182 results about "CAPWAP" patented technology

The invention discloses a configuration sending method which comprises the following steps: when an access point is accessed, at least a configuration file which is required for sending to the access point is acquired and the configuration file comprises configuration information providing the access for the access point; the configuration file is sent to the access point. The invention also provides an access control device and an access point. By adopting the method, the device and the access point of the invention, that CAPWAP can flexibly support a new configuration to deliver requirements can be realized, in particular to configuration requirements related to wired networks of ACL, Qos, etc., thereby ensuring the expansibility of a CAPWAP protocol, realizing the unified management ofwired networks and wireless networks and avoiding complex work caused by extending a TLV simultaneously.

An solution for a mobile station to perform intra-domain inter-access controller authentication using an 802.11r protocol in CAPWAP architecture is presented. The access controller is the authenticator that is configured to store a top-level and second-level shared authentication keys in a key hierarchy defined in 802.11r. The mobile station first-time association and re-association after inter-access-point handoff can be performed through authentication request/response message exchange between the mobile station and the access controller. The new access controller after handoff gets top-level key from the old access controller called an anchor authenticator. The mobile station and the new access controller generate a new second-level key and session key to complete the authentication.

The invention provides a method, a system and a device for authenticating a portal in a wireless network. The method comprises the following steps: after receiving an authenticating request of a mobile terminal (STA) by a wireless access point (AP), transmitting the authenticating request to an accessing controller (AC) through the control of the wireless accessing point and a supply protocol (CAPWAP) tunnel, and forwarding the authenticating request to a portal server by the AC; after the AC successfully authenticates the STA by the Portal server, transmitting configuration information to indicate the AP to start a local forwarding function to the STA through the CAPWAP tunnel by the AC; and after learning a condition that the STA quits the authentication, transmitting configuration information to indicate the AP to close the local retransmission function to the STA through the CAPWAP tunnel. The invention is capable of using a prior network authentication framework to perform a Portal authentication under the condition of an AP local retransmission without extra increasing authenticating apparatuses, thereby saving the networking cost.

The invention provides a message rapid forwarding system of a control and provisioning of wireless access point (CAPWAP). The rapid forwarding system comprises an Ethernet switching chip, a wide area network (WAN) port, a field-programmable gate array (FPGA) unit, and a processor unit, wherein the field-programmable gate array unit is used for receiving the message from the Ethernet switching chip or the WAN port, searching a list item corresponding to a quintuple of the message from a hash table, if corresponding list item is found out, transmitting the message to the processor unit, receiving packaged message from the processor unit and transmitting the message to the Ethernet switching chip or the WAN port, and building a new list item corresponding to the quintuple of the packaged message in the hash table, if corresponding list item is found out, packaging the message according to the searched list item, and transmitting the e packaged message to the Ethernet switching chip or the WAN port, and the processor unit is used for packaging the message transmitted by the FPGA unit, and transmitting the packaged message to the FPGA unit.

The invention discloses a recovery method of a CAPWAP tunnel, which comprises that: when AP starts reconnection, the AP sends a first message to AC, and the first message carries Session ID; the AC judges whether the self catch has the session message corresponding to the Session ID, if yes, the AC sends a second message to the AP, and rebuilds the CAPWAP tunnel with the AP according to the session message. The invention speeds up the process of the CAPWAP tunnel recovery.

The invention provides an MP repeated accessing method adding a configuration protection state to an MP. When a CAPWAP tunnel is interrupted, the MP enters the configuration protection state, maintains a prior MESH link and tries to recover the CAPWAP tunnel to an AC by the prior MESH link. The invention also provides MP equipment adopting the repeated accessing method. The MP repeated accessing method and the MP equipment save the time consumed during passive scanning, active scanning, trying to search a neighbor and establishing a temporary MESH link, thereby shortening the interruption time of an MESH network service caused in such a way that a CAPWAP keep-alive message is lost and enhancing the stability and the service quality of an MESH network.

The embodiment of the invention provides a method and customer premise equipment (CPE) for terminal access authentication. The method comprises the following steps: CPE sends a discovery request to all ACs (Access Controller) according to IP (Internet Protocol) addresses of all ACs in a server of a WLAN (Wireless Local Area Network); if receiving a discovery response which is returned by any AC in all the ACs and corresponds to the discovery request, the CPE establishes CAPWAP (Control And Provisioning of Wireless Access Points) tunnel with any AC; and the CPE accesses terminals connected with the CPE into the WLAN by the CAPWAP tunnel, and enables the server of the WLAN to authenticate the terminals accessed into the WLAN by the CAPWAP tunnel. The method solves the problem that terminals accessed into a WiFi (Wireless Fidelity) or an Ethernet interface are authenticated separately in the WLAN relying on an LTE-EPC (Long Term Evolution-Easy Processing Channel) network.

