Device networking method, apparatus, medium, and device
By automatically allocating network IP address ranges through the SD-WAN controller, the problem of cumbersome and error-prone CPE device configuration process is solved, and efficient and accurate device networking is achieved.
Patent Information
- Application Number
- CN202111604701.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-12-24
- Publication Date
- 2025-12-09
- Estimated Expiration
- 2041-12-24
AI Technical Summary
The configuration process for CPE devices before connecting to an SD-WAN network is cumbersome, inefficient, and prone to errors.
The SD-WAN controller responds to user terminal device online requests, obtains their identification information, and automatically assigns network IP address ranges, ensuring that different user terminal devices are assigned to different network IP address ranges, thus simplifying the configuration process.
It improves the configuration efficiency of CPE devices, reduces the possibility of configuration errors, and ensures that the network addresses of multiple terminal devices of the same tenant do not conflict.
Smart Images

Figure CN116347487B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present document relates to the technical field of SD-WAN, and particularly relates to a device networking method and device, a medium and a device. BACKGROUND
[0002] SD-WAN (Software-Defined WAN) is a WAN solution that can be quickly deployed, low-cost and high-flexibility, and is being used by more and more tenants. Generally, a tenant connects to an SD-WAN network through a CPE device and uses services provided by the SD-WAN network. In the current technical solution, before connecting to the SD-WAN network through the CPE device, the CPE device needs to be configured in multiple ways to realize the online and networking of the CPE device. However, due to the cumbersome configuration process of the CPE device, the configuration efficiency is low and configuration errors are prone to occur. Therefore, how to improve the configuration efficiency of the CPE device and reduce the occurrence of configuration errors has become a technical problem to be solved. SUMMARY
[0003] To overcome the problems in the related art, the present document provides a device networking method, device, medium and device.
[0004] According to a first aspect of the embodiments of the present application, a device networking method is provided, applied to a controller, comprising:
[0005] In response to an online request of a target user terminal device, obtaining identification information corresponding to the target user terminal device;
[0006] Based on the identification information, allocating a networking IP address segment to the target user terminal device, so that the target user terminal device performs networking based on the networking IP address segment.
[0007] Based on the foregoing scheme, in some embodiments of the present application, based on the identification information, allocating a networking IP address segment to the target user terminal device comprises:
[0008] Based on the identification information, determining account information of a tenant corresponding to the identification information;
[0009] Based on an address pool corresponding to the account information, allocating a networking IP address segment to the target user terminal device.
[0010] Based on the foregoing scheme, in some embodiments of the present application, based on the address pool corresponding to the account information, allocating a networking IP address segment to the target user terminal device comprises:
[0011] According to the online sequence of the target user terminal device, IP address segments in an address pool corresponding to the account information are sequentially allocated to the target user terminal device as network IP address segments.
[0012] Based on the foregoing scheme, in some embodiments of the present application, after the network IP address segments are allocated to the target user terminal device, the method further includes:
[0013] Broadcasting the network IP address segments to at least one other user terminal device corresponding to the same account information.
[0014] Based on the foregoing scheme, in some embodiments of the present application, before the online request of the target user terminal device is responded to, the method further includes:
[0015] In response to a registration request of a tenant for a target user terminal device, obtaining identification information of the target user terminal device;
[0016] Establishing a corresponding relationship between the identification information and account information of the tenant.
[0017] Based on the foregoing scheme, in some embodiments of the present application, the establishing of the corresponding relationship between the identification information and the account information of the tenant includes:
[0018] Comparing the identification information of the target user terminal device with a pre-stored set of device identification information;
[0019] If the set of device identification information contains device identification information identical to the identification information of the target terminal device, it is determined that the identification information of the target user terminal device is legal, and a corresponding relationship between the identification information of the target user terminal device and the account information of the tenant is established.
[0020] According to another aspect of an embodiment of the present application, a device networking method is provided, applied to a target user terminal device, including:
[0021] Sending an online request to a controller, the online request including identification information of the target user terminal device;
[0022] Receiving network IP address segments from the controller, the network IP address segments being allocated to the target user terminal device by the controller based on the identification information;
[0023] Allocating IP addresses in the network IP address segments to terminals connected with the target user terminal device to complete networking.
[0024] Based on the foregoing scheme, in some embodiments of the present application, before the online request is sent to the controller, the method further includes:
[0025] The target user's terminal device must enable DHCP service;
[0026] Obtain the WAN port address of the target user terminal device from the DHCP service to connect to the network.
[0027] Based on the foregoing scheme, in some embodiments of this application, the step of allocating IP addresses in the network IP address range to terminals connected to the target user terminal equipment includes:
[0028] The IP addresses in the network IP address range are assigned to terminals connected to the target user terminal device, so that the terminals can establish network connections with the user terminal device and with other terminals through the IP addresses.
[0029] According to another aspect of the embodiments of this application, a device networking apparatus is provided, applied to a controller, comprising:
[0030] The online request receiving module is used to respond to the online request of the target user terminal device and obtain the identification information corresponding to the target user terminal device;
[0031] The address allocation module is used to allocate a network IP address range to the target user terminal device based on the identification information, so that the target user terminal device can form a network based on the network IP address range.
