Communication method, UPF, UE and medium based on VLAN configuration

Abstract

The present invention provides a VLAN configuration-based communication method, UPF, UE, and medium, relating to the field of communication technology. The method addresses the problems of existing technologies for isolating messages between different VLANs, which are difficult to maintain, lack of decentralized configuration permissions, and the potential for message cross-VLAN diffusion. The method comprises: establishing a PDU session for a UE based on PDU session establishment signaling, and associating VLAN configuration information locally set for the UE in the UPF with the PDU session. The method further includes: sending the PDU session establishment signaling from the core network to the UPF based on an access request from the UE; matching uplink messages from the UE / downlink messages destined for the UE with the PDU session, processing the uplink / downlink messages based on the VLAN configuration information associated with the PDU session, and forwarding the processed uplink / downlink messages based on the PDU session. The present invention can open permissions on the UPF, reduce maintenance difficulties, and prevent message cross-VLAN diffusion.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a communication method based on VLAN configuration, a UPF, a UE, and a computer-readable storage medium. Background Art

[0002] In the existing 5G (fifth generation mobile communication technology, 5G for short) network architecture, 5G_LAN (Local Area Network), based on the 3GPP (3rd Generation Partnership Project) specifications, can support multiple UPFs (User Plane Function) to establish transmission channels through the N19 signaling interface, and realize Ethernet layer communication between UEs (User Equipment) under multiple UPFs.

[0003] To implement VLAN (Virtual Local Area Network) functionality similar to that of traditional SW (Switch), 5G LAN introduces the concept of VN Group (Virtual Network Group). End users assigned to the same Ethernet-type VNG are equivalent to being in the same broadcast domain, supporting data forwarding within the broadcast domain based on the destination MAC (Medium Access Control). When the port of the SW connected to the DN (Data Network) side is configured as a trunk (port aggregation), the N6 signaling message will carry a VLAN ID (tag). To isolate messages with different VLAN IDs within the VNG, it is necessary to add a corresponding PDR (Packet Detection Rule) to the 5GC (5G Core) control plane to identify the VLAN field and thus isolate messages carrying different VLAN IDs.

[0004] Adding rules on the control plane to isolate packets carrying different VLAN IDs within the same VNG will lead to the following problems: the control plane operation and maintenance is difficult; even if industry users purchase the right to use a certain VNG, they still need to rely on the operator for configuration, especially when the UPF is deployed locally, the user still does not have independent configuration authority; VNG resources are limited, and when users have more detailed grouping requirements, using only VNG may not be enough to meet the user's grouping requirements; not restricting VLANs in UPF forwarding and only forwarding according to VNG will cause the packets forwarded by UPF to spread across VLANs, posing security risks and wasting bandwidth. Summary of the Invention

[0005] The technical problem to be solved by the present invention is to address the above-mentioned shortcomings of the existing technology and provide a communication method, UPF, UE and computer-readable storage medium based on VLAN configuration to solve the problems that the existing technology adds rules to the control plane to achieve isolation between different VLAN messages, resulting in difficulty in control plane operation and maintenance, configuration authority is not decentralized to the user locally, user grouping requirements cannot be fully met and messages may spread across VLANs.

[0006] In a first aspect, the present invention provides a communication method based on VLAN configuration, applied to UPF, the method comprising:

[0007] Establish a PDU session for the UE according to the PDU session establishment signaling, and associate the VLAN configuration information set locally for the UE in the UPF with the PDU session, where: the PDU session establishment signaling is sent by the core network to the UPF according to the access request from the UE;

[0008] Matches PDU sessions for uplink messages from / downlink messages destined for the UE, processes the uplink / downlink messages according to the VLAN configuration information associated with the PDU session, and forwards the processed uplink / downlink messages according to the PDU session;

[0009] Among them: VLAN is virtual local area network, UPF is user plane function, PDU is protocol data unit, and UE is user equipment.

[0010] Optionally, associating the VLAN configuration information set locally for the UE with the PDU session includes:

[0011] Obtain the UE's IMSI information carried in the PDU session establishment signaling;

[0012] Retrieve the UPF local VLAN configuration management table based on the IMSI information;

[0013] Associating the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session;

[0014] Among them: IMSI is the International Mobile Subscriber Identity.

[0015] Optionally, the VLAN configuration information corresponding to the IMSI information includes: a default VLAN ID, an untagged VLAN ID, and one or more general VLAN IDs supported by the UE;

[0016] The UPF local VLAN configuration management table also includes: information corresponding to the IMSI information on whether the UE needs to be notified to configure the VLAN ID;

[0017] VLAN ID is the virtual local area network tag.

[0018] Optionally, after associating the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session, the method further includes:

[0019] A notification message is sent to the UE based on information corresponding to the IMSI information about whether the UE needs to be notified of VLAN ID configuration. The notification message carries the VLAN ID in the VLAN configuration information, so that the UE completes the VLAN ID configuration locally according to the notification message.

[0020] Optionally, the uplink / downlink message is processed according to the VLAN configuration information associated with the PDU session, specifically including:

[0021] If the PDU session is associated with VLAN configuration information, determine whether the uplink / downlink message carries the VLAN ID;

[0022] If not, the VLAN ID is added to the upstream / downstream packets according to the associated VLAN configuration information.

