Access method, network device, system and program product for dedicated line users

Abstract

The application discloses a method for accessing a dedicated line user, network equipment, a system and a program product, and belongs to the technical field of communication. The method comprises the following steps: a DBNG-CP device sends a first PFCP message for a target dedicated line user to a DBNG-UP device in the case that the target dedicated line user is authenticated, the first PFCP message carries a traffic behavior rule, and the behavior in the traffic behavior rule is pass-through. The application realizes the access scheme of the dedicated line user based on the PFCP defined by the DBNG related project, so that the access scene of the dedicated line user is more abundant, the access scheme is more perfect, and the implementation environment of the dedicated line user service is widened.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a method, network equipment, system and program product for accessing leased line users. Background Technology

[0002] Broadband network gateways (BNGs), as traditional broadband access gateway devices, are crucial in broadband access services and scenarios, including leased line user access. For leased line users, a BNG can lease a specific interface or a subset of virtual local area networks (VLANs) / permanent virtual circuits (PVCs) under that interface to the user. The BNG can then provide unified authentication, billing, and access control for the leased line user. Currently, access solutions for leased line users are not yet fully developed. Summary of the Invention

[0003] This application provides a method, network equipment, system, and program product for leased line users to access the network, which can improve the access solution for leased line users and ensure reliability. The technical solution is as follows:

[0004] Firstly, a method for accessing a leased line user is provided, the method being applied to a distributed broadband gateway-control plane (DBNG-CP) device, the method comprising:

[0005] If the authentication of the target leased line user is successful, a first packet forwarding control protocol (PFCP) message for the target leased line user is sent to the disaggregated broadband gateway-user plane (DBNG-UP) device. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0006] This application implements an access scheme for leased line users based on PFCP, which enables leased line users to access the DBNG system using PFCP, thus enriching the access scenarios for leased line users and improving the access scheme, thereby broadening the implementation environment for leased line user services.

[0007] The first PFCP message has two possible scenarios.

[0008] In the first scenario, the first PFCP message is a first PFCP session establishment request, which instructs the DBNG-UP device to create a session corresponding to the target leased line user.

[0009] In the second scenario, the first PFCP message is a first PFCP session adjustment request; before sending the first packet forwarding control protocol PFCP message for the target leased line user to the distributed broadband gateway-user plane DBNG-UP device, the method further includes: sending a second PFCP session establishment request to the DBNG-UP device, the second PFCP session establishment request carrying the traffic behavior rule, and the behavior in the traffic behavior rule is blocking.

[0010] Regarding the second scenario, it should be understood that after the deployment configuration of the target leased line is established on the DBGN-CP device, since the target leased line user can already transmit traffic through the target leased line, the traffic of the target leased line user is uncontrolled during the period before the target leased line user is authenticated. Therefore, the transmission of the target leased line user's traffic is not allowed during this period, that is, it is necessary to temporarily block the traffic of the target leased line user.

[0011] In one possible implementation, before sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: authenticating the target leased line user if the communication interface of the target leased line is available, wherein the target leased line is the leased line used by the target leased line user. This ensures that the target leased line user can successfully access the network and communicate normally through the communication interface of the target leased line.

[0012] In one possible implementation, the first PFCP message is sent when the communication interface of the target leased line is in an available state, and the target leased line is a leased line used by the target leased line user; before sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the method further includes: receiving a first PFCP node report request sent by the DBNG-UP device, the first PFCP node report request carrying first status information, the first status information indicating that the communication interface of the target leased line is in an available state.

[0013] In other words, the DBNG-UP device can proactively report the status of the target leased line's communication interface to the DBNG-CP device. For example, if the DBNG-CP device has subscribed to the status information of the DBNG-UP device, the DBNG-UP device can periodically or periodically report the status information of the DBNG-UP device to the DBNG-CP device. The status information of the DBNG-UP device can include the status of the target leased line's communication interface, and of course, it can also include other status information.

[0014] In one possible implementation, after sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the method further includes: receiving a second PFCP node report request sent by the DBNG-UP device, the second PFCP node report request carrying second status information indicating a fault detected by the DBNG-UP device; and sending a second PFCP session adjustment request to the DBNG-UP device, the second PFCP session adjustment request carrying the traffic behavior rule, wherein the behavior in the traffic behavior rule is blocking. That is, when the DBNG-UP device detects a fault, it is necessary to temporarily block the traffic of the target leased line user.

[0015] In one possible implementation, the second status information includes one or more of access-side status, network-side status, and connection channel status. The access-side status indicates whether the access side of the target leased line is faulty, the network-side status indicates whether the network side of the target leased line is faulty, and the connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty. The target leased line is a leased line used by the target leased line user.

[0016] In one possible implementation, the target leased line is a Layer 2 leased line or a Layer 2 Virtual Private Network (L2VPN) leased line, and the access side status includes the communication interface status of the target leased line.

[0017] In one possible implementation, the target leased line is a Layer 3 leased line, and the access side status includes the communication interface status of the target leased line and the access side routing status. The access side routing status indicates whether the terminal of the target leased line user is routable to the communication interface of the target leased line.

[0018] In one possible implementation, after sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: receiving information from the DBNG-UP device regarding the target leased line user's usage of the target leased line; and, based on the usage information, controlling the target leased line user's access rights to the target leased line. That is, the DBNG-CP device can also control the target leased line user.

[0019] In one possible implementation, the use case includes traffic statistics.

[0020] In one possible implementation, the DBNG-CP device is the first CP device in a CP hot standby group, which also includes a second CP device. The first CP device is the primary CP device in the CP hot standby group. After sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the method further includes: synchronizing the control information of the first CP device for the target leased line user to the second CP device. The second CP device is used to control the target leased line user's access rights to the target leased line based on the control information when the primary CP device is switched to the second CP device. That is, disaster recovery processing for the target leased line user is achieved through the CP hot standby group, improving the reliability of the target leased line and ensuring the service of the target leased line user.

[0021] In one possible implementation, the DBNG-UP device is the first UP device in the UP hot standby group, and the traffic of the target leased line user is transmitted through the UP device that is online in the UP hot standby group; before sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the method further includes: sending a first UP role notification message to the first UP device, the first UP role notification message indicating that the primary UP device in the UP hot standby group is the first UP device, and indicating that the first UP device is online.

[0022] In one possible implementation, the UP hot standby group further includes a second UP device; after sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the method further includes: sending a second UP role notification message to the first UP device, and sending a third UP role notification message to the second UP device, wherein both the second UP role notification message and the third UP role notification message indicate that the primary UP device in the UP hot standby group is switched to the second UP device, the second UP role notification message also indicates that the first UP device is offline, and the third UP role notification message also indicates that the second UP device is online.

[0023] In this way, by using the UP hot standby group, target leased line users can quickly access the main UP device without having to go through the complex process of media access control (MAC) learning and network-side route publishing through the DBNG-CP device, as is required for non-leased line users (referred to as ordinary users), in order to divert the access-side traffic and network-side traffic of ordinary users to the main UP device.

[0024] In one possible implementation, after sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the method further includes: if the target leased line user's access rights to the target leased line expire, sending a third PFCP session adjustment request to the DBNG-UP device, wherein the third PFCP session adjustment request carries the traffic behavior rule, and the behavior in the traffic behavior rule is blocking.

[0025] In one possible implementation, after sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: in the case of deleting the deployment configuration of the target leased line, sending a PFCP session deletion request for the target leased line user to the DBNG-UP device, wherein the PFCP session deletion request indicates the deletion of the session corresponding to the target leased line user, and the target leased line is the leased line used by the target leased line user.

[0026] In one possible implementation, before sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the method further includes: sending an authentication request for the target leased line user to an authentication server; and receiving an authentication result from the authentication server, wherein the authentication result indicates whether the authentication of the target leased line user is successful or unsuccessful. That is, authenticating the target leased line user through an authentication server reduces the functional complexity of the DBNG-CP device.

[0027] In one possible implementation, the leased line used by the target leased line user is a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0028] In one possible implementation, sending the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user to the Distributed Broadband Gateway-User Plane (DBNG-UP) device includes: sending the first PFCP message to the DBNG-UP device through a state control interface. The state control interface can be an interface between a DBNG-CP device and a DBNG-UP device as defined in Broadband Forum (BBF) Project 459.

[0029] Secondly, a method for dedicated line users to access the network is provided, the method being applied to a DBNG-UP device, the method comprising:

[0030] Receive a first PFCP message for the target leased line user sent by the DBNG-CP device. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow traffic. Based on the first PFCP message, allow traffic for the target leased line user.

[0031] This application implements an access scheme for leased line users based on PFCP, which enables leased line users to access the DBNG system using PFCP, thus enriching the access scenarios for leased line users and improving the access scheme, thereby broadening the implementation environment for leased line user services.

[0032] In one possible implementation, the first PFCP message is a first PFCP session establishment request; before allowing traffic to the target leased line user, the method further includes: creating a session corresponding to the target leased line user based on the first PFCP session establishment request.

[0033] In another possible implementation, the first PFCP message is a first PFCP session adjustment request; before receiving the first packet forwarding control protocol PFCP message for the target leased line user sent by the distributed broadband gateway-control plane DBNG-CP device, the method further includes: receiving a second PFCP session establishment request sent by the DBNG-CP device, the second PFCP session establishment request carrying the traffic behavior rule, and the behavior in the traffic behavior rule is blocking; based on the second PFCP session establishment request, creating a session corresponding to the target leased line user, and blocking the traffic of the target leased line user.

[0034] In one possible implementation, after allowing the traffic of the target leased line user based on the first PFCP message, the method further includes: sending the usage information of the target leased line user on the target leased line to the DBNG-CP device, wherein the DBNG-CP device is used to control the usage rights of the target leased line user on the target leased line based on the usage information.

[0035] In one possible implementation, the DBNG-CP device is the first CP device in the CP hot standby group, which also includes a second CP device. The first CP device is the primary CP device in the CP hot standby group. The usage information is used to synchronously back up data on the first CP device and the second CP device. The primary CP device is used to control the usage rights of the target leased line user on the target leased line based on the usage information.

[0036] In one possible implementation, the method further includes: receiving a CP role notification message sent by the second CP device, the CP role notification message instructing the primary CP device to switch to the second CP device; and, based on the CP role notification message, sending the usage information of the target leased line user on the target leased line to the second CP device.

[0037] In one possible implementation, the first PFCP message is received when the communication interface of the target leased line is in an available state; before receiving the first packet forwarding control protocol PFCP message for the target leased line user sent by the distributed broadband gateway-control plane DBNG-CP device, the method further includes: sending a first PFCP node report request to the DBNG-CP device, the first PFCP node report request carrying first status information, the first status information indicating that the communication interface of the target leased line is in an available state.

[0038] In one possible implementation, after allowing traffic to the target leased line user based on the first PFCP message, the method further includes: in the event of a detected fault, sending a second PFCP node report request to the DBNG-CP device, the second PFCP node report request carrying second status information indicating the fault; receiving a second PFCP session adjustment request sent by the DBNG-CP device, the second PFCP session adjustment request carrying the traffic behavior rule, wherein the behavior in the traffic behavior rule is blocking; and blocking the traffic of the target leased line user based on the second PFCP session adjustment request.

[0039] In one possible implementation, the second status information includes one or more of access-side status, network-side status, and connection channel status. The access-side status indicates whether the access side of the target leased line is faulty, the network-side status indicates whether the network side of the target leased line is faulty, and the connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty. The target leased line is a leased line used by the target leased line user.

[0040] In one possible implementation, the target leased line is a Layer 2 leased line or an L2VPN leased line, and the access side status includes the communication interface status of the target leased line.

[0041] In one possible implementation, the target leased line is a Layer 3 leased line, and the access side status includes the communication interface status of the target leased line and the access side routing status. The access side routing status indicates whether the terminal of the target leased line user is routable to the communication interface of the target leased line.

[0042] In one possible implementation, the DBNG-UP device is the first UP device in the UP hot standby group, and the traffic of the target leased line user is transmitted through the UP device that comes online in the UP hot standby group; before receiving the first Packet Forwarding Control Protocol (PFCP) message for the target leased line user sent by the Distributed Broadband Gateway-Control Plane (DBNG-CP) device, the method further includes: receiving a first UP role notification message sent by the DBNG-CP device, the first UP role notification message indicating that the primary UP device in the UP hot standby group is the first UP device; and bringing the first UP device online based on the first UP role notification message.

[0043] In one possible implementation, the UP hot standby group further includes a second UP device; after releasing the traffic of the target leased line user based on the first PFCP message, the method further includes: receiving a second UP role notification message sent by the DBNG-CP device, the second UP role notification message instructing the primary UP device in the UP hot standby group to switch to the second UP device; and taking the first UP device offline based on the second UP role notification message.

[0044] In one possible implementation, after allowing traffic to the target leased line user based on the first PFCP message, the method further includes: receiving a PFCP session deletion request for the target leased line user sent by the DBNG-CP device; and deleting the session corresponding to the target leased line user based on the PFCP session deletion request.

[0045] In one possible implementation, the leased line used by the target leased line user is a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0046] In one possible implementation, receiving the first packet forwarding control protocol (PFCP) message for the target leased line user sent by the distributed broadband gateway-control plane (DBNG-CP) device includes: receiving the first PFCP message sent by the DBNG-CP device through a state control interface.

[0047] Thirdly, a method for accessing a leased line user is provided, the method being applied to a DBNG-CP device, the DBNG-CP device controlling a first UP device and a second UP device in a DBNG-UP hot standby group, the method comprising:

[0048] The first UP device is identified as the primary UP device in the UP hot standby group; a first UP role notification message is sent to the first UP device, and a second UP role notification message is sent to the second UP device. Both the first and second UP role notification messages indicate that the primary UP device in the UP hot standby group is the first UP device. The first UP role notification message also indicates that the first UP device is online, and the second UP role notification message also indicates that the second UP device is offline; if the authentication of the target leased line user is successful, a first message is sent to the first UP device, indicating that the traffic of the target leased line user is allowed.

[0049] This application implements an access scheme for leased line users in DBNG-UP redundancy scenarios. It enables leased line users to access the network in UP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0050] In one possible implementation, the first message is a first PFCP message for the target leased line user, the first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0051] In one possible implementation, the traffic of the target leased line user is used to be transmitted through the UP device that comes online in the UP hot standby group; after sending the first message to the first UP device, the method further includes: determining the second UP device as the primary UP device in the UP hot standby group; sending a third UP role notification message to the first UP device and a fourth UP role notification message to the second UP device, wherein both the third UP role notification message and the fourth UP role notification message indicate that the primary UP device in the UP hot standby group is switched to the second UP device, the third UP role notification message also indicates that the first UP device is offline, and the fourth UP role notification message also indicates that the second UP device is online.

[0052] In one possible implementation, the Distributed Broadband Gateway-User Plane (DBNG)-UP hot standby group includes a first UP device and a second UP device. The method is applied to the first UP device and includes: receiving a first UP role notification message sent by a Distributed Broadband Gateway-Control Plane (DBNG)-CP device, the first UP role notification message indicating that the primary UP device in the UP hot standby group is the first UP device; bringing the first UP device online based on the first UP role notification message; receiving a first message sent by the DBNG-CP device, the first message indicating that traffic for a target leased line user is allowed; and allowing traffic for the target leased line user based on the first message.

[0053] In one possible implementation, the first message is a first PFCP message for the target leased line user, the first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0054] Among them, PFCP is a protocol defined by the TR-459 standard specification. This application can realize the access of leased line users based on the TR-459 standard specification.

[0055] Fourthly, a method for accessing a leased line user is provided. This method is applied to a first UP device in a DBNG-UP hot standby group, which further includes a second UP device. The method includes:

[0056] Receive a first UP role notification message sent by the DBNG-CP device, the first UP role notification message indicating that the primary UP device in the UP hot standby group is the first UP device; receive a first message sent by the DBNG-CP device, the first message indicating that the traffic of the target leased line user is allowed; based on the first message, allow the traffic of the target leased line user.

[0057] This application implements an access scheme for leased line users in DBNG-UP redundancy scenarios. It enables leased line users to access the network in UP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0058] In one possible implementation, the first message is a first PFCP message for the target leased line user, the first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0059] Among them, PFCP is a protocol defined by the TR-459 standard specification. This application can realize the access of leased line users in the DBNG-UP redundancy scenario based on the TR-459 standard specification.

[0060] Fifthly, a method for accessing a leased line user is provided. This method is applied to a first CP device in a DBNG-CP hot standby group, where the CP hot standby group also includes a second CP device. The first CP device is the primary CP device in the CP hot standby group. The method includes:

[0061] Upon successful authentication of the target leased line user, a first message is sent to the DBNG-UP device, indicating that the traffic of the target leased line user is allowed; the control information of the first CP device on the target leased line user is synchronized to the second CP device, which is used to control the target leased line user's access rights based on the control information after switching to the primary CP device in the CP hot standby group.

[0062] This application implements an access scheme for leased line users in DBNG-CP redundancy scenarios. It enables leased line users to access the network in CP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0063] In one possible implementation, the first message is a first PFCP message for the target leased line user, the first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0064] Among them, PFCP is a protocol defined by the TR-459 standard specification. This application can realize the access of leased line users in the DBNG-CP redundancy scenario based on the TR-459 standard specification.