[0032] Based on the foregoing solution, in some embodiments of this application, the device networking apparatus further includes:
[0033] The broadcast module is used to broadcast the network IP address range to at least one other user terminal device corresponding to the same account information.
[0034] Based on the foregoing solution, in some embodiments of this application, the device networking apparatus further includes:
[0035] The registration module is used to obtain the identification information of the target user terminal device in response to the tenant's registration request for the target user terminal device.
[0036] Establish a correspondence between the identification information and the tenant's account information.
[0037] According to another aspect of the embodiments of this application, a device networking apparatus is provided, applied to a user terminal device, including:
[0038] The online request sending module sends an online request to the controller, the online request including the identification information of the target user terminal device;
[0039] The networking address obtaining module is configured to receive a networking IP address segment from the controller, wherein the networking IP address segment is allocated to the target user terminal device by the controller based on the identification information.
[0040] The address allocating module is configured to allocate an IP address in the networking IP address segment to a terminal connected with the target user terminal device, so as to complete networking.
[0041] Based on the foregoing scheme, in some embodiments of the present application, the device networking apparatus further comprises:
[0042] The network connecting module is configured to start a DHCP service by the target user terminal device, and obtain a WAN port address of the target user terminal device from the DHCP service, so as to connect to a network.
[0043] According to another aspect of the embodiments of the present application, a computer readable storage medium is provided, which stores a computer program, and the computer program is executed to implement the steps of the device networking method.
[0044] According to another aspect of the embodiments of the present application, a computer device is provided, which comprises a processor, a memory and a computer program stored in the memory, and the processor is executed to implement the steps of the device networking method.
[0045] The present application provides a device networking method, the controller responds to the online request of the target user terminal device, obtains the identification information corresponding to the target user terminal device, and allocates a networking IP address segment to the target user terminal device based on the identification information, so that the target user terminal device performs networking based on the networking IP address segment. Therefore, after receiving the online request of the target user terminal device, the controller allocates a networking IP address segment to the target user terminal device based on the identification information of the target user terminal device to be online, which can ensure that different user terminal devices are allocated to different networking IP address segments, thereby ensuring that the networking addresses of multiple target user terminal devices of the same tenant do not conflict, and simplifying the networking process.
[0046] It should be understood that the foregoing general description and the following detailed description are only exemplary and explanatory, and cannot limit the present application. BRIEF DESCRIPTION OF DRAWINGS
[0047] The accompanying drawings, which form a part of the present application, are used to provide a further understanding of the present application, and the illustrative embodiments thereof and the description thereof serve to explain the present application, and do not limit the present application. In the drawings:
[0048] Figure 1 is a flowchart of a device networking method according to an exemplary embodiment.
[0049] Figure 2 is a flow chart of a device networking method according to an example embodiment.
[0050] Figure 3 is a block diagram of a device networking apparatus according to an example embodiment.
[0051] Figure 4 is a block diagram of a device networking apparatus according to an example embodiment.
[0052] Figure 5 is a block diagram of a device networking apparatus according to an example embodiment.
[0053] Figure 6 is a block diagram of a device networking apparatus according to an example embodiment.
[0054] Figure 7 is a block diagram of a device networking apparatus according to an example embodiment.
[0055] Figure 8 is a block diagram of a computer device according to an example embodiment. DETAILED DESCRIPTION
[0056] In order to make the purposes, technical solutions and advantages of the embodiments herein clearer, the technical solutions in the embodiments herein will be described clearly and completely below with reference to the drawings in the embodiments herein. Obviously, the described embodiments are some but not all of the embodiments herein. Based on the embodiments herein, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the scope of protection of the embodiments herein. It should be explained that the embodiments herein and the features in the embodiments can be combined with each other in any manner without conflict.
[0057] In one implementation, the networking of a tenant using an SD-WAN network can be achieved in the following manner: the tenant rents or purchases user terminal devices, such as CPE devices, configures the network configuration of the CPE devices locally, mails the configured CPE devices to the branch site corresponding to the tenant, and connects the power supply and network by the staff of the branch site to realize the online and networking.
[0058] In another implementation, the tenant configures relevant network parameters in the console and sends them to the mailbox of the staff of the customer branch in the form of an email, the staff of the branch uses a PC device to connect the LAN port of the CPE device, clicks the link in the email to realize the network configuration change and import of the CPE device, and realizes the online and networking.
[0059] No matter which way, the relevant personnel of the tenant need to manually pre-configure the corresponding network parameters. And manually configuring network parameters is easy to cause network address conflict.
[0060] Figure 1 is a flow chart of a device networking method according to an exemplary embodiment. Referring to Figure 1 , the device networking method is applied to a controller, and at least includes steps S11 to S12, which are described in detail as follows:
[0061] Step S11, in response to an online request of a target user terminal device, obtaining identification information corresponding to the target user terminal device.
[0062] The controller can be a network control device of a network provider, and the network provider or the tenant can configure the network through the controller. It should be noted that the controller can be a physical server or a cloud server providing various cloud services, and the present application does not make special limitations.
[0063] The user terminal device can be an electronic device with network relay function, for example, the user terminal device can include but is not limited to one or more of CPE device, router, switch or server. The user terminal device can be in communication connection with the controller to obtain relevant configuration information from the controller and perform networking. For ease of understanding, the controller is taken as an SD-WAN controller and the user terminal device is taken as a CPE device for illustration.
