Network dedicated line system, network dedicated line opening method, electronic device and storage medium

Abstract

The present disclosure provides a network dedicated line system, a network dedicated line opening method, an electronic device and a storage medium, relates to the technical field of communication, and solves the technical problem that it is difficult to quickly open a network dedicated line in the related art. The system comprises a network dedicated line opening device, a user equipment, a dedicated line access equipment, a core machine room equipment and an Internet equipment; the network dedicated line opening device is configured to send first configuration information to the dedicated line access equipment and send second configuration information to the core machine room equipment; the dedicated line access equipment is configured to receive the first configuration information from the network dedicated line opening device, and configure a VPN channel based on the first configuration information; and the core machine room equipment is configured to receive the second configuration information from the network dedicated line opening device, and configure a VPN channel based on the second configuration information. The present disclosure is used in the scene of network dedicated line opening.

Description

Technical Field

[0001] This disclosure relates to the field of communication technology, and in particular to a network leased line system, a network leased line activation method, an electronic device, and a storage medium. Background Technology

[0002] Currently, in the scenario of opening a dedicated network line, it is necessary to lay optical fiber between the operator's data center switch and the user's computer terminal equipment for network communication. Due to the complexity of the construction process of laying optical fiber, the opening cycle of dedicated network line services is long, making it difficult to quickly open a dedicated network line. Summary of the Invention

[0003] This disclosure provides a network leased line system, a network leased line activation method, an electronic device, and a storage medium. It solves the technical problem of difficulty in quickly activating network leased lines in related technologies.

[0004] To achieve the above objectives, the present disclosure adopts the following technical solution:

[0005] In a first aspect, a network leased line system is provided, comprising: a network leased line activation device, user equipment, leased line access equipment, core data center equipment, and internet equipment; the leased line access equipment is communicatively connected to the user equipment; the core data center equipment is communicatively connected to the internet equipment; the user equipment is the user equipment whose network leased line is to be activated; the core data center equipment is equipment in the core data center of the region to which the user equipment belongs; the network leased line activation device is configured to: send first configuration information to the leased line access equipment and send second configuration information to the core data center equipment; the first configuration information and the second configuration information are used to configure a Virtual Private Network (VPN) tunnel between the leased line access equipment and the core data center equipment; the leased line access equipment is configured to: receive the first configuration information from the network leased line activation device and configure the VPN tunnel based on the first configuration information; the core data center equipment is configured to: receive the second configuration information from the network leased line activation device and configure the VPN tunnel based on the second configuration information.

[0006] In conjunction with the first aspect mentioned above, in one possible implementation, the first configuration information includes configuration parameters of the first virtual machine and first parameters of the VPN tunnel, wherein the first virtual machine is a virtual machine used to open the VPN tunnel; the leased line access device is specifically configured to: deploy the first virtual machine based on the first configuration information; and configure the first parameters of the VPN tunnel on the first virtual machine.

[0007] In conjunction with the first aspect mentioned above, in one possible implementation, the first parameter of the VPN tunnel includes at least one of the following: an OVA file, the interface address of the first virtual machine, and a VPN tunnel encryption protocol; the leased line access device is specifically configured to: configure a first operating system in the first virtual machine based on the OVA file; call the first operating system to configure the interface address of the first virtual machine in the first virtual machine; and configure the VPN tunnel connection method and the VPN tunnel transmission key based on the VPN tunnel encryption protocol.

[0008] In conjunction with the first aspect mentioned above, in one possible implementation, the second configuration information includes configuration parameters for the second virtual machine and second parameters for the VPN tunnel. The second virtual machine is a virtual machine used to open the VPN tunnel. The core data center equipment is specifically configured to: deploy the second virtual machine based on the second configuration information; and configure the second parameters for the VPN tunnel on the second virtual machine.

[0009] In conjunction with the first aspect above, in one possible implementation, the second parameter of the VPN tunnel includes at least one of the following: an OVA file, the interface address of the second virtual machine, and a VPN tunnel encryption protocol; the leased line access device is specifically configured to: configure a second operating system in the second virtual machine based on the OVA file; call the second operating system to configure the interface address of the second virtual machine in the second virtual machine; and configure the VPN tunnel connection method and the VPN tunnel transmission key based on the VPN tunnel encryption protocol.

[0010] In conjunction with the first aspect mentioned above, in one possible implementation, the core data center equipment is further configured to: receive first data from an Internet device and send the first data to a leased line access device via a VPN tunnel; the leased line access device is further configured to: receive first data from a second virtual machine via a VPN tunnel and send the first data to a user device.

[0011] In conjunction with the first aspect mentioned above, in one possible implementation, the leased line access device is further configured to: receive second data from the user equipment and send the second data to the core data center equipment via a VPN tunnel; the core data center equipment is further configured to: receive the second data sent by the leased line access device via a VPN tunnel and send the second data to the Internet equipment.

[0012] In a second aspect, a method for activating a leased network line is provided, which is applied to the leased network line activation device of the leased network line system in the first aspect. The method includes: sending first configuration information to a leased line access device; the first configuration information is used to configure a virtual private network (VPN) tunnel between the leased line access device and the core computer room device; sending second configuration information to the core computer room device; the second configuration information is used to configure a VPN tunnel between the leased line access device and the core computer room device.

[0013] Thirdly, a method for activating a leased network line is provided, applied to the leased line access device of the leased network line system in the first aspect above. The method includes: receiving first configuration information from a leased network line activation device; the first configuration information is used to configure a Virtual Private Network (VPN) tunnel between the leased line access device and the core computer room device; and configuring the VPN tunnel based on the first configuration information.

[0014] In conjunction with the third aspect mentioned above, in one possible implementation, the method specifically includes: deploying a first virtual machine based on first configuration information; configuring first parameters of the VPN tunnel on the first virtual machine.

[0015] In conjunction with the third aspect mentioned above, in one possible implementation, the method specifically includes: configuring a first operating system in a first virtual machine based on an OVA file; calling the first operating system to configure the interface address of the first virtual machine in the first virtual machine; and configuring the connection method and transmission key of the VPN tunnel based on a VPN tunnel encryption protocol.

[0016] In conjunction with the third aspect mentioned above, in one possible implementation, the method further includes: receiving first data from a second virtual machine via a VPN tunnel, and sending the first data to a user device.

[0017] In conjunction with the third aspect mentioned above, in one possible implementation, the method further includes: receiving second data from the user equipment and sending the second data to the core data center equipment via a VPN tunnel.

[0018] Fourthly, a method for activating a leased network line is provided, applied to the core equipment room of the leased network line system described in the first aspect above. The method includes: receiving second configuration information from a leased network line activation device; the second configuration information is used to configure a Virtual Private Network (VPN) tunnel between the leased line access device and the core equipment room; and configuring the VPN tunnel based on the second configuration information.

[0019] In conjunction with the fourth aspect above, in one possible implementation, the method specifically includes: deploying a second virtual machine based on the second configuration information; configuring the second parameters of the VPN tunnel on the second virtual machine.

