Data forwarding method and system, electronic equipment and storage medium
By dividing virtual LANs in wireless LANs and using the interface and network bridge technology of wireless access points, the problem of waste of resources of multiple wireless LANs is solved, and efficient resource utilization and simplified access process are achieved.
Patent Information
- Application Number
- CN202411053011.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-02
- Publication Date
- 2025-03-21
AI Technical Summary
When meeting the network security and resource allocation needs of multiple users, the prior art requires setting up multiple wireless LANs, resulting in no terminal access in some wireless LANs and wasting network resources.
The wireless LAN is pre-divided into multiple virtual LANs through the server, the terminal accesses the wireless LAN and sets up multiple accounts, and the wireless access point creates interfaces and network bridges to realize that service data is sent from the terminal through interfaces and bridges to the virtual LAN to which the account belongs.
The wireless network access process is simplified, network resources are reduced, and tedious steps to set terminal access rights for each virtual LAN are avoided, making full use of network resources.
Smart Images
Figure CN119676801A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of data forwarding, and in particular to a data forwarding method, system, electronic device and storage medium. Background Art
[0002] With the popularity of smart phones, tablets, laptops and other mobile Internet devices, the demand for wireless network connections is growing. SSID (Service Set Identifier) is the "business card" of wireless networks. It not only provides users with an easily recognizable network logo, but also plays a security role - the SSID of a publicly displayed wireless LAN can be seen by everyone, while a wireless LAN with a hidden SSID requires the terminal device to know the SSID in advance before trying to connect, which increases the security of the network to a certain extent.
[0003] In specific environments, such as enterprises, schools, or commercial places, network administrators may implement policies that only allow certain types of terminals to access designated wireless LANs. This can be achieved through MAC address filtering, certificate verification, or network policies based on device type and user identity. For example, educational institutions may only allow teachers and students' devices to access education-specific wireless LANs, while commercial places may only open specific wireless LANs for business devices such as POS machines to ensure network security and reasonable resource allocation. For network security, while satisfying the needs of various users, it is necessary to set up multiple SSIDs to complete the limitation of wireless LAN permissions, such as temporary visitor SSID, student SSID, teacher SSID, or teaching SSID.
[0004] With such configuration, there are multiple wireless local area networks in the current network, but some of the wireless local area networks do not have terminal access, resulting in a waste of network resources.
[0005] Application Contents
[0006] In view of this, the purpose of the present application is to provide a data forwarding method, system, electronic device and storage medium to solve the above-mentioned problems and achieve the purpose of saving network resources.
[0007] In a first aspect, an embodiment of the present application provides a data forwarding method, wherein a server pre-divides a wireless local area network into multiple virtual local area networks, a terminal accesses the wireless local area network, and the terminal is provided with multiple accounts, and the method includes:
[0008] The wireless access point receives the authentication success information sent by the server, and sends the authentication success information to the terminal; wherein the authentication success information includes the identifier of the virtual local area network to which the account belongs, the MAC address of the terminal, and the identifier of the wireless local area network to which the terminal accesses;
[0009] The wireless access point receives a first service message sent by the terminal, where the first service message carries the authentication success information and service data;
[0010] The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal;
[0011] The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs;
[0012] The wireless access point creates a network bridge between the first interface and the second interface;
[0013] The wireless access point sends the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address.
[0014] Preferably, the wireless access point comprises: a Radius module, a protocol stack module and a Manage module; the method further comprises:
[0015] The Manage module receives the authentication success information sent by the Radius module;
[0016] The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal, including:
[0017] The Manage module creates the first interface according to the identifier of the wireless local area network accessed by the terminal;
[0018] The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs, including:
[0019] The Manage module creates the second interface according to the identifier of the virtual local area network to which the account belongs;
[0020] The wireless access point creates a network bridge between the first interface and the second interface, including:
[0021] The Manage module creates the network bridge between the first interface and the second interface;
[0022] The wireless access point sends the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address, including:
[0023] The Manage module controls the protocol stack to send the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address.
