Method and network equipment for accessing network by dialing on behalf

Abstract

The invention provides a substituted dialing network access method and network equipment, and the method comprises the steps: receiving a dialing request sent by a user in a park, obtaining the key information of the user from the dialing request, initiating a substituted dialing request to an operator according to the dialing request, and receiving a substituted dialing result fed back by the operator according to the substituted dialing request, according to the user key information and the substituted dialing result, establishing a substituted dialing table item, and according to the substituted dialing table item, managing the user to access the park network and / or the operator network. Through the method, the problem that the user cannot access the campus network under the condition that the user fails to carry out the substituted dialing authentication due to the arrearage of an operator or other reasons in the scene that the campus network BRAS is used as the substituted dialing equipment is solved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method and network device for dialing into a network on behalf of another. Background Art

[0002] BRAS: Broadband Remote Access Server, broadband remote access server.

[0003] In order to meet the needs of campus network users for diversified network outlets, improve user satisfaction, and meet the school's own needs to simplify campus network construction and maintenance, more and more universities have adopted the method of jointly operating and building multiple outlets with multiple operators, delegating the right to choose network outlets to students, who can choose to open a broadband account of a certain operator according to their own needs.

[0004] In the joint operation scenario, by deploying the PPPoE dial-up function on the campus BRAS device or PPPoE dial-up gateway device, it can not only help schools and operators improve the efficiency of BRAS service deployment and simplify the joint operation model, but also provide campus network users with an excellent Internet experience. PPPoE dial-up refers to a technology in which the campus BRAS device or PPPoE dial-up gateway device initiates proxy dial-up authentication to the BRAS device of the operator for campus users who have activated the operator's "dial-up" service. The "dial-up" service here generally refers to the Internet access service of activating an operator's broadband account.

[0005] In the PPPOE dial-up application, it is divided into the integrated PPPOE dial-up mode and the PPPOE dial-up gateway mode according to the different devices that provide the PPPOE dial-up function.

[0006] Integrated PPPOE dial-up mode: In this mode, the campus BRAS device also serves as the PPPOE dial-up device, that is, the campus BRAS device provides both BRAS access authentication and PPPOE dial-up functions for campus users.

[0007] PPPOE dial-up gateway mode: In this mode, the PPPOE dial-up function is provided by an independent PPPOE dial-up device (i.e., PPPOE dial-up gateway), and the campus BRAS device no longer serves as a PPPOE dial-up device.

[0008] However, during the entire dialing process of the user, there are actually two dialing behaviors. One is that the user dials and goes online on the campus BRAS, and the second is that after the user goes online on the campus BRAS, the campus BRAS is triggered to initiate a dial-up and online request to the operator BRAS. Whether it is on the campus BRAS or the operator BRAS, as long as the user logs off, it is necessary to notify the user on the other side to synchronize the logoff. In this way, there is a problem. If the user successfully dials and goes online on the campus BRAS, but the proxy dialing fails on the operator BRAS due to some reasons (such as arrears), it will cause the user on the campus BRAS to be disconnected, and then the terminal dials again, triggering this behavior repeatedly, and ultimately resulting in the user being unable to access campus resources. Summary of the Invention

[0009] To overcome the problems existing in the related art, this specification provides a method and network device for proxy dialing to access the network.

[0010] According to the first aspect of the embodiments of this specification, a method for proxy dialing to access the network is provided. The method includes:

[0011] Receiving a dialing request sent by a user in the campus, and obtaining user key information from the dialing request;

[0012] Sending a proxy dialing request to the operator according to the dialing request, and receiving a proxy dialing result feedback by the operator according to the proxy dialing request;

[0013] Establishing a proxy dialing entry according to the user key information and the proxy dialing result;

[0014] Managing the user's access to the campus network and / or access to the operator network according to the proxy dialing entry.

[0015] Among them, the receiving a dialing request sent by a user in the campus, and obtaining user key information from the dialing request includes:

[0016] Receiving a dialing request sent by a user in the campus, and obtaining at least the IP address assigned by the campus BRAS to the user and the MAC address of the user from the dialing request.

[0017] Among them, the sending a proxy dialing request to the operator according to the dialing request includes:

[0018] When the campus BRAS identifies that the user accesses the operator network according to the dialing request, sending a proxy dialing request to the operator.

