WO2021197184A1 - 一种网络接入控制方法、sdf、cp、up以及网络*** - Google Patents

一种网络接入控制方法、sdf、cp、up以及网络*** Download PDF

Info

Publication number
WO2021197184A1
WO2021197184A1 PCT/CN2021/082904 CN2021082904W WO2021197184A1 WO 2021197184 A1 WO2021197184 A1 WO 2021197184A1 CN 2021082904 W CN2021082904 W CN 2021082904W WO 2021197184 A1 WO2021197184 A1 WO 2021197184A1
Authority
WO
WIPO (PCT)
Prior art keywords
cgn
instance
user equipment
sdf
resources
Prior art date
Application number
PCT/CN2021/082904
Other languages
English (en)
French (fr)
Inventor
夏雪挺
邵建树
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP21779916.2A priority Critical patent/EP4120640A4/en
Priority to MX2022012263A priority patent/MX2022012263A/es
Publication of WO2021197184A1 publication Critical patent/WO2021197184A1/zh
Priority to US17/954,607 priority patent/US20230019667A1/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/70—Admission control; Resource allocation
    • H04L47/82—Miscellaneous aspects
    • H04L47/825—Involving tunnels, e.g. MPLS
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
    • H04L47/2425—Traffic characterised by specific attributes, e.g. priority or QoS for supporting services specification, e.g. SLA
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/12—Avoiding congestion; Recovering from congestion
    • H04L47/125—Avoiding congestion; Recovering from congestion by balancing the load, e.g. traffic engineering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/70—Admission control; Resource allocation
    • H04L47/78—Architectures of resource allocation
    • H04L47/781—Centralised allocation of resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/70—Admission control; Resource allocation
    • H04L47/80—Actions related to the user profile or the type of traffic
    • H04L47/805—QOS or priority aware
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2521—Translation architectures other than single NAT servers
    • H04L61/2532—Clique of NAT servers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2514—Translation of Internet protocol [IP] addresses between local and global IP addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/256—NAT traversal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2592—Translation of Internet protocol [IP] addresses using tunnelling or encapsulation

