252 results about "Broadband remote access server" patented technology

An access node for an Ethernet network is connected between an access point of user devices and a broadband remote access server for access to a plurality of service providing networks. It includes a VLAN handling unit having a memory for storing identifications of Ethernet frames transmitted in a first VLAN including the access node and a local virtual router function unit of the access server in a second VLANs. Each of the second VLANs including the access node, the local virtual router function unit and one of the virtual router function units of the access server for each of the virtual router function units. A control unit commands the handling unit to transmit frames from a new user device that has connected itself to the access point into the first virtual local area network. The control unit also receives information from the access server in respect of routing frames and its commands to the handling unit to transmit frames from user device which is connected to the access point and the frames from which are transmitted into the first VLAN to be instead transmitted into one of the second VLAN as given by the information received from the broadband remote access server, the frames thereby being transmitted to the server of the respective service providing network.

The invention relates to a wireless LAN (Local Area Network) Portal authentication method and system and a Portal server. The method comprises the following steps: a BRAS (Broadband Remote Access Server) receives an HTTP request, which is sent out by a user terminal after the user terminal is connected with a WiFi network, and redirects the HTTP request to the URL (Uniform / Universal Resource Locator) address of a Portal login page, wherein a BRAS parameter is inserted in the URL address; the Portal server receives an HTTP session access request, which is sent out by the user terminal based on the redirected URL address, and judges whether the URL address carries with the BRAS parameter or not; the Portal server extracts the BRAS parameter from the URL address if the URL address carries with the BRAS parameter; the Portal server interacts with the BRAS based on the extracted BRAS parameter so as to finish login authentication of a user. The Portal server provided by the invention can directly locate the BRAS according to a bras parameter in a URL, thereby not only improving the authentication efficiency, but also solving the problem that the adjustment that an NAS (Network Access Server) mapping table is not flexible enough.

A system and method providing for the flow of peer-to-peer traffic between end users within an access network without requiring the traffic to pass through a network gateway such as a Broadband Remote Access Server (BRAS). End user devices connect through access nodes to an aggregation network and a gateway. An Upstream Address Resolution Protocol (ARP) proxy and a Downstream ARP proxy are implemented in each access node. The Upstream ARP proxy receives an Upstream ARP request and forwards the request upstream only if peer-to-peer communications are allowed. Otherwise, a reply is sent with the MAC address of the BRAS. The Downstream ARP proxy intercepts a Downstream ARP request for a target device and determines whether the target device is in an ARP Cache in the access node. If so, the proxy sends an ARP reply giving the MAC address of the target device. If not, no ARP reply is sent.

A system and method for automated monitoring of availability in xDSL access networks are disclosed. An xDSL access network with network availability monitoring generally comprises a measurement device in communication with a DSL access multiplexer (DSLAM) at a central office (CO), a broadband remote access server (BRAS) in communication with the DSLAM, a remote authentication dial-in user service (RADIUS) server in communication with the BRAS, and a data collector at a network operations center (NOC) in communication with the RADIUS server and the measurement device, the data collector being configured to retrieve data from the RADIUS server, the measurement device being configured to automatically establish a PPP session with the BRAS and the RADIUS server being adapted to collect data relating to the PPP session. The measurement device is preferably connected to the DSLAM via an xDSL loop terminating at a DSLAM monitoring port. In addition, the PPP session is preferably authenticated.

The invention discloses a method and a system for accessing to a mobile core network through a trusted fixed network. The method and the system are used to solve a technical problem that user equipment (UE) can not access business provided by a mobile operator caused by the fact that the UE can not trigger the mobile core network to assign IP addresses for the UE. In the method, after interaction of existing messages between the mobile UE and the fixed network, a routing gateway (RG) sends messages to broadband network gateway / broadband remote access server (BNG / BRAS), to trigger the message interaction between the fixed network and the mobile core network and request the mobile core network to assign IP addresses for the UE. And then the RG obtains the IP addresses, and provides the IP addresses to the UE after corresponding processing of IP address mapping relationships. The UE using the IP addresses provided by the RG accesses the business through the mobile network or directly through the fixed network. The method and the system enhance the messages between the UE and network elements of the fixed network (including the RG and the BNG / BRAS), so that the UE can access the mobile core network through a trusted WLAN network and access the business provided by the mobile network.

