CN114553636A - A method and system for actively accessing a local area network through a relay LNS - Google Patents

Abstract

The invention provides a method and a system for actively accessing a local area network through a relay LNS, wherein the method comprises the following steps: configuring first information communicated with a remote terminal on a relay LNS, configuring first static routing information communicated with a local area network by the remote terminal, generating a host routing communicated with the remote terminal by the relay LNS, and acquiring a first static routing from the remote terminal to the local area network; configuring second information communicated with the L2TP access concentrator on the relay LNS, and configuring second static routing information from the relay LNS to the local area network; and the L2TP access concentrator is accessed into the local area network, and the L2TP access concentrator establishes communication connection with the relay LNS through automatic dialing, so that the remote terminal can actively access the local area network through the relay LNS. Based on the method, the invention also provides a system for actively accessing the local area network through the relay LNS, and the invention gets rid of the function and authority limitation of the existing gateway and flexibly solves the problem of actively accessing the local area network.

Description

A method and system for actively accessing a local area network through a relay LNS

technical field

The invention belongs to the technical field of communication, and in particular relates to a method and system for actively accessing a local area network through a relay LNS.

Background technique

In daily work, it is often necessary to remotely debug and control LAN devices. The LAN is usually connected to the Internet through a NAT gateway. Although the NAT gateway connects the LAN to the Internet, it loses the end-to-end feature of the LAN and prevents remote users from actively accessing the LAN. The NAT gateway is a network address translation device.

Figure 1 is a schematic diagram of traditional networking connections in the prior art. You can actively access the local area network remotely through functions such as VPN and NAT Server provided by the NAT gateway, but this method is limited by whether the gateway has and opens the above functions; purchase third-party remote services , it can also achieve remote access, but it will cause certain cost pressure. Among them, VPN is to enable enterprises to establish a secure WAN (Wide Area Network) service on an inexpensive shared infrastructure with the same strategy as that provided by private networks.

SUMMARY OF THE INVENTION

In order to solve the above technical problems, the present invention proposes a method and system for actively accessing a local area network through a relay LNS. Through the L2TP network server, a remote access technical solution with simple configuration, flexible adjustment, strong portability and high cost performance is provided, which realizes active access to the local area network.

To achieve the above object, the present invention adopts the following technical solutions:

A method for actively accessing a local area network through a relay LNS, comprising the following steps:

First information for communicating with the remote terminal is configured on the relay LNS, and first static routing information for the remote terminal communicating with the local area network is configured, the relay LNS generates the host route for communicating with the remote terminal, and the remote terminal obtains the first information to the local area network. static routing;

Configure the second information communicated with the L2TP access concentrator on the relay LNS, and configure the second static route information from the relay LNS to the local area network;

The L2TP access concentrator is connected to the local area network, and the L2TP access concentrator establishes a communication connection with the relay LNS through automatic dialing, so that the remote terminal can actively access the local area network through the relay LNS.

Further, the first information includes the first VT interface, the IP address pool, the L2TP tunnel name and the dial-up account.

Further, the process of generating the host route that relays the communication between the LNS and the remote terminal, and the process that the remote terminal obtains the first static route to the local area network includes: after configuring the first information and the first static route information, the remote terminal dials An L2TP tunnel is created, and after the L2TP tunnel is successfully established, the remote terminal obtains the first static route to the local area network, and at the same time, the relay LNS generates a host route for communicating with the remote terminal.

Further, configuring the second information on the relay LNS to communicate with the L2TP access concentrator includes: configuring a second VT interface on the relay LNS for accessing the L2TP access concentrator, and configuring the second VT interface on the relay LNS for accessing the L2TP access concentrator. A fixed IP address is assigned to the three VT interfaces; the source NAT policy is configured with host routing to convert the source IP of the access LAN traffic to the address of the second VT interface configured for the L2TP access concentrator on the relay LNS.

Further, the configuring the second static route information for relaying the LNS to the local area network includes: the next hop is the address of the third VT interface on the L2TP access concentrator.

