User terminal equipment access method, device and system

Abstract

The present invention provides an access method, system and broadband network gateway for user terminal equipment, wherein the access method for user terminal equipment comprises: a BNG in a BNG pool receives an access request message sent by a CPE, wherein the access request message carries an identifier of a CPE group to which the CPE belongs; the BNG obtains an access policy of the CPE group according to the identifier of the CPE group, and performs access control on the CPE according to the access policy. The present invention can enable the BNG in the BNG pool to provide access services to the CPE according to the access policy, and further enable the BNG in the BNG pool that is not faulty to provide access services to the CPE that originally accessed the faulty BNG in the BNG pool, thereby improving the reliability of the entire network.

Description

[0001] This application is a divisional application of a Chinese patent application filed with the State Intellectual Property Office of China on February 22, 2012, with application number CN201210041011.5 and invention name “Access method, system and broadband network gateway for user terminal equipment”. Technical Field

[0002] The present invention relates to communication technology, and in particular to an access method and system for user terminal equipment and a broadband network gateway. Background Art

[0003] Customer Premise Equipment (CPE) is connected to Access Node (AN) through various access technologies, such as Digital Subscriber Line (DSL) and Passive Optical Network (PON). One or more Metro Ethernet Switches aggregate the upstream traffic of multiple ANs to Broadband Network Gateway (BNG). BNG implements the access control function of CPE: only when CPE is legal, BNG forwards the legal CPE's upstream traffic to the Aggregation Router, and the Aggregation Router sends the legal CPE's upstream traffic to the Internet Protocol (IP) network. Similarly, the downstream traffic from the IP network to CPE is also controlled on the BNG.

[0004] When the BNG dynamically allocates addresses to CPEs, the BNG also manages multiple address pools for allocating IP addresses to legitimate CPEs.

[0005] There is a layer 2 Ethernet between AN and BNG. To ensure the isolation of traffic from different CPEs between AN and BNG, AN adds two layers of virtual local area network tags (Virtual Local Area Network tags; hereinafter referred to as: VLAN tags) to the CPE's uplink Ethernet frames to uniquely identify the CPE, namely the service virtual local area network tag (Service VLAN tag; hereinafter referred to as: S-vlan tag) and the client virtual local area network tag (Customer VLAN tag; hereinafter referred to as: C-vlantag). BNG identifies traffic from different CPEs through S-vlan tags and C-vlan tags, and forwards IP packets after stripping S-vlan tags and C-vlan tags to the IP network; for downlink packets from the IP network to the CPE, BNG will add S-vlan tags and C-vlan tags to the above downlink packets, generate Ethernet frames, and send them to AN; similarly, AN identifies Ethernet frames sent to different CPEs through S-vlan tags and C-vlan tags, and sends Ethernet frames after stripping S-vlan tags and C-vlan tags to CPE.

[0006] However, in the prior art, each BNG independently provides access services to the CPE. Thus, in the event of a BNG failure, no other BNG provides access services to the CPE that originally accessed the failed BNG, resulting in low reliability of the entire network. Summary of the invention

[0007] The present invention provides an access method and system for user terminal equipment and a broadband network gateway, so as to enable the broadband network gateways in a broadband network gateway pool to provide access services for the user terminal equipment according to access strategies, thereby improving the reliability of the network.

[0008] On one hand, the present invention provides an access method for a user terminal device, comprising:

[0009] The broadband network gateway in the broadband network gateway pool receives an access request message sent by a user terminal device, wherein the access request message carries an identifier of a user terminal device group to which the user terminal device belongs;

[0010] The broadband network gateway obtains an access policy of the user terminal device group according to the identifier of the user terminal device group, and performs access control on the user terminal device according to the access policy.

[0011] Another aspect of the present invention provides a broadband network gateway, comprising:

[0012] A receiver, configured to receive an access request message sent by a user terminal device, wherein the access request message carries an identifier of a user terminal device group to which the user terminal device belongs;

[0013] An obtaining module, configured to obtain an access policy of the user terminal device group according to the identifier of the user terminal device group received by the receiver;

[0014] A control module is used to perform access control on the user terminal device according to the access policy obtained by the obtaining module.

[0015] Another aspect of the present invention provides an access system for user terminal equipment, comprising user terminal equipment and at least two broadband network gateways as described above.

[0016] The technical effect of the above embodiment of the present invention is: after the broadband network gateway in the broadband network gateway pool receives the access request message sent by the user terminal device and carrying the identifier of the user terminal device group to which the user terminal device belongs, the broadband network gateway obtains the access policy of the user terminal device group according to the identifier of the user terminal device group, and then performs access control on the user terminal device according to the access policy. Thus, the broadband network gateway in the broadband network gateway pool can provide access services for the user terminal devices according to the access policy, and further, when a broadband network gateway in the broadband network gateway pool fails, the broadband network gateway that has not failed in the above broadband network gateway pool can provide access services for the user terminal devices that originally accessed the broadband network gateway that failed, thereby improving the reliability of the entire network. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0018] Figure 1 A flowchart of an embodiment of a method for accessing a user terminal device of the present invention;

[0019] Figure 2 A flowchart of another embodiment of the access method of a user terminal device of the present invention;

[0020] Figure 3 A flowchart of another embodiment of the access method of a user terminal device of the present invention;

[0021] Figure 4 A flowchart of an embodiment of backing up CPE access information of the present invention;

[0022] Figure 5 A flowchart of an embodiment of BNG fault processing of the present invention;

[0023] Figure 6 A flowchart of another embodiment of BNG fault processing of the present invention;

[0024] Figure 7 A schematic diagram of the structure of an embodiment of a broadband network gateway of the present invention;

[0025] Figure 8 A schematic diagram of the structure of another embodiment of the broadband network gateway of the present invention;

[0026] Fig. 9 The present invention is a schematic diagram of the structure of an access system for user terminal equipment according to an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] Figure 1 FIG. 1 is a flow chart of an embodiment of a method for accessing a user terminal device of the present invention. Figure 1 As shown, the access method of the user terminal device may include:

[0029] Step 101: A BNG in a BNG pool receives an access request message sent by a CPE. The access request message carries an identifier of a CPE group to which the CPE belongs.

[0030] In this embodiment, the access request message may be a Dynamic Host Configuration Protocol (DHCP) discovery message, and the identifier of the CPE group to which the CPE belongs may be a service virtual local area network tag (S-vlan tag).

[0031] Step 102: The BNG obtains an access policy of the CPE group according to the identifier of the CPE group, and performs access control on the CPE according to the access policy.

