CN103118434B - Dynamically for user allocates the method and apparatus of VLAN - Google Patents

Dynamically for user allocates the method and apparatus of VLAN Download PDF

Info

Publication number
CN103118434B
CN103118434B CN201310035529.2A CN201310035529A CN103118434B CN 103118434 B CN103118434 B CN 103118434B CN 201310035529 A CN201310035529 A CN 201310035529A CN 103118434 B CN103118434 B CN 103118434B
Authority
CN
China
Prior art keywords
vlan
customer flow
user
minimum
flow
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201310035529.2A
Other languages
Chinese (zh)
Other versions
CN103118434A (en
Inventor
徐勇刚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
New H3C Technologies Co Ltd
Original Assignee
Hangzhou H3C Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou H3C Technologies Co Ltd filed Critical Hangzhou H3C Technologies Co Ltd
Priority to CN201310035529.2A priority Critical patent/CN103118434B/en
Publication of CN103118434A publication Critical patent/CN103118434A/en
Application granted granted Critical
Publication of CN103118434B publication Critical patent/CN103118434B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Small-Scale Networks (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

This application provides a kind of dynamically for user allocates the method and apparatus of VLAN.Does is the method applied to the access device supporting 802.1X agreement, comprising: obtain the VLAN group GROUP belonging to the user passing through certification from certificate server, described VLAN? GROUP comprises at least one VLAN; Travel through described VLAN successively? customer flow in GROUP in each VLAN, finds and has the minimum VLAN of customer flow; To there is the minimum VLAN of customer flow as described described in finding by the VLAN belonging to the user of certification.Adopt the present invention, when can distribute VLAN the user for newly reaching the standard grade, be not as prior art according to number of users in VLAN for user distributes VLAN, but according to the VLAN belonging to customer flow dynamic conditioning user, really realize VLAN? load balancing in GROUP between each VLAN.

