A terminal-oriented VLAN classification admission and QoS scheduling method, device, equipment and medium

Abstract

The application discloses a terminal-oriented VLAN classification access and QoS scheduling method, device, equipment and medium, and relates to the technical field of wireless communication. The method comprises the following steps: acquiring full-dimension characteristic information of a terminal initiating a network access request; obtaining a corresponding level of the terminal according to the full-dimension characteristic information; determining a target VLAN partition corresponding to the terminal through a first mapping table based on the corresponding level; performing security check and quality check on the terminal according to the target VLAN partition; if the security check and the quality check are both passed, allowing the terminal to access the target VLAN partition, and allocating network access parameters of the target partition to the terminal; matching a corresponding QoS scheduling strategy from a second mapping table according to the level attribute of the target VLAN partition; and performing scheduling on data flow of the terminal in the target VLAN partition according to the corresponding QoS scheduling strategy. The method can improve the accuracy of VLAN classification access and QoS scheduling of the terminal.

Description

Technical Field

[0001] This application relates to the field of wireless communication technology, and in particular to a terminal-oriented VLAN classification admission and QoS scheduling method, apparatus, device and medium. Background Technology

[0002] With the iterative upgrades of 802.11 wireless communication technology, wireless terminals are becoming increasingly widespread in scenarios such as campus networks, enterprise offices, and smart buildings. These massive numbers of wireless terminals include various types such as office computers, smart terminals, and business terminals, and the services they carry present significantly different demands on network service quality: core office work and business data transmission require low latency and high reliability; high-definition video and large file transfers require high bandwidth; while ordinary internet browsing and messaging have no stringent network performance constraints. How to achieve refined allocation of network resources and differentiated service quality assurance in scenarios with dense terminal access has become a key issue that urgently needs to be addressed in the field of wireless LAN management.

[0003] However, existing technologies suffer from inaccurate VLAN classification and QoS scheduling for terminals. Summary of the Invention

[0004] This application provides a terminal-oriented VLAN classification and admission and QoS scheduling method, apparatus, device and medium, which can improve the accuracy of VLAN classification and admission and QoS scheduling for terminals.

[0005] To achieve the above objectives, this application adopts the following technical solution: Firstly, this application provides a terminal-oriented VLAN classification admission and QoS scheduling method, including: Obtain full-dimensional feature information of the terminal that initiated the network access request; Based on the full-dimensional feature information, the corresponding level of the terminal is obtained; Based on the terminal's corresponding level, the target VLAN partition corresponding to the terminal is determined by matching a preset first mapping table; Based on the target VLAN partition, perform security and quality verification on the terminal; If both the security check and the quality check pass, the terminal is allowed to access the target VLAN partition, and the network access parameters of the target VLAN partition are assigned to the terminal. Based on the level attribute of the target VLAN partition, the corresponding Quality of Service (QoS) scheduling policy is matched from the preset second mapping table; According to the corresponding QoS scheduling policy, the data flow of the terminal in the target VLAN partition is scheduled.

[0006] Optionally, if both the security check and the quality check pass, the terminal is allowed to access the target VLAN partition, and network access parameters for the target VLAN partition are assigned to the terminal, including: When the terminal's unique device identifier is in the access permission list of the target VLAN partition, and the service set identifier and wireless communication protocol accessed by the terminal are valid, the security verification result is obtained. Based on the remaining bandwidth of the target VLAN partition, the number of connected terminals, and the current wireless network load, determine whether the remaining network resources of the target VLAN partition meet the service quality requirements of the terminals. If the remaining network resources of the target VLAN partition meet the service quality requirements of the terminal, then the quality verification result is passed; Based on the results of both the security and quality checks, a double verification result is obtained. Based on the successful dual verification result, the terminal is allowed to access the target VLAN partition, and network access parameters for the target VLAN partition are assigned to the terminal.

[0007] Optionally, obtaining the terminal's corresponding level based on the full-dimensional feature information includes: Based on the QoS requirement level and service type in the full-dimensional feature information, the terminal is divided into core service terminal, important service terminal, or ordinary service terminal.

[0008] Optionally, after allowing the terminal to access the target VLAN partition, the method further includes: Monitor the bandwidth utilization, average end-to-end latency, and average packet loss rate of the target VLAN partition; When the bandwidth utilization rate is greater than or equal to the utilization rate threshold, dynamic adjustment of the VLAN admission policy is triggered. When the average end-to-end latency is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, dynamic adjustment of QoS scheduling parameters is triggered.

[0009] Optionally, the dynamic adjustment of the VLAN admission policy includes: When the monitored bandwidth utilization is greater than or equal to the utilization threshold, restrict new terminals from accessing the target VLAN partition, or guide new terminals to access a backup VLAN partition of the same level.

[0010] Optionally, the dynamic adjustment of QoS scheduling parameters includes: When the average end-to-end latency detected is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, the scheduling priority of the core service terminals in the target VLAN partition is increased, and the corresponding bandwidth reservation ratio is increased. Update the forwarding queue configuration of the target VLAN partition based on the adjusted priority and bandwidth reservation ratio.

[0011] Optionally, the method further includes: When a terminal is detected to be disconnected, has abnormal traffic, or has a signal strength lower than the strength threshold, the terminal is marked in the VLAN terminal access status table, and the network and wireless resources occupied by the terminal are released.

[0012] Secondly, this application provides a terminal-oriented VLAN classification and admission and QoS scheduling device, comprising: The acquisition module is used to acquire full-dimensional feature information of the terminal that initiated the network access request; The processing module is used to obtain the level corresponding to the terminal based on the full-dimensional feature information; determine the target VLAN partition corresponding to the terminal based on the level of the terminal by matching a preset first mapping table; perform security verification and quality verification on the terminal according to the target VLAN partition; if both the security verification and the quality verification pass, the terminal is allowed to access the target VLAN partition, and network access parameters of the target VLAN partition are allocated to the terminal; and match the corresponding Quality of Service (QoS) scheduling policy from a preset second mapping table according to the level attribute of the target VLAN partition. The scheduling module is used to schedule the data flow of the terminal in the target VLAN partition according to the corresponding QoS scheduling policy.

[0013] Thirdly, this application provides a computing device, including a memory and a processor; The memory stores one or more computer programs, the one or more computer programs including instructions; when the instructions are executed by the processor, the computing device performs the method as described in any one of the first aspects.