[0019] Among them, the receiving a proxy dialing result feedback by the operator according to the proxy dialing request includes:

[0020] Receive the authentication result of the user by the carrier according to the call - on - behalf request, where the authentication result includes: authentication passed or authentication failed, and / or the reason code for authentication failure, and the call - on - behalf address information assigned by the carrier to the user after authentication passed.

[0021] Among them, establishing a call - on - behalf entry according to the user key information and the call - on - behalf result includes:

[0022] Obtain the IP address assigned by the campus BRAS to the user and the MAC address of the user, and obtain the authentication result, and establish a call - on - behalf entry according to the correspondence between the IP address assigned by the BRAS to the user, the MAC address of the user, and the obtained authentication result.

[0023] Among them, managing the user's access to the campus network and / or the operator network according to the call - on - behalf entry includes:

[0024] If the user accesses the operator network, identify whether there is corresponding call - on - behalf address information assigned by the operator in the call - on - behalf entry;

[0025] If there is call - on - behalf address information assigned by the operator, enable the user to access the operator network according to the call - on - behalf address information assigned by the operator;

[0026] If there is no call - on - behalf address information assigned by the operator, only allow the user to access the campus network.

[0027] It can be seen from the above embodiments that by establishing a call - on - behalf entry according to the user key information and the call - on - behalf result, even if the carrier does not authenticate the user successfully, the user can access the campus network according to this call - on - behalf entry.

[0028] According to the second aspect of the embodiments of this specification, a network device is provided. The network device includes:

[0029] A receiving module, which is used to receive the dial - up request sent by a user in the campus and obtain user key information from the dial - up request;

[0030] A sending module, which is used to initiate a call - on - behalf request to the carrier according to the dial - up request;

[0031] The receiving module is further used to receive the call - on - behalf result fed back by the carrier according to the call - on - behalf request;

[0032] A processing module, which is used to establish a call - on - behalf entry according to the user key information and the call - on - behalf result, and manage the user's access to the campus network and / or the operator network according to the call - on - behalf entry.

[0033] Among them, the receiving module is specifically configured to receive a dialing request sent by a user in the park, and obtain at least the IP address assigned by the park BRAS to the user and the MAC address of the user from the dialing request.

[0034] Among them, the receiving module is further configured to receive the authentication result of the user by the operator according to the proxy dialing request, and the authentication result includes: authentication passed or authentication failed, and / or the reason code for authentication failure, and the proxy dialing address information assigned by the operator to the user after authentication passed.

[0035] Among them, the processing module is specifically configured to, if the user accesses the operator network, identify whether there is corresponding proxy dialing address information assigned by the operator in the proxy dialing entry;

[0036] If there is proxy dialing address information assigned by the operator to the user, the user is enabled to access the operator network according to the proxy dialing address information assigned by the operator;

[0037] If there is no proxy dialing address information assigned by the operator to the user, the user is only allowed to access the park network.

[0038] It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and cannot limit this specification. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The accompanying drawings herein are incorporated into the specification and constitute a part of this specification, showing embodiments consistent with this specification, and are used together with the specification to explain the principles of this specification.

[0040] Figure 1 is a schematic diagram of a campus network scenario architecture shown according to an exemplary embodiment of this specification.

[0041] Figure 2 is a schematic flowchart of a method for proxy dialing to access the network shown according to an exemplary embodiment of this specification. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0042] Here, the exemplary embodiments will be described in detail, and the examples are shown in the accompanying drawings. When the following description refers to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this specification. On the contrary, they are only examples of devices and methods consistent with some aspects of this specification as detailed in the appended claims.

[0043] The terms used in this specification are for the purpose of describing specific embodiments only and are not intended to limit this specification. The singular forms "a", "the" and "the" used in this specification and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0044] It should be understood that although the terms first, second, third, etc. may be used in this specification to describe various information, this information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of this specification, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0045] In this embodiment, the park may refer to a specific service area, such as a campus network, a company network, etc.