Description

Dynamically for user allocates the method and apparatus of VLAN
Technical field
The application relates to the network communications technology, particularly dynamically for user allocates the method and apparatus of VLAN (VLAN, VirtualLocalAreaNetwork).
Background technology
802.1X agreement proposes for solving wireless lan network safety problem.Afterwards, 802.1X agreement was widely used in ethernet networks as a common access control mechanism of lan port, mainly solved the problem of certification and secure context in Ethernet.
802.1X agreement is a kind of Network access control agreement (portbasednetworkaccesscontrolprotocol) based on port.Wherein, " Network access control based on port " refers to and carries out certification and control in this one-level of port of LAN Gateway to accessed subscriber equipment.If the subscriber equipment be connected on port is by certification, the resource in local area network (LAN) just can be accessed; If not by certification, then cannot access the resource in local area network (LAN).
802.1X system is typical Client/Server structure, as shown in Figure 1, comprises three entities: client (Client), access device (Device) and certificate server (Server).
Wherein, client is the entity being positioned at LAN one end, is connected to access device, carries out certification by access device.Client is generally a subscriber terminal equipment, and user can initiate 802.1X certification by starting client software.Client supports the Extensible Authentication Protocol (EAPOL, ExtensibleAuthenticationProtocoloverLAN) on local area network (LAN).
Access device is another entity being positioned at the LAN other end, carries out certification to connected client.Access device end is the network equipment supporting 802.1X agreement, and it provides the port of access to LAN for client, and this port can be physical port, also can be logic port.
Certificate server is for access device provides the entity of authentication service.Certificate server is used for realizing carrying out authentication, authorization, accounting to user, be generally remote authentication dial-in user service (RADIUS, RemoteAuthenticationDial-InUserService) server is all radius server below with certificate server for example is described.
Above 802.1X system is described, below the verification process of 802.1X system is described:
At present, 802.1X system supports that EAP trunking scheme and EAP termination mode and far-end radius server complete certification alternately.These two kinds of authentication modes all initiatively initiate certification for client, only describe verification process for EAP trunking scheme below:
See the EAP trunking scheme identifying procedure figure that Fig. 2, Fig. 2 are 802.1X Verification System.As shown in Figure 2, this flow process can comprise:
When user has accesses network demand, client initiates connection request such as EAPOL-Start message.Also namely, send connection request such as EAPOL-Start message by client, to access device, to start to start a verification process.
Access device receives connection request as after EAPOL-Start message, is used for sending one the request message such as EAP-Request/Identity message that requirement client sends user name.
The request message that client end response access device sends, sends to access device by username information by Frame such as EAP-Response/Identity message.
The Frame that client sends by access device, is treated to RADIUSAccess-Request message through package by username information by Frame such as EAP-Response/Identity message and is given radius server.
Radius server extracts username information from the RADIUSAccess-Request message received, user's famous-brand clock in this username information and database is contrasted, find the encrypted message that this user name is corresponding, by an encrypted word of stochastic generation, this encrypted message is encrypted, simultaneously also this encrypted word is carried at EAP-Request/MD5Challenge message, and RADIUSAccess-Challenge message is treated to this EAP-Request/MD5Challenge message package sends to access device end.
After access device receives RADIUSAccess-Challenge message, the EAP-Request/MD5Challenge message in this RADIUSAccess-Challenge message is sent to client.
After client receives the EAP-Request/MD5Challenge message transmitted by access device, the encrypted message of encrypted word to local record carried with this EAP-Request/MD5Challenge message is encrypted (this kind of cryptographic algorithm is normally irreversible), and be carried at EAP-Response/MD5Challenge message, pass to radius server by access device.
After radius server receives RADIUSAccess-Request message, the encrypted message encrypted carried by this RADIUSAccess-Request message and local encrypted message after cryptographic calculation contrast, if identical, then think that this user is for validated user, the message (RADIUSAccess-Accept message and EAP-Success message) that feedback certification is passed through.
Access device receives certification by changing the port connecting client into licensing status after message, allows client by port access network.Now, mean that user reaches the standard grade; During this period, access device by regularly sending the method for handshake message to client, can be monitored the online situation of user.Under default condition, twice handshake request message all can not get client response, and equipment end will allow user offline, and equipment cannot perception because abnormal cause rolls off the production line to prevent user.Certainly, client also can send EAPOL-Logoff message to equipment end, and initiative rolls off the production line, and access device end changes over unauthorized state the port connecting this client from licensing status, and sends EAP-Failure message to client.
So far, the identifying procedure shown in Fig. 2 is completed.