The invention provides an address allocation processing method, device and system. The method comprises the following steps: a first BRAS (broadband remote access server) receives a DHCP (dynamic host configuration protocol) relay message sent by the a second BRAS, wherein the DHCP relay message comprises a gateway IP (internet protocol) address and response information based on a source IP address; the first BRAS analyzes the DHCP relay message to obtain the gateway IP address, and allocates an idle IP address from the obtained address pool which is matched with the gateway IP address; and the first BRAS encapsulates the source IP address in the DHCP relay message in a target IP address in a response message based on the response information of the source IP address, loads the idle IP address in the encapsulated response message, and sends the encapsulated response message loaded with the idle IP address to the second BRAS. By the address allocation processing method, device and system provided by the invention, the address waste phenomenon existing in the process that a BRAS adopts a built-in DHCP server to allocate IP addresses under a double-machine hot backup scene in the prior art is eliminated.

An embodiment of the invention provides an address distributing method, an address distributing equipment and an address distributing system. The address distributing method is applicable to the network with a BRAS (broadband remote access server) which is provided with a carrier grade network address translation and includes that the BRAS detects CGN faults locally set, receives access request transmitted by terminals and distributes IP (internet protocol) addresses of the public network to the terminals. When in CGN faults, terminal flow transfer is omitted, service restore time of the terminals of the BRAS is shortened and cost is reduced.

The invention relates to an IPv6 (Internet Protocol Version 6) address allocation method, which comprises the steps of: carrying out network parameter negotiation based on an NCP (NetWare Core Protocol) option when terminal-side equipment initiates a PPP (Point-to-point Protocol) connection request to a network side; carrying out interface identification configuration option negotiation by the terminal-side equipment by sending a first configuration request message to a BRAS (Broadband Remote Access Server) during the negotiation process; and carrying out IPv6 prefix negotiation between the terminal-side equipment and the BRAS through at least a configuration request massage after completing interface ID (Identification) negotiation, and realizing automatic address configuration according to a negotiation result fed back by the BRAS and an IPv6 address generated by the interface identification which are received by the terminal-side equipment. The invention further relates to an IPv6 address allocation system. According to the embodiment of the invention, the IPv6 prefix negotiation is completed through the network parameter negotiation of the NCP option in the PPP connection, the automatic address configuration is realized, the configuration complexity is simplified, the network operation and maintenance costs are reduced, and bridging-type and routing-type home gateway scenes can be simultaneously met during the negotiation process.

The invention discloses a Portal authentication method and system based on network address conversion 444 and relates to the technical field of information technology (IT) device authentication. Wlanuserip attributes are carried in a broadband remote access server (BRAS) redirection message and used for transferring private network Internet protocol (IP) attributes obtained by a user. When the user visits a Portal authentication webpage, the Portal can acquire a private network IP of the user. Due to the fact that a Portable platform builds a correlation between a BRAS device IP and a private network IP address pool when hot spots are built and opened, and the Portable authentication platform can determine an access device of the user through the user private network IP to achieve interaction between the Portal platform and the BRAS device and finish functions of authentication, offline and the like of the Portable user.

An access node for an Ethernet network is connected between an access point of user devices and a broadband remote access server for access to a plurality of service providng networks. It includes a VLAN handling unit having a memory for storing identifications of Ethernet frames transmitted in a first VLAN including the access node and a local virtual router function unit of of the access server in a second VLANs. Each of the second VLANs including the access node, the local virtual router function unit and one of the virtual router function units of the access server for each of the virtual router function units. A control unit commands the handling unit to transmit frames from a new user device that has connected itself to the access point into the first virtrual local area network. The control unit also receives information from the access server in respect of routing frames and its commands to the handling unit to transmit frames from user device which is connected to the access point and the frames from which are transmitted into the first VLAN to be instead transmitted into one of th esecond VLAN as given by the information received from the broadband remote access server, the frames thereby being transmitted to the server of the respective service providing network.

