 through tunnel T3. The entrance of the SF device 07 includes multiple different sub-interfaces, each sub-interface corresponds to a tunnel, and each sub-interface is also bound to a VLAN or a VLAN segment. Each sub-interface is used to receive a message sent by a client device 03 of a VLAN or a VLAN segment to which it is bound (the message may be forwarded by AN 04), and send the received message to the UP device 02 through a corresponding tunnel.

[0101] After receiving the switching instruction sent by the CP device, the SF device 07 can add the identifier of the VLAN corresponding to the target client device in the VLAN or VLAN segment bound to the sub-interface corresponding to the tunnel connected with the target UP device. Moreover, if the target client device is previously accessed to the network from another UP device, the SF device 07 can also delete the identifier of the VLAN corresponding to the target client device from the VLAN or VLAN segment bound to the sub-interface corresponding to the tunnel connected with the other UP device. Thus, the packet of the target client device can be sent to the target UP device, ensuring the connectivity of user traffic.

[0102] For example, assuming that the target client device is previously accessed to the network through UP2, and the CP device currently determines that the target UP device corresponding to the target client device is UP1. Then, the SF device can delete the identifier of the VLAN corresponding to the target client device in the VLAN or VLAN segment bound to the sub-interface corresponding to the tunnel T2 in response to the switching instruction, and add the identifier of the VLAN corresponding to the target client device in the VLAN or VLAN segment bound to the sub-interface corresponding to the tunnel T1. Thus, it can be ensured that the packet of the target client device received subsequently can be sent to UP1 through the tunnel T1.

[0103] In the embodiment of the present application, after the CP device controls the target client device to access to the network through the target UP device, the access information of the target client device also needs to be recorded. The access information can include the identifier of the target UP device, the identifier of the interface of the target UP device accessed by the target client device, the identifier of the VLAN corresponding to the target UP device, and the media access control (MAC) address of the target client device. The MAC address is also called physical address.

[0104] In the embodiment of the present application, the target client device needs to interact with the CP device in the access protocol packet in the online process, and the access protocol packet can be forwarded through the default UP device in the plurality of UP devices included in the communication system. The default UP device is determined in advance when the communication system is deployed. As an optional implementation manner, the CP device (or controller) can first control the target client device to access to the network through the default UP device, and then migrate the target client device from the default UP device to the target UP device. As another optional implementation manner, the CP device (or controller) can also directly control the target client device to access to the network through the target UP device.

[0105] Based on the above analysis, the method provided in the embodiments of the present application can be applied to the following scenarios. In a first scenario, the CP device first interacts with the target client device through the default UP device in the process of the target client device going online, and controls the target client device to access the target UP device after determining the target UP device, that is, directly issues the user table item of the target client device to the target UP device. In a second scenario, the CP device first interacts with the target client device through the default UP device in the process of the target client device going online, and controls the target client device to go online through the default UP device. Then, the CP device controls the target client device to migrate from the default UP device to the target UP device. In a third scenario, the CP device controls the target client device to migrate from another UP device to the target UP device after the target client device goes online through the other UP device and the service level is updated to the target service level. In a fourth scenario, the CP device can determine the target client device corresponding to the target client device again and control the target client device to access the target UP device determined again after the target client device goes online and the target UP device fails or load balancing is determined according to the load of each UP device.

[0106] Through the method provided in the embodiments of the present application, the CP device can control the target client device to access the network through the target UP device in various different scenarios after the CP device is in the takeover mode. The working flexibility of the CP device in the takeover mode is high, and the reliability of the communication system is effectively improved.

[0107] Step 206: The CP device detects whether the controller meets the recovery condition.

[0108] In the embodiments of the present application, after the CP device determines that the controller meets the takeover condition, the CP device can periodically detect whether the controller meets the recovery condition, that is, whether the controller recovers from the fault state or the busy state. If the CP device detects that the controller meets the recovery condition, step 207 can be performed; if the CP device detects that the controller does not meet the recovery condition, the takeover mode can be maintained. In the state that the CP device maintains the takeover mode, the CP device can execute the method shown in steps 202, 204 and 205 again when detecting that a client device needs to go online or an already online client device needs to migrate.

