Method and device for controlling uplink bandwidth in optical network

Abstract

The method and the device for controlling the uplink bandwidth in the optical network can be used for an FTTR-B scene, and the uplink bandwidth of an optical network unit occupied by an unauthenticated service terminal is reduced. The method can be applied to an optical line terminal OLT. The method comprises the following steps: notifying an optical network unit to configure a transmission container with a first bandwidth parameter; notifying the optical network unit to create a GPON packaging mode port GEM port bound with the transmission container; notifying the optical network unit to bind a service terminal which binds and accesses the GEM port to the optical network unit; determining that the service terminal does not complete security authentication; modifying the first bandwidth parameter of the transmission container into a second bandwidth parameter; the second bandwidth parameter is far less than the first bandwidth parameter.

Description

Technical Field

[0001] This application relates to optical network technologies, and more specifically, to a method and device for controlling the upstream bandwidth in an optical network. Background Art

[0002] GPON (Gigabit-capable Passive Optical Network) adopts a point-to-multipoint architecture of an OLT (Optical Line Terminal) and multiple ONUs (Optical Network Units), and realizes fiber resource sharing through a passive optical splitter.

[0003] A T-CONT (Transmission Container) is a bandwidth management unit allocated by the OLT for the ONU, and is used to define the bandwidth policy of the upstream traffic, such as fixed bandwidth, guaranteed bandwidth, and maximum bandwidth. The OLT manages the QoS requirements of different services of all ONUs, such as video services and voice services.

[0004] However, unauthenticated service terminals accessed by the ONU device initiate abnormal attacks. A large number of attack packets from these unauthenticated service interruptions reach the OLT device. Even if they are discarded by the OLT device, they occupy the upstream bandwidth of authenticated users, affect the bandwidth allocation of other normal upstream service data traffic, and increase the communication delay. Summary of the Invention

[0005] The purpose of this application is to provide a method and device for controlling the upstream bandwidth in an optical network, and reduce the upstream bandwidth of the optical network unit occupied by unauthenticated service terminals.

[0006] To achieve the above purpose, this application provides a method for controlling the upstream bandwidth in an optical network, which is applied to an optical line terminal OLT. The method includes: notifying the optical network unit to configure a transmission container with a first bandwidth parameter; notifying the optical network unit to create a GPON encapsulation mode port GEM port that binds the transmission container; notifying the optical network unit to bind the GEM port to the service terminal accessing the optical network unit; determining that the service terminal has not completed security authentication; modifying the first bandwidth parameter of the transmission container to a second bandwidth parameter; and the second bandwidth parameter is much smaller than the first bandwidth parameter.

[0007] To achieve the above purpose, this application also provides a device for controlling the upstream bandwidth in an optical network. The device, as an optical line terminal, includes a processor and a memory; the memory is used to store machine-executable instructions; wherein, the processor executes the above method for the OLT to control the upstream bandwidth of the optical network by running the instructions in the memory.

[0008] To achieve the above object, the present application further provides a method for controlling the upstream bandwidth in an optical network, which is applied to an optical network unit. The method includes: receiving a transmission container configuration message from an optical line terminal (OLT); configuring a transmission container with a first bandwidth parameter; receiving a GPON encapsulation mode port (GEM port) creation message from the OLT; creating a GEM port bound to the transmission container; receiving a service terminal binding message from the OLT; and binding the accessed service terminal to the GEM port based on the service terminal binding message, so that the OLT modifies the first bandwidth parameter of the transmission container to a second bandwidth parameter based on the incomplete security authentication status of the service terminal, where the second bandwidth parameter is much smaller than the first bandwidth parameter.

[0009] To achieve the above object, the present application further provides a device for controlling the upstream bandwidth in an optical network. The device, as an optical network unit, includes a processor and a memory; the memory is used to store machine-executable instructions; wherein, the processor executes the method for controlling the upstream bandwidth of the optical network by the optical network unit by running the instructions in the memory. Description of the Drawings

[0010] Figure 1 It is a flowchart of an embodiment of the method for controlling the upstream bandwidth in an optical network provided by the present application;

[0011] Figure 2 It is a flowchart of an embodiment of controlling the upstream bandwidth of a secure authentication service terminal in an optical network provided by the present application;

[0012] Figure 3 It is a flowchart of an embodiment of controlling the upstream bandwidth of a secure authentication aging service terminal in an optical network provided by the present application;

[0013] Figure 4 It is a schematic diagram of an embodiment of an optical line terminal for controlling the upstream bandwidth in an optical network provided by the present application;

[0014] Figure 5 It is a schematic diagram of an embodiment of an optical network unit for controlling the upstream bandwidth in an optical network provided by the present application. Detailed Embodiments

[0015] Details will be described in detail with multiple examples shown in multiple drawings. In the following detailed description, multiple specific details are used to provide a comprehensive understanding of the present application. Known methods, steps, components, and circuits are not described in detail in the examples to avoid making these examples difficult to understand.