[0024] Preferably, the method further comprises:
[0025] The wireless access point sets a discard rule according to the MAC address of the terminal, wherein the discard rule is used to instruct the wireless access point to discard the second service message sent by the terminal;
[0026] The wireless access point sets a redirection rule according to the identifier of the virtual local area network, the MAC address of the terminal, and the identifier of the wireless local area network accessed by the terminal, wherein the redirection rule is used to instruct the wireless access point to forward the first service message sent by the terminal to the virtual local area network to which the account belongs;
[0027] The wireless access point deletes the discard rule.
[0028] Preferably, the method further comprises:
[0029] The wireless access point receives the authentication information sent by the terminal; wherein the authentication information includes: the user name of the account and the password of the virtual local area network;
[0030] The wireless access point sends the authentication information to the server for authentication.
[0031] Preferably, the method further comprises:
[0032] Receiving, by the wireless access point, the MAC address of the terminal sent by the terminal;
[0033] The wireless access point verifies the MAC address to obtain a verification result;
[0034] If the verification result is that the terminal corresponding to the MAC address has passed the SSID authentication, the wireless access point sends association success information to the terminal.
[0035] Preferably, the method further comprises:
[0036] The wireless access point broadcasts the identifier of the wireless local area network to the current network;
[0037] If the terminal finds the identifier of the wireless local area network, the wireless access point receives the SSID authentication information sent by the terminal; wherein the SSID authentication information includes the identifier of the wireless local area network and the password of the wireless local area network;
[0038] The wireless access point performs the SSID authentication on the SSID authentication information;
[0039] If the SSID authentication is successful, the wireless access point sends SSID authentication success information to the terminal.
[0040] Preferably, after the wireless access point receives the authentication success information sent by the server, the method further includes:
[0041] If the identifier of the virtual local area network to which the account belongs carried in the authentication success information does not match the preset identifier set, the wireless access point generates prompt information;
[0042] The wireless access point sends the prompt information to the terminal, so that the terminal prompts the user that the virtual local area network to which the account belongs does not belong to the wireless local area network.
[0043] The data forwarding method provided by this application brings the following beneficial effects:
[0044] The present application provides a data forwarding method, in which a wireless access point sends service data from a terminal to a virtual local area network to which an account belongs through a first interface, a network bridge, and a second interface in sequence. The terminal only needs to be connected to a wireless local area network, that is, only one SSID needs to be set, and the service data of the account can be sent to the virtual local area network to which the account belongs, which simplifies the cumbersome wireless network access process and reduces the waste of network resources. Compared with the prior art, there is no need to set the terminal access rights for each virtual local area network. This method avoids setting up multiple wireless local area networks, but there is a situation where some wireless local area networks have no terminal access, and makes full use of network resources.
[0045] In a second aspect, the present application further provides a data forwarding system, wherein the server pre-divides the wireless local area network into a plurality of virtual local area networks, the terminal accesses the wireless local area network, the terminal is provided with a plurality of accounts, and the method comprises:
[0046] The wireless access point receives the authentication success information sent by the server, and sends the authentication success information to the terminal; wherein the authentication success information includes the identifier of the virtual local area network to which the account belongs, the MAC address of the terminal, and the identifier of the wireless local area network to which the terminal accesses;
[0047] The wireless access point receives a first service message sent by the terminal, where the first service message carries the authentication success information and service data;
[0048] The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal;
[0049] The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs;
[0050] The wireless access point creates a network bridge between the first interface and the second interface;
[0051] The wireless access point sends the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address.
[0052] The data forwarding system provided in the embodiment of the present application has the same technical features as the data forwarding method provided in the above embodiment, so it can also solve the same technical problems and achieve the same technical effects.
[0053] In a third aspect, the present application also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the beneficial effects of any of the methods described above are achieved, which will not be repeated here.