[0109] Optionally, the CP device can periodically send a probe message to the controller after determining that the controller meets the takeover condition, and count the number of continuously received probe response messages. If the number of continuously received probe response messages is greater than a number threshold, the CP device can determine that the controller has recovered from the failure state or the busy state to the normal state, that is, can determine that the controller meets the recovery condition. The probe response message is a message in response to the probe message. The number threshold can be a fixed value pre-stored in the CP device, and the number threshold can be configured before the CP device is shipped or manually configured by an operation and maintenance personnel. For example, the number threshold can be configured by the operation and maintenance personnel according to the needs of the operator.

[0110] For example, assuming that the number threshold is 10, and the CP device sends a probe message to the controller every 1 ms after determining that the controller meets the takeover condition (that is, the period of sending the probe message is 1 ms). If the CP device detects that 10 probe response messages are continuously received after starting to send the probe message, the CP device can determine that the controller meets the recovery condition, and can perform step 207.

[0111] The CP device determines that the controller meets the recovery condition only when the number of continuously received probe response messages is greater than the number threshold, which can ensure that the controller has indeed recovered from the failure state or the busy state, and avoid the problem of frequent switching of the CP device to the takeover mode due to the controller being shaken multiple times in a short period of time.

[0112] Step 207: The CP device sends, to the controller, access information of the target client device that accesses the network in the stage in which the controller meets the takeover condition.

[0113] After determining that the controller meets the recovery condition, the CP device can send, to the controller, the access information of the target client device that accesses the network in the stage in which the controller meets the takeover condition, so as to facilitate the controller to perform statistics and calculation in the later period. Moreover, the CP device can exit the takeover mode after determining that the controller meets the recovery condition, that is, the controller determines the UP device required to be accessed in the process of online or migration of the client device.

[0114] It should be noted that the sequence of steps of the network access method provided by the embodiments of the present application can be adjusted appropriately, and the steps can be increased or decreased as appropriate. For example, step 203 can be performed before step 202. Step 206 can be performed before step 205. Step 2052 can be performed synchronously with step 2051 or before step 2051. Steps 206 and 207 can be deleted according to the situation. Any person skilled in the art within the technical scope disclosed in the present application can easily think of a changed method, which should be covered within the protection scope of the present application, and thus will not be described again.

[0115] In summary, the embodiments of the present application provide a network access method. When the controller meets the takeover condition, the CP device can control the target client device to access the network through the target UP device in the alternative UP device based on the correspondence between the target service level issued by the controller and the alternative UP device. Since the CP device can take over the controller, it can ensure that the client device can access the network normally under the condition that the controller fails or is busy, thereby ensuring the reliability of network access.

[0116] The network access method provided by the embodiments of the present application will be described below in combination with the online process of the client device.

[0117] Reference Figure 7 The method can include:

[0118] Step 301, the controller synchronizes the correspondence with the CP device.

[0119] The correspondence refers to the correspondence between the service level and the UP device. The implementation process of this step 301 can refer to the related description of the above step 201, which will not be described here.

[0120] Step 302, the target client device interacts with the CP device PADI and PADO packets.

[0121] Reference Figure 7 When the target client device is online according to the point to point protocol over Ethernet (PPPoE), the target client device can first send a PPPoE active discovery initiation (PADI) packet to the CP device through the default UP device. The CP device can then send a PPPoE active discovery offer (PADO) packet to the target client device in response to the PADI packet.

[0122] Step 303, the target client device interacts with the CP device the PADR and PADS messages, and performs LCP negotiation.

[0123] Further, the target client device can send a PPPoE active discovery request (PADR) message to the CP device through the default UP device, and the CP device can send a PPPoE active discovery session (PADS) message to the target client device through the default UP device. After that, the target client device and the CP device can enter the session stage. In the session stage, the target client device and the CP device also need to perform link control protocol (LCP) negotiation to realize the negotiation of maximum transmission unit (MTU), whether to perform authentication and the authentication type.

[0124] Step 304, the target client device sends an authentication request to the CP device.

[0125] As shown in Figure 7 , after completing the interaction of the access protocol message with the CP device, the target client device can send an authentication request to the CP device through the default UP device.