As above, if be connected to the subscriber equipment on port by certification, the resource in local area network (LAN) can just accessed; But along with the development of express network, people are more and more higher to bandwidth requirement, when in subscriber cluster, bandwidth does not often reach requirement.For this situation, at present, for 802.1X, mainstream vendor carrys out isolated vlan by issuing VLAN group (VLAN-GROUP), comes user-isolated, reach the object of load balancing by isolated vlan.10 VLAN are always had in VLAN-GROUP as access device configuration, when access device detects that arbitrary user that it connects reaches the standard grade, if this user belongs to the VLAN-GROUP of this configuration, then access device checks the user in this VLAN-GROUP in each VLAN, find and there is the minimum VLAN of user, the user newly reached the standard grade this detected is divided in this VLAN, like this, can ensure that each user is uniformly distributed in the different vlans, realize the object of load balancing.
But, above by the number of users in VLAN be the user newly reached the standard grade distribute VLAN mode can not meticulous differentiation user traffic demand, such as, although the user's quantity in VLAN-GROUP in some VLAN is little, but the bandwidth ratio of demand is higher, such as often download software and film, and although user's quantity in some VLAN is a lot, but the bandwidth of demand is not high, it is such as browsing page, like this, be that the user newly reached the standard grade distributes VLAN according to the number of users in VLAN, the customer flow in certain VLAN likely can be caused very large, and number of users in some other VLAN is a lot, but flow is very little, do not reach the object of load balancing.
Summary of the invention
This application provides dynamically for user allocates the method and apparatus of VLAN, with the VLAN belonging to customer flow dynamic conditioning user, realize load balancing.
The technical scheme that the application provides comprises:
Dynamically for user allocates a method for virtual LAN VLAN, the method is applied to the access device supporting 802.1X agreement, comprising:
Obtain the VLAN group GROUP belonging to the user passing through certification from certificate server, described VLANGROUP comprises at least one VLAN;
Travel through the customer flow in each VLAN in described VLANGROUP successively, find and there is the minimum VLAN of customer flow;
To there is the minimum VLAN of customer flow as described described in finding by the VLAN belonging to the user of certification.
Dynamically for user allocates a device for virtual LAN VLAN, this application of installation, in the access device supporting 802.1X agreement, comprising:
Acquiring unit, for obtaining the VLAN group GROUP belonging to the user passing through certification from certificate server, described VLANGROUP comprises at least one VLAN;
Search unit, for traveling through the customer flow in described VLANGROUP in each VLAN successively, finding and there is the minimum VLAN of customer flow;
Determining unit, for having the minimum VLAN of customer flow described in finding as described by the VLAN belonging to the user of certification.
As can be seen from the above technical solutions, in the present invention, when the user for newly reaching the standard grade distributes VLAN, be not as prior art according to number of users in VLAN for user distributes VLAN, but according to the VLAN belonging to customer flow dynamic conditioning user, really realize the load balancing between each VLAN in VLANGROUP.
Accompanying drawing explanation
Fig. 1 is the structural representation of 802.1X system;
Fig. 2 is the EAP trunking scheme identifying procedure figure of 802.1X Verification System;
The method flow diagram that Fig. 3 provides for the embodiment of the present invention;
The determination flow chart with the minimum VLAN of customer flow that Fig. 4 provides for the embodiment of the present invention;
The flow chart of VLAN belonging to the dynamic conditioning user that Fig. 5 provides for the embodiment of the present invention;
The structure drawing of device that Fig. 6 provides for the embodiment of the present invention.
Embodiment
In order to make the object, technical solutions and advantages of the present invention clearly, describe the present invention below in conjunction with the drawings and specific embodiments.
Method provided by the invention is not according to number of users in VLAN for user distributes VLAN, but according to the VLAN belonging to customer flow dynamic conditioning user, really realizes the load balancing between each VLAN in VLANGROUP.
Below by Fig. 3, the method that the embodiment of the present invention provides is described:
See the method flow diagram that Fig. 3, Fig. 3 provide for the embodiment of the present invention.The method is applied to the access device supporting 802.1X agreement, and as shown in Figure 3, the method can comprise the following steps:
Step 301, obtain the VLAN group GROUP belonging to the user passing through certification from certificate server, described VLANGROUP comprises at least one VLAN.
In the present invention, after certificate server such as radius server carries out certification to user, it can send one for representing the message such as Accept message that certification is passed through to this by the access device that the user of certification accesses.
Wherein, the present invention expands for the message such as Accept message representing certification and pass through this, carries this by the VLANGROUP belonging to the user of certification to make it.
Preferably, in the present invention, No. 81 attributes by radius attribute expansion carry the mark of VLANGROUP, and pass through for representing that the message such as Accept message that certification is passed through sends to access device.
When access device receives for after representing the message such as Accept message that certification is passed through, VLANGROUP mark is extracted from this message, be identified at according to this VLANGROUP in all VLANGROUP of local configuration and find corresponding VLANGROUP, the VLANGROUP this found is as by the VLANGROUP belonging to the user of certification.
Step 302, travels through the customer flow in each VLAN in described VLANGROUP successively, finds and has the minimum VLAN of customer flow.
Preferably, in this step 302, find by the following steps hereafter shown in Fig. 4 and there is the minimum VLAN of customer flow.
Step 303, will have the minimum VLAN of customer flow described in finding as described by the VLAN belonging to the user of certification.
Afterwards, should by carrying out flow transmission in the VLAN of the user of certification just belonging to it.