According to the invention there is provided a computer implemented method for provisioning broadband service in a Point-to-Point Protocol over Ethernet (PPPoE) network. A PPPoE session is established, and a username is randomly chosen from a list of usernames stored on a modem. An authentication request is then transmitted from the modem to a Broadband Remote Access Server (BRAS) over a PPPoE network. The BRAS subsequently load balances the authentication request between the multiple Broadband Service Nodes (BSNs) and transmits the authentication request to one of the multiple BSNs determined by the load balancing. The modem then receives authorization from at least one of the multiple BSNs. The authorization preferably comprises a temporary dynamic Internet Protocol (IP) address. Full configuration details, including a static IP address, are then obtained from an Internet Service Provider (ISP). The invention also provides a system and computer program product for performing the above.

The invention discloses a system and a method for combining a fixed network and a mobile network. The system is characterized in that: aiming at the fixed network in a bridge pattern, an X-mobile anchor gateway (X-MAG) used for realizing trusted non 3rd generation partnership project (3GPP) access is arranged and connected between the fixed network and the mobile network, a Ya interface is arranged between user equipment (UE) and a broadband network gateway / broadband remote access server (BNG / BRAS), and a Yb interface is arranged between the BNG / BRAS and the X-MAG, so the UE can access an evolved packet system (EPS) of the mobile network by the fixed network in the bridge pattern through the X-MAG in a trusted non 3GPP IP access way; and aiming at the fixed network in a route pattern, a point-to-point protocol (PPP) signaling is borne by supporting the use of a layer 2 tunneling protocol (L2TP) on a terminal and the X-MAG based on the conventional framework. By the system and the method, the UE can realize the trusted non 3GPP access in a simple and feasible way, namely the UE can access the mobile network through the fixed network in the bridge pattern or the route pattern, and the combination between the fixed network and the mobile network is realized.

The invention provides a PPPOE (point-to-point protocol over Ethernet) message forwarding method which is applied to a BRAS (broadband remote access server). The BRAS comprises a plurality of service boards. The method comprises the steps of receiving a PPPOE message sent by a client, parsing client information of the PPPOE message, and sending the PPPOE message to the corresponding service board according to the client information of the PPPOE message; and carrying out de-capsulation on the PPPOE service message if the PPPOE message is a PPPOE service message, and forwarding the de-capsulated PPPOE service message to the corresponding server. According to the invention, the PPPOE message can be forwarded to the corresponding service board without participation of a main control board.

The invention discloses a method and a system for data routing. When a piece of user equipment (UE) is accessed into a mobile core network through a dependable fixed network, the method comprises: sending a tunnel establishment request to a mobile access gateway through a routing gateway (RG) and carrying the downlink information of tunnel negotiation after the UE is accessed into the RG; replying a response of tunnel establishment and carrying the uplink information of tunnel negotiation after the tunnel establishment request is received by the mobile access gateway; finishing the tunnel establishment with the mobile access gateway through a dynamic negotiation after the response of the tunnel establishment is received by the RG; and packaging and forwarding the data message of the UE via the tunnel established between the RG and the mobile access gateway, when a business is accessed through the mobile core network by the UE. According to the method and the system of the invention, the establishment of the tunnel and the adoption of packaging the data message by the tunnel help to prevent the data message from being discarded by a broadband network gateway / broadband remote access server (BNG / BRAS).

The present invention discloses a performance management system, apparatus and method between a Residential Gateway (RG) and a Broadband Remote Access Server (BRAS), the method thereof includes: configuring an OAM IWF for the protocol conversion between the performance management message of the Asynchronous Transfer Mode (ATM) Operation, Administration and Maintenance (OAM) protocol or the point-to-point Ethernet OAM protocol and the performance management message of the service layer Ethernet OAM protocol in a Digital Subscriber Line Access Multiplexer (DSLAM), when the performance management is performed in a broadband IP network, after the OAM IWF configured in the DSLAM performing the protocol conversion of performance management message, performing the end-to-end performance management between an RG and a BRAS according to the performance management message with the converted protocol. This invention can not only enhance the accuracy of the statistics of the traffic flow, but also enhance the accuracy of the SLA test.