[0054] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the beneficial effects of any of the methods described above are achieved, which will not be repeated here.
[0055] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description, or understood by practicing the present application. The purpose and other advantages of the present application are realized and obtained by the structures particularly pointed out in the description and the drawings.
[0056] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS
[0057] In order to more clearly illustrate the specific implementation methods of the present application or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.
[0058] Figure 1 A schematic diagram of a data forwarding method flow provided in an embodiment of the present application;
[0059] Figure 2 A schematic diagram of a data forwarding flow of a wireless access point in a data forwarding method provided in an embodiment of the present application;
[0060] Figure 3 A schematic diagram of a data forwarding rule provided in an embodiment of the present application;
[0061] Figure 4 A schematic diagram of an account authentication process of a data forwarding method provided in an embodiment of the present application;
[0062] Figure 5 A schematic diagram of the SSID authentication process of a data forwarding method provided in an embodiment of the present application;
[0063] Figure 6 A schematic diagram of the process of associating a terminal with a wireless access point in a data forwarding method provided in an embodiment of the present application;
[0064] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0065] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution of the present application will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.
[0066] To facilitate understanding of this embodiment, the embodiments of the present application are described in detail below.
[0067] The embodiment of the present application provides a data forwarding method, in which a server pre-divides a wireless local area network into multiple virtual local area networks, a terminal accesses the wireless local area network, and the terminal is provided with multiple accounts, such as Figure 1 As shown, Figure 1 A data forwarding method flow chart provided in an embodiment of the present application, the method comprising the following steps:
[0068] S101: The wireless access point receives authentication success information sent by the server, and sends the authentication success information to the terminal.
[0069] The authentication success information includes the identifier of the virtual local area network to which the account belongs, the MAC address of the terminal, and the identifier of the wireless local area network to which the terminal accesses.
[0070] Specifically, the wireless access point is a network device that converts a wired network into a wireless network through wireless signals, such as a wireless router. The identifier of a virtual local area network is a VLAN ID, the identifier of a wireless local area network is an SSID, and the MAC address of a terminal is a unique identifier used by the terminal at the physical layer or data link layer below the network layer. The server generates authentication success information and sends the authentication success information to the wireless access point, which means that the server has passed the authentication request sent by the terminal, and the server allows the terminal to send data to the virtual local area network to which the terminal's account belongs.
[0071] S102: The wireless access point receives a first service message sent by a terminal, where the first service message carries authentication success information and service data.
[0072] Specifically, the service data is data that the terminal account wants to send to the virtual local area network corresponding to the account, for example, the voice information or image information of the user corresponding to the account. The service data needs to pass through the wireless access point before it can be sent to the virtual local area network to which the terminal account belongs.
[0073] S103: The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal.
[0074] Specifically, the above-mentioned first interface has the identification of the wireless local area network to which the terminal accesses. Since the first service message carries authentication success information, and the authentication success information also includes the identification of the wireless local area network to which the terminal accesses, according to the principle that data carrying the identification of the virtual local area network must be transmitted in the interface with the identification, the first service message must be sent normally through the first interface.
[0075] It can be seen from the above that the first interface can prevent the first service message from being lost, thereby ensuring the normal sending of the first service message.
[0076] S104: The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs.
[0077] Specifically, the above-mentioned second interface has the identifier of the virtual LAN to which the account belongs. Since the first business message carries authentication success information, and the authentication success information also includes the identifier of the virtual LAN to which the account belongs, according to the principle that data carrying the identifier of the virtual LAN must be transmitted in the interface with the identifier, the first business message must be sent normally through the second interface.
[0078] It can be seen from the above that the second interface can prevent the first service message from being lost, thereby ensuring the normal sending of the first service message.
[0079] S105: The wireless access point creates a network bridge between the first interface and the second interface.
[0080] Specifically, the network bridge is used to connect the first interface and the second interface, and is a channel for the first service message to be transmitted between the first interface and the second interface.