[0065] In one possible implementation, the control information of the target leased line user includes the usage information of the target leased line user on the target leased line; after sending the first message to the DBNG-UP device, the method further includes: receiving the usage information of the target leased line user on the target leased line sent by the DBNG-UP device.

[0066] Sixthly, a method for accessing a leased line user is provided. This method is applied to a second CP device in a DBNG-CP hot standby group, where the CP hot standby group further includes a first CP device, which is the primary CP device in the CP hot standby group. The method includes:

[0067] The system receives control information from the first CP device regarding the target leased line user; and, when the second CP device switches to become the primary CP device in the CP hot standby group, controls the target leased line user's access to the target leased line based on the control information.

[0068] This application implements an access scheme for leased line users in DBNG-CP redundancy scenarios. It enables leased line users to access the network in CP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0069] In one possible implementation, the control information includes the usage information of the target leased line user on the target leased line. The method further includes: when the second CP device switches to become the primary CP device in the CP hot standby group, sending a first CP role notification message to the Distributed Broadband Gateway-User Plane (DBNG-UP) device, the first CP role notification message instructing the primary CP device in the CP hot standby group to switch to the second CP device; and receiving the usage information of the target leased line user on the target leased line sent by the DBNG-UP device. That is, after the primary CP switches, the second CP device can take over control of the target leased line user, thus not affecting the target leased line user's services.

[0070] A seventh aspect provides a network device having the functionality to implement the access method behavior for leased line users described in any one of the first to sixth aspects. The network device may include one or more modules for implementing the access method for leased line users provided in any one of the first to sixth aspects.

[0071] Eighthly, a network device is provided, the network device including a processor and a memory, the memory being used to store a program for executing the access method for a leased line user provided in any of the first to sixth aspects, and to store data related to implementing the access method for a leased line user provided in any of the first to sixth aspects. The processor is configured to execute the program stored in the memory.

[0072] In one possible implementation, the network device may further include a communication bus for establishing a connection between the processor and the memory.

[0073] Ninthly, a network system, also known as a DBNG system, is provided. This network system includes DBNG-CP devices and DBNG-UP devices. The DBNG-CP devices and DBNG-UP devices are used to access target leased line users through interaction and to control the use of target leased line users by the target leased line users. For specific implementation details, please refer to the detailed descriptions of the leased line user access methods provided in the first and second aspects above; these will not be repeated here.

[0074] Alternatively, the network system may include a DBNG-CP device and a DBNG-UP hot standby group. The UP hot standby group includes a first UP device and a second UP device. The DBNG-CP device and the primary UP device (such as the first UP device) in the UP hot standby group are used to access the leased line user through interaction and control the use of the target leased line user by the target leased line user. For specific implementation methods, please refer to the detailed introduction of the leased line user access methods provided in the third and fourth aspects above, which will not be repeated here.

[0075] Alternatively, the network system includes a DBNG-CP hot standby group and DBNG-UP devices. The CP hot standby group includes a first CP device and a second CP device. The primary CP device in the first and second CP devices interacts with the DBNG-UP devices to access the target leased line user and control the target leased line user's usage. The primary CP device synchronizes control information for the target leased line user with the backup CP device, so that after a primary CP device switchover, the new primary CP device takes over control of the target leased line user. For specific implementation details, please refer to the detailed description of the leased line user access methods provided in aspects five and six above; they will not be repeated here.

[0076] In a tenth aspect, a computer-readable storage medium is provided, wherein instructions are stored therein, which, when executed on a computer, cause the computer to perform the access method for leased line users as described in any one of the first to sixth aspects.

[0077] In the eleventh aspect, a computer program product containing instructions is provided, which, when run on a computer, causes the computer to execute the access method for leased line users described in any one of the first to sixth aspects.

[0078] The technical effects achieved by the seventh to eleventh aspects mentioned above are similar to those achieved by the corresponding technical means in the first to sixth aspects, and will not be repeated here. Attached Figure Description

[0079] Figure 1 This is a DBNG system architecture diagram provided in an embodiment of this application;

[0080] Figure 2 This is another DBNG system architecture diagram provided in the embodiments of this application;

[0081] Figure 3 This is another DBNG system architecture diagram provided in the embodiments of this application;

[0082] Figure 4 This is another DBNG system architecture diagram provided in the embodiments of this application;

[0083] Figure 5 This is a flowchart illustrating a method for accessing a leased line user, as provided in an embodiment of this application.

[0084] Figure 6 This is a flowchart of another access method for leased line users provided in an embodiment of this application;

[0085] Figure 7 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0086] Figure 8 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0087] Figure 9 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0088] Figure 10 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0089] Figure 11This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0090] Figure 12 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0091] Figure 13 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0092] Figure 14 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0093] Figure 15 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0094] Figure 16 This is a flowchart illustrating another access method for leased line users provided in the embodiments of this application;

[0095] Figure 17 This is a schematic diagram of the structure of a network device provided in an embodiment of this application;

[0096] Figure 18 This is a schematic diagram of the structure of another network device provided in an embodiment of this application;

[0097] Figure 19 This is a schematic diagram of the structure of another network device provided in the embodiments of this application;

[0098] Figure 20 This is a schematic diagram of the structure of another network device provided in the embodiments of this application;

[0099] Figure 21 This is a schematic diagram of the structure of another network device provided in the embodiments of this application;

[0100] Figure 22 This is a schematic diagram of the structure of another network device provided in the embodiments of this application;

[0101] Figure 23 This is a schematic diagram of the structure of another network device provided in the embodiments of this application;

[0102] Figure 24 This is a schematic diagram of the structure of another network device provided in the embodiments of this application;

[0103] Figure 25 This is a schematic diagram of the structure of another network device provided in the embodiments of this application;

[0104] Figure 26 This is a schematic diagram of the structure of another network device provided in the embodiments of this application. Detailed Implementation

[0105] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the implementation methods of this application will be further described in detail below with reference to the accompanying drawings.

[0106] Before introducing the access method for leased line users provided in the embodiments of this application, a brief introduction to the relevant background and implementation environment will be given first.

[0107] As a traditional broadband access gateway device, the Broadband Gateway (BNG) plays a crucial role in broadband access services and scenarios. With the development of software-defined networking (SDN) and network functions virtualization (NFV) technologies, metropolitan area networks (MANs) are evolving from a traditional network-centric architecture to a data center-centric architecture, thus giving rise to the Disaggregated Broadband Gateway (DBNG).

[0108] DBNG splits the traditional BNG into two components: the control plane (CP) and the user plane (UP, also known as the forwarding plane). These two components together implement the functions of a traditional broadband remote access server (BRAS). The two parts can be referred to as the DBNG-CP device and the DBNG-UP device, respectively. The DBNG-CP device is responsible for controlling and managing users, while the DBNG-UP device is responsible for forwarding user packets (also known as user traffic, data packets, service packets, etc.). DBNG breaks the tight coupling between the control plane and the forwarding plane of traditional BRAS devices, offering greater flexibility and facilitating expansion and upgrades. The DBNG-CP device is based on a general-purpose server and implemented in software, providing powerful computing capabilities. The DBNG-UP device can be implemented using either a traditional BNG device or an NFV-BNG device, thus flexibly addressing access scenarios with different user volumes.

[0109] In the BNG scenario, one user type is the leased line user. BNG can provide unified authentication and billing, bandwidth control, access control, and quality of service (QoS) control for leased line users. Based on the network topology of the leased line access, current leased lines can be divided into Layer 2 leased lines, Layer 3 leased lines, and Layer 2 Virtual Private Network (L2VPN) leased lines, etc.

[0110] The international standard for DBNG is solely developed by the Broadband Forum (BBF), and currently, access solutions for leased line users are not yet fully developed.

[0111] Based on this, embodiments of this application provide some access methods for leased line users, which can be adapted to DBNG related projects to improve the leased line user access scheme of the aforementioned related projects.

[0112] Figure 1 This is a DBNG system architecture diagram provided in an embodiment of this application. See also... Figure 1 The system architecture includes DBNG-UP devices (which can be simply referred to as UP devices) and DBNG-CP devices (which can be simply referred to as CP devices). Communication connections can be established between the UP devices and the CP devices.

[0113] The CP device is used to control the access, temporary blocking, and deletion of leased line users according to the leased line user access method provided in the embodiments of this application. The UP device is used to connect leased line users to its own interface according to the leased line user access method provided in the embodiments of this application, thereby transmitting the traffic of the leased line users through its own interface. That is, the UP device is used to connect leased line users under the control of the CP device. The UP device is also used to block the traffic of leased line users, delete leased lines, and limit the traffic rate of leased line users under the control of the CP device. For specific implementation methods, please refer to the method embodiments below.

[0114] Figure 2 This is another DBNG system architecture diagram provided in an embodiment of this application. See also... Figure 2 The system architecture includes a DBNG-CP device and a UP hot standby group, which includes a first UP device and a second UP device. The CP device can establish communication connections with both the first and second UP devices.

[0115] The CP device is used to control the access, temporary blocking, and deletion of leased line users according to the leased line user access method provided in the embodiments of this application. The CP device is also used to determine the primary UP device from the UP hot standby group. The primary UP device is used to access leased line users, block the traffic of leased line users, and delete leased lines under the control of the CP device. Specifically, one of the first UP device and the second UP device is the primary UP device, and the other is the backup UP device. The primary UP device and the backup UP device form UP redundancy, and the primary UP device can switch as needed, thereby ensuring uninterrupted traffic transmission for leased line users.

[0116] Figure 3 This is another DBNG system architecture diagram provided in the embodiments of this application. See also Figure 3 The system architecture includes a DBNG-UP device and a CP hot standby group. The CP hot standby group includes a first CP device and a second CP device. Both the first and second CP devices can establish communication connections with the UP device, and the first CP device can also establish a communication connection with the second CP device.

[0117] In a CP hot standby group, one CP device is the primary CP device, and the other is the backup CP device. The primary CP device is used to control the access, temporary blocking, and deletion of leased line users according to the access method for leased line users provided in the embodiments of this application. The backup CP device is used to access leased line users, block the traffic of leased line users, and delete leased lines under the control of the primary CP device. The primary and backup CP devices form CP redundancy, and the primary CP device can switch over as needed to ensure that the control of leased line users is error-free. For example, the primary CP device is also used to control the usage rights of leased line users based on their control information (which may include usage information such as traffic statistics). The primary CP device can synchronize the control information of leased line users with the backup CP device, so that after the primary CP device switches over (referred to as primary CP switching), the switched primary CP device can take over the control tasks for leased line users, that is, continue to control the usage rights of leased line users based on their control information. In short, the CP hot standby group is used for disaster recovery of leased line users.

[0118] Figure 4 This is another DBNG system architecture diagram provided in the embodiments of this application. See also Figure 4 The system architecture includes a CP hot standby group and a UP hot standby group. The CP hot standby group includes a first CP device and a second CP device, and the UP hot standby group includes a first UP device and a second UP device. Communication connections can be established between the CP hot standby group and the UP hot standby group, and communication connections can also be established between the first CP device and the second CP device. Figure 4 The embodiments can be regarded as examples of Figure 2 Examples and Figure 3 The combination of the embodiments, Figure 4 The functions of each device in the embodiment can be referred to Figure 2 and Figure 3 The details of the embodiments will not be repeated here.

[0119] In one possible implementation, the above Figures 1 to 4 The implementation environment of any DBNG system shown may also include an access network (AN), terminal equipment of leased line users (which can be simply referred to as leased line users for ease of description), the Internet, and the receiving end of the leased line users. The DBNG-UP device is also connected to both the AN and the Internet. The AN is also connected to the terminal equipment of the leased line users, and the Internet is connected to the receiving end of the leased line users. Figure 1 Taking the DBNG system shown as an example, in Figure 1 Based on this, the technical solution of this application can be applied to, for example Figure 5 The implementation environment shown Figure 5 The receiving end of the leased line user is not shown.

[0120] The AN (Access Controller) is used to transmit the traffic of the leased line user and the Internet between the DBNG-UP device and the terminal equipment of the leased line user. For example, the AN is used to transmit the leased line user's traffic to the DBNG-UP device, which then transmits the leased line user's traffic to the receiving end of the leased line user via the Internet, or blocks the leased line user's traffic as appropriate. Another example is that the AN is also used to transmit Internet traffic forwarded by the DBNG-UP device to the terminal equipment of the leased line user.

[0121] The Internet is used to transmit both the traffic of the leased line user and the Internet traffic between the DBNG-UP device and the receiving end of the leased line user's traffic. For example, the Internet is used to transmit the leased line user's traffic forwarded by the DBNG-UP device to the receiving end of the leased line user's traffic, and to transmit Internet traffic destined for the leased line user to the DBNG-UP device, which in turn forwards the Internet traffic to the leased line user's terminal equipment.

[0122] Any of the aforementioned CP devices can be any type of controller, server, etc., and this application embodiment does not limit this. Any of the aforementioned UP devices can be any type of forwarding device, such as router, switch, etc., and this application embodiment does not limit this either.

[0123] The system architecture and business scenarios described in the embodiments of this application are for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and do not constitute a limitation on the technical solutions provided in the embodiments of this application. As those skilled in the art will know, with the evolution of system architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.

[0124] The access method for leased line users provided in the embodiments of this application will be described next.

[0125] As can be seen from the above, there are various system architectures in the embodiments of this application, and the access scheme for dedicated line users provided can be adapted to multiple projects of DBNG. Based on this, there are various access schemes for dedicated line users provided in this application, which will be introduced separately below.

[0126] Figure 6 This is a flowchart illustrating a method for providing access to a leased line user, as provided in an embodiment of this application. The steps of this method can be executed by a DBNG-CP device. Please refer to... Figure 6 The method includes the following steps.

[0127] Step 601: If the authentication of the target leased line user is successful, the DBNG-CP device sends a first PFCP message for the target leased line user to the DBNG-UP device. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0128] The traffic behavior rule can be a packet forwarding rule defined in PFCP, also known as a forwarding action rule (FAR). The behavior in the traffic behavior rule can be represented by "apply action". For a detailed introduction to FAR, please refer to the TR-459 standard specification issued by BBF. The leased line used by the target leased line user (referred to as the target leased line) can be a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line, or other possible leased lines. The technical solution of this application is also applicable to leased lines that may be implemented in the future. The target leased line can be any leased line configured on the DBNG-CP device; that is, the technical solution of the embodiments of this application is applicable to any leased line user.

[0129] Before the DBNG-CP device sends the first PFCP message, relevant technical personnel can establish the deployment configuration of the target leased line on the DBNG-CP device. The target leased line is the leased line used by the target leased line user. After the deployment configuration of the target leased line is established on the DBNG-CP device and the target leased line user is successfully authenticated, the DBNG-CP device sends the first PFCP message.

[0130] Considering that after the target lease line is deployed and configured on the DBNP-CP device, the target lease line is already operational, and users can transmit traffic through it. However, these users may not be allowed to use the target lease line for various reasons, such as non-payment or failure to pass authentication. Therefore, after the target lease line is deployed and configured, it is necessary to authenticate the target lease line users. After successful authentication, the first PFCP message should be used to instruct the DBNG-UP device to allow the target lease line users' traffic.

[0131] In this embodiment of the application, the first PFCP message has two cases.

[0132] In the first scenario, the first PFCP message is a first PFCP session establishment request, which instructs the DBNG-UP device to create a session corresponding to the target leased line user. That is, the DBNG-CP device, through the first PFCP session establishment request, not only instructs the DBNG-UP device to establish the session, but also instructs the DBNG-UP device to allow traffic under that session through the traffic behavior rules carried within it.

[0133] It should be understood that after the DBNG-CP device establishes the deployment configuration for the target leased line, it authenticates the target leased line user and sends the first PFCP session establishment request upon successful authentication. Before receiving the first PFCP session establishment request, the DBNG-UP device does not use any of its interfaces as the communication interface for the target leased line. In other words, the DBNG-UP device is unaware of the target leased line user's relevant events at this time. Therefore, unauthenticated target leased line users cannot transmit traffic through the DBNG-UP device, thus ensuring that the DBNG-CP device accurately controls the target leased line user's access rights to the target leased line.

[0134] In the second scenario, the first PFCP message is a first PFCP session adjustment request. Accordingly, before sending the first PFCP message for the target leased line user to the DBNG-UP device, the DBNG-CP device first sends a second PFCP session establishment request to the DBNG-UP device. This second PFCP session establishment request also carries the aforementioned traffic behavior rules, and the behavior in these rules is blocking. Before receiving the first PFCP message, the DBNG-UP device first receives the second PFCP session establishment request from the DBNG-CP device. Based on this request, it creates a session corresponding to the target leased line user and blocks the traffic of that user.