[0046] like Figure 1 In the campus network scenario shown, campus users: campus access authentication users who go online using IPOE or PPPOE, campus BRAS: equipment that provides BRAS access services and PPPOE dial-up services for campus users. Among them, the campus BRAS equipment includes the following two types of interfaces for the dial-up service:

[0047] The first type: campus user access interface: refers to the interface on the campus BRAS device that provides BRAS access services for campus users. In the PPPOE dial-up network, the campus network administrator controls the access rights of campus users by deploying OoS policies on the campus BRAS device. That is, when campus users use campus accounts to authenticate and go online through this interface, they only have access rights to the campus network, but no access rights to the external network.

[0048] The second type: PPPOE proxy dialing interface: refers to the interface on the campus BRAS device that provides proxy dialing services for campus users who have activated the "proxy dialing" service. If the campus user has activated the "proxy dialing" service at the operator, when such users use the campus account to authenticate and go online on the campus BRAS device, the campus BRAS device will automatically initiate a proxy dialing authentication request to the BRAS device of the operator to which the user belongs through the PPPOE proxy dialing interface. After the authentication is passed, the user can access the external network through the operator to which he belongs.

[0049] On-campus DHCP server: dynamically allocates IP addresses to on-campus access authentication users.

[0050] Campus AAA Server: Interacts with the campus BRAS to complete user authentication, authorization, and billing.

[0051] Campus Portal Server: The server-side system that receives authentication requests from campus users, responsible for providing Web authentication pages to campus users, and interacting with campus BRAS devices for user authentication information (username, password, etc.) to complete the identity authentication of campus users.

[0052] Carrier BRAS: The device that provides BRAS access services for PPPOE proxy dialing on the campus BRAS.

[0053] The basic working process of PPPOE proxy dialing is as follows:

[0054] Campus users open the "proxy dialing" service of the carrier at the carrier and bind the "proxy dialing" account provided by the carrier to the campus account on the campus AAA server. For the binding operation of the "proxy dialing" account and the campus account, it depends on whether the campus user binds it himself or reports it to the campus network administrator first, and then the campus network administrator binds it on behalf of the user, subject to the support of the campus AAA server.

[0055] After a campus user authenticates and goes online using the campus account on the campus BRAS device, while maintaining the campus access authentication user information of the campus user, the BRAS device will mark this user as a PPPOE proxy dialing user. That is, for each campus user who has opened the "proxy dialing" service, both the "campus access authentication user" and "PPPOE proxy dialing user" identities will be marked and maintained on the campus BRAS device. Among them, for the internal network traffic of campus users, the BRAS device processes it according to the campus access authentication user at the time of going online (such as IPOE users) and directly releases the internal network traffic. For the external network traffic of campus users, the BRAS device processes it according to the PPPOE proxy dialing user.

[0056] When the campus AAA server receives a charging start message about a certain user sent by the campus BRAS device, the campus AAA server will notify the campus BRAS device to start PPPOE proxy dialing for the charging user through a COA message, and the COA message will carry information such as the "proxy dialing" account opened by this user.

[0057] The campus BRAS device, according to the received COA message, simulates a PPPoE client and initiates PPPOE proxy dialing to the corresponding carrier's BRAS device through the proxy dialing interface using the "proxy dialing" account information carried in the COA message. Among them, the carrier BRAS device acts as the PPPoE server role.

[0058] The operator authenticates the PPPOE dial-up user. After the authentication is passed, the operator allocates IP addresses and other information to the PPPOE dial-up user through NCP negotiation.

[0059] After the dialing is successful, the BRAS device on campus will generate and maintain the session information of the dialing user.

[0060] When the campus BRAS device receives the user's extranet traffic, it first replaces the source P address of the message with the IP address assigned by the operator to the dial-up user, and then encapsulates the message through PPPoE and forwards it to the corresponding operator's BRAS device.

[0061] When the campus BRAS device receives the return traffic from the external network, it first decapsulates the message through PPPoE, then replaces the destination IP address of the message with the user's campus IP address and forwards it to the corresponding campus user.

[0062] From the above process, we can see that there are actually two dialing behaviors in the entire dialing process of the user. One is when the user dials online on the campus BRAS, and the second is when the user goes online on the campus BRAS, triggering the campus BRAS to initiate dialing online to the operator BRAS. Regardless of whether it is on the campus BRAS or the operator BRAS, as long as the user goes offline, it is necessary to notify the user on the other side to go offline synchronously. This will cause a problem. The user successfully dials online on the campus BRAS, but due to some reasons (such as arrears), the proxy dialing fails on the operator BRAS, which will cause the campus BRAS user to be offline, and then the terminal dials again, triggering this behavior back and forth, and ultimately causing the user to be unable to access campus resources.

