CN101945144A - IP address redistribution method and service node - Google Patents
IP address redistribution method and service node Download PDFInfo
- Publication number
- CN101945144A CN101945144A CN2010102890688A CN201010289068A CN101945144A CN 101945144 A CN101945144 A CN 101945144A CN 2010102890688 A CN2010102890688 A CN 2010102890688A CN 201010289068 A CN201010289068 A CN 201010289068A CN 101945144 A CN101945144 A CN 101945144A
- Authority
- CN
- China
- Prior art keywords
- user side
- service node
- address
- described user
- ipv6
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/50—Address allocation
- H04L61/5007—Internet protocol [IP] addresses
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides an IP address redistribution method. When the permission of a user side on a service node is changed, the service node carries out address redistribution on the user side. The invention also provides the service node which is used for carrying out the address redistribution on the user side when the permission of the user side on the service node is changed. The invention realizes the address redistribution when the permission is changed.
Description
Technical field
The present invention relates to broadband access network, relate in particular to method and service node that IP address that a kind of SLAAC (stateless address distribution) inserts is heavily distributed.
Background technology
The basic networking of existing broadband access network comprises: (AccessNode, AN) (Service Node, SN) equipment obtain the subscriber policy of address and operator's distribution to equipment access service node to subscriber's main station at SN equipment by access node.The user inserts and comprises IPv4 and IPv6 access now.
IPv6 renumbering technology is one of standard technique of IPv6, and the heavy distribution technique in IPv6 address requires router can redistribute the IPv6 prefix, because subscriber's main station relies on the IPv6 prefix to generate the IPv6 address.Obtained at the IPv6 main frame under the prerequisite of IPv6 address, the router of distributing IP v6 address can change the IPv6 address of IPv6 main frame, makes the IPv6 main frame can use new address communication.
Present this technology exists 2 application scenarioss, and is as follows respectively:
Application scenarios 1: the authority of the control IPv6 of operator prefix 1 and the authority of IPv6 prefix 2 are different, so when the IPv6 main frame uses the address of IPv6 prefix 1 generation, if the needs of change authority are arranged, for example need to visit new network and use new business, the user must use the address that IPv6 prefix 2 generates so, and need the IPv6 router to distribute prefix to the user again this moment.
Application scenarios 2: operator is because the reason of networking, planning has been revised the spendable prefix of IPv6 user, and this moment, the IPv6 prefix that the user is new need be informed so that IPv6 user obtains the address again by operator, also needs to use the heavy distribution function in IPv6 address this moment.
Present IPv6 broadband access framework mainly is to go up at SN (service node) to realize the IPv6 address allocation function, and there is dual mode distributing IP v6 address for SN, SLAAC (stateless address distribution) and DHCPv6 mode.
Prior art is for the DHCPv6 mode, and SN has DHCPv6 Reconfigure (reshuffling) to solve the heavy assignment problem in IPv6 address, promptly after authentication, sends the message of reshuffling by SN to DHCPv6 client and triggers the user and obtain the address with authority again.
But for most of IPv6 main frame, support the also few of DHCPv6, most of IPv6 main frame is still supported the access way of SLAAC.For the SLAAC mode, the function that traditional SN only just can use the IPv6 address heavily to distribute during config update on SN, but for following complicated application, the support that this IPv6 heavily distributes the address is nowhere near.
Summary of the invention
According to above description, main purpose of the present invention is to provide a kind of IPv6 method that the address is heavily distributed and service node, being implemented under the SLAAC access situation, and the redistributing of IPv6 address.
In order to address the above problem, the invention provides a kind of IP address redistribution method, comprising:
When the permission modification of user side on described service node, described service node carries out the address to described user side and heavily distributes.
Further, said method also can have following characteristics, and described service node carries out the address to described user side and heavily distributes and comprise:
Described service node sends the existing address prefix of described user side and the address prefix redistributed to described user side, and the Prefarred Lifetime of described existing address prefix and Valid Lifetime are changed to 0.
Further, said method also can have following characteristics, and described service node is sent to described user side by a router advertisement message with existing address prefix of described user side and the address prefix of redistributing; Perhaps, respectively existing address prefix of described user side and the address prefix of redistributing are sent to described user side by twice router advertisement message.
Further, said method also can have following characteristics, and the permission modification on described service node of described user side comprises:
After described user side authenticates, permission modification takes place, perhaps, described service node changes the authority of user side.