[0032] The access policy of the CPE group refers to the access priority of the CPE group on each BNG. Specifically, access control of the CPE according to the access policy may be: according to the access policy, if the BNG has the highest access priority for the CPE group, the BNG allows the CPE to access the BNG. In addition, if the BNG does not have the highest access priority for the CPE group, the BNG discards the access request message.

[0033] In the above embodiment, after the BNG in the BNG pool receives the access request message sent by the CPE and carrying the identifier of the CPE group to which the CPE belongs, the BNG can obtain the access policy of the CPE group according to the identifier of the CPE group, and then perform access control on the CPE according to the access policy. In this way, the BNG in the BNG pool can provide access services to the CPE according to the access policy, and further, when a BNG in the BNG pool fails, the BNG in the BNG pool that has not failed can provide access services to the CPE that originally accessed the failed BNG, thereby improving the reliability of the entire network.

[0034] In another embodiment of the present invention, further, the present invention Figure 1 After step 102 of the illustrated embodiment, the following may also be included: if the BNG allows the CPE to access the BNG, the BNG allocates an address to the CPE from the address pool according to the address pool management policy, and sends the address allocated to the CPE and the address of the BNG to the CPE so that the CPE can access the BNG.

[0035] Specifically, the BNG allocates an address to the CPE from the address pool according to the address pool management policy. This may be: the BNG allocates an address to the CPE from the address pool having the highest management priority according to the address pool management policy.

[0036] In another embodiment of the present invention, further, the present invention Figure 1 After step 102 of the illustrated embodiment, if the BNG allows the CPE to access the BNG, the BNG may also determine the backup BNG of the CPE group according to the access policy of the CPE group, and send the access information of the CPE to the backup BNG. Specifically, the BNG may determine the backup BNG of the CPE group according to the access policy of the CPE group as follows: the BNG may determine the BNG with the second highest access priority to the CPE group as the backup BNG of the CPE group according to the access policy of the CPE group.

[0037] In another embodiment of the present invention, when a failure is detected in the first BNG in the above-mentioned BNG pool, other BNGs in the BNG pool except the first BNG update the address pool management policy, take over the address pool affected by the above-mentioned first BNG, and publish the network segment routes of the taken-over address pool to the aggregation router.

[0038] Specifically, the address pool affected by the above-mentioned first BNG refers to the address pool with the highest management priority of the first BNG before the failure occurs. Assume that the management priority of address pool P on the first BNG is 100 and the management priority on the second BNG is 60; the management priority of address pool M on the first BNG is 80 and the management priority on the second BNG is 100, and only the first BNG fails in the entire BNG pool. Then, when the first BNG fails, because address pool P has the highest management priority on the first BNG1, address pool P is the address pool affected by the first BNG. In addition, because the management priority of address pool M on the first BNG1 is not the highest, address pool M is not the address pool affected by the first BNG.

[0039] Specifically, the address pool management policy may be updated as follows:

[0040] The management priority of the first BNG for all address pools is reduced to the lowest.

[0041] Specifically, the address pool that is taken over and affected by the first BNG may be:

[0042] The second BNG among the other BNGs takes over the address pool affected by the first BNG, and the second BNG is the BNG that currently has the highest management priority for the address pool affected by the first BNG. The "current" here means that the BNG pool is in a state where the first BNG fails, no other BNGs in the BNG pool except the first BNG have failed, and the other BNGs in the BNG pool except the first BNG have updated the address pool management policy.

[0043] In still another embodiment of the present invention, when a failure of the first BNG in the BNG pool is detected, other BNGs in the BNG pool except the first BNG update the access strategy and take over the CPE group affected by the first BNG.

[0044] Specifically, the CPE group affected by the first BNG refers to the CPE group with the highest access priority before the first BNG fails.

[0045] Specifically, updating the above access strategy may be:

[0046] The access priority of the first BNG to all CPE groups is reduced to the lowest.

[0047] Specifically, taking over the CPE group affected by the first BNG may be: the second BNG among the other BNGs allows the CPE in the CPE group affected by the first BNG to access the second BNG, and the second BNG is the BNG that currently has the highest access priority for the CPE group affected by the first BNG. Wherein, "currently" means that the BNG pool is in a state where the first BNG fails, no other BNG in the BNG pool except the first BNG fails, and the other BNGs in the BNG pool except the first BNG have updated their access policies.

[0048] Among them, the above-mentioned CPE group can be a service virtual local area network (Service VLAN; hereinafter referred to as: SVLAN); at this time, the CPE group that takes over the impact of the first BNG can be: the second BNG among the other BNGs that determines that it currently has the highest access priority to the SVLAN impacted by the first BNG, and rebuilds the data path of all CPEs in the above-mentioned SVLAN according to the access information of all CPEs in the above-mentioned SVLAN stored by itself.

[0049] Further, if the MAC address of the second BNG is different from that of the first BNG, the second BNG sends a gateway free Address Resolution Protocol (ARP) message in the taken-over SVLAN and the client virtual local area network (Customer VLAN; CVLAN) included in the taken-over SVLAN. The gateway free ARP message is used to notify the MAC address of the second BNG, so that the metropolitan Ethernet switch learns the MAC address of the second BNG at the new port, and enables the CPE in the SVLAN to refresh its own gateway ARP table entry according to the MAC address of the second BNG; or,

[0050] If the MAC address of the second BNG is the same as that of the first BNG, the second BNG sends a gateway gratuitous ARP message in the taken-over SVLAN. The above gateway gratuitous ARP message is used to notify the MAC address of the second BNG so that the metropolitan Ethernet switch can learn the MAC address of the second BNG at the new port.

[0051] The following is a detailed introduction to the access method of the user terminal equipment provided by the present invention.

[0052] In order to ensure that there are still BNGs to provide access services to CPEs when one or more BNGs fail, multiple independent BNGs are required to be combined into a BNG pool to jointly provide services to all CPEs.

[0053] In the present invention, each BNG in the BNG pool maintains a distributed CPE access policy, and each BNG in the BNG pool determines whether to provide access services for a specific CPE according to the access policy. From the perspective of the entire BNG pool, that is, according to the access policy, the BNG serving the CPE is selected.

[0054] Specifically, all CPEs may be divided into multiple CPE groups (CPE groups), and the same CPE group supports the same access policy.

[0055] The granularity of the CPE group division supports division according to the S-vlan tag+C-vlan tag, S-vlan tag, MAC address of the CPE or DHCP version 4 option 82 (DHCP v4 option82) of the message, and the above information is used to identify the CPE group; for example, if the CPE group is divided according to the S-vlan tag, the identifier of each CPE group is the S-vlan tag, and the granularity of the CPE group is SVLAN; if the CPE group is divided according to the S-vlan tag+C-vlan tag, the identifier of each CPE group is the S-vlan tag+C-vlan tag, and the granularity of the CPE group is a single CPE; if the CPE group is divided according to the MAC address of the CPE, the identifier of each CPE group is the MAC address of the CPE, and the granularity of the CPE group is a single CPE.

