A remote network access system and communication method

Abstract

The present invention relates to the field of computer network technology, and specifically to a remote network access system and communication method, the system comprising: a plurality of access devices, each of which is connected to at least one external terminal; a management platform, the management platform being connected to each access device; the management platform assigns at least two access devices to the same virtual network segment to build a virtual private network through the virtual network segment. The method comprises: S1: connecting the external terminal to the local access device; S2: determining the virtual network segment accessed by the external terminal; S3: obtaining a data packet sent by the external terminal, and determining whether to forward the data packet to the remote access device. The beneficial effect of the present invention is that by setting the access device as a port for the external terminal to access the virtual private network, and configuring a plurality of virtual network segments on the access device, so that the external terminal can access data files in a specific virtual private network according to the virtual network segment, a better synergy effect of multiple virtual private networks is achieved.

Description

Technical Field

[0001] The present invention relates to the technical field of computer networks, and in particular to a remote network access system and a communication method. Background Art

[0002] Remote access is part of the integrated "Routing and Remote Access" service, which is used to provide remote networks for remote office workers, out-of-town workers, and system administrators who monitor and manage servers in multiple departments. In order to achieve better remote access security, the existing technology usually combines virtual private network technology to establish a private network on the public network for encrypted communication.

[0003] In the prior art, there are remote access systems built based on virtual private network technology. For example, a company sets up a VPN server in the company's intranet to achieve remote collaborative development. After connecting to the Internet locally, non-local employees connect to the VPN server through the Internet, and then enter the company's intranet through the VPN server to access and upload relevant development data, and use remote computing resources.

[0004] However, in the actual implementation process, the inventors found that the above technical solution can usually only be used to achieve point-to-point access in the same virtual private network, that is, a computer can only access data files in a specific local area network through a virtual private network. When an enterprise needs to achieve multi-site collaboration, for example, site A needs to access sites B and C at the same time, and sites B and C are not in the same virtual private network, the above solution cannot meet the needs of users. Summary of the invention

[0005] In view of the above problems existing in the prior art, a remote network access system and a communication method are now provided.

[0006] The specific technical solutions are as follows:

[0007] A remote network access system, comprising:

[0008] A plurality of access devices, each of which is connected to at least one external terminal;

[0009] A management platform, the management platform is connected to each of the access devices;

[0010] The management platform allocates at least two of the access devices to the same virtual network segment to construct a virtual private network through the virtual network segment;

[0011] The external terminal accesses the virtual private network through the virtual network segment on the access device to carry out the communication process.

[0012] Preferably, the access device comprises:

[0013] A device access module, wherein the device access module establishes a communication connection with the external terminal through a wired connection and / or a wireless connection, and determines the virtual network segment associated with the external terminal according to a communication connection mode between the external terminal and the device access module;

[0014] An address allocation module, wherein the address allocation module allocates an IP address to the external terminal according to the virtual network segment;

[0015] An encryption communication module is connected to each of the access devices in the same virtual network segment to establish an encryption tunnel for communication between each pair of access devices.

[0016] Preferably, the management platform includes:

[0017] A device management module, the device management module is connected to each of the access devices respectively and performs management operations on the access devices;

[0018] The management operation includes at least one of device registration, device deregistration, and system upgrade;

[0019] A policy group module is connected to each of the access devices respectively, and the policy group module selects at least two of the access devices to allocate the access devices to the same virtual network segment.

[0020] A remote network communication method, applicable to the above remote network access system, comprising:

[0021] Step S1: Connecting the external terminal to the local access device;

[0022] Step S2: determining the virtual network segment accessed by the external terminal, so that the external terminal can access the virtual private network where the virtual network segment is located;

[0023] Step S3: Acquire the data packet sent by the external terminal, and determine whether to forward the data packet to the remote access device.

[0024] Preferably, step S2 comprises:

[0025] Step S21: determining the virtual network segment where the external terminal is located according to the access mode of the external terminal;

[0026] Step S22: Allocate an IP address to the external terminal in the virtual network segment, so that the external terminal can access the virtual private network where the virtual network segment is located.