[0014] Fourthly, this application provides a computer-readable storage medium for storing a computer program for performing the method as described in any one of the first aspects.

[0015] As can be seen from the above technical solution, this application has at least the following beneficial effects: In this application, the level classification is completed based on the full-dimensional feature information of the terminal, and the target VLAN partition is determined by matching the preset mapping table. This allows the VLAN classification and admission to have accurate feature basis, effectively avoiding the resource crowding problem caused by terminals with different service needs accessing the same VLAN in an unordered manner, and improving the resource isolation effect and utilization efficiency of VLAN partitions. Furthermore, dual access verification for security and quality is performed on the terminal. While verifying the legality of the terminal access, the remaining resource status of the target VLAN partition is combined to determine whether the terminal's QoS requirements are met. This avoids the situation where excessive access by low-priority terminals crowds out core business resources from the source of access, and ensures the access quality of high-level business terminals. Furthermore, by matching the corresponding QoS scheduling policy based on the level attribute of the target VLAN partition and executing data flow scheduling, the binding of VLAN partition and QoS scheduling policy is realized, so that the differentiated network requirements of different levels of service terminals can be met in a targeted manner, and the low latency and high reliability requirements of core services and the high bandwidth requirements of important services can be effectively guaranteed. Finally, after the terminal connects, the bandwidth utilization, latency, packet loss rate, and other indicators of the VLAN partition are monitored. Based on preset thresholds, the VLAN admission policy and QoS scheduling parameters are dynamically adjusted accordingly. This allows the network management policy to adapt to the dynamic changes of the wireless network, effectively solving the scheduling failure problem in scenarios such as traffic bursts and resource shortages, and improving the dynamic adaptability of the wireless network. In case of terminal disconnection, abnormal traffic, or low signal strength, the terminal is marked in time and its occupied network and wireless resources are released, avoiding invalid resource occupation and further improving the overall resource utilization of the wireless network. At the same time, more resources are reserved for the access and scheduling of other terminals, ensuring the overall operating efficiency of the wireless network.

[0016] It should be understood that the descriptions of technical features, technical solutions, beneficial effects, or similar language in this application do not imply that all features and advantages can be achieved in any single embodiment. Rather, it is understood that the description of a feature or beneficial effect means that a specific technical feature, technical solution, or beneficial effect is included in at least one embodiment. Therefore, the descriptions of technical features, technical solutions, or beneficial effects in this specification do not necessarily refer to the same embodiment. Furthermore, the technical features, technical solutions, and beneficial effects described in this embodiment can be combined in any suitable manner. Those skilled in the art will understand that embodiments can be implemented without one or more specific technical features, technical solutions, or beneficial effects of a particular embodiment. In other embodiments, additional technical features and beneficial effects may be identified in specific embodiments that do not embody all embodiments. Attached Figure Description

[0017] Figure 1 A flowchart illustrating a terminal-oriented VLAN classification admission and QoS scheduling method provided in this application embodiment; Figure 2 A schematic diagram of a terminal-oriented VLAN classification admission and QoS scheduling device provided in an embodiment of this application; Figure 3This is a schematic diagram of a computing device provided in an embodiment of this application. Detailed Implementation

[0018] The terms "first," "second," and "third," etc., used in this application specification and accompanying drawings are used to distinguish different objects, not to limit a specific order.

[0019] In the embodiments of this application, the terms "exemplary" or "for example" are used to indicate that something is an example, illustration, or description. Any embodiment or design that is described as "exemplary" or "for example" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or design. Specifically, the use of the terms "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0020] To ensure clarity and conciseness in the description of the following embodiments, a brief introduction to the related technologies is given first: Virtual Local Area Network (VLAN) is a technology that logically divides a physical local area network into multiple different broadcast domains. It can achieve logical isolation of network resources and avoid interference between different service traffic. It is the core technology for the partitioning and isolation of wireless network terminal resources. Each VLAN partition has an independent network resource pool and access rules.

[0021] Quality of Service (QoS) is a technology that provides differentiated network service guarantees for different services through bandwidth allocation, priority scheduling, latency control, packet loss rate limitation, and other means. It can meet the diverse network performance requirements of different services such as core office, high-definition video, and general Internet access.

[0022] With the widespread adoption of 802.11 wireless communication technology and the large-scale deployment of wireless terminals in scenarios such as campus networks, enterprise offices, and smart buildings, the services carried by a massive number of different types of terminals exhibit significantly differentiated service quality requirements. Core office services require low latency and high reliability, high-definition video services require high bandwidth, while ordinary internet access services have no strict performance constraints. However, existing technologies for VLAN classification and QoS scheduling of terminals have significant accuracy issues, making it impossible to achieve fine-grained allocation of network resources in scenarios with dense terminal access, and also making it difficult to provide targeted differentiated service quality assurance for different services. This has become a technical problem that urgently needs to be solved in the field of wireless LAN management.

[0023] The inaccuracies in VLAN classification and QoS scheduling in existing technologies are caused by multiple technical defects: First, VLAN classification and admission fail to collect full-dimensional terminal characteristic information, making it impossible to achieve fine-grained terminal classification and accurate VLAN matching based on service type and QoS requirement level, resulting in disordered access for terminals with different needs; second, terminal admission only performs simple security checks, failing to include the remaining resources of the target VLAN partition and the terminal's QoS requirements in the verification scope, making it easy for low-priority terminals to occupy core service resources; third, the relationship between VLAN partition level attributes and QoS scheduling policies is not established, leading to a disconnect between QoS scheduling and actual terminal needs; fourth, after terminal access, there is a lack of continuous monitoring of core network indicators of VLAN partitions and dynamic policy adjustments triggered by thresholds, making fixed policies unable to adapt to the dynamic changes in the wireless network; fifth, there is no effective full lifecycle resource management for connected terminals, and resources cannot be released in a timely manner when terminals disconnect or experience abnormal traffic, resulting in ineffective occupation of network resources. The defects in each link overlap, ultimately leading to poor overall control performance.

[0024] In view of this, embodiments of this application provide a terminal-oriented VLAN classification admission and QoS scheduling method, which can be executed by a network management and control device.