Further, said method also can have following characteristics, when the permission modification of described user side on described service node, described service node carries out before the address heavily distributes described user side, user side is by SLAAC mode access service node, specifically comprise: described user side directly obtains the IPv6 prefix by the SLAAC mode, perhaps, obtains the IPv6 prefix by the SLAAC mode indirectly.
The present invention also provides a kind of service node, and described service node is used for described user side being carried out the address heavily distributing when the permission modification of user side on described service node.
Further, above-mentioned service node also can have following characteristics, described service node be used to send the existing address prefix of described user side and the address prefix redistributed to described user side, and the Preferred Lifetime of described existing address prefix and Valid Lifetime are changed to 0.
Further, above-mentioned service node also can have following characteristics, and described service node is used for by a router advertisement message existing address prefix of described user side and the address prefix of redistributing being sent to described user side; Perhaps, respectively existing address prefix of described user side and the address prefix of redistributing are sent to described user side by twice router advertisement message.
Further, above-mentioned service node also can have following characteristics, and described user side comprises in the permission modification on the described service node: after described user side authenticates, permission modification takes place, perhaps, described service node changes the authority of described user side.
Further, above-mentioned service node also can have following characteristics, and described service node is Broadband Remote Access Server (BRAS) or service router (SR).
Carrying out the address when the present invention has realized permission modification heavily distributes.
Description of drawings
Fig. 1 is a network topology schematic diagram involved in the present invention;
Fig. 2 is a flow chart of the present invention;
Fig. 3 is a first embodiment of the present invention flow chart;
Fig. 4 is a second embodiment of the present invention flow chart;
Fig. 5 is a third embodiment of the present invention flow chart.
Embodiment
For SN, may use different IPv6 addresses to come to distribute different authorities to the user.The invention provides a kind ofly when authority changes, the SLAAC mode is inserted user's the heavy distribution technique in IPv6 address.
The present invention obtains the method that the IPv6 address of IPv6 address mode is heavily distributed to SLAAC, be to be based upon the IPv6 main frame to obtain on the basis of IPv6 address by SLAAC, when SN goes up the change of user right, by in the old IPv6 prefix Preferred Lifetime (first-selected life cycle) and ValidLifetime (effective life cycle) field being put 0 and reach client IPv6 address change.
IPv6 of the present invention address redistribution method is applied to as shown in Figure 2, comprise following steps in the network of IPv6:
The IPv6 user side generates the IPv6 address by the SLAAC mode;
When the IPv6 user side on SN permission modification took place, this IPv6 user needed the IPv6 address heavily to distribute after SN judged permission modification;
SN triggers RA (router advertisement) message immediately and takes place by its ND (Neighbor Discovery, neighbours find) module.In the described RA message, comprise old IPv6 prefix option and the IPv6 prefix option of redistributing, at this moment, the Preferred Lifetime and the Valid Lifetime of old IPv6 prefix are changed to 0;
The New-deployed Network of IPv6 user side connected and can the new IPv6 prefix of use communicate by letter this moment.
Further, the redistribution method of above-mentioned IP v6 address also can have following characteristics: described IPv6 user side, both comprised the IPv6 user side that directly obtains the IPv6 prefix, comprised also that PPPoEv6 or L2TPv6 etc. obtained the user side of IPv6 prefix indirectly by the SLAAC mode by the SLAAC mode.
Further, the redistribution method of above-mentioned IP v6 address also can have following characteristics: the permission modification of described IPv6 user side, comprise the mode permission modification for example web authentication of IPv6 user side by authentication, comprise that also strategic server requires for example COA (Change of authorization, permission modification) mandate of described IPv6 user side permission modification by initiatively authorizing.
Further, the redistribution method of above-mentioned IP v6 address also can have following characteristics: the permission modification of described IPv6 user side, comprise (emote Authentication Dial In UserService by RADIUS, the remote customer dialing authentication system), COPS (Common Open Policy Service, public open policy service protocol) or DIAMETER protocol variation authority.
Further, the redistribution method of above-mentioned IP v6 address also can have following characteristics: described SN, BRAS (the Broadband Remote Access Server that had both comprised traditional sense, Broadband Remote Access Server), SR (service router), also comprise other switches and router with IPv6 SLAAC distribution function.
Further, the redistribution method of above-mentioned IP v6 address also can have following characteristics: described IPv6 prefix option also can be by authentication (for example: IPSec) obtain.
Further, the redistribution method of above-mentioned IP v6 address also can have following characteristics: for the new and old prefix of IPv6 user side, also can send to the IPv6 user side respectively by 2 RA messages.
