184 results about "CAPWAP" patented technology

The invention discloses a configuration sending method which comprises the following steps: when an access point is accessed, at least a configuration file which is required for sending to the access point is acquired and the configuration file comprises configuration information providing the access for the access point; the configuration file is sent to the access point. The invention also provides an access control device and an access point. By adopting the method, the device and the access point of the invention, that CAPWAP can flexibly support a new configuration to deliver requirements can be realized, in particular to configuration requirements related to wired networks of ACL, Qos, etc., thereby ensuring the expansibility of a CAPWAP protocol, realizing the unified management ofwired networks and wireless networks and avoiding complex work caused by extending a TLV simultaneously.

An solution for a mobile station to perform intra-domain inter-access controller authentication using an 802.11r protocol in CAPWAP architecture is presented. The access controller is the authenticator that is configured to store a top-level and second-level shared authentication keys in a key hierarchy defined in 802.11r. The mobile station first-time association and re-association after inter-access-point handoff can be performed through authentication request / response message exchange between the mobile station and the access controller. The new access controller after handoff gets top-level key from the old access controller called an anchor authenticator. The mobile station and the new access controller generate a new second-level key and session key to complete the authentication.

The invention provides a method, a system and a device for authenticating a portal in a wireless network. The method comprises the following steps: after receiving an authenticating request of a mobile terminal (STA) by a wireless access point (AP), transmitting the authenticating request to an accessing controller (AC) through the control of the wireless accessing point and a supply protocol (CAPWAP) tunnel, and forwarding the authenticating request to a portal server by the AC; after the AC successfully authenticates the STA by the Portal server, transmitting configuration information to indicate the AP to start a local forwarding function to the STA through the CAPWAP tunnel by the AC; and after learning a condition that the STA quits the authentication, transmitting configuration information to indicate the AP to close the local retransmission function to the STA through the CAPWAP tunnel. The invention is capable of using a prior network authentication framework to perform a Portal authentication under the condition of an AP local retransmission without extra increasing authenticating apparatuses, thereby saving the networking cost.

A WiFi roaming management method and device which redirect an HTTP request of a mobile terminal from an AP to an AC even though the AC and the AP do not exist in the same subnet, which redirects a source IP address for an HTTP request, after transferring, to an IP address of the AC, and which smoothly support a wireless Internet service in a distributed processing system according to a web authentication of the AC in a WiFi roaming method is provided. A terminal session management function and a traffic control function are separated by a premium AC (Access Controller) and a premium AP (Access Point) interworked with a tunneling method according to a CAPWAP protocol.

The invention provides a WiFi communication system deployed with cloud ACs (access controllers) and a communication method adopting the WiFi communication system deployed with the cloud ACs (access controllers). The WiFi communication system comprises a plurality of cloud ACs, an AC proxy server used for performing load balancing treatment on data streams, and an AP (access point) communicated with the cloud ACs by the AC proxy server, wherein the CAPWAP (Control And Provisioning Of Wireless Access Points) follows between the AP and each AC proxy server, and the IP (internet protocol) address of the AC proxy server is opened to the AP, so that the AP can find the AC proxy server after being electrified. According to the system, other private protocols are not required to be expanded to the AP, so that the development cost is reduced on the basis of the cloud ACs, besides, the cloud ACs are not exposed to a client side, the ACs can be well hidden and the security of the ACs is improved.

The embodiment of the invention provides a data transmission method and network side equipment. The data transmission method comprises the following steps that whether a CAPWAP (control and provisioning of wireless access point) data channel has the data transmission or not is confirmed; and under the condition that the CAPWAP data channel has the data transmission, the sending of keep-alive messages is stopped. In the embodiment, because the keep-alive messages are not sent in the data transmission process, so the CAPWAP link breaking caused by keep-alive message loss can be prevented, and the reliability of the ACPWAP link is improved.

The invention provides a message rapid forwarding system of a control and provisioning of wireless access point (CAPWAP). The rapid forwarding system comprises an Ethernet switching chip, a wide area network (WAN) port, a field-programmable gate array (FPGA) unit, and a processor unit, wherein the field-programmable gate array unit is used for receiving the message from the Ethernet switching chip or the WAN port, searching a list item corresponding to a quintuple of the message from a hash table, if corresponding list item is found out, transmitting the message to the processor unit, receiving packaged message from the processor unit and transmitting the message to the Ethernet switching chip or the WAN port, and building a new list item corresponding to the quintuple of the packaged message in the hash table, if corresponding list item is found out, packaging the message according to the searched list item, and transmitting the e packaged message to the Ethernet switching chip or the WAN port, and the processor unit is used for packaging the message transmitted by the FPGA unit, and transmitting the packaged message to the FPGA unit.