So far, the flow process shown in Fig. 3 is completed.
See the determination flow chart with the minimum VLAN of customer flow that Fig. 4, Fig. 4 provide for the embodiment of the present invention.As shown in Figure 4, this flow process can comprise the following steps:
Step 401, for each VLAN traversed, calculates the residual available bandwidth value of this VLAN.
Here, the residual available bandwidth value calculating this VLAN specifically realizes by following formula 1:
Number of users in customer flow * VLAN in T1=T-(VLAN).(formula 1)
Wherein, T is default VLAN maximum available bandwidth threshold value, and T1 is the residual available bandwidth value of VLAN.
Step 402, selects the residual available bandwidth value that value is maximum from the residual available bandwidth value of each VLAN calculated.
Step 403, will have the VLAN of the residual available bandwidth value that this is selected as having the minimum VLAN of customer flow.
So far, the flow process shown in Fig. 4 is completed.
Preferably, for realizing the load balancing in VLANGROUP between each VLAN, in the present invention, also need to perform the flow process shown in Fig. 5.
The flow chart of VLAN belonging to the dynamic conditioning user provided for the embodiment of the present invention see Fig. 5, Fig. 5.As shown in Figure 5, this flow process can comprise the following steps:
Step 501, makes regular check on the customer flow in each VLAN in described VLANGROUP.
Here, proof cycle can be configured based on practical application, and the present invention does not specifically limit.
Step 502, when checking out that the customer flow in arbitrary VLAN meets or exceeds setting flow, migrates at least one user in this VLAN in the minimum VLAN of customer flow automatically.
Preferably, in the present invention, the automatically user in this VLAN migrated in the minimum VLAN of customer flow and can comprise in step 502:
Calculate the difference M of the customer flow in VLAN1 and the customer flow in VLAN2, here, described VLAN1 is the VLAN that customer flow meets or exceeds setting flow, and described VLAN2 is the VLAN that in described VLANGROUP, customer flow is minimum;
Utilize described M with the customer flow available bandwidth preset and determine the number of users N needing to migrate to VLAN2 in VLAN1 according to the mode of load balancing;
Automatically the N number of user in this VLAN1 is migrated to VLAN2.
Wherein, as one embodiment of the present of invention, N determines by following formula 2:
N=N1/2, N1=M/P, P are default customer flow available bandwidth.(formula 2)
Such as, if each VLAN maximum available bandwidth threshold value is 100M, the customer flow available bandwidth preset is 10M, if the VLAN that in current VLANGROUP, customer flow is maximum is VLAN1, customer flow in VLAN1 is 90M, and the VLAN that in current VLANGROUP, customer flow is minimum is VLAN2, customer flow in VLAN2 is 50M, the difference that then can calculate the customer flow between VLAN1 and VLAN is 40M, based on above-mentioned formula 2, then calculate N=2, namely needing moves to the interior from VLAN1 shifts out 2 users to VLAN2, now this VLAN belonging to 2 users moved out is just updated to VLAN2 from VLAN1, work is carried out in VLAN2.
So far, complete method provided by the invention to describe.
Below device provided by the invention is described:
See the structure drawing of device that Fig. 6, Fig. 6 provide for the embodiment of the present invention.This device can dynamically for user allocates virtual LAN VLAN, and it is applied particularly to the access device supporting 802.1X agreement, and as shown in Figure 6, this device comprises:
Acquiring unit, for obtaining the VLAN group GROUP belonging to the user passing through certification from certificate server, described VLANGROUP comprises at least one VLAN;
Search unit, for traveling through the customer flow in described VLANGROUP in each VLAN successively, finding and there is the minimum VLAN of customer flow;
Determining unit, for having the minimum VLAN of customer flow described in finding as described by the VLAN belonging to the user of certification.
Preferably, in the present invention, described in search unit and find the VLAN having customer flow minimum to comprise by following steps:
For each VLAN traversed, calculate the residual available bandwidth value of this VLAN;
The residual available bandwidth value that value is maximum is selected from the residual available bandwidth value of each VLAN calculated;
To there is the VLAN of the residual available bandwidth value that this is selected as having the minimum VLAN of customer flow.
Preferably, in the present invention, as shown in Figure 6, this device comprises further:
Adjustment unit, for making regular check on the customer flow in described VLANGROUP in each VLAN, when checking out that the customer flow in arbitrary VLAN meets or exceeds setting flow, automatically at least one user in this VLAN is migrated in the minimum VLAN of customer flow.
Preferably, in the present invention, the VLAN that the user in this VLAN migrates to customer flow minimum is comprised by following steps by described adjustment unit automatically:
Calculate the difference M of the customer flow in VLAN1 and the customer flow in VLAN2, described VLAN1 is the VLAN that customer flow meets or exceeds setting flow, and described VLAN2 is the VLAN that in described VLANGROUP, customer flow is minimum;
Utilize described M with the customer flow available bandwidth preset and determine the number of users N needing to migrate to VLAN2 in VLAN1 according to the mode of load balancing;
Automatically the N number of user in this VLAN1 is migrated to VLAN2.
So far, complete the device shown in Fig. 6 to describe.
As can be seen from the above technical solutions, in the present invention, when the user for newly reaching the standard grade distributes VLAN, be not as prior art according to number of users in VLAN for user distributes VLAN, but according to the VLAN belonging to customer flow dynamic conditioning user, really realize the load balancing between each VLAN in VLANGROUP.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, within the spirit and principles in the present invention all, any amendment made, equivalent replacement, improvement etc., all should be included within the scope of protection of the invention.