[0027] Preferably, before step S1, the access device generates a plurality of wireless sub-networks, each of which has a different network identifier;

[0028] Then the step S21 includes:

[0029] Step S211: Acquire the access method of the external terminal;

[0030] When the access mode is a wired connection, go to step S212;

[0031] When the access mode is wireless connection, go to step S213;

[0032] Step S212: obtaining the access port of the external terminal, and determining the virtual network segment to which the external terminal is to be connected according to the access port;

[0033] Step S213: Acquire the wireless sub-network to which the external terminal is connected, and determine the virtual network segment to which the external terminal is to be connected according to the wireless sub-network.

[0034] Preferably, the step S22 includes:

[0035] Step S221: obtaining the IP allocator of the virtual network segment, and determining whether the IP allocator is the local access device;

[0036] If yes, using the local access device to allocate an IP address to the external terminal, so that the external terminal can access the virtual private network where the virtual network segment is located;

[0037] If not, go to step S222;

[0038] Step S222: Initiate an IP allocation request to the access device in the virtual network segment that serves as the IP allocation party;

[0039] Step S223: The remote device allocates an IP address to the external terminal according to the IP allocation request.

[0040] Preferably, the external terminal is also connected to a local area network via the access device;

[0041] Then the step S3 comprises:

[0042] Step S31: obtaining the data packet sent by the external terminal, and obtaining a target address from the data packet;

[0043] Step S32: determining whether the target network segment pointed to by the target address is in the network segment of the local area network;

[0044] If so, forwarding the data packet to the local area network;

[0045] If not, go to step S33;

[0046] Step S33: searching each of the virtual network segments in turn according to the target network segment to obtain a virtual network segment corresponding to the target network segment;

[0047] Step S34: forwarding the data packet to the access device associated with the target address through the virtual network segment obtained by searching, so as to forward the data packet to the target address through the access device.

[0048] Preferably, in step S33, when the bound virtual network segment is not found on the current access device, step S33 further includes a cross-segment communication process, and the cross-segment communication process includes:

[0049] Step A1: Acquire all the established virtual network segments from the management platform, and determine whether the target network segment exists;

[0050] If yes, go to step A2;

[0051] If not, it indicates that the target address does not exist and an error prompt is returned;

[0052] Step A2: obtaining the external terminal and determining whether the external terminal has permission to access the target network segment;

[0053] If yes, go to step A3;

[0054] If not, return the error message;

[0055] Step A3: Establishing encrypted tunnels for the access device to which the external terminal is connected and the access device where the target network segment is located, respectively, so that the access device forwards the data packet to the target address through the encrypted tunnel.

[0056] The above technical solution has the following advantages or beneficial effects: by setting an access device as a port for an external terminal to access a virtual private network, and configuring several virtual network segments on the access device, so that the external terminal can access data files in a specific virtual private network according to the virtual network segments, a better synergy effect of multiple virtual private networks is achieved. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] The embodiments of the present invention will be described more fully with reference to the attached drawings, which are provided for illustration and description only and are not intended to limit the scope of the present invention.

[0058] Figure 1 It is an overall schematic diagram of an embodiment of the present invention;

[0059] Figure 2 A schematic diagram of an access device in an embodiment of the present invention;

[0060] Figure 3 This is a schematic diagram of a management platform in an embodiment of the present invention;

[0061] Figure 4 A schematic diagram of a communication method in an embodiment of the present invention;

[0062] Figure 5 This is a schematic diagram of sub-steps of step S2 in an embodiment of the present invention;

[0063] Figure 6 This is a schematic diagram of sub-steps of step S21 in an embodiment of the present invention;

[0064] Figure 7 This is a schematic diagram of sub-steps of step S22 in an embodiment of the present invention;

[0065] Figure 8 This is a schematic diagram of sub-steps of step S3 in an embodiment of the present invention;

[0066] Fig. 9 Schematic diagram of the cross-segment communication process in an embodiment of the present invention. DETAILED DESCRIPTION

[0067] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0068] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments may be combined with each other.

[0069] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, but they are not intended to limit the present invention.

[0070] The present invention comprises:

[0071] A remote network access system, comprising:

[0072] A plurality of access devices 1A, 1B, 1C, wherein the access devices 1A, 1B, 1C are respectively connected to at least one external terminal 2;

[0073] A management platform 3, the management platform 3 is connected to each access device 1A, 1B, 1C;

[0074] The management platform 3 allocates at least two access devices 1A or 1B or 1C to the same virtual network segment, so as to construct a virtual private network through the virtual network segment;

[0075] The external terminal 2 accesses the virtual private network through the virtual network segment on the access device 1A, 1B or 1C to perform the communication process.