[0016] In the terms used, the term "including" means including but not limited to; the term "containing" means including but not limited to; the terms "above", "within" and "below" include the specified number; the terms "greater than" and "less than" do not include the specified number. The term "based on" means at least based on a part thereof.

[0017] Figure 1 The flowchart of the method embodiment for controlling the upstream bandwidth in the optical network provided for this application includes the following steps:

[0018] Step 101: The OLT sends a transmission container configuration message to the ONU, and the ONU configures a transmission container with high bandwidth parameters.

[0019] After the OLT device starts up, service ports are created on the OLT for the ONUs connected to the PON ports, such as ONU ports and ONU sub-interfaces; transmission containers T-CONT are created, GEM ports (GPON Encapsulation Method Ports) are created, and security authentication functions are configured. The initial state is that the security authentication fails, and the GEM port parameters are configured on the OLT to specify the data stream of user 1.

[0020] The OLT configures the transmission container corresponding to the created GEM port.

[0021] The OLT configures the bandwidth parameter of the DBA (Dynamic Bandwidth Allocation) of the transmission container as a high bandwidth parameter. DBA includes fixed bandwidth, guaranteed bandwidth, and maximum bandwidth, and sets a three-level control rule for the bandwidth allocation of the ONU.

[0022] Then, the OLT sends a transmission container configuration message to the ONU. After receiving the transmission container configuration message, the ONU creates a corresponding transmission container and sets the bandwidth parameter of the created transmission container as the high bandwidth parameter carried by the message.

[0023] In this application, the OLT uses the OMCI (ONT Management and Control Interface) protocol for the transmission container, GEM Port, and bandwidth configuration of the ONU, directly controls the GPON protocol stack parameters of the ONU, and does not require local configuration of the ONU.

[0024] Step 102: The OLT sends a GEM port creation message to the ONU, and the ONU creates a GEM port bound to the transmission container.

[0025] Step 103: The ONU binds the GEM port to the accessed service terminal.

[0026] The service flow of the user is bound to the GEM port, and the service terminal of the user accesses the ONU, and the ONU binds the service terminal of the user to the GEM port.

[0027] Step 104: The OLT determines that the service terminal has not completed the security authentication.

[0028] Since the initial state set by the OLT is that the security authentication fails, based on the maintained security authentication status of the service terminal of the user, the OLT determines that the service terminal of the user has not completed the security authentication.

[0029] Step 105: The OLT modifies the high-width parameter of the transmission container to a low-bandwidth parameter much smaller than it.

[0030] To avoid the traffic sent by the service terminal of the unauthenticated user from occupying the uplink bandwidth, the OLT sends a transmission container configuration message to the ONU. The ONU modifies the initially set high-bandwidth parameter of the transmission container to a low-bandwidth parameter much smaller than the high-bandwidth parameter; and generates a bandwidth modification message carrying the low-bandwidth parameter, and sets the high-bandwidth parameter of the transmission container to another low-bandwidth parameter carried by the message that is much smaller than it.

[0031] The OLT allocates an uplink transmission time window for the ONU according to the modified small-bandwidth parameter.

[0032] The ONU sends an uplink message according to the uplink transmission time window authorized by the OLT.

[0033] In this way, the security authentication messages of the service terminal of the user, such as 802.1X authentication protocol messages and portal authentication protocol messages, still pass through the ONU and are sent to the OLT without occupying too much uplink bandwidth.

[0034] Figure 2 This is the flowchart of the embodiment for controlling the uplink bandwidth of the security authentication service terminal in the optical network provided by this application;

[0035] Step 201, the ONU sends a security authentication message of the service terminal to the OLT, and the OLT completes the security authentication.