Definitions

  • This application relates to the field of communication networks, and in particular to a network access control method, steering decision function (SDF), control plane (CP), user plane (UP), and network systems .
  • SDF steering decision function
  • CP control plane
  • UP user plane
  • Software-defined network (software-defined netword, SDN) is a network architecture that introduces an SDN controller.
  • the SDN controller controls the network devices within the jurisdiction (the controlled network device is called a repeater) to realize the transfer Control separation and centralized control.
  • multiple broadband network gateway (BNG) UPs are configured under the SDN-based network architecture. When the user equipment goes online, access is achieved by accessing one of the UPs. Network, the connected UP is used to carry user equipment traffic.
  • BNG broadband network gateway
  • a traffic steering solution is currently introduced.
  • the SDF obtains the load status of each UP and selects the newly connected user equipment based on the principle of load balancing UP, and dynamically adjust to other UPs according to reliability and differentiated service-level agreement (SLA) after the user equipment is connected to achieve the purpose of traffic optimization.
  • SDF steering decision function
  • the embodiments of the present application provide a network access control method, SDF, CP, UP, and a network system, which are used to select a UP with CGN resources during user equipment access.
  • an embodiment of the present application provides a network access control method, which is applied to a network system, and the network system includes a flow cut decision function module SDF, multiple user plane UPs, and a control plane CP.
  • the method includes:
  • SDF receives CGN resources reported by multiple UPs and obtains the CGN resource pool.
  • CGN resources include the CGN service load status of each UP in multiple UPs;
  • SDF receives the CGN instance acquisition request sent by the CP, and the CGN instance acquisition request instructs the user equipment to allocate CGN
  • the SDF allocates a first CGN instance to the user equipment according to the CGN resource pool, the first CGN instance indicates the first UP with available CGN resources, and the first UP is one of multiple UPs; the SDF sends the first CGN instance to the CP.
  • the CP can enable the first UP with CGN resources to carry user equipment traffic according to the first CGN instance, and provide CGN business services for the user equipment, thereby ensuring that the user equipment is allocated available CGN resources in the scenario of traffic path planning UP.
  • the first CGN instance includes the first UP, the first CGN single board in the first UP, and the first central processing unit CPU in the first CGN single board, which is a user
  • the device determines the first CPU to realize the CGN service.
  • the SDF receives the differentiated service level agreement SLA policy configured by the remote user dial-up authentication radius server; the SDF allocates the first CGN instance to the user equipment according to the CGN resource pool and the SLA policy, so that The allocated first CGN instance not only allocates the first UP with available CGN resources to the user equipment, but also satisfies the SLA policy.
  • the SDF receiving radius server sends a new SLA strategy; the SDF allocates a second CGN instance to the user equipment according to the new SLA strategy and the CGN resource pool, and the second CGN instance indicates that it is available
  • the second UP of the CGN resource the second UP is one of the multiple UPs; the SDF sends the second CGN instance to the CP to ensure that the second UP of the available CGN resources is allocated to the user equipment under different SLAs.
  • the SDF determines that the first UP fails; the SDF allocates a third CGN instance to the user equipment according to the SLA policy and the CGN resource pool, and the third CGN instance indicates the first instance with available CGN resources Three UP, the third UP is one of the multiple UPs; the SDF sends the third CGN instance to the CP to ensure that in the event that the first UP carrying the user equipment fails, the user equipment is allocated a UP with available CGN resources.
  • the embodiments of the present application provide a network access control method, which is applied to a network system, and the network system includes an SDF, multiple UPs, and CPs, and the method includes:
  • the CP sends a CGN instance acquisition request to the SDF.
  • the CGN instance acquisition request indicates that the user equipment is allocated a CGN instance;
  • the CP receives the first CGN instance sent by the SDF, the first CGN instance indicates the first UP with available CGN resources, and the first UP is more One of the two UPs;
  • the CP generates the first CGN diversion strategy according to the first CGN instance, the first CGN diversion strategy is used to instruct the user equipment’s traffic to the first UP indicated by the first CGN instance;
  • the CP to the first UP sends the first CGN drainage strategy.
  • the first CGN diversion strategy includes a traffic ACL rule, so that the first UP directs the traffic of the user equipment to the first CPU of the first CGN board according to the ACL rule.
  • the first UP with CGN resources is made to carry the traffic of the user equipment and provide CGN business services for the user equipment, thereby ensuring that the user equipment is allocated with the UP of the available CGN resources in the scenario of traffic path planning.
  • the first CGN instance includes the first UP, the first CGN single board in the first UP, and the first central processing unit CPU in the first CGN single board, which is a user
  • the device determines the first CPU to realize the CGN service.
  • the CP sends a user bearer indication message to the first UP, and the user bearer indication message is used to indicate the traffic of the bearer user equipment;
  • the CP receives the first public network address sent by the first UP ,
  • the first public network address is the public network address assigned to the user equipment;
  • the CP sends the traceability log to the raidus server, and the traceability log includes the private network address of the user equipment and the first public network address, so that when the user equipment accesses the first UP At the time, the operator can monitor the network through the raidus server.
  • the CP receives a second CGN instance sent by the SDF, the second CGN instance indicates a second UP with available CGN resources, and the second UP is one of multiple UPs; the CP The second CGN drainage strategy is generated according to the second CGN instance.
  • the second CGN drainage strategy is used to instruct the traffic of the user equipment to be directed to the second UP; the CP sends the second CGN drainage strategy to the second UP to ensure that the UP is switched
  • the user equipment can still be allocated to the second UP with available CGN resources.
  • the CP sends a user bearer indication message to the second UP, and the user bearer indication message is used to indicate to bear the traffic of the user equipment;
  • the CP receives the second public network address sent by the second UP ,
  • the second public network address is the public network address assigned to the user equipment by the second UP;
  • the CP sends a traceability log to the raidus server, and the traceability log includes the private network address of the user equipment and the second public network address. It is guaranteed that in the scenario of switching UP, the traceability log can still be sent, so that the operator can monitor the network through the raidus server.
  • the CP receives a third CGN instance sent by the SDF, the third CGN instance indicates a third UP with available CGN resources, and the third UP is one of multiple UPs; the CP Generate a third CGN diversion strategy according to the third CGN instance, the third CGN diversion strategy is used to instruct user equipment traffic to the third UP indicated by the third CGN instance; the CP sends the third CGN diversion strategy to the third UP . It is ensured that in the scenario where the UP fails, the user equipment can still be allocated to the third UP with available CGN resources.
  • the CP obtains the first public network address of the user equipment in the first UP; the CP sends the first public network address to the third UP, so that the third UP is the user equipment Assign the first public network address. Since the first public network address is the public network address of the user equipment on the first UP, when the user equipment goes online, the CP has already uploaded the first public network address private network address as a traceability log to the radius server once, so the CP There is no need to upload again, so that in the scenario where the first UP fails, there is no need to upload traceability logs on a large scale, which saves transmission resources and reduces the burden on the network.
  • the CP obtains the first public network address of the user equipment in the first UP; the CP sends the A first public network address, so that the third UP allocates the first public network address to the user equipment.
  • embodiments of the present application provide a network access control method, which is applied to a network system, and the network system includes an SDF, multiple UPs, and CPs, and the method includes:
  • the first UP reports CGN resources to the SDF.
  • the CGN resources include the CGN service load status of the first UP.
  • the first UP is one of multiple UPs; the first UP receives the CP and sends the first CGN drainage strategy, and the first CGN drainage strategy includes The first CGN instance, the first CGN instance indicates the first UP with available CGN resources, the first UP is one of multiple UPs; the first UP bears the traffic of the user equipment.
  • the CP can enable the first UP with CGN resources to carry user equipment traffic according to the first CGN instance, and provide CGN business services for the user equipment, thereby ensuring that the user equipment is allocated available CGN resources in the scenario of traffic path planning UP.
  • the first UP receives a user bearer indication message sent by the CP, and the user bearer indication message is used to indicate to bear the traffic of the user equipment; the first UP allocates the first public network to the user equipment Address; the first UP sends the first public network address to the CP.
  • the user equipment can be assigned to an available public network address when it is online.
  • the first UP receives the second public network address sent by the CP; the first UP allocates the second public network address to the user equipment. It is realized that when a fault occurs, the user equipment can maintain the original public network address.
  • an embodiment of the present application provides a network access control method, which is applied to a network system, the network system includes an SDF, multiple UPs, and CPs, and the method includes:
  • CGN resources include the CGN service load status of each UP in multiple UPs; CP sends a CGN instance acquisition request to SDF, and the CGN instance acquisition request instructs the user equipment to allocate CGN Example; SDF allocates a first CGN instance to user equipment according to the CGN resource pool, the first CGN instance indicates the first UP with available CGN resources, and the first UP is one of multiple UPs; SDF sends the first CGN instance to the CP; The CP generates the first CGN drainage strategy according to the first CGN instance. The first CGN drainage strategy is used to instruct the user equipment's traffic to be directed to the first UP indicated by the first CGN instance; the CP sends the first CGN drainage to the first UP Strategy; the first UP carries the traffic of the user equipment.
  • the CP can enable the first UP with CGN resources to carry user equipment traffic according to the first CGN instance, and provide CGN business services for the user equipment, thereby ensuring that the user equipment is allocated available CGN resources in the scenario of traffic path planning UP.
  • the embodiments of the present application provide a network device, which is applied to a network system, the network system includes an SDF, multiple UPs and CPs, the SDF is set in the network device, and the network device includes:
  • the transceiver module is used to receive the CGN resources reported by multiple UPs to obtain the CGN resource pool.
  • the CGN resources include the CGN service load status of each UP in the multiple UPs;
  • the transceiver module is also used to receive the CGN instance acquisition request sent by the CP, CGN
  • the instance acquisition request indicates to allocate a CGN instance to the user equipment;
  • the processing module is used to allocate the first CGN instance to the user equipment according to the CGN resource pool, the first CGN instance indicates the first UP with available CGN resources, and the first UP is multiple UPs
  • the transceiver module is also used to receive the differentiated service level agreement SLA policy configured by the remote user dial-up authentication radius server; the processing module is specifically used to according to the CGN resource pool and SLA policy Assign the first CGN instance to the user equipment.
  • the transceiver module is also used to receive a new SLA policy sent by the radius server; the processing module is also used to allocate a second user equipment to the user equipment according to the new SLA policy and the CGN resource pool.
  • CGN instance indicates a second UP with available CGN resources, and the second UP is one of multiple UPs; the transceiver module is also used to send the second CGN instance to the CP.
  • the processing module is further configured to determine that the first UP fails; the processing module is further configured to allocate a third CGN instance to the user equipment according to the SLA policy and the CGN resource pool.
  • the three CGN instance indicates the third UP with available CGN resources, the third UP is one of the multiple UPs; the transceiver module is also used to send the third CGN instance to the CP.
  • the embodiments of the present application provide a CP, which is applied to a network system.
  • the network system includes an SDF, multiple UPs, and a CP.
  • the CP includes a transceiver module for sending a CGN instance acquisition request to the SDF.
  • the instance acquisition request indicates to allocate a CGN instance for the user equipment; the transceiver module is also used to receive the first CGN instance sent by the SDF, the first CGN instance indicates the first UP with available CGN resources, and the first UP is one of the multiple UPs
  • the processing module is also used to generate a first CGN diversion strategy according to the first CGN instance, the first CGN diversion strategy is used to instruct the traffic of the user equipment to be directed to the first UP indicated by the first CGN instance; the transceiver module, and also Used to send the first CGN drainage strategy to the first UP.
  • the transceiver module is further configured to send a user bearer indication message to the first UP, where the user bearer indication message is used to indicate the traffic of the bearer user equipment; the transceiver module is also used to receive The first public network address sent by the first UP, the first public network address is the public network address assigned to the user equipment; the transceiver module is also used to send traceability logs to the raidus server.
  • the traceability log includes the private network address of the user equipment and the first public network address. A public network address.
  • the transceiver module is further configured to receive a second CGN instance sent by the SDF, where the second CGN instance indicates a second UP with available CGN resources, and the second UP is multiple UPs
  • One of the processing module which is also used to generate a second CGN diversion strategy according to the second CGN instance, the second CGN diversion strategy is used to instruct the user equipment’s traffic to the second UP; the transceiver module is also used to The second UP sends the second CGN drainage strategy.
  • the transceiver module is further configured to send a user bearer indication message to the second UP, where the user bearer indication message is used to indicate the traffic of the bearer user equipment; the transceiver module is also used to receive The second public network address sent by the second UP, the second public network address is the public network address assigned to the user equipment by the second UP; the transceiver module is also used to send traceability logs to the raidus server, the traceability logs include the private network of the user equipment Address and second public network address.
  • the transceiver module is further configured to receive a third CGN instance sent by the SDF, where the third CGN instance indicates a third UP with available CGN resources, and the third UP is multiple UPs
  • One of the processing module which is also used to generate a third CGN diversion strategy according to the third CGN instance, and the third CGN diversion strategy is used to instruct the user equipment's traffic to be directed to the third UP indicated by the third CGN instance;
  • the module is also used to send the third CGN drainage strategy to the third UP.
  • the transceiver module is further configured to obtain the first public network address of the user equipment in the first UP; the transceiver module is further configured to send the first public network address to the third UP Address, so that the third UP allocates the first public network address to the user equipment.
  • an embodiment of the present application provides a UP, which is applied to a network system, the network system includes an SDF, multiple UPs, and a CP, and the UP includes:
  • the transceiver module is used to report CGN resources to the SDF.
  • the CGN resource includes the CGN service load of the first UP, and the first UP is one of multiple UPs; the transceiver module is also used to receive the first CGN drainage strategy sent by the CP.
  • a CGN diversion strategy includes a first CGN instance, the first CGN instance indicates a first UP with available CGN resources, and the first UP is one of multiple UPs; a service module is used to carry user equipment traffic.
  • the transceiver module is further configured to receive a user bearer indication message sent by the CP, where the user bearer indication message is used to indicate the traffic of the bearer user equipment; the service module is used for the user equipment Allocate the first public network address; the transceiver module is also used to send the first public network address to the CP.
  • the transceiver module is further configured to receive the second public network address sent by the CP; the service module is configured to allocate the second public network address to the user equipment.
  • the embodiments of the present application provide a network system, SDF, multiple UPs, and CPs; multiple UPs are used to report CGN resources to the SDF so that the SDF obtains the CGN resource pool.
  • the CGN resources include each of the multiple UPs. UP's CGN service load situation; CP, used to send a CGN instance acquisition request to SDF, the CGN instance acquisition request instructs to allocate CGN instances to the user equipment; SDF, used to allocate the first CGN instance to the user equipment according to the CGN resource pool, the first The CGN instance indicates the first UP with available CGN resources.
  • the first UP is one of multiple UPs.
  • the SDF sends the first CGN instance to the CP.
  • the CP is also used to generate the first CGN drainage strategy according to the first CGN instance.
  • a CGN diversion strategy is used to instruct the user equipment's traffic to be directed to the first UP indicated by the first CGN instance.
  • the CP sends the first CGN diversion strategy to the first UP; the first UP is used to carry the user equipment's traffic.
  • an embodiment of the present application provides a computer-readable storage medium, including instructions, which when run on a computer, cause the computer to execute any one of the possible methods in any of the foregoing aspects.
  • an embodiment of the present application provides a network device, including a processor and a memory, where the processor and the memory are coupled,
  • Memory used to store programs.
  • the processor is configured to execute the program in the memory, so that the terminal device executes any one of the possible methods in any of the foregoing aspects.
  • the SDF Due to the CGN resources reported by multiple UPs to the SDF, the SDF obtains the CGN resource pool.
  • the CGN resources include the CGN service load status of each UP in the multiple UPs, so that when the user equipment goes online, the CP sends a CGN instance acquisition request to the SDF.
  • the user equipment allocates a CGN instance
  • the SDF allocates the first CGN instance to the user equipment according to the CGN resource pool
  • the first CGN instance indicates the first UP with available CGN resources
  • the first UP is one of multiple UPs
  • the SDF sends to the CP
  • the first CGN instance so that the CP can use the first UP with CGN resources to carry user equipment traffic according to the first CGN instance, and provide CGN business services for the user equipment, thereby ensuring the allocation of user equipment in the scenario of traffic path planning There is an UP of available CGN resources.
  • FIG. 1 is a schematic diagram of the structure of a network system applied in an embodiment of this application;