[0020] In conjunction with the fourth aspect mentioned above, in one possible implementation, the method specifically includes: configuring a second operating system in a second virtual machine based on an OVA file; calling the second operating system to configure the interface address of the second virtual machine in the second virtual machine; and configuring the connection method and transmission key of the VPN tunnel based on a VPN tunnel encryption protocol.

[0021] In conjunction with the fourth aspect above, in one possible implementation, the method further includes: receiving first data from an Internet device and sending the first data to a leased access device via a VPN tunnel.

[0022] In conjunction with the fourth aspect above, in one possible implementation, the method further includes: receiving second data sent by the leased line access device through a VPN tunnel, and sending the second data to the Internet device.

[0023] Fifthly, an electronic device is provided, which is applied to the network leased line system of the first aspect above as a network leased line activation device. The electronic device includes: a processing unit and a communication unit; the processing unit is configured to instruct the communication unit to send first configuration information to the leased line access device; the first configuration information is used to configure a Virtual Private Network (VPN) channel between the leased line access device and the core computer room device; the processing unit is further configured to instruct the communication unit to send second configuration information to the core computer room device; the second configuration information is used to configure a VPN channel between the leased line access device and the core computer room device.

[0024] In a sixth aspect, an electronic device is provided, which is a leased line access device for a network leased line system as described in the first aspect. The electronic device includes: a communication unit and a processing unit; the communication unit is configured to receive first configuration information from a network leased line activation device; and the processing unit is configured to configure a VPN tunnel based on the first configuration information.

[0025] In conjunction with the sixth aspect above, in one possible implementation, the processing unit is specifically used for: deploying a first virtual machine based on the first configuration information; and configuring the first parameters of the VPN tunnel on the first virtual machine.

[0026] In conjunction with the sixth aspect above, in one possible implementation, the processing unit is specifically used for: configuring a first operating system in a first virtual machine based on an OVA file; calling the first operating system to configure the interface address of the first virtual machine in the first virtual machine; and configuring the connection method and transmission key of the VPN tunnel based on a VPN tunnel encryption protocol.

[0027] In conjunction with the sixth aspect above, in one possible implementation, the communication unit is further configured to: receive first data from the second virtual machine via a VPN channel, and send the first data to the user equipment.

[0028] In conjunction with the sixth aspect above, in one possible implementation, the communication unit is further configured to: receive second data from the user equipment and send the second data to the core data center equipment via a VPN channel.

[0029] In a seventh aspect, an electronic device is provided, applied to the core equipment room of the network leased line system in the first aspect above. The electronic device includes: a communication unit and a processing unit; the communication unit is used to receive second configuration information from the network leased line activation device; the processing unit is used to configure a VPN tunnel based on the second configuration information.

[0030] In conjunction with the seventh aspect above, in one possible implementation, the processing unit is specifically used for: deploying a second virtual machine based on the second configuration information; and configuring the second parameters of the VPN tunnel on the second virtual machine.

[0031] In conjunction with the seventh aspect above, in one possible implementation, the processing unit is specifically used for: configuring a second operating system in a second virtual machine based on an OVA file; calling the second operating system to configure the interface address of the second virtual machine in the second virtual machine; and configuring the connection method and transmission key of the VPN tunnel based on a VPN tunnel encryption protocol.

[0032] In conjunction with the seventh aspect above, in one possible implementation, the communication unit is further configured to: receive first data from an Internet device and send the first data to a leased line access device via a VPN tunnel.

[0033] In conjunction with the seventh aspect above, in one possible implementation, the communication unit is further configured to: receive second data sent by the leased line access device through a VPN channel, and send the second data to the Internet device.

[0034] Eighthly, a computer-readable storage medium is provided, which stores instructions that, when executed by a processor of an electronic device, cause the electronic device to perform the network leased line activation method as described in the second aspect above and any possible implementation thereof.

[0035] Ninthly, a computer-readable storage medium is provided, which stores instructions that, when executed by a processor of an electronic device, cause the electronic device to perform the network leased line activation method as described in the third aspect above and any possible implementation thereof.

[0036] In a tenth aspect, a computer-readable storage medium is provided, which stores instructions that, when executed by a processor of an electronic device, cause the electronic device to perform the network leased line activation method as described in the fourth aspect above and any possible implementation thereof.

[0037] Eleventhly, a chip is provided, the chip including a processor and a communication interface, the communication interface and the processor being coupled, the processor being used to run computer programs or instructions, such as the network leased line activation method described in the second aspect above and any possible implementation thereof.

[0038] In a twelfth aspect, a chip is provided, the chip including a processor and a communication interface, the communication interface and the processor being coupled, the processor being used to run computer programs or instructions, such as the network leased line activation method described in the third aspect above and any possible implementation thereof.

[0039] In a thirteenth aspect, a chip is provided, the chip including a processor and a communication interface, the communication interface and the processor being coupled, the processor being used to run computer programs or instructions, such as the network leased line activation method described in the fourth aspect above and any possible implementation thereof.

[0040] In this disclosure, the names of the aforementioned electronic devices do not limit the devices or functional modules themselves. In actual implementation, these devices or functional modules may appear under other names. As long as the functions of each device or functional module are similar to those of this disclosure, they fall within the scope of this disclosure and its equivalents.

[0041] These or other aspects of this disclosure will become more readily apparent in the following description.

[0042] The technical solution provided in this disclosure brings at least the following beneficial effects: The network leased line system in this disclosure includes a network leased line activation device, user equipment, leased line access equipment, core equipment room equipment, and Internet equipment; wherein the user equipment is the user equipment whose network leased line is to be activated; the core equipment room equipment is the equipment in the core equipment room of the area where the user equipment is located; the leased line access equipment is connected to the user equipment via optical fiber; the core equipment room equipment is connected to the Internet equipment via optical fiber; the network leased line activation device sends first configuration information to the leased line access equipment and second configuration information to the core equipment room equipment, so that the leased line access equipment and the core equipment room equipment can configure a Virtual Private Network (VPN) channel between the leased line access equipment and the core equipment room equipment according to the first configuration information and the second configuration information; the communication connection between the leased line access equipment and the core equipment room equipment can be realized through the VPN channel; based on the above system, the user equipment can be bridged with the Internet equipment through the VPN channel and the core equipment room equipment, without laying optical fiber between the user equipment and the operator's base station equipment, thereby achieving the technical effect of quickly activating the network leased line. Attached Figure Description

[0043] To more clearly illustrate the technical solutions in the embodiments of this disclosure or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below.