[0064] In an exemplary embodiment of the present application, the tenant purchases or rents CPE devices of an SD-WAN vendor, and each branch (such as a branch office) connects the CPE device to build the SD-WAN network of the tenant. The CPE devices of each branch can be connected to the network in various ways such as static IP, PPPoE (Point-to-Point Protocol over Ethernet), DHCP (Dynamic Host Configuration Protocol), etc. For example, the CPE device obtains WAN port address through the above-mentioned ways and connects to the external network. The tenant can select according to actual situation, and the present application does not make special limitations.
[0065] When the CPE device is connected to the network, it can communicate with the SD-WAN controller. The CPE device can send an online request to the SD-WAN controller, and the online request can be information for requesting to join the SD-WAN network. In an example, the online request can include identification information of the CPE device. The identification information of the CPE device can be various types of information, for example, the identification information can be a MAC address of the CPE device, or hardware information such as a CPU, or other ways to determine, for identifying the uniqueness of the CPE device. It should be noted that the above forms of identification information are only exemplary, and the identification information of the CPE device can be determined by the SD-WAN manufacturer according to actual needs.
[0066] The identification information of the CPE device needs to be pre-registered in the SD-WAN controller. Only the registered CPE device is considered a legitimate device by the SD-WAN controller, and is allowed to connect to the SD-WAN network. For example, the network provider registers the identification information of each CPE device after completing the purchase of the CPE device, and stores it in the corresponding device database. In other words, the CPE device whose identification information exists in the device database is the CPE device purchased by the network provider through a regular channel, and is a legitimate device.
[0067] The SD-WAN manufacturer can provide the registered CPE device to the tenant for use. The tenant can obtain the identification information of the CPE device according to the instructions, nameplates, etc. provided by the SD-WAN manufacturer. The tenant can log in to the SD-WAN controller through its own account information, and register the CPE device through the SD-WAN controller, so that the SD-WAN controller determines whether the CPE device is legitimate according to the pre-stored device database, and determines to which tenant the CPE device belongs. After that, the CPE device can send an online request to the specified SD-WAN controller based on the configuration information, and the online request includes the identification information of the CPE device.
[0068] In step S12, based on the identification information, a networking IP address segment is allocated to the target user terminal device, so that the target user terminal device performs networking based on the networking IP address segment.
[0069] In an example embodiment of the present application, after the CPE device establishes a connection with the SD-WAN controller, the SD-WAN controller allocates a network IP address segment to the CPE device according to the obtained identification information of the CPE device, which can be used as an internal network IP address segment of the CPE device for network configuration of the CPE device. In an example, before allocating the network IP address segment to the CPE device, the SD-WAN controller can confirm whether the identification information of the CPE device exists in the pre-registered device database, and if so, allocate the network IP address segment to the CPE device, so as to ensure the security of the network.
[0070] In an example, after the SD-WAN controller allocates the network IP address segment to the CPE device, the SD-WAN controller can establish a corresponding relationship between the allocated network IP address segment and the identification information of the CPE device and store the same. If a new online request is received, the corresponding relationship between the previous identification information and the network IP address segment can be queried to avoid the same address segment being allocated repeatedly or the same CPE device being allocated repeatedly.
[0071] In an example embodiment of the present application, the LAN port of the CPE device can be used to connect a terminal in the internal network, and the CPE device can allocate an IP address to the terminal connected to the internal network of the CPE device according to the network IP address segment allocated by the SD-WAN controller, which belongs to an address in the network IP address segment, so that the terminal accesses the SD-WAN network using the allocated IP address as its own network address.
[0072] It is easy to understand that the IP address segment of the LAN port of the CPE device is set by the tenant artificially, in order to ensure that the multiple terminal devices of the internal networks composed of different branch organizations of the same tenant can communicate with each other, the CPE devices of each branch organization need to be set to different internal network IP address segments, and need to be connected to the LAN port of the CPE device using a PC device to complete the setting. Therefore, setting the IP address segment of the LAN port of the CPE device needs to be completed by personnel with certain technical ability, and due to human operation, configuration errors are easy to occur, causing internal network IP address conflicts. The device network configuration method provided by the present application only needs the personnel of each branch organization of the tenant to connect the CPE device to the network, the CPE device is automatically connected with the SD-WAN controller, and the SD-WAN controller allocates a network IP address segment to the CPE device, which avoids human setting of the CPE device and reduces the requirement for technical ability of the personnel. Moreover, the SD-WAN controller allocates a network IP address segment to the CPE device, which can ensure that the network IP address segments of the CPE devices of different branch organizations of the same tenant are different, and the IP addresses of the internal networks of the terminal devices in each branch organization will not conflict. Therefore, the configuration efficiency of the user terminal device is improved, and the configuration error is avoided.
[0073] In an example embodiment of the present application, before responding to the online request of the target user terminal device, the method further comprises:
[0074] In response to the registration request of the target user terminal device, obtaining the identification information of the target user terminal device;
[0075] Establishing a corresponding relationship between the identification information and the account information of the tenant.