Further, the process of connecting the L2TP access concentrator to the local area network, and the L2TP access concentrator establishing a communication connection with the relay LNS through automatic dialing is as follows:

Configure the third VT interface and the LNS server address on the L2TP access concentrator, configure the L2TP access concentrator as automatic dialing, and automatically establish an L2tp tunnel with the relay LNS;

Configure an address on the same network segment as the LAN terminal for the outgoing interface of the L2TP access concentrator;

Configure the route from the L2TP access concentrator to the LAN, the next hop is the gateway address of the outgoing interface of the L2TP access concentrator; and configure the backhaul route to the relay LNS;

Configure a source NAT policy to translate the source IP address of the access LAN traffic to the outgoing interface address of the L2TP access concentrator.

Further, the implementing that the remote terminal actively accesses the local area network through the relay LNS includes:

The L2TP tunnel is automatically established between the L2TP access concentrator and the relay LNS, so that the remote terminal can not only actively access the LAN terminal, but also have the same access authority as the LAN terminal.

The present invention also provides a system for actively accessing the local area network through the relay LNS, the system includes a first configuration module, a second configuration module and a connection module;

The first configuration module is used to configure the first information for communication with the remote terminal on the relay LNS, and configure the first static routing information for the communication between the remote terminal and the local area network, the relay LNS generates the host route for communication with the remote terminal, and The remote terminal obtains the first static route to the local area network;

The second configuration module is configured to configure second information communicated with the L2TP access concentrator on the relay LNS, and configure second static routing information from the relay LNS to the local area network;

The connection module is used to connect the L2TP access concentrator to the local area network, and the L2TP access concentrator establishes a communication connection with the relay LNS through automatic dialing, so that the remote terminal can actively access the local area network through the relay LNS.

Further, the detailed process implemented by the first configuration module includes: configuring the first information on the relay LNS to communicate with the remote terminal, and configuring the first static routing information for the remote terminal to communicate with the local area network. The terminal creates an L2TP tunnel by dialing up, and after the L2TP tunnel is successfully established, the remote terminal obtains the first static route to the local area network, and at the same time, the relay LNS generates a host route for communicating with the remote terminal.

Further, the detailed process implemented by the connection module includes:

Configure the third VT interface and the LNS server address on the L2TP access concentrator, configure the L2TP access concentrator as automatic dialing, and automatically establish an L2tp tunnel with the relay LNS;

Configure an address on the same network segment as the LAN terminal for the outgoing interface of the L2TP access concentrator;

Configure the route from the L2TP access concentrator to the LAN, the next hop is the gateway address of the outgoing interface of the L2TP access concentrator; and configure the backhaul route to the relay LNS;

Configure the source NAT policy to convert the source IP of the access LAN traffic to the outgoing interface address of the L2TP access concentrator;

The L2TP tunnel is automatically established between the L2TP access concentrator and the relay LNS, so that the remote terminal can not only actively access the LAN terminal, but also have the same access authority as the LAN terminal.

The effects provided in the summary of the invention are only the effects of the embodiments, rather than all the effects of the invention. One of the above technical solutions has the following advantages or beneficial effects:

The present invention provides a method and system for actively accessing a local area network through a relay LNS. The method includes: configuring first information on the relay LNS to communicate with a remote terminal, and configuring first static routing information for the remote terminal to communicate with the local area network , the relay LNS generates the host route to communicate with the remote terminal, and the remote terminal obtains the first static route to the local area network; configure the second information communicated with the L2TP access concentrator on the relay LNS, configure the first static route from the relay LNS to the local area network Two static routing information; connect the L2TP access concentrator to the local area network, and the L2TP access concentrator establishes a communication connection with the relay LNS through automatic dialing, so that the remote terminal can actively access the local area network through the relay LNS. Based on a method of actively accessing the local area network through the relay LNS, a system for actively accessing the local area network through the relay LNS is also proposed. By relaying the LNS, the present invention gets rid of the existing gateway function and authority limitation, flexibly solves the problem of actively accessing the local area network, and satisfies the remote debugging and control requirements. The implementation process of the present invention is simple in configuration and strong in portability.

Description of drawings

Figure 1 is a schematic diagram of traditional networking connection in the prior art;

FIG. 2 is a flow chart of a method for actively accessing a local area network through a relay LNS according to Embodiment 1 of the present invention;

FIG. 3 is a schematic diagram of an apparatus for implementing a method for actively accessing a local area network through a relay LNS according to Embodiment 1 of the present invention;

FIG. 4 is a schematic diagram of a system for actively accessing a local area network through a relay LNS according to Embodiment 2 of the present invention.