[0044] Figure 1 This is a schematic diagram of a fiber optic internet access method provided in an embodiment of the present disclosure;

[0045] Figure 2 This is a schematic diagram of a wireless internet access method provided in an embodiment of the present disclosure;

[0046] Figure 3 This is a schematic diagram of a network leased line system structure provided in an embodiment of the present disclosure;

[0047] Figure 4 This is a schematic diagram of a private network access structure for multiple private network access scenarios provided in an embodiment of this disclosure;

[0048] Figure 5 A schematic diagram of a dedicated network service activation verification system provided in this embodiment of the present disclosure;

[0049] Figure 6 A schematic diagram of a network service activation verification system provided in this embodiment of the present disclosure;

[0050] Figure 7 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of this disclosure;

[0051] Figure 8 A flowchart illustrating a method for activating a dedicated network line, as provided in this embodiment of the disclosure;

[0052] Figure 9 A flowchart illustrating another method for activating a dedicated network line provided in this embodiment of the present disclosure;

[0053] Figure 10 A flowchart illustrating another method for activating a dedicated network line provided in this embodiment of the present disclosure;

[0054] Figure 11 A schematic diagram of the structure of an electronic device for activating a network leased line in a network leased line system, provided in an embodiment of this disclosure;

[0055] Figure 12 A schematic diagram of the structure of an electronic device for a leased line access device applied to a network leased line system, provided in an embodiment of this disclosure;

[0056] Figure 13 This is a schematic diagram of the structure of an electronic device used in a core computer room of a network leased line system, as provided in an embodiment of this disclosure. Detailed Implementation

[0057] The following description, in conjunction with the accompanying drawings, details a network leased line system, method, apparatus, and storage medium provided in the embodiments of this disclosure.

[0058] In this article, the term "and / or" is merely a description of the relationship between related objects, indicating that there can be three relationships. For example, A and / or B can represent three situations: A exists alone, A and B exist simultaneously, and B exists alone.

[0059] The terms “first” and “second” in this disclosure and its accompanying drawings are used to distinguish different objects or to distinguish different treatments of the same object, rather than to describe a particular order of objects.

[0060] Furthermore, the terms "comprising" and "having," and any variations thereof, used in the description of this disclosure are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the listed steps or units, but may optionally include other steps or units not listed, or may optionally include other steps or units inherent to such processes, methods, products, or apparatus. It should be noted that in the embodiments of this disclosure, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of this disclosure should not be construed as preferred or advantageous over other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0061] In the description of this disclosure, unless otherwise stated, "multiple" means two or more. A leased network line can refer to a dedicated network line or a leased network line; this disclosure does not limit the definition.

[0062] Currently, with the rapid development of communication networks, customers have increasingly higher demands for network services provided by network operators. How to quickly activate leased network lines has become a pressing technical problem. Common methods for activating leased network lines mainly include fiber optic internet access and wireless internet access. The activation cycle for leased lines using fiber optic internet access is relatively long, generally more than a month. This is mainly due to insufficient equipment in the communication operator's data center, difficulties in construction during fiber optic cable laying, and difficulties in obtaining power.

[0063] Wireless internet access replaces the last-mile fiber optic cable with point-to-point wireless network communication. This method requires installing a network access device at the client's location and at the nearest operator's network equipment room. The wireless network client then connects to the nearest operator's network equipment room. However, this solution requires paired devices to solve the last-mile network access problem, which is costly.

[0064] like Figure 1 As shown, Figure 1This is a schematic diagram of a fiber optic internet access method. Internet 101 communicates with the operator's local transmission network 102 via fiber optic cable. The operator's local transmission network 102 communicates with the operator's long-distance transmission network 103 via fiber optic cable. The operator's long-distance transmission network 103 connects to the customer's headquarters 104 via fiber optic cable. The local transmission network 102 connects to customer branches 105 and 106 via fiber optic cable, enabling the customer headquarters 104, customer branches 105 and 106 to access leased line services. The local transmission network 102 connects to the customer's branch using a leased internet line 107 via fiber optic cable, enabling the customer's branch using a leased internet line 107 to access leased internet line services.

[0065] However, since this method requires laying physical optical cables to bring them into the home, there may be construction difficulties, high construction costs, and a long commissioning period.

[0066] like Figure 2 As shown, Figure 2 This is a schematic diagram of a wireless internet access method. In this method, the operator's core network 201 is connected to the operator's community network 202 via optical fiber. A network access device 203 is installed in the operator's community network 202, and a network access device 205 is installed in the client 206. The network access device 203 and the network access device 204 can communicate wirelessly through the base station 204, thereby enabling the client 206 to access the internet and complete the activation of the dedicated internet lease line.

[0067] Although this wireless internet access method solves the problem of difficult fiber optic cable laying, the network access equipment in this method needs to be used in pairs, which is greatly affected by factors such as the space of the access room or base station and the wireless signal coverage. This results in a high cost and cannot meet the demand for rapid activation of dedicated internet lines.

[0068] To address the technical problems existing in related technologies, this disclosure provides, for example... Figure 3 The network leased line system 300 shown is used to solve the technical problem of how to quickly activate a network leased line, which will be described in detail below.

[0069] The network leased line system 300 includes: a network leased line activation device 301, a user equipment 302, a leased line access device 303, a core computer room device 304, an internet device 305, and a base station 306.

[0070] The leased line access device 303 is communicatively connected to the user equipment 302; the core computer room device 304 is communicatively connected to the Internet device 305; the user equipment 302 is the user equipment 302 of the network leased line to be opened; the core computer room device 304 is the device in the core computer room of the area to which the user equipment 302 belongs.

[0071] The network leased line activation device 301 is configured to send first configuration information to the leased line access device 303 and second configuration information to the core computer room device 304; the first configuration information and the second configuration information are used to configure a virtual private network (VPN) tunnel between the leased line access device 303 and the core computer room device 304.

[0072] The leased line access device 303 is configured to receive first configuration information from the network leased line activation device 301 and configure a VPN tunnel based on the first configuration information.

[0073] The core computer room equipment 304 is configured to receive second configuration information from the network leased line activation device 301 and configure a VPN tunnel based on the second configuration information.

[0074] The network leased line system disclosed herein offers at least the following benefits: The system includes a network leased line activation device, user equipment, leased line access equipment, core equipment room equipment, and internet equipment. The user equipment is the user equipment whose network leased line is to be activated. The core equipment room equipment is the equipment located in the core equipment room of the user equipment's region. The leased line access equipment is connected to the user equipment via optical fiber. The core equipment room equipment is connected to the internet equipment via optical fiber. The network leased line activation device sends first configuration information to the leased line access equipment and second configuration information to the core equipment room equipment, enabling the leased line access equipment and the core equipment room equipment to configure a Virtual Private Network (VPN) tunnel between them based on the first and second configuration information. This VPN tunnel facilitates communication between the leased line access equipment and the core equipment room equipment. Based on this system, the user equipment can be bridged with the internet equipment via the VPN tunnel and the core equipment room equipment, eliminating the need to lay optical fiber between the user equipment and the operator's base station equipment, thus achieving the technical effect of rapid activation of the network leased line.

[0075] In one possible implementation, the first configuration information includes configuration parameters of the first virtual machine and first parameters of the VPN tunnel. The first virtual machine is a virtual machine used to open the VPN tunnel. The leased line access device 303 is specifically configured to: deploy the first virtual machine based on the first configuration information; and configure the first parameters of the VPN tunnel on the first virtual machine.