[0023] If there is, the upstream / downlink packets whose VLAN IDs are consistent with the associated VLAN configuration information are retained, and those that are inconsistent are discarded.

[0024] Optionally, forwarding the processed uplink / downlink message according to the PDU session specifically includes:

[0025] Query the PDU session neighbor table based on the destination MAC and VLAN ID in the uplink / downlink message with the added VLAN ID or the reserved uplink / downlink message;

[0026] Forwards uplink / downlink packets with added VLAN IDs or reserved uplink / downlink packets based on the port in the neighbor table;

[0027] Wherein: MAC is the media access control address.

[0028] In a second aspect, the present invention provides a communication method based on VLAN configuration, applied to a UE, the method comprising:

[0029] Send an access request to the core network so that: the core network sends a PDU session establishment signaling to the UPF according to the access request, the UPF establishes a PDU session for the UE according to the PDU session establishment signaling, and associates the VLAN configuration information set locally for the UE in the UPF with the PDU session;

[0030] Send uplink messages to the UPF / receive downlink messages from the UPF, where the uplink / downlink messages are matched by the UPF to the PDU session, processed according to the VLAN configuration information associated with the PDU session, and forwarded according to the PDU session;

[0031] Among them: VLAN is virtual local area network, UE is user equipment, UPF is user plane function, and PDU is protocol data unit.

[0032] Optionally, sending an access request to the core network specifically includes:

[0033] Send an access request carrying the UE's IMSI information to the core network, so that: the core network sends a PDU session establishment signaling carrying the UE's IMSI information to the UPF according to the access request, the UPF obtains the UE's IMSI information carried in the PDU session establishment signaling, and retrieves the UPF local VLAN configuration management table according to the IMSI information, and associates the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session;

[0034] Among them: IMSI is the International Mobile Subscriber Identity.

[0035] Optionally, after sending the access request to the core network, the method further includes:

[0036] Receive a notification message from the UPF that carries the VLAN ID in the VLAN configuration information, wherein: the notification message is sent by the UPF based on the information corresponding to the IMSI information in the UPF local VLAN configuration management table whether the UE needs to be notified of the VLAN ID configuration;

[0037] Complete VLAN ID configuration locally on the UE according to the notification message, including configuring the default VLAN ID, untagged VLAN ID, and one or more general VLAN IDs supported by the UE;

[0038] VLAN ID is the virtual local area network tag.

[0039] Optionally, sending an uplink message to the UPF / receiving a downlink message from the UPF specifically includes:

[0040] Send an uplink message carrying the VLAN ID to the UPF according to the VLAN ID configuration completed locally on the UE; or

[0041] Receive a downlink message from the UPF that carries a VLAN ID that is consistent with the VLAN ID configured locally on the UE.

[0042] In a third aspect, the present invention provides a UPF, comprising:

[0043] A session establishment module is used to establish a PDU session for the UE according to the PDU session establishment signaling, and associate the VLAN configuration information set locally for the UE in the UPF with the PDU session, wherein: the PDU session establishment signaling is sent by the core network to the UPF according to the access request from the UE;

[0044] The session proceeding module is connected to the session establishing module, and is used to match the PDU session for the uplink message from the UE / downlink message directed to the UE, and process the uplink / downlink message according to the VLAN configuration information associated with the PDU session, and forward the processed uplink / downlink message according to the PDU session;

[0045] Among them: UPF is user plane function, PDU is protocol data unit, UE is user equipment, and VLAN is virtual local area network.

[0046] In a fourth aspect, the present invention provides a UE, comprising:

[0047] A request module is configured to send an access request to the core network so that: the core network sends a PDU session establishment signaling to the UPF according to the access request, the UPF establishes a PDU session for the UE according to the PDU session establishment signaling, and associates the VLAN configuration information set locally for the UE by the UPF with the PDU session;

[0048] The message module is connected to the request module and is used to send uplink messages to the UPF / receive downlink messages from the UPF, wherein: the uplink / downlink messages are matched by the UPF with the PDU session, and are processed according to the VLAN configuration information associated with the PDU session and forwarded according to the PDU session;

[0049] Among them: UE is user equipment, PDU is protocol data unit, UPF is user plane function, and VLAN is virtual local area network.

[0050] In a fifth aspect, the present invention provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the communication method based on VLAN configuration as described above is implemented.

[0051] The present invention provides a communication method, UPF, UE and computer-readable storage medium based on VLAN configuration. First, when the UPF establishes a PDU session for the UE, the VLAN information configured locally by the user in the UPF is associated with the PDU session. Then, when the UPF forwards the UE's message through the PDU session, the message forwarding process is controlled according to the associated VLAN information, thereby realizing user communication based on VLAN configuration. Therefore, there is no need to add rules on the control plane to achieve isolation between different VLAN messages, reducing the difficulty of control plane operation and maintenance. Autonomous configuration permissions can be opened for users on the UPF to meet more user grouping needs without causing the messages forwarded by the UPF to spread across VLANs, thereby improving communication security and saving network bandwidth. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 is a flow chart of a communication method based on VLAN configuration according to an embodiment of the present invention;