  • Figure 2 is a schematic diagram of a network access control method provided by an embodiment of the application.
  • FIG. 3 is a schematic diagram of a network access control method provided by an embodiment of this application.
  • FIG. 4 is a schematic diagram of a network access control method provided by an embodiment of this application.
  • FIG. 5 is a schematic diagram of a network device provided by an embodiment of this application.
  • FIG. 6 is a schematic diagram of a CP provided by an embodiment of the application.
  • FIG. 7 is a schematic diagram of a UP provided by an embodiment of the application.
  • FIG. 8 is a schematic diagram of a network device provided by an embodiment of this application.
  • the embodiments of the present application provide a network access control method, device, and network system, which are used to select a UP with CGN resources for user equipment.
  • FIG. 1 is a network system 100 applied in this embodiment of the application.
  • the network system 100 includes a CP 110, multiple UPs 120, and an SDF 140.
  • the network system 100 also includes an SDN controller 130.
  • SFR switching function router
  • ODAP on-demand address pools
  • the SDN controller 130 is the core of the network architecture based on the SDN technology.
  • the SDN controller 130 has an application program interface (application program interface, API) interface, through the north-south transfer and control separation protocol (such as OpenFlow), the northbound connection is connected to the CP 110 and the southbound connection is connected to the UP 120, realizing the communication between the CP 110 and the UP 120. Control information interaction, thus realizing the separation of transfer and control.
  • the SDN controller 130 connects the SFR, multiple UP 120, and CP 110 through an API interface, and realizes the communication between the SFR, multiple UP 120, and CP 110.
  • CP 110 is the control plane of network equipment, such as the network element management system (EMS), which is used to implement centralized control of multiple UPs 120 through the SDN controller 130;
  • UP 120 is The user plane of the network device, also known as the repeater, is used to forward data according to the routing instructions issued by the CP 110 through the SDN controller 130.
  • EMS network element management system
  • SDF 140 is the controller under the traffic path planning scheme, connected to the east-west interface of the SDN controller 130, and used for unified management of UP 120 resources and CGN resources. In scenarios such as load balancing, it collects network loads, calculates balancing strategies, and invokes SDN The northbound interface of the controller 130 adjusts the load of the Metro network.
  • the CP 110 can dynamically select the UP 120 that the user goes online through the signaling interaction with the SDF 140, and dynamically adjust to other UP 120s after going online to achieve the purpose of traffic optimization.
  • the SDF 140 can also interact with the radius server 160 during the user's online process in business scenarios such as SLA and value added services (VAS), calculate and generate an UP 120 that satisfies the user's SLA, and notify the CP 110.
  • the SDF 140 may be implemented in multiple ways, and it may be an independent network entity, which is generally developed by an operator.
  • the SDF 140 issues control policies to the outside through the SDN controller 130; the SDF 140 may also be a component of the SDN controller 130.
  • the SDF 140 if the SDF 140 is an independent entity, the SDF 140 and the SDN controller 130 send information through the communication interface, and if the SDF 140 is an integrated component in the SDN controller 130, then the SDF 140 The SDN controller 130 and the SDN controller 130 can implement information exchange within the SDN controller 130.
  • the SFR 140 is used as a user equipment, and under the control of the CP 110, the traffic of the user equipment is directed to the indicated UP 120.
  • the radius server 160 is a server managed by an operator for managing the traceability log of the user equipment, and the traceability log is a mapping between the private network address of the user equipment and the public network address.
  • the ODAP server 170 is a centralized management of address resources under the BNG transfer and control separation architecture, and the public network address resources of the CGN for NAT translation are obtained by allocating to the ODAP server 170.
  • the ODAP server 170 may be a separate network entity connected to the CP 110, or it may be a component integrated on the CP 110. It should be noted that in the following embodiments, if the ODAP server 170 is an independent entity, the ODAP server 170 and the CP 110 send information through the communication interface. If the ODAP server 170 is an integrated component in the CP 110, the ODAP server 170 The CP 110 can realize information exchange within the CP 110.
  • multiple BNG UPs 120 are configured under the SDN-based network architecture.
  • the user equipment goes online, one of the UP 120s is connected to the network to access the UP 120. Used to carry user equipment traffic.
  • the CGN resource issue is not considered in the traffic path planning solution, that is, when a UP 120 is selected for the user equipment, it cannot be guaranteed that the UP 120 has available CGN resources.
  • the SDF 140 receives the CGN resources reported by multiple UPs 120 to obtain a CGN resource pool.
  • the CGN resources include the CGN service load status of each UP 120 of the multiple UPs 120, and then receives the CGN service load status of each UP 120 of the multiple UPs 120.
  • User online message the user online message instructs the user equipment to go online, and allocates the first CGN instance to the user equipment according to the CGN resource pool and the configured SLA policy.
  • the first CGN instance includes the first UP 120 and the first CGN in the first UP 120
  • the first CPU in the single board and the first CGN single board, the first UP 120 is one of the multiple UPs 120, and finally, the SDF 140 sends the first CGN instance to the CP 110, thus ensuring that in the scenario of traffic path planning
  • the UP 120 with available CGN resources is allocated to the user equipment.
  • the first embodiment is the online of user equipment.
  • This application proposes a network access control method, including:
  • Multiple UPs report CGN resources to the SDF, so that the SDF obtains the CGN resource pool.
  • the CGN resources include the CGN service load status of each UP in the multiple UPs.
  • a UP When an UP goes online, a certain number of public network addresses, such as 100, are obtained through the signaling interaction between the CP and the ODAP server.
  • a UP includes multiple CGN boards, and a CGN single board includes multiple CPUs. After UP obtains the public network address, UP allocates the public network address to each CGN board for management, and the CGN board will be assigned to its own The public network address is assigned to each CPU for management.
  • the UP allocates the CGN board and the CPU in the CGN single board to the user equipment, and allocates one to the user equipment with the available public network address managed by the CPU, that is, provides the user equipment with CGN business services. So that the user equipment can use the public network address to access the public network.
  • a UP has 3 CGN boards, namely board 1, board 2, and board 3.
  • board 1 has 3 CPUs
  • board 2 has 6 CPUs
  • board 3 has 1 CPU.
  • the UP has a total of 14 CPUs.
  • the UP obtains 100 public network addresses, it will assign 100 public network addresses to 10 CPUs.
  • each CPU is assigned 10 public network addresses, or each CPU in 5 CPUs is assigned 5 public network addresses.
  • Each of the other 5 CPUs is assigned 15 public network addresses, which is not limited here.
  • UP When UP provides CGN service for user equipment, it needs to use CGN resources. For example, the available public network address, that is, at least one CPU on the CGN board must have an available public network address on the UP. Then, before UP provides CGN business services for user equipment, it needs to report its own CGN resources.
  • CGN resources include address usage, session number usage, CPU usage, CPU bandwidth, and so on.
  • the CPU usage rate uses the CPU processing power benchmark to calculate the real-time CPU usage rate, and the CPU bandwidth refers to the data transfer rate between the CPU and the North Bridge.
  • the CGN resource is the load situation of a UP for CGN business services, reflecting the ability of a UP for CGN business services.
  • the CGN resources are also dynamic, that is, after the UP serves one more user equipment, the CGN resources that it can provide will be reduced. Therefore, the UP needs to report the CGN resources to the SDF dynamically or regularly. After SDF receives the CGN resources reported by multiple UPs, it integrates and aggregates to obtain a CGN resource pool. When the user equipment goes online, the SDF can select a CGN instance from the CGN resource pool and allocate it to the user equipment to ensure that the UP that the user equipment accesses has available CGN resources.
  • the CP determines that the user equipment is online.
  • the user equipment when the user equipment goes online, it can be connected to the SFR, and then the SFR allocates an UP for the user equipment to go online according to the network plan, for example, UP1.
  • the SFR allocates an UP for the user equipment to go online according to the network plan, for example, UP1.
  • UP1 When the user equipment goes online at UP1, UP1 performs signaling interaction with the CP, so that the CP determines that the user equipment goes online.
  • CGN resources may not be available on UP1 allocated according to traditional network planning. For this reason, the CP needs to query the CGN resource pool on the SDF to allocate a UP with available CGN resources to the user equipment.
  • UP2 is allocated according to the network plan
  • UP5 is allocated according to the network plan
  • UP2 is allocated according to the network plan.
  • the CP sends a CGN instance acquisition request to the SDF, and the CGN instance acquisition request indicates to allocate a CGN instance to the user equipment.
  • the CP determines that the user equipment is online, it queries the SDF for the CGN resource pool to select the UP with CGN resources. Specifically, the CP first sends a CGN instance acquisition request to the SDF, and the CGN instance acquisition request instructs to allocate a CGN instance to the user equipment.
  • the SDF allocates a first CGN instance to the user equipment according to the CGN resource pool, the first CGN instance indicates a first UP with available CGN resources, and the first UP is one of multiple UPs.
  • the SDF may allocate the first CGN instance to the user equipment according to the CGN resource pool.
  • the first CGN instance indicates the first UP with available CGN resources, and the first UP is one of the multiple UPs.
  • the SDF can first confirm whether the UP currently accessed by the user equipment has available CGN resources, and if so, prioritize allocating CGN instances from the UP to the user equipment to reduce unnecessary handover. Signaling interaction, reducing resource consumption.
  • SDF can also select a lighter-loaded UP, CGN board, and CPU according to the principle of load balancing, and assign it to the user equipment.
  • the load status of different UP, CGN boards and CPUs can be measured by factors such as address usage, CPU usage, bandwidth usage, and number of sessions usage.
  • the remaining available public network addresses of each UP can also be considered, so as to select the UP with the most available public addresses, the CGN board with the most available public addresses in the UP, and the available public addresses in the CGN board.
  • the CPU with the most network addresses.
  • the UP and CGN boards can be determined by the above method, and then when selecting the CPU, among the CPUs with available public network addresses, select the CPU with the lower CPU usage rate as the first CPU. In some possible implementations, you can also consider the usage rate of the number of sessions of each CPU, CPU bandwidth, etc., which are not limited here.
  • the SDF before the SDF allocates the first CGN instance to the user equipment according to the CGN resource pool, the SDF receives the differentiated service level agreement SLA policy configured by the radius server, and then the SDF according to the CGN resource pool and the SLA policy Assign the first CGN instance to the user equipment.
  • the SLA strategy is configured by the radius server and sent to the SDF dynamically.
  • the SLA strategy is a contract or agreement signed by the service provider and the user. This contract regulates the business relationship or part of the business relationship between the two parties.
  • the SDF sends the first CGN instance to the CP.
  • the first CGN instance may be sent to the CP to complete the process of the CP inquiring the CGN resource pool from the SDF to determine the first CGN instance.
  • the SDF since the SDF selects the UP with CGN resources through the CGN resource pool, when the user equipment accesses the UP indicated by the first CGN instance, it is guaranteed to have available CGN resources.
  • the CP delivers a tunnel change message to the SFR, where the tunnel change message is used to instruct the SFR to direct the traffic of the user equipment to the first UP.
  • the CP After the CP determines the first CGN instance, it sends a tunnel change message to the SFR so that the SFR directs the user equipment's traffic to the first UP indicated by the first CGN, and allows the first UP to carry the user equipment's traffic .
  • the user equipment traffic in SFR was originally sent to UP1 according to the network plan. Now that the new UP is determined, if UP2 is determined as the first UP, then SFR will forward all traffic sent by the newly received user equipment to UP2, let UP2 carry user equipment traffic.
  • the new UP determined by the SDF is the same as the UP that originally carried the user equipment's traffic, there is no need to send a tunnel change message to the SFR, which is not limited here.
  • the CP sends a user bearer indication message to the first UP, where the user bearer indication message is used to indicate to bear the traffic of the user equipment.
  • the CP after the CP obtains the first CGN instance from the SDF, it determines the first UP from the first CGN instance, and can send a user bearer indication message to the first UP.
  • the user bearer indication message is used to indicate the bearer user The flow of the device.
  • the first UP after receiving the user bearer indication message may be the traffic of the bearer user equipment.
  • the SFR also determines that the user equipment traffic is forwarded to the first UP, and the first UP also determines to receive the user equipment traffic, then the user equipment traffic is switched from the original connected UP to the first UP. .
  • the first UP allocates a first public network address to the user equipment.
  • the user bearer indication message further includes a first CGN instance, which is used to instruct the first UP to allocate a public network address to the user equipment according to the first CPU in the first CGN board indicated by the first CGN instance. Then, the first UP selects the first public network address from the multiple public network addresses managed by the first CGN board and the first CPU in the first CGN instance according to the instructions in the user bearer instruction message and assigns it to the user equipment.
  • the first UP sends the first public network address to the CP.
  • the first UP after the first UP allocates the first public network address to the user equipment, it can send the first public network address to the CP, that is, instruct the CP to convert the user equipment’s private network address to the first public network address to the CP. Network address, then the user equipment can use the first public network address to access the network.
  • the CP sends the first traceability log to the raidus server, where the first traceability log includes the private network address of the user equipment and the first public network address.
  • the CP may send a traceability log to the raidus server.
  • the traceability log includes the private network address of the user device and the first public network address. It should be noted that the operator maintains the network through the traceability log on the radius server, such as authentication, authorization, and accounting.
  • the CP generates a first CGN diversion strategy according to the first CGN instance, where the first CGN diversion strategy is used to instruct to divert the traffic of the user equipment to the first UP indicated by the first CGN instance.
  • the CP After the CP determines the first CGN instance, it needs to send the first CGN diversion strategy to the first UP referred to in the first CGN instance.
  • the first CGN diversion strategy is used to instruct the user equipment’s traffic to the first CGN instance.
  • the first UP indicated.
  • the first CGN diversion strategy includes traffic (access control lists, ACL) rules, so that the first UP directs the traffic of the user equipment to the first CPU of the first CGN board according to the ACL rules.
  • the CP sends the first CGN drainage strategy to the first UP.
  • the first CGN diversion strategy After the first CGN diversion strategy is determined, it can be sent to the first UP so that the first UP can carry the user equipment traffic according to the instructions of the first CGN diversion strategy.
  • the first UP carries traffic of the user equipment.
  • the first UP can provide the user equipment with CGN service services, that is, carry the user equipment traffic, and The private network address of the user equipment is converted to the first public network address to realize the access of the user equipment to the network.
  • the first UP can report the new CGN resource to the SDF, or report the load situation of the new CGN resource to the SDF at a predetermined time point.
  • the first UP establishes a user entry of the user equipment.
  • a user entry can be created for the user equipment, that is, an entry is added to the original user table to record the information of the user equipment, for example
  • the private network address, the first public network address, and the first CGN instance of the user equipment are not limited here.
  • the first UP sends a public network address acquisition request to the ODAP through the CP.
  • the first UP needs to apply for some public network addresses for backup.
  • the default value is 80%.
  • the current first UP originally allocated 100 public network addresses, and 79 of them have been used. After one public network address is assigned to the user equipment, the used public network addresses reach 80. Make the address usage rate reach 80%, and trigger the first UP to apply for more public network addresses from ODAP.
  • the first UP sends a public network address acquisition request to the CP
  • the CP forwards the public network address request to the ODAP server
  • the ODAP server sends multiple public network addresses, such as 100 public network addresses, to the CP according to the content of the request.
  • the ODAP server sends multiple public network addresses to the first UP through the CP.
  • the CP After the CP obtains the multiple public network addresses returned by ODAP, the CP forwards the multiple public network addresses to the first UP. Then, the first UP assigns the obtained public network addresses to multiple CGN boards and each CGN board. Each CPU of the board manages.
  • the second embodiment is the handover of user equipment.
  • This application proposes a network access control method, including:
  • Multiple UPs report CGN resources to the SDF, so that the SDF obtains the CGN resource pool.
  • the CGN resources include the CGN service load status of each UP in the multiple UPs.
  • Step 301 is the same as step 201, and will not be repeated here.
  • the radius server sends a new SLA policy to the SDF.
  • the SLA policy since the SLA policy is dynamically configured, when the radius server changes the SLA policy, it will send the new SLA policy to the SDF, so that the SDF will allocate the first user equipment according to the new SLA policy and the CGN resource pool. Two CGN examples.
  • the SDF allocates a second CGN instance to the user equipment according to the new SLA policy and CGN resource pool.
  • the second CGN instance includes the second UP, the second CGN single board in the second UP, and the second CGN single board in the second UP.
  • CPU, the second UP is one of multiple UPs.
  • Step 303 is similar to step 204, and will not be repeated here.
  • the SDF sends the second CGN instance to the CP.
  • Step 304 is similar to step 205 and will not be repeated here.
  • the CP delivers a tunnel change message to the SFR, where the tunnel change message is used to instruct the SFR to direct the traffic of the user equipment to the second UP.
  • Step 305 is similar to step 206, and will not be repeated here.
  • the CP deletes the user entry of the user equipment in the first UP.
  • the CP when the CP determines to switch the user equipment to the second UP, it needs to delete the user entry of the user equipment in the first UP and release the first public network address so that the first UP
  • the public network address is re-used as an available public network address, and when the first UP serves another user equipment, the first public network address can be used.
  • the CP sends a user bearer indication message to the second UP, where the user bearer indication message is used to indicate to bear the traffic of the user equipment.