[0076] The technical solution provided by the above embodiments can bring at least the following beneficial effects: the leased line access device 303 can deploy the first virtual machine and configure the first parameters of the VPN channel on the first virtual machine based on the configuration parameters of the first virtual machine in the first configuration information and the first parameters of the VPN channel.

[0077] In one possible implementation, the first parameter of the VPN tunnel includes at least one of the following: an OVA file, the interface address of the first virtual machine, and a VPN tunnel encryption protocol; the leased access device 303 is specifically configured to: configure a first operating system in the first virtual machine based on the OVA file; call the first operating system to configure the interface address of the first virtual machine in the first virtual machine; and configure the connection method and transmission key of the VPN tunnel based on the VPN tunnel encryption protocol.

[0078] The technical solution provided by the above embodiments can bring at least the following beneficial effects: the leased line access device 303 can deploy a first operating system in the first virtual machine based on the OVA file, and call the first operating system to configure the interface address of the first virtual machine as well as the connection method and transmission password of the VPN tunnel.

[0079] In one possible implementation, the second configuration information includes configuration parameters for the second virtual machine and second parameters for the VPN tunnel. The second virtual machine is a virtual machine used to open the VPN tunnel. The core data center device 304 is specifically configured to: deploy the second virtual machine based on the second configuration information; and configure the second parameters for the VPN tunnel on the second virtual machine.

[0080] The technical solution provided by the above embodiments can bring at least the following beneficial effects: the core computer room equipment 304 can deploy the second virtual machine and configure the second parameters of the VPN channel on the second virtual machine based on the configuration parameters of the second virtual machine in the second configuration information and the second parameters of the VPN channel.

[0081] In one possible implementation, the second parameter of the VPN tunnel includes at least one of the following: an OVA file, the interface address of the second virtual machine, and a VPN tunnel encryption protocol; the leased access device 303 is specifically configured to: configure a second operating system in the second virtual machine based on the OVA file; call the second operating system to configure the interface address of the second virtual machine in the second virtual machine; and configure the connection method and transmission key of the VPN tunnel based on the VPN tunnel encryption protocol.

[0082] The technical solution provided by the above embodiments can bring at least the following beneficial effects: the core computer room equipment 304 can deploy a second operating system in the second virtual machine based on the OVA file, and call the second operating system to configure the interface address of the second virtual machine as well as the connection method and transmission password of the VPN tunnel.

[0083] In one possible implementation, the core data center device 304 is further configured to: receive first data from the Internet device 305 and send the first data to the leased line access device 303 via a VPN tunnel; the leased line access device 303 is further configured to: receive first data from the second virtual machine via a VPN tunnel and send the first data to the user device 302.

[0084] The technical solution provided by the above embodiments can bring at least the following beneficial effects: the core computer room equipment 304 can receive the first data from the Internet equipment 305 and send the first data to the leased line access equipment 303 through the VPN channel; the corresponding leased line access equipment 303 receives the first data from the second virtual machine through the VPN channel and sends the first data to the user equipment 302, so that the data transmission from the Internet equipment 305 to the user equipment 302 can be realized through the VPN channel.

[0085] In one possible implementation, the leased line access device 303 is further configured to: receive second data from user equipment 302 and send the second data to core data room device 304 via a VPN channel; the core data room device 304 is further configured to: receive the second data sent by the leased line access device 303 via a VPN channel and send the second data to Internet device 305.

[0086] The technical solution provided by the above embodiments can bring at least the following beneficial effects: the leased line access device 303 receives the second data from the user equipment 302 and sends the second data to the core data center device 304 through the VPN channel; the core data center device 304 receives the second data sent by the leased line access device 303 through the VPN channel and sends the second data to the Internet device 305, thereby enabling data transmission from the user equipment 302 to the Internet device 305 through the VPN channel.

[0087] One possible way to achieve this is, such as Figure 4 As shown, Figure 4 This diagram illustrates the private network access structure for multiple private network access scenarios. The core data center device 402 and the internet device 401 are connected via optical fiber. Virtual machines 402a, 402b, and 402c are deployed in the core data center device 402. Virtual machines 402a, 402b, and 402c are connected to leased line access devices 403a, 403b, and 403c via VPN tunnels, thereby completing multiple private network access services.

[0088] In one possible implementation, after the Virtual Private Network (VPN) tunnel between the leased line access equipment and the core data center equipment is established, it can be configured according to, for example... Figure 5 The schematic diagram of the dedicated network service activation verification system shown confirms that the dedicated network service has been activated.

[0089] Among them, Internet device 501 is connected to core computer room device 502 via optical fiber, and core computer room device 502 is connected to leased line access device 503 via VPN tunnel; leased line access device 503 is connected to client 504 via optical fiber.

[0090] If client 504 can ping the gateway 120.**.**.1 / 30 of internet device 501 through the VPN tunnel and access the internet using the public IP address 120.**.**.1 / 30 assigned by the operator, then the leased line service network has been activated.

[0091] In one possible implementation, after the Virtual Private Network (VPN) tunnel between the leased line access equipment and the core data center equipment is established, it can be configured according to, for example... Figure 6 The schematic diagram of the network service activation verification system shown confirms that the network service has been activated.

[0092] Specifically, client 601 is connected to private network access device 602 via optical fiber; private network access device 602 is connected to core computer room device 603 via optical fiber; core computer room device 603 and private network access device 604 communicate via VPN channel; and private network access device 604 and client 605 are connected via optical fiber.

[0093] If client 601 and client 605 can ping each other through a VPN tunnel using the first public IP address 192.***.*.1 / 24 and the second public IP address 192.***.*.2 / 24 of the same network segment allocated by the operator, and client 601 and client 605 can access each other without restriction, then the leased line service network has been activated.

[0094] Figure 7 This is a schematic diagram of the structure of an electronic device 700 provided in an embodiment of the present disclosure, as shown below. Figure 7 As shown, the electronic device 700 includes at least one processor 701, a communication line 702, and at least one communication interface 707, and may also include a memory 703. The processor 701, memory 703, and communication interface 707 are connected via the communication line 702.

[0095] The processor 701 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present disclosure, such as one or more digital signal processors (DSPs), or one or more field-programmable gate arrays (FPGAs).

[0096] Communication line 702 may include a path for transmitting information between the aforementioned components.

[0097] The communication interface 707 is used to communicate with other devices or communication networks. It can use any transceiver-like device, such as Ethernet, radio access network (RAN), wireless local area network (WLAN), etc.

[0098] The memory 703 may be a read-only memory (ROM) or other type of static storage device capable of storing static information and instructions, random access memory (RAM) or other type of dynamic storage device capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital universal optical discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium capable of including or storing desired program code in the form of instructions or data structures and accessible by a computer, but not limited thereto.