Claims (8)

1., dynamically for user allocates a method for virtual LAN VLAN, the method is applied to the access device supporting 802.1X agreement, and it is characterized in that, the method comprises:
Obtain the VLAN group GROUP belonging to the user passing through certification from certificate server, described VLANGROUP comprises at least one VLAN;
Travel through the customer flow in each VLAN in described VLANGROUP successively, find and there is the minimum VLAN of customer flow;
To there is the minimum VLAN of customer flow as described described in finding by the VLAN belonging to the user of certification.
2. method according to claim 1, is characterized in that, described in find the VLAN having customer flow minimum to comprise:
For each VLAN traversed, calculate the residual available bandwidth value of this VLAN;
The residual available bandwidth value that value is maximum is selected from the residual available bandwidth value of each VLAN calculated;
To there is the VLAN of the residual available bandwidth value that this is selected as having the minimum VLAN of customer flow.
3. method according to claim 1, is characterized in that, the method comprises further:
Make regular check on the customer flow in each VLAN in described VLANGROUP;
When checking out that the customer flow in arbitrary VLAN meets or exceeds setting flow, automatically at least one user in this VLAN is migrated in the minimum VLAN of customer flow.
4. method according to claim 3, is characterized in that, is describedly automatically comprised by the VLAN that the user in this VLAN migrates to customer flow minimum:
Calculate the difference M of the customer flow in VLAN1 and the customer flow in VLAN2, described VLAN1 is the VLAN that customer flow meets or exceeds setting flow, and described VLAN2 is the VLAN that in described VLANGROUP, customer flow is minimum;
Utilize described M with the customer flow available bandwidth preset and determine the number of users N needing to migrate to VLAN2 in VLAN1 according to the mode of load balancing;
Automatically the N number of user in this VLAN1 is migrated to VLAN2.
5., dynamically for user allocates a device for virtual LAN VLAN, this application of installation is in the access device supporting 802.1X agreement, and it is characterized in that, this device comprises:
Acquiring unit, for obtaining the VLAN group GROUP belonging to the user passing through certification from certificate server, described VLANGROUP comprises at least one VLAN;
Search unit, for traveling through the customer flow in described VLANGROUP in each VLAN successively, finding and there is the minimum VLAN of customer flow;
Determining unit, for having the minimum VLAN of customer flow described in finding as described by the VLAN belonging to the user of certification.
6. device according to claim 5, is characterized in that, described in search unit and find the VLAN having customer flow minimum to comprise by following steps:
For each VLAN traversed, calculate the residual available bandwidth value of this VLAN;
The residual available bandwidth value that value is maximum is selected from the residual available bandwidth value of each VLAN calculated;
To there is the VLAN of the residual available bandwidth value that this is selected as having the minimum VLAN of customer flow.
7. device according to claim 5, is characterized in that, this device comprises further:
Adjustment unit, for making regular check on the customer flow in described VLANGROUP in each VLAN, when checking out that the customer flow in arbitrary VLAN meets or exceeds setting flow, automatically at least one user in this VLAN is migrated in the minimum VLAN of customer flow.
8. device according to claim 7, is characterized in that, the VLAN that the user in this VLAN migrates to customer flow minimum is comprised by following steps by described adjustment unit automatically:
Calculate the difference M of the customer flow in VLAN1 and the customer flow in VLAN2, described VLAN1 is the VLAN that customer flow meets or exceeds setting flow, and described VLAN2 is the VLAN that in described VLANGROUP, customer flow is minimum;
Utilize described M with the customer flow available bandwidth preset and determine the number of users N needing to migrate to VLAN2 in VLAN1 according to the mode of load balancing;
Automatically the N number of user in this VLAN1 is migrated to VLAN2.
CN201310035529.2A 2013-01-28 2013-01-28 Dynamically for user allocates the method and apparatus of VLAN Active CN103118434B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310035529.2A CN103118434B (en) 2013-01-28 2013-01-28 Dynamically for user allocates the method and apparatus of VLAN