[0025] This application addresses the technical problem of insufficient accuracy in existing VLAN classification and QoS scheduling in dense 802.11 wireless terminal access scenarios, which prevents the fine-grained allocation of network resources and differentiated quality of service assurance. It achieves fine-grained VLAN classification by collecting full-dimensional characteristic information of terminals, determines target VLAN partitions by combining a preset mapping table, introduces dual security and quality verification to control the rationality of access from the source, establishes a dedicated mapping relationship between VLAN partitions and QoS scheduling policies to achieve scheduling, continuously monitors network operation indicators and triggers dynamic policy adjustments, and includes a resource reclamation mechanism after terminal access. Ultimately, it solves problems such as disordered terminal access, resource crowding, scheduling disconnect from demand, and static and rigid policies, achieving fine-grained allocation of wireless network resources and differentiated quality of service assurance for different service terminals.

[0026] To make the technical solution of this application clearer and easier to understand, the following description, in conjunction with the accompanying drawings, introduces a terminal-oriented VLAN classification admission and QoS scheduling method provided by an embodiment of this application. Figure 1 As shown, this figure is a flowchart of a terminal-oriented VLAN classification admission and QoS scheduling method provided in an embodiment of this application. The method includes: S201. The network management and control device acquires full-dimensional feature information of the terminal that initiated the network access request.

[0027] Network management and control equipment refers to network devices with the ability to manage wireless network resources, control terminal access, and schedule quality of service. It is the main body for implementing this method and may include wireless AC (wireless controller), core switch, edge gateway, etc. It can realize full-process management and control operations such as terminal feature collection, access verification, policy configuration and dynamic adjustment.

[0028] The terminal that initiates the network access request refers to various devices that actively initiate a connection request to the wireless network in accordance with the 802.11 wireless communication protocol, including office computers, smart terminals, and business terminals. It is the subject of this method and the main body for accessing the wireless network.

[0029] Full-dimensional feature information refers to a collection of various information that can comprehensively characterize the attributes, business behaviors, and network requirements of terminal devices. It serves as the basis for terminal classification, VLAN matching, and QoS scheduling. Specifically, it includes three types of features: inherent terminal features (device type, unique device identifier, access wireless frequency band, signal strength, etc.), business attribute features (type of services carried, business traffic characteristics, etc.), and quality of service requirement features (QoS requirement level, latency threshold, bandwidth requirement, packet loss rate threshold, etc.).

[0030] Network management and control equipment actively collects and receives full-dimensional characteristic information of 802.11 wireless terminals that initiate connection requests to the wireless network through network access nodes such as wireless APs and access switches. This information covers the inherent attributes of the terminal, the actual service characteristics it carries, and its specific requirements for network service quality. It serves as the basic data basis for subsequent terminal classification, target VLAN partition matching, access verification, and QoS scheduling policy configuration.

[0031] This step is the starting point of the entire technical solution. By acquiring full-dimensional and accurate feature information, it solves the problems of lack of effective feature basis for terminal control and the extensive hierarchical and scheduling methods in the existing technology, laying the data foundation for all subsequent refined control operations.

[0032] S202. The network management and control equipment obtains the corresponding level of the terminal based on the full-dimensional feature information.

[0033] Specifically, based on the QoS requirement level and service type in the full-dimensional feature information, the terminals are divided into core service terminals, important service terminals, or ordinary service terminals.

[0034] QoS requirement level is an indicator of service quality requirement characteristics among the full-dimensional feature information of a terminal. It refers to the differentiated requirement level of the terminal that initiates the access request based on the attributes of the service it carries, and the performance of the wireless network such as latency, bandwidth, packet loss rate, and reliability. It is one of the criteria for determining the classification of terminals.

[0035] The service type is a service attribute feature in the full-dimensional feature information of the terminal, which refers to the type of network service actually carried by the terminal. In this application, it is specifically divided into core office, business data transmission, high-definition video, large file transmission, ordinary Internet access, message interaction and other types. Different service types correspond to different network performance requirements, which is another basis for determining the terminal classification.

[0036] Core business terminals refer to terminals that carry core business functions such as core office work, business data transmission, and issuance of critical instructions. Their QoS requirements are at the highest level, and their core demands on the network are low latency, high reliability, and low packet loss rate. They are the priority targets for wireless network resource protection.

[0037] Important business terminals refer to terminals that carry important services such as high-definition video, large file transfer, and equipment status monitoring. Their QoS requirements are medium level, and their core network requirements are high bandwidth and medium reliability. Targeted network resource guarantees are needed after the core business terminals.

[0038] Ordinary service terminals refer to terminals that carry out ordinary services such as ordinary Internet access, message interaction, and low-frequency data reporting. Their QoS requirements are at the basic level, without strict network performance constraints, and they adopt a best-effort guarantee method for wireless network resources.

[0039] When analyzing the full-dimensional feature information of terminals, network management and control equipment does not make indiscriminate judgments on all features. Instead, it extracts two core features, QoS requirement level and service type, as the sole basis for classification. Through preset classification rules, the two are correlated and matched: terminals carrying core services and with the highest QoS requirement level are classified as core service terminals; terminals carrying important services and with a medium QoS requirement level are classified as important service terminals; and terminals carrying ordinary services and with a basic QoS requirement level are classified as ordinary service terminals.

[0040] This specific classification method provides clear, unified, and implementable criteria for terminal classification, avoiding subjectivity and ambiguity in classification. At the same time, it achieves a high degree of matching between terminal service attributes and network requirements, enabling subsequent VLAN classification admission and QoS scheduling based on grade to meet the actual service needs of terminals. It is a crucial link in achieving refined management and control of wireless networks and also solves the problem of unclear basis and disconnect between terminal classification and service requirements in existing technologies.

[0041] S203. The network management and control device determines the target VLAN partition corresponding to the terminal by matching the preset first mapping table based on the level corresponding to the terminal.

[0042] The preset first mapping table is a standardized mapping table pre-configured in the network management and control equipment that establishes a one-to-one correspondence between terminal level and VLAN partition. It provides a direct rule basis for matching terminal level with target VLAN partition. The table clearly specifies the exclusive VLAN partitions corresponding to core business terminals, important business terminals, and ordinary business terminals, and supports flexible configuration and modification according to actual network needs.