[0063] In order to solve the above technical problems, the embodiment of the present disclosure provides a method for dialing into the network on behalf of others, such as Figure 2 As shown, the method includes:

[0064] S201 receives a dialing request sent by a user in the park, and obtains key user information from the dialing request;

[0065] S202 initiates a dialing request to the operator according to the dialing request, and receives a dialing result fed back by the operator according to the dialing request;

[0066] S203 establishes a dialing table entry according to the user key information and the dialing result;

[0067] S204 manages the user's access to the campus network and / or the operator network according to the dialing table entry.

[0068] In step S201, the user dials to the campus (campus) BRAS. After successfully dialing to the campus BRAS, the user will obtain the assigned campus (campus) IP address, and obtain the user's IP address and the user's MAC address.

[0069] In this embodiment, a proxy dialing entry can be created, as shown in Table 1. Among them, IP is the address assigned to the user when dialing to the campus network BRAS; MAC is the user's MAC address; Destination interface: the outgoing interface for forwarding after the traffic hits the proxy dialing entry. If the proxy dialing is successful, the outgoing interface of the proxy dialed user will be filled in here, otherwise it will be all 0, indicating that there is no proxy dialing outgoing interface and the route forwarding needs to be checked; Proxy dialing Ip: the IP address assigned by the operator after the proxy dialed user successfully dials; Proxy dialing Mac: the MAC of the proxy dialed user, which is actually the MAC of the user terminal and is authorized by the radius server during COA; Proxy dialing result: 0 indicates successful proxy dialing, and 1-99 (the corresponding number of values can be defined according to actual needs) can be used to define the corresponding reasons for proxy dialing failure. For example, "1" indicates arrears, "2" indicates that the account does not exist, "3" indicates that the password is incorrect, etc., and "99" indicates that the proxy dialing is not triggered.

[0070]

[0071] Table 1

[0072] In step S201, the obtained campus (campus) IP address and MAC address can be recorded in Table 1.

[0073] In step S202, based on the proxy dialing process (the proxy dialing process has been carried out in the above basic working process of the current PPPOE proxy dialing and will not be elaborated here), a proxy dialing request is sent to the operator, and the authentication result of the user by the operator according to the proxy dialing request is received. The authentication result includes: authentication passed or authentication failed, and / or the reason code for authentication failure, and the proxy dialing address information assigned by the operator to the user after authentication passed.

[0074] The proxy dialing result obtained from the operator can be recorded in Table 1 and corresponds to the campus IP address of the user.

[0075] In this embodiment, if the user accesses the operator network, it is identified whether there is corresponding proxy dialing address information assigned by the operator in the proxy dialing entry. If there is proxy dialing address information assigned by the operator to the user, the user is allowed to access the operator network according to the proxy dialing address information assigned by the operator. If there is no proxy dialing address information assigned by the operator to the user, the user is only allowed to access the campus network.

[0076] To elaborate on this application in detail, the embodiments of the present disclosure also provide the following examples:

[0077] 1. User 1 and User 2 initiate dial-ups to the campus BRAS. After the dial-ups are successful, User 1 is assigned an IP address of 10.1.1.2 and User 2 is assigned an IP address of 10.1.1.3. The user dial-up table entries generated by the campus BRAS are shown in Table 2:

[0078]

[0079]

[0080] Table 2

[0081] 2. After users 1 and 2 are authenticated on the campus network BRAS, they send a billing start message to the campus AAA server. After receiving the billing start message, the campus AAA server obtains the user name, password, mac address and other information of user 1 and user 2, and sends a COA message to the campus BRAS device respectively, triggering the dialing process.

[0082] 3. The campus BRAS receives the COA messages corresponding to user 1 and user 2, parses the corresponding fields, and responds to the COA with ACK to the campus AAA server. At the same time, it starts the dialing process based on the parsed user name, password, mac and other information, and initiates PPPOE authentication to the operator BRAS.