[0053] Figure 2 Schematic diagram of an improved solution of a UPF and a UE according to an embodiment of the present invention;

[0054] Figure 3 is a schematic diagram of message transmission in an end-to-end network element according to an embodiment of the present invention;

[0055] Figure 4 This is a schematic diagram of the structure of a 5G user plane message according to an embodiment of the present invention;

[0056] Figure 5 is a flow chart of another communication method based on VLAN configuration according to an embodiment of the present invention;

[0057] Figure 6 Schematic diagram of the structure of a UPF according to an embodiment of the present invention;

[0058] Figure 7 It is a structural diagram of a UE according to an embodiment of the present invention. DETAILED DESCRIPTION

[0059] In order to enable those skilled in the art to better understand the technical solutions of the present invention, the embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

[0060] It should be understood that the specific embodiments and drawings described herein are only used to explain the present invention rather than to limit the present invention.

[0061] It is understood that, in the absence of conflict, the various embodiments of the present invention and the various features in the embodiments may be combined with each other.

[0062] It can be understood that, for the convenience of description, the drawings of the present invention only show parts related to the present invention, while parts unrelated to the present invention are not shown in the drawings.

[0063] It can be understood that each unit and module involved in the embodiments of the present invention may correspond to only one physical structure, or may be composed of multiple physical structures, or multiple units and modules may be integrated into one physical structure.

[0064] It will be understood that, without conflict, the functions and steps marked in the flowcharts and block diagrams of the present invention may occur in an order different from that marked in the drawings.

[0065] It is understood that the flowcharts and block diagrams of the present invention illustrate the possible architectures, functions, and operations of the systems, devices, equipment, and methods according to various embodiments of the present invention. Each box in the flowchart or block diagram may represent a unit, module, program segment, or code, which contains executable instructions for implementing the specified functions. Moreover, each box or combination of boxes in the block diagram and flowchart may be implemented using a hardware-based system that implements the specified functions, or may be implemented using a combination of hardware and computer instructions.

[0066] It can be understood that the units and modules involved in the embodiments of the present invention can be implemented by software or hardware. For example, the units and modules can be located in a processor.

[0067] Example 1:

[0068] like Figure 1 As shown, embodiment 1 of the present invention provides a communication method based on VLAN configuration, which is applied to UPF. The method includes:

[0069] S11. Establish a PDU session for the UE according to the PDU session establishment signaling, and associate the VLAN configuration information set locally for the UE in the UPF with the PDU session, wherein: the PDU session establishment signaling is sent by the core network to the UPF according to the access request from the UE;

[0070] S12. Match the PDU session for the uplink message from the UE / downlink message directed to the UE, process the uplink / downlink message according to the VLAN configuration information associated with the PDU session, and forward the processed uplink / downlink message according to the PDU session;

[0071] Among them: VLAN is virtual local area network, UPF is user plane function, PDU is protocol data unit, and UE is user equipment.

[0072] Specifically, in this embodiment, the method can be used as follows: Figure 2It runs in the UPF shown, and is used to manage VLAN configuration and control communications based on VLAN configuration locally in the UPF. Specifically, after the 5G network completes UE access and intercommunication between UEs according to the VNG isolation range based on the 5G LAN technology, the UPF associates the VLAN information configured by the user in the UPF locally with the PDU session in the process of establishing a PDU session for the UE. Then, when the UPF forwards the UE's message through the PDU session, the message forwarding process is controlled according to the associated VLAN information, so that there is no need to add rules to the control plane to achieve isolation between different VLAN messages, reducing the difficulty of control plane operation and maintenance. In particular, VLAN can be configured locally at the anchor point UPF, and more fine-grained network group isolation can be achieved for user communications based on VLAN configuration. It is particularly suitable for vertical industry UPFs that are sunk to user local scenarios. Autonomous configuration permissions can be opened for users on the UPF to meet more user grouping needs, so that the 5G network can be more flexibly interconnected with the user's local network and achieve operation and maintenance management, and will not cause the messages forwarded by the UPF to spread across VLANs, which is beneficial to improving security, reducing the size of the broadcast domain, and reducing bandwidth waste.

[0073] Optionally, associating the VLAN configuration information set locally for the UE with the PDU session includes:

[0074] Obtain the UE's IMSI information carried in the PDU session establishment signaling;

[0075] Retrieve the UPF local VLAN configuration management table based on the IMSI information;

[0076] Associating the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session;

[0077] Among them: IMSI is the International Mobile Subscriber Identity.

[0078] Specifically, in this embodiment, if Figure 2 As shown in FIG, the UPF completes the process of associating VLAN configuration information in the PDU session, including:

[0079] Establish a PDU session and a PDU session table. Specifically, when a UE accesses, the 5GC completes session establishment and modification in the local UPF according to the PDU session establishment process, including the 5GC carrying the IMSI (International Mobile Subscriber Identity) information in the PDU session establishment signaling sent to the UPF through the N4 interface. The UPF identifies the UE identity based on the IMSI information and establishes a correspondence between it and the PDU session.