[0126] Step 305, the CP device sends an authentication request to the RADIUS server.

[0127] The CP device can send an authentication request to the RADIUS server in response to the authentication request.

[0128] Step 306, the RADIUS server sends an authentication response to the CP device.

[0129] After completing the authentication of the target client device in response to the authentication request sent by the CP device, the RADIUS server can send an authentication response to the CP device. The authentication response carries the SLA information of the target client device, and the SLA information includes the target service level of the target client device.

[0130] Step 307, the CP device detects whether the controller meets the takeover condition.

[0131] If the CP device determines that the controller does not meet the takeover condition, step 308a can be performed; if the CP device determines that the controller meets the takeover condition, step 308b can be performed. The implementation process of step 307 can refer to the related description of step 203, which will not be described here.

[0132] Step 308a: The CP device sends the target service level to the controller.

[0133] If the CP device determines that the controller does not meet the takeover conditions, it can execute according to the original process, that is, send the target service level of the target client device to the controller.

[0134] Step 309a: The controller determines the target UP device and notifies the CP device.

[0135] After receiving the target service level of the target client device from the CP device, the controller can determine the target UP device corresponding to the target client device based on the target service level and its stored correspondence, and can send the identifier of the target UP device to the CP device.

[0136] Step 308b: The CP device determines the target UP device according to the corresponding relationship.

[0137] If the CP device determines that the controller meets the takeover conditions, it can determine the target UP device corresponding to the target client device based on the corresponding relationship issued by the controller. The implementation process of step 308b can refer to the relevant description of step 204 above and will not be repeated here.

[0138] Step 310: The CP device sends an authentication response to the target client device.

[0139] After the CP device determines the target UP device corresponding to the target client device based on step 308b or step 309a, it may send an authentication response to the target client device. The authentication response may carry the IP address of the target UP device.

[0140] Step 311: The target client device performs IPCP negotiation with the CP device.

[0141] After receiving the authentication response sent by the CP device, the target client device can perform Internet Protocol Control Protocol (IPCP) negotiation with the CP device through the default UP device.

[0142] Step 312: The target client device sends a UP request to the CP device.

[0143] Step 313: The CP device sends the user entry to the default UP device.

[0144] The CP device may send the user entry of the target client device to the default UP device in response to the UP request sent by the target client device.

[0145] Step 314, the default UP device sends a next table item response to the CP device.

[0146] After the default UP device receives the user table item of the target client device issued by the CP device, the default UP device can send a next table item response to the CP device.

[0147] Step 315, the CP device sends a UP response to the target client device.

[0148] After the CP device determines that the user table item of the target client device has been completed by issuing the next table item response based on the UP device, the CP device can send a UP response to the target client device. Based on the above steps 302 to 315, the online process of the target client device can be completed.

[0149] Step 316a, the CP device sends access information of the target client device to the controller.

[0150] After the CP device determines that the target client device has completed online, if it is determined that the controller does not meet the takeover condition, the CP device can send the access information of the target client device to the controller according to the original process.

[0151] Step 317a, the controller issues a switching instruction to the SF device.

[0152] After the controller receives the access information of the target client device, the controller can determine that the target client device has accessed the network through the default UP device. Moreover, since the default UP device does not match the target UP device corresponding to the target client device, the controller can issue a switching instruction to the SF device. That is, the controller can migrate the target client device from the default UP device to the target UP device.

[0153] Step 318a, the SF device sends a switching response to the controller.

[0154] After the SF device completes the migration of the target client device based on the switching instruction issued by the controller, the SF device can send a switching response to the controller.

[0155] Step 319a, the controller issues a migration instruction to the CP device.

[0156] In order to migrate the target client device from the default UP device to the target UP device, the controller also needs to issue a migration instruction to the CP device.

[0157] Step 316b, the CP device issues a switching instruction to the SF device.

[0158] After determining that the target client device is online, if the controller meets the takeover condition, the CP device can send a switching instruction to the SF device. That is, the CP device can replace the controller to migrate the target client device from the default UP device to the target UP device. The implementation process of step 316b can refer to the related description of step 2052, and details are not described here.

[0159] Step 317b, the SF device sends a switching response to the CP device.