[0076] In this embodiment, the tenant can purchase or rent the CPE device of the SD-WAN manufacturer to build an SD-WAN network. Before networking, the tenant can register the CPE device with the SD-WAN controller of the SD-WAN manufacturer to determine which tenant the CPE device belongs to. Specifically, the tenant logs in to the SD-WAN controller using its own account information and sends a registration request to the SD-WAN controller, the registration request including the identification information of the CPE device, so that the CPE device of the tenant can be registered on the SD-WAN controller. After receiving the registration request, the SD-WAN controller can obtain the identification information of the CPE device to be registered from the registration request, for example, the identification information is a MAC address. The SD-WAN controller establishes a corresponding relationship between the identification information and the account information of the tenant according to the obtained identification information of the CPE device, thereby determining which tenant the CPE device belongs to.
[0077] It can be understood that by registering the identification information of the CPE device by the tenant, the SD-WAN manufacturer only needs to provide the CPE device with recorded identification information to the tenant, and does not need to establish the corresponding relationship between the identification information of the CPE device and the tenant in advance, simplifying the management of the CPE device by the SD-WAN manufacturer and ensuring that the corresponding relationship between the identification information of the CPE device and the tenant will not be wrong. In addition, in the case of CPE device failure and replacement, the CPE device of the tenant can be quickly replaced and registered by the tenant again, improving the replacement efficiency.
[0078] After the CPE device completes the registration, the CPE device can send an online request to the SD-WAN controller after networking. The SD-WAN controller can obtain the identification information of the CPE device in the online request, and determine which tenant the online CPE device belongs to according to the corresponding relationship between the identification information and the account information of the tenant. Similarly, the SD-WAN controller can determine which CPE devices of the same tenant have been online according to the corresponding relationship between the identification information and the account information of the tenant. This facilitates the SD-WAN manufacturer to distinguish the CPE devices of different tenants and provide targeted services, improving the service quality.
[0079] In an example embodiment of the present application, the correspondence between the identification information and the account information of the tenant is established, comprising:
[0080] The identification information of the target user terminal device is compared with the pre-stored device identification information set;
[0081] If the device identification information set contains the same device identification information as the identification information of the target terminal device, it is determined that the identification information of the target user terminal device is legal, and the correspondence between the identification information of the target user terminal device and the account information of the tenant is established.
[0082] In this embodiment, the SD-WAN vendor registers the identification information of the CPE device before providing the CPE device to the tenant, and stores it as a device identification information set (i.e. a device database). When the SD-WAN controller receives a registration request from the tenant for a target user terminal device, the identification information of the CPE device obtained is compared with the pre-stored device identification information set, so that it can be determined whether the CPE device is a device provided by the SD-WAN vendor. If the device identification information set contains the same device identification information as the identification information of the CPE device, it is determined that the CPE device is a legal CPE device. After determining that the CPE device is legal, the CPE device can be registered, and the correspondence between the identification information and the account information of the tenant is established. Thus, the SD-WAN controller can ensure that only registered CPE devices can be networked, and the information security of the tenant is ensured.
[0083] In an example, if the device identification information set does not contain the same device identification information as the identification information of the CPE device, it means that the CPE device is an illegal device, and the SD-WAN controller can feed back an interface for prompting the user to input the identification information of the CPE device again, so as to improve the user experience.
[0084] In an example embodiment of the present application, in step S12, the target user terminal device is allocated a network IP address segment based on the identification information, comprising:
[0085] Based on the identification information, the account information of the tenant corresponding to the identification information is determined;
[0086] Based on the address pool corresponding to the account information, the target user terminal device is allocated a network IP address segment.
[0087] In this embodiment, the SD-WAN vendor can pre-build IP address pools for each tenant, which can include addresses contained in multiple networking IP address segments. For example, the SD-WAN vendor can build a sufficient number of IP address pools according to the number of branches of each tenant, etc. The SD-WAN controller can save the correspondence between the address pools and the account information of the tenants, in order to subsequently allocate networking IP address segments to the CPE devices of the tenant.
[0088] After the CPE device accesses the network, the SD-WAN controller allocates networking IP address segments to the accessed CPE device, and ensures that different CPE devices are allocated different networking IP address segments, thereby ensuring that the IP addresses of the terminal devices in different branch organizations of the same tenant do not conflict.
[0089] When the CPE device is connected to the network, it can send an online request to the SD-WAN controller. The SD-WAN controller obtains the identification information of the CPE device from the online request, determines the account information of the tenant to which the identification information belongs by querying the correspondence between the identification information and the account information of the tenant, and then determines the address pool corresponding to the tenant based on the determined account information of the tenant, and allocates the networking IP address segments in the address pool to the CPE device.
[0090] Thus, after the multiple CPE devices of the same tenant are networked, the networking IP address segments are IP address segments in the same address pool. The SD-WAN controller allocates networking IP address segments to the multiple CPE devices of the same tenant based on the address pool, improves the allocation efficiency, and can also avoid conflicts in the allocated networking IP address segments.
[0091] In an example, the SD-WAN vendor can build multiple IP address pools. For example, the address pool can include but is not limited to one or more of a GRE (Generic Routing Encapsulation) address pool, an IPsec (Internet Protocol Security) tunnel address pool, a tunnel address pool, a fault detection address pool, a Lo (Loopback address) address pool, and an intranet address pool. The SD-WAN controller allocates networking IP address segments in different address pools to CPE devices according to different networking requirements.