[0080] The established PDU session is associated with the VNG_list table (UPF local VLAN configuration management table). Specifically, after the session establishment and modification in the UPF is completed, the user plane communication link from the UE to the UPF is opened, and the IMSI information of the UE is retrieved in the VNG_list table. If the IMSI information is retrieved, the UE_list_node information (VLAN configuration information) corresponding to the UE in the VNG_list table is associated with the PDU session.

[0081] Optionally, the VLAN configuration information corresponding to the IMSI information includes: a default VLAN ID, an untagged VLAN ID, and one or more general VLAN IDs supported by the UE;

[0082] The UPF local VLAN configuration management table also includes: information corresponding to the IMSI information on whether the UE needs to be notified to configure the VLAN ID;

[0083] VLAN ID is the virtual local area network tag.

[0084] Specifically, in this embodiment, if Figure 2The UPF shown needs to be improved to some extent, including adding a VNG_list table locally in the UPF. The VNG_list table enables users to add, delete, modify and query the table by setting a human-computer interaction interface on the UPF. The human-computer interaction interface can be a CLI (command line interface), a global wide area network Web or a service interface, which is used to write the configuration information of VNG, UE and VLAN. The main content fields in the VNG_list table are shown in Table 1. VNG_list can store all Ethernet type VNG node data sent to the UPF together through arrays, linked lists, hashes and other data structures for easy indexing. Each VNG node data contains the VN group ID (VNG_ID), the default VLAN of the message in the VNG (VNG_default_vlanid), and a list of all UEs belonging to the VNG (UE_list). The VNG_VLANID_LIST field (not shown in Table 1) can also be added to the VNG node data to configure the VLANs supported by the VNG, similar to adding VLANs in a switch; UE_list uses arrays, linked lists, hashes and other data structures to store all ethernet type VNG node data sent to the UPF together for easy indexing. The UE node data belonging to the VNG are stored together. Each UE node data contains the UE's IMSI, mode, UE_list_node information (UE_default_vlanid, UE_untag_vlanid, UE_vlanid_list) and other fields. Among them, UE_IMSI is used to mark the UE, which is convenient for users to configure the UE locally. UE_mode is used to mark the mode. When mode = 0, it is only processed independently by the UPF. When mode = 1, the UPF will send the UE's configuration information to the UE, and the UE will complete the configuration of the local VLAN based on this information. UE_default_vlanid is the default VLAN ID to which the PDU session belongs when the UE accesses the VNG, which is similar to the PVID (Port_base VLAN ID) of an ordinary switch, indicating the port-based VLAN ID in network communication; UE_untag_vlanid is the VLAN tag (label) in the message with the VLAN ID added when sending the message, which needs to be removed;UE_vlanid_list is a list of all VLANs supported by the UE. When there is only one UE_vlanlist_id in the UE_vlanid_list, and it is the same as the UE_default_vlanid, it is similar to the access VLAN of a common switch. When there are multiple UE_vlanlist_ids in the UE_vlanid_list, it is in trunk VLAN mode, in which the UE_default_vlanid (pvid) and UE_vlanid_list (vlan tag) are configured separately. Alternatively, the UE node data can be configured using the traditional switch configuration method by adding a vlan mode field. This field has two modes: access and trunk. When in access mode, only one VLAN is supported. When in trunk mode, all VLANs in the VNG_VLANID_LIST supported by the VNG are added to the UE_vlanid_list by default.

[0085] Table 1 UPF local VLAN configuration management table

[0086]

[0087] Optionally, after associating the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session, the method further includes:

[0088] A notification message is sent to the UE based on information corresponding to the IMSI information about whether the UE needs to be notified of VLAN ID configuration. The notification message carries the VLAN ID in the VLAN configuration information, so that the UE completes the VLAN ID configuration locally according to the notification message.

[0089] Specifically, in this embodiment, if Figure 2 After the UPF shown establishes a PDU session and associates the UE_list_node information in the VNG_list table, when mode=1 in the UE node data, the UPF generates a notification message to send a VLAN notification to the UE and sends the configuration information of the UE to the UE. The notification message can use an Ethernet message, including UE_default_vlanid, UE_untag_vlanid, UE_vlanid_list_num, UE_vlanlist_id1, UE_vlanlist_id2, ..., UE_vlanlist_idn, each field occupies 2 bytes; after receiving the notification message, the UE parses the VLAN ID information carried therein and completes the VLAN configuration locally on the UE. For this purpose, the UE needs to perform the following steps: Figure 2The improvements shown include: receiving a VLAN notification message from the UPF, and saving the default vlan, untag_vlanid and supported vlanid_list in the message in the UE_list_node, so as to process the VLAN tag in the message when subsequently processing the UE local message.

[0090] Optionally, the uplink / downlink message is processed according to the VLAN configuration information associated with the PDU session, specifically including:

[0091] If the PDU session is associated with VLAN configuration information, determine whether the uplink / downlink message carries the VLAN ID;

[0092] If not, the VLAN ID is added to the upstream / downstream packets according to the associated VLAN configuration information.

[0093] If there is, the upstream / downlink packets whose VLAN IDs are consistent with the associated VLAN configuration information are retained, and those that are inconsistent are discarded.