An embodiment of the invention provides an Internet protocol (IP) source tracing method, device and system and relates to the communication field. An AAA server does not need to be modified, and meanwhile source tracing efficiency and reliability are improved. The method includes that a network address translator (NAT) device receives and stores a user account and a private network IP address of a user terminal and transmitted by a broadband remote access server (BRAS) and builds an address mapping relation table when receiving a business access request of the user terminal. The address mapping relation table comprises the user account of the user terminal, the private network IP address, a converted public network IP address, a port identifier and a user Internet timestamp. The NAT device reports the address mapping relation table to a log server to enable the log server to conduct IP source tracing according to the address mapping relation table.

The invention discloses an IPv6 (Internet Protocol version 6) routing establishing method based on Ethernet Point-to-Point Protocol and an access server. The method comprises steps as follows: an IPv6 prefix pool is configured on a BRAS (Broadband Remote Access Server), and the BRAS (Customer Edge) establishes a PPPoE (Point-to-Point Protocol over Ethernet) session with a CE so as to carry out PPPoE negotiation and authentication process with the CE; the BRAS receives a DHCPv6 (Dynamic Host Configuration Protocol for IPv6) request message transmitted by the CE, returns one prefix taken from the IPv6 prefix pool to the CE, meanwhile, adds the prefix into the local IPv6 routing table and sets the next hop of the prefix as the PPPoE interface local link address of the CE, so that the CE distributes the prefix to a first user host, and thus, the first user host generates the local IPv6 address according to the prefix and exchanges IPv6 data messages with other user hosts by using the IPv6 address; and the BRAS forwards the IPv6 data messages according to the local IPv6 routing table. By using the invention, the BRAS can successfully forward the downlink IPv6 flow without supporting dynamic routing protocol and ND proxy function, and the configuration load of the BRAS is lowered.

The invention provides a method for realizing user port positioning in a BRAS (Broadband Remote Access Server) multicomputer backup scene and a network system. The method comprises the following steps of: setting main ports in all backup groups into user interface ports and synchronizing information using the main ports as the user interface ports on a backup port in the backup group, wherein the access port information configured for the user by RADIUS (Remote Authentication Dial In User Service) is the main port of the backup group; and if the main port is abnormal for switching the main port and the backup port, a line is accessed from the corresponding backup port when a user is on line, wherein the BRAS corresponding to the backup port packages an authentication message comprising an DSLAM (Digital Subscriber Line Access Multiplexer) accessed by the user and access line information using the main port as the user access port and transmits the authentication message to the RADIUS so as to solve the problem of authentication failure caused by the change of the positioning line information of the user port after the backup group is switched in the BRAS multicomputer backup scene.

The invention relates to a metropolitan area network planning method. The method comprises the following steps of: collecting metropolitan area network output peak flow, BRAS (Broadband Remote Access Server) peak flow, IPTV (Internet Protocol Television) peak flow and SR peak flow through a network manager of the metropolitan area network, and calculating to obtain metropolitan area network exit proportion of each local area network; calculating the metropolitan area network output peak flow according to the metropolitan area network exit proportion; collecting public broadband user number, government and enterprise dial-in user number, public broadband peak user number and government and enterprise dial-in peak user number of the local area network through the network manager of the metropolitan area network, and calculating a broadband user on-line concentration ratio; calculating on-line average bandwidth used by public broadband and government and enterprise dial-in users; according to the past planning data, reckoning the average bandwidth used by public users in the few next years by using a flow curve extrapolation method. The method can accurately predict the future metropolitan area network flow, saves the network bandwidth of the metropolitan area network to the greatest extent, ensures the development of data service, greatly saves the metropolitan area network bandwidth expansion investment for operators, and has relatively good economic values and social values.