[0056] The distributed CPE access strategy is used to select a BNG serving a specific CPE from all BNGs included in the BNG pool. One method of selecting a BNG serving a specific CPE is implemented by priority: each BNG in the BNG pool sets a different access priority for each CPE group. The access priority can be expressed as 100, 80, 60 or 40, etc., as shown in Table 1. The higher the value, the higher the priority of the CPE group in accessing the BNG. The CPE accesses the BNG with the highest access priority to the CPE group to which the CPE belongs.

[0057] Table 1

[0058] BNG1 BNG2 BNG3 BNG4 CPE Group 1 100 80 60 40 CPE Group 2 40 100 80 60 CPE Group 3 60 40 100 80 CPE Group 4 80 60 40 100

[0059] It should be noted that the representation method shown in Table 1 is only an example of the access priority, and the present invention is not limited thereto. The present invention does not limit the representation method of the access priority.

[0060] When the BNG pool is initialized, each BNG in the BNG pool can be set with different access priorities for each CPE group. The value of the access priority can change dynamically according to the state of the BNG. For example, in the case of a BNG failure, the access priority of the failed BNG for all CPE groups is reduced to the lowest, for example, 0, indicating that the failed BNG cannot provide access services for the CPE; taking the failure of BNG2 as an example, compared with Table 1, the change of the access priority can be shown in Table 2.

[0061] Table 2

[0062] BNG1 BNG2 BNG3 BNG4 CPE Group 1 100 0 60 40 CPE Group 2 40 0 80 60 CPE Group 3 60 0 100 80 CPE Group 4 80 0 40 100

[0063] In the present invention, in order to support the sharing of multiple address pool resources in a BNG pool, and in the event that a BNG in the BNG pool fails, other BNGs in the BNG pool except the failed BNG can take over the address pool resources affected by the failed BNG, each BNG in the BNG pool maintains a distributed address pool management strategy, which is used to select a BNG that manages a specific address pool from all BNGs in the BNG pool. The selected BNG is responsible for managing the address resources of the address pool, allocating IP addresses from the address pool managed by itself to the CPE connected to the BNG, and publishing the network segment routes of the address pool.

[0064] Specifically, one method of selecting a BNG to manage a specific address pool from all BNGs in a BNG pool can be achieved through priority: each BNG in the BNG pool sets a different management priority for each address pool, and the management priority can be expressed as 100, 80, 60 or 40, etc., as shown in Table 3. The higher the value, the higher the management priority of the BNG for the address pool, and the address pool is managed by the BNG with the highest management priority for the address pool.

[0065] Table 3

[0066] BNG1 BNG2 BNG3 BNG4 Address Pool 1 100 80 60 40 Address pool 2 40 100 80 60 Address pool 3 60 40 100 80 Address pool 4 80 60 40 100

[0067] It should be noted that the representation method shown in Table 3 is only an example of the management priority, and the present invention is not limited thereto. The present invention does not limit the representation method of the management priority.

[0068] When the BNG pool is initialized, it supports setting different management priorities for each BNG in the BNG pool for each address pool. The value of the above management priority can change dynamically according to the state of the BNG. For example, when a BNG fails, the management priority of the failed BNG for all address pools is reduced to the lowest, for example, 0, as shown in Table 4. Table 4 takes the failure of BNG2 as an example to show the change of management priority compared with Table 3.

[0069] Table 4

[0070] BNG1 BNG2 BNG3 BNG4 Address Pool 1 100 0 60 40 Address pool 2 40 0 80 60 Address pool 3 60 0 100 80 Address pool 4 80 0 40 100

[0071] Figure 2 A flowchart of another embodiment of the access method of a user terminal device of the present invention. Figure 1 A further extension of the embodiment shown. Figure 2 As shown, the access method of the user terminal device may include:

[0072] Step 201: The CPE sends an access request message to all BNGs in the BNG pool, where the access request message is used to request access to the network.

[0073] Specifically, the CPE may broadcast the access request message to all BNGs in the BNG pool.

[0074] In this embodiment, the access request message carries an identifier of the CPE group to which the CPE belongs; the access request message varies according to the access method adopted by the CPE. If the CPE adopts an Ethernet-based Point to Point Protocol (Point to Point Protocol over Ethernet; hereinafter referred to as: PPPOE) access method, the access request message is a PPPOE Active Discovery Initiation (PPPoE Active Discovery Initiation; hereinafter referred to as: PADI) message; if the CPE adopts an Ethernet-based Internet Protocol (IP over Ethernet; hereinafter referred to as: IPOE) + DHCP version 4 (DHCPversion 4; hereinafter referred to as: DHCPv4) access method, the access request message is a DHCP discover (DHCPdiscover) message or a DHCP request (DHCP request) message.

[0075] Step 202: After receiving the access request message sent by the CPE, each BNG in the BNG pool obtains the access policy of the CPE group according to the identifier of the CPE group to which the CPE belongs carried in the access request message, and determines whether to allow the CPE to access the BNG according to the access policy.

[0076] In this embodiment, the identifier of the above-mentioned CPE group varies according to the different granularities of the CPE group division. For example, if the CPE groups are divided according to the S-vlan tag, the identifier of each CPE group is the S-vlan tag, and the granularity of the CPE group is SVLAN; if the CPE groups are divided according to the S-vlan tag+C-vlan tag, the identifier of each CPE group is the S-vlan tag+C-vlantag, and the granularity of the CPE group is a single CPE; if the CPE groups are divided according to the MAC address of the CPE, the identifier of each CPE group is the MAC address of the CPE, and the granularity of the CPE group is a single CPE.

[0077] Specifically, according to the access policy, determining whether to allow the CPE to access the BNG can be: based on the above access policy, if the BNG determines that it has the highest access priority for the CPE group to which the above CPE belongs, the BNG allows the above CPE to access the BNG; otherwise, the BNG does not allow the above CPE to access the BNG and discards the received access request message.

[0078] For the implementation of this step, reference may be made to the description of step 102 .

[0079] Step 203: The BNG that allows the CPE to access authenticates the CPE, and after the CPE passes the authentication, allocates an address to the CPE from the address pool according to the address pool management policy.

[0080] Specifically, allocating an address to the CPE from the address pool according to the address pool management policy may be: the BNG allowing the CPE to access allocates an address to the CPE from the address pool with the highest management priority according to the address pool management policy. The above address may be an IP address.

[0081] Step 204: The BNG that allows the CPE to access sends an access response message to the CPE. The access response message carries parameters such as the IP address allocated to the CPE and the address of the BNG that allows the CPE to access.