[0036] The ONU receives the security authentication message (message) of the service terminal and sends it to the OLT through the PON port connecting the OLT. The OLT receives the security authentication message and performs security authentication based on authentication information such as the MAC address and IP address and passes the security authentication.

[0037] Step 202, the OLT determines that the service terminal has passed the security authentication, and modifies the low-bandwidth parameter of the transmission container to the high-bandwidth parameter.

[0038] After the OLT completes the security authentication, it records the security authentication information of the user's service terminal, sets the aging time, and modifies the low-bandwidth parameter of the transmission container to a high-bandwidth parameter.

[0039] The ONU receives the service packets of the service terminal, maps the service packets sent by the service terminal to the GEM port; encapsulates the service packets into GEM packets (GPON Encapsulation Method, GPON encapsulation mode) based on the GEM port, and caches the encapsulated packets into the cache queue corresponding to the transmission container; sends the GEM packets cached in the cache queue in the upstream transmission time window of the transmission container specified by the OLT; this upstream transmission time window corresponds to the high-bandwidth parameter and is larger than the time window corresponding to the previous low-bandwidth parameter.

[0040] Figure 3 Flowchart of an embodiment for controlling the upstream bandwidth of a service terminal for security authentication aging in an optical network provided by this application

[0041] Step 301, the OLT determines that the security authentication of the maintained service terminal has aged.

[0042] After the aging time of the security authentication information of the service terminal maintained on the OLT arrives, the OLT will re-authenticate the service terminal. Before the user's service terminal passes the re-authentication, it cannot occupy too much upstream bandwidth.

[0043] Step 302, the OLT modifies the high-bandwidth parameter of the transmission container to a low-bandwidth parameter.

[0044] After that, the OLT allocates the upstream transmission window according to the low-bandwidth parameter of the transmission container.

[0045] In this way, the upstream bandwidth of the user's service terminal sent to the OLT is reduced again until the OLT re-completes the security authentication of the service terminal.

[0046] Processor-executable instructions Figure 4 Schematic diagram of an embodiment of a device for controlling the upstream bandwidth in an optical network provided by this application. This device 40 can be used as an optical line terminal; the device 40 includes a processor and a memory; the memory is used to store machine-executable instructions; among them, the processor 41 executes the following operations by running the machine-executable instructions in the memory 42: notify the optical network unit to configure a transmission container with a first bandwidth parameter; notify the optical network unit to create a GPON encapsulation mode port GEM port that binds to the transmission container; notify the optical network unit to bind the GEM port to the service terminal accessing the optical network unit; determine that the service terminal has not completed the security authentication and modify the first bandwidth parameter of the transmission container to a second bandwidth parameter; the second bandwidth parameter is much smaller than the first bandwidth parameter.

[0047] The processor 41 also performs the following operations by running the machine-executable instructions in the memory 42: determining that the service terminal has passed the security authentication; modifying the second bandwidth parameter of the transmission container to the first bandwidth parameter.

[0048] The processor 41 also performs the following operations by running the machine-executable instructions in the memory 42: determining that the security authentication of the maintained service terminal has aged; modifying the first bandwidth parameter of the transmission container to the second bandwidth parameter.

[0049] Figure 5 FIG. is a schematic diagram of an embodiment of an apparatus for controlling the upstream bandwidth in an optical network provided in this application. The apparatus 50 can be used as an optical line terminal; the apparatus 50 includes a processor 51 and a memory 52; the memory 52 is used to store machine-executable instructions; wherein, the processor 51 performs the following operations by running the machine-executable instructions in the memory 52: receiving a transmission container configuration message from an optical line terminal OLT; configuring a transmission container with a first bandwidth parameter; receiving a GPON encapsulation mode port GEM port creation message from the OLT; creating a GEM port bound to the transmission container; receiving a service terminal binding message from the OLT; binding the accessed service terminal to the GEM port based on the service terminal binding message, so that the OLT modifies the first bandwidth parameter of the transmission container to a second bandwidth parameter; wherein the second bandwidth parameter is much smaller than the first bandwidth parameter.

[0050] The processor 51 also performs the following operations by running the machine-executable instructions in the memory 52: sending a security authentication message of the service terminal to the OLT so that after the OLT performs a complete security authentication on the service terminal, the second bandwidth parameter of the transmission container is modified to the first bandwidth parameter.