[0160] After the SF device completes the migration of the target client device based on the switching instruction sent by the CP device, it can send a switching response to the controller. The implementation process of step 317b can refer to the related description of step 2053, and details are not described here.

[0161] Step 320, the CP device sends a user table item to the target UP device.

[0162] After determining that the target client device needs to be migrated from the default UP device to the target UP device, the CP device can send a user table item of the target client device to the target UP device. For example, the CP device can send a user table item to the target UP device in response to the migration instruction sent by the controller. Alternatively, after determining that the target client device is online, if the controller meets the takeover condition, the CP device can also directly send a user table item to the target UP device. The implementation process of step 320 can refer to the related description of step 2051, and details are not described here.

[0163] Step 321, the target UP device sends a table item response to the CP device.

[0164] After receiving the user table item of the target client device sent by the CP device, the target UP device can send a table item response to the CP device.

[0165] Step 322, the CP device instructs the default UP device to delete the user table item.

[0166] After determining that the target UP device has received the user table item of the target client device, the CP device can send a table item deletion instruction to the default UP device to instruct the default UP device to delete the user table item of the target client device.

[0167] Step 323, the default UP device sends a table item deletion response to the CP device.

[0168] After deleting the user table item of the target client device in response to the table item deletion instruction, the default UP device can send a table item deletion response to the CP device.

[0169] Step 324a: The CP device sends a migration success notification to the controller.

[0170] If the controller does not meet takeover conditions, the CP device determines that the target client device has been migrated after receiving the delete entry response from the default UP device. Therefore, it can send a migration success notification to the controller. If the controller meets takeover conditions, the CP device does not need to send a migration success notification to the controller after receiving the delete entry response from the default UP device.

[0171] Step 324b: The CP device determines that the controller meets the recovery condition, and synchronizes the access information of the target client device to the controller.

[0172] If the controller meets the takeover conditions, the CP device can periodically check whether the controller meets the recovery conditions. Furthermore, upon determining that the controller meets the recovery conditions, the CP device can synchronize the target client device's access information with the controller. The CP device then exits takeover mode. The implementation of step 324b can be found in the description of steps 206 and 207 above and will not be repeated here.

[0173] It should be noted that the order of the steps in the network access method provided in the embodiments of the present application can be adjusted appropriately, and the number of steps can be increased or decreased depending on the circumstances. For example, step 320 can be performed before step 316b. Any variation that can be readily conceived by a person skilled in the art within the technical scope disclosed in this application is intended to be covered by the scope of protection of this application, and therefore will not be described in detail here.

[0174] In summary, embodiments of the present application provide a network access method in which, upon determining that a controller meets takeover conditions, a CP device can control a target client device to access the network through a target UP device among the candidate UP devices, based on the correspondence between the target service level issued by the controller and the candidate UP devices. Because the CP device can take over the controller's operations, it can ensure that even if the controller fails or is busy, the CP device can still control normal network access for the client device, thereby ensuring reliable network access.

[0175] Figure 8 This is a schematic diagram of the structure of a CP device provided in an embodiment of the present application. The CP device can be applied to a communication system in which CP and UP are separated. For example, it can be applied to Figures 1 to 3 The communication system shown in any one of the accompanying drawings. Figure 8 The CP device 01 shown can be the above Figures 4 to 7 The CP device in the method embodiment shown. Figure 8 As shown, the CP device 01 includes:

[0176] The first receiving module 011 is configured to receive a target service level and a correspondence relationship between the target service level and candidate UP devices in the communication system, which is sent by a controller. The function implementation of the first receiving module 011 can refer to the related description of step 101, step 201 or step 301.

[0177] The first determining module 012 is configured to determine that the controller meets a takeover condition. The function implementation of the first determining module 012 can refer to the related description of step 102, step 203 or step 307.

[0178] The control module 013 is configured to control a target client device to access the network through a target UP device according to the correspondence relationship, wherein the target client device has a service level of the target service level, and the target UP device is included in the candidate UP devices. The function implementation of the control module 013 can refer to the related description of step 103, step 204 to step 205 or step 316b and step 320.