[0082] In this embodiment, the above-mentioned access response message also varies according to the access method adopted by the CPE. If the CPE adopts the PPPOE access method, the access response message is a PPPOE active discovery session (PPPoE ActiveDiscovery Session-confirmation; hereinafter referred to as: PADS) message. If the CPE adopts the IPOE+DHCPv4 access method, the above-mentioned access response message is a DHCP confirmation (DHCP Acknowledgement; hereinafter referred to as: DHCP ACK) message.

[0083] Step 205, the CPE configures the IP protocol stack according to the parameters such as the IP address assigned to the CPE and the address of the BNG allowed to be accessed by the CPE carried in the received access response message. At this point, the CPE can access the network and communicate with other IP terminals on the network.

[0084] The above-mentioned embodiment can realize that the BNG in the BNG pool provides access services to the CPE according to the access strategy, and further can realize that when a BNG in the BNG pool fails, the BNG that has not failed in the above-mentioned BNG pool can provide access services to the CPE that originally accessed the failed BNG, thereby improving the reliability of the entire network.

[0085] Figure 3 A flowchart of another embodiment of the access method of a user terminal device of the present invention. Figure 1 and Figure 2 A further extension of the embodiment shown. Figure 3 As shown, the access method of the user terminal device may include:

[0086] Step 301: CPE sends a DHCP discover message to all BNGs in the BNG pool. The DHCP discover message adds an S-vlan tag and a C-vlan tag on the AN.

[0087] Specifically, the CPE may broadcast a DHCP discovery message to all BNGs in the BNG pool.

[0088] Step 302: After receiving the DHCP discovery message, each BNG in the BNG pool obtains the S-vlan tag from the DHCP discovery message, obtains the access policy of the CPE group to which the CPE belongs according to the S-vlan tag, and determines whether to allow the CPE to access the BNG according to the access policy.

[0089] Specifically, if each BNG in the BNG pool determines that it has the highest access priority for the CPE group to which the CPE belongs, the CPE is allowed to access the BNG; otherwise, the BNG does not allow the CPE to access the BNG and discards the received DHCP discovery message.

[0090] Step 303: The BNG that allows the CPE to access authenticates the CPE, and after the CPE passes the authentication, allocates an address to the CPE from its own address pool with the highest management priority according to the address pool management policy.

[0091] Step 304: The BNG that allows the CPE to access sends a DHCP offer message to the CPE. The DHCP offer message carries parameters such as the IP address allocated to the CPE and the address of the BNG that allows the CPE to access.

[0092] Step 305: After receiving the DHCP offer message, the CPE sends a DHCP request message to all BNGs in the BNG pool.

[0093] Specifically, the CPE may broadcast a DHCP request message to all BNGs in the BNG pool.

[0094] Step 306: The BNG that allows the CPE to access sends a DHCP ACK message to the CPE. The DHCP ACK message carries parameters such as the IP address assigned to the CPE and the address of the BNG that allows the CPE to access.

[0095] In this embodiment, the BNG to which the CPE is not allowed to access discards the received DHCP request message.

[0096] Step 307: The CPE configures the IP protocol stack according to the parameters such as the IP address assigned to the CPE and the address of the BNG that the CPE is allowed to access, which are carried in the DHCP ACK message. At this point, the CPE can access the network and communicate with other IP terminals on the network.

[0097] The above-mentioned embodiment can realize that the BNG in the BNG pool provides access services to the CPE according to the access strategy, and further can realize that when a BNG in the BNG pool fails, the BNG that has not failed in the above-mentioned BNG pool can provide access services to the CPE that originally accessed the failed BNG, thereby improving the reliability of the entire network.

[0098] In the BNG pool, in order to ensure that the CPE is not aware of a failure in a BNG in the BNG pool, it is necessary to back up the CPE's access information to the backup BNG while the CPE accesses the CPE's service BNG. In this way, when the CPE's current service BNG fails, the backup BNG can serve as the new service BNG to provide access services to the CPE. The access information of the CPE includes the CPE's Media Access Control (MAC) address, the IP address assigned to the CPE, etc., so that the CPE can obtain the access service provided by the new service BNG without re-initiating the access process.

[0099] Figure 4 A flowchart of an embodiment of backing up CPE access information of the present invention is used to further expand Figure 1 , Figure 2 , Figure 3 In the embodiments shown in the figure, after the BNG in each embodiment performs access control on the CPE according to the access policy, as shown in FIG. Figure 4 As shown, the above method embodiments may further include:

[0100] Step 401: The service BNG of the CPE accepts the CPE according to the access policy of the CPE group to which the CPE belongs, and provides access service for the CPE.

[0101] This embodiment is described by taking an example that the BNG pool includes three BNGs, namely BNG1, BNG2 and BNG3, and the service BNG of the CPE is BNG1.

[0102] Step 402: The serving BNG of the CPE determines the backup BNG of the CPE group according to the access policy, and sends the access information of the CPE to the backup BNG.

[0103] Specifically, the service BNG of the CPE determines the backup BNG of the CPE group according to the access policy: the service BNG determines the BNG with the second highest access priority to the CPE group as the backup BNG of the CPE according to the access policy.

[0104] This embodiment is described by taking the backup BNG as BNG3 as an example.

[0105] Step 403: The backup BNG saves the access information of the CPE sent by the service BNG, so as to provide access service for the CPE according to the access information when the service BNG fails.

[0106] The above-mentioned embodiment can realize backing up the access information of the CPE to the backup BNG of the CPE, and further can realize that when the service BNG of the CPE fails, the backup BNG can serve as the new service BNG to provide access services to the CPE, so that the CPE can obtain the access services provided by the new service BNG without re-initiating the access process.

[0107] In the present invention, a fault detection mechanism is maintained between all BNGs in the BNG pool. As long as a BNG in the BNG pool fails, other BNGs in the BNG pool except the failed one can detect it in real time and take over the failed BNG to provide access services for the CPE that originally accessed the failed BNG.

[0108] Figure 5 This is a flowchart of an embodiment of the BNG fault processing of the present invention, which is used to Figure 1 , Figure 2 , Figure 3 as well as Figure 4The methods in various embodiments are expanded. Figure 5 As shown in the above Figure 1-Figure 4 Based on the embodiments shown, the embodiments of the present invention may further include:

[0109] Step 501: All BNGs in the BNG pool perform fault detection through a fault detection mechanism.

[0110] This embodiment is described by taking an example in which a BNG pool includes BNG1, BNG2 and BNG3, and BNG2 and BNG3 detect that BNG1 fails.