  • Step 307 is similar to step 207 and will not be repeated here.
  • the second UP allocates a second public network address to the user equipment.
  • Step 308 is similar to step 208, and will not be repeated here.
  • the second UP sends the second public network address to the CP.
  • Step 308 is similar to step 208, and will not be repeated here.
  • the CP sends a second traceability log to the raidus server, where the second traceability log includes the private network address and the second public network address of the user equipment.
  • Step 309 is similar to step 209, and will not be repeated here.
  • the CP generates a second CGN diversion strategy according to the second CGN instance, and the second CGN diversion strategy is used to instruct to divert the traffic of the user equipment to the second UP.
  • Step 310 is similar to step 210, and will not be repeated here.
  • the CP sends the second CGN drainage strategy to the second UP.
  • Step 311 is similar to step 211, and will not be repeated here.
  • the second UP carries traffic of the user equipment through the second CPU.
  • Step 312 is similar to step 212, and will not be repeated here.
  • the second UP establishes a user entry of the user equipment.
  • Step 313 is similar to step 213, and will not be repeated here.
  • the second UP sends a public network address acquisition request to the ODAP through the CP.
  • Step 314 is similar to step 214, and will not be repeated here.
  • the ODAP server sends multiple public network addresses to the second UP through the CP.
  • Step 315 is similar to step 215, and will not be repeated here.
  • the second CGN instance is the same as the UP, CGN board, and CPU indicated in the first CGN instance, then there is no need to perform the above steps 304-313, or you can perform it again, which is not done here. limited. If the second CGN instance is different from the UP, CGN board, and CPU indicated in the first CGN instance, the user equipment is switched from the first UP to the second UP.
  • the third embodiment is the migration of user equipment.
  • This application proposes a network access control method, including:
  • Multiple UPs report CGN resources to the SDF, so that the SDF obtains the CGN resource pool.
  • the CGN resources include the CGN service load status of each UP in the multiple UPs.
  • Step 301 is the same as steps 201 and 301, and will not be repeated here.
  • the SDF determines that the first UP/second UP is faulty.
  • the SDF can sense whether the UP (first UP/second UP) accessed by the user equipment fails.
  • the first UP in addition to the offline state, the first UP continuously sends status signals to the SDF to inform the SDF of the existence of the first UP. Then, if the first UP is not offline and the SDF does not receive the status signal for a period of time, it can be determined that the first UP has failed.
  • the SDF allocates a third CGN instance to the user equipment according to the SLA policy/new SLA policy and the CGN resource pool.
  • the third CGN instance indicates a third UP with available CGN resources, and the third UP is one of the multiple UPs.
  • the SDF after the SDF determines that the first UP fails, it can allocate a third CGN instance to the user equipment according to the SLA policy/new SLA policy and the CGN resource pool.
  • the process is similar to steps 204 and 303, here Do not repeat it.
  • the SDF not only allocates a CGN instance to the user equipment referred to in steps 204 and 303, but also allocates a third CGN instance to all user equipment served by the first UP/second UP.
  • the CGN instances allocated by the SDF to each user equipment served by the first UP/second UP may indicate the same UP or different UPs, which is not limited here.
  • the SDF sends the third CGN instance to the CP.
  • Step 404 is similar to steps 205 and 304, and will not be repeated here.
  • the CP delivers a tunnel change message to the SFR, where the tunnel change message is used to instruct the SFR to direct the traffic of the user equipment to the third UP.
  • Step 405 is similar to steps 206 and 305, and will not be repeated here.
  • the CP sends a user bearer indication message to the third UP, where the user bearer indication message is used to indicate to bear the traffic of the user equipment.
  • Step 406 is similar to steps 207 and 306, and will not be repeated here.
  • the CP obtains the first public network address/second public network address used by the user equipment in the first UP/second UP.
  • the third UP reassigns the public network address for the user equipment, the third UP will send the traceability log to the radius server. Since the number of user equipment served by the first UP/second UP is large, it will cause a lot of transmission overhead, even May cause network congestion. To this end, in this embodiment of the application, the CP can obtain the first public network address/second public network address of the user equipment in the first UP/second UP, so that the user equipment continues to use the first public network address/second public network address. 2. Public network address.
  • the CP sends the first public network address/the second public network address to the third UP.
  • the first public network address/second public network address is sent to the third UP.
  • the third UP allocates the first public network address/the second public network address to the user equipment.
  • the third UP can allocate the first public network address/second public network address to the user equipment, so that the third UP does not need to re-allocate other public networks Address, no need to upload traceability logs, saving transmission overhead.
  • the public network address of the third UP may be insufficient, and the CP reclaims the user equipment in the first UP/ After the first public network address/second public network address used by the second UP, all public network addresses of the first UP/second UP are recovered and assigned to the third UP, saving the third UP from applying from the ODAP server More public network address steps.
  • the CP generates a third CGN diversion strategy according to the third CGN instance, where the third CGN diversion strategy is used to instruct to direct the traffic of the user equipment to the third UP indicated by the third CGN instance.
  • Step 410 is similar to steps 211 and 311, and will not be repeated here.
  • the CP sends the third CGN drainage strategy to the third UP.
  • Step 411 is similar to steps 212 and 312, and will not be repeated here.
  • the third UP carries traffic of the user equipment through the third CPU.
  • Step 412 is similar to steps 213 and 312, and will not be repeated here.
  • the second UP establishes a user entry of the user equipment.
  • Step 413 is similar to steps 214 and 314, and will not be repeated here.
  • the present application provides a network device 500, the SDF is set in the network device 500, and the network device 500 includes:
  • the transceiver module 510 is used to receive CGN resources reported by multiple UPs to obtain a CGN resource pool.
  • the CGN resources include the CGN service load status of each UP in the multiple UPs;
  • the transceiver module 510 is also used to receive the CGN instance acquisition request sent by the CP ,
  • the CGN instance acquisition request indicates to allocate a CGN instance to the user equipment;
  • the processing module 520 is configured to allocate a first CGN instance to the user equipment according to the CGN resource pool, the first CGN instance indicates the first UP with available CGN resources, and the first UP is One of multiple UPs;
  • the transceiver module 510 is also used to send the first CGN instance to the CP.
  • the transceiver module 510 is further configured to receive the differentiated service level agreement SLA policy configured by the remote user dial authentication radius server; the processing module 520 is specifically configured to allocate the second device to the user equipment according to the CGN resource pool and the SLA policy.
  • SLA policy configured by the remote user dial authentication radius server
  • the processing module 520 is specifically configured to allocate the second device to the user equipment according to the CGN resource pool and the SLA policy.
  • a CGN instance For a specific implementation manner, reference may be made to the specific description of the summary step 204 in the embodiment shown in FIG. 2, which will not be repeated here.
  • the transceiver module 510 is also used to receive a new SLA policy sent by the radius server; the processing module 520 is also used to allocate a second CGN instance to the user equipment according to the new SLA policy and the CGN resource pool.
  • the CGN instance indicates a second UP with available CGN resources, and the second UP is one of multiple UPs; the transceiver module 510 is also used to send the second CGN instance to the CP.
  • the processing module 520 is further configured to determine that the first UP fails; the processing module 520 is further configured to allocate a third CGN instance to the user equipment according to the SLA policy and the CGN resource pool, and the third CGN instance indicates The third UP of the available CGN resources, the third UP being one of the multiple UPs; the transceiver module 510 is also used to send the third CGN instance to the CP.
  • the processing module 520 is further configured to determine that the first UP fails; the processing module 520 is further configured to allocate a third CGN instance to the user equipment according to the SLA policy and the CGN resource pool, and the third CGN instance indicates The third UP of the available CGN resources, the third UP being one of the multiple UPs; the transceiver module 510 is also used to send the third CGN instance to the CP.
  • the processing module 520 is further configured to determine that the second UP fails; the processing module 520 is further configured to allocate a third CGN instance to the user equipment according to the new SLA policy and the CGN resource pool , The third CGN instance indicates a third UP with available CGN resources, and the third UP is one of the multiple UPs; the transceiver module 510 is further configured to send the third UP to the CP CGN instance.
  • the processing module 520 is further configured to determine that the second UP fails; the processing module 520 is further configured to allocate a third CGN instance to the user equipment according to the new SLA policy and the CGN resource pool , The third CGN instance indicates a third UP with available CGN resources, and the third UP is one of the multiple UPs; the transceiver module 510 is further configured to send the third UP to the CP CGN instance.
  • This application provides a CP 600, including:
  • the processing module 610 is configured to determine that the user equipment is online; the transceiver module 620 is configured to send a CGN instance acquisition request to the SDF, where the CGN instance acquisition request indicates to allocate a CGN instance to the user equipment; the transceiver module 620 is also configured to receive the first CGN instance sent by the SDF CGN instance, the first CGN instance indicates the first UP with available CGN resources, and the first UP is one of the multiple UPs; the processing module 610 is further configured to generate a first CGN drainage strategy according to the first CGN instance, and the first CGN The diversion strategy is used to instruct to divert the traffic of the user equipment to the first UP indicated by the first CGN instance; the transceiver module 620 is also used to send the first CGN diversion strategy to the first UP.
  • the transceiver module 620 is also used to send the first CGN diversion strategy to the first UP.
  • the transceiver module 620 is further configured to send a user bearer indication message to the first UP, and the user bearer indication message is used to indicate the traffic of the bearer user equipment; the transceiver module 620 is also used to receive the user equipment sent by the first UP
  • the first public network address, the first public network address is the public network address assigned to the user equipment; the transceiver module 620 is also used to send traceability logs to the raidus server, and the traceability log includes the private network address of the user equipment and the first public network address .
  • the transceiver module 620 is also configured to receive a second CGN instance sent by the SDF, the second CGN instance indicates a second UP with available CGN resources, and the second UP is one of multiple UPs; processing module 610.
  • the second CGN diversion strategy is also used to generate a second CGN diversion strategy according to the second CGN instance.
  • the second CGN diversion strategy is used to instruct to divert the traffic of the user equipment to the second UP; the transceiver module 620 is also used to send the second UP to the second UP. 2.
  • CGN drainage strategy For a specific implementation manner, reference may be made to the specific description of the summary steps 301-316 in the embodiment shown in FIG. 3, which will not be repeated here.
  • the transceiver module 620 is further configured to send a user bearer indication message to the second UP, and the user bearer indication message is used to indicate the traffic of the bearer user equipment; the transceiver module 620 is also used to receive the user equipment sent by the second UP
  • the second public network address, the second public network address is the public network address assigned to the user equipment by the second UP; the transceiver module 620 is also used to send traceability logs to the raidus server, and the traceability log includes the private network address of the user equipment and the second Public network address.
  • the transceiver module 620 is also configured to receive a third CGN instance sent by SDF, the third CGN instance indicates a third UP with available CGN resources, and the third UP is one of multiple UPs; processing module 610.
  • the third CGN diversion strategy is also used to generate a third CGN diversion strategy according to the third CGN instance.
  • the third CGN diversion strategy is used to instruct to divert the traffic of the user equipment to the third UP indicated by the third CGN instance; the transceiver module 620 also uses Yu sends the third CGN drainage strategy to the third UP.
  • the transceiver module 620 is also used to obtain the first public network address of the user equipment in the first UP; the transceiver module 620 is also used to send the first public network address to the third UP, so that the The third UP allocates the first public network address to the user equipment.
  • the transceiver module 620 is also used to obtain the first public network address of the user equipment in the first UP; the transceiver module 620 is also used to send the first public network address to the third UP, so that the The third UP allocates the first public network address to the user equipment.
  • This application provides a UP 700, including:
  • the transceiver module 710 is configured to report CGN resources to the SDF.
  • the CGN resource includes the CGN service load of the first UP, and the first UP is one of multiple UPs; the transceiver module 710 is also configured to receive the first CGN drainage strategy sent by the CP ,
  • the first CGN diversion strategy includes a first CGN instance, the first CGN instance indicates a first UP with available CGN resources, and the first UP is one of multiple UPs; the service module 720 is used to carry user equipment traffic.
  • the transceiver module 710 is also used to receive a user bearer indication message sent by the CP.
  • the user bearer indication message is used to indicate the traffic of the user equipment;
  • the service module 720 is used to allocate the first public network to the user equipment. Address;
  • the transceiver module 710 is also used to send the first public network address to the CP.
  • the transceiver module 710 is further configured to receive the second public network address sent by the CP; the service module 720 is configured to allocate the second public network address to the user equipment.
  • the transceiver module 710 is further configured to receive the second public network address sent by the CP; the service module 720 is configured to allocate the second public network address to the user equipment.
  • the present application also provides a network device 800, including a processor 810 and a memory 820, the processor 810 is coupled to the memory 820, the memory 820 is used to store programs, and the processor 810 is used to execute the programs in the memory 820 , So that the network device 800 executes the steps of the method described in the above steps 201-216, 301-316, and 401-413.
  • the processor 810 is configured to:
  • the CGN resources include the CGN service load status of each UP in the multiple UPs; receive a CGN instance acquisition request sent by the CP, and the CGN instance acquisition request instructs to allocate a CGN instance to the user equipment; Allocate the first CGN instance to the user equipment according to the CGN resource pool, the first CGN instance indicates the first UP with available CGN resources, and the first UP is one of the multiple UPs; the first CGN instance is sent to the CP.
  • the processor 810 is configured to:
  • the processor 810 is configured to:
  • the CGN resources include the CGN service load of the first UP.
  • the first UP is one of the multiple UPs; the receiving CP sends the first CGN drainage strategy.
  • the first CGN drainage strategy includes the first CGN instance.
  • a CGN instance indicates the first UP with available CGN resources, and the first UP is one of multiple UPs; it carries the traffic of the user equipment.
  • each module in the embodiment shown in FIG. 8 is a software module
  • the software module is stored in the memory 820, and when the processor 810 reads the software code in the memory 820, it prompts all
  • the network device 800 executes:
  • the CGN resources include the CGN service load status of each UP in the multiple UPs; receive a CGN instance acquisition request sent by the CP, and the CGN instance acquisition request instructs to allocate a CGN instance to the user equipment; Allocate the first CGN instance to the user equipment according to the CGN resource pool, the first CGN instance indicates the first UP with available CGN resources, and the first UP is one of the multiple UPs; the first CGN instance is sent to the CP.
  • the CGN resources include the CGN service load of the first UP.
  • the first UP is one of the multiple UPs; the receiving CP sends the first CGN drainage strategy.
  • the first CGN drainage strategy includes the first CGN instance.
  • a CGN instance indicates the first UP with available CGN resources, and the first UP is one of multiple UPs; it carries the traffic of the user equipment.
  • the embodiment of the present application also provides a product including a computer program, which when running on a computer, causes the computer to execute the steps of the method described in steps 201-216, 301-316, and 401-413.
  • the embodiment of the present application also provides a computer-readable storage medium, which stores a program for signal processing, and when it runs on a computer, the computer executes the above steps 201-216, 301- Steps of the method described in 316, 401-413.
  • the device embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physically separate.
  • the physical unit can be located in one place or distributed across multiple network units. Some or all of the modules may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.
  • the connection relationship between the modules indicates that they have a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines.
  • this application can be implemented by means of software plus necessary general hardware.
  • it can also be implemented by dedicated hardware including dedicated integrated circuits, dedicated CPUs, dedicated memory, Dedicated components and so on to achieve.
  • all functions completed by computer programs can be easily implemented with corresponding hardware.
  • the specific hardware structures used to achieve the same function can also be diverse, such as analog circuits, digital circuits or special-purpose circuits. Circuit etc.
  • software program implementation is a better implementation in more cases.
  • the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a readable storage medium, such as a computer floppy disk. , U disk, mobile hard disk, ROM, RAM, magnetic disk or optical disk, etc., including several instructions to make a computer device (which can be a personal computer, training device, or network device, etc.) execute the various embodiments described in this application method.
  • a computer device which can be a personal computer, training device, or network device, etc.
  • the computer program product includes one or more computer instructions.
  • the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium.
  • the computer instructions may be transmitted from a website, computer, training device, or data.
  • the center transmits to another website, computer, training equipment, or data center through wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.).
  • wired such as coaxial cable, optical fiber, digital subscriber line (DSL)
  • wireless such as infrared, wireless, microwave, etc.
  • the computer-readable storage medium may be any available medium that can be stored by a computer or a data storage device such as a training device or a data center integrated with one or more available media.
  • the usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, and a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (SSD)).