[0076] Specifically, in view of the problem that the virtual private network technology in the prior art can only support a single computing device to access a specific network and cannot realize the collaborative work of multiple virtual private networks, in this embodiment, by setting the access devices 1A, 1B, 1C as the access ports of the external terminal 2, at least two access devices 1A or 1B or 1C are assigned to the same virtual network segment through the management platform 3. The virtual network segment itself is used to mark different virtual private networks. All devices in the same virtual private network have IP addresses of the same network segment, so that all external terminals 2 and other devices in the same virtual private network can communicate and interact in the form of local area network communication, thereby achieving a better remote access effect. During the implementation process, the above remote access system can be used for external terminals 2 to access data files in the virtual private network, communicate and interact with computer devices in the virtual private network, and other operations, which are not limited here.

[0077] During implementation, the above remote network access system can be embodied as several hardware devices with specific computer programs. For example, access devices 1A, 1B, 1C can be embodied as VPN access devices, wireless access points (APs), routers, gateway devices, soft routers, etc., which are connected to at least one external terminal 2 in a corresponding manner. External terminal 2 can be embodied as a computer device with Internet access capability, including general computer devices, Internet of Things devices, mobile terminals, etc. Multiple external terminals 2 can be in the same local area network. For example, taking the perspective of an access device 1A or 1B or 1C as an example, in this perspective, the access device 1A or 1B or 1C is set in the same local area network 4, and each device, including the access device 1A or 1B or 1C and the external terminal 2, each has an IP address in the local area network, and can communicate and exchange in the local area network. At the same time, when the external terminal 2 needs to access a remote virtual private network, it can access the virtual network segment through the access device 1A or 1B or 1C to perform a remote communication access process. It should be noted that the virtual network segment and the local area network can be set as the same network in some embodiments. For example, in one embodiment, the virtual network segment is used for the remote external terminal 2 to access the local LAN 4, and the access device 1A or 1B or 1C is used as a routing device. At this time, the local LAN 4 and the virtual network segment are allocated as the same network segment on the access device 1A or 1B or 1C. The external terminal 2 can directly communicate and interact through the virtual network segment to reduce the time of IP address mapping.

[0078] In a preferred embodiment, Figure 2 As shown, the access device 1A includes:

[0079] The device access module 11 establishes a communication connection with the external terminal 2 via a wired connection and / or a wireless connection;

[0080] The virtual network segment is associated with the connection mode between the external terminal and the device access module;

[0081] An address allocation module 12, the address allocation module 12 allocates an IP address to the external terminal 2 according to the virtual network segment;

[0082] The encryption communication module 13 is connected to each access device 1B in the same virtual network segment to establish an encryption tunnel for communication between each pair of access devices 1A and 1B.

[0083] Specifically, in response to the problem that the virtual private network technology in the prior art can only support a single computing device to access a specific network and cannot realize the collaborative work of multiple virtual private networks, in this embodiment, a device access module 11 is set to connect to the external terminal 2, and the virtual network segment that the external terminal 2 needs to access is determined by detecting the connection method of the external terminal 2, so as to achieve a better access effect.

[0084] During the implementation process, according to the different types of actual access devices 1A, the device access module 11 has different access methods. For example, the wired connection includes at least one of a serial bus connection, a network cable connection, and a USB connection, and the wireless connection includes at least one of 2.4G WiFi, 5G WiFi, and 6G WiFi, which enables the external terminal 2 to access by releasing the corresponding network identifier (SSID). In one embodiment, different network identifiers can be used to mark the virtual network segment accessed by the external terminal 2, and at this time, the sub-wireless network corresponding to each network identifier is in a different virtual network segment. Each pair of access devices 1A, 1B, and 1C communicates in an encrypted tunnel. During the communication process, the access device 1A or 1B or 1C can also determine the address pointed to by the data packet sent by the external terminal 2, and then determine whether the current data packet needs to be sent to the remote access device 1A or 1B or 1C through a virtual private network, or is only routed and forwarded locally.