The invention discloses a recovery method of a CAPWAP tunnel, which comprises that: when AP starts reconnection, the AP sends a first message to AC, and the first message carries Session ID; the AC judges whether the self catch has the session message corresponding to the Session ID, if yes, the AC sends a second message to the AP, and rebuilds the CAPWAP tunnel with the AP according to the session message. The invention speeds up the process of the CAPWAP tunnel recovery.

The invention provides an MP repeated accessing method adding a configuration protection state to an MP. When a CAPWAP tunnel is interrupted, the MP enters the configuration protection state, maintains a prior MESH link and tries to recover the CAPWAP tunnel to an AC by the prior MESH link. The invention also provides MP equipment adopting the repeated accessing method. The MP repeated accessing method and the MP equipment save the time consumed during passive scanning, active scanning, trying to search a neighbor and establishing a temporary MESH link, thereby shortening the interruption time of an MESH network service caused in such a way that a CAPWAP keep-alive message is lost and enhancing the stability and the service quality of an MESH network.

The present invention provides a method and device for multi-AP testing, wherein the method includes: simulating N APs; creating N CAPWAP tunnels corresponding to the N APs; connecting the N CAPWAP tunnels to a wireless network controller AC, Test the capacity of the AC; send test packets through N CAPWAP tunnels to test the forwarding performance of the AC. The invention solves the problem of low test efficiency due to the inability to realize multiple APs and multiple users to simultaneously test the AC in the prior art, and further achieves the test of multiple AP applications of the AC and improves the test efficiency.

The embodiment of the invention provides a method and customer premise equipment (CPE) for terminal access authentication. The method comprises the following steps: CPE sends a discovery request to all ACs (Access Controller) according to IP (Internet Protocol) addresses of all ACs in a server of a WLAN (Wireless Local Area Network); if receiving a discovery response which is returned by any AC in all the ACs and corresponds to the discovery request, the CPE establishes CAPWAP (Control And Provisioning of Wireless Access Points) tunnel with any AC; and the CPE accesses terminals connected with the CPE into the WLAN by the CAPWAP tunnel, and enables the server of the WLAN to authenticate the terminals accessed into the WLAN by the CAPWAP tunnel. The method solves the problem that terminals accessed into a WiFi (Wireless Fidelity) or an Ethernet interface are authenticated separately in the WLAN relying on an LTE-EPC (Long Term Evolution-Easy Processing Channel) network.

The invention provides an SDN-based WLAN hierarchical networking system and method. The SDN-based WLAN hierarchical networking system comprises an SDN controller and an AC, wherein the AC is in communication connection with the SDN controller and serves as a switching node of a controller of APs connected with the AC and the SDN controller. The AC establishes virtual ports for the APs, sets the states of the virtual ports of all the APs according to the current network environment and reports the states of the virtual ports to the SDN controller; the SDN controller is used for generating management state information according to the states of the virtual ports and transmitting the management state information to the AC; the AC is further used for converting management information, corresponding to the APs, in the management state information into a CAPWAP message and issuing the message to the APs; accordingly, a hierarchical WLAN network architecture integrating the SDN controller, the AC and the APs is realized, WLAN services can be migrated to an SDN conveniently, investment of existing equipment is protected, the advantages of the SDN technology can also be fully utilized, and the practicality is good.

The invention discloses a measurement method of transmission performance between a wireless access controller AC and a wireless access point AP, wherein connection is established between the AC and the AP by a CAPWAP tunnel; after connection is accomplished, the AC transmits performance measurement packages to the AP periodically; after receiving one measurement package, the AP feeds back a measurement response package; and the AC calculates parameters of transmission performance between the wireless access controller AC and the wireless access point AP according to information in the measurement response package. The measurement method can effectively detect condition of end-to-end transmission performance and obviously improve the measurement efficiency of links between the AP and the AC, thus leading intelligent dynamic regulation on the wireless access point to be realized in later period and the maximum guaranteeing of service quality of a user to be possible.