[0179] Optionally, as shown in FIG. 1, the CP device 01 can further include: Figure 9

[0180] The second determining module 014 is configured to determine that the controller meets a recovery condition after the first determining module 012 determines that the controller meets the takeover condition. The function implementation of the second determining module 014 can refer to the related description of step 206.

[0181] The sending module 015 is configured to send, to the controller, access information of the target client device accessing the network in the stage in which the controller meets the takeover condition. The function implementation of the sending module 015 can refer to the related description of step 207 or step 324b.

[0182] Optionally, the second determining module 014 can be configured to:

[0183] periodically send a probe message to the controller, and determine that the controller meets the recovery condition if a number of continuously received probe response messages is greater than a number threshold, wherein the probe response message is a message in response to the probe message.

[0184] Optionally, the first determining module 012 can be configured to:

[0185] periodically send a probe message to the controller, and determine that the controller meets the takeover condition if a probe response message sent by the controller is not received within a first target time period after sending the probe message or a packet loss rate of the received probe response message is greater than a packet loss rate threshold, wherein the probe response message is a message in response to the probe message.

[0186] ​Alternatively, a notification message associated with the target client device is sent to the controller, and if a notification response message sent by the controller is not received within a second target time duration after sending the notification message, it is determined that the controller meets the takeover condition, wherein the notification response message is a message in response to the notification message.

[0187] Optionally, the control module 013 can be configured to: determine the load of at least one of the candidate UP devices; determine the target UP device from the plurality of candidate UP devices according to a load balancing algorithm based on the load of at least one of the candidate UP devices; and control the target client device to access the network through the target UP device.

[0188] Optionally, as shown in Figure 9 the CP device 01 can further include:

[0189] The acquisition module 016 is configured to acquire the service level of the target client device from an authentication response for the target client device sent by an authentication server during the online process of the target client device. The function implementation of the acquisition module 016 can refer to the related description of step 306.

[0190] Alternatively, the second receiving module 017 is configured to receive an updated service level of the target client device sent by the authentication server after the online process of the target client device is completed.

[0191] Of course, in the embodiments of the present application, as shown in Figure 9 the CP device 01 can include both the acquisition module 016 and the second receiving module 017. The function implementation of the acquisition module 016 and the second receiving module 017 can refer to the related description of step 202.

[0192] Optionally, the control module 013 can include a sending sub-module, which can be configured to: send a user entry of the target client device to the target UP device; and send a switching instruction to a migration function device, the switching instruction being used to instruct the migration function device to send packets of the target client device to the target UP device. The function implementation of the control module 013 can also refer to the related description of steps 2051 to 2053.

[0193] In summary, the embodiments of the present application provide a CP device, which can control a target client device to access a network through a target UP device in the candidate UP devices based on the correspondence between the target service level issued by the controller and the candidate UP devices when it is determined that the controller meets the takeover condition. Since the CP device can take over the work of the controller, it can ensure that the client device can be normally controlled by the CP device to access the network in the case of controller failure or being busy, thereby ensuring the reliability of network access.

[0194] Figure 10 is a structural schematic diagram of a controller provided by an embodiment of the present application, which can be applied to a communication system with CP and UP separation. For example, it can be applied to the communication system shown in any of the accompanying drawings. Figures 1 to 3 Figure 10 The controller 06 shown can be the controller in the method embodiment shown above. Figures 4 to 7 As shown, the controller 06 includes: Figure 10 The sending module 061 is configured to send, to a CP device in the communication system, a correspondence between a target service level and candidate UP devices in the communication system, the correspondence being used by the CP device to control a target client device to access a network through a target UP device according to the correspondence when the controller meets a takeover condition, wherein the target client device has a service level of the target service level, and the target UP device is included in the candidate UP devices. The function implementation of the sending module 061 can refer to the related description of step 101, step 201 or step 301 above.

[0195] Optionally, as shown, the controller 06 can further include:

[0196] Figure 10 The receiving module 062 is configured to receive access information of the target client device accessing the network in the stage when the controller meets the takeover condition, which is sent by the CP device. The function implementation of the receiving module 062 can refer to the related description of step 207 or step 324b above.

[0197] Optionally, the candidate UP devices include at least one reference UP device managed by the CP device, and the target UP device belongs to the at least one reference UP device.