[0043] A target VLAN partition refers to a logical VLAN partition that matches the terminal level and is exclusively planned for that level of terminal. Different levels of terminals correspond to different target VLAN partitions. Each partition has an independent network resource pool and access rules to achieve logical isolation of network resources for terminals of different levels.

[0044] After classifying the terminal that initiated the access request, the network management and control device uses the terminal's corresponding class as the matching basis to search in the first mapping table pre-configured by the device. By matching the terminal class with the pre-set VLAN partition in the table, a unique target VLAN partition is determined for the terminal. That is, core business terminals are matched with core business-specific VLAN partitions, important business terminals are matched with important business-specific VLAN partitions, and ordinary business terminals are matched with ordinary business-specific VLAN partitions.

[0045] This step is a crucial VLAN partitioning step in the technical solution. It builds upon the terminal level classification results, translating standardized terminal levels into specific VLAN partitions. It also paves the way for subsequent VLAN classification and admission verification, as well as QoS scheduling policy configuration, defining clear partition objects for later operations. This operation achieves standardized and automated matching of terminal levels to VLAN partitions through a pre-defined mapping table. This improves the efficiency and accuracy of partitioning matching and, from an architectural perspective, achieves logical isolation of network resources for terminals of different levels. It solves the problems in existing technologies where terminal VLAN partitioning lacks clear criteria and terminals with different needs access the same partition in an unordered manner.

[0046] S204. The network management and control equipment performs security and quality verification on the terminal according to the target VLAN partition.

[0047] Security verification is a verification operation conducted to check the legitimacy of a terminal's access to a wireless network. Based on the access rules of the target VLAN partition, it verifies whether the terminal has the legitimate permission to access the partition. It is the basic security gate for terminal access and ensures the security of wireless network access.

[0048] Quality verification is a verification operation conducted to check the rationality of terminal access. It combines the real-time resource status of the target VLAN partition with the QoS requirements of the terminal to determine whether the remaining resources of the partition can meet the network service requirements after the terminal accesses. It is the resource rationality checkpoint for terminal access and avoids resource crowding problems from the source.

[0049] After determining the corresponding target VLAN partition for a terminal initiating an access request, the network management and control equipment performs two access verification operations on the terminal sequentially: security verification and quality verification, based on the access rules and resource status of that target VLAN partition. This step is the key to terminal access management in the technical solution. It follows the matching result of the target VLAN partition, defining specific partition reference standards for verification; and it initiates the final access determination of the terminal. Only when both verifications pass can the terminal be qualified to access the target VLAN partition.

[0050] S205. If both the security check and the quality check pass, the terminal is allowed to access the target VLAN partition, and the network access parameters of the target VLAN partition are assigned to the terminal.

[0051] Specifically, when the terminal's unique device identifier is in the access permission list of the target VLAN partition, and the service set identifier and wireless communication protocol accessed by the terminal are valid, the security verification result is obtained.

[0052] The device unique identifier is a hardware identifier used to uniquely identify a wireless terminal. It is the terminal's MAC address and serves as an identifier to verify the terminal's access permissions, ensuring that the identity of the access terminal is traceable and its permissions are verifiable.

[0053] The access permission list is a pre-configured list of legitimate terminal identifiers for a target VLAN partition. Only terminals marked on the list have the basic permissions to access the VLAN partition, and it serves as the basis for security verification.

[0054] The Service Set Identifier (SSID) is the name identifier of a wireless network, used to distinguish different wireless local area networks. Terminals need to access a valid SSID to initiate an access request for the corresponding VLAN partition, which is an important dimension of security verification.

[0055] Wireless communication protocols are the 802.11 series of communication standards (such as 802.11n / ac / ax, etc.) that terminals follow when interacting with wireless networks. Only terminals that support legitimate protocols can communicate normally with network management equipment and wireless APs, which is a basic condition for security verification.

[0056] The network management and control equipment first verifies the legitimacy of the terminal based on the access rules of the target VLAN partition. Only if the three conditions are met simultaneously—the device's unique identifier is in the access permission list of the partition, the access SSID is valid, and the wireless communication protocol used is valid—can the security verification be deemed to have passed. If any condition is not met, the terminal access is directly rejected, thus intercepting illegal and non-compliant terminals at the source and ensuring the security of wireless network access.

[0057] Based on the remaining bandwidth of the target VLAN partition, the number of connected terminals, and the current wireless network load, determine whether the remaining network resources of the target VLAN partition meet the service quality requirements of the terminals; if the remaining network resources of the target VLAN partition meet the service quality requirements of the terminals, the quality verification result is obtained.

[0058] Under the premise that the security verification is passed, the network management and control equipment further verifies the rationality of the terminal access. By collecting real-time resource status data such as the remaining bandwidth of the target VLAN partition, the number of connected terminals, and the current wireless network load, and combining it with the QoS requirements of the terminal (latency, bandwidth, packet loss rate, etc.), it comprehensively judges whether the remaining network resources of the partition can support the normal communication after the terminal accesses. If the resources can meet the requirements, the quality verification is deemed to have passed, thus avoiding the resource crowding problem caused by disorderly access of terminals when resources are scarce.

[0059] Based on the security verification result and the quality verification result, a double verification result is obtained; based on the double verification result, the terminal is allowed to access the target VLAN partition, and the network access parameters of the target VLAN partition are assigned to the terminal.

[0060] The network management and control equipment will comprehensively judge the security verification results and the quality verification results. Only when both verifications pass can a double verification pass result be generated. This result is the core credential for the terminal to obtain access qualification, and neither can be missing.

[0061] After receiving the double verification result, the network management device officially allows the terminal to access the corresponding target VLAN partition and automatically assigns the terminal exclusive network access parameters for that partition, ensuring that the terminal can achieve normal network communication within the VLAN partition. At the same time, the terminal information is entered into the VLAN terminal access status table, completing the formal access process for the terminal.

[0062] S206. The network management and control device matches the corresponding Quality of Service (QoS) scheduling policy from the preset second mapping table according to the level attribute of the target VLAN partition.

[0063] The level attribute of a target VLAN partition refers to the hierarchical attributes that a target VLAN partition possesses, which are matched with the terminal level. These attributes are exclusive to the VLAN partition based on the service level of the terminal it carries, and they correspond one-to-one with the terminal level. They are divided into three categories: core services, important services, and ordinary services, and directly determine the network resource allocation priority and QoS guarantee standard of the VLAN partition.