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本申请实施例公开了一种网络接入控制方法、SDF、CP、UP以及网络***，通过多个UP向SDF上报的CGN资源，使得SDF得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况，使得当用户设备上线时，CP向SDF发送CGN实例获取请求，以为用户设备分配CGN实例，SDF根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个，最后SDF向CP发送第一CGN实例，使得CP可以根据第一CGN实例使具有CGN资源的第一UP承载用户设备的流量，并为用户设备提供CGN业务服务，从而保障了在流量路径规划的场景下为用户设备分配有可用的CGN资源的UP。

Description

一种网络接入控制方法、SDF、CP、UP以及网络***
本申请要求于2020年03月31日提交中国专利局、申请号为202010247661.X、发明名称为“一种网络接入控制方法、SDF、CP、UP以及网络***”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及通信网络领域，尤其涉及一种网络接入控制方法、切流决策功能模块(steering decision function，SDF)、控制面(control plane，CP)、用户面(user plane，UP)以及网络***。
背景技术
软件定义网络(software defined netword，SDN)是一种引入了一个SDN控制器的网络架构，通过SDN控制器对管辖范围内的网络设备进行控制(被控制的网络设备称为转发器)，实现转控分离和集中控制。为了应对数量众多的用户设备的接入，在基于SDN的网络架构下配置了多个宽带网络网关(broadband network gateway，BNG)的UP，当用户设备上线时，通过接入其中一个UP实现接入网络，接入的UP用于承载用户设备流量。
为了实现对多个UP的负载均衡管理，当前引入了一种流量路径规划(traffic steering)的方案。该方案中，通过在SDN控制器中接入或设置一个切流决策功能模块(steering decision function，SDF)，SDF获取各个UP的负载情况，并基于负载均衡的原则为新接入的用户设备选择UP，以及在用户设备接入后根据可靠性和差异化服务等级协议(service-level agreement，SLA)动态地调整到其它UP，达成流量调优的目的。
但是，流量路径规划的方案中并未考虑运营商级网络地址转换(carrier-grade NAT，CGN)资源的问题，即当为用户设备选择了一个UP时，并不能保证该UP上具有可用的CGN资源。
发明内容
本申请实施例提供了一种网络接入控制方法、SDF、CP、UP以及网络***，用于在用户设备接入选择具有CGN资源的UP。
第一方面，本申请实施例提供了一种网络接入控制方法，应用于网络***，所述网络***包括切流决策功能模块SDF、多个用户面UP和控制面CP，该方法包括：
SDF接收多个UP上报的CGN资源，得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况；SDF接收CP发送的CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；SDF根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；SDF向CP发送第一CGN实例。
使得CP可以根据第一CGN实例使具有CGN资源的第一UP承载用户设备的流量，并为用户设备提供CGN业务服务，从而保障了在流量路径规划的场景下为用户设备分配有可用 的CGN资源的UP。
可选的，在第一方面的一种实现中，第一CGN实例包括第一UP、第一UP中的第一CGN单板和第一CGN单板中的第一中央处理器CPU，为用户设备确定了实现CGN业务的第一CPU。
可选的，在第一方面的一种实现中，SDF接收远程用户拨号认证radius服务器配置的差异化服务等级协议SLA策略；SDF根据CGN资源池和SLA策略为用户设备分配第一CGN实例，使得分配的第一CGN实例不仅为用户设备分配了具有可用CGN资源的第一UP，而且满足SLA策略。
可选的，在第一方面的一种实现中，SDF接收radius服务器发送新的SLA策略；SDF根据新的SLA策略和CGN资源池为用户设备分配第二CGN实例，第二CGN实例指示具有可用CGN资源的第二UP，第二UP为多个UP中的一个；SDF向CP发送第二CGN实例，保障了在不同的SLA下为用户设备分配有可用的CGN资源的第二UP。
可选的，在第一方面的一种实现中，SDF确定第一UP发生故障；SDF根据SLA策略和CGN资源池为用户设备分配第三CGN实例，第三CGN实例指示具有可用CGN资源的第三UP，第三UP为多个UP中的一个；SDF向CP发送第三CGN实例，保障了承载用户设备的第一UP发生故障的情况下，为用户设备分配有可用的CGN资源的UP。
第二方面，本申请实施例提供了一种网络接入控制方法，应用于网络***，所述网络***包括SDF、多个UP和CP，该方法包括：
CP向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；CP接收SDF发送的第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；CP根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中；CP向第一UP发送第一CGN引流策略。在本申请实施例中，第一CGN引流策略包括流量ACL规则，以使得第一UP根据ACL规则将用户设备的流量引到第一CGN单板的第一CPU中。
使得具有CGN资源的第一UP承载用户设备的流量，并为用户设备提供CGN业务服务，从而保障了在流量路径规划的场景下为用户设备分配有可用的CGN资源的UP。
可选的，在第二方面的一种实现中，第一CGN实例包括第一UP、第一UP中的第一CGN单板和第一CGN单板中的第一中央处理器CPU，为用户设备确定了实现CGN业务的第一CPU。
可选的，在第二方面的一种实现中，CP向第一UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；CP接收第一UP发送的第一公网地址，第一公网地址为分配给用户设备的公网地址；CP向raidus服务器发送溯源日志，溯源日志包括用户设备的私网地址和第一公网地址，以使得当用户设备接入第一UP时，运营商可以通过raidus服务器对网络的监控。
可选的，在第二方面的一种实现中，CP接收SDF发送的第二CGN实例，第二CGN实例指示具有可用CGN资源的第二UP，第二UP为多个UP中的一个；CP根据第二CGN实例生成第二CGN引流策略，第二CGN引流策略用于指示将用户设备的流量引到第二UP中；CP向第二UP发送第二CGN引流策略，保障了在切换UP的场景下，用户设备依然可以分配到具有可用CGN资源的第二UP。
可选的，在第二方面的一种实现中，CP向第二UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；CP接收第二UP发送的第二公网地址，第二公网地址为第二UP分配给用户设备的公网地址；CP向raidus服务器发送溯源日志，溯源日志包括用户设备的私网地址和第二公网地址。保障了在切换UP的场景下，依然可以发送溯源日志，以使得运营商可以通过raidus服务器对网络的监控。
可选的，在第二方面的一种实现中，CP接收SDF发送的第三CGN实例，第三CGN实例指示具有可用CGN资源的第三UP，第三UP为多个UP中的一个；CP根据第三CGN实例生成第三CGN引流策略，第三CGN引流策略用于指示将用户设备的流量引到第三CGN实例所指示的第三UP中；CP向第三UP发送第三CGN引流策略。保障了在UP发生故障的场景下，用户设备依然可以分配到具有可用CGN资源的第三UP。
可选的，在第二方面的一种实现中，CP获取用户设备在第一UP中的第一公网地址；CP向第三UP发送第一公网地址，以使得第三UP为用户设备分配第一公网地址。由于第一公网地址是用户设备在第一UP上的公网地址，在用户设备上线的时候，CP已经将该第一公网地址私网地址作为溯源日志向radius服务器上传过一次，因此CP不需要再次上传，使得在第一UP发生故障的场景下，不需要大规模上传溯源日志，节省了传输资源，减轻了网络的负担。
可选的，在第二方面的一种实现中，所述CP获取所述用户设备在所述第一UP中的所述第一公网地址；所述CP向所述第三UP发送所述第一公网地址，以使得所述第三UP为所述用户设备分配所述第一公网地址。
第三方面，本申请实施例提供了一种网络接入控制方法，应用于网络***，所述网络***包括SDF、多个UP和CP，该方法包括：
第一UP向SDF上报CGN资源，CGN资源包括第一UP的CGN业务负载情况，第一UP为多个UP中的一个；第一UP接收CP发送第一CGN引流策略，第一CGN引流策略包括第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；第一UP承载用户设备的流量。
使得CP可以根据第一CGN实例使具有CGN资源的第一UP承载用户设备的流量，并为用户设备提供CGN业务服务，从而保障了在流量路径规划的场景下为用户设备分配有可用的CGN资源的UP。
可选的，在第三方面的一种实现中，第一UP接收CP发送的用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；第一UP为用户设备分配第一公网地址；第一UP向CP发送第一公网地址。实现了用户设备上线时可以分配到可用的公网地址。
可选的，在第三方面的一种实现中，第一UP接收CP发送的第二公网地址；第一UP为用户设备分配第二公网地址。实现了当故障发生时，用户设备可以保持原有的公网地址。
第四方面，本申请实施例提供了一种网络接入控制方法，应用于网络***，所述网络***包括SDF、多个UP、CP，该方法包括：
多个UP向SDF上报CGN资源，使得SDF得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况；CP向SDF发送CGN实例获取请求，CGN实例获取请求指示为用 户设备分配CGN实例；SDF根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；SDF向CP发送第一CGN实例；CP根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中；CP向第一UP发送第一CGN引流策略；第一UP承载用户设备的流量。
使得CP可以根据第一CGN实例使具有CGN资源的第一UP承载用户设备的流量，并为用户设备提供CGN业务服务，从而保障了在流量路径规划的场景下为用户设备分配有可用的CGN资源的UP。
第五方面，本申请实施例提供了一种网络设备，应用于网络***，所述网络***包括SDF、多个UP和CP，SDF设置在网络设备中，该网络设备包括：
收发模块，用于接收多个UP上报的CGN资源，得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况；收发模块，还用于接收CP发送的CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；处理模块，用于根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；收发模块，还用于向CP发送第一CGN实例。
可选的，在第五方面的一种实现中，收发模块，还用于接收远程用户拨号认证radius服务器配置的差异化服务等级协议SLA策略；处理模块，具体用于根据CGN资源池和SLA策略为用户设备分配第一CGN实例。
可选的，在第五方面的一种实现中，收发模块，还用于接收radius服务器发送新的SLA策略；处理模块，还用于根据新的SLA策略和CGN资源池为用户设备分配第二CGN实例，第二CGN实例指示具有可用CGN资源的第二UP，第二UP为多个UP中的一个；收发模块，还用于向CP发送第二CGN实例。
可选的，在第五方面的一种实现中，处理模块，还用于确定第一UP发生故障；处理模块，还用于根据SLA策略和CGN资源池为用户设备分配第三CGN实例，第三CGN实例指示具有可用CGN资源的第三UP，第三UP为多个UP中的一个；收发模块，还用于向CP发送第三CGN实例。
第六方面，本申请实施例提供了一种CP，应用于网络***，所述网络***包括SDF、多个UP、CP，该CP包括：收发模块，用于向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；收发模块，还用于接收SDF发送的第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；处理模块，还用于根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中；收发模块，还用于向第一UP发送第一CGN引流策略。
可选的，在第六方面的一种实现中，收发模块，还用于向第一UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；收发模块，还用于接收第一UP发送的第一公网地址，第一公网地址为分配给用户设备的公网地址；收发模块，还用于向raidus 服务器发送溯源日志，溯源日志包括用户设备的私网地址和第一公网地址。
可选的，在第六方面的一种实现中，收发模块，还用于接收SDF发送的第二CGN实例，第二CGN实例指示具有可用CGN资源的第二UP，第二UP为多个UP中的一个；处理模块，还用于根据第二CGN实例生成第二CGN引流策略，第二CGN引流策略用于指示将用户设备的流量引到第二UP中；收发模块，还用于向第二UP发送第二CGN引流策略。
可选的，在第六方面的一种实现中，收发模块，还用于向第二UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；收发模块，还用于接收第二UP发送的第二公网地址，第二公网地址为第二UP分配给用户设备的公网地址；收发模块，还用于向raidus服务器发送溯源日志，溯源日志包括用户设备的私网地址和第二公网地址。
可选的，在第六方面的一种实现中，收发模块，还用于接收SDF发送的第三CGN实例，第三CGN实例指示具有可用CGN资源的第三UP，第三UP为多个UP中的一个；处理模块，还用于根据第三CGN实例生成第三CGN引流策略，第三CGN引流策略用于指示将用户设备的流量引到第三CGN实例所指示的第三UP中；收发模块，还用于向第三UP发送第三CGN引流策略。
可选的，在第六方面的一种实现中，收发模块，还用于获取用户设备在第一UP中的第一公网地址；收发模块，还用于向第三UP发送第一公网地址，以使得第三UP为用户设备分配第一公网地址。
第七方面，本申请实施例提供了一种UP，应用于网络***，所述网络***包括SDF、多个UP、CP，该UP包括：
收发模块，用于向SDF上报CGN资源，CGN资源包括第一UP的CGN业务负载情况，第一UP为多个UP中的一个；收发模块，还用于接收CP发送第一CGN引流策略，第一CGN引流策略包括第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；业务模块，用于承载用户设备的流量。
可选的，在第七方面的一种实现中，收发模块，还用于接收CP发送的用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；业务模块，用于为用户设备分配第一公网地址；收发模块，还用于向CP发送第一公网地址。
可选的，在第七方面的一种实现中，收发模块，还用于接收CP发送的第二公网地址；业务模块，用于为用户设备分配第二公网地址。
第八方面，本申请实施例提供了一种网络***，SDF、多个UP、CP；多个UP，用于向SDF上报CGN资源，使得SDF得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况；CP，用于向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；SDF，用于根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个，SDF向CP发送第一CGN实例；CP，还用于根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中，CP向第一UP发送第一CGN引流策略；第一UP，用于承载用户设备的流量。
第九方面，本申请实施例提供了一种计算机可读存储介质，包括指令，当其在计算机上运行时，使得计算机执行上述任一方面任一项可能的方法。
第十方面，本申请实施例提供了一种网络设备，包括处理器和存储器，处理器与存储器耦合，
存储器，用于存储程序。处理器，用于执行存储器中的程序，使得终端设备执行上述任一方面任一项可能的方法。
从以上技术方案可以看出，本申请实施例具有以下优点：
由于多个UP向SDF上报的CGN资源，使得SDF得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况，使得当用户设备上线时，CP向SDF发送CGN实例获取请求，以为用户设备分配CGN实例，SDF根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个，最后SDF向CP发送第一CGN实例，使得CP可以根据第一CGN实例使具有CGN资源的第一UP承载用户设备的流量，并为用户设备提供CGN业务服务，从而保障了在流量路径规划的场景下为用户设备分配有可用的CGN资源的UP。
附图说明
图1为本申请实施例所应用的网络***的结构示意；
图2为本申请实施例提供的一种网络接入控制方法的示意图；
图3为本申请实施例提供的一种网络接入控制方法的示意图；
图4为本申请实施例提供的一种网络接入控制方法的示意图；
图5为本申请实施例提供的一种网络设备的示意图；
图6为本申请实施例提供的一种CP的示意图；
图7为本申请实施例提供的一种UP的示意图；
图8为本申请实施例提供的一种网络设备的示意图。
具体实施方式
本申请实施例提供了一种网络接入控制方法、设备以及网络***，用于为用户设备选择具有CGN资源的UP。