[0135] It should be understood that after the target leased line is deployed and configured on the DBGN-CP device, the target leased line user can already transmit traffic through the target leased line. However, during the period before the target leased line user is successfully authenticated, the traffic of the target leased line user is uncontrolled. Therefore, the transmission of the target leased line user's traffic is not allowed during this period; that is, the traffic of the target leased line user needs to be blocked. Based on this, the DBNG-UP device is first instructed to establish the session through the first PFCP session adjustment request, and the traffic of the target leased line user is temporarily blocked. After the target leased line user is successfully authenticated, the traffic of the target leased line user is then allowed to resume through the second PFCP session adjustment request.

[0136] In this application's embodiments, any PFCP session establishment request can be a PFCP session establishment request as defined in the TR-459 standard, and any PFCP session modification request can be a PFCP session modification request as defined in the TR-459 standard. For details on these two message types, please refer to the relevant standards; this document will not elaborate further.

[0137] In this embodiment, before sending the first PFCP message for the target leased line user to the DBNG-UP device, the DBNG-CP device authenticates the target leased line user if the communication interface of the target leased line is available. That is, provided the communication interface of the target leased line on the DBNG-UP device is available, the DBNG-CP device can perform the aforementioned authentication operation, thereby ensuring that the target leased line user can successfully access and communicate normally.

[0138] In some embodiments, see Figure 7 After the DBNG-CP device establishes the target leased line deployment configuration, it sends a second PFCP session establishment request to the DBNG-UP device. Then, the DBNG-CP device determines whether the target leased line's communication interface is available. If the interface is available, the DBNG-CP device authenticates the target leased line user. After successful authentication, it sends a first PFCP session adjustment request to the DBNG-UP device. Correspondingly, upon receiving the second PFCP session establishment request, the DBNG-UP device establishes the session corresponding to the target leased line user and blocks the user's traffic. Upon receiving the first PFCP session adjustment request, it allows the target leased line user's traffic to resume.

[0139] It should be understood that in the above embodiments, the authentication of the target leased line user occurs after the DBNG-CP device sends the second PFCP session establishment request. However, in some other embodiments, the authentication of the target leased line user may also occur before the DBNG-CP device sends the second PFCP session establishment request. For example, if the authentication takes a long time, the start time of authentication may be before the DBNG-CP device sends the second PFCP session establishment request, and the end time of authentication may be before or after the DBNG-CP device sends the second PFCP session establishment request. This application embodiment does not limit this. In other words, this application embodiment does not limit the timing of authentication.

[0140] In some embodiments, the first PFCP message may carry QoS policy attributes in addition to traffic behavior rules. The QoS policy attributes indicate the QoS policy of the DBNG-UP device for forwarding traffic of the target leased line user. This application embodiment does not limit the QoS policy.

[0141] As mentioned above, the DBNG-CP device can send the first PFCP message when the communication interface of the target leased line is available. In other words, the DBNG-UP device receives the first PFCP message when the communication interface of the target leased line is available. The DBNG-UP device has several ways to obtain the status of the communication interface of the target leased line.

[0142] In one possible implementation, before receiving the first PFCP message, the DBNG-UP device can send a first PFCP node report request to the DBNG-CP device. This request carries first status information indicating that the communication interface of the target leased line is available. Correspondingly, before sending the first PFCP message to the DBNG-UP device, the DBNG-CP device can also receive a first PFCP node report request from the DBNG-UP device. That is, the DBNG-UP device can proactively report the status of the target leased line's communication interface to the DBNG-UP device.

[0143] The DBNG-CP device can subscribe to the status information of the DBNG-UP device, including the status of the DBNG-UP device's interface, which includes the communication interface of the target leased line. For example, the aforementioned first status information may include the access-side status. For Layer 2 leased lines, Layer 3 leased lines, and L2VPN leased lines, the access-side status may include the status of the DBNG-UP device's interface. For Layer 3 leased lines, the first status information may also include the access-side routing status, indicating whether a route is available between the target leased line user's terminal and the target leased line's communication interface. In some embodiments, for any type of leased line, the first status information may also include the network-side status and / or the connection channel status. The access-side status indicates whether the access side of the DBNG-UP device is faulty, including whether the access side of the target leased line is faulty, i.e., whether it is in an available state (faulty means unavailable, no fault means available); the network-side status indicates whether the network side of the DBNG-UP device is faulty, including whether the network side of the target leased line is faulty; and the connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty. The fact that the communication interface of the target leased line is in an available state means that there is no fault on the access side and the network side of the target leased line.

[0144] The DBNG-UP device can report its status information periodically or periodically based on the DBNG-CP device's subscription. This application embodiment does not limit the time at which the DBNG-UP device reports status information to the DBNG-CP device.

[0145] After the DBNG-CP device establishes the deployment configuration of the target leased line, the DBNG-CP device can obtain the status information most recently reported by the DBNG-UP device, obtain the first status information, and determine whether the communication interface of the target leased line is available based on the first status information.

[0146] As an example, for Layer 2 leased lines, L2VPN leased lines, and Layer 3 leased lines, if the corresponding access side status indicates no fault, the DBNG-CP device determines that the communication interface of the corresponding leased line is in an available state.

[0147] It should be understood that the subscription and reporting of status information events are two relatively independent events from the access events of leased line users. However, in the access process of leased line users, it can be determined whether the conditions for completing the access of leased line users can be met based on the status of the communication interface of the target leased line.

[0148] Any PFCP node report request in the embodiments of this application can be the PFCP nodereport request defined in the TR-459 standard. For a related introduction to this message type, please refer to the relevant standards. This article will not go into too much detail.

[0149] In another possible implementation, after the target leased line is deployed and configured on the DBNG-CP device, the DBNG-CP device can send a status acquisition request for the target leased line's communication interface to the DBNG-UP device. Based on this status acquisition request, the DBNG-UP device sends the status information of the target leased line's communication interface to the DBNG-CP device. That is, the DBNG-CP device can request the latest status information of the target leased line's communication interface from the DBNG-UP device in real time.

[0150] In this implementation, the DBNG-CP device can also subscribe to the status information of the DBNG-UP device, which does not conflict with the DBNG-CP device requesting the latest status information of the target leased line's communication interface from the DBNG-UP device in real time.

[0151] In some embodiments, the DBNG-CP device can authenticate the target leased line user through an authentication server (radius server), thereby reducing the functional complexity of the DBNG-CP device. That is, the DBNG-CP device can send an authentication request for the target leased line user to the authentication server. After authenticating the target leased line user, the authentication server sends an authentication result to the DBNG-CP device, which receives the authentication result indicating whether the authentication of the target leased line user passed or failed. In other embodiments, the DBNG-CP device can authenticate the target leased line user itself.

[0152] Successful authentication of the target leased line user can include successful identity verification or the target leased line user having available bandwidth for the target leased line. Failed authentication can include failed identity verification and / or the target leased line user having no available bandwidth for the target leased line.

[0153] As described above in the DBNG system architecture of this application embodiment, in one implementation, the DBNG-UP device can be the primary UP device in the UP hot standby group, such as the first UP device. The primary UP device is the UP device that is online (i.e., working) in the UP hot standby group. Based on this, the traffic of the target leased line user is transmitted through the online UP device in the UP hot standby group. Before the DBNG-CP device sends the first PFCP message for the target leased line user to the DBNG-UP device, it sends a first UP role notification message to the first UP device. The first UP role notification message indicates that the primary UP device in the UP hot standby group is the first UP device and indicates that the first UP device is online. Accordingly, before receiving the first PFCP message, the DBNG-UP device receives the first UP role notification message sent by the DBNG-CP device and, based on the first UP role notification message, brings the first UP device online.

[0154] The first UP device can be brought online by setting its interface to an available state. For example, the first UP device sets its interface to "up", which means it is in an available state.

[0155] The primary UP device can be determined by the DBNG-CP device from the UP hot standby group. For example, the DBNG-UP device can determine the primary UP device as the one with more available resources and no failures in the UP hot standby group, or it can select the primary UP device according to other rules. This application embodiment does not limit the method of determining the primary UP device. The primary UP device can also be determined by other methods, such as manual configuration.

[0156] The aforementioned DBNG-CP device can also be the primary CP device in a CP hot standby group, such as the first CP device. The primary UP device is the CP device that is working in the CP hot standby group. This application embodiment does not limit the method of determining the primary CP device; it can be automatically determined by the CP hot standby group, determined manually, or determined in other ways.

[0157] In this embodiment, any of the aforementioned PFCP session adjustment requests, PFCP session establishment requests, PFCP node reporting requests, and PFCP session deletion requests (described later) can be sent and received through the state control interface. For example, the DBNG-CP device sends a first PFCP message to the DBNG-UP device through the state control interface, and the DBNG-UP device receives the first PFCP message through the state control interface.

[0158] The state control interface (SCi) is an interface defined in the BBF 459 protocol between DBNG-CP and DBNG-UP devices. Besides the Sci interface, BBF 459 also defines two other interfaces between DBNG-CP and DBNG-UP: the control packet redirection interface (CPRi) and the management interface (Mi). In this application embodiment, various messages can be transmitted using a suitable interface from these three types, or they can be transmitted using a newly defined interface; this application embodiment does not limit this approach.

[0159] In summary, the embodiments of this application implement an access scheme for leased line users based on PFCP. That is, leased line users can be accessed in the DBNG system using PFCP, and the usage rights of leased line users on the leased line can be controlled. This makes the access scenarios for leased line users more diverse and the access scheme more complete, thus broadening the implementation environment for leased line user services.

[0160] Furthermore, a UP redundancy scheme and a CP redundancy scheme for dedicated line user access based on PFCP are proposed, which make the scheme of using PFCP to access dedicated line users in the DBNG system more complete, that is, the service reliability of dedicated line users is further improved.

[0161] Figure 8 This is a flowchart illustrating a method for providing access to a leased line user according to an embodiment of this application. The steps of this method can be executed by a DBNG-UP device. In an exemplary embodiment, Figure 8 Implementation examples can be related to Figure 6 Combined with the examples, Figure 6 The relevant content in the embodiments is in Figure 8 The same applies to the embodiments; similarly, Figure 8 The relevant content in the embodiments is in Figure 6 The same applies to the examples. Please refer to [link / reference]. Figure 8 The method includes the following steps.

[0162] Step 801: The DBNG-UP device receives the first PFCP message for the target leased line user sent by the DBNG-CP device.

[0163] After the DBNG-CP device sends the first PFCP message, the DBNG-UP device receives the first PFCP message accordingly, for example, through the status control interface.

[0164] Step 802: Based on the first PFCP message, the DBNG-UP device allows traffic to the target leased line user.

[0165] In other words, since the behavior in the traffic behavior rule carried by the first PFCP message is to allow, the DBNG-UP device allows the traffic of the target leased line user based on the first PFCP message.

[0166] As mentioned above, there are two scenarios for the first PFCP message. Accordingly, the processing flow of the DBNG-UP device based on the first PFCP message also differs, which will be described in detail below.

[0167] In the first scenario, the first PFCP message is a request to establish a first PFCP session. Based on this, the DBNG-UP device creates a session corresponding to the target leased line user and allows traffic to the target leased line user.

[0168] Specifically, the DBNG-UP device can identify the target interface in the DBNG-UP device as the communication interface of the target leased line based on the first PFCP message, and create a session under the communication interface of the target leased line as the session corresponding to the target leased line user. After creating the session, the DBNG-UP device can directly allow traffic under the session. The traffic under the session is the traffic of the target leased line user, including the access-side traffic (referred to as uplink traffic) and network-side traffic (referred to as downlink traffic) of the target leased line.

[0169] In the second scenario, the first PFCP message is a first PFCP session adjustment request. Based on this, the DBNG-UP device allows traffic to the target leased line user. It should be understood that in this case, the DBNG-UP device has already received a second PFCP session establishment request before receiving the first PFCP session adjustment request, and has created a session corresponding to the target leased line user based on the second PFCP session establishment request, blocking the target leased line user's traffic. After receiving the first PFCP session adjustment request, it simply allows the target leased line user's traffic to resume.

[0170] The DBNG-UP device can enable / disable the traffic of the target leased line user by setting the communication interface of the target leased line to be available / unavailable, or enable / disable the traffic of the target leased line user through other means, so as to achieve the purpose of transmitting / not transmitting the access side and network side traffic of the target leased line.

[0171] The preceding text described the process of a DBNG-UP device connecting to a target leased line user under the control of a DBNG-CP device. After the target leased line user successfully connects, the DBNG-CP device can also control the user's access rights to the target leased line. This will be discussed in the following section.

[0172] After allowing traffic to the target leased line user based on the first PFCP message, the DBNG-UP device can also send the target leased line user's usage information on the target leased line to the DBNG-CP device. Correspondingly, the DBNG-CP device receives the target leased line user's usage information sent by the DBNG-UP device, and the DBNG-CP device can control the target leased line user's access rights to the target leased line based on this usage information.

[0173] The usage data may include traffic statistics, i.e., the amount of traffic that the target leased line user has sent and / or received through the target leased line. In some embodiments, the usage data may also include data such as traffic usage time, which indicates how much traffic the target leased line user sent and / or received through the target leased line during what time period.

[0174] This application does not limit the timing of DBNG-UP devices reporting the usage of the target leased line by the target leased line user to DBNG-CP devices. DBNG-UP devices may report periodically, at regular intervals, according to other rules, or when triggered by certain events.

[0175] If the DBNG-CP device is the first CP device in the CP hot standby group, and the CP hot standby group also includes a second CP device, and the first CP device is the primary CP device in the CP hot standby group, then after the DBNG-CP device sends the first PFCP message for the target leased line user to the DBNG-UP device, it can also synchronize the control information of the first CP device for the target leased line user with the second CP device. The second CP device is used to control the target leased line user's access rights to the target leased line based on the control information when the primary CP device is switched to the second CP device. That is, after the second CP device is switched to the primary CP device, it can seamlessly take over the control of the target leased line user.

[0176] The control information may include the usage of the target leased line by the target leased line user. This usage information is used for synchronous backup on the first CP device and the second CP device. The main CP device is used to control the target leased line user's access rights to the target leased line based on this usage information.

[0177] In this embodiment of the application, the control information may further include the communication interface information of the target leased line and / or the identity identifier of the target leased line user. The communication interface information indicates which interface / VLAN / PVC on the DBNG-UP device is the communication interface of the target leased line. In the case of a UP hot standby group, the communication interface information indicates which interface / VLAN / PVC on the first UP device is the communication interface of the target leased line, and which interface / VLAN / PVC on the second UP device is the communication interface of the target leased line.

[0178] In the event of a primary CP device switchover, the new primary CP device, such as a second CP device, can send a CP role notification message to the DBNG-UP device. This message instructs the primary CP device to switch to the second CP device. Correspondingly, the DBNG-UP device can receive the CP role notification message from the second CP device and, based on this message, send information to the second CP device regarding the target leased line user's usage of the target leased line. For example, the DBNG-UP device might send traffic statistics data for the target leased line user to the second CP device, allowing the second CP device to continue controlling the target leased line user's usage rights based on the latest traffic statistics and other information.

[0179] In this embodiment, after allowing traffic to the target leased line user, the DBNG-UP device, upon detecting a fault, can send a second PFCP node report request to the DBNG-CP device. This second PFCP node report request carries second status information indicating the detected fault. After receiving the second PFCP node report request from the DBNG-UP device, the DBNG-CP device can send a second PFCP session adjustment request to the DBNG-UP device. This second PFCP session adjustment request carries the aforementioned traffic behavior rules, where the behavior in the traffic behavior rules is blocking. Upon receiving the second PFCP session adjustment request from the DBNG-CP device, the DBNG-UP device blocks the traffic of the target leased line user based on the second PFCP session adjustment request. That is, upon detecting a fault, the DBNG-UP device needs to temporarily block the traffic of the target leased line user to prevent the traffic of the target leased line user from becoming uncontrolled.

[0180] The second status information may include one or more of the following: access side status, network side status, and connection channel status. The access side status indicates whether the access side of the target leased line is faulty, the network side status indicates whether the network side of the target leased line is faulty, and the connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty.

[0181] If the target leased line is a Layer 2 or L2VPN leased line, the access-side status can include the communication interface status of the target leased line. If the target leased line is a Layer 3 leased line, the access-side status can include the communication interface status of the target leased line, as well as the access-side routing status. The access-side routing status indicates whether the terminal of the target leased line user is routable to the communication interface of the target leased line. In other words, considering the different networking methods of different types of leased lines, i.e., different implementation methods, the corresponding status information of different leased lines also differs. For example, compared to Layer 2 and L2VPN leased lines, the status information of Layer 3 leased lines also includes the access-side routing status.

[0182] As mentioned above, the DBNG-CP device can subscribe to the status information of the DBNG-UP device. Based on this, the aforementioned second PFCP node report request can be reported in real time based on the DBNG-CP device subscription or reported according to a reporting period. Real-time reporting means reporting immediately when a fault is detected, while reporting according to a reporting period does not necessarily mean reporting immediately when a fault is detected. Of course, in order to reduce the impact of faults on user services, the reporting period can be set to be shorter.