[0092] In an example embodiment of the present application, the method for allocating a networking IP address segment to a target user terminal device based on an address pool corresponding to the account information comprises:
[0093] According to the online sequence of the target user terminal device, the IP address segments in the address pool corresponding to the account information are sequentially allocated to the target user terminal device as network IP address segments.
[0094] For example, the address pool allocated by the SD-WAN vendor for tenant A includes 5 IP address segments of 192.168.1.0 / 24-192.168.5.0 / 24. Tenant A has 4 branch offices, and the CPE devices corresponding to the 4 branch offices are sequentially online. If CPE device 1 is the first to be online, the SD-WAN controller allocates the network IP address segment for CPE device 1 as 192.168.1.0 / 24; next, CPE device 2 is online, the SD-WAN controller allocates the network IP address segment for CPE device 2 as 192.168.2.0 / 24; next, CPE device 3 is online, the SD-WAN controller allocates the network IP address segment for CPE device 3 as 192.168.3.0 / 24; finally, CPE device 4 is online, the SD-WAN controller allocates the network IP address segment for CPE device 4 as 192.168.4.0 / 24.
[0095] Thus, according to the online sequence of the target user terminal device, the IP address segments in the address pool corresponding to the account information are sequentially allocated to the target user terminal device, which can ensure that each CPE device is allocated a different network IP address segment, and ensure that the terminal connected to each CPE device in the network formed by multiple CPE devices obtains a different internal network IP address, thereby avoiding IP address conflicts.
[0096] In an example embodiment of the present application, after the network IP address segment is allocated to the target user terminal device, the method further includes:
[0097] broadcasting the network IP address segment to at least one other user terminal device corresponding to the same account information.
[0098] In this embodiment, since the network IP address segment is allocated by the SD-WAN controller to the CPE according to the online sequence of the CPE after the CPE is online, even the CPE devices belonging to the same tenant cannot determine the network IP address segment of itself and the CPE devices of each branch in advance. Broadcasting the network IP address segment of each CPE device to at least one other CPE device corresponding to the same tenant account information by the SD-WAN controller enables the multiple CPE devices of the same tenant to learn the route and complete network formation, so that the terminals in the internal network formed by different branch offices of the same tenant can communicate with each other.
[0099] Figure 2 is a device network formation method flowchart according to an example embodiment. Referring to Figure 2The device networking method is applied to the CPE device and includes at least steps S21 to S23, which are described in detail as follows.
[0100] In step S21, an online request is sent to the controller, and the online request includes identification information of the target user terminal device.
[0101] In this embodiment, personnel of each branch of the tenant need to power on the CPE device to connect the CPE device to the network. For example, the CPE device can be connected to the network in multiple ways such as static IP, PPPoE (Point-to-Point Protocol over Ethernet), DHCP (Dynamic Host Configuration Protocol), etc. If the CPE device is connected to the network in the static IP mode, the static IP address of the WAN port of the CPE device needs to be set; if the CPE device is connected to the network in the PPPoE mode, the login account and password of the CPE device need to be set; and if the CPE device is connected to the network in the DHCP mode, the CPE device needs to be connected to the DHCP server. At this time, the CPE device as a client role is connected to the network through the WAN port.
[0102] After the CPE device is connected to the network, the CPE device can send an online request to the SD-WAN controller, and the identification information of the CPE device is carried in the online request. The identification information is used to identify the uniqueness of the CPE device.
[0103] In step S22, a networking IP address segment is received from the controller, and the networking IP address segment is allocated to the target user terminal device by the controller based on the identification information.
[0104] In this embodiment, when the SD-WAN controller receives the online request, the identification information of the CPE device can be obtained from the online request. The SD-WAN controller can allocate a networking IP address segment to the CPE device based on the identification information. For example, the SD-WAN controller can determine the tenant information to which the CPE device belongs according to the identification information of the CPE device, and then send the networking IP address segment in the address pool previously allocated to the tenant to the CPE device.
[0105] In step S23, an IP address in the networking IP address segment is allocated to a terminal connected to the target user terminal device to complete networking.
[0106] In this embodiment, the CPE device receives the networking IP address segment from the SD-WAN controller. After a terminal is connected to the LAN port of the CPE device, the CPE device can allocate an IP address in the networking IP address segment to a terminal in the internal network to complete networking.
[0107] The CPE device obtains the network IP address segment directly from the SD-WAN controller, and the network IP address segment is no longer set by the tenant manually, thereby reducing the workload of the tenant and the network technical ability requirement of the operator of the tenant. In addition, the network IP address segments obtained by the multiple CPE devices of the same tenant from the SD-WAN controller are different, so that the internal network IP addresses of the terminals in the internal network composed of the multiple CPE devices of the same tenant are also different, thereby avoiding IP address conflicts.
[0108] In an example embodiment of the present application, the method comprises:
[0109] The method comprises:
[0110] In the embodiment, the CPE device can set the network IP address segment as the LAN port IP address segment, and use the IP addresses in the IP address segment as the internal network IP addresses. After a terminal is connected to the LAN port of the CPE device, the CPE device can randomly allocate the internal network IP addresses to the terminal, or sequentially allocate the internal network IP addresses to the terminal, and ensure that the allocated internal network IP addresses are not repeated. Thus, the terminals connected to the same CPE device obtain the IP addresses in the same IP address segment, and the terminals achieve network connection between the CPE device and other terminals through the obtained internal network IP addresses.