[0064] The pre-configured second mapping table is a standardized mapping table pre-configured in the network management and control device that establishes a one-to-one correspondence between VLAN partition level attributes and QoS scheduling policies. It provides a direct rule basis for matching VLAN partitions with exclusive QoS scheduling policies. The table clearly specifies a complete set of QoS scheduling parameters, such as scheduling priority, bandwidth reservation, and packet loss rate threshold, for VLAN partitions with different level attributes, and supports flexible configuration according to actual network needs.

[0065] The Quality of Service (QoS) scheduling policy is a set of dedicated management rules designed to meet the differentiated network requirements of VLAN partitions with different attribute levels. It includes parameters such as scheduling priority, bandwidth reservation ratio, forwarding queue configuration, latency / packet loss rate threshold, and wireless resource allocation rules. It is a specific implementation plan to achieve differentiated quality of service assurance.

[0066] After completing the dual verification and access control of the terminal and confirming that the terminal has successfully accessed the target VLAN partition, the network management and control equipment uses the level attribute of the target VLAN partition as the core retrieval basis and performs accurate rule matching in the second mapping table pre-configured in the equipment. Through the correspondence between the VLAN partition level attribute and the preset QoS scheduling policy in the table, a unique and suitable QoS scheduling policy is extracted for the target VLAN partition. That is, VLAN partitions with core service level attributes are matched with the highest level QoS scheduling policy, VLAN partitions with important service level attributes are matched with the medium level QoS scheduling policy, and VLAN partitions with ordinary service level attributes are matched with the basic level QoS scheduling policy.

[0067] S207. The network management and control equipment schedules the data flow of the terminal in the target VLAN partition according to the corresponding QoS scheduling policy.

[0068] Data flow refers to the uplink and downlink data transmission streams generated in the network after a terminal accesses the target VLAN partition. It is the direct control object of QoS scheduling. Different service terminals have different service quality requirements for their data flows (such as core service data flows requiring low latency and low packet loss, and important service data flows requiring high bandwidth).

[0069] After matching a dedicated QoS scheduling policy to a target VLAN partition, the network management and control equipment uses this policy as the basis for execution. It then performs targeted network resource scheduling and transmission control operations on various data streams generated by terminals that have successfully accessed the partition. Specifically, according to the preset scheduling priorities, bandwidth reservations, and forwarding rules in the policy, it assigns the highest transmission priority to data streams from core service terminals, allocates dedicated low-latency forwarding queues and reserved bandwidth to ensure low-latency, high-reliability transmission; it allocates high-bandwidth forwarding queues and enables traffic shaping mechanisms for data streams from important service terminals to ensure their high-bandwidth transmission needs; and it adopts a best-effort scheduling approach for data streams from ordinary service terminals, while limiting their peak rate and channel occupancy duration to avoid crowding out network resources for core and important services.

[0070] After allowing the terminal to access the target VLAN partition, the method further includes: Monitor the bandwidth utilization, average end-to-end latency, and average packet loss rate of the target VLAN partition; when the bandwidth utilization is greater than or equal to the utilization threshold, trigger dynamic adjustment of the VLAN admission policy; when the average end-to-end latency is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, trigger dynamic adjustment of the QoS scheduling parameters.

[0071] Bandwidth utilization refers to the proportion of network bandwidth actually used within a target VLAN partition to the total available bandwidth of that partition. It is an indicator that reflects the network resource load status of a VLAN partition. The higher the proportion, the more strained the partition resources are.

[0072] Average end-to-end latency refers to the average total transmission time of data from the sending end to the receiving end within a target VLAN partition. It is a key indicator for measuring the real-time performance of data transmission within the partition and directly affects the communication quality of latency-sensitive services such as core services.

[0073] Average packet loss rate refers to the average proportion of data packets lost during transmission within a target VLAN partition to the total number of data packets sent. It is an indicator for measuring the reliability of data transmission within the partition. An excessively high packet loss rate can lead to incomplete data transmission and communication lag.

[0074] The utilization threshold, latency threshold, and packet loss rate threshold are pre-set critical values ​​for various indicators in the network management and control equipment. They provide quantitative triggering standards for dynamic policy adjustments. When the monitored indicators reach or exceed the corresponding thresholds, it indicates that the network status can no longer meet the normal service quality requirements, and policy adjustments need to be initiated.

[0075] The expression for the bandwidth utilization threshold is:

[0076] in, This represents the bandwidth utilization threshold. This represents the VLAN level weighting coefficient. This represents the network-wide load correction factor. This indicates that bandwidth is reserved for core business operations. This indicates the total available bandwidth of the target VLAN partition. This represents the basic bandwidth utilization threshold, which is a static baseline threshold (e.g., a value of 0.8).

[0077] The expression for the delay threshold is:

[0078] in, Indicates the delay threshold. Indicates the QoS level coefficient. Indicates the baseline average end-to-end delay. Indicates the load sensitivity coefficient. Indicates real-time bandwidth utilization. This represents the link fluctuation correction factor. This indicates the fluctuation in the packet loss rate of the link.

[0079] The expression for the packet loss rate threshold is:

[0080] in, This represents the packet loss rate threshold. Indicates the VLAN level correction factor. This represents the baseline average packet loss rate threshold, which is a static benchmark threshold (such as core business logic). Take 0.1%) Represents the time delay correlation coefficient. Indicates the real-time average end-to-end latency. Indicates the delay threshold. This represents the fluctuation coefficient of the number of terminals. This indicates the change in the number of terminals per unit of time.

[0081] VLAN admission policy refers to the rule system that controls terminal access to target VLAN partitions. It includes rules related to terminal access permissions, new terminal access restrictions, and backup partition scheduling, and serves as the basis for controlling terminal access to VLAN partitions.

[0082] QoS scheduling parameters are specific quantitative indicators of QoS scheduling policies, including scheduling priority, bandwidth reservation ratio, forwarding queue configuration, latency / packet loss rate thresholds, etc., and serve as the quantitative basis for executing data flow scheduling.

[0083] After a terminal successfully accesses the target VLAN partition, the network management device does not use a fixed policy for static management. Instead, it monitors three network indicators of the partition in real time and continuously: bandwidth utilization, average end-to-end latency, and average packet loss rate. This captures changes in network resource load and service transmission quality within the partition, providing a real and timely basis for subsequent policy adjustments.