[0183] If the DBNG-UP device is the first UP device in the UP hot standby group, and the UP hot standby group also includes a second UP device, then after the DBNG-CP device sends a first PFCP message for the target leased line user to the DBNG-UP device, if a primary UP device switchover (referred to as primary UP switchover) is required, the DBNG-CP device can send a second UP role notification message to the first UP device and a third UP role notification message to the second UP device. Both the second and third UP role notification messages indicate that the primary UP device in the UP hot standby group will switch to the second UP device. The second UP role notification message also indicates that the first UP device will go offline, and the third UP role notification message also indicates that the second UP device will come online. After receiving the second UP role notification message sent by the DBNG-CP device, the first UP device will go offline based on the second UP role notification message.

[0184] The first UP device can be taken offline by setting its interface to an unavailable state. For example, the first UP device sets its interface to "down," meaning it is unavailable. Similarly, the second UP device can be brought online by setting its interface to an available state. For example, the second UP device sets its interface to "up," meaning it is unavailable.

[0185] The technical solution of this application embodiment can seamlessly divert the traffic of the target leased line user to the main UP device by controlling the interface of the first UP device and the second UP device to "up" or "down". Unlike non-leased line users (referred to as ordinary users), there is no need for the DBNG-CP device to perform MAC learning through the access side free ARP and network side route publication in order to divert the access side traffic and network side traffic of ordinary users to the main UP device.

[0186] The embodiments of this application do not limit the conditions and timing of the master UP device switching. The master UP device can switch when the current master UP device detects a fault, or it can switch when triggered by other events.

[0187] It should be understood that if the primary UP device switches over upon detecting a fault, taking the current primary UP device as the first UP device as an example, upon detecting a fault, the first UP device sends a second PFCP node report request carrying second status information to the DBNG-CP device. This second status information indicates the detected fault. After receiving the second PFCP node report request, the DBNG-CP device can sequentially send a second PFCP session adjustment request and a second UP role notification message to the first UP device, thereby blocking the traffic of the target leased line user and taking the first UP device offline. Alternatively, the DBNG-CP device can send only a second UP role notification message to the first UP device, thereby taking the first UP device offline. Before or simultaneously with the first UP device going offline, the traffic of the target leased line user can be blocked.

[0188] After sending the first PFCP message to the DBNG-UP device, if the target lease user's access to the target lease line expires, the DBNG-CP device can send a third PFCP session adjustment request to the DBNG-UP device. This third PFCP session adjustment request carries the aforementioned traffic behavior rules, and the behavior in these rules is blocking. Accordingly, the DBNG-UP device receives the third PFCP session adjustment request and, based on this request, blocks the target lease line user's traffic.

[0189] The DBNG-CP device can determine whether the target lease user's usage rights for the target lease line have expired based on the target lease user's usage information (such as traffic statistics and traffic usage time). The expiration here can refer to the usage rights reaching the usable period (a date) or the traffic statistics reaching the traffic threshold. This application embodiment does not limit this.

[0190] In some embodiments, the DBNG-CP device can automatically perform traffic billing or suspend traffic billing for the target leased line user. Specifically, traffic billing is performed on the target leased line user when traffic is allowed, and traffic billing is suspended when traffic is blocked.

[0191] In other embodiments, the DBNG-CP device can instruct the billing server (which can be the same as the authentication server or a different server, without limitation) to perform traffic billing for the target leased line user or suspend traffic billing. Specifically, it instructs the billing server to perform traffic billing for the target leased line user when traffic to the target leased line user is allowed, and instructs the billing server to suspend traffic billing for the target leased line user when traffic to the target leased line user is blocked. For example, after receiving the second PFCP node report request sent by the DBNP-UP device, the DBNG-CP device can also send a stop billing message for the target leased line user to the billing server. The billing server is used to perform traffic billing for the target leased line user, and upon receiving the stop billing message, the billing server can suspend traffic billing for the target leased line user. For example, if the DBNG-CP device sends any PFCP session adjustment request for a target leased line user to the DBNG-UP device, and the behavior in the traffic behavior rule carried by the PFCP session adjustment request is to allow, the DBNG-CP device can also send a start-billing message to the billing server. After receiving the start-billing message, the authentication server can perform traffic billing for the target leased line user. The logic for instructing the billing server in various situations is similar, and will not be described in detail in this article.

[0192] After re-enabling the target leased line user's access to the target leased line, for example, after the target leased line user renews their subscription, the DBNG-CP device can send a fourth PFCP session adjustment request to the DBNG-UP device. This fourth PFCP session adjustment request carries the aforementioned traffic behavior rules, and the behavior in the traffic behavior rules is to allow access. Accordingly, the DBNG-UP device receives the fourth PFCP session adjustment request and, based on this request, re-allows the target leased line user's traffic. In this manner, the DBNG-CP device can control the DBNG-UP device to block / allow the target leased line user's traffic using the above methods.

[0193] After sending the first PFCP message for the target leased line user to the DBNG-UP device, if the deployment configuration of the target leased line is deleted, the DBNG-CP device can send a PFCP session deletion request for the target leased line user to the DBNG-UP device. This PFCP session deletion request instructs the deletion of the session corresponding to the target leased line user. Accordingly, the DBNG-UP device receives the PFCP session deletion request from the DBNG-CP device and deletes the session corresponding to the target leased line user based on the request. That is, after the target leased line is terminated, the session corresponding to the target leased line user should be deleted, rather than simply temporarily blocking the traffic of the target leased line user.

[0194] Any PFCP session deletion request in the embodiments of this application can be a PFCP session deletion request as defined in the TR-459 standard. For a related introduction to this message type, please refer to the relevant standards. This article will not go into detail.

[0195] Next, please combine... Figure 9 right Figures 6 to 8 The embodiments are explained and illustrated by way of example.

[0196] Figure 9 This is a flowchart illustrating another method for accessing a leased line user, as provided in an embodiment of this application. See also... Figure 9 This method includes the following three processes.

[0197] Process a1: Traffic is blocked before the dedicated line user authentication.

[0198] After the deployment configuration of a leased line is established on the DBNG-CP device, the DBNG-CP device sends a PFCP session establishment request for the leased line user to the DBGN-UP device (the behavior in the traffic behavior rule is blocking). After receiving the PFCP session establishment request, the DBNG-UP device establishes the session corresponding to the leased line user and blocks the traffic of the leased line user. Figure 9 The symbol “×” indicates traffic blocking, which includes blocking traffic sent by the dedicated line user and traffic sent to the dedicated line user by the network (such as the Internet).

[0199] Process a2: Dedicated line user authentication and traffic release.

[0200] Taking the DBNG-UP device reporting status information to the DBNG-CP device as an example, the DBNG-CP device determines whether the communication interface of the leased line is available based on the latest received status information. If the communication interface is available, the DBNG-CP device sends an authentication request for the leased line user to the authentication server to authenticate the user and receives the authentication result returned by the server. If the authentication result indicates successful authentication, the DBNG-CP device sends a PFCP session adjustment request for the leased line user to the DBNG-UP device (carrying a traffic behavior rule indicating "allow"). Upon receiving the PFCP session adjustment request, the DBNG-UP device allows the traffic of the leased line user, including traffic sent by the user and traffic sent from the network to the user.

[0201] Process a3: Traffic is blocked after the dedicated line user goes offline.

[0202] If the DBNG-UP device detects a fault, it sends a PFCP node report request to the DBNG-CP device. This PFCP node report request carries status information indicating the detected fault. Upon receiving the PFCP node report request, the DBNG-CP device sends a PFCP session adjustment request (carrying a traffic behavior rule indicating blocking) to the DBNG-UP device, and a stop-billing message to the authentication server regarding the dedicated line user. Upon receiving the PFCP session adjustment request, the DBNG-UP device again blocks the dedicated line user's traffic. Upon receiving the stop-billing message, the authentication server stops billing the dedicated line user's traffic.

[0203] In addition, if the deployment configuration of the leased line on DBNG-CP is deleted, the DBNG-CP device sends a PFCP session deletion request for the leased line user to the DBNG-UP device. After receiving the PFCP session deletion request, the DBNG-UP device deletes the session corresponding to the leased line user.

[0204] In summary, the embodiments of this application implement an access scheme for leased line users based on PFCP. PFCP can be used to access leased line users in the DBNG system and control the usage permissions of leased line users on the leased line, making the access scenarios for leased line users richer and the access scheme more complete, thus broadening the implementation environment for leased line user services.

[0205] Furthermore, a UP redundancy scheme and a CP redundancy scheme for dedicated line user access based on PFCP are proposed, which make the scheme of using PFCP to access dedicated line users in the DBNG system more complete, that is, the service reliability of dedicated line users is further improved.

[0206] Figure 10 This is a flowchart illustrating another method for accessing a leased line user, as provided in an embodiment of this application. Figure 10 In this embodiment, the DBNG system architecture includes a DBNG-CP device and a DBNG-UP hot standby group (referred to as the UP hot standby group), such as Figure 2 and Figure 4 The system architecture shown includes a UP hot standby group comprising a first UP device and a second UP device. The DBNG-CP device is used to control the first and second UP devices in the UP hot standby group. Figure 10 The method shown in the embodiment can be applied to dedicated line user access in UP redundancy scenarios. Figure 10 The steps shown can be performed by a DBNG-CP device. See also Figure 10 The method includes the following steps.

[0207] Step 1001: The DBNG-CP device identifies the first UP device as the primary UP device in the UP hot standby group.

[0208] The primary UP device can be determined from the UP hot standby group by the DBNG-CP device. For example, the DBNG-UP device can determine the primary UP device as the one with more available resources and no failures in the UP hot standby group, or it can select the primary UP device according to other rules. This application embodiment does not limit the method of determining the primary UP device. Of course, in some other embodiments, the primary UP device can also be determined in other ways, such as manual configuration.

[0209] Step 1002: The DBNG-CP device sends a first UP role notification message to the first UP device and a second UP role notification message to the second UP device. Both the first UP role notification message and the second UP role notification message indicate that the master UP device is the first UP device. The first UP role notification message also indicates that the first UP device is online, and the second UP role notification message also indicates that the second UP device is offline.

[0210] In other words, after identifying the primary UP device in the UP hot standby group, the DBNG-CP device controls the primary UP device (i.e., the first UP device) to go online and controls the standby UP device (i.e., the second UP device) to go offline through the above two UP role notification messages.

[0211] Step 1003: If the authentication of the target leased line user is successful, the DBNG-CP device sends a first message to the first UP device, which instructs to allow the traffic of the target leased line user.

[0212] The target leased line users are users of Layer 2 leased lines, Layer 3 leased lines, or L2VPN leased lines, or other possible leased line users. The technical solution of this application can also be applied to leased lines that may be realized in the future.

[0213] Step 1005 and Figure 6 Step 601 in the embodiment is similar, except that the first UP device in step 1003 is one of the two UP devices included in the UP hot standby group, while the DBNG-UP device in step 601 can be the only UP device in the DBNG system or one of the UP devices in the UP hot standby group. Furthermore, the first message in step 1003 may not be a PFCP message, but rather another protocol message, such as a general protocol message or a newly defined protocol message. As an example, the first message can be a protocol message defined in the TR-487 standard specification or a protocol message defined in other standard specifications. Of course, the first message in step 1003 can also be the first PFCP message. Based on this, Figure 6 Some implementation methods in the embodiments can be directly referenced. Figure 10 In the example.

[0214] and Figure 6 Similarly, in the implementation examples, Figure 10 The first message in the embodiment can also be of two types.

[0215] In the first scenario, the first message is a session establishment request, instructing the first UP device to create a session corresponding to the target leased line user and to allow traffic to the target leased line user.

[0216] If the first message is the first PFCP message, then the session establishment request can be the first PFCP session establishment request, carrying traffic behavior rules, and the behavior in the traffic behavior rules is to allow.

[0217] In the second scenario, the first message is a traffic release request, instructing the first UP device to release the traffic of the target leased line user. Correspondingly, before sending the first message to the first UP device, the DBNG-CP device first sends a session establishment request, instructing the first UP device to create a session corresponding to the target leased line user and block the traffic of the target leased line user. Before receiving the first message, the DBNG-UP device first receives the session establishment request, and based on this request, creates a session corresponding to the target leased line user and blocks the traffic of the target leased line user.

[0218] If the first message is the first PFCP message, then the traffic release request can be a first PFCP session adjustment request, carrying traffic behavior rules, and the behavior in the traffic behavior rules is release. The session establishment request can be a second PFCP session establishment request, carrying traffic behavior rules, and the behavior in the traffic behavior rules is block.

[0219] In other words, in one implementation, the first message is a first PFCP message targeting the dedicated line user. This first PFCP message carries traffic behavior rules, and the behavior specified in the traffic behavior rules is to allow access. For a more detailed explanation of traffic behavior rules, please refer to the above text. Figure 6 For example, the TR-459 standard specification can also be referenced.

[0220] and Figure 6 Similarly, in the implementation examples, Figure 10 The first PFCP message in the embodiment can also have two forms.

[0221] In the first scenario, the first PFCP message is a first PFCP session establishment request, which instructs the first UP device to create a session corresponding to the target leased line user. That is, the DBNG-CP device, through the first PFCP session establishment request, not only instructs the DBNG-UP device to establish the session, but also instructs the DBNG-UP device to allow traffic under that session through the traffic behavior rules carried therein.

[0222] In the second scenario, the first PFCP message is a first PFCP session adjustment request. Accordingly, before sending the first message to the first UP device, the DBNG-CP device first sends a second PFCP session establishment request to the first UP device. This second PFCP session establishment request also carries the traffic behavior rule, and the behavior in the traffic behavior rule is blocking. Before receiving the first message, the DBNG-UP device first receives the second PFCP session establishment request sent by the DBNG-CP device. Based on the second PFCP session establishment request, it creates a session corresponding to the target leased line user and blocks the traffic of the target leased line user.

[0223] The implementation logic for the two scenarios mentioned above can be found by referring to... Figure 6 The relevant descriptions in the embodiments will not be repeated here.

[0224] In this embodiment, before sending the first message to the first UP device, the DBNG-CP device authenticates the target leased line user if the communication interface of the target leased line is available. That is, provided the communication interface of the target leased line on the DBNG-UP device is available, the DBNG-CP device can perform the aforementioned authentication operation, thereby ensuring that the target leased line user can successfully access and communicate normally.

[0225] Figure 10 In this embodiment, the method by which the DBNG-CP device authenticates the target leased line user can be compared with... Figure 6 In the embodiments, the DBNG-CP device authenticates the target leased line user in the same way, which will not be repeated here. Furthermore, Figure 10 The timing of authentication in the embodiments can also be referred to Figure 6 The relevant descriptions in the embodiments will not be repeated here.

[0226] As can be seen from the above, the DBNG-CP device can send the first message when the communication interface of the target leased line is available. In this embodiment, the DBNG-CP device can obtain the status of the communication interface of the target leased line in various ways, including... Figure 6 The implementation methods in the embodiments are similar and can be referred to. Figure 6 The relevant descriptions in the examples are as follows.

[0227] As an example, before receiving the first message from the DBNG-CP device, the DBNG-UP device sends first status information to the DBNG-CP device, indicating that the communication interface of the target leased line is available. Correspondingly, before sending the first message to the first UP device, the DBNG-CP device receives the first status information sent by the first UP device. That is, the DBNG-UP device can proactively report the status of the communication interface of the target leased line to the DBNG-CP device.

[0228] The first status information can be carried in a message, and the protocol type of this message can vary depending on the protocol scenario. For example, according to the TR-459 standard specification, the first status information can be carried in the first PFCP node report request. According to the TR-487 standard specification, the first status information can be carried in the protocol defined in the TR-487 standard specification.

[0229] For details regarding the first state information, please refer to [link / reference]. Figure 6 The details of the embodiments will not be repeated here.

[0230] In summary, the embodiments of this application implement an access scheme for leased line users in UP redundancy scenarios. This scheme enables leased line users to access DBNG-UP redundancy scenarios and controls their usage permissions on the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus broadening the implementation environment for leased line user services.

[0231] This allows for dedicated line user access in UP redundancy scenarios. Furthermore, it can be combined with CP redundancy technology to further improve the solution for accessing dedicated line users in the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0232] Figure 11 This is a flowchart illustrating another method for accessing a leased line user, as provided in an embodiment of this application. Figure 11 In this embodiment, the DBNG system architecture includes a DBNG-CP device and a DBNG-UP hot standby group (referred to as the UP hot standby group), such as Figure 2 and Figure 4 The system architecture shown includes a first UP device and a second UP device in the UP hot standby group. Figure 11 The method shown in the embodiment can be applied to dedicated line user access in UP redundancy scenarios. Figure 11 The steps shown can be performed by the first UP device. In an exemplary embodiment, Figure 11 Implementation examples can be related to Figure 10 Combined with the examples, Figure 10 The relevant content in the embodiments is in Figure 11 The same applies to the embodiments; similarly, Figure 11 The relevant content in the embodiments is in Figure 10 The same applies to the examples. Please refer to [link / reference]. Figure 11 The method includes the following steps. See [link / reference] Figure 11 The method includes the following steps.

[0233] Step 1101: The first UP device receives the first UP role notification message sent by the DBNG-CP device. The first UP role notification message indicates that the master UP device is the first UP device.

[0234] In other words, after the DBNG-CP device sends the first UP role notification message, the first UP device receives the corresponding first UP role notification message. Furthermore, after the DBNG-CP device sends the second UP role notification message, the second UP device receives the corresponding second UP role notification message.