[0081] It can be seen from the above that the network bridge can ensure that the first service message is normally transmitted between the first interface and the second interface, thereby improving the security of the transmission of the first service message.
[0082] S106, the wireless access point sends the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address.
[0083] Specifically, the wireless access point sends the service data sent by the terminal corresponding to the MAC address to the virtual local area network to which the account belongs, without the need to re-set the access rights of the virtual local area network, thereby improving the convenience of data forwarding.
[0084] In the method, the wireless access point sends the service data from the terminal to the virtual local area network to which the account belongs through the first interface, the network bridge and the second interface in sequence. The terminal only needs to connect to a wireless local area network, that is, only needs to set an SSID, and the service data of the account can be sent to the virtual local area network to which the account belongs, which simplifies the cumbersome wireless network access process and reduces the waste of network resources. Compared with the prior art, it is not necessary to set the terminal access rights for each virtual local area network. The method avoids setting up multiple wireless local area networks, but there is a situation where some wireless local area networks have no terminal access, and fully utilizes network resources.
[0085] The following is an introduction to the process of wireless access point forwarding data. Figure 2 As shown, Figure 2 A data forwarding flow diagram of a wireless access point of a data forwarding method provided in an embodiment of the present application, wherein the wireless access point includes: a Radius module, a protocol stack module and a Manage module, and the method includes:
[0086] S201, the Manage module receives the authentication success information sent by the Radius module.
[0087] S202: The Management module creates a first interface according to an identifier of the wireless local area network accessed by the terminal.
[0088] S203: The Manage module creates a second interface according to the identifier of the virtual local area network to which the account belongs.
[0089] S204: The Manage module creates a network bridge between the first interface and the second interface.
[0090] S205, the Manage module controls the protocol stack according to the MAC address to send the service data to the virtual local area network to which the account belongs through the network bridge.
[0091] Specifically, the Radius module is responsible for communicating with the server, receiving the authentication success information sent by the server and sending it to the Manage module. The Manage module is responsible for creating the first interface, the second interface and the network bridge, and controlling the protocol stack to send the service data to the virtual local area network to which the account belongs through the network bridge. For example, if the wireless local area network to which the terminal accesses is identified as SSID1, the first interface created is SSID-vlan1; if the virtual local area network to which the account belongs is identified as vlan10, the second interface created is eth-vlan10.
[0092] This method determines the role of each module inside the wireless access point. The staff can directly configure each module of the wireless access point to enable the terminal account to send business data to different wireless LANs. When the wireless access point forwards the business data sent by the terminal, the functions of the Radius module, the Manage module and the protocol stack module support each other, improving the efficiency of data forwarding.
[0093] In one embodiment, if Figure 3 As shown, Figure 3 A schematic diagram of data forwarding rules provided for an embodiment of the present application.
[0094] S301: The wireless access point sets a discard rule according to the MAC address of the terminal.
[0095] S302: The wireless access point sets a redirection rule according to the identifier of the virtual local area network, the MAC address of the terminal, and the identifier of the wireless local area network accessed by the terminal.
[0096] S303: The wireless access point deletes the discard rule.
[0097] The discard rule is used to instruct the wireless access point to discard the second service message sent by the terminal, and the redirect rule is used to instruct the wireless access point to forward the first service message sent by the terminal to the virtual local area network to which the account belongs.
[0098] Specifically, before the redirection rule is set, the second service message will be sent by the wireless access point to the default network channel, that is, the wireless LAN to which the terminal accesses. When the second service message continues to be sent to the upper-layer network device, the IP address obtained by the upper-layer network device will be the IP address of the wireless LAN to which the terminal accesses, rather than the IP address of the virtual LAN to which the account belongs. This behavior is uncontrollable, so the wireless access point needs to discard the second service message according to the discard rule (prevent the second service message from being sent from the first interface). Since the priority of the discard rule is higher than the priority of the redirection rule, the discard rule needs to be deleted after the redirection rule is set to ensure the normal implementation of the redirection rule.