本申请的说明书和权利要求书及上述附图中的术语“第一”、“第二”、“第三”、“第四”等(如果存在)是用于区别类似的对象，而不必用于描述特定的顺序或先后次序。应该理解这样使用的数据在适当情况下可以互换，以便这里描述的实施例能够以除了在这里图示或描述的内容以外的顺序实施。此外，术语“包括”和“具有”以及他们的任何变形，意图在于覆盖不排他的包含，例如，包含了一系列步骤或单元的过程、方法、***、产品或设备不必限于清楚地列出的那些步骤或单元，而是可包括没有清楚地列出的或对于这些过程、方法、产品或设备固有的其它步骤或单元。
请参考图1，为本申请实施例所应用的网络***100，该网络***100包括CP 110、多个UP 120、SDF 140，在一些可能的实现方式中，该网络***100还包括SDN控制器130、 切流路由器(steering function router，SFR)150、radius服务器160和随需应变地址池(on demand address pools，ODAP)服务器170。
SDN控制器130为基于SDN技术的网络架构的核心。SDN控制器130具有应用程序接口(application program interface，API)接口，通过南北向转控分离协议(如OpenFlow)，北向连接CP 110，南向连接UP 120，实现了CP 110和UP 120之间的控制信息交互，从而实现了转控分离。在本申请实施例中，SDN控制器130通过API接口接通SFR、多个UP 120、CP 110，实现了SFR、多个UP 120、CP 110之间的通信。
在转控分离的场景下，CP 110为网络设备的控制面，例如网元管理***(network element management system，EMS)，用于通过SDN控制器130对多个UP 120实现集中控制；UP 120为网络设备的用户面，亦称为转发器，用于根据CP 110通过SDN控制器130下发的路由指令对数据进行转发。
SDF 140为流量路径规划方案下的控制器，连接SDN控制器130的东西向接口，用于统一管理UP 120资源和CGN资源，在负载均衡等场景中，收集网络负载，计算均衡策略，调用SDN控制器130的北向接口，对Metro网络进行负载调整。CP 110通过与SDF 140的信令交互，可以动态选择用户上线的UP 120，以及上线后动态调整到其它UP 120，达成流量调优的目的。SDF 140还可以在SLA和增值服务(value added service，VAS)等业务场景中，在用户上线过程中，与radius服务器160互动，计算生成满足用户SLA的UP 120，通知给CP 110。SDF 140的实现方式可能有多种，可以是一个独立的网络实体，一般由运营商开发，SDF 140通过SDN控制器130对外下发控制策略；SDF 140也可以是SDN控制器130的一个部件。需要说明的是，在下述实施例中，若SDF 140是一个独立的实体，则SDF 140和SDN控制器130通过通信接口发送信息，若SDF 140是SDN控制器130中集成的部件，则SDF 140和SDN控制器130可以在SDN控制器130内部实现信息交互。
在本申请实施例中，SFR 140用于作为用户设备，在CP 110的控制下，将用户设备的流量引到所指示的UP 120中。
在本申请实施例中，radius服务器160为运营商管理的服务器，用于管理用户设备的溯源日志，溯源日志为用户设备的私网地址和公网地址的映射。
ODAP服务器170为在BNG转控分离架构下，对地址资源的集中管理，CGN做NAT转换的公网地址资源由向ODAP服务器170分配获得。ODAP服务器170可以是一个单独网络实体，连接CP 110，也可以CP 110上集成的一个部件。需要说明的是，在下述实施例中，若ODAP服务器170是一个独立的实体，则ODAP服务器170和CP 110通过通信接口发送信息，若ODAP服务器170是CP 110中集成的部件，则ODAP服务器170和CP 110可以在CP 110内部实现信息交互。
为了应对数量众多的用户设备的接入，在基于SDN的网络架构下配置了多个BNG的UP 120，当用户设备上线时，通过接入其中一个UP 120实现接入网络，接入的UP 120用于承载用户设备流量。
为了实现对多个UP 120的负载均衡管理，当前引入了一种流量路径规划的方案。该方案中，通过在SDN控制器130中接入或设置一个SDF 140，SDF 140获取各个UP 120的负载情况，并基于负载均衡的原则为新接入的用户设备选择UP 120，以及在用户设备接入后 根据可靠性和SLA动态地调整到其它UP 120，达成流量调优的目的。
但是，流量路径规划的方案中并未考虑CGN资源的问题，即当为用户设备选择了一个UP 120时，并不能保证该UP 120上具有可用的CGN资源。
为此，在本申请实施例中，SDF 140接收多个UP 120上报的CGN资源，得到CGN资源池，CGN资源包括多个UP 120中各个UP 120的CGN业务负载情况，然后接收CP 110发送的用户上线消息，用户上线消息指示用户设备上线，并根据CGN资源池和配置的SLA策略为用户设备分配第一CGN实例，第一CGN实例包括第一UP 120、第一UP 120中的第一CGN单板和第一CGN单板中的第一CPU，第一UP 120为多个UP 120中的一个，最后，SDF 140向CP 110发送第一CGN实例，从而保障了在流量路径规划的场景下为用户设备分配有可用的CGN资源的UP 120。
以下，根据用户设备的上线、切换和迁移的不同应用场景，对本申请实施例的技术方案进行描述。
实施例一、用户设备的上线。
具体的，请参考图2，本申请提出了一种网络接入控制方法，包括：
201、多个UP向SDF上报CGN资源，以使SDF得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况。
当一个UP上线时，通过CP与ODAP服务器的信令交互，获取一定数量的公网地址，比如100个。一个UP包括多个CGN单板，一个CGN单板包括多个CPU，当UP获取了公网地址之后，UP将公网地址分配个各个CGN单板进行管理，CGN单板又将分给自己的公网地址分给各个CPU进行管理。当用户设备接入UP时，UP为用户设备分配CGN单板和该CGN单板中的CPU，以该CPU管理的可用的公网地址分配一个给用户设备，即为用户设备提供CGN业务服务，以使得用户设备可以使用该公网地址访问公网。
例如，一个UP具有3个CGN单板，分别为单板1、单板2和单板3，其中，单板1具有3个CPU，单板2具有6个CPU，单板3具有1个CPU，即该UP一共具有14个CPU。当该UP获取了100个公网地址后，即将100个公网地址分配给10个CPU，例如每个CPU分配10个公网地址，或者有5个CPU中每个CPU分配5个公网地址，另外5个CPU中每个CPU分配15个公网地址，此处不做限定。
当UP为用户设备提供CGN业务服务时，需要使用CGN资源。例如，可用的公网地址，即UP上需要至少有一个CGN单板上的至少一个CPU具有可用的公网地址。那么，在UP为用户设备提供CGN业务服务之前，需要上报自身的CGN资源。
在一些可能的实现方式，CGN资源包括地址使用率、会话数利用率、CPU使用率、CPU带宽等。具体的，地址使用率为已使用的公网地址和分配的公网地址的数量之比。例如，UP申请了100个公网地址，已经使用了80个，那么地址使用率为80:100＝80％。例如，UP可以容纳的会话数最高为16兆，当前所使用的会话数为8兆，那么会话数利用率为50％。CPU使用率为使用CPU的处理能力基准计算实时CPU占用率，而CPU带宽是指CPU与北桥之间的数据传输率。综上所述，CGN资源为一个UP对CGN业务服务的负载情况，反映了一个UP对CGN业务服务的能力。
需要说明的是，CGN资源也是动态的，即UP多服务了一个用户设备后，其能提供的CGN 资源便有所减少，因此UP需要动态地或定时向SDF上报CGN资源。SDF接收到多个UP上报的CGN资源后，进行整合汇集，得到CGN资源池。当用户设备上线时，SDF可以根据CGN资源池，从中选择一个CGN实例，分配给该用户设备，保障用户设备接入的UP具有可用的CGN资源。
202、CP确定用户设备上线。
在本申请实施例中，用户设备上线时，可以连接到SFR，然后SFR根据网络规划，为用户设备分配一个UP实现上线，例如UP1。当用户设备在UP1处上线时，UP1与CP进行信令交互，使得CP确定用户设备上线。根据传统的网络规划所分配的UP1上未必有CGN资源可用，为此，CP需要通过在SDF上查询CGN资源池，为用户设备分配一个具有可用的CGN资源的UP。
需要说明的是，不同的用户设备上线时，根据网络规划，其选择的上线接入的UP不尽相同。比如，用户设备1上线时，根据网络规划分配了UP2；用户设备2上线时，根据网络规划分配了UP5；用户设备3上线时，根据网络规划分配了UP2。需要说明的是，无论选择了什么UP，接入的UP都需要与CP进行信令交互，让CP确定有新的用户设备上线。
203、CP向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例。
在本申请实施例中，当CP确定用户设备上线后，通过向SDF查询CGN资源池，以选择具有CGN资源的UP。具体的，CP首先向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例。
204、SDF根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个。
当SDF接收到CGN实例获取请求后，SDF可以根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个。在一些可能的实现方式，SDF可以优先确认用户设备当前接入的UP是否具有可用的CGN资源，如果有，则优先从该UP中分配CGN实例给该用户设备，以减少切换过程中的不必要的信令交互，减少资源的消耗。
在一些可能的实现方式，SDF也可以根据负载均衡的原则，选择一个负载较轻的UP、CGN单板和CPU，分配给该用户设备。对于不同的UP、CGN单板和CPU的负载情况的衡量，可以通过其地址使用率、CPU使用率、带宽使用率会话数使用率等因素进行衡量。
以地址使用率为例，假设CGN资源池中显示，当前有3个可选的UP，分别为UP1、UP2和UP3，其地址使用率分别为80％、70％和50％。那么鉴于负载均衡的原则，可以选择负载最轻的UP3作为第一UP，然后基于相同的原则从第一UP中选择负载最轻CGN单板作为第一CGN单板，从第一CGN单板中选取负载最轻的第一CPU，以此确定了第一CGN实例。
在一些可能的实现方式，也可以考量各个UP剩余的可用公网地址，从而选择可用公网地址最多的UP，该UP中可用公网地址最多的CGN单板，以及该CGN单板中可用公网地址最多的CPU。
在一些可能的实现方式，可以通过上述方法确定UP和CGN单板，然后在选择CPU的时候，在具有可用公网地址的各个CPU中，选择CPU使用率较低的CPU，作为第一CPU。在一 些可能的实现方式，还可以考量各个CPU的会话数使用率、CPU带宽等，此处不做限定。
在一些可能的实现方式，也可以综合考量上述多个因素进行加权，以选择一个合适的CGN实例，分配给用户设备，此处不做限定。
在一些可能的实现方式，在SDF根据所述CGN资源池为所述用户设备分配第一CGN实例之前，SDF接收radius服务器配置的差异化服务等级协议SLA策略，然后SDF根据CGN资源池和SLA策略为用户设备分配第一CGN实例。需要说明的是，SLA策略是radius服务器配置的，并动态地下发给SDF，SLA策略是服务提供者和用户双方签订的一个合约或协议，这个合约规范了双方的商务关系或部分商务关系。
205、SDF向CP发送第一CGN实例。
在本申请实施例中，当SDF确定了为用户设备分配的第一CGN实例后，可以向CP发送第一CGN实例，以完成CP向SDF查询CGN资源池，以确定第一CGN实例的过程。在本申请实施例中，由于SDF通过CGN资源池选取了具有CGN资源的UP，使得用户设备接入第一CGN实例所指示的UP时，保证具有可用的CGN资源。
206、CP向SFR下发隧道改变消息，该隧道改变消息用于指示SFR将用户设备的流量引到第一UP中。
当CP确定了第一CGN实例后，向SFR下发隧道改变消息，以使得SFR将该用户设备的流量引到第一CGN所指示的第一UP中，让第一UP承载该用户设备的流量。例如，SFR中用户设备的流量原来是根据网络规划发送给UP1，现在确定了新的UP后，如确定了UP2作为第一UP，那么，SFR将新接收到的用户设备发送的流量都转发给UP2，让UP2承载用户设备的流量。在一些可能的实现方式，如果SDF确定的新的UP与原来承载用户设备的流量的UP相同，那么可以不需要向SFR下发隧道改变消息，此处不做限定。
207、CP向第一UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量。
在本申请实施例中，当CP从SDF中获取了第一CGN实例后，从第一CGN实例确定第一UP，可以向第一UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量。接收了用户承载指示消息后的第一UP可以则就可以为承载用户设备的流量。那么，SFR也确定了将该用户设备的流量转发给第一UP，第一UP也确定了接收用户设备的流量，那么实现了对用户设备的流量从原接入的UP到第一UP的切换。
208、第一UP为用户设备分配第一公网地址。
在本申请实施例中，用户承载指示消息还包括第一CGN实例，用于指示第一UP根据第一CGN实例所指示的第一CGN单板中的第一CPU为用户设备分配公网地址。那么，第一UP根据用户承载指示消息中的指示，通过第一CGN实例中的第一CGN单板、第一CPU，从管理的多个公网地址中，选择第一公网地址分配给用户设备。
209、第一UP向CP发送第一公网地址。
在本申请实施例中，第一UP为用户设备分配第一公网地址后，可以向CP发送第一公网地址，即向CP指示第一UP将用户设备的私网地址转换为第一公网地址，那么用户设备可以使用该第一公网地址访问网络。
210、CP向raidus服务器发送第一溯源日志，第一溯源日志包括用户设备的私网地址 和第一公网地址。
当接收到第一公网地址，CP可以向raidus服务器发送溯源日志，溯源日志包括用户设备的私网地址和第一公网地址。需要说明的是，运营商通过radius服务器上的溯源日志对网络进行维护，例如认证、授权和计费等。
211、CP根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中。
当CP确定了第一CGN实例后，需要向第一CGN实例中所指的第一UP发送第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中。在本申请实施例中，第一CGN引流策略包括流量(access control lists，ACL)规则，以使得第一UP根据ACL规则将用户设备的流量引到第一CGN单板的第一CPU中。
例如，在第一UP、第一CGN以及第一CPU上，该流量ACL规则中的条件为：IP地址＝用户设备的私网地址。若满足条件，则允许(permit)，则若不满足，则拒绝(deny)。那么，则实现将该用户设备的流量引到该第一UP、第一CGN以及第一CPU上。
212、CP向第一UP发送第一CGN引流策略。
当确定了第一CGN引流策略后，即可向第一UP发送，以使得第一UP可以根据第一CGN引流策略的指示承载用户设备的流量。
213、第一UP承载用户设备的流量。
在本申请实施例中，当第一UP接收第一CGN引流策略，并根据其中的流量ACL规则进行设置之后，第一UP即可为用户设备提供CGN业务服务，即承载用户设备的流量，并将用户设备的私网地址转换为第一公网地址，以实现用户设备对网络的访问。需要说明的是，第一UP承载用户设备的流量之后，第一UP中的第一CGN单板中的第一CPU为用户设备提供CGN业务，需要使用CGN资源，使得第一UP、第一CGN单板和第一CPU的负载加重，改变负载情况，那么第一UP可以向SDF上报新的CGN资源，或者在预定时间点向SDF上报新的CGN资源的负载情况。
214、第一UP建立该用户设备的用户表项。
在一些可能的实现方式，当第一UP为用户设备提供服务时，可以为用户设备建立一个用户表项，即在原有的用户表中添加一个表项，用于记录该用户设备的资料，例如该用户设备的私网地址、第一公网地址、第一CGN实例等，此处不做限定。
215、第一UP通过CP向ODAP发送公网地址获取请求。
在一些可能的实现方式，如果第一UP的可用的公网地址不足，例如低于预设值，那么，第一UP需要再申请一些公网地址备用。例如，预设值为80％，当前第一UP原来分配了100个公网地址，已经用了79个，当为用户设备分配了一个公网地址后，已用的公网地址达到80个，使得地址使用率达到80％，触发第一UP向ODAP申请更多公网地址的步骤。
具体的，第一UP向CP发送公网地址获取请求，CP将该公网地址请求转发给ODAP服务器，然后ODAP服务器根据请求的内容向CP发送多个公网地址，例如100个公网地址。
216、ODAP服务器通过CP向第一UP发送多个公网地址。
当CP获取了ODAP返回的多个公网地址后，CP将多个公网地址转发给第一UP，那么，第一UP将获取的公网地址分配给多个CGN单板，以及各个CGN单板的各个CPU进行管理。
实施例二、用户设备的切换。
具体的，请参考图3，本申请提出了一种网络接入控制方法，包括：
301、多个UP向SDF上报CGN资源，以使SDF得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况。
步骤301与步骤201相同，此处不做赘述。
302、radius服务器向SDF发送新的SLA策略。
在本申请实施例中，由于SLA策略是动态配置的，当radius服务器改变了SLA策略后，会向SDF发送新的SLA策略，以使得SDF根据新的SLA策略和CGN资源池为用户设备分配第二CGN实例。
303、SDF根据新的SLA策略和CGN资源池为用户设备分配第二CGN实例，第二CGN实例包括第二UP、第二UP中的第二CGN单板和第二CGN单板中的第二CPU，第二UP为多个UP中的一个。
步骤303与步骤204类似，此处不做赘述。
304、SDF向CP发送第二CGN实例。
步骤304与步骤205类似，此处不做赘述。
305、CP向SFR下发隧道改变消息，该隧道改变消息用于指示SFR将用户设备的流量引到第二UP中。
步骤305与步骤206类似，此处不做赘述。
306、CP删除第一UP中用户设备的用户表项。
在本申请实施例中，当CP确定将用户设备切换到第二UP中时，需要首先删除第一UP中的该用户设备的用户表项，并释放第一公网地址，以使得该第一公网地址重新作为可用公网地址，当第一UP为另一个用户设备服务时，可以使用该第一公网地址。