[0094] Specifically, in this embodiment, the process of message transmission in the end-to-end network element is as follows: Figure 3 As shown, for example, for uplink messages, a 5G user plane message can be sent by a PC (Personal Computer). The structure of the 5G user plane message is as follows Figure 4 As shown, in the UE Figure 2 The message _VLAN tag processing shown may include several situations: First, the UE terminal does not receive the VLAN configuration notification message, or the UE has not manually configured it locally, so the UE sends an Ethernet message without a VLAN tag ( Figure 4 The VLAN tag is empty). The second type is that the UE terminal has received VLAN configuration, or the UE has configured VLAN locally, or the CPE (Customer Premise E, a wireless terminal access device) terminal forwards the message with VLAN tag and the CPE locally supports the VLAN. Then the UE sends the Ethernet message with VLAN tag ( Figure 4 Vlan tag content in the packet); sent to UPF via GNB (next generation Node B, gNodeB, next generation base station); UPF receives the uplink message and performs the following operations: Figure 2The hit PDU session is shown, and the VLAN tag is detected and processed by searching the VNG_list table. The detection and processing of the VLAN tag specifically includes: judging whether there is an associated ue_list_node in the PDU session. If so, judging whether the Ethernet frame in the uplink message content carries a VLAN tag (Vlan tag). If not, adding a vlan tag according to the UE_default_vlanid in the UE_list_node; if it is carried, judging whether the VLAN ID carried by the Vlan tag is in the UE_vlanid_list, if not, discarding it; the process for the uplink message is similar, but the downlink message first reaches the UPF from the other end, and the UPF also performs the following steps: Figure 2 The hit PDU session is shown, and the VLAN tag is detected and processed by looking up the VNG_list table.

[0095] Optionally, forwarding the processed uplink / downlink message according to the PDU session specifically includes:

[0096] Query the PDU session neighbor table based on the destination MAC and VLAN ID in the uplink / downlink message with the added VLAN ID or the reserved uplink / downlink message;

[0097] Forwards uplink / downlink packets with added VLAN IDs or reserved uplink / downlink packets based on the port in the neighbor table;

[0098] Wherein: MAC is the media access control address.

[0099] Specifically, in this embodiment, if Figure 2 、 3As shown in Figure 4, for uplink messages, UPF will not discard the messages, and will update the neighbor table according to the destination MAC (Medium Access Control, Media Access Control Address), VLANID and source PDU session in the received Ethernet frame, query the neighbor table according to the destination MAC and VLAN ID, and forward the message to SW according to port N19 in the neighbor table. SW then forwards it to the destination PC to complete the communication of the uplink message; for downlink messages, UPF will update the source port in the neighbor table after detecting and processing the VLAN tag, and forward the message to the hit UE according to the neighbor table. After the UE receives the downlink message, it will process the VLAN tag of the message. The processing process can be similar to that of the uplink message processed by UPF. If the CPE terminal is configured with the allowed VLAN locally manually or through the notification message of UPF, the message with VLAN tag received at the local port of CPE will be discarded if it does not match the VLANID configured in CPE. If untag_vlanid is configured and the vlan of the vlan tag in the message If the id matches the untag_vlanid, the VLAN tag in the Ethernet header of the message will be stripped off before sending it to the protocol stack or forwarding it to the back-end subnet to complete the communication of the downlink message.

[0100] Example 2:

[0101] like Figure 5 As shown, embodiment 2 of the present invention provides a communication method based on VLAN configuration, which is applied to a UE. The method includes:

[0102] S21. Send an access request to the core network so that: the core network sends a PDU session establishment signaling to the UPF according to the access request, and the UPF establishes a PDU session for the UE according to the PDU session establishment signaling, and associates the VLAN configuration information set locally for the UE by the UPF with the PDU session;

[0103] S22. Send an uplink message to the UPF / receive a downlink message from the UPF, wherein the uplink / downlink message is matched by the UPF with the PDU session, processed according to the VLAN configuration information associated with the PDU session, and forwarded according to the PDU session;

[0104] Among them: VLAN is virtual local area network, UE is user equipment, UPF is user plane function, and PDU is protocol data unit.

[0105] Optionally, sending an access request to the core network specifically includes:

[0106] Send an access request carrying the UE's IMSI information to the core network, so that: the core network sends a PDU session establishment signaling carrying the UE's IMSI information to the UPF according to the access request, the UPF obtains the UE's IMSI information carried in the PDU session establishment signaling, and retrieves the UPF local VLAN configuration management table according to the IMSI information, and associates the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session;

[0107] Among them: IMSI is the International Mobile Subscriber Identity.

[0108] Optionally, after sending the access request to the core network, the method further includes:

[0109] Receive a notification message from the UPF that carries the VLAN ID in the VLAN configuration information, wherein: the notification message is sent by the UPF based on the information corresponding to the IMSI information in the UPF local VLAN configuration management table whether the UE needs to be notified of the VLAN ID configuration;

[0110] Complete VLAN ID configuration locally on the UE according to the notification message, including configuring the default VLAN ID, untagged VLAN ID, and one or more general VLAN IDs supported by the UE;

[0111] VLAN ID is the virtual local area network tag.