[0111] Step 502: After detecting that BNG1 fails, BNG2 and BNG3 update the address pool management policy, take over the address pool affected by the failure of BNG1, and publish the network segment route of the newly taken over address pool to the aggregation router.

[0112] Specifically, the address management policy may be updated by reducing the management priority of the failed BNG to the lowest for all address pools, for example, 0. Specifically in this embodiment, BNG2 and BNG3 reduce the management priority of BNG1 to 0 for all address pools.

[0113] The address pool affected by the failure of BNG1 can be taken over by: the BNG that determines that it currently has the highest management priority for the address pool affected by the failure of BNG1 among BNG2 and BNG3, and takes over the address pool affected by the failure of BNG1. For example, referring to Table 3, when BNG1 works normally, BNG1 has the highest management priority for address pool 1, that is, address pool 1 is managed by BNG1, so after BNG1 fails, address pool 1 will be affected by the failure of BNG1, that is, address pool 1 is the address pool affected by the failure of BNG1. And after BNG1 fails, the management priority of BNG1 for all address pools is reduced to 0. At this time, since the management priority of BNG2 for address pool 1 is 80 and the management priority of BNG3 for address pool 1 is 60, BNG2 is the BNG with the highest management priority for address pool 1 at present, so BNG2 takes over address pool 1 and publishes the network segment route of the newly taken over address pool 1 to the aggregation router.

[0114] Step 503: After detecting that BNG1 fails, BNG2 and BNG3 update the access policy of the CPE group and take over the CPE group affected by the failure of BNG1.

[0115] Specifically, the access policy of the CPE group may be updated by reducing the access priority of the failed BNG to all CPE groups to the lowest, for example, 0. Specifically in this embodiment, the access priority of BNG1 to all CPE groups is reduced to 0.

[0116] The CPE group affected by the failure of BNG1 can be taken over by: the BNG among BNG2 and BNG3 that determines that it currently has the highest access priority to the CPE group affected by the failed BNG1, and allows the CPE of the CPE group to access from the BNG. For example, referring to Table 1, when BNG1 is working normally, BNG1 has the highest access priority to CPE group 1, that is, the CPE in CPE group 1 accesses from BNG1, so after BNG1 fails, CPE group 1 will be affected by the failure of BNG1, that is, CPE group 1 is the CPE group affected by the failed BNG1. And after BNG1 fails, the access priority of BNG1 to all CPE groups is reduced to 0. At this time, since the management priority of BNG2 to CPE group 1 is 80 and the management priority of BNG3 to CPE group 1 is 60, BNG2 is the BNG with the highest management priority to CPE group 1, so BNG2 takes over CPE group 1.

[0117] In this embodiment, step 502 and step 503 may be executed in parallel or sequentially. This embodiment does not limit the execution order of step 502 and step 503.

[0118] Step 504: The CPEs in CPE group 1 reconnect to BNG2.

[0119] Step 505: The CPE in CPE group 1 re-accesses the network and communicates with other IP terminals on the network.

[0120] The above embodiment can achieve that when a BNG in a BNG pool fails, a BNG that has not failed in the BNG pool provides access services to a CPE that originally accesses the failed BNG, thereby improving the reliability of the entire network.

[0121] Figure 6 This is a flowchart of another embodiment of the BNG fault processing of the present invention. This embodiment introduces the BNG fault processing when the CPE group is SVLAN granularity and supports real-time backup of CPE access data. Figure 5 Further development of the illustrated embodiment.

[0122] like Figure 6 As shown, it may include:

[0123] Step 601 to step 602 are the same as steps 501 to step 502.

[0124] Step 603: After detecting that BNG1 fails, BNG2 and BNG3 update the access policy of the CPE group and take over the SVLAN affected by the failure of BNG1.

[0125] Specifically, the access policy of the CPE group may be updated by reducing the access priority of the failed BNG to all SVLANs to the lowest, for example, 0. Specifically in this embodiment, BNG2 and BNG3 reduce the access priority of BNG1 to all SVLANs to 0.

[0126] The SVLAN affected by the failure of BNG1 can be taken over by: the BNG among BNG2 and BNG3 that determines that it currently has the highest priority for the SVLAN affected by the failed BNG1 is the backup BNG of the SVLAN. The backup BNG rebuilds the data path of all CPEs based on the saved access information of all CPEs in the SVLAN.

[0127] For example, referring to Table 1, when BNG1 is working normally, BNG1 has the highest access priority for CPE group 1, namely SVLAN 1, namely, CPE in SVLAN 1 accesses from BNG1, therefore, after BNG1 fails, SVLAN 1 will be affected by the failure of BNG1, namely, SVLAN 1 is the CPE group affected by the failed BNG1. And after BNG1 fails, the access priority of BNG1 to all SVLANs is reduced to 0. At this time, since the management priority of BNG2 to SVLAN 1 is 80 and the management priority of BNG3 to SVLAN 1 is 60, BNG2 is the BNG with the highest management priority to SVLAN 1 at present, so BNG2 is the backup BNG of SVLAN1, and BNG2 rebuilds the data path of all CPEs in SVLAN 1 according to the access information of all CPEs in SVLAN 1 saved.

[0128] Step 604a, if the MAC address of BNG2 is different from that of the failed BNG1, BNG2 sends a gateway gratuitous ARP message in the taken-over SVLAN and the CVLAN contained in the SVLAN, and the gateway gratuitous ARP message is used to notify the MAC address of BNG2, so that the metropolitan Ethernet switch can learn the MAC address of BNG2 on the new port, and each CPE taken over by BNG2 can refresh its own gateway ARP table according to the MAC address of BNG2; or,

[0129] Step 604b, if BNG2 has the same MAC address as the failed BNG1, BNG2 sends a gateway gratuitous ARP message in the taken-over SVLAN. The gateway gratuitous ARP message is used to notify the MAC address of BNG2 so that the metropolitan Ethernet switch can learn the MAC address of BNG2 on the new port.

[0130] Step 605: The CPE in SVLAN1 re-accesses the network.

[0131] The above embodiment can realize that when the service BNG of the CPE fails, the backup BNG acts as a new service BNG to provide access services to the CPE, so that the CPE can obtain the access services provided by the new service BNG without re-initiating the access process.

[0132] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0133] Figure 7 The schematic diagram of the structure of an embodiment of the broadband network gateway of the present invention is shown in FIG. Figure 1 In the process of the embodiment shown, the BNG in this embodiment may be a BNG in a BNG pool, and the BNG may include: a receiver 71, an acquisition module 72, and a control module 73;

[0134] The receiver 71 is used to receive an access request message sent by a CPE, where the access request message carries an identifier of a CPE group to which the CPE belongs;

[0135] An obtaining module 72, configured to obtain an access policy of the CPE group according to an identifier of the CPE group received by the receiver 71;

[0136] The control module 73 is used to perform access control on the above-mentioned CPE according to the above-mentioned access policy obtained by the acquisition module 72; specifically, the control module 73 can allow the above-mentioned CPE to access the BNG according to the above-mentioned access policy when the BNG has the highest access priority for the above-mentioned CPE group; further, when the BNG does not have the highest access priority for the above-mentioned CPE group, the control module 73 can also discard the above-mentioned access request message.