307、CP向第二UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量。
步骤307与步骤207类似，此处不做赘述。
308、第二UP为用户设备分配第二公网地址。
步骤308与步骤208类似，此处不做赘述。
309、第二UP向CP发送第二公网地址。
步骤308与步骤208类似，此处不做赘述。
310、CP向raidus服务器发送第二溯源日志，第二溯源日志包括用户设备的私网地址和第二公网地址。
步骤309与步骤209类似，此处不做赘述。
311、CP根据第二CGN实例生成第二CGN引流策略，第二CGN引流策略用于指示将用户设备的流量引到第二UP中。
步骤310与步骤210类似，此处不做赘述。
312、CP向第二UP发送第二CGN引流策略。
步骤311与步骤211类似，此处不做赘述。
313、第二UP通过第二CPU承载用户设备的流量。
步骤312与步骤212类似，此处不做赘述。
314、第二UP建立该用户设备的用户表项。
步骤313与步骤213类似，此处不做赘述。
315、第二UP通过CP向ODAP发送公网地址获取请求。
步骤314与步骤214类似，此处不做赘述。
316、ODAP服务器通过CP向第二UP发送多个公网地址。
步骤315与步骤215类似，此处不做赘述。
需要说明的是，如果第二CGN实例与第一CGN实例中所指示的UP、CGN单板和CPU相同，那么可以不需要执行上述步骤304-313，也可以重新再执行一次，此处不做限定。如果第二CGN实例与第一CGN实例中所指示的UP、CGN单板和CPU不同，则实现了用户设备从第一UP到第二UP的切换。
实施例三、用户设备的迁移。
具体的，请参考图4，本申请提出了一种网络接入控制方法，包括：
401、多个UP向SDF上报CGN资源，以使SDF得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况。
步骤301与步骤201、301相同，此处不做赘述。
402、SDF确定第一UP/第二UP发生故障。
在本申请实施例中，SDF可以感知用户设备所接入的UP(第一UP/第二UP)是否发生故障。以第一UP为例，第一UP除了下线的状态，持续向SDF发送状态信号，以向SDF告知第一UP的存在。那么若第一UP未下线，而SDF一段时间内没有收到该状态信号，则可以确定第一UP发生了故障。
403、SDF根据SLA策略/新的SLA策略和CGN资源池为用户设备分配第三CGN实例，第三CGN实例指示具有可用CGN资源的第三UP，第三UP为多个UP中的一个。
在本申请实施例中，当SDF确定第一UP发生故障之后，可以根据SLA策略/新的SLA策略和CGN资源池为用户设备分配第三CGN实例，其过程与步骤204、303类似，此处不做赘述。需要说明的是，在本申请实施例中，SDF不仅为步骤204、303中所指的用户设备分配CGN实例，还为第一UP/第二UP服务的所有用户设备分配第三CGN实例。在一些可能的实现方式，SDF为第一UP/第二UP服务的各个用户设备分配的CGN实例可以指示同一个UP，也可以指示不同的UP，此处不做限定。
404、SDF向CP发送第三CGN实例。
步骤404与步骤205、304类似，此处不做赘述。
405、CP向SFR下发隧道改变消息，该隧道改变消息用于指示SFR将用户设备的流量引到第三UP中。
步骤405与步骤206、305类似，此处不做赘述。
406、CP向第三UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量。
步骤406与步骤207、306类似，此处不做赘述。
407、CP获取用户设备在第一UP/第二UP所使用的第一公网地址/第二公网地址。
若让第三UP为用户设备重新分配公网地址，第三UP会向radius服务器发送溯源日志，由于第一UP/第二UP所服务的用户设备数量众多，那么会造成大量的传输开销，甚至可能造成网络拥堵。为此，在本申请实施例中，CP可以获取第一UP/第二UP中的用户设备的第一公网地址/第二公网地址，使得用户设备继续使用该第一公网地址/第二公网地址。
408、CP向第三UP发送第一公网地址/第二公网地址。
获取了第一公网地址/第二公网地址后，将第一公网地址/第二公网地址发送给第三UP。
409、第三UP为用户设备分配第一公网地址/第二公网地址。
获取了第一公网地址/第二公网地址后，第三UP就可以为该用户设备分配该第一公网地址/第二公网地址，以使得第三UP不需要重新分配其他公网地址，也不需要上传溯源日志，节省了传输开销。另外，如果将第一UP/第二UP中所有的用户设备都分配给同一个UP，即第三UP，可能会造成第三UP的公网地址不足，那么CP回收用户设备在第一UP/第二UP所使用的第一公网地址/第二公网地址后，即回收第一UP/第二UP的所有公网地址，分配给第三UP使用，节省了第三UP从ODAP服务器申请更多公网地址的步骤。
410、CP根据第三CGN实例生成第三CGN引流策略，第三CGN引流策略用于指示将用户设备的流量引到第三CGN实例所指示的第三UP中。
步骤410与步骤211、311类似，此处不做赘述。
411、CP向第三UP发送第三CGN引流策略。
步骤411与步骤212、312类似，此处不做赘述。
412、第三UP通过第三CPU承载用户设备的流量。
步骤412与步骤213、312类似，此处不做赘述。
413、第二UP建立该用户设备的用户表项。
步骤413与步骤214、314类似，此处不做赘述。
请参考图5，本申请提供了一种网络设备500，SDF设置在网络设备500中，该网络设备500包括：
收发模块510，用于接收多个UP上报的CGN资源，得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况；收发模块510，还用于接收CP发送的CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；处理模块520，用于根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；收发模块510，还用于向CP发送第一CGN实例。具体实现方式，可以参考如图2中所示实施例汇总步骤201-216具体描述，此处不再赘述。
在具体的实施方式中，收发模块510，还用于接收远程用户拨号认证radius服务器配置的差异化服务等级协议SLA策略；处理模块520，具体用于根据CGN资源池和SLA策略为用户设备分配第一CGN实例。具体实现方式，可以参考如图2所示实施例汇总步骤204的具体描述，此处不再赘述。
在具体的实施方式中，收发模块510，还用于接收radius服务器发送新的SLA策略； 处理模块520，还用于根据新的SLA策略和CGN资源池为用户设备分配第二CGN实例，第二CGN实例指示具有可用CGN资源的第二UP，第二UP为多个UP中的一个；收发模块510，还用于向CP发送第二CGN实例。具体实现方式，可以参考如图3所示实施例汇总步骤301-316的具体描述，此处不再赘述。
在具体的实施方式中，处理模块520，还用于确定第一UP发生故障；处理模块520，还用于根据SLA策略和CGN资源池为用户设备分配第三CGN实例，第三CGN实例指示具有可用CGN资源的第三UP，第三UP为多个UP中的一个；收发模块510，还用于向CP发送第三CGN实例。具体实现方式，可以参考如图4所示实施例汇总步骤401-413的具体描述，此处不再赘述。
所述处理模块520，还用于确定所述第二UP发生故障；所述处理模块520，还用于根据所述新的SLA策略和所述CGN资源池为所述用户设备分配第三CGN实例，所述第三CGN实例指示具有可用CGN资源的第三UP，所述第三UP为所述多个UP中的一个；所述收发模块510，还用于向所述CP发送所述第三CGN实例。具体实现方式，可以参考如图4所示实施例汇总步骤401-413的具体描述，此处不再赘述。
请参考图6，本申请提供了一种CP 600，包括：
处理模块610，用于确定用户设备上线；收发模块620，用于向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；收发模块620，还用于接收SDF发送的第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；处理模块610，还用于根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中；收发模块620，还用于向第一UP发送第一CGN引流策略。具体实现方式，可以参考如图2所示实施例汇总步骤201-216的具体描述，此处不再赘述。
在具体的实施方式中，收发模块620，还用于向第一UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；收发模块620，还用于接收第一UP发送的第一公网地址，第一公网地址为分配给用户设备的公网地址；收发模块620，还用于向raidus服务器发送溯源日志，溯源日志包括用户设备的私网地址和第一公网地址。具体实现方式，可以参考如图2所示实施例汇总步骤207的具体描述，此处不再赘述。
在具体的实施方式中，收发模块620，还用于接收SDF发送的第二CGN实例，第二CGN实例指示具有可用CGN资源的第二UP，第二UP为多个UP中的一个；处理模块610，还用于根据第二CGN实例生成第二CGN引流策略，第二CGN引流策略用于指示将用户设备的流量引到第二UP中；收发模块620，还用于向第二UP发送第二CGN引流策略。具体实现方式，可以参考如图3所示实施例汇总步骤301-316的具体描述，此处不再赘述。
在具体的实施方式中，收发模块620，还用于向第二UP发送用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；收发模块620，还用于接收第二UP发送的第二公网地址，第二公网地址为第二UP分配给用户设备的公网地址；收发模块620，还用于向raidus服务器发送溯源日志，溯源日志包括用户设备的私网地址和第二公网地址。具体实现方式，可以参考如图3所示实施例汇总步骤310的具体描述，此处不再赘述。
在具体的实施方式中，收发模块620，还用于接收SDF发送的第三CGN实例，第三CGN 实例指示具有可用CGN资源的第三UP，第三UP为多个UP中的一个；处理模块610，还用于根据第三CGN实例生成第三CGN引流策略，第三CGN引流策略用于指示将用户设备的流量引到第三CGN实例所指示的第三UP中；收发模块620，还用于向第三UP发送第三CGN引流策略。具体实现方式，可以参考如图4所示实施例汇总步骤401-413的具体描述，此处不再赘述。
在具体的实施方式中，收发模块620，还用于获取用户设备在第一UP中的第一公网地址；收发模块620，还用于向第三UP发送第一公网地址，以使得第三UP为用户设备分配第一公网地址。具体实现方式，可以参考如图4所示实施例汇总步骤407-409的具体描述，此处不再赘述。
请参考图7，本申请提供了一种UP 700，包括：
收发模块710，用于向SDF上报CGN资源，CGN资源包括第一UP的CGN业务负载情况，第一UP为多个UP中的一个；收发模块710，还用于接收CP发送第一CGN引流策略，第一CGN引流策略包括第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；业务模块720，用于承载用户设备的流量。具体实现方式，可以参考如图2所示实施例汇总步骤201-216的具体描述，此处不再赘述。
在具体的实施方式中，收发模块710，还用于接收CP发送的用户承载指示消息，用户承载指示消息用于指示承载用户设备的流量；业务模块720，用于为用户设备分配第一公网地址；收发模块710，还用于向CP发送第一公网地址。具体实现方式，可以参考如图2所示实施例汇总步骤207的具体描述，此处不再赘述。
在具体的实施方式中，收发模块710，还用于接收CP发送的第二公网地址；业务模块720，用于为用户设备分配第二公网地址。具体实现方式，可以参考如图3所示实施例汇总步骤308-309的具体描述，此处不再赘述。
请参考图8，本申请还提供了一种网络设备800，包括处理器810和存储器820，处理器810与存储器820耦合，存储器820用于存储程序，处理器810用于执行存储器820中的程序，使得网络设备800执行上述步骤201-216、301-316、401-413中所述方法的步骤。
当所述网络设备为SDF时，所述处理器810用于：
接收多个UP上报的CGN资源，得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况；接收CP发送的CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；向CP发送第一CGN实例。
具体实现方式，可以参考如图2所示实施例汇总步骤201-216的具体描述，或者如图3所示实施例中步骤301-316的具体描述，或者如图4所示实施例中步骤401-413的具体描述，这里不再赘述。
当所述网络设备为CP时，所述处理器810用于：
确定用户设备上线；向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；接收SDF发送的第一CGN实例，第一CGN实例指示具有可用CGN资源的 第一UP，第一UP为多个UP中的一个；根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中；向第一UP发送第一CGN引流策略。
具体实现方式，可以参考如图2所示实施例汇总步骤201-216的具体描述，或者如图3所示实施例中步骤301-316的具体描述，或者如图4所示实施例中步骤401-413的具体描述，这里不再赘述。
当所述网络设备为UP时，所述处理器810用于：
向SDF上报CGN资源，CGN资源包括第一UP的CGN业务负载情况，第一UP为多个UP中的一个；接收CP发送第一CGN引流策略，第一CGN引流策略包括第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；承载用户设备的流量。
具体实现方式，可以参考如图2所示实施例汇总步骤201-216的具体描述，或者如图3所示实施例中步骤301-316的具体描述，或者如图4所示实施例中步骤401-413的具体描述，这里不再赘述。
在图8所示实施例中的各模块为软件模块的情况下，所述各软件模块存储在所述存储器820中，当所述处理器810读取所述存储器820中的软件代码时促使所述网络设备800执行：
接收多个UP上报的CGN资源，得到CGN资源池，CGN资源包括多个UP中各个UP的CGN业务负载情况；接收CP发送的CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；根据CGN资源池为用户设备分配第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；向CP发送第一CGN实例。
或，
确定用户设备上线；向SDF发送CGN实例获取请求，CGN实例获取请求指示为用户设备分配CGN实例；接收SDF发送的第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；根据第一CGN实例生成第一CGN引流策略，第一CGN引流策略用于指示将用户设备的流量引到第一CGN实例所指示的第一UP中；向第一UP发送第一CGN引流策略。
或，
向SDF上报CGN资源，CGN资源包括第一UP的CGN业务负载情况，第一UP为多个UP中的一个；接收CP发送第一CGN引流策略，第一CGN引流策略包括第一CGN实例，第一CGN实例指示具有可用CGN资源的第一UP，第一UP为多个UP中的一个；承载用户设备的流量。
具体实现方式，可以参考如图2所示实施例汇总步骤201-216的具体描述，或者如图3所示实施例中步骤301-316的具体描述，或者如图4所示实施例中步骤401-413的具体描述，这里不再赘述。
本申请实施例中还提供一种包括计算机程序产品，当其在计算机上运行时，使得计算机执行上述步骤201-216、301-316、401-413中所述方法的步骤。
本申请实施例中还提供一种计算机可读存储介质，该计算机可读存储介质中存储有用于进行信号处理的程序，当其在计算机上运行时，使得计算机执行上述步骤201-216、301-316、401-413中所述方法的步骤。
另外需说明的是，以上所描述的装置实施例仅仅是示意性的，其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。另外，本申请提供的装置实施例附图中，模块之间的连接关系表示它们之间具有通信连接，具体可以实现为一条或多条通信总线或信号线。
通过以上的实施方式的描述，所属领域的技术人员可以清楚地了解到本申请可借助软件加必需的通用硬件的方式来实现，当然也可以通过专用硬件包括专用集成电路、专用CPU、专用存储器、专用元器件等来实现。一般情况下，凡由计算机程序完成的功能都可以很容易地用相应的硬件来实现，而且，用来实现同一功能的具体硬件结构也可以是多种多样的，例如模拟电路、数字电路或专用电路等。但是，对本申请而言更多情况下软件程序实现是更佳的实施方式。基于这样的理解，本申请的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品存储在可读取的存储介质中，如计算机的软盘、U盘、移动硬盘、ROM、RAM、磁碟或者光盘等，包括若干指令用以使得一台计算机设备(可以是个人计算机，训练设备，或者网络设备等)执行本申请各个实施例所述的方法。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时，可以全部或部分地以计算机程序产品的形式实现。
所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机程序指令时，全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一计算机可读存储介质传输，例如，所述计算机指令可以从一个网站站点、计算机、训练设备或数据中心通过有线(例如同轴电缆、光纤、数字用户线(DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、训练设备或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存储的任何可用介质或者是包含一个或多个可用介质集成的训练设备、数据中心等数据存储设备。所述可用介质可以是磁性介质，(例如，软盘、硬盘、磁带)、光介质(例如，DVD)、或者半导体介质(例如固态硬盘(Solid State Disk，SSD))等。