[0235] The first UP device can be brought online based on the first UP role notification message.

[0236] In one possible implementation, the first UP device can come online by setting its interface to an available state. For example, the first UP device sets its interface to "up", which means it is in an available state.

[0237] In addition, the second UP device can be taken offline based on the second UP role notification message.

[0238] As an example, the second UP device can disable its interface, thus taking the second UP device offline. For instance, the second UP device sets its interface to "down," meaning it is unavailable.

[0239] Step 1102: The first UP device receives the first message sent by the DBNG-CP device, which indicates that the traffic of the target leased line user can be released.

[0240] After the DBNG-CP device sends the first message, the first UP device receives the first message accordingly. For example, if the first message is the first PFCP message, then the first UP device receives the first PFCP message through the status control interface.

[0241] Step 1103: The first UP device, based on the first message, allows the traffic of the target dedicated line user.

[0242] In other words, since the first message indicates that the traffic of the target leased line user should be allowed, the first UP device allows the traffic of the target leased line user based on the first message.

[0243] As mentioned above, there are two scenarios for the first message. Accordingly, the processing flow of the first UP device based on the first message also differs, which will be described in detail below.

[0244] In the first scenario, the first message is a first session establishment request (e.g., a first PFCP session establishment request). Based on this, the first UP device creates a session corresponding to the target leased line user and allows the traffic of the target leased line user.

[0245] In the second scenario, the first message is a first traffic release request (e.g., a first PFCP session adjustment request). Based on this, the first UP device releases the traffic of the target leased line user based on the first message.

[0246] In this embodiment, the traffic of the target leased line user is transmitted through the UP device (i.e., the primary UP device) that comes online in the UP hot standby group. If a primary / standby UP switch occurs, the DBNG-CP device needs to control the traffic of the target leased line user to switch to the new primary UP device.

[0247] In one possible implementation, after the DBNG-CP device sends a first message to the first UP device, if the second UP device is determined to be the primary UP device in the UP hot standby group, for example, if the primary UP device is switched for some reason, then the DBNG-CP device sends a third UP role notification message to the first UP device and a fourth UP role notification message to the second UP device. Both the third and fourth UP role notification messages indicate that the primary UP device in the UP hot standby group is switched to the second UP device. The third UP role notification message also indicates that the first UP device is offline, and the fourth UP role notification message also indicates that the second UP device is online.

[0248] The first UP device can be taken offline by setting its interface to an unavailable state. For example, the first UP device sets its interface to "down," meaning it is unavailable. Similarly, the second UP device can be brought online by setting its interface to an available state. For example, the second UP device sets its interface to "up," meaning it is unavailable.

[0249] The technical solution of this application embodiment can seamlessly divert the traffic of the target leased line user to the main UP device by controlling the interface of the first UP device and the second UP device to "up" or "down". Unlike non-leased line users (referred to as ordinary users), there is no need for the DBNG-CP device to perform MAC learning through the access side free ARP and network side route publication in order to divert the access side traffic and network side traffic of ordinary users to the main UP device.

[0250] The embodiments of this application do not limit the conditions and timing of the master UP device switching. The master UP device can switch when the current master UP device detects a fault, or it can switch when triggered by other events.

[0251] It should be understood that if the primary UP device switches over when the current primary UP device detects a fault, taking the current primary UP device as the first UP device as an example, when the first UP device detects a fault, it sends a second status information to the DBNG-CP device. The second status information indicates the fault detected by the first UP device. The DBNG-CP device receives the second status information sent by the first UP device and sends a third UP role notification message to the first UP device, or sends a traffic blocking request (such as a second PFCP session adjustment request) and a third UP role notification request, thereby blocking the traffic of the target leased line user and taking the first UP device offline.

[0252] In this embodiment, after the first UP device allows traffic to the target leased line user based on the first message, it can send the target leased line user's usage information to the DBNG-CP device. The DBNG-CP device can receive the target leased line user's usage information sent by the first UP device and control the target leased line user's usage permissions based on this information. For specific implementation details, please refer to... Figures 6 to 8 The relevant content in the embodiments will not be repeated here.

[0253] If the DBNG-CP device is the first CP device in the CP hot standby group, and the CP hot standby group also includes a second CP device, with the first CP device being the primary CP device in the CP hot standby group, then the aforementioned usage information can be synchronously backed up on both the first and second CP devices. The primary CP device is used to control the target lease line users' access rights to the target lease line based on the usage information. That is, the first CP device can synchronize the target lease line users' usage information to the second CP device. In the event of a primary CP device switchover, the switched-over primary CP device (i.e., the second CP device) can take over control of the target lease line users, that is, control the target lease line users' access rights to the target lease line based on the backed-up target lease line users' usage information.

[0254] In this embodiment, after the first CP device sends a first message to the first UP device, it can synchronize the control information of the first CP device on the target leased line user with the second CP device. The second CP device is used to control the target leased line user's access to the target leased line based on this control information when the primary CP device is switched to the second CP device. The control information may include the target leased line user's usage of the target leased line (such as traffic statistics, traffic usage time, etc.).

[0255] It should be understood that, Figures 6 to 11 Similar elements in the embodiments can be adapted and combined for application, for example, Figures 6 to 8 The UP redundancy scheme in the embodiment can be combined with Figures 10 to 11 In the embodiments, the PFCP-based implementation schemes are considered to be logically identical schemes. Figures 6 to 8 The relevant content in the UP redundancy scheme of the embodiment also applies to Figures 10 to 11 Example.

[0256] In summary, the embodiments of this application implement an access scheme for leased line users in DBNG-UP redundancy scenarios. This scheme enables leased line users to access the network in UP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus broadening the implementation environment for leased line user services.

[0257] This allows for dedicated line user access in UP redundancy scenarios. Furthermore, it can be combined with CP redundancy technology to further improve the solution for accessing dedicated line users in the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0258] Figure 12 This is a flowchart illustrating another method for accessing a leased line user, as provided in an embodiment of this application. Figure 12 In this embodiment, the DBNG system architecture includes DBNG-UP devices and DBNG-CP hot standby groups (referred to as CP hot standby groups), such as... Figure 3 and Figure 4 The system architecture shown includes a first CP device and a second CP device in the CP hot standby group. Figure 12 The method shown in the embodiment can be applied to dedicated line user access in CP redundancy scenarios. Figure 12 The steps of the method shown can be performed by the first CP device. See also Figure 12 The method includes the following steps.

[0259] Step 1201: If the authentication of the target leased line user is successful, the first CP device sends a first message to the DBNG-UP device, which instructs to allow the traffic of the target leased line user.

[0260] The first CP device is the primary CP device in the CP hot standby group, which also includes a second CP device.

[0261] The target leased line users are users of Layer 2 leased lines, Layer 3 leased lines, or L2VPN leased lines, or other possible leased lines. The technical solution of this application can also be applied to leased lines that may be realized in the future.

[0262] Step 1201 and Figure 6 Step 601 in the embodiment is similar, except that the first CP device in step 1201 is one of the two CP devices included in the CP hot standby group, while the DBNG-CP device in step 601 can be the only CP device in the DBNG system or one of the CP devices in the CP hot standby group. Furthermore, the first message in step 1201 may not be a PFCP message, but rather another protocol message, such as a general protocol message or a newly defined protocol message. As an example, the first message can be a protocol message defined in the TR-487 standard specification or a protocol message defined in other standard specifications. Of course, the first message in step 1201 can also be the first PFCP message. Based on this, Figure 6 Some implementation methods in the embodiments can be directly referenced. Figure 12 In the example.

[0263] In addition, step 1201 and Figure 10Step 1003 in the embodiment is similar, except that the first CP device in step 1201 is one of the two CP devices included in the CP hot standby group, and the DBNG-CP device in step 1003 can be either the only CP device in the DBNG system or one of the CP devices in the CP hot standby group. Based on this, Figure 10 Some implementation methods in the embodiments can be directly referenced. Figure 12 In the example.

[0264] Next, we will... Figure 12 The embodiments are described by way of example.

[0265] In one possible implementation, the first message is a first PFCP message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0266] In the first scenario, the first PFCP message is the first PFCP session establishment request, which instructs the DBNG-UP device to create a session corresponding to the target leased line user.

[0267] In the second scenario, the first PFCP message is a first PFCP session adjustment request. Before sending the first message to the DBNG-UP device, the first CP device first sends a second PFCP session establishment request to the DBNG-UP device. This second PFCP session establishment request carries traffic behavior rules, and the behavior in these rules is blocking. Accordingly, before receiving the first message from the first CP device, the DBNG-UP device receives the second PFCP session establishment request from the first CP device. Based on this request, it creates a session corresponding to the target leased line user and blocks the traffic of that user.

[0268] The first message is received when the communication interface of the target leased line is in an available state. In one possible implementation, before receiving the first message from the first CP device, the DBNG-UP device sends first status information to the first CP device, indicating that the communication interface of the target leased line is in an available state. For specific implementation details, please refer to [reference needed]. Figures 6 to 11 Examples are not described here.

[0269] See Figure 13If the DBNG-UP device is the first UP device in the UP hot standby group, and the UP hot standby group also includes a second UP device, then before sending the first message to the DBNG-UP device, the first CP device determines the first UP device as the primary UP device in the UP hot standby group, sends a first UP role notification message to the first UP device, and sends a second UP role notification message to the second UP device. Both the first and second UP role notification messages indicate that the primary UP device in the UP hot standby group is the first UP device. The first UP role notification message also indicates that the first UP device is online, and the second UP role notification message also indicates that the second UP device is offline. For specific implementation details, please refer to [link to implementation details]. Figures 6 to 11 Examples are not described here.

[0270] Accordingly, when the DBNG-UP device is the first UP device in the UP hot standby group, the traffic of the target leased line user is transmitted through the UP device (i.e., the primary UP device) that comes online in the UP hot standby group. Based on this, before receiving the first message sent by the first CP device, the DBNG-UP device receives the first UP role notification message sent by the first CP device, and brings the first UP device online based on the first UP role notification message.

[0271] Step 1202: The first CP device synchronizes the control information of the first CP device for the target leased line user with the second CP device. The main CP device is used to control the target leased line user's access rights to the target leased line based on the control information.

[0272] In other words, the first CP device synchronizes this control information with the second CP device, so that after the second CP device switches to become the primary CP device, it can take over control of the target leased line user based on this control information, thereby reducing or even avoiding the impact on the target leased line user's services. For specific implementation details, please refer to [link / reference]. Figures 6 to 11 Examples are not described here.

[0273] The control information for the target leased line user includes the user's usage of the target leased line. In some embodiments, the control information may also include the communication interface information of the target leased line and / or the identity identifier of the target leased line user. The communication interface information indicates which interface / VLAN / PVC on the DBNG-UP device is the communication interface of the target leased line. In the presence of a UP hot standby group, the communication interface information indicates which interface / VLAN / PVC on the first UP device and which interface / VLAN / PVC on the second UP device is the communication interface of the target leased line.

[0274] In one possible implementation, the communication interface information of the target leased line and / or the identity of the target leased line user can be synchronized to the second CP device after the deployment configuration of the target leased line is established on the first CP device. The usage of the target leased line by the target leased line user can be synchronized to the second CP device after the DBNG-UP device reports to the first CP device.

[0275] If the DBNG-UP device is the first UP device in the UP hot standby group, and the UP hot standby group also includes a second UP device, and a primary UP device switchover is required for some reason, then refer to [link to relevant documentation]. Figure 13 The first CP device can send a third UP role notification message to the first UP device and a fourth UP role notification message to the second UP device. Both the third and fourth UP role notification messages indicate that the primary UP device in the UP hot standby group should switch to the second UP device. The third UP role notification message also indicates that the first UP device should go offline and the fourth UP role notification message also indicates that the second UP device should go online.

[0276] Accordingly, after the first UP device allows traffic to the target leased line user based on the first message, if it receives a third UP role notification message from the first CP device, it will take the first UP device offline based on the third UP role notification message. If the second UP device receives a fourth UP role notification message from the first CP device, it will bring the second UP device online based on the fourth UP role notification message, thereby seamlessly diverting the traffic of the target leased line user to the second UP device and ensuring that the target leased line user's service is not interrupted.

[0277] In summary, the embodiments of this application implement an access scheme for leased line users in DBNG-CP redundancy scenarios. This scheme enables leased line users to access the network in CP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0278] This includes enabling dedicated line user access in CP redundancy scenarios based on DBNG-related standards and specifications. Furthermore, combining this with UP redundancy technology further improves the solution for accessing dedicated line users within the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0279] Figure 14 This is a flowchart illustrating another method for accessing a leased line user, as provided in an embodiment of this application. Figure 14 In this embodiment, the DBNG system architecture includes a DBNG-UP device and a CP hot standby group, such as... Figure 3 and Figure 4 The system architecture shown includes a first CP device and a second CP device in the CP hot standby group. Figure 14 The method shown in the embodiment can be applied to dedicated line user access in CP redundancy scenarios. Figure 14 The steps of the method shown can be performed by a DBNG-UP device. In an exemplary embodiment, Figure 14 Implementation examples can be related to Figure 12 Combined with the examples, Figure 12 The relevant content in the embodiments is in Figure 14 The same applies to the embodiments; similarly, Figure 14 The relevant content in the embodiments is in Figure 12 The same applies to the examples. See also Figure 14 The method includes the following steps.

[0280] Step 1401: The DBNG-UP device receives the first message sent by the first CP device, which indicates that the traffic of the target leased line user can be released.

[0281] After the first CP device sends the first message to the DBNG-UP device, the DBNG-UP device receives the first message accordingly. For example, the first message is the first PFCP message, which the DBNG-UP device receives through the status control interface.

[0282] Step 1402: Based on the first message, the DBNG-UP device allows traffic to the target leased line user.

[0283] For specific implementation details, please refer to [link / reference]. Figure 11 Step 1103 in the embodiment will not be repeated here.

[0284] Step 1403: The DBNG-UP device sends the target leased line user's usage information to the first CP device.

[0285] In this embodiment of the application, the main CP device is used to control the target leased line user's access rights to the target leased line based on the usage situation.

[0286] After the first CP device sends the first message to the DBNG-UP device, it can receive information from the DBNG-UP device regarding the target leased line user's usage of the target leased line. The first CP device can synchronize this usage information with the second CP device so that, in the event of a primary CP device switchover, the new primary CP device (such as the second CP device) can take over control of the target leased line user. For specific implementation details, please refer to [link / reference]. Figures 6 to 11 Examples are not described here.

[0287] In summary, the embodiments of this application implement an access scheme for leased line users in DBNG-CP redundancy scenarios. This scheme enables leased line users to access the network in CP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0288] Figure 15 This is a flowchart illustrating another method for accessing a leased line user, as provided in an embodiment of this application. Figure 15 In this embodiment, the DBNG system architecture includes a DBNG-UP device and a CP hot standby group, such as... Figure 3 and Figure 4 The system architecture shown includes a first CP device and a second CP device in the CP hot standby group. Figure 15 The method shown in the embodiment can be applied to dedicated line user access in CP redundancy scenarios. Figure 15 The steps of the method shown can be performed by a second CP device. In an exemplary embodiment, Figure 15 Implementation examples can be related to Figures 12 to 14 Combined with the examples, Figures 12 to 14 The relevant content in the embodiments is in Figure 15 The same applies to the embodiments; similarly, Figure 15 The relevant content in the embodiments is in Figures 12 to 14 The same applies to the examples. See also Figure 15 The method includes the following steps.

[0289] Step 1501: The second CP device receives the control information of the first CP device on the target leased line user sent by the first CP device.

[0290] In this configuration, the first CP device is the primary CP device in the CP hot standby group, and the second CP device is the backup CP device in the CP hot standby group. After the first CP device sends the aforementioned control information to the second CP device, the second CP device receives the control information accordingly.

[0291] Step 1502: When the second CP device is switched to the primary CP device in the CP hot standby group, the second CP device controls the target leased line user's access rights to the target leased line based on the control information.

[0292] For specific implementation details, please refer to [link / reference]. Figures 6 to 11 The relevant content in the embodiments will not be repeated here.

[0293] In one possible implementation, when the second CP device switches to become the primary CP device in the CP hot standby group, see [link to relevant documentation]. Figure 16The second CP device can send a CP role notification message, which can be called the first CP role notification message, to the DBNG-UP device, instructing the primary CP device in the CP hot standby group to switch to the second CP device. After receiving the first CP role notification message, the DBNG-UP device can report the target lease line user's usage status (e.g., the latest usage status) to the second CP device. Correspondingly, the second CP device receives the target lease line user's usage status from the DBNG-UP device, and thus controls the target lease line user's usage rights based on the latest usage status.

[0294] In summary, the embodiments of this application implement an access scheme for leased line users in DBNG-CP redundancy scenarios. This scheme enables leased line users to access the network in CP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0295] This includes enabling dedicated line user access in CP redundancy scenarios based on DBNG-related standards and specifications. Furthermore, combining this with UP redundancy technology further improves the solution for accessing dedicated line users within the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0296] Figure 17 This is a schematic diagram of the structure of a network device provided in an embodiment of this application. The network device can be implemented as part or all of a DBNG-CP device by software, hardware, or a combination of both. This network device can be the DBNG-CP device in the aforementioned method embodiments. See also... Figure 17 The network device includes: a first transmitting module 1701.