[0111] The CPE devices of the multiple branch organizations of the same tenant complete network deployment, and the internal network IP addresses obtained by the terminals connected to the CPE devices are different from each other, thereby ensuring that the terminals in the same tenant can communicate with each other, and improving work efficiency by using the advantages of the SD-WAN network.
[0112] In an example embodiment, before sending the online request to the controller, the method further comprises:
[0113] The target user terminal device starts the DHCP service;
[0114] The target user terminal device obtains the WAN port address of the target user terminal device from the DHCP service to connect to the network.
[0115] In this embodiment, the SD-WAN vendor starts the DHCP service of the CPE device before providing the CPE device to the tenant. Alternatively, the tenant receives the CPE device and then the relevant personnel starts the DHCP service of the CPE device. After starting the DHCP service, the CPE device can obtain the WAN port address through the DHCP service, thereby realizing the online of the CPE device and connecting the SD-WAN controller to receive the network IP address segment. The whole process does not require any setting of the branch personnel, and the operator does not need to have corresponding network knowledge, thereby realizing the truly plug-and-play device networking and improving the work efficiency and the networking success rate.
[0116] In order to better understand the device networking method provided herein, an example is described as follows:
[0117] A company A has two branch companies, a Beijing branch company and a Shanghai branch company, and the branch companies need to be connected to each other to complete some businesses, and the network connection between the branch companies has high requirements.
[0118] The company A uses the SD-WAN network to establish the internal network of the company, so that the branch companies can be efficiently connected.
[0119] The company A rents the network and CPE device of an SD-WAN vendor B, and the company A is a tenant of the vendor B.
[0120] The vendor B randomly selects two CPE devices from the warehouse and starts the DHCP service of the CPE devices, and provides the CPE devices to the company A. The vendor B has pre-registered the identification information of the CPE devices in the warehouse into a device identification information set and saved in the SD-WAN controller.
[0121] The company A logs in the SD-WAN controller of the vendor B by using its own account information, and registers the identification information of the two CPE devices.
[0122] The SD-WAN controller responds to the registration request of the tenant (the company A) for the two CPE devices, obtains the identification information of the two CPE devices, compares the identification information with the pre-stored device identification information set, and determines that the identification information of the two CPE devices is legal in the device identification information set, and establishes the corresponding relationship between the two CPE devices and the account information of the company A.
[0123] After the company A registers the identification information of the two CPE devices, the company A provides the two CPE devices to the branch companies. After the Beijing branch company and the Shanghai branch company receive the CPE devices, the CPE devices are connected to the power supply and obtain the WAN port address through the started DHCP service, so that the CPE devices are connected to the network.
[0124] Assuming that the CPE device of the Beijing branch office is first online, the SD-WAN controller receives the online request of the CPE device of the Beijing branch office, obtains the identification information of the CPE device, determines the corresponding account information, and then determines that the CPE device belongs to company A. After inquiring, the address pool corresponding to company A is 192.168.1.0 / 24-192.168.2.0 / 24. The IP address segment 192.168.1.0 / 24 is allocated to the CPE device of the Beijing branch office, and the CPE device sets the IP address segment 192.168.1.0 / 24 as the LAN port address segment. After the PC device of the employee of the Beijing branch office is connected to the LAN port of the CPE device, the CPE device can allocate an intranet IP address to the PC device, and the PC device of the Beijing branch office uses the IP address between 192.168.1.1-192.168.1.254.
[0125] Subsequently, the CPE device of the Shanghai branch office is online. The SD-WAN controller receives the online request of the CPE device of the Shanghai branch office, and allocates the IP address segment 192.168.2.0 / 24 to the CPE device of the Shanghai branch office. Subsequently, the PC device of the Shanghai branch office uses the IP address between 192.168.2.1-192.168.2.254.
[0126] Meanwhile, the SD-WAN controller broadcasts and forwards the IP address segment 192.168.1.0 / 24 of the CPE device of the Beijing branch office or the IP address segment 192.168.2.0 / 24 of the CPE device of the Shanghai branch office to the CPE device of the other branch office, thereby completing the networking of the Beijing branch office and the Shanghai branch office.
[0127] In an example embodiment of the present application, when a user uses a terminal such as a PC to perform mobile office work, for example, when the user is on a business trip or at home, the terminal used by the user can be pre-installed with a client of a CPE. The user can log in to the client and request an IP address for networking from the corresponding SD-WAN controller. Specifically, the SD-WAN controller can determine the tenant to which the client belongs according to the request sent by the client, and allocate an IP address for networking to the client from the address pool corresponding to the tenant. After the SD-WAN controller allocates an IP address to the client, the client can configure the obtained IP address to a virtual network card of the terminal, and obtain routing information to other CPEs through the virtual network card (for example, by requesting the SD-WAN controller or by being sent by the SD-WAN controller), so that the terminal can join the SD-WAN network, thereby realizing mobile office work.