[0112] Optionally, sending an uplink message to the UPF / receiving a downlink message from the UPF specifically includes:

[0113] Send an uplink message carrying the VLAN ID to the UPF according to the VLAN ID configuration completed locally on the UE; or

[0114] Receive a downlink message from the UPF that carries a VLAN ID that is consistent with the VLAN ID configured locally on the UE.

[0115] Specifically, in this embodiment, the method is executed in the UE, and the UE performs the following steps: Figure 2 The improvements shown are used to trigger UPF to manage VLAN configuration and control communications based on VLAN configuration locally in UPF, so that there is no need to add rules on the control plane to achieve isolation between different VLAN messages, reducing the difficulty of control plane operation and maintenance. It can open up autonomous configuration permissions for users on UPF to meet more user grouping needs without causing the messages forwarded by UPF to spread across VLANs, thereby improving communication security and saving network bandwidth.

[0116] Example 3:

[0117] like Figure 6As shown, embodiment 3 of the present invention provides a UPF, the UPF comprising:

[0118] The session establishment module 11 is configured to establish a PDU session for the UE according to the PDU session establishment signaling, and associate the VLAN configuration information set locally for the UE in the UPF with the PDU session, wherein: the PDU session establishment signaling is sent by the core network to the UPF according to the access request from the UE;

[0119] The session conducting module 12 is connected to the session establishing module 11 and is configured to match the PDU session for the uplink message from the UE / the downlink message directed to the UE, process the uplink / downlink message according to the VLAN configuration information associated with the PDU session, and forward the processed uplink / downlink message according to the PDU session;

[0120] Among them: UPF is user plane function, PDU is protocol data unit, UE is user equipment, and VLAN is virtual local area network.

[0121] Optionally, the session establishing module 11 specifically includes:

[0122] An acquiring unit, configured to acquire the UE's IMSI information carried in the PDU session establishment signaling;

[0123] A retrieval unit, connected to the acquisition unit, for retrieving the UPF local VLAN configuration management table according to the IMSI information;

[0124] an associating unit, connected to the retrieving unit, for associating the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session;

[0125] Among them: IMSI is the International Mobile Subscriber Identity.

[0126] Optionally, the VLAN configuration information corresponding to the IMSI information includes: a default VLAN ID, an untagged VLAN ID, and one or more general VLAN IDs supported by the UE;

[0127] The UPF local VLAN configuration management table also includes: information corresponding to the IMSI information on whether the UE needs to be notified to configure the VLAN ID;

[0128] VLAN ID is the virtual local area network tag.

[0129] Optionally, the session establishing module 11 further includes:

[0130] The notification unit is connected to the retrieval unit and is used to send a notification message to the UE according to the information corresponding to the IMSI information whether the UE needs to be notified to configure the VLAN ID. The notification message carries the VLAN ID in the VLAN configuration information, so that the UE completes the VLAN ID configuration locally according to the notification message.

[0131] Optionally, the conversation conducting module 12 specifically includes:

[0132] a judgment unit, configured to judge whether the uplink / downlink message carries the VLAN ID if the VLAN configuration information is associated with the PDU session;

[0133] an adding unit connected to the judging unit, configured to add a VLAN ID to the uplink / downlink message according to the associated VLAN configuration information if the VLAN ID is not carried;

[0134] The retaining unit is connected to the judging unit and is used for retaining the uplink / downlink message whose carried VLAN ID is consistent with the associated VLAN configuration information if there is any, and discarding the inconsistent one.

[0135] Optionally, the conversation conducting module 12 further includes:

[0136] A query unit, configured to query a PDU session neighbor table according to a destination MAC and a VLAN ID in an uplink / downlink message with a VLAN ID added or a reserved uplink / downlink message;

[0137] A forwarding unit connected to the query unit, configured to forward uplink / downlink messages with added VLAN IDs or reserved uplink / downlink messages according to ports in the neighbor table;

[0138] Wherein: MAC is the media access control address.

[0139] Specifically, in this embodiment, the UPF is used to manage the VLAN configuration and control the communication based on the VLAN configuration locally in the UPF, so that there is no need to add rules on the control plane to achieve isolation between different VLAN messages, reducing the difficulty of control plane operation and maintenance. It can open up autonomous configuration permissions for users on the UPF to meet more user grouping needs, and will not cause the messages forwarded by the UPF to spread across VLANs, thereby improving communication security and saving network bandwidth.

[0140] Example 4:

[0141] like Figure 7 As shown, embodiment 4 of the present invention provides a UE, the UE including:

[0142] The request module 21 is configured to send an access request to the core network, so that: the core network sends a PDU session establishment signaling to the UPF according to the access request, and the UPF establishes a PDU session for the UE according to the PDU session establishment signaling, and associates the VLAN configuration information set locally for the UE by the UPF with the PDU session;

[0143] The message module 22 is connected to the request module 21 and is used to send uplink messages to the UPF / receive downlink messages from the UPF, wherein: the uplink / downlink messages are matched by the UPF with the PDU session, and are processed according to the VLAN configuration information associated with the PDU session and forwarded according to the PDU session;

[0144] Among them: UE is user equipment, PDU is protocol data unit, UPF is user plane function, and VLAN is virtual local area network.