First embodiment
The web authentication user reaches the standard grade and obtains the IPv6 address by SLAAC, the user by web authentication after SN User IP v6 prefix is heavily distributed, as shown in Figure 3, comprising:
Step 301, the web authentication user obtains the IPv6 address by SLAAC, and the state of SN is unverified;
Step 302, the web authentication user is by web authentication, and authentication back SN judgement user right changes and need user's IPv6 address prefix heavily be distributed;
Step 303, SN sends the RA message, in the described RA message, comprises old IPv6 prefix option and the IPv6 prefix option of redistributing, and at this moment, the Preferred Lifetime and the Valid Lifetime of old IPv6 prefix are changed to 0;
Step 304, IPv6 client computer be according to the Preferred Lifetime and the Valid Lifetime option of old IPv6 prefix in the RA message, and the IPv6 address that will generate according to new IPv6 prefix is as preferred address, and the user uses new IPv6 address accesses network.
Second embodiment
The user reaches the standard grade and obtains the IPv6 address by SLAAC, and external policy server changes user right by COA, as shown in Figure 4, comprising:
Step 401, the user obtains the IPv6 address by SLAAC;
Step 402, external policy server requires SN to change user right by COA and triggers IPv6 and heavily distribute, and SN heavily distributes according to the requirement startup IPv6 address of external policy server;
Step 403, SN sends the RA message, comprises old IPv6 prefix option and the IPv6 prefix option of redistributing in the described RA message, and at this moment, the Preferred Lifetime and the ValidLifetime of old IPv6 prefix are changed to 0;
Step 404, IPv6 client computer be according to the Preferred Lifetime and the Valid Lifetime option of old IPv6 prefix in the RA message, and the IPv6 address that will generate according to new IPv6 prefix is as preferred address, and the user uses new IPv6 address accesses network.
The 3rd embodiment
The user reaches the standard grade and obtains the IPv6 address by SLAAC, and external policy server is cancelled authority after changing user right by COPS again, as shown in Figure 5, comprising:
Step 501, the user obtains the IPv6 address by SLAAC;
Step 502, the user logins the web webpage of operator, the program request value-added service, the COPS server on backstage, operator website is by COPS protocol changes user's permission accessed web page authority;
Step 503, SN sends the RA message, in the RA message, comprises old IPv6 prefix option and the IPv6 prefix option of redistributing, and at this moment, the Preferred Lifetime and the ValidLifetime of old IPv6 prefix are changed to 0;
Step 504, IPv6 client computer be according to the Preferred Lifetime and the Valid Lifetime option of old IPv6 prefix in the RA message, and the IPv6 address that will generate according to new IPv6 prefix is as preferred address, and the user uses new IPv6 address accesses network;
Step 505, the user uses value-added service, in the web of operator webpage cancellation value-added service.The value-added service authority is cancelled by the COPS agreement in the backstage of operator on SN;
Step 506, SN sends the RA message, in the RA message, comprises IPv6 prefix option that can use value-added service and the IPv6 prefix option of redistributing, and at this moment, can use the Preferred Lifetime and the Valid Lifetime of the IPv6 prefix of value-added service to be changed to 0;
Step 507, the IPv6 client computer is according to the Preferred Lifetime and the Valid Lifetime option of the IPv6 prefix that can use value-added service in the RA message, the IPv6 address that will generate according to the IPv6 prefix redistributed is as preferred address, and the user uses new IPv6 address accesses network.
The present invention can be applied to the environment of the corresponding different rights in different addresses.
Claims (10)
1. an IP address redistribution method is characterized in that, comprising:
When the permission modification of user side on service node, described service node carries out the address to described user side and heavily distributes.
2. the method for claim 1 is characterized in that, described service node carries out the address to described user side and heavily distributes and comprise:
Described service node sends the existing address prefix of described user side and the address prefix redistributed to described user side, and first-selected life cycle of described existing address prefix and effectively be changed to 0 life cycle.
3. method as claimed in claim 2 is characterized in that, described service node is sent to described user side by a router advertisement message with existing address prefix of described user side and the address prefix of redistributing; Perhaps, respectively existing address prefix of described user side and the address prefix of redistributing are sent to described user side by twice router advertisement message.
4. as claim 1,2 or 3 described methods, it is characterized in that the permission modification on described service node of described user side comprises:
After described user side authenticates, permission modification takes place, perhaps, described service node changes the authority of user side.