[0099] In one possible design, the memory 703 can exist independently of the processor 701, meaning the memory 703 can be an external memory of the processor 701. In this case, the memory 703 can be connected to the processor 701 via a communication line 702 to store execution instructions or application code, and its execution is controlled by the processor 701 to implement the network leased line activation method provided in the following embodiments of this disclosure. In another possible design, the memory 703 can also be integrated with the processor 701, meaning the memory 703 can be an internal memory of the processor 701. For example, the memory 703 can be a cache, used to temporarily store some data and instruction information.

[0100] As one possible implementation, processor 701 may include one or more CPUs, for example Figure 7 CPU0 and CPU1 in the example. Alternatively, the electronic device 700 may include multiple processors, such as... Figure 7 The processors 701 and 707 are included. Alternatively, the electronic device 700 may also include an output device 705 and an input device 707.

[0101] like Figure 8 As shown, Figure 8 This disclosure provides a method for activating a leased network line, which is applied to the aforementioned leased network line system. The method includes the following steps S801-S804, which will be described in detail below.

[0102] S801, the network leased line activation device sends the first configuration information to the leased line access device.

[0103] The first configuration information is used to configure a Virtual Private Network (VPN) tunnel between the leased line access equipment and the core data center equipment.

[0104] Understandably, setting up a VPN tunnel between the leased access device and the core data center device requires configuring the VPN tunnel on both ends of the leased access device and the core data center device according to the corresponding configuration information.

[0105] S802. The leased line access device configures the VPN tunnel based on the first configuration information.

[0106] In one possible implementation, the leased line access device can configure the VPN tunnel between the leased line access device and the core data center equipment according to the first configuration information.

[0107] S803, the network leased line activation device sends the second configuration information to the core computer room equipment.

[0108] The second configuration information is used to configure a Virtual Private Network (VPN) tunnel between the leased line access equipment and the core data center equipment.

[0109] Understandably, setting up a VPN tunnel between the leased access device and the core data center device requires configuring the VPN tunnel on both ends of the leased access device and the core data center device according to the corresponding configuration information.

[0110] S804, the core computer room equipment configures a VPN tunnel based on the second configuration information.

[0111] In one possible implementation, the core data center equipment can configure the core data center equipment side of the VPN tunnel between the leased line access equipment and the core data center equipment based on the second configuration information.

[0112] The technical solutions provided by the above embodiments can bring at least the following beneficial effects: the network leased line activation device sends first configuration information to the leased line access device, so that the leased line access device can configure the leased line access device end of the VPN channel between the leased line access device and the core computer room device according to the first configuration information; the network leased line activation device sends second configuration information to the core computer room device, so that the core computer room device can configure a virtual private network (VPN) channel between the leased line access device and the core computer room device according to the second configuration information.

[0113] One possible way to achieve this is by combining Figure 8 ,like Figure 9 As shown, the aforementioned leased line access equipment configures the VPN tunnel based on the first configuration information, and the core data center equipment configures the VPN tunnel based on the second configuration information. This process can be specifically implemented through the following S901-S910, which are described in detail below:

[0114] S901, the leased line access device deploys the first virtual machine based on the first configuration information.

[0115] In one possible implementation, the leased line access device can deploy a first virtual machine on the leased line access device according to the first configuration information, and the first virtual machine is used to configure the VPN tunnel.

[0116] S902, the leased line access device configures the first parameter of the VPN tunnel in the first virtual machine.

[0117] The first parameter of the VPN tunnel includes at least one of the following: the OVA file, the interface address of the first virtual machine, and the VPN tunnel encryption protocol.

[0118] S903, the leased line access device is based on the OVA file and the first operating system is configured in the first virtual machine.

[0119] For example, the leased line access device deploys the PFSENSE system in the first virtual machine based on the OVA file. The PFSENSE system is used to configure the VPN tunnel.

[0120] S904, the leased line access device calls the first operating system and configures the interface address of the first virtual machine in the first virtual machine.

[0121] In one possible implementation, the interface address of the first virtual machine corresponds to the interface address of the second virtual machine, and the devices connected at both ends of the VPN tunnel can be determined based on the interface addresses of the first and second virtual machines.

[0122] For example, the leased line access device calls the PFSENSE system to configure the interface address of the first virtual machine.

[0123] The S905 leased line access device is based on a VPN tunnel encryption protocol, and configures the VPN tunnel connection method and VPN tunnel transmission key.

[0124] In one possible implementation, the leased line access device can configure the VPN tunnel according to a preset script, and enable the VPN tunnel according to a preset script.

[0125] For example, a VPN tunnel can be configured using the following preset script.

[0126] <openvpn>

[0127] <openvpn-server>

[0128] <vpnid> 1< / vpnid>

[0129] <mode> p2p_shared_key< / mode>

[0130] <protocol> UDP4< / protocol>

[0131] <dev_mode>tap< / dev_mode>

[0132] <interface> wan< / interface>

[0133] <ipaddr>< / ipaddr>

[0134] <local_port>1194< / local_port>

[0135] <description>< / description>

[0136] <custom_options>< / custom_options>

[0137] <shared_key>*******< / shared_key>

[0138] <data_ciphers_fallback>AES-256-CBC< / data_ciphers_fallback>

[0139] <digest> SHA256< / digest>

[0140] <data_ciphers>AES-256-GCM,AES-128-GCM< / data_ciphers>

[0141] <ncp_enable>enabled< / ncp_enable>

[0142] <ping_method>keepalive< / ping_method>

[0143] <keepalive_interval>10< / keepalive_interval>

[0144] <keepalive_timeout>60< / keepalive_timeout>

[0145] <ping_seconds>10< / ping_seconds>

[0146] <ping_push>< / ping_push>

[0147] <ping_action>ping_restart< / ping_action>

[0148] <ping_action_seconds>60< / ping_action_seconds>

[0149] <ping_action_push>< / ping_action_push>

[0150] <inactive_seconds>0< / inactive_seconds>

[0151]

[0152] < / openvpn>

[0153] Here, ******* is the VPN tunnel key, which can be configured accordingly based on the specific key.

[0154] For example, a VPN tunnel can be enabled using the following preset script.

[0155] <opt3>

[0156] <descr> <ovpns1>< / ovpns1> < / descr>

[0157] <if> ovpns1< / if>

[0158] <enable>< / enable>

[0159] <spoofmac>< / spoofmac>

[0160] < / opt3>

[0161] <opt4>

[0162] <descr> <bridge>< / bridge> < / descr>

[0163] <if> bridge0< / if>

[0164] <enable>< / enable>

[0165] <spoofmac>< / spoofmac>

[0166] < / opt4>

[0167] <bridged>

[0168] <members> ,opt2,opt3< / members>

[0169] <descr>< / descr>

[0170] <bridgeif> bridge0< / bridgeif>

[0171] < / bridged>

[0172] S906, the core data center equipment deploys a second virtual machine based on the second configuration information.

[0173] In one possible implementation, the core data center equipment can deploy a second virtual machine on the core data center equipment based on the second configuration information. This second virtual machine is used to configure a VPN tunnel.

[0174] S907, the core data center equipment configures the second parameter of the VPN tunnel on the second virtual machine.