[0051] The processor 51 also performs the following operations by running the machine-executable instructions in the memory 52: identifying the packet mapping GEM port from the service terminal; encapsulating the packet based on the GEM port and caching it to the cache queue corresponding to the transmission container; sending the encapsulated packet cached in the cache queue in the upstream transmission time window of the transmission container specified by the OLT.

[0052] In this application, the machine-readable storage medium can be any electronic, magnetic, optical, or other physical storage device used to store or contain information (such as executable instructions, data, etc.). For example, any machine-readable storage medium herein can be any type of random access memory (RAM), volatile memory, non-volatile memory, flash memory, storage drive (such as a hard disk drive), solid-state drive, any type of storage optical disc (such as an optical disc, DVD, etc.), and similar devices, or a combination thereof. In addition, any machine-readable storage medium described herein can be a non-transitory machine-readable storage medium.

[0053] The above are only the preferred embodiments of the present application and are not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present application shall be included within the scope of protection of the present application.

Claims

1. A method for controlling upstream bandwidth in an optical network, applied to an optical line terminal OLT, characterized in that: The method comprises: Notifying the optical network unit to configure a transmission container having a first bandwidth parameter; Notify the optical network unit to create a GPON encapsulation mode port GEM port bound to the transmission container; Notify the optical network unit to bind the GEM port to a service terminal connected to the optical network unit; Determining that the service terminal has not completed security authentication; The first bandwidth parameter of the transmission container is modified to a second bandwidth parameter; the second bandwidth parameter is much smaller than the first bandwidth parameter.

2. The method according to claim 1, characterized in that The method further comprises: Determining that the service terminal passes security authentication; The second bandwidth parameter of the transmission container is modified to the first bandwidth parameter.

3. The method according to claim 2, characterized in that The method further comprises, Determining that the security authentication of the service terminal being maintained has aged; The first bandwidth parameter of the transmission container is modified to the second bandwidth parameter.

4. A method for controlling upstream bandwidth in an optical network, applied to an optical network unit, characterized in that: The method comprises: Receiving a transmission container configuration message from an optical line terminal OLT; configuring a transport container having a first bandwidth parameter; Receiving a GPON encapsulation mode port GEM port creation message from the OLT; Create a GEM port bound to the transport container; Receiving a service terminal binding message from the OLT; The accessed service terminal is bound to the GEM port based on the service terminal binding message, so that the OLT modifies the first bandwidth parameter of the transmission container to a second bandwidth parameter based on the incomplete security authentication state of the service terminal; wherein the second bandwidth parameter is much smaller than the first bandwidth parameter.

5. The method according to claim 4, characterized in that The method further comprises: Sending a security authentication message of the service terminal to the OLT, so that the OLT modifies the second bandwidth parameter of the transmission container to the first bandwidth parameter based on a security authentication pass result in the service.

6. The method according to claim 5, characterized in that The method further comprises: Identify the message from the service terminal and map it to the GEM port; Encapsulating the message based on the GEM port and caching it in a cache queue corresponding to the transmission container; The encapsulated message buffered in the buffer queue is sent in the uplink sending time window of the transmission container specified by the OLT.

7. A device for controlling upstream bandwidth in an optical network, characterized in that: The device as an optical line terminal includes a processor and a memory; the memory is used to store machine executable instructions; wherein the processor performs the following processing by running the processor in the memory: Notifying the optical network unit to configure a transmission container having a first bandwidth parameter; Notify the optical network unit to create a GPON encapsulation mode port GEM port bound to the transmission container; Notify the optical network unit to bind the GEM port to a service terminal connected to the optical network unit; Determining that the service terminal has not completed security authentication; The first bandwidth parameter of the transmission container is modified to a second bandwidth parameter; the second bandwidth parameter is much smaller than the first bandwidth parameter.

8. The device according to claim 7, characterized in that The processor executes the following processing by running the processor in the memory: Determining that the service terminal passes security authentication; The second bandwidth parameter of the transmission container is modified to the first bandwidth parameter.

9. The device according to claim 7, characterized in that The processor executes the following processing by running the processor in the memory: Determining that the security authentication of the service terminal being maintained has aged; The first bandwidth parameter of the transmission container is modified to the second bandwidth parameter.

10. A device for controlling upstream bandwidth in an optical network, characterized in that: The device as an optical network unit includes a processor and a memory; the memory is used to store machine-executable instructions; wherein the processor executes any one of the methods of claim 4 to claim 6 by running the processor in the memory.

Images