A flow guiding method and device

Abstract

The present specification provides a traffic steering method and device, which relate to the field of communication technology. A traffic steering method, applied to CPE equipment, includes: receiving configuration information sent by an SDN controller; according to the configuration information, establishing a tunnel between the device and VPNGW, creating an End.X SID, wherein the End.X SID points to the tunnel; according to the SRv6 policy sent by the SDN controller, generating a segment routing list, adding the End.X SID to the head of the segment routing list, so that the SRv6 message passing through the device is guided to the tunnel and forwarded to the VPNGW. Through the above method, the reliability of SRv6 message forwarding by network equipment can be improved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a traffic steering method and device. Background Art

[0002] As people's demand for the network increases, the network scale gradually expands, and the types of services carried on the network are also increasing. In order to achieve more efficient forwarding and simpler maintenance, SR (Segment Routing) technology came into being, especially the application of SRv6 technology, which further improves forwarding efficiency and reduces maintenance difficulty.

[0003] Forwarding based on SRv6 technology may pass through several network devices. When passing through a firewall or an operator's private network, SRv6 messages cannot be transmitted correctly, resulting in the discard of SRv6 messages, reducing the reliability of SRv6 message forwarding by network devices. Therefore, how to apply SRv6 technology for data transmission in a complex networking environment has become a technical problem that needs to be urgently solved by technical personnel in this field. Summary of the invention

[0004] In order to overcome the problems existing in the related art, this specification provides a flow guiding method and device.

[0005] In conjunction with the first aspect of the implementation manner of this specification, the present application provides a traffic steering method, applied to a CPE device, including:

[0006] Receive configuration information sent by the SDN controller;

[0007] According to the configuration information, a tunnel is established between the local device and the VPNGW, and an End.X SID is created, where the End.X SID points to the tunnel.

[0008] According to the SRv6 policy issued by the SDN controller, a segment routing list is generated, and End.X SID is added to the header of the segment routing list so that the SRv6 message passing through this device is guided to the tunnel and forwarded to the VPNGW.

[0009] In conjunction with the second aspect of the implementation manner of this specification, the present application provides a traffic steering method, applied to VPNGW, including:

[0010] Receive configuration information sent by the SDN controller;

[0011] According to the configuration information, a tunnel is established between the local device and the CPE device;

[0012] Receive and record the routing table entries sent by the SDN controller so that the SRv6 packets whose destination address is the network segment to which the CPE device belongs are forwarded to the CPE device through the tunnel.

[0013] In conjunction with the third aspect of the implementation manner of this specification, the present application provides a traffic steering method, which is applied to an SR network including an SDN controller, a CPE device and a VPNGW, including:

[0014] The SDN controller sends tunnel configuration information to the CPE device and VPNGW respectively;

[0015] A tunnel is established between the CPE device and the VPNGW;

[0016] The SDN controller sends segment configuration information to the CPE device, and the CPE device creates an End.X SID based on the segment configuration information, where the End.X SID points to the tunnel.

[0017] The SDN controller sends the SRv6 policy to the CPE device. The CPE device generates a segment routing list based on the SRv6 policy and adds End.X SID to the header of the segment routing list.

[0018] The VPNGW receives and records the routing table entries sent by the SDN controller, where the routing table entries are used to indicate that the SRv6 message carrying the CPE device network segment is forwarded to the CPE device through the tunnel.

[0019] Optionally, the tunnel includes an IPsec tunnel and a GRE tunnel.

[0020] In conjunction with the fourth aspect of the implementation manner of this specification, the present application provides a traffic guiding device, applied to a CPE device, including:

[0021] A receiving unit, used to receive configuration information sent by the SDN controller;

[0022] The tunnel establishing unit is used to establish a tunnel between the device and the VPNGW according to the configuration information, and create an End.XSID, wherein the End.X SID points to the tunnel;

[0023] The processing unit is used to generate a segment routing list according to the segment routing SRv6 policy issued by the SDN controller, and add End.X SID to the head of the segment routing list, so that the SRv6 message passing through the device is guided to the tunnel and forwarded to the VPNGW.