[0175] The second parameter of the VPN tunnel includes at least one of the following: the OVA file, the interface address of the second virtual machine, and the VPN tunnel encryption protocol.

[0176] The S908 and core computer room equipment are configured with a second operating system in a second virtual machine based on the OVA file.

[0177] For example, the core data center equipment deploys the PFSENSE system in a second virtual machine based on the OVA file. The PFSENSE system is used to configure the VPN tunnel.

[0178] S909, the core computer room equipment calls the second operating system and configures the interface address of the second virtual machine in the second virtual machine.

[0179] In one possible implementation, the interface address of the first virtual machine corresponds to the interface address of the second virtual machine, and the devices connected at both ends of the VPN tunnel can be determined based on the interface addresses of the first and second virtual machines.

[0180] For example, the core data center equipment calls the PFSENSE system to configure the interface address of the second virtual machine.

[0181] The S910 and core data center equipment are based on the VPN tunnel encryption protocol, and the VPN tunnel connection method and VPN tunnel transmission key are configured.

[0182] In one possible implementation, the core data center equipment can configure and enable the VPN tunnel according to a preset script.

[0183] The technical solutions provided by the above embodiments can bring at least the following beneficial effects: The network leased line activation device sends first configuration information to the leased line access device, so that the leased line access device can deploy a first virtual machine on the leased line access device end of the VPN channel between the leased line access device and the core data center device according to the first configuration information, configure the first parameters of the VPN channel on the first virtual machine, configure a first operating system in the first virtual machine based on the OVA file, call the first operating system, configure the interface address of the first virtual machine in the first virtual machine, and configure the connection method and transmission key of the VPN channel based on the VPN channel encryption protocol; thereby completing the VPN channel configuration on the access device end. The network leased line activation device sends second configuration information to the core data center device, so that the core data center device can deploy a second virtual machine on the core data center device end of the VPN channel between the leased line access device and the core data center device according to the second configuration information, configure the second parameters of the VPN channel on the second virtual machine, configure a second operating system in the second virtual machine based on the OVA file, call the second operating system, configure the interface address of the second virtual machine in the second virtual machine, and configure the connection method and transmission key of the VPN channel based on the VPN channel encryption protocol; thereby completing the VPN channel configuration on the core data center device end.

[0184] One possible way to achieve this is by combining Figure 8 ,like Figure 10 As shown, after the leased line access equipment configures the VPN tunnel based on the first configuration information and the core data center equipment configures the VPN tunnel based on the second configuration information, the method also includes S1001-S1006, which are described in detail below:

[0185] S1001, the core computer room equipment receives the first data from the Internet device.

[0186] In one possible implementation, the first data is network data from the Internet.

[0187] S1002, The core computer room equipment sends the first data to the leased line access equipment through the VPN tunnel.

[0188] In one possible implementation, after receiving the first data, the core data center equipment can send the first data to the dedicated line access equipment via a VPN tunnel.

[0189] S1003, The leased line access device sends the first data to the user equipment.

[0190] In one possible implementation, after receiving the first data, the leased line access equipment can send the first data to the user equipment through the optical cable of the customer's room, thereby realizing the communication process of sending Internet network data to the user end.

[0191] S1004, The leased line access equipment receives the second data from the user equipment.

[0192] In one possible implementation, the second data is network data output by the user equipment to the Internet, and the user equipment can send the second data to the leased access equipment through the optical fiber cable of the customer's room.

[0193] S1005, the leased line access equipment sends the second data to the core computer room equipment through the VPN tunnel.

[0194] In one possible implementation, after receiving the second data, the leased line access device can send the second data to the core data center equipment via a VPN tunnel.

[0195] S1006, Core computer room equipment sends second data to Internet equipment.

[0196] In one possible implementation, after receiving the second data, the core computer room can send the second data to the Internet device via the optical fiber cable of the core computer room, thereby realizing the process of sending network data output by the user device to the Internet to the Internet communication process.

[0197] The technical solution provided by the above embodiments can bring at least the following beneficial effects: The core data center equipment can receive first data from the Internet device and send the first data to the dedicated line access device through a VPN channel; the corresponding dedicated line access device receives first data from the second virtual machine through the VPN channel and sends the first data to the user device, thereby enabling data transmission from the Internet device to the user device through the VPN channel. The dedicated line access device receives second data from the user device and sends the second data to the core data center equipment through the VPN channel; the core data center equipment receives the second data sent by the dedicated line access device through the VPN channel and sends the second data to the Internet device, thereby enabling data transmission from the user device to the Internet device through the VPN channel. That is, communication between the Internet and the user device is possible, realizing the activation of the dedicated network line.

[0198] The above provides a detailed description of the network leased line activation method involved in the embodiments of this disclosure.

[0199] As can be seen, the above mainly describes the technical solutions provided by the embodiments of this disclosure from a methodological perspective. To achieve the above functions, it includes corresponding hardware structures and / or software modules for executing each function. Those skilled in the art should readily recognize that, in conjunction with the modules and algorithm steps of the various examples described in the embodiments disclosed herein, the embodiments of this disclosure can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this disclosure.

[0200] This disclosure embodiment can divide the network leased line activation device into functional modules according to the above method example. For example, each function can be divided into a separate functional module, or two or more functions can be integrated into one processing module. The integrated module can be implemented in hardware or as a software functional module. Optionally, the module division in this disclosure embodiment is illustrative and only represents one logical functional division; other division methods may be used in actual implementation.

[0201] like Figure 11 As shown, Figure 11 This is a schematic diagram of the structure of an electronic device 1100 for a network leased line activation device applied to a network leased line system, provided in an embodiment of this disclosure.

[0202] The electronic device 1100 includes a communication unit 1101 and a processing unit 1102. The processing unit 1102 is configured to instruct the communication unit 1101 to send first configuration information to the leased line access device. The first configuration information is used to configure a Virtual Private Network (VPN) channel between the leased line access device and the core data center device. The processing unit 1102 is also configured to instruct the communication unit 1101 to send second configuration information to the core data center device. The second configuration information is used to configure a VPN channel between the leased line access device and the core data center device.

[0203] like Figure 12 As shown, Figure 12 This is a schematic diagram of the structure of an electronic device 1200 for a leased line access device in a network leased line system, provided in an embodiment of this disclosure.

[0204] The electronic device 1200 includes: a communication unit 1201 and a processing unit 1202; the communication unit 1201 is used to receive first configuration information from the electronic device; the processing unit 1202 is used to configure a VPN channel based on the first configuration information.

[0205] In one possible implementation, the processing unit 1202 is specifically used for: deploying a first virtual machine based on first configuration information; and configuring first parameters of the VPN tunnel on the first virtual machine.

[0206] In one possible implementation, the processing unit 1202 is specifically used for: configuring a first operating system in a first virtual machine based on an OVA file; calling the first operating system to configure the interface address of the first virtual machine in the first virtual machine; and configuring the connection method and transmission key of the VPN tunnel based on a VPN tunnel encryption protocol.