The invention provides a method and system for tracking the source of a user. The method includes the steps that an access log sent by a broadband remote access server in the process that the user has access to a target webpage is received, wherein the access log at least contains a user account, access time, a public network IP address and a public network port block of the user and address information of the target webpage; a source tracing request sent by source tracing equipment is received, wherein the source tracing request contains access time, a public network IP address, a public network port number and the address information of the target page; according to the access time, the public network IP address, the public network port number and the address information of the target webpage contained in the source tracing request, the corresponding user account is acquired from the access log, and then the source of the user can be traced. According to the method and system for tracking the source of the user, the address information of the target webpage is added into the access log, the source of the user is traced through the query for the condition of the access log, and therefore the user source tracing complexity is reduced, and the user source tracing efficiency is improved.

Embodiments of the invention disclose an address distribution method, an apparatus and a system thereof. The method comprises the following steps that: a address pool management server receives a address request message transmitted by a first broadband remote access server (BRAS) in a BRAS cluster; the address pool management server comprises current idle address information of the each BRAS in the BRAS cluster; according to the current idle address information of the each BRAS in the BRAS cluster, the idle addresses of the second BRAS in the BRAS cluster are sent to the first BRAS and the idle addresses of the second BRAS are distributed to terminal equipment which is connected with the first BRAS. By using the technical scheme provided in the embodiments of the invention, the address pool management server can uniformly manage and distribute the addresses in the BRAS cluster. Therefore, distribution and a usage efficiency of the addresses can be effectively raised.

The invention discloses an information receiving method, an information sending method, devices and a system. When requesting to be connected to a network through an access point (AP), a mobile terminal respectively sends a communication signaling to an access controller (AC) and a broadband remote access server (BRAS) through the AP; the AC submits an acquired equipment identifier of the AP and an acquired terminal identifier of the mobile terminal to the BRAS through an established AC-BRAS tunnel; and after receiving the equipment identifier of the AP and the terminal identifier of the mobile terminal, the BRAS acquires user information and the terminal identifier of the mobile terminal through the AP and binds the user information corresponding to the terminal identifier of the mobile terminal with the equipment identifier of the AP, so that the BRAS can know the AP through which each user is connected to the network, and the user can be precisely positioned to the AP level; and therefore, wireless local area network (WLAN) differential services can be deployed and performed favorably.

The invention provides a method and a device for preventing re-authentication of a roaming user. The method comprises the following steps of: when the virtual local area network (VLAN) of a roaming user terminal is changed, reporting roaming user terminal information to a broadband remote access server (BRAS) through an automatic controller (AC) to realize update of the roaming user terminal information on the BRAS and an authentication, authorization and accounting server (AAA server), and allowing the user to directly access the network by using the internet protocol (IP) of the changed VLAN. Based on the method, the invention also provides the device for preventing re-authentication of the roaming user. Under the condition that the authenticity of the access point of the user terminal is kept, the re-authentication of the roaming user terminal of the changed VLAN is avoided.

The invention provides a broadband network access method. The method comprises the following steps of: adding the port information of a receiving port of network access equipment to a received PPPoE (Point-To-Point Protocol over Ethernet) data packet, wherein the received PPPoE data packet contains user ID (Identity) information and cipher information; acquiring the standard corresponding relation between the user ID information and the port information of the network access equipment; and authenticating and accessing a network terminal corresponding to the user ID information in the PPPoE data packet according to the standard corresponding relation and the added PPPoE data packet. The invention provides a broadband network access system, a DSLAM (Digital Subscriber Line Access Multiplexer) and a BRAS (Broadband Remote Access Server). The broadband network access method and system, the DSLAM and the BRAS provided by the invention are adopted to improve the access security of the broadband network.