[0024] In conjunction with the fifth aspect of the implementation manner of this specification, the present application provides a traffic guiding device, applied to VPNGW, including:

[0025] A receiving unit, used to receive configuration information sent by the SDN controller;

[0026] A tunnel establishing unit, used to establish a tunnel between the device and the CPE device according to the configuration information;

[0027] The recording unit is used to receive and record the routing table items sent by the SDN controller, so that the SRv6 message with the destination address being the network segment to which the CPE device belongs is forwarded to the CPE device through the tunnel.

[0028] In conjunction with the sixth aspect of the implementation manner of this specification, the present application provides a traffic steering system, including an SDN controller, a CPE device and a VPNGW;

[0029] in,

[0030] The SDN controller sends tunnel configuration information to the CPE device and VPNGW respectively;

[0031] A tunnel is established between the CPE device and the VPNGW;

[0032] The SDN controller sends segment configuration information to the CPE device, and the CPE device creates an End.X SID based on the segment configuration information, where the End.X SID points to the tunnel.

[0033] The SDN controller sends the SRv6 policy to the CPE device. The CPE device generates a segment routing list based on the SRv6 policy and adds End.X SID to the header of the segment routing list.

[0034] The VPNGW receives and records the routing table entries sent by the SDN controller, where the routing table entries are used to indicate that the SRv6 message carrying the CPE device network segment is forwarded to the CPE device through the tunnel.

[0035] Optionally, the tunnel includes an IPsec tunnel and a GRE tunnel.

[0036] In combination with the seventh aspect of the implementation manner of this specification, the present application provides a network device, including a transceiver, a processor and a machine-readable storage medium, the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the processor is prompted by the machine-executable instructions to: implement any of the above method steps.

[0037] In conjunction with the eighth aspect of the implementation manner of this specification, the present application provides a machine-readable storage medium storing machine-executable instructions. When called and executed by a processor, the machine-executable instructions prompt the processor to: implement any of the above method steps.

[0038] The technical solutions provided by the embodiments of this specification may have the following beneficial effects:

[0039] In the implementation manner of the present specification, tunnel configuration information is sent to the CPE device and VPNGW to establish a tunnel between the two, and configuration information for diversion is sent to divert SRv6 messages passing through the CPE device and VPNGW into the tunnel for forwarding, thereby avoiding message discard on the SRv6 message forwarding path due to passing through network devices that cannot support SRv6 technology, thereby improving the reliability of SRv6 message forwarding by network devices.

[0040] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present specification. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the specification and, together with the description, serve to explain the principles of the specification.

[0042] Figure 1 It is a structural diagram of a network system involved in this application;

[0043] Figure 2 It is a flow chart of a traffic steering method involved in the present application, which is applied to CPE equipment;

[0044] Figure 3 It is a flow chart of a traffic steering method involved in the present application, which is applied to VPNGW;

[0045] Figure 4 It is a flow chart of a traffic steering method involved in the present application, which is applied to SR networking including an SDN controller, a CPE device and a VPNGW;

[0046] Figure 5 It is a structural diagram of a network system involved in an implementation mode of the present application;

[0047] Figure 6 It is a structural schematic diagram of a flow guiding device involved in the present application, which is applied to CPE equipment;

[0048] Figure 7 It is a structural diagram of a traffic steering method involved in the present application, which is applied to VPNGW;

[0049] Figure 8 It is a structural diagram of a network device involved in this application. DETAILED DESCRIPTION

[0050] Here, exemplary embodiments are described in detail, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this specification.

[0051] In such Figure 1 The networking environment shown includes several CPE (Customer Premise Equipment) devices, P (Provider) devices, PE (Provider Edge) devices and SDN (Software Defined Network). Among them, several PE devices and P devices form a backbone network, such as a cloud service dedicated network (hereinafter referred to as a cloud dedicated network). The CPE device can be connected to another CPE device, a PE device, other types of network devices (such as firewalls, etc.) and / or hosts respectively. Through the networking formed by these network devices, the hosts on both sides of the cloud dedicated network can communicate with each other. For the sake of ease of description, the hosts and other types of network devices are omitted in the figure, and the dotted line connection indicates that there may be multiple devices during the period. The SRv6 protocol can be enabled on these network devices so that the network devices can forward SRv6 messages. When a CPE device needs to forward SRv6 packets to a PE device through other types of network devices (or from a PE device to a CPE device through other types of devices), such as through network devices such as firewalls, the SRv6 packets may be filtered by the firewall because the SRv6 protocol cannot be enabled on the firewall or is disabled by the user, resulting in the loss of SRv6 packets.