[0085] In a preferred embodiment, Figure 3 As shown, the management platform 3 includes:

[0086] A device management module 31, which is connected to each access device 1A or 1B or 1C and performs management operations on the access device;

[0087] The management operation includes at least one of device registration, device deregistration, and system upgrade;

[0088] The policy group module 32 is connected to each access device 1A or 1B or 1C respectively, and the policy group module 32 selects at least two access devices 1A, 1B, 1C to allocate the access devices 1A, 1B, 1C to the same virtual network segment.

[0089] Specifically, in order to construct a specific virtual network segment in the access devices 1A, 1B, and 1C, in this embodiment, the management of each access device 1A, 1B, and 1C, such as registration, upgrade, and deregistration, is implemented by setting up a device management module 31, and the virtual network segments between the access devices 1A, 1B, and 1C are configured through the policy group module 32, thereby forming a virtual private network that can be used for communication interaction between at least two access devices 1A, 1B, and 1C.

[0090] During the implementation process, in order to achieve better communication effects, the management platform 3 is connected to each access device 1A, 1B, 1C through the MQTT queue to distribute configuration policies to the access devices 1A, 1B, 1C. At the same time, the management platform 3 also collects the current access devices and network connection status of the access devices 1A, 1B, 1C to realize the management process of the overall remote network access system. For example, by collecting information on each virtual network segment in the access devices 1A, 1B, 1C, the management platform 3 can obtain other device information connected to the access devices 1A, 1B, 1C in real time, such as MAC, IP address, network connection, network duration, traffic usage, etc., and further manage the network in combination with the collected information, such as configuring user permissions and counting traffic.

[0091] A remote network communication method is applicable to the above remote network access system, such as Figure 4 As shown, including:

[0092] Step S1: Connecting the external terminal to the local access device;

[0093] Step S2: determining the virtual network segment accessed by the external terminal, so that the external terminal can access the virtual private network where the virtual network segment is located;

[0094] Step S3: Obtain the data packet sent by the external terminal and determine whether to forward the data packet to the remote access device.

[0095] Specifically, in response to the problem that the virtual private network technology in the prior art can only support a single computing device to access a specific network and cannot realize the collaborative work of multiple virtual private networks, in this embodiment, an external terminal is connected through an access device, so that the external terminal is connected to a specific virtual private network via the access device, thereby achieving better remote access effect.

[0096] Furthermore, by setting up multiple virtual network segments on the access device, external terminals can access at least one virtual network segment as needed, so that the external terminals can access the corresponding virtual private network, thereby achieving better remote collaboration effects.

[0097] In a preferred embodiment, Figure 5 As shown, step S2 includes:

[0098] Step S21: determining the virtual private network to be accessed by the external terminal according to the access mode of the external terminal;

[0099] Step S22: Allocate an IP address to the external terminal according to the virtual network segment of the virtual private network, so that the external terminal can access the virtual private network.

[0100] Specifically, with regard to the problem that the virtual private network technology in the prior art can only support a single computing device to access a specific network and cannot realize the collaborative work of multiple virtual private networks, in this embodiment, the virtual private network that the user wishes to access is determined by obtaining the access method of the external terminal to the access device, and the IP address is allocated to the external terminal according to the virtual network segment of the virtual private network, thereby realizing the access process.

[0101] In a preferred embodiment, before step S1, the access device generates a plurality of wireless sub-networks, each of which has a different network identifier;

[0102] Then step S21 includes:

[0103] Step S211: obtaining the access mode of the external terminal and determining whether the access mode is a wired connection;

[0104] If yes, go to step S212;

[0105] If not, go to step S213;

[0106] Step S212: obtaining the access port of the external terminal, and determining the virtual network segment to which the external terminal is to be connected according to the access port;

[0107] Step S213: Acquire the wireless sub-network to which the external terminal is connected, and determine the virtual network segment to which the external terminal is to be connected according to the wireless sub-network.