[0145] Optionally, the request module 21 is specifically configured to:

[0146] Send an access request carrying the UE's IMSI information to the core network, so that: the core network sends a PDU session establishment signaling carrying the UE's IMSI information to the UPF according to the access request, the UPF obtains the UE's IMSI information carried in the PDU session establishment signaling, and retrieves the UPF local VLAN configuration management table according to the IMSI information, and associates the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session;

[0147] Among them: IMSI is the International Mobile Subscriber Identity.

[0148] Optionally, the UE further includes a configuration module, configured to:

[0149] Receive a notification message from the UPF that carries the VLAN ID in the VLAN configuration information, wherein: the notification message is sent by the UPF based on the information corresponding to the IMSI information in the UPF local VLAN configuration management table whether the UE needs to be notified of the VLAN ID configuration;

[0150] Complete VLAN ID configuration locally on the UE according to the notification message, including configuring the default VLAN ID, untagged VLAN ID, and one or more general VLAN IDs supported by the UE;

[0151] VLAN ID is the virtual local area network tag.

[0152] Optionally, the message module 22 specifically includes:

[0153] An uplink message unit, configured to send an uplink message carrying a VLAN ID to the UPF according to the VLAN ID configuration completed locally on the UE; or

[0154] The downlink message unit is used to receive a downlink message from the UPF whose carried VLAN ID is consistent with the VLAN ID configured locally in the UE.

[0155] Specifically, in this embodiment, the UE is used to trigger the UPF to manage the VLAN configuration and control the communication based on the VLAN configuration locally in the UPF, so that there is no need to add rules on the control plane to achieve isolation between different VLAN messages, reducing the difficulty of control plane operation and maintenance. It can open up autonomous configuration permissions for users on the UPF to meet more user grouping needs, and will not cause the messages forwarded by the UPF to spread across VLANs, thereby improving communication security and saving network bandwidth.

[0156] Example 5:

[0157] Embodiment 5 of the present invention provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the communication method based on VLAN configuration as described in embodiment 1 or 2 is implemented.

[0158] Specifically, in this embodiment, the computer-readable storage medium, in which the stored computing program can be run on the UPF or UE, is used to implement local management of VLAN configuration and control of communication based on VLAN configuration in the UPF, thereby eliminating the need to add rules on the control plane to isolate different VLAN messages, reducing the difficulty of control plane operation and maintenance, and opening up autonomous configuration permissions for users on the UPF to meet more user grouping needs without causing cross-VLAN diffusion of messages forwarded by the UPF, thereby improving communication security and saving network bandwidth. The computer-readable storage medium includes volatile or non-volatile, removable or non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules, or other data). Computer-readable storage media include, but are not limited to, RAM (Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable read only memory), flash memory or other memory technology, CD-ROM (Compact Disc Read-Only Memory), digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer.

[0159] In addition, the present invention can also provide an electronic device, including a memory and a processor, wherein the memory stores a computer program, and when the processor runs the computer program stored in the memory, the processor executes the communication method based on VLAN configuration as described in Example 1 or 2.

[0160] The memory is connected to the processor, the memory may be a flash memory, a read-only memory or other memory, and the processor may be a central processing unit or a single-chip microcomputer.

[0161] Embodiments 1-5 of the present invention provide a communication method, UPF, UE and computer-readable storage medium based on VLAN configuration. First, when the UPF establishes a PDU session for the UE, it associates the VLAN information configured locally by the user in the UPF to the PDU session. Then, when the UPF forwards the UE's message through the PDU session, it controls the message forwarding process according to the associated VLAN information to realize user communication based on VLAN configuration, thereby eliminating the need to add rules to the control plane to achieve isolation between different VLAN messages, reducing the difficulty of control plane operation and maintenance, and opening up autonomous configuration permissions for users on the UPF to meet more user grouping needs without causing the messages forwarded by the UPF to spread across VLANs, thereby improving communication security and saving network bandwidth.

[0162] It will be understood that the above embodiments are merely exemplary embodiments for illustrating the principles of the present invention, and the present invention is not limited thereto. Those skilled in the art will appreciate that various modifications and improvements can be made without departing from the spirit and substance of the present invention, and such modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims

1. A communication method based on VLAN configuration, characterized in that: Applied to UPF, the method comprises: Establish a PDU session for the UE according to the PDU session establishment signaling, and associate the VLAN configuration information set locally for the UE in the UPF with the PDU session, where: the PDU session establishment signaling is sent by the core network to the UPF according to the access request from the UE; Matches PDU sessions for uplink messages from / downlink messages destined for the UE, processes the uplink / downlink messages according to the VLAN configuration information associated with the PDU session, and forwards the processed uplink / downlink messages according to the PDU session; Among them: VLAN is virtual local area network, UPF is user plane function, PDU is protocol data unit, and UE is user equipment.

2. The method according to claim 1, characterized in that Associate the VLAN configuration information set locally for the UE with the PDU session, specifically including: Obtain the UE's IMSI information carried in the PDU session establishment signaling; Retrieve the UPF local VLAN configuration management table based on the IMSI information; Associating the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session; Among them: IMSI is the International Mobile Subscriber Identity.