[0137] In the above BNG, after the receiver 71 receives the access request message sent by the CPE carrying the identifier of the CPE group to which the CPE belongs, the obtaining module 72 can obtain the access policy of the CPE group according to the identifier of the CPE group, and then the control module 73 can perform access control on the CPE according to the access policy. Thus, the BNG in the BNG pool can provide access services to the CPE according to the access policy, and further, when a BNG in the BNG pool fails, the BNG in the BNG pool that has not failed can provide access services to the CPE that originally accessed the failed BNG, thereby improving the reliability of the entire network.

[0138] Figure 8 FIG. 1 is a schematic diagram of the structure of another embodiment of the broadband network gateway of the present invention, and FIG. Figure 7 Compared with the broadband network gateway shown in the figure, the difference is that Figure 8 In the implementation shown, the above BNG may also include:

[0139] The allocation module 74 is used to allocate an address to the CPE from the address pool according to the address pool management policy when the control module 73 allows the CPE to access the BNG; specifically, the allocation module 74 can allocate an address to the CPE from the address pool with the highest management priority according to the address pool management policy.

[0140] The transmitter 75 is used to send the address allocated by the allocation module 74 to the CPE and the address of the BNG to the CPE, so that the CPE can access the BNG.

[0141] In another implementation of this embodiment, the BNG may further include:

[0142] The determination module 76 is used to determine the backup BNG of the CPE group according to the access policy of the CPE group when the control module 73 allows the CPE to access the BNG; specifically, the determination module 76 can determine the BNG with the second highest access priority to the CPE group as the backup BNG of the CPE group according to the access policy of the CPE group.

[0143] The information sending module 77 is used to send the access information of the above-mentioned CPE to the above-mentioned backup BNG.

[0144] In another implementation of this embodiment, the BNG may further include:

[0145] The first updating module 78 is used to update the address pool management policy when it is detected that a BNG in the above-mentioned BNG pool fails; specifically, the first updating module 78 can reduce the management priority of the above-mentioned failed BNG to the lowest for all address pools.

[0146] The first takeover module 79 is used to take over the address pool affected by the above-mentioned failed BNG, and publish the network segment route of the taken-over address pool to the aggregation router; specifically, the first takeover module 79 can take over the address pool affected by the above-mentioned failed BNG when it is determined that the above-mentioned BNG currently has the highest management priority for the address pool affected by the above-mentioned failed BNG.

[0147] In another implementation of this embodiment, the BNG may further include:

[0148] The second update module 710 is used to update the access policy when it is detected that a BNG in the BNG pool fails; specifically, the second update module 710 can reduce the access priority of the failed BNG to all CPE groups to the lowest.

[0149] The second takeover module 711 is used to take over the CPE group affected by the above-mentioned failed BNG.

[0150] Specifically, when determining that the BNG currently has the highest access priority for the CPE group affected by the failed BNG, the second takeover module 711 may allow the CPE in the CPE group affected by the failed BNG to access the BNG; or,

[0151] When the CPE group is an SVLAN, if it is determined that the BNG currently has the highest access priority for the SVLAN affected by the failed BNG, the second takeover module 711 may reconstruct the data paths of all CPEs in the SVLAN according to the access information of all CPEs in the SVLAN stored by itself. At this time, the BNG may also include:

[0152] The address sending module 712 is used to send a gateway gratuitous ARP message in the taken-over SVLAN and the CVLAN included in the taken-over SVLAN when the MAC address of the above-mentioned BNG is different from that of the failed BNG. The gateway gratuitous ARP message is used to notify the MAC address of the above-mentioned BNG, so that the metropolitan Ethernet switch can learn the MAC address of the above-mentioned BNG at the new port, and the CPE in the above-mentioned SVLAN can refresh its own gateway address ARP table entry according to the MAC address of the above-mentioned BNG; or, when the MAC address of the above-mentioned BNG is the same as that of the failed BNG, send a gateway gratuitous ARP message in the taken-over SVLAN, and the gateway gratuitous ARP message is used to notify the MAC address of the above-mentioned BNG, so that the metropolitan Ethernet switch can learn the MAC address of the above-mentioned BNG at the new port.

[0153] In a specific implementation, BNG may include modules in one or more of the above implementations, which is not limited in this embodiment. Figure 8 BNG is taken as an example including modules in all the above implementations.

[0154] The above-mentioned BNG can enable the BNG in the BNG pool to provide access services to the CPE according to the access strategy, and further, when a BNG in the BNG pool fails, the BNG that has not failed in the above-mentioned BNG pool can provide access services to the CPE that originally accessed the failed BNG, thereby improving the reliability of the entire network.

[0155] Fig. 9 FIG. 1 is a schematic diagram of a structure of an embodiment of an access system for a user terminal device of the present invention. Fig. 9 As shown, the system may include: a CPE 91 and at least two BNGs 92;

[0156] Specifically, at least two BNGs 92 may receive an access request message sent by CPE 91, the access request message carrying the identifier of the CPE group to which the CPE 91 belongs, obtain the access policy of the CPE group according to the identifier of the CPE group, and perform access control on the CPE 91 according to the access policy. In this embodiment, the at least two BNGs 92 form a BNG pool, and each of the at least two BNGs 92 may be configured to be a BNG pool. Figure 7 or Figure 8 The BNG implementation shown is not described in detail here.

[0157] In an implementation of this embodiment, the system may further include: an aggregation router 93 , an Ethernet switch 94 and an access point 95 .

[0158] Specifically, the access request message sent by CPE 91 is sent to BNG 92 via access point 95 and Ethernet switch 94. The Ethernet switch 94 in this embodiment may be a metropolitan Ethernet switch.

[0159] After CPE 91 accesses BNG 92, the uplink message of CPE 91 is sent to BNG 92 through access point 95 and Ethernet switch 94, and then sent to the IP core network by BNG 92 through aggregation router 93; conversely, the downlink message sent from the IP core network to CPE 91 is sent to BNG 92 by aggregation router 93, and then sent to CPE 91 by BNG 92 through Ethernet switch 94 and access point 95.

[0160] In this embodiment, Fig. 9It is taken as an example that the system includes m CPEs 91, n access points 95, and n BNGs 92, where m and n are positive integers, m≥2, n≥2.