The invention discloses a configuration acquiring method, a zero configuration access point and a neighbor access point. The configuration acquiring method comprises the following steps of: A1, discovering neighbor APs (Access Points) through scanning by a first AP in a zero configuration state, sequentially selecting one neighbor AP from the neighbor APs, and reporting a first AP identifier to the selected neighbor AP so that the neighbor AP forwards the first AP identifier to an AC (Access Controller) related to the neighbor AP and the AC determines whether the first AP is permitted to be associated or not according to the first AP identifier; B1, when the first AP receives an association permitted indication which is forwarded from the neighbor AP and comes from the AC, establishing a CAPWAP (Control And Provisioning of Wireless Access Points) channel with the AC, and acquiring self configuration from the AC through the CAPWAP channel; and when the first AP receives an association refused indication sent from the neighbor AP, forwarding to the next neighbor AP; and returning to the step A1. The speed of the zero configuration AP for acquiring the configuration is increased by adopting the invention.

The invention discloses a method and a device of Portal centralized authentication. The method and the device of the Portal centralized authentication utilize a Fit AP flow-based transmitting module. When STA (single thread apartment) authentication is not passed, a private network internet protocol (IP) address is distributed to the un-authenticated STA and a centralized transmitting module is utilized in a default mode and data of all users are intensively transmitted to an AC (auto-coder) to be handled. Corresponding AC interfaces enable the Portal authentication to be handled according to normal Portal process. The AC issues a MAC (physical address) of the authenticated STA and issues instructs to the Fit AP to open a local forwarding function through a control and provisioning of wireless access points (CAPWAP) channel after the Portal authentication of the STA is passed, wherein the local forwarding function are contraposed to the STA. Meanwhile, the AC issues instruments to the Fit AP to break previous wireless connections and the STA starts a DHCP (dynamic host configuration protocol) requirement to obtain a public network IP address. The method and the device of the Portal centralized authentication can not only a solve AC centralized Portal authentication problem under the Fit AP local transmitting condition in existing wireless local area network (WLAN) but also can solve the problem of occupying the public network IP address before a Portal user is authenticated.

The invention provides a method and a device for a WiFi terminal to visit different service domains. The method is applied to CPE and includes the steps that if an uplink data service which the WiFi terminal launches is a data service type and authentication and / or charging of the data service type is carried out on an IP layer, the uplink data service is packed through a CAPWAP tunnel; a message of the uplink data service packed through the CAPWAP tunnel is sent to a BRAS after passing through an EPC, and the BRAS sends the message of the uplink data service to a corresponding service domain; if the uplink data service which the WiFi terminal launches is a data service type and authentication and / or charging of the data service type is carried out on an application layer, a second IP address of the WiFi terminal carried by the message bearing the uplink data service is converted into a first IP address of CPE equipment; and the message of the uplink data service of the first IP address of the CPE equipment is directly transmitted to a corresponding service domain through the EPC in a route forwarding mode.

This invention discloses one method and agent servo to search interface controller in wireless local network, which comprises the following steps: firstly, the local network comprises one interface point to receive CAPWAP message from interface point; then receiving said CAPWAP message and selecting one interface controller IP address according to the interface controller IP address and sending it to the controller.

The invention discloses a method, a system and a device for recovering control and provisioning for wireless access point (CAPWAP) tunnel. The method comprises the steps that: when the CAPWAP tunnel between an access point (AP) and an access controller (AC) fails, the AP and AC set states as operating information locking states respectively and save the session identifier (ID) of the failed CAPWAP tunnel; the AP locks the saved operating information, aborts the detection for a station and does not respond to the connection request or offline request of the station; the AP interacts with the AC for the tunnel recovery message, the AP and the AC recover states as operating sates respectively to recover the failed CAPWAP tunnel; the message comprises the information about the AP and the AC being in the operation information locked state and the session ID of the failed CAPWAP tunnel; the AP starts the detection for the station to update the operating information. According to the invention, the AP still can keep the service for the station uninterrupted during the recovery of the CAPWAP tunnel.

The invention discloses a data transmission method and data transmission equipment. The method comprises the following steps that: access controller (AC) equipment judges whether a keep-alive message from access point (AP) equipment is received or not; if the keep-alive message from the access point (AP) equipment is received, the AC equipment determines that a controlling and provisioning of wireless access point (CAPWAP) tunnel is normal and acquires a Session ID corresponding to the AP equipment from the keep-alive message; and the AC equipment maintains the information of the CAPWAP tunnel for the AP equipment according to the session ID. The method and the equipment can adapt to different network address translation (NAT) environments and lighten network maintenance burden.