[0052] In order to avoid the loss of SRv6 messages, this application provides a traffic steering method, such as Figure 2 As shown, it is applied to CPE equipment, including:

[0053] S200: Receive configuration information sent by the SDN controller.

[0054] The configuration information is sent by the SDN controller to the CPE device and the CPE device (or virtual routing device) configured as a VPNGW (Virtual Private Network Gateway), including at least tunnel configuration information and segment identifier SID (Segment Identifier) ​​configuration information.

[0055] S201. Establish a tunnel between the local device and the VPNGW according to the configuration information, and create an End.X SID.

[0056] Through the tunnel configuration information, a tunnel can be established between the CPE device and the VPNGW. The tunnel here can be an IPsec (Internet Protocol security) tunnel and a GRE (General Routing Encapsulation) tunnel. Taking the establishment of an IPsec tunnel as an example, the tunnel configuration information may include the adopted security protocol, encryption / authentication algorithm, encapsulation mode, IP (Internet Protocol) address of the peer network device, etc., without limitation.

[0057] Through the SID configuration information, a static SRv6 SID is formed in the CPE device, where the created SID uses the IPv6 address format, the IP address prefix is ​​used as the Locator (location identifier, identifying the network segment to which a SID belongs), and an opcode (execution code) contained in the Locator. In the End.X SID, the execution code corresponds to a specified outbound interface and next hop. The next hop configured by the End.X SID points to the peer network device (i.e., VPNGW) of the established tunnel, and the outbound interface is the tunnel established by the CPE device.

[0058] It should be noted that the Locator may contain multiple opcodes. In order to simplify the description in this application, only one opcode is configured in the Locator, and the opcode corresponds to the function of diverting traffic to the tunnel.

[0059] S202: Generate a segment routing list according to the SRv6 policy issued by the SDN controller, and add End.X SID to the head of the segment routing list, so that the SRv6 message passing through the device is guided to the tunnel and forwarded to the VPNGW.

[0060] After establishing a tunnel and configuring SID on the CPE device, the SDN controller can issue an SRv6 policy. The CPE device generates a segment routing list (Segment List) locally based on the SRv6 policy. In the segment routing list, a forwarding node about End.X SID is added, that is, IP address prefix + opcode. When the segment routing list is obtained based on the SRv6 policy through the IPv6 address carried in the SRv6 message, the added End.X SID is first carried. The opcode contained in the End.X SID searches for the corresponding outbound interface (the established tunnel) and the next hop (VPNGW), thereby realizing the process of directing the SRv6 message to the tunnel to traverse the firewall for forwarding, avoiding the packet loss problem caused by the firewall not supporting SRv6 protocol forwarding.

[0061] Correspondingly, the present application provides a flow guidance method, such as Figure 3 As shown, it is applied to VPNGW and includes:

[0062] S300: Receive configuration information sent by the SDN controller.

[0063] S301. Establish a tunnel between the device and the CPE device according to the configuration information.

[0064] like Figure 1 In the network shown, on a CPE device configured as VPNGW, the SDN controller sends configuration information, which at least includes tunnel configuration information, through which VPNGW establishes a tunnel with another CPE device. Similarly, the tunnel can be an IPsec tunnel and a GRE tunnel.

[0065] S302: Receive and record the routing table entry sent by the SDN controller, so that the SRv6 message with the destination address being the network segment to which the CPE device belongs is forwarded to the CPE device through the tunnel.

[0066] After the tunnel is established, the VPNGW can generate a local routing table entry based on the received routing table entry sent by the SDN controller. In the routing table entry, for a message with a matching item with a CPE device as the destination address, the matched outbound interface points to the tunnel and the next hop points to the opposite network device of the tunnel (i.e., the CPE device).

[0067] When the VPNGW receives an SRv6 message to the CPE device, it can be directed to the tunnel for encapsulation and forwarding by matching the destination address.

[0068] Through the configuration of the two network devices (CPE device and VPNGW) by the above SDN controller, a tunnel is established between the two. Through the encapsulation and forwarding of the tunnel, the network devices that cannot recognize SRv6 messages are passed through, and the reliable forwarding of SRv6 messages is achieved, thereby improving the reliability of SRv6 message forwarding by network devices.