[0083] 4. User 1 dials successfully and obtains the IP address 20.1.1.2. The outgoing interface is interface1. The corresponding dialing table entry is refreshed, as shown in Table 3:

[0084] Index Ip Mac Destination interface Proxy-dial Ip Proxy-dial Mac Proxy-dial result 1 10.1.1.2 1-2-3 interface1 20.1.1.2 1-2-3 0 2 10.1.1.3 1-2-4 0 0 0 99

[0085] Table 3

[0086] User 2 fails to dial (the dialing will be triggered periodically), and the operator's BRAS returns that the reason for the authentication failure is arrears. Based on this result, the dialing table entry is refreshed, as shown in Table 4:

[0087] Index Ip Mac Destination interface Proxy-dial Ip Proxy-dial Mac Proxy-dial result 1 10.1.1.2 1-2-3 interface1 20.1.1.2 1-2-3 0 2 10.1.1.3 1-2-4 0 0 0 1

[0088] 5. After user 1 dials successfully, a DM message will be sent to notify the campus AAA user that user 1 dials successfully. After user 2 dials unsuccessfully, a DM message will also be sent to notify the campus AAA user that user 2 dials failed. At the same time, the reason for the failure is arrears, which will also be carried to the AAA server, but the user will not be offline.

[0089] 6. If the traffic of User 1 accesses the internal network of the school, the routing forwarding is checked according to the configured policy. If it accesses the external network, the proxy dialing egress forwarding is checked according to the configured policy, and at the same time, 10.1.1.2 of User 1 is replaced with the proxy dialing allocated address 20.1.1.2 for forwarding. If the traffic of User 2 accesses the internal network of the school, the routing forwarding is checked according to the configured policy. If it accesses the external network, since the egress interface is 0, it is directly discarded.

[0090] 7. When User 1 goes offline, it follows the original process. No matter which side of the user, the campus network BRAS, or the operator BRAS initiates it, the other two will be synchronously notified to go offline.

[0091] 8. When User 2 goes offline, the campus AAA is notified to go offline. After User 2 recharges, the campus network BRAS can successfully proxy dial to the operator BRAS. At the same time, the entry of User 2 on the campus network BRAS will be refreshed to the normal proxy dialing user entry, and the campus network BRAS will then notify the internal campus AAA through the DM message that the user's proxy dialing is successful and the arrears mark is refreshed.

[0092] As can be seen from the above embodiments, by establishing a proxy dialing entry and recording the user's key information and proxy dialing results, the problem that users cannot access the internal network of the school in the scenario where the campus network BRAS is used as a proxy dialing device due to the user's arrears with the operator or other reasons for proxy dialing authentication failure is solved.

[0093] Based on the above method embodiments, the present disclosure embodiments also provide a network device, and the network device includes:

[0094] A receiving module, which is used to receive a dialing request sent by a user in the park and obtain user key information from the dialing request;

[0095] A sending module, which is used to initiate a proxy dialing request to the operator according to the dialing request;

[0096] The receiving module is further used to receive the proxy dialing result feedback by the operator according to the proxy dialing request;

[0097] A processing module, which is used to establish a proxy dialing entry according to the user key information and the proxy dialing result, and manage the user's access to the park network and / or access to the operator network according to the proxy dialing entry.

[0098] Wherein, the receiving module is specifically used to receive a dialing request sent by a user in the park and obtain at least the IP address allocated by the park BRAS for the user and the user's MAC address from the dialing request.

[0099] The receiving module is further used to receive the operator's authentication result of the user according to the proxy dialing request, wherein the authentication result includes: authentication passed or authentication failed, and / or the reason code for authentication failure, and the proxy dialing address information allocated by the operator to the user after authentication passed.

[0100] The processing module is specifically used to identify whether there is corresponding dialing address information allocated by the operator to the user in the dialing table if the user accesses the operator network;

[0101] If there is proxy dialing address information assigned by the operator to the user, the user is allowed to access the operator's network according to the proxy dialing address information assigned by the operator to the user;

[0102] If there is no dial-up address information assigned by the operator to the user, the user is only allowed to access the campus network.

[0103] For the device embodiment, since it basically corresponds to the method embodiment, the relevant parts can refer to the partial description of the method embodiment. The device embodiment described above is only schematic, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, that is, they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this specification. A person of ordinary skill in the art can understand and implement it without paying creative labor.