[0297] The first sending module 1701 is used to send a first PFCP message for the target leased line user to the DBNG-UP device after the target leased line user has been authenticated. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0298] In one possible implementation, the first PFCP message is a first PFCP session establishment request, which instructs the DBNG-UP device to create a session corresponding to the target leased line user.

[0299] In one possible implementation, the first PFCP message is a first PFCP session adjustment request; the first sending module 1701 is further configured to:

[0300] Before sending the first PFCP message for the target leased line user to the DBNG-UP device, a second PFCP session establishment request is sent to the DBNG-UP device. The second PFCP session establishment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0301] In one possible implementation, the first transmitting module 1701 is further configured to:

[0302] Before sending the first PFCP message for the target leased line user to the DBNG-UP device, the target leased line user is authenticated if the communication interface of the target leased line is available. The target leased line is the leased line used by the target leased line user.

[0303] In one possible implementation, see Figure 18 The network device also includes:

[0304] The first receiving module 1702 is used to receive information from the DBNG-UP device regarding the target leased line user’s usage of the target leased line after sending a first PFCP message for the target leased line user to the DBNG-UP device.

[0305] The control module 1703 is used to control the usage rights of the target leased line user to the target leased line based on the usage situation.

[0306] In one possible implementation, this use case includes traffic statistics.

[0307] In one possible implementation, the DBNG-CP device is the first CP device in the CP hot standby group, which also includes a second CP device, and the first CP device is the primary CP device in the CP hot standby group; the network device also includes:

[0308] The second sending module is used to synchronize the control information of the first CP device for the target leased line user to the second CP device after sending the first PFCP message for the target leased line user to the DBNG-UP device. The second CP device is used to control the target leased line user's access rights to the target leased line based on the control information when the primary CP device is switched to the second CP device.

[0309] In one possible implementation, the first PFCP message is sent when the communication interface of the target leased line is available; the target leased line is a leased line used by the target leased line user; the network device also includes:

[0310] The second receiving module is used to receive the first PFCP node report request sent by the DBNG-UP device. The first PFCP node report request carries first status information, which indicates that the communication interface of the target leased line is in an available state. The second receiving module can be the first receiving module 1702 mentioned above, or it can be other receiving modules.

[0311] In one possible implementation, the network device further includes:

[0312] The second receiving module is used to receive the second PFCP node report request sent by the DBNP-UP device. The second PFCP node report request carries second status information, which indicates the fault detected by the DBNP-UP device. The second receiving module can be the first receiving module 1702 mentioned above, or it can be other receiving modules.

[0313] The first sending module 1701 is also used to send a second PFCP session adjustment request to the DBNG-UP device. The second PFCP session adjustment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0314] In one possible implementation, the second status information includes one or more of the following: access side status, network side status, and connection channel status. The access side status indicates whether the access side of the target leased line is faulty, the network side status indicates whether the network side of the target leased line is faulty, and the connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty. The target leased line is a leased line used by the target leased line user.

[0315] In one possible implementation, the target leased line is a Layer 2 leased line or an L2VPN leased line, and the access side status includes the communication interface status of the target leased line.

[0316] In one possible implementation, the target leased line is a Layer 3 leased line. The access side status includes the communication interface status of the target leased line and the access side routing status. The access side routing status indicates whether the terminal of the target leased line user is routable to the communication interface of the target leased line.

[0317] In one possible implementation, the DBNG-UP device is the first UP device in the UP hot standby group, and the traffic of the target leased line user is transmitted through the UP device that comes online in the UP hot standby group; the first sending module 1701 is also used for:

[0318] Before sending the first PFCP message for the target leased line user to the DBNG-UP device, a first UP role notification message is sent to the first UP device. The first UP role notification message indicates that the primary UP device in the UP hot standby group is the first UP device and indicates that the first UP device is online.

[0319] In one possible implementation, the UP hot standby group further includes a second UP device; the first transmitting module 1701 is also used for:

[0320] After sending the first PFCP message for the target leased line user to the DBNG-UP device, a second UP role notification message is sent to the first UP device, and a third UP role notification message is sent to the second UP device. Both the second and third UP role notification messages instruct the primary UP device in the UP hot standby group to switch to the second UP device. The second UP role notification message also instructs the first UP device to go offline, and the third UP role notification message also instructs the second UP device to go online.

[0321] In one possible implementation, the first transmitting module 1701 is further configured to:

[0322] When the target lease user's access to the target lease expires, a third PFCP session adjustment request is sent to the DBNG-UP device. The third PFCP session adjustment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0323] In one possible implementation, the first transmitting module 1701 is further configured to:

[0324] When the deployment configuration of the target leased line is deleted, a PFCP session deletion request for the target leased line user is sent to the DBNG-UP device. The PFCP session deletion request indicates that the session corresponding to the target leased line user be deleted. The target leased line is the leased line used by the target leased line user.

[0325] In one possible implementation, the network device further includes:

[0326] The third sending module is used to send authentication requests for the target leased line user to the authentication server;

[0327] The third receiving module is used to receive the authentication result sent by the authentication server, which indicates whether the authentication of the target leased line user is successful or unsuccessful.

[0328] In one possible implementation, the leased line used by the target leased line user is a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0329] In one possible implementation, the first transmitting module 1701 is specifically used for:

[0330] The first PFCP message is sent to the DBNG-UP device through the status control interface.

[0331] This application implements an access scheme for leased line users based on PFCP. It can utilize PFCP to access leased line users in the DBNG system and control the usage permissions of leased line users on the leased line, making the access scenarios for leased line users richer and the access scheme more complete, thus broadening the implementation environment for leased line user services.

[0332] Furthermore, a UP redundancy scheme and a CP redundancy scheme for dedicated line user access based on PFCP are proposed, which make the scheme of using PFCP to access dedicated line users in the DBNG system more complete, that is, the service reliability of dedicated line users is further improved.

[0333] It should be noted that the network device provided in the above embodiments, when controlling the access of leased line users, is only illustrated by the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device / apparatus can be divided into different functional modules to complete all or part of the functions described above. Furthermore, the network device and the leased line user access method embodiments provided in the above embodiments belong to the same concept, and their specific implementation process can be found in [link to relevant documentation]. Figures 6 to 9 The method embodiments shown are not described in detail here.

[0334] Figure 19 This is a schematic diagram of another network device provided in the embodiments of this application. This network device can be implemented as part or all of a DBNG-UP device by software, hardware, or a combination of both. This DBNG-UP device can be the DBNG-UP device in the aforementioned method embodiments. See also... Figure 19 The network device includes a first receiving module 1901 and a processing module 1902.

[0335] The first receiving module 1901 is used to receive the first PFCP message sent by the DBNG-CP device for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0336] Processing module 1902 is used to allow traffic to the target leased line user based on the first PFCP message.

[0337] In one possible implementation, the first PFCP message is a first PFCP session establishment request; the network device also includes:

[0338] The session creation module is used to create a session corresponding to the target dedicated line user based on the first PFCP session establishment request before allowing traffic to the target dedicated line user.

[0339] In one possible implementation, the first PFCP message is a first PFCP session adjustment request; the first receiving module 1901 is further configured to:

[0340] Before receiving the first PFCP message for the target leased line user sent by the DBNG-CP device, receive the second PFCP session establishment request sent by the DBNG-CP device. The second PFCP session establishment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0341] The network equipment also includes:

[0342] The session creation module is used to create a session corresponding to the target leased line user based on the second PFCP session establishment request.

[0343] The processing module 1902 is also used to block the traffic of the target leased line user based on the second PFCP session establishment request.

[0344] In one possible implementation, the network device further includes:

[0345] The first sending module is used to send the target leased line user's usage information to the DBNG-CP device after the target leased line user's traffic is allowed based on the first PFCP message. The DBNG-CP device is used to control the target leased line user's access rights based on the usage information.

[0346] In one possible implementation, the DBNG-CP device is the first CP device in the CP hot standby group, which also includes a second CP device. The first CP device is the primary CP device in the CP hot standby group. This usage is used for synchronous backup on the first CP device and the second CP device. The primary CP device is used to control the usage rights of the target leased line user on the target leased line based on this usage.

[0347] In one possible implementation, the network device further includes:

[0348] The second receiving module is used to receive the CP role notification message sent by the second CP device, which indicates that the primary CP device is switched to the second CP device;

[0349] The first sending module is used to send the target leased line user's usage information to the second CP device based on the CP role notification message.

[0350] In one possible implementation, the first PFCP message is received when the communication interface of the target leased line is available; the network device also includes:

[0351] The second sending module is used to send a first PFCP node report request to the DBNG-CP device. The first PFCP node report request carries first status information, which indicates that the communication interface of the target leased line is in an available state.

[0352] In one possible implementation, the network device further includes:

[0353] The second sending module is used to send a second PFCP node report request to the DBNG-CP device when a fault is detected. The second PFCP node report request carries second status information, which indicates the fault.

[0354] The first receiving module 1901 is also used to receive a second PFCP session adjustment request sent by the DBNG-CP device. The second PFCP session adjustment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0355] Processing module 1902 is also used to block traffic from the target leased line user based on the second PFCP session adjustment request.

[0356] In one possible implementation, the second status information includes one or more of the following: access side status, network side status, and connection channel status. The access side status indicates whether the access side of the target leased line is faulty, the network side status indicates whether the network side of the target leased line is faulty, and the connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty. The target leased line is a leased line used by the target leased line user.

[0357] In one possible implementation, the target leased line is a Layer 2 leased line or an L2VPN leased line, and the access side status includes the communication interface status of the target leased line.

[0358] In one possible implementation, the target leased line is a Layer 3 leased line. The access side status includes the communication interface status of the target leased line and the access side routing status. The access side routing status indicates whether the terminal of the target leased line user is routable to the communication interface of the target leased line.

[0359] In one possible implementation, the DBNG-UP device is the first UP device in the UP hot standby group, and the traffic of the target leased line user is transmitted through the UP device that comes online in the UP hot standby group; the network device also includes:

[0360] The third receiving module is used to receive the first UP role notification message sent by the DBNG-CP device. The first UP role notification message indicates that the master UP device in the UP hot standby group is the first UP device.

[0361] The online / offline module is used to bring the first UP device online based on the notification message from the first UP role.

[0362] In one possible implementation, the UP hot standby group also includes a second UP device; the network device also includes:

[0363] The third receiving module is used to receive the second UP role notification message sent by the DBNG-CP device. The second UP role notification message indicates that the primary UP device in the UP hot standby group is switched to the second UP device.

[0364] The online / offline module is used to take the first UP device offline based on the notification message from the second UP role.

[0365] In one possible implementation, the first receiving module 1901 is further configured to receive a PFCP session deletion request for the target leased line user sent by the DBNG-CP device; the network device also includes:

[0366] The session deletion module is used to delete the session corresponding to the target leased line user based on the PFCP session deletion request.

[0367] In one possible implementation, the leased line used by the target leased line user is a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0368] In one possible implementation, the first receiving module 1901 is specifically used for:

[0369] Receive the first PFCP message sent by the DBNG-CP device through the status control interface.

[0370] This application implements an access scheme for leased line users based on PFCP. It can utilize PFCP to access leased line users in the DBNG system and control the usage permissions of leased line users on the leased line, making the access scenarios for leased line users richer and the access scheme more complete, thus broadening the implementation environment for leased line user services.

[0371] Furthermore, a UP redundancy scheme and a CP redundancy scheme for dedicated line user access based on PFCP are proposed, which make the scheme of using PFCP to access dedicated line users in the DBNG system more complete, that is, the service reliability of dedicated line users is further improved.

[0372] It should be noted that the network device provided in the above embodiments is only illustrated by the division of the above functional modules when accessing leased line users. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device / apparatus can be divided into different functional modules to complete all or part of the functions described above. In addition, the network device and the leased line user access method embodiments provided in the above embodiments belong to the same concept, and the specific implementation process can be found in the following... Figures 6 to 9 The method embodiments shown are not described in detail here.

[0373] Figure 20 This is a schematic diagram of another network device provided in this application embodiment. This network device can be implemented as part or all of a DBNG-CP device by software, hardware, or a combination of both. The DBNG-CP device can be the DBNG-CP device in the aforementioned method embodiments. In this embodiment, the DBNG-UP hot standby group includes a first UP device and a second UP device, and the DBNG-CP device is used to control the first UP device and the second UP device. See also... Figure 20 The network device includes: a determination module 2001, a first transmission module 2002, and a second transmission module 2003.

[0374] The determination module 2001 is used to determine the first UP device as the master UP device in the UP hot standby group;

[0375] The first sending module 2002 is used to send a first UP role notification message to the first UP device and a second UP role notification message to the second UP device. Both the first UP role notification message and the second UP role notification message indicate that the master UP device in the UP hot standby group is the first UP device. The first UP role notification message also indicates that the first UP device is online and the second UP role notification message also indicates that the second UP device is offline.

[0376] The second sending module 2003 is used to send a first message to the first UP device after the target leased line user has been authenticated. The first message indicates that the traffic of the target leased line user can be allowed.

[0377] In one possible implementation, the first message is a first PFCP message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0378] In one possible implementation, the first PFCP message is a first PFCP session establishment request, which instructs the first UP device to create a session corresponding to the target leased line user.

[0379] In one possible implementation, the first PFCP message is a first PFCP session adjustment request; the second sending module 2003 is further configured to:

[0380] Before sending the first message to the first UP device, a second PFCP session establishment request is sent to the first UP device. The second PFCP session establishment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0381] In one possible implementation, the network device further includes:

[0382] The authentication module is used to authenticate users of the target leased line when the communication interface of the target leased line is available. The target leased line is the leased line used by the target leased line user.

[0383] In one possible implementation, the first message is sent when the communication interface of the target leased line is available; the target leased line is a leased line used by the target leased line user; the network device also includes:

[0384] The first receiving module is used to receive the first status information sent by the first UP device, which indicates that the communication interface of the target leased line is in an available state.

[0385] In one possible implementation, the traffic of the target leased line user is used to be transmitted through the UP devices that come online in the UP hot standby group;

[0386] The determination module 2001 is also used to determine the second UP device as the master UP device in the UP hot standby group;

[0387] The first sending module 2002 is further configured to: send a third UP role notification message to the first UP device and send a fourth UP role notification message to the second UP device. Both the third UP role notification message and the fourth UP role notification message indicate that the primary UP device in the UP hot standby group is switched to the second UP device. The third UP role notification message also indicates that the first UP device is offline and the fourth UP role notification message also indicates that the second UP device is online.

[0388] In one possible implementation, the network device further includes:

[0389] The first receiving module is used to receive the second status information sent by the first UP device. The second status information indicates the fault detected by the first UP device. The second UP device is determined to be the master UP device in the UP hot standby group when the DBNG-CP device receives the second status information.

[0390] In one possible implementation, the target leased line user is a user of a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0391] In one possible implementation, the DBNG-CP device is the first CP device in the CP hot standby group, which also includes a second CP device, and the first CP device is the primary CP device in the CP hot standby group; the network device also includes:

[0392] The third sending module is used to synchronize the control information of the first CP device for the target leased line user to the second CP device after sending the first message to the first UP device. The second CP device is used to control the target leased line user's access rights to the target leased line based on the control information when the main CP device is switched to the second CP device.

[0393] In one possible implementation, the control information for the target leased line user includes the target leased line user's usage information; the network device also includes:

[0394] The second receiving module is used to receive the usage information of the target leased line by the target leased line user sent by the first UP device;

[0395] The control module is used to control the usage permissions of the target leased line user on the target leased line based on the usage situation.

[0396] In one possible implementation, the leased line used by the target leased line user is a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0397] This application implements an access scheme for leased line users in DBNG-UP redundancy scenarios. It enables leased line users to access the network in UP redundancy scenarios and controls their access permissions to the leased line. This enriches the access scenarios for leased line users and makes the access scheme more complete and reliable, thus expanding the implementation environment for leased line user services.

[0398] Specifically, dedicated line user access in UP redundancy scenarios can be implemented based on DBNG-related standards and specifications. Furthermore, CP redundancy technology can be combined to further improve the solution for accessing dedicated line users in the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0399] It should be noted that the network device provided in the above embodiments, when controlling the access of leased line users, is only illustrated by the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device / apparatus can be divided into different functional modules to complete all or part of the functions described above. Furthermore, the network device and the leased line user access method embodiments provided in the above embodiments belong to the same concept, and their specific implementation process can be found in [link to relevant documentation]. Figures 10 to 11 The method embodiments shown are not described in detail here.

[0400] Figure 21This is a schematic diagram of another network device provided in an embodiment of this application. This network device can be implemented as part or all of a DBGN-UP device by software, hardware, or a combination of both. The DBGN-UP device can be the first UP device included in the DBGN-UP hot standby group in the aforementioned method embodiment. The UP hot standby group also includes a second UP device. See also... Figure 21 The network device includes: a first receiving module 2101, a second receiving module 2102, and a processing module 2103.