[0069] Correspondingly, the present application provides a flow guidance method, such as Figure 4 As shown in the figure, it is applied to the SR network including SDN controller, CPE equipment and VPNGW, including:

[0070] S400, the SDN controller sends tunnel configuration information to the CPE device and VPNGW respectively.

[0071] In such Figure 5The network shown in the figure includes an SDN controller, four CPE devices, several P devices, and several PE devices. The P devices and PE devices form a cloud private network. Two of the CPE devices are configured as VPNGWs on both sides of the cloud private network, namely VPNGW1 and VPNGW2. The other two CPE devices are CPE device 1 and CPE device 2, where device 1 is connected to VPNGW1 and CPE device 2 is connected to VPNGW2.

[0072] The SDN controller sends tunnel configuration information of the IPsec tunnel to CPE device 1, CPE device 2 and VPNGW1, VPNGW2 respectively based on the configuration.

[0073] S401. A tunnel is established between a CPE device and a VPNGW.

[0074] After the CPE device and the VPNGW receive the tunnel configuration information sent by the SDN controller, a tunnel 1 is established between the CPE device 1 and the VPNGW1, and a tunnel 2 is established between the CPE device 2 and the VPNGW2.

[0075] S402. The SDN controller sends segment configuration information to the CPE device, and the CPE device creates End.XSID according to the segment configuration information.

[0076] After that, the SDN controller sends SID configuration information to CPE device 1 and CPE device 2 respectively, and forms End.X SID1 in CPE device 1, with the locator being locator a1 ipv6-prefix 101:2::96static 8 and opcode1 being end-x interfaceTunnel1 nexthop 12::2, which indicates that it matches the IPv6 address with the IP address prefix of 101:2:: / 96 network segment. If the opcode is set to 1, it points to tunnel 1, and the next hop is 12::2. The locator formed in CPE device 2 is End.X SID2 with locator b1 ipv6-prefix 201:2::96static 8 and opcode 1end-x interface Tunnel2nexthop 14::2, which indicates that it matches the IPv6 address with the IP address prefix of 201:2:: / 96 network segment. If the opcode is set to 1, it points to tunnel 2 and the next hop is 14::2.

[0077] That is, by creating the End-X SID, the SRv6 message is directed to the tunnel and forwarded to VPNGW1 or VPNGW2.

[0078] S403. The SDN controller sends the SRv6 policy to the CPE device. The CPE device generates a segment routing list according to the SRv6 policy and adds End.X SID to the head of the segment routing list.

[0079] After establishing an IPsec tunnel on the CPE device and configuring the End.X SID to point to the IPsec tunnel, the SDN controller sends SRv6 policies to CPE device 1 and CPE device 2 respectively, and the CPE device generates a segment routing list locally based on the SRv6 policy. In the segment routing list of CPE device 1, a forwarding node for End.XSID1 is added. CPE device 1 performs a table lookup of the SRv6 protocol based on the SRv6 policy, and encapsulates the SRv6 message according to the obtained segment routing list, in which the corresponding End.X SID1 is first carried, such as 101:2::1. In the segment routing list of CPE device 2, a forwarding node for End.X SID2 is added. CPE device 2 performs a table lookup of the SRv6 protocol based on the SRv6 policy, and encapsulates the SRv6 message according to the obtained segment routing list.

[0080] In this way, when CPE device 1 and CPE device 2 encapsulate SRv6 messages, tunnel 1 and tunnel 2 are respectively used as the first forwarding nodes, so that the encapsulated SRv6 messages are forwarded to the corresponding VPNGW1 and VPNGW2 through the encapsulation of IPsec tunnel 1 and IPsec tunnel 2, avoiding the possible message loss caused by passing through the firewall when forwarding from the CPE device to the VPNGW.

[0081] S404. VPNGW receives and records the routing table entry sent by the SDN controller.

[0082] In addition, in order to implement forwarding from VPNGW1 to CPE device 1 and from VPNGW2 to CPE device 2, the SDN controller sends routing table entries to VPNGW1 and VPNGW2, and VPNGW1 and VPNGW2 record them respectively.