[0207] In one possible implementation, the communication unit 1201 is further configured to: receive first data from the second virtual machine via a VPN channel and send the first data to the user equipment.

[0208] In one possible implementation, the communication unit 1201 is further configured to: receive second data from the user equipment and send the second data to the core data center equipment via a VPN channel.

[0209] like Figure 13 As shown, Figure 13 This is a schematic diagram of the structure of an electronic device 1300 for use in a core computer room of a network leased line system, as provided in an embodiment of this disclosure.

[0210] The electronic device 1300 includes: a communication unit 1301 and a processing unit 1302; the communication unit 1301 is used to receive second configuration information from the electronic device; the processing unit 1302 is used to configure a VPN channel based on the second configuration information.

[0211] In one possible implementation, the processing unit 1302 is specifically used to: deploy a second virtual machine based on the second configuration information; and configure the second parameters of the VPN tunnel on the second virtual machine.

[0212] In one possible implementation, the processing unit 1302 is specifically used for: configuring a second operating system in a second virtual machine based on an OVA file; calling the second operating system to configure the interface address of the second virtual machine in the second virtual machine; and configuring the connection method and transmission key of the VPN tunnel based on a VPN tunnel encryption protocol.

[0213] In one possible implementation, the communication unit 1301 is also configured to: receive first data from an Internet device and send the first data to a leased access device via a VPN tunnel.

[0214] In one possible implementation, the communication unit 1301 is also used to: receive second data sent by the leased line access device through a VPN channel, and send the second data to the Internet device.

[0215] This disclosure also provides an electronic device, which includes a processor and a memory; wherein the memory is used to store computer execution instructions, and when the electronic device is running, the processor executes the computer execution instructions stored in the memory to cause the electronic device to execute the network leased line activation method described in this disclosure.

[0216] Embodiments of this disclosure provide a computer program product containing instructions that, when executed on a computer, cause the computer to perform the network leased line activation method described in the above method embodiments.

[0217] Embodiments of this disclosure provide a computer program product containing instructions that, when executed on a computer, cause the computer to perform the network leased line activation method described in the above method embodiments.

[0218] Embodiments of this disclosure provide a chip including a processor and a communication interface, the communication interface and the processor being coupled together, the processor being used to run computer programs or instructions to implement the network leased line activation method as described in the above method embodiments.

[0219] The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), registers, hard disks, optical fibers, compact disc read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing, or any other form of computer-readable storage medium in the art. An exemplary storage medium is coupled to a processor, enabling the processor to read information from and write information to the storage medium. Of course, the storage medium may also be a component of the processor. The processor and the storage medium may reside in an application-specific integrated circuit (ASIC). In this embodiment of the disclosure, the computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0220] Since the apparatus, devices, computer-readable storage media, and computer program products in the embodiments of this disclosure can be applied to the above methods, the technical effects they can achieve can also be referred to the above method embodiments. The embodiments of this disclosure will not be repeated here.

[0221] The above descriptions are merely specific embodiments of this disclosure, but the scope of protection of this disclosure is not limited thereto. Any variations or substitutions within the technical scope disclosed in this disclosure should be included within the scope of protection of this disclosure. Therefore, the scope of protection of this disclosure should be determined by the scope of the claims.

Claims

1. A network leased line system, characterized in that, include: Network leased line activation equipment, user equipment, leased line access equipment, core computer room equipment, and Internet equipment; The leased line access equipment is communicatively connected to the user equipment; the core computer room equipment is communicatively connected to the Internet equipment; the user equipment is the user equipment of the network leased line to be activated; The core data center equipment refers to the equipment located in the core data center of the region to which the user equipment belongs. The network leased line activation device is configured to: send first configuration information to the leased line access device and send second configuration information to the core data center device; the first configuration information and the second configuration information are used to configure a Virtual Private Network (VPN) tunnel between the leased line access device and the core data center device; the first configuration information includes configuration parameters of a first virtual machine and first parameters of the VPN tunnel, wherein the first virtual machine is a virtual machine used to activate the VPN tunnel; the first parameters of the VPN tunnel include at least one of the following: an OVA file, the interface address of the first virtual machine, and a VPN tunnel encryption protocol; the second configuration information includes configuration parameters of a second virtual machine and second parameters of the VPN tunnel, wherein the second virtual machine is a virtual machine used to activate the VPN tunnel; the second parameters of the VPN tunnel include at least one of the following: an OVA file, the interface address of the second virtual machine, and a VPN tunnel encryption protocol; The dedicated line access device is specifically configured to: deploy the first virtual machine based on the first configuration information; and configure the first parameter of the VPN tunnel in the first virtual machine. Based on the OVA file, a first operating system is configured in the first virtual machine; the first operating system is the PFSENSE system deployed by the leased line access device in the first virtual machine based on the OVA file. The first operating system is invoked, and the interface address of the first virtual machine is configured in the first virtual machine; the interface address of the first virtual machine corresponds to the interface address of the second virtual machine; based on the VPN tunnel encryption protocol, the connection method of the VPN tunnel and the transmission key of the VPN tunnel are configured; The core data center equipment is specifically configured to: deploy the second virtual machine based on the second configuration information; and configure the second parameters of the VPN tunnel on the second virtual machine. Based on the OVA file, a second operating system is configured in the second virtual machine; the second operating system is the PFSENSE system deployed by the core computer room equipment in the second virtual machine based on the OVA file. The second operating system is invoked, and the interface address of the second virtual machine is configured in the second virtual machine; based on the VPN tunnel encryption protocol, the connection method and transmission key of the VPN tunnel are configured; The core data center equipment is also configured to: receive first data from the Internet device and send the first data to the dedicated line access device through a VPN channel; receive second data sent by the dedicated line access device through the VPN channel and send the second data to the Internet device. The leased line access device is further configured to: receive the first data from the second virtual machine through the VPN channel, send the first data to the user equipment, receive the second data from the user equipment, and send the second data to the core data center device through the VPN channel.

2. A method for activating a network leased line, applied to the network leased line activation device of the network leased line system described in claim 1, characterized in that, include: Send the first configuration information to the leased line access equipment; The first configuration information is used to configure a VPN tunnel between the leased line access device and the core data center device; The first configuration information includes configuration parameters of the first virtual machine and first parameters of the VPN channel. The first virtual machine is a virtual machine used to open the VPN channel. The first parameters of the VPN channel include at least one of the following: OVA file, interface address of the first virtual machine, and VPN channel encryption protocol. The leased line access device is used to receive the first data from the second virtual machine through the VPN channel, send the first data to the user equipment, receive the second data from the user equipment, and send the second data to the core data center equipment through the VPN channel. The system sends second configuration information to the core data center equipment. This second configuration information is used to configure a VPN tunnel between the leased line access device and the core data center equipment. The second configuration information includes configuration parameters for a second virtual machine and second parameters for the VPN tunnel. The second virtual machine is a virtual machine used to open the VPN tunnel. The second parameters for the VPN tunnel include at least one of the following: an OVA file, the interface address of the second virtual machine, and a VPN tunnel encryption protocol. The core data center equipment receives first data from an internet device and sends the first data to the leased line access device via the VPN tunnel. It also receives second data sent by the leased line access device via the VPN tunnel and sends the second data to the internet device.