[0108] Specifically, in view of the problem that the virtual private network technology in the prior art can only support a single computing device to access a specific network and cannot realize the collaborative work of multiple virtual private networks, in this embodiment, the virtual private network that the user needs to access is determined according to the access method adopted on the access device. For example, in one embodiment, the user connects the external terminal to the access device through a wireless access method. In this embodiment, the access device pre-generates multiple wireless sub-networks, each of which has a different network identifier (SSID), such as "virtual private network A", "virtual private network B", etc. The user can select the wireless sub-network to connect according to the network resources to be accessed or the device to be communicated and interacted, so that the external terminal can access the corresponding virtual private network. Similarly, in another embodiment, the access device has several wired connection ports, each of which is pre-allocated with a corresponding virtual private network and an allocable virtual network segment. The user can adjust the access port of the wired connection to allow the external terminal to access different virtual private networks.

[0109] As an optional implementation, the access device is also connected to a local area network. When the access device is connected to the local area network, the external terminal can also access the local area network through a specific port. Alternatively, the access device builds a local area network between multiple external terminals connected to the access device. At this time, the access device is used as a local router, and IP addresses of the same network segment are allocated to multiple external terminals, so that multiple external terminals can communicate in the local area network.

[0110] In the above process, multiple external terminals can also be assigned to the same virtual private network. At this time, it is necessary to obtain a DHCP server in the virtual private network, which is an independent routing device, DHCP server or access device for assigning an IP address to each external terminal.

[0111] In a preferred embodiment, step S22 includes:

[0112] Step S221: Obtain the IP allocator of the virtual network segment and determine whether the IP allocator is a local access device;

[0113] If so, use a local access device to assign an IP address to the external terminal so that the external terminal can access the virtual private network where the virtual network segment is located;

[0114] If not, go to step S222;

[0115] Step S222: Initiate an IP allocation request to the access device that is the IP allocation party in the virtual network segment;

[0116] Step S223: The remote device allocates an IP address to the external terminal according to the IP allocation request.

[0117] Specifically, in order to achieve better management of all devices in the same virtual private network, in this embodiment, while constructing a virtual network segment, a certain access device in the virtual network segment is designated as the carrier of the DHCP service. The access device serves as the IP address allocator in the virtual private network, and allocates IP addresses in the virtual network segment to local or remote external terminals through the DHCP service, so that the external terminals can access the virtual private network.

[0118] In a preferred embodiment, the external terminal is also connected to the local area network via an access device;

[0119] Then step S3 includes:

[0120] Step S31: Obtain a data packet sent by an external terminal, and obtain a target address from the data packet;

[0121] Step S32: determining whether the target network segment pointed to by the target address is in the network segment of the local area network;

[0122] If so, forward the data packet to the local LAN;

[0123] If not, go to step S33;

[0124] Step S33: searching each virtual network segment in turn according to the target network segment to obtain a virtual network segment corresponding to the target network segment;

[0125] Step S34: forwarding the data packet to the access device associated with the target address through the virtual network segment obtained by searching, so as to forward the data packet to the target address through the access device.

[0126] In a preferred embodiment, in step S33, when no bound virtual network segment is found on the current access device, step S33 further includes a cross-segment communication process, and the cross-segment communication process includes:

[0127] Step A1: Obtain all established virtual network segments from the management platform and determine whether the target network segment exists;

[0128] If yes, go to step A2;

[0129] If not, it indicates that the target address does not exist and an error message is returned;

[0130] Step A2: determining whether the access device connected to the external terminal can connect to the target network segment according to a routing table;

[0131] If yes, go to step A3;

[0132] If not, return an error message;

[0133] Step A3: Encrypted tunnels are established for the access device connected to the external terminal and the access device where the target network segment is located, respectively, so that the access device forwards the data packet to the target address through the encrypted tunnel.

[0134] Specifically, in view of the problem that the virtual private network technology in the prior art can only support a single computing device to access a specific network and cannot realize the collaborative work of multiple virtual private networks, in this embodiment, a routing table is maintained in the management platform, and different access devices can access across network segments through the routing table. At this time, the access device is used to route and redirect the data packets on both sides of the encrypted tunnel respectively to realize the cross-segment communication process.

[0135] The beneficial effect of the present invention is that by setting an access device as a port for an external terminal to access a virtual private network, and configuring several virtual network segments on the access device, so that the external terminal can access data files in a specific virtual private network according to the virtual network segments, a better synergy effect of multiple virtual private networks is achieved.

[0136] The above are only preferred embodiments of the present invention, and are not intended to limit the implementation methods and protection scope of the present invention. Those skilled in the art should be aware that all solutions obtained by equivalent substitutions and obvious changes made using the description and illustrations of the present invention should be included in the protection scope of the present invention.