[0083] In the routing table entry recorded by VPNGW1, the destination address is the SID of CPE device 1, the outbound interface points to IPsec tunnel 1, and the next hop is the peer address of the IPsec tunnel. In the routing table entry recorded by VPNGW2, the outbound interface points to IPsec tunnel 2, and the next hop is CPE device 2.

[0084] When VPNGW1 and VPNGW2 receive the SRv6 message, they look up the table through the SID carried in it to determine the outbound interface and next hop for forwarding, so that the SRv6 message is guided to IPsec tunnel 1 and IPsec tunnel 2 respectively, and then forwarded to CPE device 1 and CPE device 2 respectively after IPsec tunnel encapsulation.

[0085] That is, the routing table entry can be used to indicate that the SRv6 message carrying the CPE device network segment (Locator) is forwarded to the CPE device through the tunnel.

[0086] Optionally, in addition to the IPsec tunnel described above, the tunnel may also include a GRE tunnel.

[0087] Correspondingly, the present application provides a flow guiding device, such as Figure 6 As shown, it is applied to CPE equipment, including:

[0088] A receiving unit, used to receive configuration information sent by the SDN controller;

[0089] The tunnel establishing unit is used to establish a tunnel between the device and the VPNGW according to the configuration information, and create an End.XSID, wherein the End.X SID points to the tunnel;

[0090] The processing unit is used to generate a segment routing list according to the segment routing SRv6 policy issued by the SDN controller, and add End.X SID to the head of the segment routing list, so that the SRv6 message passing through the device is guided to the tunnel and forwarded to the VPNGW.

[0091] Correspondingly, the present application provides a flow guiding device, such as Figure 7 As shown, it is applied to VPNGW and includes:

[0092] A receiving unit, used to receive configuration information sent by the SDN controller;

[0093] A tunnel establishing unit, used to establish a tunnel between the device and the CPE device according to the configuration information;

[0094] The recording unit is used to receive and record the routing table items sent by the SDN controller, so that the SRv6 message with the destination address being the network segment to which the CPE device belongs is forwarded to the CPE device through the tunnel.

[0095] Correspondingly, the present application provides a flow guidance system, such as Figure 5 As shown, it includes SDN controller, CPE equipment and VPNGW;

[0096] in,

[0097] The SDN controller sends tunnel configuration information to the CPE device and VPNGW respectively;

[0098] A tunnel is established between the CPE device and the VPNGW;

[0099] The SDN controller sends segment configuration information to the CPE device, and the CPE device creates End.X SID based on the segment configuration information, where End.X SID points to the tunnel;

[0100] The SDN controller sends the SRv6 policy to the CPE device. The CPE device generates a segment routing list based on the SRv6 policy and adds End.X SID to the header of the segment routing list.

[0101] The VPNGW receives and records the routing table entries sent by the SDN controller, where the routing table entries are used to indicate that the SRv6 message carrying the CPE device network segment is forwarded to the CPE device through the tunnel.

[0102] Optionally, the tunnel includes an IPsec tunnel and a GRE tunnel.

[0103] Correspondingly, the present application provides a network device, such as Figure 8 As shown, it includes a transceiver, a processor and a machine-readable storage medium, the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the processor is prompted by the machine-executable instructions to implement any of the above method steps.

[0104] Correspondingly, the present application provides a machine-readable storage medium storing machine-executable instructions. When called and executed by a processor, the machine-executable instructions prompt the processor to implement any of the above method steps.

[0105] The technical solutions provided by the embodiments of this specification may have the following beneficial effects:

[0106] In the implementation manner of the present specification, tunnel configuration information is sent to the CPE device and VPNGW to establish a tunnel between the two, and configuration information for diversion is sent to divert SRv6 messages passing through the CPE device and VPNGW into the tunnel for forwarding, thereby avoiding message discard on the SRv6 message forwarding path due to passing through network devices that cannot support SRv6 technology, thereby improving the reliability of SRv6 message forwarding by network devices.

[0107] It should be understood that the present description is not limited to the exact construction that has been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof.

[0108] The above description is only a preferred implementation of this specification and is not intended to limit this specification. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of this specification should be included in the scope of protection of this specification.