The invention provides an SDN-based WLAN hierarchical networking system and method. The SDN-based WLAN hierarchical networking system comprises an SDN controller and an AC, wherein the AC is in communication connection with the SDN controller and serves as a switching node of a controller of APs connected with the AC and the SDN controller. The AC establishes virtual ports for the APs, sets the states of the virtual ports of all the APs according to the current network environment and reports the states of the virtual ports to the SDN controller; the SDN controller is used for generating management state information according to the states of the virtual ports and transmitting the management state information to the AC; the AC is further used for converting management information, corresponding to the APs, in the management state information into a CAPWAP message and issuing the message to the APs; accordingly, a hierarchical WLAN network architecture integrating the SDN controller, the AC and the APs is realized, WLAN services can be migrated to an SDN conveniently, investment of existing equipment is protected, the advantages of the SDN technology can also be fully utilized, and the practicality is good.

The invention discloses a measurement method of transmission performance between a wireless access controller AC and a wireless access point AP, wherein connection is established between the AC and the AP by a CAPWAP tunnel; after connection is accomplished, the AC transmits performance measurement packages to the AP periodically; after receiving one measurement package, the AP feeds back a measurement response package; and the AC calculates parameters of transmission performance between the wireless access controller AC and the wireless access point AP according to information in the measurement response package. The measurement method can effectively detect condition of end-to-end transmission performance and obviously improve the measurement efficiency of links between the AP and the AC, thus leading intelligent dynamic regulation on the wireless access point to be realized in later period and the maximum guaranteeing of service quality of a user to be possible.

The invention discloses a configuration acquiring method, a zero configuration access point and a neighbor access point. The configuration acquiring method comprises the following steps of: A1, discovering neighbor APs (Access Points) through scanning by a first AP in a zero configuration state, sequentially selecting one neighbor AP from the neighbor APs, and reporting a first AP identifier to the selected neighbor AP so that the neighbor AP forwards the first AP identifier to an AC (Access Controller) related to the neighbor AP and the AC determines whether the first AP is permitted to be associated or not according to the first AP identifier; B1, when the first AP receives an association permitted indication which is forwarded from the neighbor AP and comes from the AC, establishing a CAPWAP (Control And Provisioning of Wireless Access Points) channel with the AC, and acquiring self configuration from the AC through the CAPWAP channel; and when the first AP receives an association refused indication sent from the neighbor AP, forwarding to the next neighbor AP; and returning to the step A1. The speed of the zero configuration AP for acquiring the configuration is increased by adopting the invention.

The invention discloses a method and a device of Portal centralized authentication. The method and the device of the Portal centralized authentication utilize a Fit AP flow-based transmitting module. When STA (single thread apartment) authentication is not passed, a private network internet protocol (IP) address is distributed to the un-authenticated STA and a centralized transmitting module is utilized in a default mode and data of all users are intensively transmitted to an AC (auto-coder) to be handled. Corresponding AC interfaces enable the Portal authentication to be handled according to normal Portal process. The AC issues a MAC (physical address) of the authenticated STA and issues instructs to the Fit AP to open a local forwarding function through a control and provisioning of wireless access points (CAPWAP) channel after the Portal authentication of the STA is passed, wherein the local forwarding function are contraposed to the STA. Meanwhile, the AC issues instruments to the Fit AP to break previous wireless connections and the STA starts a DHCP (dynamic host configuration protocol) requirement to obtain a public network IP address. The method and the device of the Portal centralized authentication can not only a solve AC centralized Portal authentication problem under the Fit AP local transmitting condition in existing wireless local area network (WLAN) but also can solve the problem of occupying the public network IP address before a Portal user is authenticated.

This invention discloses one method and agent servo to search interface controller in wireless local network, which comprises the following steps: firstly, the local network comprises one interface point to receive CAPWAP message from interface point; then receiving said CAPWAP message and selecting one interface controller IP address according to the interface controller IP address and sending it to the controller.

The invention discloses a method, a system and a device for recovering control and provisioning for wireless access point (CAPWAP) tunnel. The method comprises the steps that: when the CAPWAP tunnel between an access point (AP) and an access controller (AC) fails, the AP and AC set states as operating information locking states respectively and save the session identifier (ID) of the failed CAPWAP tunnel; the AP locks the saved operating information, aborts the detection for a station and does not respond to the connection request or offline request of the station; the AP interacts with the AC for the tunnel recovery message, the AP and the AC recover states as operating sates respectively to recover the failed CAPWAP tunnel; the message comprises the information about the AP and the AC being in the operation information locked state and the session ID of the failed CAPWAP tunnel; the AP starts the detection for the station to update the operating information. According to the invention, the AP still can keep the service for the station uninterrupted during the recovery of the CAPWAP tunnel.