Claims

1. A remote network communication method, characterized in that: Applicable to a remote network access system, the remote network access system comprising: A plurality of access devices, each of which is connected to at least one external terminal; A management platform, the management platform is connected to each of the access devices; The management platform allocates at least two of the access devices to the same virtual network segment to construct a virtual private network through the virtual network segment; The external terminal accesses the virtual private network through the virtual network segment on the access device to perform a communication process; The communication method comprises: Step S1: Connecting the external terminal to the local access device; Step S2: determining the virtual network segment accessed by the external terminal, so that the external terminal can access the virtual private network where the virtual network segment is located; Step S3: obtaining the data packet sent by the external terminal, and determining whether to forward the data packet to the remote access device; The step S2 comprises: Step S21: determining the virtual private network to be accessed by the external terminal according to the access mode of the external terminal; Step S22: allocating an IP address to the external terminal according to the virtual network segment of the virtual private network, so that the external terminal can access the virtual private network; The step S22 comprises: Step S221: obtaining the IP allocator of the virtual network segment, and determining whether the IP allocator is the local access device; If yes, using the local access device to allocate an IP address to the external terminal, so that the external terminal can access the virtual private network where the virtual network segment is located; If not, go to step S222; Step S222: Initiate an IP allocation request to the access device in the virtual network segment that serves as the IP allocation party; Step S223: The remote device allocates an IP address to the external terminal according to the IP allocation request.

2. The communication method according to claim 1, characterized in that: Before step S1, the access device generates a plurality of wireless sub-networks, each of which has a different network identifier; Then the step S21 includes: Step S211: Acquire the access method of the external terminal; When the access mode is a wired connection, go to step S212; When the access mode is wireless connection, go to step S213; Step S212: obtaining the access port of the external terminal, and determining the virtual network segment to which the external terminal is to be connected according to the access port; Step S213: Acquire the wireless sub-network to which the external terminal is connected, and determine the virtual network segment to which the external terminal is to be connected according to the wireless sub-network.

3. The communication method according to claim 1, characterized in that: The external terminal is also connected to the local area network through the access device; Then the step S3 comprises: Step S31: obtaining the data packet sent by the external terminal, and obtaining a target address from the data packet; Step S32: determining whether the target network segment pointed to by the target address is in the network segment of the local area network; If so, forwarding the data packet to the local area network; If not, go to step S33; Step S33: searching each of the virtual network segments in turn according to the target network segment to obtain a virtual network segment corresponding to the target network segment; Step S34: forwarding the data packet to the access device associated with the target address through the virtual network segment obtained by searching, so as to forward the data packet to the target address through the access device.

4. The communication method according to claim 3, characterized in that: In the step S33, when the bound virtual network segment is not found on the current access device, the step S33 further includes a cross-segment communication process, and the cross-segment communication process includes: Step A1: Acquire all the established virtual network segments from the management platform, and determine whether the target network segment exists; If yes, go to step A2; If not, it indicates that the target address does not exist and an error prompt is returned; Step A2: determining whether the access device connected to the external terminal can be connected to the target network segment according to a routing table; If yes, go to step A3; If not, return the error message; Step A3: Establishing encrypted tunnels for the access device to which the external terminal is connected and the access device where the target network segment is located, respectively, so that the access device forwards the data packet to the target address through the encrypted tunnel.

5. The communication method according to claim 1, characterized in that: The access device comprises: A device access module, wherein the device access module establishes a communication connection with the external terminal through a wired connection and / or a wireless connection, and determines the virtual network segment associated with the external terminal according to a communication connection mode between the external terminal and the device access module; An address allocation module, wherein the address allocation module allocates an IP address to the external terminal according to the virtual network segment; An encryption communication module is connected to each of the access devices in the same virtual network segment to establish an encryption tunnel for communication between each pair of access devices.

6. The communication method according to claim 5, characterized in that: The management platform includes: A device management module, the device management module is connected to each of the access devices respectively and performs management operations on the access devices; The management operation includes at least one of device registration, device deregistration, and system upgrade; A policy group module is connected to each of the access devices respectively, and the policy group module selects at least two of the access devices to allocate the access devices to the same virtual network segment.

Images