Claims (34)

  1. 一种网络接入控制方法，其特征在于，应用于网络***，所述网络***包括切流决策功能模块SDF、多个用户面UP和控制面CP，所述方法包括：
    所述SDF接收所述多个UP上报的运营商级网络地址转换CGN资源，得到CGN资源池，所述CGN资源包括所述多个UP中各个UP的CGN业务负载情况；
    所述SDF接收所述CP发送的CGN实例获取请求，所述CGN实例获取请求指示为所述用户设备分配CGN实例；
    所述SDF根据所述CGN资源池为所述用户设备分配第一CGN实例，所述第一CGN实例指示具有可用CGN资源的第一UP，所述第一UP为所述多个UP中的一个；
    所述SDF向所述CP发送所述第一CGN实例。
  2. 根据权利要求1所述方法，其特征在于，所述第一CGN实例包括所述第一UP、所述第一UP中的第一CGN单板和所述第一CGN单板中的第一中央处理器CPU。
  3. 根据权利要求1或2所述方法，其特征在于，所述SDF根据所述CGN资源池为所述用户设备分配第一CGN实例之前，还包括：
    所述SDF接收远程用户拨号认证radius服务器配置的差异化服务等级协议SLA策略；
    所述SDF根据所述CGN资源池为所述用户设备分配第一CGN实例，包括：
    所述SDF根据所述CGN资源池和所述SLA策略为所述用户设备分配第一CGN实例。
  4. 根据权利要求3所述方法，其特征在于，所述SDF接收多个UP上报的CGN资源之后，还包括：
    所述SDF接收radius服务器发送新的SLA策略；
    所述SDF根据所述新的SLA策略和所述CGN资源池为所述用户设备分配第二CGN实例，所述第二CGN实例指示具有可用CGN资源的第二UP，所述第二UP为所述多个UP中的一个；
    所述SDF向所述CP发送所述第二CGN实例。
  5. 根据权利要求3所述方法，其特征在于，所述SDF根据所述CGN资源池为用户设备分配第一CGN实例之后，还包括：
    所述SDF确定所述第一UP发生故障；
    所述SDF根据所述SLA策略和所述CGN资源池为所述用户设备分配第三CGN实例，所述第三CGN实例指示具有可用CGN资源的第三UP，所述第三UP为所述多个UP中的一个；
    所述SDF向所述CP发送所述第三CGN实例。
  6. 根据权利要求4所述方法，其特征在于，所述SDF根据所述CGN资源池为用户设备分配第一CGN实例之后，还包括：
    所述SDF确定所述第二UP发生故障；
    所述SDF根据所述新的SLA策略和所述CGN资源池为所述用户设备分配第三CGN实例，所述第三CGN实例指示具有可用CGN资源的第三UP，所述第三UP为所述多个UP中的一个；
    所述SDF向所述CP发送所述第三CGN实例。
  7. 一种网络接入控制方法，其特征在于，应用于网络***，所述网络***包括SDF、多个UP和CP，所述方法包括：
    所述CP向所述SDF发送CGN实例获取请求，所述CGN实例获取请求指示为所述用户设 备分配CGN实例；
    所述CP接收所述SDF发送的第一CGN实例，所述第一CGN实例指示具有可用CGN资源的第一UP，所述第一UP为所述多个UP中的一个；
    所述CP根据所述第一CGN实例生成第一CGN引流策略，所述第一CGN引流策略用于指示将所述用户设备的流量引到所述第一UP中；
    所述CP向所述第一UP发送第一CGN引流策略。
  8. 根据权利要求7所述方法，其特征在于，所述第一CGN实例包括所述第一UP、所述第一UP中的第一CGN单板和所述第一CGN单板中的第一CPU。
  9. 根据权利要求7或8所述方法，其特征在于，所述CP接收所述SDF发送的第一CGN实例之后，还包括：
    所述CP向所述第一UP发送用户承载指示消息，所述用户承载指示消息用于指示承载所述用户设备的流量；
    所述CP接收所述第一UP发送的第一公网地址，所述第一公网地址为分配给所述用户设备的公网地址；
    所述CP向raidus服务器发送溯源日志，所述溯源日志包括所述用户设备的私网地址和所述第一公网地址。
  10. 根据权利要求7-9中任一项所述方法，其特征在于，还包括：
    所述CP接收所述SDF发送的第二CGN实例，所述第二CGN实例指示具有可用CGN资源的第二UP，所述第二UP为所述多个UP中的一个；
    所述CP根据所述第二CGN实例生成第二CGN引流策略，所述第二CGN引流策略用于指示将所述用户设备的流量引到所述第二UP中；
    所述CP向所述第二UP发送第二CGN引流策略。
  11. 根据权利要求10所述方法，其特征在于，所述CP接收所述SDF发送的第二CGN实例之后，还包括：
    所述CP向所述第二UP发送用户承载指示消息，所述用户承载指示消息用于指示承载所述用户设备的流量；
    所述CP接收所述第二UP发送的第二公网地址，所述第二公网地址为所述第二UP分配给所述用户设备的公网地址；
    所述CP向raidus服务器发送溯源日志，所述溯源日志包括所述用户设备的私网地址和所述第二公网地址。
  12. 根据权利要求7-9中任一项所述方法，其特征在于，所述方法还包括：
    所述CP接收所述SDF发送的第三CGN实例，所述第三CGN实例指示具有可用CGN资源的第三UP，所述第三UP为所述多个UP中的一个；
    所述CP根据所述第三CGN实例生成第三CGN引流策略，所述第三CGN引流策略用于指示将所述用户设备的流量引到所述第三UP中；
    所述CP向所述第三UP发送第三CGN引流策略。
  13. 根据权利要求12所述方法，其特征在于，所述CP接收所述SDF发送的第三CGN实例之后，还包括：
    所述CP获取所述用户设备在所述第一UP中的所述第一公网地址；
    所述CP向所述第三UP发送所述第一公网地址，以使得所述第三UP为所述用户设备分配所述第一公网地址。
  14. 一种网络接入控制方法，其特征在于，应用于网络***，所述网络***包括SDF、多个UP和CP，所述方法包括：
    第一UP向所述SDF上报CGN资源，所述CGN资源包括所述第一UP的CGN业务负载情况，所述第一UP为所述多个UP中的一个；
    所述第一UP接收所述CP发送第一CGN引流策略，所述第一CGN引流策略包括所述第一CGN实例，所述第一CGN实例指示具有可用CGN资源的所述第一UP；
    所述第一UP承载所述用户设备的流量。
  15. 根据权利要求14所述方法，其特征在于，所述第一UP向所述SDF上报CGN资源之后，还包括：
    所述第一UP接收所述CP发送的用户承载指示消息，所述用户承载指示消息用于指示承载所述用户设备的流量；
    所述第一UP为所述用户设备分配第一公网地址；
    所述第一UP向所述CP发送所述第一公网地址。
  16. 根据权利要求14所述方法，其特征在于，所述第一UP向所述SDF上报CGN资源之后，还包括：
    所述第一UP接收所述CP发送的第二公网地址；
    所述第一UP为所述用户设备分配所述第二公网地址。
  17. 一种网络接入控制方法，其特征在于，应用于网络***，所述网络***包括SDF、多个UP和CP，所述方法包括：
    多个UP向所述SDF上报CGN资源，使得所述SDF得到CGN资源池，所述CGN资源包括所述多个UP中各个UP的CGN业务负载情况；
    所述CP向所述SDF发送CGN实例获取请求，所述CGN实例获取请求指示为所述用户设备分配CGN实例；
    所述SDF根据所述CGN资源池为所述用户设备分配第一CGN实例，所述第一CGN实例指示具有可用CGN资源的第一UP，所述第一UP为所述多个UP中的一个；
    所述SDF向所述CP发送所述第一CGN实例；
    所述CP根据所述第一CGN实例生成第一CGN引流策略，所述第一CGN引流策略用于指示将所述用户设备的流量引到所述第一CGN实例所指示的所述第一UP中；
    所述CP向所述第一UP发送第一CGN引流策略；
    所述第一UP承载所述用户设备的流量。
  18. 一种网络设备，其特征在于，应用于网络***，所述网络***包括所述SDF、多个UP和CP，所述SDF设置在所述网络设备中，
    所述网络设备包括：
    收发模块，用于接收多个UP上报的CGN资源，得到CGN资源池，所述CGN资源包括所述多个UP中各个UP的CGN业务负载情况；
    所述收发模块，还用于接收所述CP发送的CGN实例获取请求，所述CGN实例获取请求指示为所述用户设备分配CGN实例；
    处理模块，用于根据所述CGN资源池为所述用户设备分配第一CGN实例，所述第一CGN实例指示具有可用CGN资源的第一UP，所述第一UP为所述多个UP中的一个；
    所述收发模块，还用于向所述CP发送所述第一CGN实例。
  19. 根据权利要求18所述网络设备，其特征在于，
    所述收发模块，还用于接收远程用户拨号认证radius服务器配置的SLA策略；
    所述处理模块，具体用于根据所述CGN资源池和所述SLA策略为所述用户设备分配第一CGN实例。
  20. 根据权利要求19所述网络设备，其特征在于，
    所述收发模块，还用于接收radius服务器发送新的SLA策略；
    所述处理模块，还用于根据所述新的SLA策略和所述CGN资源池为所述用户设备分配第二CGN实例，所述第二CGN实例指示具有可用CGN资源的第二UP，所述第二UP为所述多个UP中的一个；
    所述收发模块，还用于向所述CP发送所述第二CGN实例。
  21. 根据权利要求18或19所述网络设备，其特征在于，
    所述处理模块，还用于确定所述第一UP发生故障；
    所述处理模块，还用于根据所述SLA策略和所述CGN资源池为所述用户设备分配第三CGN实例，所述第三CGN实例指示具有可用CGN资源的第三UP，所述第三UP为所述多个UP中的一个；
    所述收发模块，还用于向所述CP发送所述第三CGN实例。
  22. 根据权利要求20所述网络设备，其特征在于，
    所述处理模块，还用于确定所述第二UP发生故障；
    所述处理模块，还用于根据所述新的SLA策略和所述CGN资源池为所述用户设备分配第三CGN实例，所述第三CGN实例指示具有可用CGN资源的第三UP，所述第三UP为所述多个UP中的一个；
    所述收发模块，还用于向所述CP发送所述第三CGN实例。
  23. 一种CP，其特征在于，应用于网络***，所述网络***包括所述SDF、多个UP和所述CP，所述CP包括：
    收发模块，用于向所述SDF发送CGN实例获取请求，所述CGN实例获取请求指示为所述用户设备分配CGN实例；
    所述收发模块，还用于接收所述SDF发送的第一CGN实例，所述第一CGN实例指示具有可用CGN资源的第一UP，所述第一UP为所述多个UP中的一个；
    所述处理模块，还用于根据所述第一CGN实例生成第一CGN引流策略，所述第一CGN引流策略用于指示将所述用户设备的流量引到所述第一CGN实例所指示的所述第一UP中；
    所述收发模块，还用于向所述第一UP发送第一CGN引流策略。
  24. 根据权利要求23所述CP，其特征在于，
    所述收发模块，还用于向所述第一UP发送用户承载指示消息，所述用户承载指示消息 用于指示承载所述用户设备的流量；
    所述收发模块，还用于接收所述第一UP发送的第一公网地址，所述第一公网地址为分配给所述用户设备的公网地址；
    所述收发模块，还用于向raidus服务器发送溯源日志，所述溯源日志包括所述用户设备的私网地址和所述第一公网地址。
  25. 根据权利要求23或24所述CP，其特征在于，
    所述收发模块，还用于接收所述SDF发送的第二CGN实例，所述第二CGN实例指示具有可用CGN资源的第二UP，所述第二UP为所述多个UP中的一个；
    所述处理模块，还用于根据所述第二CGN实例生成第二CGN引流策略，所述第二CGN引流策略用于指示将所述用户设备的流量引到所述第二UP中；
    所述收发模块，还用于向所述第二UP发送第二CGN引流策略。
  26. 根据权利要求25所述CP，其特征在于，
    所述收发模块，还用于向所述第二UP发送用户承载指示消息，所述用户承载指示消息用于指示承载所述用户设备的流量；
    所述收发模块，还用于接收所述第二UP发送的第二公网地址，所述第二公网地址为所述第二UP分配给所述用户设备的公网地址；
    所述收发模块，还用于向raidus服务器发送溯源日志，所述溯源日志包括所述用户设备的私网地址和所述第二公网地址。
  27. 根据权利要求23或24所述CP，其特征在于，
    所述收发模块，还用于接收所述SDF发送的第三CGN实例，所述第三CGN实例指示具有可用CGN资源的第三UP，所述第三UP为所述多个UP中的一个；
    所述处理模块，还用于根据所述第三CGN实例生成第三CGN引流策略，所述第三CGN引流策略用于指示将所述用户设备的流量引到所述第三CGN实例所指示的所述第三UP中；
    所述收发模块，还用于向所述第三UP发送第三CGN引流策略。
  28. 根据权利要求27所述CP，其特征在于，
    所述收发模块，还用于获取所述用户设备在所述第一UP中的所述第一公网地址；
    所述收发模块，还用于向所述第三UP发送所述第一公网地址，以使得所述第三UP为所述用户设备分配所述第一公网地址。
  29. 一种UP，其特征在于，应用于网络***，所述网络***包括所述SDF、多个UP和CP，所述多个UP包括所述UP，所述UP包括：
    收发模块，用于向所述SDF上报CGN资源，所述CGN资源包括所述第一UP的CGN业务负载情况；
    所述收发模块，还用于接收所述CP发送第一CGN引流策略，所述第一CGN引流策略包括所述第一CGN实例，所述第一CGN实例指示具有可用CGN资源的所述UP；
    业务模块，用于承载所述用户设备的流量。
  30. 根据权利要求29所述UP，其特征在于，
    所述收发模块，还用于接收所述CP发送的用户承载指示消息，所述用户承载指示消息用于指示承载所述用户设备的流量；
    所述业务模块，用于为所述用户设备分配第一公网地址；
    所述收发模块，还用于向所述CP发送所述第一公网地址。
  31. 根据权利要求29所述UP，其特征在于，
    所述收发模块，还用于接收所述CP发送的第二公网地址；
    所述业务模块，用于为所述用户设备分配所述第二公网地址。
  32. 一种网络***，其特征在于，包括：
    SDF、多个UP和CP；
    多个UP，用于向所述SDF上报CGN资源，使得所述SDF得到CGN资源池，所述CGN资源包括所述多个UP中各个UP的CGN业务负载情况；
    所述CP，用于向所述SDF发送CGN实例获取请求，所述CGN实例获取请求指示为所述用户设备分配CGN实例；
    所述SDF，用于根据所述CGN资源池为所述用户设备分配第一CGN实例，所述第一CGN实例指示具有可用CGN资源的第一UP，所述第一UP为所述多个UP中的一个，所述SDF向所述CP发送所述第一CGN实例；
    所述CP，还用于根据所述第一CGN实例生成第一CGN引流策略，所述第一CGN引流策略用于指示将所述用户设备的流量引到所述第一CGN实例所指示的所述第一UP中，所述CP向所述第一UP发送第一CGN引流策略；
    所述第一UP，用于承载所述用户设备的流量。
  33. 一种计算机可读存储介质，包括指令，当其在计算机上运行时，使得计算机执行如权利要求1-17中任一项所述的方法。
  34. 一种网络设备，包括处理器和存储器，所述处理器与所述存储器耦合，其特征在于，
    所述存储器，用于存储程序；
    所述处理器，用于执行所述存储器中的程序，使得所述终端设备执行如权利要求1-17中任一项所述的方法。
PCT/CN2021/082904 2020-03-31 2021-03-25 一种网络接入控制方法、sdf、cp、up以及网络*** WO2021197184A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP21779916.2A EP4120640A4 (en) 2020-03-31 2021-03-25 NETWORK ACCESS CONTROL METHOD, SDF, CP, UP AND NETWORK SYSTEM
MX2022012263A MX2022012263A (es) 2020-03-31 2021-03-25 Metodo de control de acceso de red, sdf, cp, up y sistema de red.
US17/954,607 US20230019667A1 (en) 2020-03-31 2022-09-28 Network Access Control Method, SDF, CP, UP, and Network System

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010247661.XA CN113472676A (zh) 2020-03-31 2020-03-31 一种网络接入控制方法、sdf、cp、up以及网络***
CN202010247661.X 2020-03-31

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US17/954,607 Continuation US20230019667A1 (en) 2020-03-31 2022-09-28 Network Access Control Method, SDF, CP, UP, and Network System

Publications (1)

Publication Number Publication Date
WO2021197184A1 true WO2021197184A1 (zh) 2021-10-07

Family

ID=77865863

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/082904 WO2021197184A1 (zh) 2020-03-31 2021-03-25 一种网络接入控制方法、sdf、cp、up以及网络***

Country Status (5)

Country Link
US (1) US20230019667A1 (zh)
EP (1) EP4120640A4 (zh)
CN (1) CN113472676A (zh)
MX (1) MX2022012263A (zh)
WO (1) WO2021197184A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114006857A (zh) * 2021-10-14 2022-02-01 新华三信息安全技术有限公司 路径规划方法及装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106534376A (zh) * 2016-12-29 2017-03-22 北京华为数字技术有限公司 用户上线的负载均衡方法、装置和设备
CN106878117A (zh) * 2016-12-15 2017-06-20 新华三技术有限公司 一种数据处理方法及装置
CN107547689A (zh) * 2017-09-20 2018-01-05 新华三技术有限公司 一种运营商级的网络地址转换cgn方法和装置
CN108259632A (zh) * 2017-05-24 2018-07-06 新华三技术有限公司 一种cgn实现方法及装置
US10230664B1 (en) * 2015-09-21 2019-03-12 Amazon Technologies, Inc. Strategic resource allocation in a web-based computing system

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8289968B1 (en) * 2010-10-27 2012-10-16 Juniper Networks, Inc. Distributed network address translation in computer networks
WO2012056010A1 (en) * 2010-10-29 2012-05-03 Nec Europe Ltd. Method and system for controlling ip traffic in a service provider network
CN105245638B (zh) * 2012-04-28 2019-06-21 华为技术有限公司 地址分配方法、设备和***
CN103117947B (zh) * 2013-01-28 2016-06-29 中兴通讯股份有限公司 一种负载分担方法及装置
CN110366271B (zh) * 2018-04-10 2023-11-17 华为技术有限公司 通信方法和通信装置

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10230664B1 (en) * 2015-09-21 2019-03-12 Amazon Technologies, Inc. Strategic resource allocation in a web-based computing system
CN106878117A (zh) * 2016-12-15 2017-06-20 新华三技术有限公司 一种数据处理方法及装置
CN106534376A (zh) * 2016-12-29 2017-03-22 北京华为数字技术有限公司 用户上线的负载均衡方法、装置和设备
CN108259632A (zh) * 2017-05-24 2018-07-06 新华三技术有限公司 一种cgn实现方法及装置
CN107547689A (zh) * 2017-09-20 2018-01-05 新华三技术有限公司 一种运营商级的网络地址转换cgn方法和装置

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114006857A (zh) * 2021-10-14 2022-02-01 新华三信息安全技术有限公司 路径规划方法及装置
CN114006857B (zh) * 2021-10-14 2023-03-31 新华三信息安全技术有限公司 路径规划方法及装置

Also Published As

Publication number Publication date
MX2022012263A (es) 2022-10-27
EP4120640A1 (en) 2023-01-18
EP4120640A4 (en) 2023-07-26
CN113472676A (zh) 2021-10-01
US20230019667A1 (en) 2023-01-19

Similar Documents

Publication Publication Date Title
US20220107848A1 (en) Edge service providing method and apparatus, and device
WO2017036288A1 (zh) 一种网元升级方法及设备
CN101572719B (zh) 策略决策功能实体、家庭网关、服务质量控制方法及***
CN113906717B (zh) 本地用户平面功能控制
US20120054346A1 (en) Method and System for Cross-Stratum Optimization in Application-Transport Networks
EP2159956B1 (en) A method, system and device for configuring the operations, administrator and maintenance property
KR20040007434A (ko) 이동통신시스템에서의 네트워크 자원 매니저
WO2018103665A1 (zh) 基于l2tp的设备管理方法、设备及***
CN113472646B (zh) 一种数据传输方法、节点、网络管理器及***
CN105119787A (zh) 一种基于软件定义的公共互联网接入***和方法
RU2616880C1 (ru) Способ и устройство для переключения интерфейса
WO2021166250A1 (ja) ゲートウェイ装置、方法及びプログラム
WO2021197184A1 (zh) 一种网络接入控制方法、sdf、cp、up以及网络***
US8135005B2 (en) Communication control system, communication control method, routing controller and router suitably used for the same
CN115514651A (zh) 基于软件定义层叠网的云边数据传输路径规划方法及***
CN101227437B (zh) 实现媒体网关资源共享的方法、***及设备
CN101282298A (zh) 带宽调整方法和装置
CN111092824B (zh) 流量管理***、方法、电子终端、及存储介质
CN101119578B (zh) 多播控制***及方法
CN102256113A (zh) 媒体流转发的控制方法和控制装置
JP2001211175A (ja) インターネット接続を管理するためのシステム
US11812378B2 (en) User management device, BNG, and BNG user internet access method and system
EP3148140A1 (en) Computing and network resource reservation
CN112040170A (zh) 基于5g的远程异地评标***
CN112714071A (zh) 一种数据发送方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21779916

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2021779916

Country of ref document: EP

Effective date: 20221010

NENP Non-entry into the national phase

Ref country code: DE