The invention provides a data processing method and a device based on Linux network core, wherein the method comprises up data forward flow, specifically comprises the following steps: an institute of electrical and electronic engineers (IEEE) 802.11 protocol layer intercepts IEEE 802.11 messages and transmits the IEEE 802.11 messages to a link layer of a Linux protocol stack; the link layer of the Linux protocol stack transmits the IEEE 802.11 messages to a Linux network bridge; the network bridge extracts matched IEEE 802.11 management frames and / or IEEE 802.11 data frames according to preset IEEE 802.11 message matching rules; and packaging the matched IEEE 802.11 management frames and / or the IEEE 802.11 data frames into control and configuration protocol control and provisioning of wireless access points (CAPWAP) data messages and transmitting. The application can improve data transmitting efficiency and simultaneously relieving load of an application layer in CAPWAP relative tasks processing.

The invention provides mesh points and a configuration and issuing method thereof in a WLN (Wireless Local Area Network) mesh network. The WLN mesh network comprises an origin MP (Mesh Point) which is an MPP (Mesh Portal Point) which is in wired direct connection with an AP (Access Point) and MPs which are in wireless direct connection with the AP are clone MPs. The configuration and issuing method for the mesh points in the WLN mesh network includes that the origin MP is started, the AC is found and interconnected through wired connection and the configuration information of the clone MPs is downloaded from the AC; also the origin MP discovers every clone MP through mesh scanning; and mesh connections between the origin MP and every clone MP are established and the configuration information of the clone MPs is transmitted to the clone MPs respectively through the mesh connections. According to the mesh points and the configuration and issuing method thereof in the WLN (Wireless Local Area Network) mesh network, the MPs can obtain self-configuration without establishing a CAPWAP channel with the AC.

The embodiment of the invention provides a method, device and system for processing a service message in a wireless local area network (WLAN), wherein the WLAN comprises an access point AP, a first access controller (AC) and a second AC, and the first AC is respectively connected with the AP and the second AC. The method comprises the steps of: receiving a CAPWAP (Configuration and Provisioning for Wireless Access Points) service message from the AP; according to a preset distribution strategy, obtaining identifier information of the CAPWAP service message, and acquiring the AC corresponding to the identifier information according to the correspondence of the identifier information and the AC; and sending the CAPWAP service message to the AC corresponding to the identifier information so as to ensure that the corresponding AC is used for decapsulating the CAPWAP service message. The embodiment of the invention can realize that a plurality of ACs manage the AP in the WLAN, thereby ensuring that the services of the AP in the WLAN normally operate.

The invention relates to a wireless network system, and discloses a wireless system with a wired fault self-restoring function, wherein the wireless system settles a problem of normal Internet logging-on incapability by terminals in the coverage range of a wireless access point (AP) after a wired connection between the wireless AP and a wireless access point controller (AC) is disconnected in traditional technology. The wireless system comprises an AC router and a plurality of wireless APs. Each wireless AP is connected with the AC router in a wired manner. After an address is automatically acquired, a wireless configuration parameter is acquired through a CAPWAP connection; wireless configuration of a local terminal is finished and furthermore the wireless configuration parameter is stored. The wireless network system is also used for testing the communication state between the wireless AP and the AC router periodically, thereby determining whether the wired connection between the wireless AP and the AC router is normal. If an abnormity occurs in the wired connection, an adjacent wireless AP is automatically searched, and furthermore a certain available wireless AP is connected through the stored wireless configuration parameter in a wireless manner. Furthermore the invention discloses a corresponding wired fault self-restoring method which is applicable for an (AC+AP) architecture network system.

The invention discloses a method for raising the control efficiency of access controllers in a MESH network and access controllers. A plurality of ACs (Access Controllers) are arranged in each MKD (MESH Key Distributor) domain of a MESH network. Each AC is provided with the same configuration to the MESH network. All the ACs form a logic MKD. The method comprises the following steps: a random AC is searched by an on-line MP (Mesh Point), the AC and the on-line MP establish a CAPWAP (Configuration and Provisioning for Wireless Access Points) tunnel, and as the main AC of the on-line MP, the main AC delivers configuration downwards and carries out configuration management to the on-line MP; a random AC receives a PMK-MA request message carrying an identification of an Supplicant sent by a random MA, executes a MKD role, and distributes layered secret key for the Supplicant so that the MA and the Supplicant can use the MESH link established by the secret key. According to the invention, the AC control efficiency is raised.