[0099] This method can ensure that the wireless access point accurately sends the first service message to the virtual local area network to which the account belongs, and normally sends the first service message to the upper layer network device. This method enables the wireless access point to automatically control the transmission behavior of the first service message without manual setting, thus saving manpower.
[0100] The following is an introduction to the account authentication process. Figure 4 As shown, Figure 4 A schematic diagram of the account authentication process of a data forwarding method provided in an embodiment of the present application.
[0101] S401: The wireless access point receives authentication information sent by a terminal.
[0102] S402: The wireless access point sends authentication information to the server for authentication.
[0103] The authentication information includes: the user name of the account and the password of the virtual local area network.
[0104] Specifically, the user enters the account number and password corresponding to the virtual local area network in the terminal. The server determines whether the virtual local area network corresponding to the user name exists. If so, it determines whether the password is consistent with the password of the virtual local area network. If they are consistent, the server generates authentication success information and sends the authentication success information to the wireless access point. The wireless access point then sends the authentication success information to the terminal to inform the terminal that the account authentication is successful.
[0105] This method ensures the security of the terminal account authentication process, thereby improving the security of the terminal sending data to the virtual local area network to which the terminal account belongs.
[0106] The following is an introduction to the SSID authentication process. Figure 5 As shown, Figure 5 A schematic diagram of the SSID authentication process of a data forwarding method provided in an embodiment of the present application.
[0107] S501: The wireless access point broadcasts the wireless local area network identifier to the current network.
[0108] S502: If the terminal finds the identifier of the wireless local area network, the wireless access point receives SSID authentication information sent by the terminal.
[0109] S503: The wireless access point performs SSID authentication on the SSID authentication information.
[0110] S504: If the SSID authentication is successful, the wireless access point sends SSID authentication success information to the terminal.
[0111] The SSID authentication information includes the wireless local area network identifier and the wireless local area network password.
[0112] Specifically, when the terminal finds the wireless LAN identifier, it sends the wireless LAN identifier and password to the wireless access point. The wireless access point determines whether the wireless LAN identifier found by the terminal exists. If so, it determines whether the password is consistent with the password of the wireless LAN. If they are consistent, the wireless access point generates SSID authentication success information and sends it to the terminal to inform the terminal that the SSID authentication has been passed.
[0113] This method ensures the security of the terminal SSID authentication process, thereby improving the security of the terminal access to the wireless LAN.
[0114] The following describes the process of associating a terminal with a wireless access point. Figure 6 As shown, Figure 6 A schematic diagram of the association process between a terminal and a wireless access point in a data forwarding method provided in an embodiment of the present application.
[0115] S601: The wireless access point receives a MAC address of a terminal sent by the terminal, verifies the MAC address, and obtains a verification result.
[0116] S602: If the verification result is that the terminal corresponding to the MAC address has passed the SSID authentication, the wireless access point sends association success information to the terminal.
[0117] Specifically, the terminal sends the MAC address of the terminal to the wireless access point, and the wireless access point determines whether the terminal corresponding to the MAC address has passed the SSID authentication. If the SSID authentication is passed, the wireless access point generates association success information to inform the terminal that the association with the wireless access point is successful.
[0118] This approach ensures the security of the association process between the terminal and the wireless access point, thereby improving the security of the terminal sending the first service message to the wireless access point.
[0119] In one embodiment, after the wireless access point receives the authentication success information sent by the server, if the identifier of the virtual local area network to which the account belongs carried in the authentication success information does not hit the preset identifier set, the wireless access point generates a prompt message, and the wireless access point sends the prompt message to the terminal, so that the terminal prompts the user that the virtual local area network to which the account belongs does not belong to the wireless local area network.