Claims

1. A flow guiding method, characterized in that: Applied to customer edge CPE equipment, including: Receive configuration information sent by the software defined network SDN controller; According to the configuration information, a tunnel is established between the device and the virtual private network gateway VPNGW, and an End-X segment identifier SID is created, wherein the End-X SID points to the tunnel; According to the segment routing SRv6 policy issued by the SDN controller, a segment routing list is generated, and the End-X SID is added to the head of the segment routing list, so that the SRv6 message passing through the local device is guided to the tunnel and forwarded to the VPNGW.

2. A flow guiding method, characterized in that: Applicable to virtual private network gateway VPNGW, including: Receive configuration information sent by the SDN controller; Establishing a tunnel between the device and the CPE device according to the configuration information; Receive and record the routing table entry sent by the SDN controller, so that the SRv6 message with the destination address being the network segment to which the CPE device belongs is forwarded to the CPE device through the tunnel.

3. A flow guidance method, characterized in that: Applicable to SR networking including SDN controller, CPE equipment and VPNGW, including: The SDN controller sends tunnel configuration information to the CPE device and VPNGW respectively; A tunnel is established between the CPE device and the VPNGW; The SDN controller sends segment configuration information to the CPE device, and the CPE device creates an End-X SID according to the segment configuration information, wherein the End-X SID points to the tunnel; The SDN controller sends an SRv6 policy to the CPE device, and the CPE device generates a segment routing list according to the SRv6 policy, and adds the End-X SID to the head of the segment routing list, so that the SRv6 message passing through the device is guided to the tunnel and forwarded to the VPNGW; The VPNGW receives and records the routing table entry sent by the SDN controller, wherein the routing table entry is used to indicate that the SRv6 message carrying the network segment to which the CPE device belongs is forwarded to the CPE device through the tunnel.

4. The method according to claim 3, characterized in that The tunnels include an Internet Security Protocol IPsec tunnel and a Generic Routing Encapsulation Protocol GRE tunnel.

5. A flow guiding device, characterized in that: Applied to CPE equipment, including: A receiving unit, used to receive configuration information sent by the SDN controller; A tunnel establishing unit, configured to establish a tunnel between the device and the VPNGW according to the configuration information, and create an End.XSID, wherein the End.X SID points to the tunnel; The processing unit is used to generate a segment routing list according to the segment routing SRv6 policy issued by the SDN controller, and add the End.X SID to the head of the segment routing list, so that the SRv6 message passing through the device is guided to the tunnel and forwarded to the VPNGW.

6. A flow guiding device, characterized in that: Applied to VPNGW, including: A receiving unit, used to receive configuration information sent by the SDN controller; A tunnel establishing unit, configured to establish a tunnel between the device and the CPE device according to the configuration information; The recording unit is used to receive and record the routing table items sent by the SDN controller, so that the SRv6 message with the destination address being the network segment to which the CPE device belongs is forwarded to the CPE device through the tunnel.

7. A flow guidance system, characterized in that: Includes SDN controller, CPE equipment and VPNGW; in, The SDN controller sends tunnel configuration information to the CPE device and VPNGW respectively; A tunnel is established between the CPE device and the VPNGW; The SDN controller sends segment configuration information to the CPE device, and the CPE device creates an End.X SID according to the segment configuration information, wherein the End.X SID points to the tunnel; The SDN controller sends an SRv6 policy to the CPE device, and the CPE device generates a segment routing list according to the SRv6 policy, and adds the End.X SID to the head of the segment routing list, so that the SRv6 message passing through the device is guided to the tunnel and forwarded to the VPNGW; The VPNGW receives and records the routing table entry sent by the SDN controller, wherein the routing table entry is used to indicate that the SRv6 message carrying the network segment to which the CPE device belongs is forwarded to the CPE device through the tunnel.

8. The system according to claim 7, characterized in that The tunnels include an IPsec tunnel and a GRE tunnel.

9. A network device, characterized in that: The invention comprises a transceiver, a processor and a machine-readable storage medium, wherein the machine-readable storage medium stores machine-executable instructions that can be executed by the processor, and the processor is prompted by the machine-executable instructions to implement the method steps described in any one of claims 1 or 2.

10. A machine-readable storage medium, characterized in that: Machine executable instructions are stored, and when called and executed by a processor, the machine executable instructions prompt the processor to: implement the method steps described in any one of claims 1 or 2.

Images