[0104] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0105] Those skilled in the art will readily appreciate other embodiments of the specification after considering the specification and practicing the invention claimed herein. The specification is intended to cover any variations, uses or adaptations of the specification that follow the general principles of the specification and include common knowledge or customary techniques in the art that are not claimed in the specification. The specification and examples are to be considered exemplary only, and the true scope and spirit of the specification are indicated by the following claims.

[0106] It should be understood that the present specification is not limited to the exact structures already described above and shown in the drawings, and various modifications and changes can be made without departing from its scope. The scope of the present specification is only limited by the appended claims.

[0107] The above are only the preferred embodiments of the present specification and are not intended to limit the present specification. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present specification shall be included within the scope of protection of the present specification.

Claims

1. A method for dialing into a network on behalf of another, characterized in that: The method comprises: Receive a dial-up request sent by a user in the park, and obtain key user information from the dial-up request; Initiating a dialing request to the operator according to the dialing request, and receiving a dialing result fed back by the operator according to the dialing request; Establishing a dialing table entry according to the user key information and the dialing result; The user's access to the campus network and / or the operator network is managed according to the dialing table entry.

2. The method according to claim 1, characterized in that The receiving a dialing request sent by a user in the park and obtaining key user information from the dialing request includes: A dial-up request sent by a user in the campus is received, and at least an IP address allocated to the user by the campus BRAS and a MAC address of the user are obtained from the dial-up request.

3. The method according to claim 1, characterized in that The initiating a dialing request to the operator according to the dialing request includes: When the campus BRAS identifies that the user is accessing the operator's network according to the dialing request, it initiates a proxy dialing request to the operator.

4. The method according to claim 1, characterized in that: The receiving of the dialing result fed back by the operator according to the dialing request includes: Receive the operator's authentication result of the user according to the proxy dialing request, the authentication result including: authentication passed or authentication failed, and / or the reason code for authentication failure, and proxy dialing address information allocated by the operator to the user after authentication passed.

5. The method according to claim 4, characterized in that The establishing of a dialing table entry according to the user key information and the dialing result includes: Obtain the IP address and MAC address assigned to the user by the campus BRAS, as well as the authentication result, and establish a dialing table entry based on the corresponding relationship between the IP address and MAC address assigned to the user by the BRAS, as well as the authentication result.

6. The method according to claim 4, characterized in that The step of managing the user's access to the campus network and / or the operator network according to the dialing table entry includes: If the user accesses the operator's network, identifying whether there is corresponding dialing address information allocated by the operator to the user in the dialing table; If there is proxy dialing address information assigned by the operator to the user, the user is allowed to access the operator's network according to the proxy dialing address information assigned by the operator to the user; If there is no dial-up address information assigned by the operator to the user, the user is only allowed to access the campus network.

7. A network device, characterized in that: The network equipment includes: A receiving module, the receiving module is used to receive a dialing request sent by a user in the park, and obtain key user information from the dialing request; A sending module, used for initiating a dialing request to the operator according to the dialing request; The receiving module is further used to receive a dialing result fed back by the operator according to the dialing request; The processing module is used to establish a dialing table entry according to the user key information and the dialing result, and manage the user's access to the campus network and / or the operator network according to the dialing table entry.

8. The network device according to claim 7, characterized in that: The receiving module is specifically used to receive a dial-up request sent by a user in the park, and at least obtain the IP address allocated to the user by the park BRAS and the user's MAC address from the dial-up request.

9. The network device according to claim 7, characterized in that: The receiving module is further used to receive the operator's authentication result of the user according to the proxy dialing request, wherein the authentication result includes: authentication passed or authentication failed, and / or the reason code for authentication failure, and the proxy dialing address information allocated by the operator to the user after authentication passed.

10. The network device according to claim 9, characterized in that: The processing module is specifically used to identify whether there is corresponding dialing address information allocated by the operator to the user in the dialing table if the user accesses the operator network; If there is proxy dialing address information assigned by the operator to the user, the user is allowed to access the operator's network according to the proxy dialing address information assigned by the operator to the user; If there is no dial-up address information assigned by the operator to the user, the user is only allowed to access the campus network.

Images