[0401] The first receiving module 2101 is used to receive a first UP role notification message sent by the DBNG-CP device, wherein the first UP role notification message indicates that the master UP device in the UP hot standby group is the first UP device.

[0402] The second receiving module 2102 is used to receive a first message sent by the DBNG-CP device, the first message indicating that the traffic of the target leased line user is allowed;

[0403] Processing module 2103 is used to release traffic to the target leased line user based on the first message.

[0404] In one possible implementation, see Figure 22 The network device also includes:

[0405] The online / offline module 2104 is used to bring the first UP device online based on the notification message from the first UP role.

[0406] In one possible implementation, the first message is a first PFCP message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0407] In one possible implementation, the first PFCP message is a first PFCP session establishment request; the network device also includes:

[0408] The session creation module is used to create a session for the target dedicated line user before allowing traffic to the target dedicated line user.

[0409] In one possible implementation, the first PFCP message is a first PFCP session adjustment request;

[0410] The second receiving module 2103 is further configured to receive a second PFCP session establishment request sent by the DBNG-CP device before receiving the first message sent by the DBNG-CP device. The second PFCP session establishment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking. The network device also includes:

[0411] The session creation module is used to create a session corresponding to the target leased line user based on the second PFCP session establishment request.

[0412] The processing module 2104 is also used to block the traffic of the target leased line user based on the second PFCP session establishment request.

[0413] In one possible implementation, the first message is received when the communication interface of the target leased line is available; the target leased line is a leased line used by the target leased line user; the network device also includes:

[0414] The first sending module is used to send first status information to the DBNG-CP device, which indicates that the communication interface of the target leased line is in an available state.

[0415] In one possible implementation, the target leased line user is a user of a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0416] In one possible implementation, the DBNG-CP device is the first CP device in the CP hot standby group, which also includes a second CP device, and the first CP device is the primary CP device in the CP hot standby group; the network device also includes:

[0417] The second sending module is used to send the target leased line user's usage information to the first CP device after the traffic of the target leased line user is allowed based on the first message. This usage information is used for synchronous backup of the first CP device and the second CP device. The main CP device is used to control the target leased line user's usage rights based on this usage information.

[0418] This application implements an access scheme for leased line users in UP redundancy scenarios. It enables leased line users to access DBNG-UP redundancy scenarios and controls their usage permissions on the leased line, making the access scenarios for leased line users more diverse and the access scheme more complete and reliable, thus broadening the implementation environment for leased line user services.

[0419] This allows for dedicated line user access in UP redundancy scenarios. Furthermore, it can be combined with CP redundancy technology to further improve the solution for accessing dedicated line users in the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0420] It should be noted that the network device provided in the above embodiments is only illustrated by the division of the above functional modules when accessing leased line users. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device / apparatus can be divided into different functional modules to complete all or part of the functions described above. In addition, the network device and the leased line user access method embodiments provided in the above embodiments belong to the same concept, and the specific implementation process can be found in the following... Figures 10 to 11 The method embodiments shown are not described in detail here.

[0421] Figure 23 This is a schematic diagram of another network device provided in the embodiments of this application. This network device can be implemented as part or all of a DBNG-CP device by software, hardware, or a combination of both. The DBNG-CP device can be the first CP device included in the DBNG-CP hot standby group in the aforementioned method embodiments. The first CP device is the primary CP device in the CP hot standby group, which also includes a second CP device. See also... Figure 23 The network device includes: a first transmitting module 2301 and a second transmitting module 2302.

[0422] The first sending module 2301 is used to send a first message to the DBNG-UP device after the target leased line user has been authenticated. The first message indicates that the traffic of the target leased line user is allowed.

[0423] The second sending module 2302 is used to synchronize the control information of the first CP device to the target leased line user with the second CP device. The second CP device is used to control the target leased line user's access to the target leased line based on the control information after switching to the primary CP device in the CP hot standby group.

[0424] In one possible implementation, the first message is a first PFCP message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0425] In one possible implementation, the first PFCP message is a first PFCP session establishment request, which instructs the DBNG-UP device to create a session corresponding to the target leased line user.

[0426] In one possible implementation, the first PFCP message is a first PFCP session adjustment request; the first sending module 2301 is further configured to:

[0427] Before sending the first message to the DBNG-UP device, a second PFCP session establishment request is sent to the DBNG-UP device. The second PFCP session establishment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0428] In one possible implementation, the control information for the target leased line user includes the target leased line user's usage information; the network device also includes:

[0429] The receiving module is used to receive information from the DBNG-UP device regarding the usage of the target leased line by the target leased line user.

[0430] In one possible implementation, the target leased line user is a user of a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0431] In one possible implementation, the DBNG-UP device is the first UP device in the UP hot standby group, which also includes a second UP device; the network device also includes:

[0432] The determination module is used to determine the first UP device as the master UP device in the UP hot standby group;

[0433] The third sending module is used to send a first UP role notification message to the first UP device and a second UP role notification message to the second UP device. Both the first UP role notification message and the second UP role notification message indicate that the master UP device in the UP hot standby group is the first UP device. The first UP role notification message also indicates that the first UP device is online and the second UP role notification message also indicates that the second UP device is offline.

[0434] This application implements an access scheme for leased line users in DBNG-CP redundancy scenarios. It enables leased line users to access the CP redundancy scenario and controls their usage permissions on the leased line, making the access scenarios for leased line users more diverse and the access scheme more complete and reliable, thus broadening the implementation environment for leased line user services.

[0435] This includes enabling dedicated line user access in CP redundancy scenarios based on DBNG-related standards and specifications. Furthermore, combining this with UP redundancy technology further improves the solution for accessing dedicated line users within the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0436] It should be noted that the network device provided in the above embodiments, when controlling the access of leased line users, is only illustrated by the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device / apparatus can be divided into different functional modules to complete all or part of the functions described above. Furthermore, the network device and the leased line user access method embodiments provided in the above embodiments belong to the same concept, and their specific implementation process can be found in [link to relevant documentation]. Figures 12 to 16 The method embodiments shown are not described in detail here.

[0437] Figure 24 This is a schematic diagram of the structure of a network device provided in an embodiment of this application. The network device can be implemented as part or all of a DBNG-CP device by software, hardware, or a combination of both. The DBNG-CP device can be the second CP device in the DBNG-CP hot standby group in the aforementioned method embodiment. The CP hot standby group also includes a first CP device, which is the primary CP device in the CP hot standby group. See also... Figure 24 The network device includes a first receiving module 2401 and a control module 2402.

[0438] The first receiving module 2401 is used to receive control information of the first CP device to the target leased line user sent by the first CP device;

[0439] The control module 2402 is used to control the usage rights of the target leased line user on the target leased line based on control information when the second CP device is switched to the primary CP device in the CP hot standby group.

[0440] In one possible implementation, the control information includes the usage of the target leased line by the target leased line user, and the network device also includes:

[0441] The sending module is used to send a first CP role notification message to the DBNG-UP device when the second CP device is switched to the primary CP device in the CP hot standby group. The first CP role notification message indicates that the primary CP device in the CP hot standby group is switched to the second CP device.

[0442] The second receiving module is used to receive information from the DBNG-UP device regarding the usage of the target leased line by the target leased line user.

[0443] This application implements an access scheme for leased line users in DBNG-CP redundancy scenarios. It enables leased line users to access the CP redundancy scenario and controls their usage permissions on the leased line, making the access scenarios for leased line users more diverse and the access scheme more complete and reliable, thus broadening the implementation environment for leased line user services.

[0444] This includes enabling dedicated line user access in CP redundancy scenarios based on DBNG-related standards and specifications. Furthermore, combining this with UP redundancy technology further improves the solution for accessing dedicated line users within the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0445] It should be noted that the network device provided in the above embodiments, when controlling the access of leased line users, is only illustrated by the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device / apparatus can be divided into different functional modules to complete all or part of the functions described above. Furthermore, the network device and the leased line user access method embodiments provided in the above embodiments belong to the same concept, and their specific implementation process can be found in [link to relevant documentation]. Figures 12 to 16 The method embodiments shown are not described in detail here.

[0446] Figure 25 This is a schematic diagram of the structure of a network device provided in an embodiment of this application. This network device can be implemented as part or all of a DBNG-UP device by software, hardware, or a combination of both. The DBNG-UP device can be the DBNG-UP device in the aforementioned method embodiments. In this embodiment, the DBNG-CP hot standby group includes a first CP device and a second CP device, where the first CP device is the primary CP device in the CP hot standby group. See also... Figure 25 The network device includes: a receiving module 2501, a processing module 2502, and a first transmitting module 2503.

[0447] The receiving module 2501 is used to receive a first message sent by the first CP device. The first message indicates that the traffic of the target leased line user is allowed. The first CP device is the main CP device in the CP hot standby group. The CP hot standby group also includes a second CP device.

[0448] Processing module 2502 is used to allow traffic to the target leased line user based on the first message;

[0449] The first sending module 2503 is used to send the usage information of the target leased line user to the first CP device, and the first CP device is used to control the usage rights of the target leased line user based on the usage information.

[0450] In one possible implementation, the first message is a first PFCP message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

[0451] In one possible implementation, the first PFCP message is a first PFCP session establishment request; the network device also includes:

[0452] The session creation module is used to create a session corresponding to the target leased line user based on the first message.

[0453] In one possible implementation, the first PFCP message is a first PFCP session adjustment request;

[0454] The receiving module 2501 is further configured to receive a second PFCP session establishment request sent by the first CP device before receiving the first message sent by the first control plane CP device. The second PFCP session establishment request carries traffic behavior rules, and the behavior in the traffic behavior rules is blocking.

[0455] The network equipment also includes:

[0456] The session creation module is used to create a session corresponding to the target leased line user based on the second PFCP session establishment request.

[0457] The processing module 2502 is also used to block the traffic of the target leased line user based on the second PFCP session establishment request.

[0458] In one possible implementation, the first message is received when the communication interface of the target leased line is in an available state; the network device also includes:

[0459] The second sending module is used to send first status information to the first CP device, the first status information indicating that the communication interface of the target leased line is in an available state.

[0460] In one possible implementation, the target leased line user is a user of a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

[0461] In one possible implementation, the DBNG-UP device is the first UP device in the UP hot standby group, and the traffic of the target leased line user is transmitted through the UP device that comes online in the UP hot standby group; the network device also includes:

[0462] The second receiving module is used to receive the first UP role notification message sent by the first CP device. The first UP role notification message indicates that the master UP device in the UP hot standby group is the first UP device.

[0463] The online / offline module is used to bring the first UP device online based on the notification message from the first UP role.

[0464] In one possible implementation, the UP hot standby group also includes a second UP device;

[0465] The second receiving module is also used to receive a second UP role notification message sent by the first CP device, the second UP role notification message instructing the primary UP device in the UP hot standby group to switch to the second UP device;

[0466] The online / offline module is also used to take the first UP device offline based on the notification message from the second UP role.

[0467] This application implements an access scheme for leased line users in DBNG-CP redundancy scenarios. It enables leased line users to access the CP redundancy scenario and controls their usage permissions on the leased line, making the access scenarios for leased line users more diverse and the access scheme more complete and reliable, thus broadening the implementation environment for leased line user services.

[0468] This includes enabling dedicated line user access in CP redundancy scenarios based on DBNG-related standards and specifications. Furthermore, combining this with UP redundancy technology further improves the solution for accessing dedicated line users within the DBNG system, thereby enhancing the service reliability of dedicated line users.

[0469] It should be noted that the network device provided in the above embodiments is only illustrated by the division of the above functional modules when accessing leased line users. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device / apparatus can be divided into different functional modules to complete all or part of the functions described above. In addition, the network device and the leased line user access method embodiments provided in the above embodiments belong to the same concept, and the specific implementation process can be found in the following... Figures 12 to 16 The method embodiments shown are not described in detail here.

[0470] This application also provides a network system, also known as a DBNG system. This network system can be... Figures 1 to 5 The DBNG system shown in any embodiment.

[0471] In some embodiments, the network system includes a DBNG-CP device and a DBNG-UP device. The DBNG-CP device and the DBNG-UP device are used to access the target leased line user through interaction and to control the target leased line user's use of the target leased line user. Specific implementation details can be found in [reference needed]. Figures 6 to 9 Detailed descriptions of the embodiments are omitted here.

[0472] In other embodiments, the network system includes a DBNG-CP device and a DBNG-UP hot standby group. The UP hot standby group includes a first UP device and a second UP device. The DBNG-CP device and the primary UP device (e.g., the first UP device) in the UP hot standby group are used to access leased line users through interaction and control the use of the target leased line users by the target leased line users. Specific implementation methods can be found in [reference needed]. Figures 10 to 11 Detailed descriptions of the embodiments are omitted here.

[0473] In some embodiments, the network system includes a DBNG-CP hot standby group and a DBNG-UP device. The CP hot standby group includes a first CP device and a second CP device. The primary CP device in the first and second CP devices is used to interact with the DBNG-UP device to access the target leased line user and control the target leased line user's usage. The primary CP device is used to synchronize control information for the target leased line user to the backup CP device, so that after a primary CP device switchover, the new primary CP device takes over control of the target leased line user. Specific implementation details can be found in [reference needed]. Figures 12 to 16 Detailed descriptions of the embodiments are omitted here.

[0474] Any DBNG-CP device in the embodiments of this application can be a single server, a server cluster consisting of multiple servers, or a cloud service center. A DBNG-CP device can also be referred to as a control device, control center, etc. Any DBNG-UP device in the embodiments of this application can be a router, switch, or other similar device. The embodiments of this application do not limit the structure or form of the DBNG-CP and DBNG-UP devices.

[0475] Figure 26 This is a schematic diagram of the structure of another network device provided in the embodiments of this application. In one possible implementation, the network device can be any DBNG-CP device or any DBNG-UP device in the foregoing embodiments. The network device may include one or more processors 2601, a communication bus 2602, a memory 2603, and one or more communication interfaces 2604.

[0476] The processor 2601 is a general-purpose central processing unit (CPU), a network processor (NP), a microprocessor, or one or more integrated circuits for implementing the solutions of this application, such as an application-specific integrated circuit (ASIC), a programmable logic device (PLD), or a combination thereof. In some embodiments, the PLD is a complex programmable logic device (CPLD), a field-programmable gate array (FPGA), a generic array logic (GAL), or any combination thereof.

[0477] The communication bus 2602 is used to transmit information between the aforementioned components. In some embodiments, the communication bus 2602 is divided into an address bus, a data bus, a control bus, etc. For ease of illustration, Figure 26 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0478] The memory 2603 may be a read-only memory (ROM), random access memory (RAM), electrically erasable programmable read-only memory (EEPROM), optical disc (including compact disc read-only memory (CD-ROM), compressed optical disc, laser disc, digital versatile optical disc, Blu-ray disc, etc.), magnetic disk storage medium, or other magnetic storage device, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but not limited thereto. The memory 2603 exists independently and is connected to the processor 2601 via the communication bus 2602, or the memory 2603 is integrated with the processor 2601.

[0479] Communication interface 2604 uses any transceiver-like device for communicating with other devices or communication networks. Communication interface 2604 includes a wired communication interface and / or a wireless communication interface. The wired communication interface may be, for example, an Ethernet interface. The Ethernet interface can be an optical interface, an electrical interface, or a combination thereof. The wireless communication interface may be a wireless local area network (WLAN) interface, a cellular network communication interface, or a combination thereof.

[0480] In some embodiments, the network device includes multiple processors, such as Figure 26 The processors 2601 and 2605 shown are illustrated. Each of these processors is a single-core processor or a multi-core processor. Here, a processor refers to one or more devices, circuits, and / or processing cores used to process data (such as computer program instructions). In some embodiments, each processor may include multiple CPUs, such as... Figure 26 CPU0 and CPU1 are shown.

[0481] As one embodiment, the network device also includes an output device 2606 and an input device 2607. The output device 2606 communicates with the processor 2601 and can display information in various ways. For example, the output device 2606 can be a liquid crystal display (LCD), a light-emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector. The input device 2607 communicates with the processor 2601 and can receive user input in various ways. For example, the input device 2607 can be a mouse, keyboard, touchscreen device, or sensor device.

[0482] In some embodiments, memory 2603 stores program code 2610 for executing the scheme of this application, and processor 2601 is capable of executing the program code 2610 stored in memory 2603. The program code includes one or more software modules, and the network device can implement the above through processor 2601 and the program code 2610 in memory 2603. Figures 6 to 16 The access method for leased line users provided in any embodiment.

[0483] This application also provides a computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the steps of the leased line user access method shown in any of the above method embodiments.

[0484] This application also provides a computer program product containing instructions that, when run on a computer, causes the computer to execute the steps of the dedicated line user access method shown in any of the above method embodiments.

[0485] This application also provides a computer program that, when run on a computer, causes the computer to perform the steps of the access method for leased line users shown in any of the above method embodiments.

[0486] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium accessible to a computer, or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., digital versatile disc (DVD)), or a semiconductor medium (e.g., solid state disk (SSD)). It is worth noting that the computer-readable storage medium mentioned in the embodiments of this application can be a non-volatile storage medium; in other words, it can be a non-transient storage medium.