[0198] In summary, the present application provides a controller, which can send a correspondence between a target service level and candidate UP devices to a CP device, so that the CP device can control a target client device to access a network through a target UP device in the candidate UP devices based on the correspondence when it is determined that the controller meets a takeover condition. Since the CP device can take over the work of the controller, it can ensure that the client device can access the network normally under the condition that the controller fails or is busy, thereby ensuring the reliability of network access.

[0199] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the CP device, the controller and the modules described above can refer to the corresponding processes in the foregoing method embodiments, which will not be described herein.

[0200] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the CP device, the controller and the modules described above can refer to the corresponding processes in the foregoing method embodiments, which will not be described herein. ​​

[0201] It should be understood that the CP device and the controller provided by the embodiments of the present application can also be implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), which can be a complex programmable logic device (CPLD), a field-programmable gate array (FPGA), a generic array logic (GAL) or any combination thereof. The network access method provided by the above method embodiments can also be implemented by software. When the network access method provided by the above method embodiments is implemented by software, each module in the CP device and the controller can also be a software module.

[0202] Figure 11 is a structural schematic diagram of a network access device provided by an embodiment of the present application. The device 1000 can be applied to the CP device 01 as shown in Figure 8 or Figure 9 , or applied to the controller 06 as shown in Figure 10 . Referring to Figure 11 , the device 1000 can include a processor 1001, a memory 1002, a transceiver 1003 and a bus 1004. The bus 1004 is used to connect the processor 1001, the memory 1002 and the transceiver 1003. The communication connection with other devices can be realized through the transceiver 1003 (which can be wired or wireless). The memory 1002 stores a computer program, which is used to realize various application functions.

[0203] It should be understood that in the embodiments of the present application, the processor 1001 can be a CPU, and the processor 1001 can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), GPUs or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor, etc.

[0204] The memory 1002 can be a volatile memory or a nonvolatile memory, or can include both volatile and nonvolatile memory. Among them, the nonvolatile memory can be a read-only memory (ROM), a programmable ROM (PROM), an erasable PROM (EPROM), an electrically EPROM (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM) used as an external cache. By way of example, and not limitation, many forms of RAM can be used, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous dynamic RAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchlink DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0205] The bus 1004 can include, in addition to the data bus, a power bus, a control bus, and a state signal bus, etc. However, for the sake of clarity, all buses are marked as bus 1004 in the figure.

[0206] When the apparatus 1000 is applied to the CP device, in specific embodiments, the processor 1001 in the apparatus 1000 is configured to receive, by the communication interface, a correspondence between a target service level and candidate UP devices in the communication system sent by the controller; determine that the controller meets the takeover condition; and control the target client device to access the network through a target UP device according to the correspondence, wherein the service level of the target client device is the target service level, and the target UP device is included in the candidate UP devices. The detailed processing process of the processor is described above with reference to steps 102-103 in the embodiment shown in Figure 4 steps 202-207 in the embodiment shown in Figure 5 steps 202-207 in the embodiment shown in Figure 7 The detailed description of steps 307, 308b, 313, 316b, 320, 322, and 324b in the embodiment shown in is not repeated here.

[0207] When the apparatus 1000 is applied to a controller, in specific embodiments, the processor 1001 in the apparatus 1000 is configured to send, to a CP device through a communication interface, a correspondence between a target service level and candidate UP devices in the communication system, the correspondence being used by the CP device to control a target client device to access a network through a target UP device according to the correspondence when the controller meets a takeover condition, wherein the target client device has the target service level, and the target UP device is included in the candidate UP devices. The detailed processing procedure of the processor is described above with reference to steps 101 in the embodiment shown in Figure 4 step 201 in the embodiment shown in Figure 5 step 301 in the embodiment shown in Figure 7 and will not be described here again.

[0208] The embodiments of the present application further provide a computer readable storage medium, wherein instructions are stored in the computer readable storage medium, and when the computer readable storage medium is run on a computer, the computer is caused to perform the steps performed by the CP device in the method embodiments described above.

[0209] The embodiments of the present application further provide a computer readable storage medium, wherein instructions are stored in the computer readable storage medium, and when the computer readable storage medium is run on a computer, the computer is caused to perform the steps performed by the controller in the method embodiments described above.