[0128] According to the above embodiment, after the tenant rents or purchases the CPE device, the CPE device is started by the SD-WAN manufacturer to provide the DHCP service, the identification information of the CPE device is registered, the correspondence between the identification information and the tenant is established, and then the CPE device is provided to the tenant. After the tenant receives the CPE device, no setting work needs to be performed on the CPE device, and only the identification information of the CPE device needs to be registered, and then the CPE device is connected to the power supply and the network cable, the CPE device is automatically connected to the network, and the SD-WAN controller is connected to obtain the networking IP address segment, and the networking is completed. The entire process does not need to configure the networking IP address segment of the CPE device, does not need to use the PC to configure the CPE device, and does not need the operation personnel to have the network technical ability, and even the ordinary personnel can complete it. The tenant only needs to connect the power supply and the network cable of the CPE device, and the device networking of the plug-and-play can be realized.
[0129] Figure 3 is a block diagram of a device networking apparatus according to an example embodiment. Referring to Figure 3 , the device networking apparatus is applied to a controller, and includes an online request receiving module 301 and an address allocation module 302.
[0130] The online request receiving module 301 is configured to acquire identification information corresponding to a target user terminal device in response to an online request of the target user terminal device.
[0131] The address allocation module 302 is configured to allocate a networking IP address segment to the target user terminal device based on the identification information, so that the target user terminal device performs networking based on the networking IP address segment.
[0132] In an example embodiment, the address allocation module 302 is further configured to sequentially allocate a plurality of different IP address segments to the target user terminal device according to an online sequence of the target user terminal device, so that the target user terminal device takes the IP address segment as the networking IP address segment.
[0133] Figure 4 is a block diagram of a device networking apparatus according to an example embodiment. Referring to Figure 4 , the device networking apparatus further includes a broadcast module 401.
[0134] The broadcast module 401 is configured to broadcast the networking IP address segment to at least one other user terminal device corresponding to the same account information.
[0135] Figure 5 is a block diagram of a device networking apparatus according to an example embodiment. Referring to Figure 5 , the device networking apparatus further includes a registration module 501.
[0136] The registration module 501 is configured to obtain the identification information of the target user terminal device in response to a registration request of the tenant for the target user terminal device;
[0137] The registration module 501 is configured to obtain the identification information of the target user terminal device in response to a registration request of the tenant for the target user terminal device;
[0138] In an example embodiment, the address allocation module 302 is further configured to determine the account information of the tenant corresponding to the identification information based on the identification information, and allocate a networking IP address segment to the target user terminal device based on an address pool corresponding to the account information.
[0139] In an example embodiment, the registration module 501 is further configured to compare the identification information of the target user terminal device with a set of pre-stored device identification information, and determine that the identification information of the target user terminal device is legal if the set of device identification information contains device identification information identical to the identification information of the target terminal device, and establish a corresponding relationship between the identification information of the target user terminal device and the account information of the tenant.
[0140] Figure 6 is a block diagram of a device networking apparatus according to an example embodiment. Referring to Figure 6 , the device networking apparatus is applied to a user terminal device, and includes an online request sending module 601, a networking address obtaining module 602, and an address allocation module 603.
[0141] The online request sending module 601 is configured to send an online request to a controller, the online request including identification information of a target user terminal device.
[0142] The networking address obtaining module 602 is configured to receive a networking IP address segment from the controller, the networking IP address segment being allocated to the target user terminal device by the controller based on the identification information.
[0143] The address allocation module 603 is configured to allocate an IP address in the networking IP address segment to a terminal connected to the target user terminal device, so as to complete networking.
[0144] In an example embodiment, the network module 601 is further configured to start a DHCP service, and obtain a WAN port address from a DHCP server and connect to a network after the user terminal device is powered on and connected to the network.
[0145] In an example embodiment, the address allocation module 603 is further configured to allocate an IP address in the networking IP address segment to a terminal connected to the target user terminal device, so that the terminal realizes network connection between the user terminal device and other terminals through the IP address.
[0146] Figure 7 is a block diagram of a device networking apparatus according to an example embodiment. Referring to Figure 7 , the device networking apparatus further includes a network connection module 701.
[0147] The network connection module 701 is configured to start a DHCP service for the target user terminal device; and obtain a WAN port address of the target user terminal device from the DHCP service, so as to connect to the network.
[0148] Figure 8 is a block diagram of a computer device 800 for device networking according to an example embodiment. For example, the computer device 800 can be provided as a server. Referring to Figure 8 , the computer device 800 includes a processor 801, the number of which can be set to one or more as needed. The computer device 800 further includes a memory 802 for storing instructions, such as an application program, executable by the processor 801. The number of the memory can be set to one or more as needed. The stored application program can be one or more. The processor 801 is configured to execute the instructions to perform the device networking method described above.
[0149] Those skilled in the art will appreciate that embodiments herein can be provided as methods, apparatus (devices), or computer program products. Accordingly, embodiments herein can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, embodiments herein can take the form of a computer program product on one or more computer-usable storage media having computer-usable program code embodied in the medium. Computer storage media includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data, including but not limited to RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by a computer. Further, it will be appreciated by those skilled in the art that a computer program product can be tangibly embodied in an information carrier and transmitted by a communication medium including but not limited to wireless, wireline, optical fiber cable, RF, etc.