3. The method according to claim 2, characterized in that The VLAN configuration information corresponding to the IMSI information includes: the default VLAN ID, the untagged VLAN ID, and one or more general VLAN IDs supported by the UE; The UPF local VLAN configuration management table also includes: information corresponding to the IMSI information on whether the UE needs to be notified to configure a VLAN ID; VLAN ID is the virtual local area network tag.

4. The method according to claim 3, characterized in that After associating the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session, the method further includes: A notification message is sent to the UE based on information corresponding to the IMSI information about whether the UE needs to be notified of VLAN ID configuration. The notification message carries the VLAN ID in the VLAN configuration information, so that the UE completes the VLAN ID configuration locally according to the notification message.

5. The method according to any one of claims 1 to 4, characterized in that Processes uplink / downlink packets based on the VLAN configuration information associated with the PDU session, specifically: If the VLAN configuration information is associated with the PDU session, determine whether the uplink / downlink message carries the VLAN ID; If not, the VLAN ID is added to the upstream / downstream packets according to the associated VLAN configuration information. If there is, the upstream / downlink packets whose VLAN IDs are consistent with the associated VLAN configuration information are retained, and those that are inconsistent are discarded.

6. The method according to claim 5, characterized in that The uplink / downlink messages processed by the PDU session forwarding include: Query the PDU session neighbor table based on the destination MAC and VLAN ID in the uplink / downlink message with the added VLAN ID or the reserved uplink / downlink message; Forwards uplink / downlink packets with added VLAN IDs or reserved uplink / downlink packets based on the port in the neighbor table; Wherein: MAC is the media access control address.

7. A communication method based on VLAN configuration, characterized in that: Applied to a UE, the method includes: Send an access request to the core network so that: the core network sends a PDU session establishment signaling to the UPF according to the access request, the UPF establishes a PDU session for the UE according to the PDU session establishment signaling, and associates the VLAN configuration information set locally for the UE in the UPF with the PDU session; Send uplink messages to the UPF / receive downlink messages from the UPF, where the uplink / downlink messages are matched by the UPF to the PDU session, processed according to the VLAN configuration information associated with the PDU session, and forwarded according to the PDU session; Among them: VLAN is virtual local area network, UE is user equipment, UPF is user plane function, and PDU is protocol data unit.

8. The method according to claim 7, characterized in that Send an access request to the core network, including: Send an access request carrying the UE's IMSI information to the core network, so that: the core network sends a PDU session establishment signaling carrying the UE's IMSI information to the UPF according to the access request, the UPF obtains the UE's IMSI information carried in the PDU session establishment signaling, and retrieves the UPF local VLAN configuration management table according to the IMSI information, and associates the retrieved VLAN configuration information corresponding to the IMSI information with the PDU session; Among them: IMSI is the International Mobile Subscriber Identity.

9. The method according to claim 8, characterized in that After sending the access request to the core network, the method further includes: Receive a notification message from the UPF that carries the VLAN ID in the VLAN configuration information, wherein: the notification message is sent by the UPF based on the information corresponding to the IMSI information in the UPF local VLAN configuration management table whether the UE needs to be notified of the VLAN ID configuration; Complete VLAN ID configuration locally on the UE according to the notification message, including configuring the default VLAN ID, untagged VLAN ID, and one or more general VLAN IDs supported by the UE; VLAN ID is the virtual local area network tag.

10. The method according to claim 9, characterized in that Sending uplink messages to the UPF / receiving downlink messages from the UPF, specifically including: Send an uplink message carrying the VLAN ID to the UPF according to the VLAN ID configuration completed locally on the UE; or Receive a downlink message from the UPF that carries a VLAN ID that is consistent with the VLAN ID configured locally on the UE.

11. A UPF, characterized in that: The UPF includes: A session establishment module is used to establish a PDU session for the UE according to the PDU session establishment signaling, and associate the VLAN configuration information set locally for the UE in the UPF with the PDU session, wherein: the PDU session establishment signaling is sent by the core network to the UPF according to the access request from the UE; The session proceeding module is connected to the session establishing module, and is used to match the PDU session for the uplink message from the UE / downlink message directed to the UE, and process the uplink / downlink message according to the VLAN configuration information associated with the PDU session, and forward the processed uplink / downlink message according to the PDU session; Among them: UPF is user plane function, PDU is protocol data unit, UE is user equipment, and VLAN is virtual local area network.

12. A UE, characterized in that: The UE includes: A request module is configured to send an access request to the core network so that: the core network sends a PDU session establishment signaling to the UPF according to the access request, the UPF establishes a PDU session for the UE according to the PDU session establishment signaling, and associates the VLAN configuration information set locally for the UE by the UPF with the PDU session; The message module is connected to the request module and is used to send uplink messages to the UPF / receive downlink messages from the UPF, wherein: the uplink / downlink messages are matched by the UPF with the PDU session, and are processed according to the VLAN configuration information associated with the PDU session and forwarded according to the PDU session; Among them: UE is user equipment, PDU is protocol data unit, UPF is user plane function, and VLAN is virtual local area network.

13. A computer-readable storage medium, characterized in that A computer program is stored thereon, and when the computer program is executed by a processor, the communication method based on VLAN configuration as described in any one of claims 1-6 or 7-10 is implemented.

Images