A system and method in a communications network of testing a communications link between Customer Premises Equipment (CPE) and a Broadband Remote Access Server (BBRAS). The CPE and BBRAS communicate mutually via an intermediate Internet Protocol Digital Subscriber Line Access Multiplexer (IPDSLAM). The CPE is connected to the IPDSLAM via an Asynchronous Transfer Mode (ATM) link, and the BBRAS is connected to the IPDSLAM via an Ethernet link. When a customer complaint is received in a Customer Care Center (CCC), the IPDSLAM is instructed to test the link. The IPDSLAM executes a first loop-back test with the CPE according to the ATM standard, and executes a second loop-back test with the BBRAS according to the Ethernet standard. The results of the first and second loop-back tests are reported to the CCC.

The embodiments of the invention disclose a user data migration method and a user data backup method, device and system, and belongs to the technical field of broadband access. The user data migration method is applied to a target BRAS (Broadband Remote Access Server) included in a broadband remote access system, and comprises the steps of: when an MPU (Microprocessor Unit) receives a migration message sent when a first target VM (Virtual Machine) satisfies a configured preset migration condition, selecting a VM satisfying a first preset condition from all online VMs of multiple BRASs, and determining the selected VM as a second target VM; the MPU generating a migration rule based on VLAN (Virtual Local Area Network) information of the first target VM and VLAN information of the second target VM, and sending the migration rule to a switch, so that when the switch receives a message sent to the first target VM, the switch forwards the message to the second target VM based on the migration rule, i.e., user data migration of the first target VM is realized, and then a physical server corresponding to the first target VM can be powered off. Therefore, the power consumption of the system is reduced, and idle system resources are simultaneously avoided.

The embodiment of the invention provides a method and device for Internet protocol (IP) terminal being accessed into network. The method comprises the following steps of: binding a user identifier with IP information supported by the IP terminal according to user signature information or user service change information, and storing a binding relationship; receiving an authentication request of the IP terminal from a broadband remote access server (BRAS), wherein the authentication request comprises the user identifier of the IP terminal; authenticating the IP terminal according to the user identifier, and if the IP terminal passes the authentication, searching for the IP information supported by the IP terminal from the binding relationship according to the user identifier; and returning the found IP information supported by the IP terminal to the BRAS, so that the BRAS can allocate an IP address and / or IPv6 address prefix of a corresponding version to the IP terminal according to the IP information. By the method and the device provided by the embodiment of the invention, the IP terminal can accurately access an IP network, and network operation and maintenance are facilitated.

The invention provides a load balancing method, a load balancing system and broadband remote access server equipment. The method comprises the following steps of: acquiring characteristic information for characterizing a service type from point-to-point protocol over Ethernet (PPPoE) data message sent by user equipment (UE); judging that the requested service traffic corresponds to an Internet protocol version 4 (IPv4) or Internet protocol version 6 (IPv6) according to the characteristic information; when the requested service traffic corresponds to the IPv4, forwarding IP data packets in the PPPoE data message to corresponding servers in the network; otherwise, when the requested service traffic corresponds to the IPv6, sending the data message encapsulated with the IP data packets to the broadband remote access server equipment corresponding to the IPv6, so that the broadband remote access server equipment corresponding to the IPv6 forwards the IP data packets to the corresponding servers. According to the technical scheme, load balance can be effectively realized.

The invention provides a BRAS (Broadband Remote Access Server) forwarding and control separation backup method and device. The method comprises the following steps: after user equipment passes the authentication, determining session information corresponding to the user equipment, and determining a tunnel backup group corresponding to the user equipment, wherein the tunnel backup group comprises amain tunnel between BRAS-CP (Control Plane) equipment and main BRAS-UP equipment and a backup tunnel between the BRAS-CP equipment and backup BRAS-UP equipment; sending the session information to themain BRAS-UP equipment through the main tunnel, so that the main BRAS-UP equipment performs data transmission according to the session information; and if the main BRAS-UP equipment breaks down, acquiring session information corresponding to the main BRAS-UP equipment, and sending the acquired session information to the backup BRAS-UP equipment through the backup tunnel, so that the backup BRAS-UP equipment performs data transmission according to the received session information. According to the technical scheme of the invention, the service interruption time of the user equipment is reduced, the user service experience is improved, and rapid switching can be performed between the BRAS-UP equipment, so that the reliability of a forwarding level can be improved.