The invention discloses a data transmission method and data transmission equipment. The method comprises the following steps that: access controller (AC) equipment judges whether a keep-alive message from access point (AP) equipment is received or not; if the keep-alive message from the access point (AP) equipment is received, the AC equipment determines that a controlling and provisioning of wireless access point (CAPWAP) tunnel is normal and acquires a Session ID corresponding to the AP equipment from the keep-alive message; and the AC equipment maintains the information of the CAPWAP tunnel for the AP equipment according to the session ID. The method and the equipment can adapt to different network address translation (NAT) environments and lighten network maintenance burden.

The invention provides a data processing method and a device based on Linux network core, wherein the method comprises up data forward flow, specifically comprises the following steps: an institute of electrical and electronic engineers (IEEE) 802.11 protocol layer intercepts IEEE 802.11 messages and transmits the IEEE 802.11 messages to a link layer of a Linux protocol stack; the link layer of the Linux protocol stack transmits the IEEE 802.11 messages to a Linux network bridge; the network bridge extracts matched IEEE 802.11 management frames and/or IEEE 802.11 data frames according to preset IEEE 802.11 message matching rules; and packaging the matched IEEE 802.11 management frames and/or the IEEE 802.11 data frames into control and configuration protocol control and provisioning of wireless access points (CAPWAP) data messages and transmitting. The application can improve data transmitting efficiency and simultaneously relieving load of an application layer in CAPWAP relative tasks processing.

The invention provides mesh points and a configuration and issuing method thereof in a WLN (Wireless Local Area Network) mesh network. The WLN mesh network comprises an origin MP (Mesh Point) which is an MPP (Mesh Portal Point) which is in wired direct connection with an AP (Access Point) and MPs which are in wireless direct connection with the AP are clone MPs. The configuration and issuing method for the mesh points in the WLN mesh network includes that the origin MP is started, the AC is found and interconnected through wired connection and the configuration information of the clone MPs is downloaded from the AC; also the origin MP discovers every clone MP through mesh scanning; and mesh connections between the origin MP and every clone MP are established and the configuration information of the clone MPs is transmitted to the clone MPs respectively through the mesh connections. According to the mesh points and the configuration and issuing method thereof in the WLN (Wireless Local Area Network) mesh network, the MPs can obtain self-configuration without establishing a CAPWAP channel with the AC.

On the basis of a CAPWAP technology of an existing wireless controller AC on wireless access point equipment AP, control of the AC over the AP on a data surface and a management surface and data collection of a monitoring surface are achieved through an Openflow command and parameter extension by utilizing and extending an Openflow protocol, the function of CAPWAP is replaced with OpenFlow extension, and the full fusion of a wired and wireless integrated network on frame is achieved through normalization of networking protocol Open Flow.

The invention discloses a multi-tunnel transmission device based on user service. The device comprises a control module for users to send configuration orders, a tunnel selection module for analyzing characteristics of messages, and forwarding the messages to different tunnels according to the nature of the messages when uplink and downlink messages enter the system, a first interface drive module for receiving data messages on a wireless side, a second interface drive module for receiving data messages on a wired side, a quick turning module for packing and unpacking tunnels of control and provisioning of wireless access points (CAPWAP) message headers, a business module for packing and unpacking tunnels of corresponding business message headers, and an internet protocol (IP) forwarding module for packing internet protocol message headers, sub-sheets and routers. The device realizes forwarding of various types of different tunnels, improves forwarding efficiency of business data, and reduces forwarding expenditure.

The invention discloses an AP emulation analog system based on a CAPWAP protocol, and belongs to an emulation analog system. The system comprises an AC (Access Controller) and a module connected with the AC, wherein the module comprises an AP setting module, an AP creating module, a port configuration module and a control module; the AP setting module is used for setting the number of the virtual AP and the MAC (Media Access Control ) address of the initial virtual AP; the AP creating module is used for creating each AP according to the number of virtual AP and the initial virtual MAC address set by the AP setting module; the port configuration module is used for distributing a port for each virtual AP created by the AP creating module; the control module is used for controlling the steps that each virtual AP finishes access to the AC. The system has the benefits that through the AP emulation analog system based on the CAPWAP protocol, and the emulation analog test for the AC with large number of AP can be realized. Meanwhile, the system is suitable for product tests performed by AC production manufacturers.

The invention discloses a wireless controller heat backup switching method, a wireless controller heat backup switching device and a wireless controller which are used for enhancing the robustness of a wireless network and reducing the waste of network resources, wherein the wireless controller heat backup switching method comprises the following steps that the initial number of initial on-line access points (APs) is counted; whether a CAPWAP tunnel between the AP is abnormal or not is respectively judged for each on-line AP; every time when the condition that the CAPWAP tunnel between any one on-line AP is abnormal is judged, the number of the current on-line APs is subtracted by 1, and the initial value of the number of the current on-line APs is the counted initial number of the initial on-line APs; and when the number of the current on-line APs meets a preset switching condition, heat backup switching is triggered.