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310035529.2A CN103118434B (en) 2013-01-28 2013-01-28 Dynamically for user allocates the method and apparatus of VLAN

Publications (2)

Publication Number Publication Date
CN103118434A CN103118434A (en) 2013-05-22
CN103118434B true CN103118434B (en) 2016-02-17

Family

ID=48416677

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310035529.2A Active CN103118434B (en) 2013-01-28 2013-01-28 Dynamically for user allocates the method and apparatus of VLAN

Country Status (1)

Country Link
CN (1) CN103118434B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104468386B (en) * 2014-10-11 2017-11-24 新华三技术有限公司 Flow equalization method and device in a kind of Ethernet virtualization internet network
CN106559451B (en) * 2015-09-29 2020-09-08 新华三技术有限公司 User migration method and device
CN113641898A (en) * 2021-07-30 2021-11-12 武汉思普崚技术有限公司 Method and device for dynamically adjusting online of authenticated user and electronic equipment

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101035050A (en) * 2007-03-15 2007-09-12 中兴通讯股份有限公司 Processing method of the virtual LAN aggregation
CN101640644A (en) * 2009-09-01 2010-02-03 杭州华三通信技术有限公司 Method and equipment for flow equilibrium based on flexible link group
CN102083136A (en) * 2009-11-30 2011-06-01 杭州华三通信技术有限公司 Wireless network control method and wireless controller

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP5100172B2 (en) * 2006-05-12 2012-12-19 キヤノン株式会社 Network system, device function restriction method, and computer program

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101035050A (en) * 2007-03-15 2007-09-12 中兴通讯股份有限公司 Processing method of the virtual LAN aggregation
CN101640644A (en) * 2009-09-01 2010-02-03 杭州华三通信技术有限公司 Method and equipment for flow equilibrium based on flexible link group
CN102083136A (en) * 2009-11-30 2011-06-01 杭州华三通信技术有限公司 Wireless network control method and wireless controller

Also Published As

Publication number Publication date
CN103118434A (en) 2013-05-22

Similar Documents

Publication Publication Date Title
US20230084344A1 (en) Private cloud control
US9172544B2 (en) Systems and methods for authentication between networked devices
US11184767B2 (en) Methods and systems for automatically connecting to a network
CN101917398A (en) Method and equipment for controlling client access authority
CN101163000B (en) Secondary authentication method and system
CN110267270B (en) Identity authentication method for sensor terminal access edge gateway in transformer substation
CN104702607A (en) Access authentication method, device and system of SDN (Software Defined Network)
JP2019208218A (en) Mobile communication system, network, and ue, and discovery procedure therefore
CN103621126A (en) Method and apparatus for providing machine-to-machine service
CN101599967B (en) Authorization control method and system based on 802.1x authentication system
US10321306B2 (en) Network device selective synchronization
CN101237325B (en) Ethernet access authentication method, downlink authentication method and Ethernet device
CN101075869B (en) Method for realizing network certification
CN103916853A (en) Control method for access node in wireless local-area network and communication system
CN103118434B (en) Dynamically for user allocates the method and apparatus of VLAN
CN106535089B (en) Machine-to-machine virtual private network
CN101087236A (en) VPN access method and device
US9473351B2 (en) System and method for automated provisioning of a wireless device
CN102932219B (en) The method of dynamic group net facility registration and cancellation
CN104219094A (en) AP (access point) grouping configuration method and AP grouping configuration equipment
CN102271120A (en) Trusted network access authentication method capable of enhancing security
CN102801819B (en) A kind of method of transparent transmission IPv6 address in network access control system
CN102271125B (en) Method for carrying out 802.1X authentication cross equipment, access equipment and access control equipment
CN103338440B (en) Authentication method in Verification System and equipment end
CN103560891A (en) Method for identifying communication identifier of household wireless Internet of Things

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CP03 Change of name, title or address

Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No.

Patentee after: Xinhua three Technology Co., Ltd.

Address before: 310053 Hangzhou hi tech Industrial Development Zone, Zhejiang province science and Technology Industrial Park, No. 310 and No. six road, HUAWEI, Hangzhou production base

Patentee before: Huasan Communication Technology Co., Ltd.

CP03 Change of name, title or address