[0084] Network management equipment compares real-time monitored metrics with preset utilization, latency, and packet loss rate thresholds. Based on the exceedance of different metrics, it triggers corresponding policy adjustments, enabling targeted optimization of management policies based on which metrics are abnormal. When the bandwidth utilization rate is greater than or equal to the utilization rate threshold, it indicates that the network resources of the target VLAN partition are already under high load. Continuing to allow new terminals to access the network will exacerbate resource congestion. At this time, the dynamic adjustment of the VLAN admission policy is triggered to control resource consumption from the terminal access level and alleviate the partition load. When the average end-to-end latency is greater than or equal to the latency threshold or the average packet loss rate is greater than or equal to the packet loss rate threshold, it indicates that the service transmission quality within the target VLAN partition no longer meets the preset QoS requirements, and the low latency and high reliability requirements of core services cannot be guaranteed. At this time, dynamic adjustment of QoS scheduling parameters is triggered to optimize resource allocation and improve transmission quality from the data flow scheduling level.

[0085] When the monitored bandwidth utilization is greater than or equal to the utilization threshold, restrict new terminals from accessing the target VLAN partition, or guide new terminals to access the backup VLAN partition of the same level.

[0086] When the network management device detects that the bandwidth utilization of a target VLAN partition has reached or exceeded a preset utilization threshold, it will immediately control the access operation of new terminals in that partition. Two methods can be selected to achieve load regulation: First, directly restrict new terminals from accessing the target VLAN partition, suspend the access process of all new terminals, reduce new resource consumption from the source, quickly alleviate the existing load pressure of the partition, and ensure the normal communication of already connected terminals; Second, guide new terminals to access a backup VLAN partition of the same level. Instead of directly rejecting the access request of new terminals, they are rescheduled to a backup VLAN partition with the same level attributes as the target VLAN partition to complete the subsequent access verification and access. This achieves both load distribution of the main partition and protection of the access rights of new terminals. At the same time, since the backup partition is configured with the same configuration as the main partition, the QoS requirements of new terminals can also be guaranteed equally.

[0087] When the average end-to-end latency detected is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, the scheduling priority of the core service terminals in the target VLAN partition is increased, and the corresponding bandwidth reservation ratio is increased; the forwarding queue configuration of the target VLAN partition is updated according to the adjusted priority and bandwidth reservation ratio.

[0088] When the network management device detects that the average end-to-end latency of the target VLAN partition is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, it will immediately optimize and adjust the QoS scheduling parameters of the partition and update the actual transmission rules simultaneously. The entire operation consists of two closely linked steps: Prioritize resource upgrades for core business terminals within the partition. On one hand, increase their scheduling priority to ensure that the data flow of core business terminals receives the highest processing priority in network transmission, reducing data queuing time and latency from the transmission process. On the other hand, increase the corresponding bandwidth reservation ratio to allocate more dedicated bandwidth resources to core business terminals, preventing their bandwidth from being squeezed out by other terminals. This resource allocation addresses issues such as excessive latency and high packet loss rates caused by insufficient bandwidth. By adjusting these two parameters, the transmission needs of core businesses are maximized.

[0089] After adjusting the scheduling priority and bandwidth reservation ratio, the network management and control equipment will update the forwarding queue configuration of the target VLAN partition in real time according to the adjusted new parameters. This will implement the new priority rules and bandwidth allocation rules in the specific data flow forwarding process, so that the adjusted scheduling priority and bandwidth reservation ratio can directly affect the actual data transmission of core business terminals. This ensures that the effect of parameter adjustment can be implemented quickly, rather than just remaining at the policy level.

[0090] When a terminal is detected to be disconnected, has abnormal traffic, or has a signal strength lower than the strength threshold, the terminal is marked in the VLAN terminal access status table, and the network and wireless resources occupied by the terminal are released.

[0091] Traffic anomalies refer to situations where, after a terminal accesses a target VLAN partition, the data transmission rate, volume, and frequency deviate from the normal traffic characteristics of the terminal's services, or non-compliant abnormal traffic transmission behavior occurs. This is one of the manifestations of abnormal terminal communication status.

[0092] The signal strength threshold is a preset critical value for wireless terminal signal strength by the network management equipment. It is a quantitative standard for judging the stability of the terminal's wireless communication connection. When the signal strength is lower than this threshold, the communication between the terminal and the wireless network is prone to problems such as lag and interruption, and there is no need for the terminal to occupy network resources normally.

[0093] The VLAN terminal access status table is a management ledger in network management equipment used to record information on all terminals that have successfully accessed each VLAN partition. It includes core information such as terminal device identification, access partition, signal strength, and resource usage, and is an important basis for managing terminal access status and allocating network resources.

[0094] Releasing network and wireless resources refers to the operation by which network management equipment reclaims the network and wireless resources originally occupied by abnormal terminals, such as bandwidth, forwarding queues, IP addresses, and wireless channels, and re-incorporates them into the resource pool of the corresponding VLAN partition for use by other normal terminals. This is a means of improving resource utilization.

[0095] When the network management device detects any abnormal state of the terminal during continuous monitoring—such as the terminal losing its connection to the wireless network, the terminal exhibiting abnormal traffic transmission behavior, or the terminal's wireless signal strength falling below a preset strength threshold—it will immediately initiate targeted resource management operations. The entire process consists of two interconnected and indispensable steps: The network management and control device first marks the abnormal terminal in the VLAN terminal access status table and updates its access status to abnormal / disconnected. This allows the management and control device to identify the abnormal status of the terminal, avoid ineffective resource scheduling and QoS guarantee, and also provide status basis for subsequent operations such as terminal reconnection verification and access permission restriction.

[0096] After the status marking is completed, the network management device will immediately reclaim and release all network resources (such as allocated IP addresses, dedicated bandwidth, forwarding queue resources, etc.) and wireless resources (such as occupied wireless channels, channel duration, etc.) occupied by the abnormal terminal, and return these resources to the public resource pool of the corresponding target VLAN partition for use by other normally communicating terminals or newly connected compliant terminals in that partition.