On the basis of a CAPWAP technology of an existing wireless controller AC on wireless access point equipment AP, control of the AC over the AP on a data surface and a management surface and data collection of a monitoring surface are achieved through an Openflow command and parameter extension by utilizing and extending an Openflow protocol, the function of CAPWAP is replaced with OpenFlow extension, and the full fusion of a wired and wireless integrated network on frame is achieved through normalization of networking protocol Open Flow.

The invention discloses a network-management realizing method and a system on the basis of a fit wireless access point (AP) architecture. The network-management realizing method includes that a wireless access controller AC and an AP communicate with each other by means of wireless AP control and configuration of the protocol of CAPWAP (control and provisioning of wireless access points) during predefined process. The predefined process includes at least one of the following steps that the AC sends configuration information of a network management platform to the AP, the AC acquires acquisition information used for responding to an information acquiring quest of the network management platform, and the AP reports TRAP events to the network management platform through the AC. The architecture of the fit AP network management system is optimized, so that network management efficiency of SNMP (simple network management protocol) can be improved, load of the network management system can be reduced and network quality can be improved.

The invention discloses a multi-tunnel transmission device based on user service. The device comprises a control module for users to send configuration orders, a tunnel selection module for analyzing characteristics of messages, and forwarding the messages to different tunnels according to the nature of the messages when uplink and downlink messages enter the system, a first interface drive module for receiving data messages on a wireless side, a second interface drive module for receiving data messages on a wired side, a quick turning module for packing and unpacking tunnels of control and provisioning of wireless access points (CAPWAP) message headers, a business module for packing and unpacking tunnels of corresponding business message headers, and an internet protocol (IP) forwarding module for packing internet protocol message headers, sub-sheets and routers. The device realizes forwarding of various types of different tunnels, improves forwarding efficiency of business data, and reduces forwarding expenditure.

The invention provides a method for realizing a CAPWAP (Control and Provisioning of Wireless Access Points) tunnel. In the LOCALMAC mode, the uplink communication of a user and an AC (Access Controller) and the downlink communication of the AC to the user are realized. The uplink communication is that different user messages are packaged into different tunnel messages to be sent to the AC, and the downlink communication is that the different tunnel messages are sent to the user. According to the method, a standard CAPWAP tunnel on an AP (Access Point) is realized by judging whether the LOCALMAC mode is transferred into the LOCALMAC mode. According to the method, an original AP flow is slightly changed, so that the AP can be flexibly switched in a bridge mode and the LOCALMAC mode, the requirements for different working modes are met under different deployment scenes, and the actual deployment situation of the existing network and the direction of a unified standard in the future are met.

The invention discloses an AP emulation analog system based on a CAPWAP protocol, and belongs to an emulation analog system. The system comprises an AC (Access Controller) and a module connected with the AC, wherein the module comprises an AP setting module, an AP creating module, a port configuration module and a control module; the AP setting module is used for setting the number of the virtual AP and the MAC (Media Access Control ) address of the initial virtual AP; the AP creating module is used for creating each AP according to the number of virtual AP and the initial virtual MAC address set by the AP setting module; the port configuration module is used for distributing a port for each virtual AP created by the AP creating module; the control module is used for controlling the steps that each virtual AP finishes access to the AC. The system has the benefits that through the AP emulation analog system based on the CAPWAP protocol, and the emulation analog test for the AC with large number of AP can be realized. Meanwhile, the system is suitable for product tests performed by AC production manufacturers.

The invention discloses a wireless controller heat backup switching method, a wireless controller heat backup switching device and a wireless controller which are used for enhancing the robustness of a wireless network and reducing the waste of network resources, wherein the wireless controller heat backup switching method comprises the following steps that the initial number of initial on-line access points (APs) is counted; whether a CAPWAP tunnel between the AP is abnormal or not is respectively judged for each on-line AP; every time when the condition that the CAPWAP tunnel between any one on-line AP is abnormal is judged, the number of the current on-line APs is subtracted by 1, and the initial value of the number of the current on-line APs is the counted initial number of the initial on-line APs; and when the number of the current on-line APs meets a preset switching condition, heat backup switching is triggered.