[0161] The access system of the above-mentioned user terminal equipment can enable the BNG 92 in the BNG pool to provide access services to the CPE 91 according to the access policy, and further, when a BNG 92 in the BNG pool fails, the BNG 92 that has not failed in the above-mentioned BNG pool can provide access services to the CPE that originally accessed the failed BNG 92, thereby improving the reliability of the entire network.

[0162] Those skilled in the art will appreciate that the accompanying drawings are merely schematic diagrams of a preferred embodiment, and the modules or processes in the accompanying drawings are not necessarily required to implement the present invention.

[0163] Those skilled in the art can understand that the modules in the device in the embodiment can be distributed in the device in the embodiment according to the description of the embodiment, or can be changed accordingly and located in one or more devices different from the present embodiment. The modules in the above embodiment can be combined into one module, or can be further divided into multiple sub-modules.

[0164] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for accessing a user terminal device, characterized in that: Applied to a network system, the network system includes a plurality of broadband network gateways, including: A first broadband network gateway among the multiple broadband network gateways obtains an identifier of a first user terminal device group, where the identifier of the first user terminal device group is used to identify the first user terminal device group to which the first user terminal device belongs; The first broadband network gateway determines, according to the identifier of the first user terminal device group, that the access priority of the first broadband network gateway to the first user terminal device group is higher than the access priority of other broadband network gateways among the multiple broadband network gateways to the first user terminal device group; The first broadband network gateway provides access services for the first user terminal devices in the first user terminal device group; The first broadband network gateway determines, according to the identifier of the first user terminal device group, that a second broadband network gateway among the multiple broadband network gateways is a backup broadband network gateway for the first user terminal device group, and the access priority of the second broadband network gateway to the first user terminal device group is the second highest priority of the multiple broadband network gateways to the first user terminal device group; In the event that the first broadband network gateway fails, the second broadband network gateway provides access services for the first user terminal devices in the first user terminal device group.

2. The method according to claim 1, characterized in that The method further comprises: The first broadband network gateway sends the access information of the first user terminal device to the second broadband network gateway.

3. The method according to claim 2, characterized in that The access information of the first user terminal device includes at least one of the following information: a media access control MAC address of the first user terminal device and an Internet Protocol IP address of the first user terminal device.

4. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: The second broadband network gateway obtains an identifier of a second user terminal device group, where the identifier of the second user terminal device group is used to identify the second user terminal device group to which the second user terminal device belongs; The second broadband network gateway determines, according to the identifier of the second user terminal device group, that the access priority of the second broadband network gateway to the second user terminal device group is higher than the access priority of other broadband network gateways among the multiple broadband network gateways to the second user terminal device group; The second broadband network gateway provides access services for the second user terminal devices in the second user terminal device group; The second broadband network gateway determines, according to the identifier of the second user terminal device group, that a third broadband network gateway among the multiple broadband network gateways is a backup broadband network gateway for the second user terminal device group, and the access priority of the third broadband network gateway to the second user terminal device group is the second highest priority of the multiple broadband network gateways to the second user terminal device group; In the case that the second broadband network gateway fails, the third broadband network gateway provides access services for the second user terminal devices in the second user terminal device group.

5. The method according to claim 4, characterized in that The method further comprises: The second broadband network gateway sends the access information of the second user terminal device to the third broadband network gateway.

6. The method according to claim 5, characterized in that The access information of the second user terminal device includes at least one of the following information: a MAC address of the second user terminal device and an IP address of the second user terminal device.

7. The method according to any one of claims 1 to 3, characterized in that: After the first broadband network gateway provides access services for the first user terminal devices in the first user terminal device group, the method further includes: The first broadband network gateway allocates an address to the first user terminal device from its own address pool with the highest management priority; The first broadband network gateway sends, to the first user terminal device, an address allocated by the first broadband network gateway to the first user terminal device.

8. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: The second broadband network gateway determines that the second broadband network gateway has the highest management priority for the address pool affected by the failed first broadband network gateway; The second broadband network gateway takes over the address pool affected by the faulty first broadband network gateway.

9. The method according to claim 8, characterized in that The method further comprises: The second broadband network gateway publishes to the aggregation router the network segment route of the address pool that is taken over and is affected by the faulty first broadband network gateway.

10. The method according to claim 8, characterized in that The management priority of the address pool affected by the failed first broadband network gateway is updated to the lowest.

11. The method according to any one of claims 1 to 3, characterized in that: The first broadband network gateway among the multiple broadband network gateways obtains the identifier of the first user terminal device group, including: The first broadband network gateway receives an access request message sent by the first user terminal device, where the access request message includes an identifier of the first user terminal device group.

12. The method according to claim 11, characterized in that The access request message includes a dynamic host configuration protocol discovery message.

13. The method according to any one of claims 1 to 3, characterized in that: The identifier of the first user terminal device group includes a virtual local area network tag.

14. The method according to claim 13, characterized in that The virtual local area network tag includes at least one of a service virtual local area network S-vlan tag and a client virtual local area network C-vlan tag.

15. An access system for user terminal equipment, characterized in that: The system includes a plurality of broadband network gateways; A first broadband network gateway among the multiple broadband network gateways is used to obtain an identifier of a first user terminal device group, where the identifier of the first user terminal device group is used to identify the first user terminal device group to which the first user terminal device belongs; The first broadband network gateway is used to determine, according to the identifier of the first user terminal device group, that the access priority of the first broadband network gateway to the first user terminal device group is higher than the access priority of other broadband network gateways among the multiple broadband network gateways to the first user terminal device group; The first broadband network gateway is used to provide access services for the first user terminal devices in the first user terminal device group; The first broadband network gateway is used to determine, according to the identifier of the first user terminal device group, that a second broadband network gateway among the multiple broadband network gateways is a backup broadband network gateway for the first user terminal device group, and the access priority of the second broadband network gateway to the first user terminal device group is the second highest priority of the multiple broadband network gateways to the first user terminal device group; In the event of a failure of the first broadband network gateway, the second broadband network gateway is used to provide access services for the first user terminal devices in the first user terminal device group.

16. The system according to claim 15, characterized in that The first broadband network gateway is further configured to send access information of the first user terminal device to the second broadband network gateway.

17. The system according to claim 16, characterized in that The access information of the first user terminal device includes at least one of the following information: a media access control MAC address of the first user terminal device and an Internet Protocol IP address of the first user terminal device.