[0097] Based on the above description, this application has the following beneficial effects: In this application, the level classification is completed based on the full-dimensional feature information of the terminal, and the target VLAN partition is determined by matching the preset mapping table. This allows the VLAN classification and admission to have accurate feature basis, effectively avoiding the resource crowding problem caused by terminals with different service needs accessing the same VLAN in an unordered manner, and improving the resource isolation effect and utilization efficiency of VLAN partitions. Furthermore, dual access verification for security and quality is performed on the terminal. While verifying the legality of the terminal access, the remaining resource status of the target VLAN partition is combined to determine whether the terminal's QoS requirements are met. This avoids the situation where excessive access by low-priority terminals crowds out core business resources from the source of access, and ensures the access quality of high-level business terminals. Furthermore, by matching the corresponding QoS scheduling policy based on the level attribute of the target VLAN partition and executing data flow scheduling, the binding of VLAN partition and QoS scheduling policy is realized, so that the differentiated network requirements of different levels of service terminals can be met in a targeted manner, and the low latency and high reliability requirements of core services and the high bandwidth requirements of important services can be effectively guaranteed. Finally, after the terminal connects, the bandwidth utilization, latency, packet loss rate, and other indicators of the VLAN partition are monitored. Based on preset thresholds, the VLAN admission policy and QoS scheduling parameters are dynamically adjusted accordingly. This allows the network management policy to adapt to the dynamic changes of the wireless network, effectively solving the scheduling failure problem in scenarios such as traffic bursts and resource shortages, and improving the dynamic adaptability of the wireless network. In case of terminal disconnection, abnormal traffic, or low signal strength, the terminal is marked in time and its occupied network and wireless resources are released, avoiding invalid resource occupation and further improving the overall resource utilization of the wireless network. At the same time, more resources are reserved for the access and scheduling of other terminals, ensuring the overall operating efficiency of the wireless network.

[0098] The above text combined Figure 1 The terminal-oriented VLAN classification admission and QoS scheduling method provided in the embodiments of this application has been described in detail. The apparatus and equipment provided in the embodiments of this application will be described below with reference to the accompanying drawings.

[0099] like Figure 2 As shown in the figure, this is a schematic diagram of a terminal-oriented VLAN classification admission and QoS scheduling device provided in an embodiment of this application. The device includes: The acquisition module 301 is used to acquire full-dimensional feature information of the terminal that initiated the network access request; Processing module 302 is configured to: obtain the terminal's corresponding level based on the full-dimensional feature information; determine the target VLAN partition corresponding to the terminal by matching a preset first mapping table based on the terminal's corresponding level; perform security verification and quality verification on the terminal according to the target VLAN partition; if both the security verification and the quality verification pass, allow the terminal to access the target VLAN partition and allocate network access parameters for the target VLAN partition to the terminal; and match the corresponding Quality of Service (QoS) scheduling policy from a preset second mapping table according to the level attribute of the target VLAN partition. The scheduling module 303 is used to schedule the data flow of the terminal in the target VLAN partition according to the corresponding QoS scheduling policy.

[0100] Optionally, the processing module 302 is specifically used to obtain a security verification result when the terminal's unique device identifier is in the access permission list of the target VLAN partition and the service set identifier and wireless communication protocol accessed by the terminal are valid. Based on the remaining bandwidth of the target VLAN partition, the number of connected terminals, and the current wireless network load, determine whether the remaining network resources of the target VLAN partition meet the service quality requirements of the terminals. If the remaining network resources of the target VLAN partition meet the service quality requirements of the terminal, then the quality verification result is passed; Based on the results of both the security and quality checks, a double verification result is obtained. Based on the successful dual verification result, the terminal is allowed to access the target VLAN partition, and network access parameters for the target VLAN partition are assigned to the terminal.

[0101] Optionally, the processing module 302 is specifically used to classify the terminal into a core service terminal, an important service terminal, or an ordinary service terminal based on the QoS requirement level and service type in the full-dimensional feature information.

[0102] Optionally, the processing module 302 is also used to monitor the bandwidth utilization, average end-to-end latency, and average packet loss rate of the target VLAN partition. When the bandwidth utilization rate is greater than or equal to the utilization rate threshold, dynamic adjustment of the VLAN admission policy is triggered. When the average end-to-end latency is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, dynamic adjustment of QoS scheduling parameters is triggered.

[0103] Optionally, the processing module 302 is specifically used to restrict new terminals from accessing the target VLAN partition or guide new terminals to access a backup VLAN partition of the same level when the monitored bandwidth utilization is greater than or equal to the utilization threshold.

[0104] Optionally, the processing module 302 is specifically used to increase the scheduling priority of the core service terminals in the target VLAN partition and increase the corresponding bandwidth reservation ratio when the monitored average end-to-end latency is greater than or equal to the latency threshold or the average packet loss rate is greater than or equal to the packet loss rate threshold. Update the forwarding queue configuration of the target VLAN partition based on the adjusted priority and bandwidth reservation ratio.

[0105] Optionally, the processing module 302 is also used to mark the terminal in the VLAN terminal access status table and release the network and wireless resources occupied by the terminal when it is detected that the terminal is disconnected, the traffic is abnormal, or the signal strength is lower than the strength threshold.

[0106] The terminal-oriented VLAN classification admission and QoS scheduling device according to the embodiments of this application can correspondingly execute the method described in the embodiments of this application, and the other operations and / or functions of each module / unit of the terminal-oriented VLAN classification admission and QoS scheduling device are respectively for implementing Figure 1 For the sake of brevity, the corresponding processes of each method in the illustrated embodiments will not be described in detail here.

[0107] This application also provides a computing device. For example... Figure 3 As shown in the figure, this is a schematic diagram of a computing device provided in an embodiment of this application. The computing device 700 includes a bus 701, a processor 702, a communication interface 703, and a memory 704. The processor 702, the memory 704, and the communication interface 703 communicate with each other via the bus 701.

[0108] The 701 bus can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of representation, Figure 3 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0109] The processor 702 can be any one or more of the following processors: central processing unit (CPU), graphics processing unit (GPU), microprocessor (MP), or digital signal processor (DSP).

[0110] The communication interface 703 is used for communication with external devices.

[0111] Memory 704 may include volatile memory, such as random access memory (RAM). Memory 704 may also include non-volatile memory, such as read-only memory (ROM), flash memory, hard disk drive (HDD), or solid state drive (SSD).