3. A method for activating a leased network line, applied to the leased line access equipment of the leased network line system of claim 1, characterized in that, include: The system receives the first configuration information from the network leased line activation device; the first configuration information is used to configure a VPN tunnel between the leased line access device and the core computer room device; the first configuration information includes configuration parameters of a first virtual machine and first parameters of the VPN tunnel, wherein the first virtual machine is a virtual machine used to activate the VPN tunnel; the first parameters of the VPN tunnel include at least one of the following: OVA file, interface address of the first virtual machine, and VPN tunnel encryption protocol; Based on the first configuration information, deploy the first virtual machine; configure the first parameter of the VPN tunnel on the first virtual machine; Based on the OVA file, a first operating system is configured in the first virtual machine; the first operating system is the PFSENSE system deployed by the leased line access device in the first virtual machine based on the OVA file. The first operating system is invoked, and the interface address of the first virtual machine is configured in the first virtual machine; the interface address of the first virtual machine corresponds to the interface address of the second virtual machine; based on the VPN tunnel encryption protocol, the connection method and transmission key of the VPN tunnel are configured; the leased line access device is used to receive first data from the second virtual machine through the VPN tunnel, send the first data to the user equipment, receive second data from the user equipment, and send the second data to the core data center equipment through the VPN tunnel.

4. A method for activating a leased network line, applied to the core computer room equipment of the leased network line system described in claim 1, characterized in that, include: The system receives the second configuration information from the network leased line activation device; the second configuration information is used to configure a VPN tunnel between the leased line access device and the core computer room device; the second configuration information includes configuration parameters of the second virtual machine and second parameters of the VPN tunnel, wherein the second virtual machine is a virtual machine used to activate the VPN tunnel; the second parameters of the VPN tunnel include at least one of the following: OVA file, interface address of the second virtual machine, and VPN tunnel encryption protocol; Based on the second configuration information, deploy the second virtual machine; configure the second parameter of the VPN tunnel on the second virtual machine; Based on the OVA file, a second operating system is configured in the second virtual machine; the second operating system is the PFSENSE system deployed by the core computer room equipment in the second virtual machine based on the OVA file. The second operating system is invoked, and the interface address of the second virtual machine is configured in the second virtual machine; based on the VPN tunnel encryption protocol, the connection method and transmission key of the VPN tunnel are configured; the core data center equipment is used to receive first data from the Internet device, and send the first data to the leased line access device through the VPN tunnel, receive second data sent by the leased line access device through the VPN tunnel, and send the second data to the Internet device.

5. An electronic device, applied to the network leased line activation device as described in claim 1, characterized in that, include: Communication unit and processing unit; The processing unit is used to instruct the communication unit to send first configuration information to the leased line access device; The first configuration information is used to configure a VPN tunnel between the leased line access device and the core data center device. The first configuration information includes configuration parameters of a first virtual machine and first parameters of the VPN tunnel. The first virtual machine is a virtual machine used to open the VPN tunnel. The first parameters of the VPN tunnel include at least one of the following: an OVA file, the interface address of the first virtual machine, and a VPN tunnel encryption protocol. The leased line access device is configured to receive the first data from the second virtual machine through the VPN tunnel, send the first data to the user equipment, receive the second data from the user equipment, and send the second data to the core data center device through the VPN tunnel. The processing unit is further configured to instruct the communication unit to send second configuration information to the core data center equipment; the second configuration information is used to configure a VPN tunnel between the leased line access equipment and the core data center equipment; the second configuration information includes configuration parameters of a second virtual machine and second parameters of the VPN tunnel, wherein the second virtual machine is a virtual machine used to open the VPN tunnel; the second parameters of the VPN tunnel include at least one of the following: an OVA file, the interface address of the second virtual machine, and a VPN tunnel encryption protocol; the core data center equipment is configured to receive first data from the Internet device, send the first data to the leased line access equipment through the VPN tunnel, receive second data sent by the leased line access equipment through the VPN tunnel, and send the second data to the Internet device.

6. An electronic device, applied to the leased line access device of claim 1, characterized in that, include: Communication unit and processing unit; The communication unit is configured to receive the first configuration information from the network leased line activation device; the first configuration information includes configuration parameters of the first virtual machine and first parameters of the VPN channel, wherein the first virtual machine is a virtual machine used to activate the VPN channel; the first parameters of the VPN channel include at least one of the following: OVA file, interface address of the first virtual machine, and VPN channel encryption protocol; The communication unit is configured to receive first data from the second virtual machine through the VPN channel, send the first data to the user equipment, receive second data from the user equipment, and send the second data to the core data center equipment through the VPN channel. The processing unit is configured to deploy the first virtual machine based on the first configuration information; Configure the first parameter of the VPN tunnel in the first virtual machine; Based on the OVA file, a first operating system is configured in the first virtual machine; the first operating system is the PFSENSE system deployed by the leased line access device in the first virtual machine based on the OVA file. The first operating system is invoked, and the interface address of the first virtual machine is configured in the first virtual machine; the interface address of the first virtual machine corresponds to the interface address of the second virtual machine; based on the VPN tunnel encryption protocol, the connection method of the VPN tunnel and the transmission key of the VPN tunnel are configured.

7. An electronic device, applied to the core data center equipment as described in claim 1, characterized in that, include: Communication unit and processing unit; The communication unit is configured to receive the second configuration information from the network leased line activation device; the second configuration information includes configuration parameters of the second virtual machine and second parameters of the VPN channel, wherein the second virtual machine is a virtual machine used to activate the VPN channel; the second parameters of the VPN channel include at least one of the following: OVA file, interface address of the second virtual machine, and VPN channel encryption protocol; The communication unit is configured to receive first data from an Internet device, send the first data to the leased line access device via a VPN channel, receive second data sent by the leased line access device via the VPN channel, and send the second data to the Internet device. The processing unit is configured to deploy the second virtual machine based on the second configuration information; Configure the second parameter of the VPN tunnel in the second virtual machine; Based on the OVA file, a second operating system is configured in the second virtual machine; the second operating system is the PFSENSE system deployed by the core computer room equipment in the second virtual machine based on the OVA file. The second operating system is invoked, and the interface address of the second virtual machine is configured in the second virtual machine; based on the VPN tunnel encryption protocol, the connection method of the VPN tunnel and the transmission key of the VPN tunnel are configured.

8. An electronic device, characterized in that, include: A processor and a memory; wherein the memory is used to store computer execution instructions, and when the electronic device is running, the processor executes the computer execution instructions stored in the memory to cause the electronic device to perform the network leased line activation method according to any one of claims 2-4.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores instructions that, when executed by a processor of an electronic device, cause the electronic device to perform the network leased line activation method according to any one of claims 2-4.

Images