[0487] It should be understood that "at least one" as mentioned herein refers to one or more, and "multiple" refers to two or more. In the description of the embodiments of this application, unless otherwise stated, " / " means "or," for example, A / B can mean A or B; "and / or" in this document is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. In addition, in order to clearly describe the technical solutions of the embodiments of this application, the terms "first," "second," etc., are used in the embodiments of this application to distinguish identical or similar items with substantially the same function and effect. Those skilled in the art will understand that the terms "first," "second," etc., do not limit the quantity or execution order, and the terms "first," "second," etc., are not necessarily different.

[0488] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, data stored, data displayed, etc.) and signals involved in the embodiments of this application are all authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions.

[0489] The above descriptions are embodiments provided in this application and are not intended to limit this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A method for accessing a leased line user, characterized in that, The method is applied to a distributed broadband gateway-control plane DBNG-CP device, and the method includes: If the authentication of the target leased line user is successful, a first packet forwarding control protocol (PFCP) message for the target leased line user is sent to the distributed broadband gateway-user plane (DBNG-UP) device. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

2. The method as described in claim 1, characterized in that, The first PFCP message is a first PFCP session establishment request, which instructs the DBNG-UP device to create a session corresponding to the target leased line user.

3. The method as described in claim 1, characterized in that, The first PFCP message is the first PFCP session adjustment request; Before sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: A second PFCP session establishment request is sent to the DBNG-UP device. The second PFCP session establishment request carries the traffic behavior rule, and the behavior in the traffic behavior rule is blocking.

4. The method according to any one of claims 1-3, characterized in that, Before sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: When the communication interface of the target leased line is available, the target leased line user is authenticated, and the target leased line is the leased line used by the target leased line user.

5. The method according to any one of claims 1-4, characterized in that, After sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: Receive the usage information of the target leased line by the target leased line user sent by the DBNG-UP device; Based on the usage, control the target leased line user's usage permissions for the target leased line.

6. The method as described in claim 5, characterized in that, The usage data includes traffic statistics.

7. The method according to any one of claims 1-6, characterized in that, The DBNG-CP device is the first CP device in the CP hot standby group, and the CP hot standby group also includes a second CP device. The first CP device is the main CP device in the CP hot standby group. After sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: The second CP device synchronizes the control information of the first CP device on the target leased line user with the second CP device. The second CP device is used to control the target leased line user's access to the target leased line based on the control information when the main CP device is switched to the second CP device.

8. The method according to any one of claims 1-7, characterized in that, The first PFCP message is sent when the communication interface of the target leased line is available, and the target leased line is the leased line used by the target leased line user; Before sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: The system receives a first PFCP node report request sent by the DBNG-UP device. The first PFCP node report request carries first status information, which indicates that the communication interface of the target leased line is in an available state.

9. The method according to any one of claims 1-8, characterized in that, After sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: Receive a second PFCP node report request sent by the DBNP-UP device. The second PFCP node report request carries second status information, which indicates the fault detected by the DBNG-UP device. A second PFCP session adjustment request is sent to the DBNG-UP device. The second PFCP session adjustment request carries the traffic behavior rule, and the behavior in the traffic behavior rule is blocking.

10. The method as described in claim 9, characterized in that, The second status information includes one or more of the following: access side status, network side status, and connection channel status. The access side status indicates whether the access side of the target leased line is faulty. The network side status indicates whether the network side of the target leased line is faulty. The connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty. The target leased line is a leased line used by the target leased line user.

11. The method as described in claim 10, characterized in that, The target leased line is a Layer 2 leased line or a Layer 2 Virtual Private Network (L2VPN) leased line, and the access side status includes the communication interface status of the target leased line.

12. The method as described in claim 10, characterized in that, The target leased line is a Layer 3 leased line. The access side status includes the communication interface status of the target leased line and the access side routing status. The access side routing status indicates whether the terminal of the target leased line user is routable to the communication interface of the target leased line.

13. The method according to any one of claims 1-12, characterized in that, The DBNG-UP device is the first UP device in the UP hot standby group, and the traffic of the target leased line user is transmitted through the UP device that comes online in the UP hot standby group. Before sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: A first UP role notification message is sent to the first UP device. The first UP role notification message indicates that the primary UP device in the UP hot standby group is the first UP device, and indicates that the first UP device is online.

14. The method as described in claim 13, characterized in that, The UP hot standby group also includes a second UP device; After sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: A second UP role notification message is sent to the first UP device, and a third UP role notification message is sent to the second UP device. Both the second UP role notification message and the third UP role notification message indicate that the primary UP device in the UP hot standby group is switched to the second UP device. The second UP role notification message also indicates that the first UP device is offline, and the third UP role notification message also indicates that the second UP device is online.

15. The method according to any one of claims 1-14, characterized in that, After sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: When the target lease user's access to the target lease expires, a third PFCP session adjustment request is sent to the DBNG-UP device. The third PFCP session adjustment request carries the traffic behavior rule, and the behavior in the traffic behavior rule is blocking.

16. The method according to any one of claims 1-15, characterized in that, After sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: When the deployment configuration of the target leased line is deleted, a PFCP session deletion request for the target leased line user is sent to the DBNG-UP device. The PFCP session deletion request indicates that the session corresponding to the target leased line user be deleted. The target leased line is the leased line used by the target leased line user.

17. The method according to any one of claims 1-16, characterized in that, Before sending the first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device, the method further includes: Send an authentication request for the target leased line user to the authentication server; The authentication result sent by the authentication server is received, and the authentication result indicates whether the authentication of the target leased line user is successful or unsuccessful.

18. The method according to any one of claims 1-17, characterized in that, The leased line used by the target leased line user is a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

19. The method according to any one of claims 1-18, characterized in that, The step of sending a first packet forwarding control protocol (PFCP) message for the target leased line user to the distributed broadband gateway-user plane (DBNG-UP) device includes: The first PFCP message is sent to the DBNG-UP device through the status control interface.

20. A method for accessing a leased line user, characterized in that, The method is applied to a distributed broadband gateway-user plane DBNG-UP device, and the method includes: Receive a first packet forwarding control protocol (PFCP) message for a target leased line user sent by a distributed broadband gateway-control plane (DBNG-CP) device. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access. Based on the first PFCP message, traffic to the target leased line user is allowed.

21. The method as described in claim 20, characterized in that, The first PFCP message is a first PFCP session establishment request; Before releasing traffic to the target dedicated line user, the method further includes: Based on the first PFCP session establishment request, a session corresponding to the target leased line user is created.

22. The method as described in claim 20, characterized in that, The first PFCP message is the first PFCP session adjustment request; Before receiving the first packet forwarding control protocol (PFCP) message for the target leased line user sent by the distributed broadband gateway-control plane (DBNG-CP) device, the method further includes: Receive a second PFCP session establishment request sent by the DBNG-CP device, the second PFCP session establishment request carrying the traffic behavior rule, and the behavior in the traffic behavior rule is blocking; Based on the second PFCP session establishment request, a session corresponding to the target leased line user is created, and the traffic of the target leased line user is blocked.

23. The method according to any one of claims 20-22, characterized in that, After allowing traffic to the target leased line user based on the first PFCP message, the method further includes: The DBNG-CP device sends the target leased line user's usage information to the target leased line, and the DBNG-CP device is used to control the target leased line user's usage rights based on the usage information.

24. The method as described in claim 23, characterized in that, The DBNG-CP device is the first CP device in the CP hot standby group, which also includes a second CP device. The first CP device is the primary CP device in the CP hot standby group. The usage information is used to perform synchronous backup on the first CP device and the second CP device. The primary CP device is used to control the usage rights of the target leased line user on the target leased line based on the usage information.

25. The method as described in claim 24, characterized in that, The method further includes: Receive a CP role notification message sent by the second CP device, the CP role notification message instructing the primary CP device to switch to the second CP device; Based on the CP role notification message, the usage information of the target leased line by the target leased line user is sent to the second CP device.

26. The method according to any one of claims 20-25, characterized in that, The first PFCP message is received when the communication interface of the target leased line is in an available state; Before receiving the first packet forwarding control protocol (PFCP) message for the target leased line user sent by the distributed broadband gateway-control plane (DBNG-CP) device, the method further includes: A first PFCP node report request is sent to the DBNG-CP device. The first PFCP node report request carries first status information, which indicates that the communication interface of the target leased line is in an available state.

27. The method according to any one of claims 20-26, characterized in that, After allowing traffic to the target leased line user based on the first PFCP message, the method further includes: In the event of a fault detected, a second PFCP node report request is sent to the DBNG-CP device. The second PFCP node report request carries second status information, which indicates the fault. Receive a second PFCP session adjustment request sent by the DBNG-CP device, wherein the second PFCP session adjustment request carries the traffic behavior rule, and the behavior in the traffic behavior rule is blocking; Based on the second PFCP session adjustment request, the traffic of the target leased line user is blocked.

28. The method as described in claim 27, characterized in that, The second status information includes one or more of the following: access side status, network side status, and connection channel status. The access side status indicates whether the access side of the target leased line is faulty. The network side status indicates whether the network side of the target leased line is faulty. The connection channel status indicates whether the connection channel between the DBNG-CP device and the DBNG-UP device is faulty. The target leased line is a leased line used by the target leased line user.

29. The method as described in claim 28, characterized in that, The target leased line is a Layer 2 leased line or a Layer 2 Virtual Private Network (L2VPN) leased line, and the access side status includes the communication interface status of the target leased line.

30. The method as described in claim 28, characterized in that, The target leased line is a Layer 3 leased line. The access side status includes the communication interface status of the target leased line and the access side routing status. The access side routing status indicates whether the terminal of the target leased line user is routable to the communication interface of the target leased line.

31. The method according to any one of claims 20-30, characterized in that, The DBNG-UP device is the first UP device in the UP hot standby group, and the traffic of the target leased line user is transmitted through the UP device that comes online in the UP hot standby group. Before receiving the first packet forwarding control protocol (PFCP) message for the target leased line user sent by the distributed broadband gateway-control plane (DBNG-CP) device, the method further includes: Receive a first UP role notification message sent by the DBNG-CP device, wherein the first UP role notification message indicates that the primary UP device in the UP hot standby group is the first UP device; Based on the notification message from the first UP role, the first UP device is brought online.

32. The method as described in claim 31, characterized in that, The UP hot standby group also includes a second UP device; After allowing traffic to the target leased line user based on the first PFCP message, the method further includes: Receive a second UP role notification message sent by the DBNG-CP device, the second UP role notification message instructing the primary UP device in the UP hot standby group to switch to the second UP device; Based on the notification message from the second UP role, the first UP device is taken offline.

33. The method according to any one of claims 20-32, characterized in that, After allowing traffic to the target leased line user based on the first PFCP message, the method further includes: Receive the PFCP session deletion request sent by the DBNG-CP device for the target leased line user; Based on the PFCP session deletion request, the session corresponding to the target leased line user is deleted.

34. The method according to any one of claims 20-33, characterized in that, The leased line used by the target leased line user is a Layer 2 leased line, a Layer 3 leased line, or an L2VPN leased line.

35. The method according to any one of claims 20-34, characterized in that, The receipt of the first packet forwarding control protocol (PFCP) message for the target leased line user sent by the distributed broadband gateway-control plane (DBNG-CP) device includes: The first PFCP message sent by the DBNG-CP device is received through the status control interface.

36. A method for accessing a leased line user, characterized in that, The method is applied to a distributed broadband gateway-control plane DBNG-CP device, wherein the DBNG-CP device controls a first UP device and a second UP device in a distributed broadband gateway-user plane DBNG-UP hot standby group, and the method includes: The first UP device is identified as the main UP device in the UP hot standby group; Send a first UP role notification message to the first UP device and a second UP role notification message to the second UP device. Both the first UP role notification message and the second UP role notification message indicate that the master UP device in the UP hot standby group is the first UP device. The first UP role notification message also indicates that the first UP device is online and the second UP role notification message also indicates that the second UP device is offline. If the target leased line user is successfully authenticated, a first message is sent to the first UP device, indicating that the traffic of the target leased line user can be allowed.

37. The method as described in claim 36, characterized in that, The first message is a First Packet Forwarding Control Protocol (PFCP) message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

38. The method as described in claim 36 or 37, characterized in that, The traffic of the target leased line user is transmitted through the UP devices that are online in the UP hot standby group; After sending the first message to the first UP device, the method further includes: The second UP device is designated as the primary UP device in the UP hot standby group; A third UP role notification message is sent to the first UP device, and a fourth UP role notification message is sent to the second UP device. Both the third and fourth UP role notification messages indicate that the primary UP device in the UP hot standby group is switched to the second UP device. The third UP role notification message also indicates that the first UP device is offline, and the fourth UP role notification message also indicates that the second UP device is online.

39. A method for accessing a leased line user, characterized in that, The method is applied to the first UP device in a distributed broadband gateway-user plane DBNG-UP hot standby group, wherein the DBNG-UP hot standby group further includes a second UP device, and the method includes: Receive a first UP role notification message sent by the distributed broadband gateway-control plane DBNG-CP device, wherein the first UP role notification message indicates that the primary UP device in the UP hot standby group is the first UP device; Receive a first message sent by the DBNG-CP device, the first message indicating that traffic for the target leased line user should be allowed; Based on the first message, the traffic of the target dedicated line user is allowed to be released.

40. The method as described in claim 39, characterized in that, The first message is a First Packet Forwarding Control Protocol (PFCP) message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

41. A method for accessing a leased line user, characterized in that, The method is applied to the first CP device in a distributed broadband gateway-control plane DBNG-CP hot standby group, wherein the first CP device is the primary CP device in the CP hot standby group, and the CP hot standby group further includes a second CP device. The method includes: If the target leased line user is successfully authenticated, a first message is sent to the Distributed Broadband Gateway-User Plane DBNG-UP device, the first message indicating that the traffic of the target leased line user is allowed. The second CP device synchronizes the control information of the first CP device on the target leased line user with the second CP device. The second CP device is used to control the target leased line user's access to the target leased line based on the control information after switching to the primary CP device in the CP hot standby group.

42. The method as described in claim 41, characterized in that, The first message is a First Packet Forwarding Control Protocol (PFCP) message for the target leased line user. The first PFCP message carries traffic behavior rules, and the behavior in the traffic behavior rules is to allow access.

43. The method as described in claim 41 or 42, characterized in that, The control information of the target leased line user includes the usage information of the target leased line by the target leased line user; After sending the first message to the Distributed Broadband Gateway-User Plane DBNG-UP device, the method further includes: Receive the usage information of the target leased line by the target leased line user sent by the DBNG-UP device.

44. A method for accessing a leased line user, characterized in that, The method is applied to the second CP device in a distributed broadband gateway-control plane DBNG-CP hot standby group, wherein the CP hot standby group further includes a first CP device, which is the primary CP device in the CP hot standby group, and the method includes: Receive the control information of the first CP device on the target leased line user sent by the first CP device; When the second CP device is switched to the primary CP device in the CP hot standby group, the access rights of the target leased line user to the target leased line are controlled based on the control information.

45. The method as described in claim 44, characterized in that, The control information includes the usage of the target leased line by the target leased line user, and the method further includes: When the second CP device is switched to the primary CP device in the CP hot standby group, a first CP role notification message is sent to the distributed broadband gateway-user plane DBNG-UP device. The first CP role notification message indicates that the primary CP device in the CP hot standby group is switched to the second CP device. Receive the usage information of the target leased line by the target leased line user sent by the DBNG-UP device.

46. ​​A network device, characterized in that, The network device includes a memory and a processor; The memory is used to store computer programs; The processor is configured to execute the computer program to implement the method according to any one of claims 1-19, or to implement the method according to any one of claims 20-35, or to implement the method according to any one of claims 36-38, or to implement the method according to claim 39 or 40, or to implement the method according to any one of claims 41-43, or to implement the method according to claim 44 or 45.

47. A network system, characterized in that, The network system includes a distributed broadband gateway-control plane DBNG-CP device and a distributed broadband gateway-user plane DBNG-UP device, wherein the DBNG-CP device is used to implement the method according to any one of claims 1-19, and the DBNG-UP device is used to implement the method according to any one of claims 20-35; or... The network system includes a distributed broadband gateway-control plane DBNG-CP device and a distributed broadband gateway-user plane DBNG-UP hot standby group. The UP hot standby group includes a first UP device and a second UP device. The DBNG-CP device is used to implement the method according to any one of claims 36-38, and the first UP device is used to implement the method according to claim 39 or 40; or... The network system includes a distributed broadband gateway-control plane DBNG-CP hot standby group. The CP hot standby group includes a first CP device and a second CP device. The first CP device is the master CP device in the CP hot standby group. The first CP device is used to implement the method according to any one of claims 41-43, and the second CP device is used to implement the method according to claim 44 or 45.

48. A computer program product, characterized in that, The computer program product stores computer instructions, which, when executed by a processor, implement the method of any one of claims 1-19, or the method of any one of claims 20-35, or the method of any one of claims 36-38, or the method of claim 39 or 40, or the method of any one of claims 41-43, or the method of claim 44 or 45.

Images