[0120] Specifically, in this method, the wireless access point determines whether the identifier of the virtual local area network to which the account carried in the authentication success information belongs exists. If not, a prompt message is generated and sent to the terminal to prompt the user of the terminal that the virtual local area network to which the account belongs does not belong to the wireless local area network, and the user needs to select another account for authentication.
[0121] This method ensures the security of the terminal account authentication process, thereby improving the security of the terminal sending data to the virtual LAN to which the account belongs, and avoids the terminal sending data to an unauthenticated virtual LAN, causing data leakage.
[0122] Based on the above method embodiment, the embodiment of the present application provides a data forwarding system, in which the server pre-divides the wireless local area network into multiple virtual local area networks, the terminal accesses the wireless local area network, and the terminal is set with multiple accounts. The method includes:
[0123] The wireless access point receives the authentication success information sent by the server, and sends the authentication success information to the terminal; wherein the authentication success information includes the identifier of the virtual local area network to which the account belongs, the MAC address of the terminal, and the identifier of the wireless local area network to which the terminal accesses;
[0124] The wireless access point receives a first service message sent by the terminal, where the first service message carries authentication success information and service data;
[0125] The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal;
[0126] The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs;
[0127] The wireless access point creates a network bridge between the first interface and the second interface;
[0128] The wireless access point sends the business data to the virtual LAN to which the account belongs through the network bridge based on the MAC address.
[0129] The data forwarding system provided in the embodiment of the present application has the same technical features as the data forwarding method provided in the above embodiment, so it can also solve the same technical problems and achieve the same technical effects.
[0130] An embodiment of the present application also provides an electronic device, including a processor and a memory, wherein the memory stores machine executable instructions that can be executed by the processor, and the processor executes the machine executable instructions to implement the above-mentioned data forwarding method.
[0131] See also Figure 7 As shown, the electronic device includes a processor 100 and a memory 101. The memory 101 stores machine executable instructions that can be executed by the processor 100. The processor 100 executes the machine executable instructions to implement the above data forwarding method.
[0132] Further, Figure 7 The electronic device shown further includes a bus 102 and a communication interface 103 , and the processor 100 , the communication interface 103 and the memory 101 are connected via the bus 102 .
[0133] Among them, the memory 101 may include a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 103 (which can be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. can be used. The bus 102 can be an ISA (Industrial Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Enhanced Industry Standard Architecture) bus, etc. The above-mentioned bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 7 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.
[0134] The processor 100 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 100. The above processor 100 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module may be located in a storage medium mature in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 101, and the processor 100 reads the information in the memory 101 and completes the steps of the method of the above embodiment in combination with its hardware.
[0135] This embodiment further provides a machine-readable storage medium, which stores machine-executable instructions. When the machine-executable instructions are called and executed by a processor, the machine-executable instructions prompt the processor to implement the above-mentioned data forwarding method.
[0136] The computer program product of the data forwarding method, system, and electronic device provided in the embodiments of the present application includes a computer-readable storage medium storing program code, and the instructions included in the program code can be used to execute the method described in the previous method embodiment. The specific implementation can refer to the method embodiment, which will not be repeated here. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working process of the system and device described above can refer to the corresponding process in the previous method embodiment, which will not be repeated here.
[0137] In addition, in the description of the embodiments of the present application, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be directly connected, or indirectly connected through an intermediate medium, or it can be the internal connection of two components. For ordinary technicians in this field, the specific meanings of the above terms in this application can be understood according to specific circumstances. If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a non-volatile computer-readable storage medium that can be executed by a processor. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program codes.
[0138] In the description of the present application, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present application. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.
[0139] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The protection scope of the present application is not limited thereto. Although the present application is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed in the present application, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.
Claims
1. A data forwarding method, characterized in that: The server divides the wireless local area network into multiple virtual local area networks in advance, the terminal accesses the wireless local area network, and the terminal is set with multiple accounts. The method includes: The wireless access point receives the authentication success information sent by the server, and sends the authentication success information to the terminal; wherein the authentication success information includes the identifier of the virtual local area network to which the account belongs, the MAC address of the terminal, and the identifier of the wireless local area network to which the terminal accesses; The wireless access point receives a first service message sent by the terminal, where the first service message carries the authentication success information and service data; The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal; The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs; The wireless access point creates a network bridge between the first interface and the second interface; The wireless access point sends the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address.