[0112] The memory 704 stores executable code, and the processor 702 executes the executable code to perform the aforementioned terminal-oriented VLAN classification admission and QoS scheduling method.

[0113] Specifically, in achieving Figure 2 In the case of the illustrated embodiment, and Figure 2 When the modules or units of the terminal-oriented VLAN classification admission and QoS scheduling device described in the embodiment are implemented in software, the execution... Figure 2 The software or program code required for the functions of each module / unit can be partially or entirely stored in the memory 704. The processor 702 executes the program code corresponding to each unit stored in the memory 704, and executes the aforementioned terminal-oriented VLAN classification admission and QoS scheduling method.

[0114] This application also provides a computer-readable storage medium. The computer-readable storage medium can be any available medium that a computing device can store, or a data storage device such as a data center containing one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid-state drive). The computer-readable storage medium includes instructions that instruct the computing device to execute the aforementioned terminal-oriented VLAN classification and admission and QoS scheduling method.

[0115] This application also provides a computer program product comprising one or more computer instructions. When the computer instructions are loaded and executed on a computing device, all or part of the processes or functions described in this application are generated.

[0116] The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions may be transmitted from one website, computer, or data center to another website, computer, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line) or wireless (e.g., infrared, wireless, microwave, etc.) means.

[0117] When the computer program product is executed by a computer, the computer executes any of the aforementioned terminal-oriented VLAN classification admission and QoS scheduling methods. The computer program product can be a software installation package; when any of the aforementioned terminal-oriented VLAN classification admission and QoS scheduling methods needs to be used, the computer program product can be downloaded and executed on the computer.

[0118] The descriptions of the processes or structures corresponding to the above figures each have their own emphasis. For parts of a process or structure that are not described in detail, please refer to the relevant descriptions of other processes or structures.

[0119] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions within the technical scope disclosed in this application should be covered within the scope of protection of this application.

Claims

1. A terminal-oriented VLAN classification admission and QoS scheduling method, characterized in that, The method includes: Obtain full-dimensional feature information of the terminal that initiated the network access request; Based on the full-dimensional feature information, the corresponding level of the terminal is obtained; Based on the terminal's corresponding level, the target VLAN partition corresponding to the terminal is determined by matching a preset first mapping table; Based on the target VLAN partition, perform security and quality verification on the terminal; If both the security check and the quality check pass, the terminal is allowed to access the target VLAN partition, and the network access parameters of the target VLAN partition are assigned to the terminal. Based on the level attribute of the target VLAN partition, the corresponding Quality of Service (QoS) scheduling policy is matched from the preset second mapping table; According to the corresponding QoS scheduling policy, the data flow of the terminal in the target VLAN partition is scheduled.

2. The method according to claim 1, characterized in that, If both the security check and the quality check pass, the terminal is allowed to access the target VLAN partition, and network access parameters for the target VLAN partition are assigned to the terminal, including: When the terminal's unique device identifier is in the access permission list of the target VLAN partition, and the service set identifier and wireless communication protocol accessed by the terminal are valid, the security verification result is obtained. Based on the remaining bandwidth of the target VLAN partition, the number of connected terminals, and the current wireless network load, determine whether the remaining network resources of the target VLAN partition meet the service quality requirements of the terminals. If the remaining network resources of the target VLAN partition meet the service quality requirements of the terminal, then the quality verification result is passed; Based on the results of both the security and quality checks, a double verification result is obtained. Based on the successful dual verification result, the terminal is allowed to access the target VLAN partition, and network access parameters for the target VLAN partition are assigned to the terminal.

3. The method according to claim 1, characterized in that, The step of obtaining the terminal's corresponding level based on the full-dimensional feature information includes: Based on the QoS requirement level and service type in the full-dimensional feature information, the terminal is divided into core service terminal, important service terminal, or ordinary service terminal.

4. The method according to claim 1, characterized in that, After allowing the terminal to access the target VLAN partition, the method further includes: Monitor the bandwidth utilization, average end-to-end latency, and average packet loss rate of the target VLAN partition; When the bandwidth utilization rate is greater than or equal to the utilization rate threshold, dynamic adjustment of the VLAN admission policy is triggered. When the average end-to-end latency is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, dynamic adjustment of QoS scheduling parameters is triggered.

5. The method according to claim 1, characterized in that, The dynamic adjustment of the VLAN admission policy includes: When the monitored bandwidth utilization is greater than or equal to the utilization threshold, restrict new terminals from accessing the target VLAN partition, or guide new terminals to access a backup VLAN partition of the same level.

6. The method according to claim 1, characterized in that, The dynamic adjustment of QoS scheduling parameters includes: When the average end-to-end latency detected is greater than or equal to the latency threshold, or the average packet loss rate is greater than or equal to the packet loss rate threshold, the scheduling priority of the core service terminals in the target VLAN partition is increased, and the corresponding bandwidth reservation ratio is increased. Update the forwarding queue configuration of the target VLAN partition based on the adjusted priority and bandwidth reservation ratio.

7. The method according to claim 1, characterized in that, The method further includes: When a terminal is detected to be disconnected, has abnormal traffic, or has a signal strength lower than the strength threshold, the terminal is marked in the VLAN terminal access status table, and the network and wireless resources occupied by the terminal are released.

8. A terminal-oriented VLAN classification and admission and QoS scheduling device, characterized in that, The device includes: The acquisition module is used to acquire full-dimensional feature information of the terminal that initiated the network access request; The processing module is used to obtain the level corresponding to the terminal based on the full-dimensional feature information; determine the target VLAN partition corresponding to the terminal based on the level of the terminal by matching a preset first mapping table; perform security verification and quality verification on the terminal according to the target VLAN partition; if both the security verification and the quality verification pass, the terminal is allowed to access the target VLAN partition, and network access parameters of the target VLAN partition are allocated to the terminal; and match the corresponding Quality of Service (QoS) scheduling policy from a preset second mapping table according to the level attribute of the target VLAN partition. The scheduling module is used to schedule the data flow of the terminal in the target VLAN partition according to the corresponding QoS scheduling policy.

9. A computing device, characterized in that, Including memory and processor; The memory stores one or more computer programs, the one or more computer programs including instructions; when the instructions are executed by the processor, the computing device performs the method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium is used to store a computer program for performing the method as described in any one of claims 1 to 7.

Images