[0150] This document is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (devices), and computer program products according to embodiments herein. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.
[0151] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes
[0152] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.
[0153] In this document, the terms “comprising,” “including,” or any other variations thereof are intended to cover non-exclusive inclusion, such that an article or device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such an article or device. Without further limitation, an element defined by the phrase “comprising…” does not exclude the presence of additional identical elements in the article or device that includes said element.
[0154] Although preferred embodiments have been described herein, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this document.
[0155] Obviously, numerous modifications and variations of the present application are possible in light of the above teachings. It is therefore to be understood that within the scope of the appended claims and their equivalents, the application can be practiced otherwise than as specifically described.
Claims
1. A method for networking devices, the method comprising: The application is applied to a controller, comprising: In response to a registration request of a tenant for a target user terminal device, obtaining identification information of the target user terminal device, and establishing a corresponding relationship between the identification information and account information of the tenant; Starting a DHCP service for the target user terminal device, so that the target user terminal device obtains a WAN port address from the DHCP service to connect to a network and send an online request to the controller; In response to the online request of the target user terminal device, obtaining the identification information corresponding to the target user terminal device; Based on the identification information, allocating a networking IP address segment for the target user terminal device; Broadcasting the networking IP address segment to at least one other user terminal device corresponding to the same account information, so that multiple user terminal devices of the same tenant realize learning of routing and complete networking; The method comprises: Based on the identification information, determining the account information of the tenant corresponding to the identification information; Based on the address pool corresponding to the account information, allocating a networking IP address segment for the target user terminal device.
2. The device networking method of claim 1, wherein, The method comprises: According to the online order of the target user terminal device, the IP address segment in the address pool corresponding to the account information is sequentially allocated to the target user terminal device as a networking IP address segment.
3. The device networking method of claim 1, wherein, The method comprises: Comparing the identification information of the target user terminal device with a pre-stored device identification information set; If the device identification information set contains the same device identification information as the identification information of the target terminal device, it is determined that the identification information of the target user terminal device is legal, and a corresponding relationship between the identification information of the target user terminal device and the account information of the tenant is established.
4. A method for networking devices, the method comprising: The application is applied to a target user terminal device, comprising: Sending an online request to a controller, the online request comprising identification information of the target user terminal device; Receiving a networking IP address segment from the controller, the networking IP address segment being allocated to the target user terminal device based on the identification information, determining the account information of the tenant corresponding to the identification information based on the address pool corresponding to the account information; Allocating an IP address in the networking IP address segment to a terminal connected to the target user terminal device, receiving a networking IP address segment broadcast sent by the controller, and realizing learning of routing with other user terminal devices of the same tenant to complete networking; Before the online request is sent to the controller, the method further comprises: Starting a DHCP service for the target user terminal device; Obtaining a WAN port address of the target user terminal device from the DHCP service to connect to a network, and sending an online request to the controller.
5. The device networking method of claim 4, wherein, The method comprises: The IP address in the networked IP address segment is allocated to a terminal connected with the target user terminal device, so that the terminal realizes network connection between the target user terminal device and other terminals through the IP address.
6. An apparatus for networking devices, the apparatus comprising: The application is applied to a controller, and comprises: A registration module is configured to, in response to a registration request of a tenant for a target user terminal device, acquire identification information of the target user terminal device, and establish a corresponding relationship between the identification information and account information of the tenant. A network module is configured to start a DHCP service for the target user terminal device, so that the target user terminal device acquires a WAN port address from the DHCP service to connect to a network and send an online request to the controller. An online request receiving module is configured to, in response to the online request of the target user terminal device, acquire identification information corresponding to the target user terminal device. An address allocation module is configured to, based on the identification information, allocate a networked IP address segment to the target user terminal device. A broadcast module is configured to broadcast the networked IP address segment to at least one other user terminal device corresponding to the same account information, so that multiple user terminal devices of the same tenant realize learning of routing and complete networked connection. The method comprises: Based on the identification information, the account information of the tenant corresponding to the identification information is determined. Based on an address pool corresponding to the account information, a networked IP address segment is allocated to the target user terminal device.
7. An apparatus for networking devices, the apparatus comprising: The application is applied to a user terminal device, and comprises: A network connection module is configured to start a DHCP service for the target user terminal device, so that the target user terminal device acquires a WAN port address from the DHCP service to connect to a network and send an online request to the controller. An online request sending module is configured to send an online request to the controller, wherein the online request comprises identification information of the target user terminal device. A networked address acquisition module is configured to receive a networked IP address segment from the controller, wherein the networked IP address segment is determined by the controller based on the identification information, the account information of the tenant corresponding to the identification information, and an address pool corresponding to the account information. An address allocation module is configured to allocate an IP address in the networked IP address segment to a terminal connected with the target user terminal device, receive the broadcast of the networked IP address segment sent by the controller, and realize learning of routing with other user terminal devices of the same tenant to complete networked connection.
8. A computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed to implement the steps of the method according to any one of claims 1-5.
9. A computer device comprising a processor, a memory and a computer program stored on the memory, characterized in that, The processor is executed to implement the steps of the method according to any one of claims 1-5.
Citation Information
Patent Citations
Method and apparatus for establishing route information
CN101202968A