18. The system according to any one of claims 15 to 17, characterized in that: The second broadband network gateway is further used to obtain an identifier of a second user terminal device group, where the identifier of the second user terminal device group is used to identify the second user terminal device group to which the second user terminal device belongs; The second broadband network gateway is further used to determine, according to the identifier of the second user terminal device group, that the access priority of the second broadband network gateway to the second user terminal device group is higher than the access priority of other broadband network gateways in the multiple broadband network gateways to the second user terminal device group; The second broadband network gateway is further used to provide access services for the second user terminal devices in the second user terminal device group; The second broadband network gateway is used to determine, according to the identifier of the second user terminal device group, a third broadband network gateway among the multiple broadband network gateways as a backup broadband network gateway for the second user terminal device group, and the access priority of the third broadband network gateway to the second user terminal device group is the second highest priority of the multiple broadband network gateways to the second user terminal device group; In the case that the second broadband network gateway fails, the third broadband network gateway is used to provide access services for the second user terminal devices in the second user terminal device group.

19. The system according to claim 18, characterized in that The second broadband network gateway is further configured to send access information of the second user terminal device to the third broadband network gateway.

20. The system according to claim 19, characterized in that The access information of the second user terminal device includes at least one of the following information: a MAC address of the second user terminal device and an IP address of the second user terminal device.

21. The system according to any one of claims 15 to 17, characterized in that: The first broadband network gateway is further used to allocate an address to the first user terminal device from its own address pool with the highest management priority; The first broadband network gateway is further used to send, to the first user terminal device, an address allocated by the first broadband network gateway to the first user terminal device.

22. The system according to any one of claims 15 to 17, characterized in that: The second broadband network gateway is further used to determine that the second broadband network gateway has the highest management priority for the address pool affected by the faulty first broadband network gateway; The second broadband network gateway is further configured to take over the address pool affected by the faulty first broadband network gateway.

23. The system according to claim 22, characterized in that The second broadband network gateway is further used to publish the network segment route of the taken-over address pool affected by the faulty first broadband network gateway to the aggregation router.

24. The system according to claim 22, characterized in that The failed first broadband network gateway is used to update the management priority of the address pool affected by the failed first broadband network gateway to the lowest.

25. The system according to any one of claims 15 to 17, characterized in that: The first broadband network gateway is specifically configured to receive an access request message sent by the first user terminal device, where the access request message includes an identifier of the first user terminal device group.

26. The system according to claim 25, characterized in that The access request message includes a dynamic host configuration protocol discovery message.

27. The system according to any one of claims 15 to 17, characterized in that: The identifier of the first user terminal device group includes a virtual local area network tag.

28. The system according to claim 27, characterized in that The virtual local area network tag includes at least one of a service virtual local area network S-vlan tag and a client virtual local area network C-vlan tag.

29. An access device for a user terminal device, characterized in that: The device is arranged in a first broadband network gateway among a plurality of broadband network gateways included in the network system, and includes: a receiver, configured to obtain an identifier of a first user terminal device group, wherein the identifier of the first user terminal device group is used to identify the first user terminal device group to which the first user terminal device belongs; an obtaining module, configured to determine, according to the identifier of the first user terminal device group, that the access priority of the first broadband network gateway to the first user terminal device group is higher than the access priority of other broadband network gateways among the multiple broadband network gateways to the first user terminal device group; a control module, configured to provide access services to the first user terminal device in the first user terminal device group based on the determination result of the obtaining module; An information sending module is used to send the access information of the first user terminal device to a second broadband network gateway among the multiple broadband network gateways, and the access information of the first user terminal device is used by the second broadband network gateway to provide access services for the first user terminal device in the first user terminal device group in the event of a failure of the first broadband network gateway.

30. The device according to claim 29, characterized in that The access information of the first user terminal device includes at least one of the following information: a media access control MAC address of the first user terminal device and an Internet Protocol IP address of the first user terminal device.

31. The device according to claim 29, characterized in that The device also includes: An allocation module, configured to allocate an address to the first user terminal device from an address pool having the highest management priority; A transmitter is used to send the address allocated by the apparatus to the first user terminal device to the first user terminal device.

32. The device according to any one of claims 29 to 31, characterized in that The device is used to update the management priority of the address pool affected by the failed first broadband network gateway to the lowest.

33. The device according to any one of claims 29 to 31, characterized in that The receiver is specifically used for: An access request message sent by the first user terminal device is received, where the access request message includes an identifier of the first user terminal device group.

34. The device according to claim 33, characterized in that The access request message includes a dynamic host configuration protocol discovery message.

35. The device according to any one of claims 29 to 31, characterized in that The identifier of the first user terminal device group includes a virtual local area network tag.

36. The device according to claim 35, characterized in that The virtual local area network tag includes at least one of a service virtual local area network S-vlan tag and a client virtual local area network C-vlan tag.

37. An access device for a user terminal device, characterized in that: The device is arranged in a second broadband network gateway among a plurality of broadband network gateways included in the network system, and includes: a receiver, configured to obtain an identifier of a first user terminal device group, wherein the identifier of the first user terminal device group is used to identify the first user terminal device group to which the first user terminal device belongs; an information receiving module, configured to receive access information of the first user terminal device sent by a first broadband network gateway among the multiple broadband network gateways, so as to indicate that the second broadband network gateway is a backup broadband network gateway of the first user terminal device group, and that the access priority of the second broadband network gateway to the first user terminal device group is the second highest priority of the multiple broadband network gateways to the first user terminal device group; The control module is used to provide access services for the first user terminal device in the first user terminal device group based on the access priority determined by the identifier of the first user terminal device group and the access information of the first user terminal device when the first broadband network gateway fails.

38. The device according to claim 37, characterized in that The access information of the first user terminal device includes at least one of the following information: a media access control MAC address of the first user terminal device and an Internet Protocol IP address of the first user terminal device.

39. The device according to claim 37, characterized in that The device also includes: a determination module, configured to determine that the second broadband network gateway has the highest management priority for the address pool affected by the failed first broadband network gateway; A takeover module is used to take over the address pool affected by the faulty first broadband network gateway.

40. The device according to claim 39, characterized in that The takeover module is further used to publish the network segment route of the taken-over address pool affected by the failed first broadband network gateway to the aggregation router.

41. The device according to any one of claims 37 to 39, characterized in that The device is used to update the management priority of the address pool affected by the failed first broadband network gateway to the lowest.

42. The device according to any one of claims 37 to 39, characterized in that The receiver is specifically used for: An access request message sent by the first user terminal device is received, where the access request message includes an identifier of the first user terminal device group.

43. The device according to claim 42, characterized in that The access request message includes a dynamic host configuration protocol discovery message.

44. The device according to any one of claims 37 to 39, characterized in that The identifier of the first user terminal device group includes a virtual local area network tag.

45. The device according to claim 44, characterized in that The virtual local area network tag includes at least one of a service virtual local area network S-vlan tag and a client virtual local area network C-vlan tag.

Images