5. as claim 1,2 or 3 described methods, it is characterized in that, when the permission modification of described user side on described service node, described service node carries out before the address heavily distributes described user side, user side distributes (SLAAC) mode access service node by stateless address, specifically comprise: described user side directly obtains the IPv6 prefix by the SLAAC mode, perhaps, obtains the IPv6 prefix by the SLAAC mode indirectly.
6. a service node is characterized in that,
Described service node is used for described user side being carried out the address heavily distributing when the permission modification of user side on described service node.
7. service node as claimed in claim 6, it is characterized in that, described service node be used to send the existing address prefix of described user side and the address prefix redistributed to described user side, and first-selected life cycle of described existing address prefix and effectively be changed to 0 life cycle.
8. service node as claimed in claim 7 is characterized in that, described service node is used for by a router advertisement message existing address prefix of described user side and the address prefix of redistributing being sent to described user side; Perhaps, respectively existing address prefix of described user side and the address prefix of redistributing are sent to described user side by twice router advertisement message.
9. as the arbitrary described service node of claim 6 to 8, it is characterized in that described user side comprises in the permission modification on the described service node: after described user side authenticates, permission modification takes place, perhaps, described service node changes the authority of described user side.
10. as the arbitrary described service node of claim 6 to 8, it is characterized in that described service node is Broadband Remote Access Server (BRAS) or service router (SR).
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2010102890688A CN101945144A (en) | 2010-09-14 | 2010-09-14 | IP address redistribution method and service node |
| PCT/CN2011/076129 WO2012034428A1 (en) | 2010-09-14 | 2011-06-22 | Method and service node for ip address reassignment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2010102890688A CN101945144A (en) | 2010-09-14 | 2010-09-14 | IP address redistribution method and service node |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101945144A true CN101945144A (en) | 2011-01-12 |
Family
ID=43436912
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2010102890688A Pending CN101945144A (en) | 2010-09-14 | 2010-09-14 | IP address redistribution method and service node |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN101945144A (en) |
| WO (1) | WO2012034428A1 (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2012034428A1 (en) * | 2010-09-14 | 2012-03-22 | 中兴通讯股份有限公司 | Method and service node for ip address reassignment |
| CN102932371A (en) * | 2012-11-20 | 2013-02-13 | 杭州华三通信技术有限公司 | Method for realizing communication between IPv6 private network node and public network node and routing forwarding equipment |
| WO2015131568A1 (en) * | 2014-09-24 | 2015-09-11 | 中兴通讯股份有限公司 | Ipv6 address management method, device and terminal, and gateway device |
| CN107547528A (en) * | 2017-08-18 | 2018-01-05 | 新华三技术有限公司 | IPv6 stateless address distribution method and device |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1523815A (en) * | 2003-02-21 | 2004-08-25 | 北京润汇科技有限公司 | Customer access management system for wideband network |
| CN1744597A (en) * | 2004-09-01 | 2006-03-08 | 华为技术有限公司 | Method for host use obtaining IP address parameters in IPV6 network |
| CN1798158A (en) * | 2004-12-21 | 2006-07-05 | 华为技术有限公司 | Method for distributing second level address |
| CN1929496A (en) * | 2005-09-09 | 2007-03-14 | 上海贝尔阿尔卡特股份有限公司 | Network address reconstruction method in IPv6 switch-in network |
| WO2007138056A1 (en) * | 2006-05-30 | 2007-12-06 | Siemens Aktiengesellschaft | Method for increasing handoff speed of mobile node in wireless lan and the mobile node |
| CN101374098A (en) * | 2007-08-22 | 2009-02-25 | 华为技术有限公司 | Method, apparatus and terminal for managing address resource |
| CN101527671A (en) * | 2008-03-03 | 2009-09-09 | 华为技术有限公司 | Method, equipment and system for realizing IPv6 conversation |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101184099B (en) * | 2007-12-14 | 2012-06-06 | 中兴通讯股份有限公司 | Second IP address assignment method based on dynamic host machine configuration protocol access authentication |
| CN101753635A (en) * | 2008-12-17 | 2010-06-23 | 华为技术有限公司 | Method and system of collocating IPV6 (internet protocol version 6) addresses |