2. The data forwarding method according to claim 1, characterized in that: The wireless access point includes: a Radius module, a protocol stack module and a Manage module; the method also includes: The Manage module receives the authentication success information sent by the Radius module; The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal, including: The Manage module creates the first interface according to the identifier of the wireless local area network accessed by the terminal; The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs, including: The Manage module creates the second interface according to the identifier of the virtual local area network to which the account belongs; The wireless access point creates a network bridge between the first interface and the second interface, including: The Manage module creates the network bridge between the first interface and the second interface; The wireless access point sends the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address, including: The Manage module controls the protocol stack to send the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address.
3. The data forwarding method according to claim 1, characterized in that: The method further comprises: The wireless access point sets a discard rule according to the MAC address of the terminal, wherein the discard rule is used to instruct the wireless access point to discard the second service message sent by the terminal; The wireless access point sets a redirection rule according to the identifier of the virtual local area network, the MAC address of the terminal, and the identifier of the wireless local area network accessed by the terminal, wherein the redirection rule is used to instruct the wireless access point to forward the first service message sent by the terminal to the virtual local area network to which the account belongs; The wireless access point deletes the discard rule.
4. The data forwarding method according to claim 1, characterized in that: The method further comprises: The wireless access point receives the authentication information sent by the terminal; wherein the authentication information includes: the user name of the account and the password of the virtual local area network; The wireless access point sends the authentication information to the server for authentication.
5. The data forwarding method according to claim 1, characterized in that: The method further comprises: Receiving, by the wireless access point, the MAC address of the terminal sent by the terminal; The wireless access point verifies the MAC address to obtain a verification result; If the verification result is that the terminal corresponding to the MAC address has passed the SSID authentication, the wireless access point sends association success information to the terminal.
6. The data forwarding method according to claim 1, characterized in that: The method further comprises: The wireless access point broadcasts the identifier of the wireless local area network to the current network; If the terminal finds the identifier of the wireless local area network, the wireless access point receives the SSID authentication information sent by the terminal; wherein the SSID authentication information includes the identifier of the wireless local area network and the password of the wireless local area network; The wireless access point performs the SSID authentication on the SSID authentication information; If the SSID authentication is successful, the wireless access point sends SSID authentication success information to the terminal.
7. The data forwarding method according to claim 1, characterized in that: After the wireless access point receives the authentication success information sent by the server, the method further includes: If the identifier of the virtual local area network to which the account belongs carried in the authentication success information does not match the preset identifier set, the wireless access point generates prompt information; The wireless access point sends the prompt information to the terminal, so that the terminal prompts the user that the virtual local area network to which the account belongs does not belong to the wireless local area network.
8. A data forwarding system, characterized in that: The server divides the wireless local area network into multiple virtual local area networks in advance, the terminal accesses the wireless local area network, and the terminal is set with multiple accounts. The method includes: The wireless access point receives the authentication success information sent by the server, and sends the authentication success information to the terminal; wherein the authentication success information includes the identifier of the virtual local area network to which the account belongs, the MAC address of the terminal, and the identifier of the wireless local area network to which the terminal accesses; The wireless access point receives a first service message sent by the terminal, where the first service message carries the authentication success information and service data; The wireless access point creates a first interface according to an identifier of the wireless local area network accessed by the terminal; The wireless access point creates a second interface according to the identifier of the virtual local area network to which the account belongs; The wireless access point creates a network bridge between the first interface and the second interface; The wireless access point sends the service data to the virtual local area network to which the account belongs through the network bridge according to the MAC address.
9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method described in any one of claims 1 to 7 are executed.