[0210] The embodiments of the present application further provide a computer program product containing instructions, and when the computer program product is run on a computer, the computer is caused to perform the steps performed by the CP device in the method embodiments described above.

[0211] The embodiments of the present application further provide a computer program product containing instructions, and when the computer program product is run on a computer, the computer is caused to perform the steps performed by the controller in the method embodiments described above.

[0212] The embodiments of the present application further provide a CP and UP separated communication system, as shown in Figure 3 the communication system comprises a CP device 01, a plurality of UP devices 02, and a controller 06. The CP device 01 can be a device as shown in Figure 8 or Figure 9 the apparatus as shown in Figure 11 The controller 06 can be a controller as shown in Figure 10 or the apparatus as shown in Figure 11 .

[0213] The above-described embodiments can be implemented in part or in whole through software, hardware, firmware or any combination thereof. When implemented in software, the above-described embodiments can be implemented using one or more computer programs that are stored in a computer-readable medium at one or more locations, which read and execute the program instructions. The computer-readable medium can be any data storage device that can store data which can thereafter be read by a computer system or computing device, such as a hard disk, compact disk, DVD, memory device, etc. The computer program product can also be distributed over network coupled computer systems so that the computer program instructions can be stored and executed in a distributed fashion. The computer program instructions can also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce the output. The computer program instructions can be stored in any computer-readable medium that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable medium produce an article of manufacture including instructions which implement the procedures.

[0214] The terms "first", "second", and the like, as used in the description and in the claims, are used for distinguishing between similar elements and not necessarily for describing a sequential or chronological order. It is to be understood that the terms so used are interchangeable under appropriate circumstances such that the descriptive terms "first", "second", and the like, can be utilized interchangeably to describe a similar element or item without departing from the teachings of the present application. It is therefore intended that the terms "first", "second", and the like be interpreted to embrace all elements or instances of a similar nature.

[0215] The term "at least one", as used herein, means one or more, and the term "plurality", as used herein, means two or more, for example, a plurality of second packets means two or more second packets. The terms "system" and "network" are often used interchangeably.

[0216] The above merely provides the optional embodiments of the present application, but the protection scope of the present application is not limited thereto, and any modification or replacement within the technical range disclosed by the present application can be easily thought by those skilled in the art, and these modifications or replacements should be covered in the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A network access method, characterized by, A CP device applied to a communication system with CP and UP separated, the communication system being a broadband remote access system, the method comprising: receiving a correspondence between a target service level and candidate UP devices in the communication system sent by a controller in the broadband remote access system; determining that the controller meets a takeover condition; controlling a target client device to access a network through a target UP device according to the correspondence, wherein the target client device has a service level of the target service level, and the target UP device is included in the candidate UP devices.

2. The method of claim 1, wherein, After determining that the controller meets the takeover condition, the method further comprises: determining that the controller meets a recovery condition; sending access information of the target client device accessing the network in the stage where the controller meets the takeover condition to the controller.

3. The method of claim 2, wherein, The determining that the controller meets the recovery condition comprises: periodically sending a probe message to the controller; if a number of continuously received probe response messages is greater than a number threshold, determining that the controller meets the recovery condition, wherein the probe response message is a message in response to the probe message.

4. The method according to any one of claims 1 to 3, characterized in that, The determining that the controller meets the takeover condition comprises: periodically sending a probe message to the controller, and if a probe response message sent by the controller is not received within a first target time duration after sending the probe message or a packet loss rate of the received probe response message is greater than a packet loss rate threshold, determining that the controller meets the takeover condition, wherein the probe response message is a message in response to the probe message; or sending a notification message associated with the target client device to the controller, and if a notification response message sent by the controller is not received within a second target time duration after sending the notification message, determining that the controller meets the takeover condition, wherein the notification response message is a message in response to the notification message. The number of the candidate UP devices is a plurality, and the controlling the target client device to access the network through the target UP device according to the correspondence comprises:

5. The method according to any one of claims 1 to 4, characterized in that, determining a load of at least one of the candidate UP devices; determining the target UP device from the plurality of candidate UP devices according to the load balancing algorithm according to the load of at least one of the candidate UP devices; controlling the target client device to access the network through the target UP device. Before the controlling the target client device to access the network through the target UP device according to the correspondence, the method further comprises:

6. The method according to any one of claims 1 to 5, characterized in that, acquiring a service level of the target client device from an authentication response for the target client device sent by an authentication server in an online process of the target client device; or receiving an updated service level of the target client device sent by an authentication server after the online of the target client device is completed. The controlling the target client device to access the network through the target UP device according to the correspondence comprises:

7. The method according to any one of claims 1 to 6, characterized in that, sending a user table item of the target client device to the target UP device; ​ The method comprises the following steps:

8. A network access method, characterized by, The method further comprises the following steps: The method further comprises the following steps:

9. The method of claim 8, wherein, The method further comprises the following steps: The method further comprises the following steps:

10. The method according to claim 8 or 9, characterized in that, The method further comprises the following steps:

11. A control plane, CP, device, comprising: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps:

12. The CP device of claim 11, wherein, The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps:

13. The CP device of claim 12, wherein, The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps:

14. The CP device according to any one of claims 11 to 13, characterized by, The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The method further comprises the following steps: The Or, a notification message associated with the target client device is sent to the controller, and if a notification response message sent by the controller is not received within a second target time length after sending the notification message, it is determined that the controller meets the takeover condition, wherein the notification response message is a message in response to the notification message.

15. The CP device according to any one of claims 11 to 14, characterized by, The control module is configured to: determine the load of at least one of the alternative UP devices; determine the target UP device from the plurality of alternative UP devices according to a load balancing algorithm based on the load of at least one of the alternative UP devices; and control the target client device to access the network through the target UP device.

16. The CP device according to any one of claims 11 to 15, characterized by, The CP device further includes: an acquisition module configured to acquire the service level of the target client device from an authentication response for the target client device sent by an authentication server during the online process of the target client device; or a second receiving module configured to receive an updated service level of the target client device sent by an authentication server after the online process of the target client device is completed.

17. The CP device of any of claims 11 to 16, wherein, The control module includes a sending sub-module configured to: send a user entry of the target client device to the target UP device; and send a switching instruction to a migration function device, the switching instruction being used to instruct the migration function device to send packets of the target client device to the target UP device.

18. A controller characterized by comprising: The application relates to a control plane (CP) and a user plane (UP) separation communication system, and relates to a broadband remote access system. A sending module is configured to send a target service level and a corresponding relationship between the target service level and alternative UP devices in the communication system to a CP device in the communication system, the corresponding relationship being used for the CP device to control a target client device to access a network through a target UP device according to the corresponding relationship when a controller meets a takeover condition, wherein the service level of the target client device is the target service level, and the target UP device is included in the alternative UP devices.

19. The controller of claim 18, wherein, The controller further includes: A receiving module is configured to receive access information of the target client device accessing the network in a stage in which the controller meets the takeover condition, the access information being sent by the CP device.

20. A controller according to claim 18 or 19, wherein, The alternative UP devices include at least one reference UP device managed by the CP device, and the target UP device belongs to the at least one reference UP device.

21. A computer-readable storage medium, characterized in that, The computer readable storage medium stores instructions, and when the instructions are run on the computer, the computer executes the method in any one of claims 1 to 10.

22. A communication system with control plane (CP) and user plane (UP) separation, characterized in that, The communication system is a broadband remote access system, and the communication system includes at least one UP device, the CP device in any one of claims 11 to 17, and the controller in any one of claims 18 to 20.

23. A control plane, CP, device, comprising: A communication system applied to control plane (CP) and user plane (UP) separation, the communication system being a broadband remote access system, the CP device comprising: a memory, a processor and a computer program stored in the memory and capable of running on the processor, the processor implementing the method according to any one of claims 1 to 7 when executing the computer program.

24. A controller characterized by A communication system applied to control plane (CP) and user plane (UP) separation, the communication system being a broadband remote access system, the controller comprising: a memory, a processor and a computer program stored in the memory and capable of running on the processor, the processor implementing the method according to any one of claims 8 to 10 when executing the computer program.

Images