| CN101945144A (en) * | 2010-09-14 | 2011-01-12 | 中兴通讯股份有限公司 | IP address redistribution method and service node |
-
2010
- 2010-09-14 CN CN2010102890688A patent/CN101945144A/en active Pending
-
2011
- 2011-06-22 WO PCT/CN2011/076129 patent/WO2012034428A1/en active Application Filing
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1523815A (en) * | 2003-02-21 | 2004-08-25 | 北京润汇科技有限公司 | Customer access management system for wideband network |
| CN1744597A (en) * | 2004-09-01 | 2006-03-08 | 华为技术有限公司 | Method for host use obtaining IP address parameters in IPV6 network |
| CN1798158A (en) * | 2004-12-21 | 2006-07-05 | 华为技术有限公司 | Method for distributing second level address |
| CN1929496A (en) * | 2005-09-09 | 2007-03-14 | 上海贝尔阿尔卡特股份有限公司 | Network address reconstruction method in IPv6 switch-in network |
| WO2007138056A1 (en) * | 2006-05-30 | 2007-12-06 | Siemens Aktiengesellschaft | Method for increasing handoff speed of mobile node in wireless lan and the mobile node |
| CN101374098A (en) * | 2007-08-22 | 2009-02-25 | 华为技术有限公司 | Method, apparatus and terminal for managing address resource |
| CN101527671A (en) * | 2008-03-03 | 2009-09-09 | 华为技术有限公司 | Method, equipment and system for realizing IPv6 conversation |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2012034428A1 (en) * | 2010-09-14 | 2012-03-22 | 中兴通讯股份有限公司 | Method and service node for ip address reassignment |
| CN102932371A (en) * | 2012-11-20 | 2013-02-13 | 杭州华三通信技术有限公司 | Method for realizing communication between IPv6 private network node and public network node and routing forwarding equipment |
| CN102932371B (en) * | 2012-11-20 | 2015-09-09 | 杭州华三通信技术有限公司 | Realize IPv6 private network node and the method communicated between common network node and routing forwarding equipment |
| WO2015131568A1 (en) * | 2014-09-24 | 2015-09-11 | 中兴通讯股份有限公司 | Ipv6 address management method, device and terminal, and gateway device |
| CN105516375A (en) * | 2014-09-24 | 2016-04-20 | 中兴通讯股份有限公司 | IPv6 address management method and apparatus, terminal and gateway device |
| CN107547528A (en) * | 2017-08-18 | 2018-01-05 | 新华三技术有限公司 | IPv6 stateless address distribution method and device |
| CN107547528B (en) * | 2017-08-18 | 2020-04-24 | 新华三技术有限公司 | IPv6 stateless address allocation method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2012034428A1 (en) | 2012-03-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106797407B (en) | Dynamic generation of unique identifiers in an internet of things system | |
| US9154378B2 (en) | Architecture for virtualized home IP service delivery | |
| US8401028B2 (en) | Selection of an edge node in a fixed access communication network | |
| CN101692674B (en) | Method and equipment for double stack access | |
| CN102771149B (en) | For the system and method for managing I Pv6 address and access strategy | |
| US20150188769A1 (en) | Method and device thereof for automatically finding and configuring virtual network | |
| US20190166210A1 (en) | Method for accessing a content hosted on a server selected as a function of the location of the user terminal | |
| EP3108643B1 (en) | Ipoe dual-stack subscriber for routed residential gateway configuration | |
| CN103384282B (en) | The method and BRAS of a kind of acquisition IPV6ND addresses | |
| CN104468853A (en) | Domain name resolution method, server and system | |
| CN112217653B (en) | Strategy issuing method, device and system | |
| CN103581350A (en) | Method, terminals, equipment and system for publishing Internet services across NAT | |
| EP3108642B1 (en) | Ipoe dual-stack subscriber for bridged residential gateway configuration | |
| CN101945144A (en) | IP address redistribution method and service node | |
| CN102281189B (en) | Service implementation method and device based on private attribute of third-party equipment | |
| KR20080111550A (en) | Assignment of policy function address during access authentication in wimax networks | |
| CN100365591C (en) | Network address distributing method based on customer terminal | |
| CN104883683B (en) | A kind of APN access restriction methods and GGSN | |
| CN102572002B (en) | Dynamic domain name update method and system | |
| KR20070024116A (en) | System for managing network service connection based on terminal aucthentication | |
| CN101971569A (en) | Method and device for transferring packet in ipv6 access node | |
| CN1798158A (en) | Method for distributing second level address | |
| KR100745434B1 (en) | Differentiated connectivity in a pay-per-use public data access system | |
| CN101453396B (en) | Method and system for multiple service provider device management | |
| CN109962831B (en) | Virtual client terminal device, router, storage medium, and communication method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20110112 |