Detailed ways

In order to clearly illustrate the technical features of the solution, the present invention will be described in detail below through specific embodiments and in conjunction with the accompanying drawings. The following disclosure provides many different embodiments or examples for implementing different structures of the invention. In order to simplify the disclosure of the present invention, the components and arrangements of specific examples are described below. Furthermore, the present invention may repeat reference numerals and/or letters in different instances. This repetition is for the purpose of simplicity and clarity and does not in itself indicate a relationship between the various embodiments and/or arrangements discussed. It should be noted that the components illustrated in the figures are not necessarily drawn to scale. Descriptions of well-known components and processing techniques and processes are omitted from the present invention to avoid unnecessarily limiting the present invention.

Example 1

Embodiment 1 of the present invention proposes a method for actively accessing a local area network through a relay LNS. By relaying the LNS, the existing gateway function and authority restrictions are eliminated, and the problem of actively accessing the local area network is flexibly solved.

In this application: Relay LNS: represents an L2TP Network Server (L2TP Network Server).

The LAC is the L2TP Access Concentrator (L2TP Access Concentrator).

The specific steps of the method include:

First information for communicating with the remote terminal is configured on the relay LNS, and first static routing information for the remote terminal communicating with the local area network is configured, the relay LNS generates the host route for communicating with the remote terminal, and the remote terminal obtains the first information to the local area network. static routing;

Configure the second information communicated with the L2TP access concentrator on the relay LNS, and configure the second static route information from the relay LNS to the local area network;

The L2TP access concentrator is connected to the local area network, and the L2TP access concentrator establishes a communication connection with the relay LNS through automatic dialing, so that the remote terminal can actively access the local area network through the relay LNS.

FIG. 2 is a flowchart of a method for actively accessing a local area network through a relay LNS according to Embodiment 1 of the present invention;

In step S200, the flow of processing is started.

In step S210, configure the first information for communicating with the remote terminal on the relay LNS, and configure the first static routing information for the communication between the remote terminal and the local area network;

The first information includes the first VT interface, the IP address pool, the L2TP tunnel name and the dial-up account.

After configuring the first information and the first static route information, the remote terminal creates an L2TP tunnel through dialing. After the L2TP tunnel is successfully established, the remote terminal obtains the first static route to the local area network, and at the same time relays the LNS generation and the remote terminal. Host routing for communication.

In step S220, the remote terminal dials up, and an L2TP tunnel is established between the remote terminal and the relay LNS generation. After the L2TP tunnel is successfully established, the remote terminal obtains the first static route to the local area network, and at the same time, the relay LNS generates a host route for communicating with the remote terminal.

In step S230, second information for communicating with the L2TP access concentrator is configured on the relay LNS, and second static routing information from the relay LNS to the local area network is configured.

Configure the second VT interface on the relay LNS for accessing the L2TP access concentrator, and assign a fixed IP address to the third VT interface on the L2TP access concentrator. Converted to the address of the second VT interface configured for the L2TP access concentrator on the relay LNS; the next hop is the address of the third VT interface on the L2TP access concentrator.

In step S240, the L2TP access concentrator is connected to the local area network, and the L2TP access concentrator establishes a communication connection with the relay LNS through automatic dialing.

Configure the third VT interface and the LNS server address on the L2TP access concentrator, configure the L2TP access concentrator as automatic dialing, and automatically establish an L2tp tunnel with the relay LNS;

Configure an address on the same network segment as the LAN terminal for the outgoing interface of the L2TP access concentrator;

Configure the route from the L2TP access concentrator to the LAN, the next hop is the gateway address of the outgoing interface of the L2TP access concentrator; and configure the backhaul route to the relay LNS;

Configure a source NAT policy to translate the source IP address of the access LAN traffic to the outgoing interface address of the L2TP access concentrator.

In step S250, an L2TP tunnel is automatically established between the L2TP access concentrator and the relay LNS, so that the remote terminal can not only actively access the local area network terminal, but also have the same access authority as the local area network terminal. At this point, the remote terminal is equivalent to a terminal device in the local area network.

In order to implement a method for actively accessing a local area network through a relay LNS proposed in Embodiment 1 of the present invention, FIG. 3 is a schematic diagram of the connection of devices implementing this method. The device includes a relay LNS and an L2TP access concentrator;

The relay LNS uses the network to establish a host route for remote terminal communication, and establishes a second static route with the local area network; and enables the remote terminal to obtain the first static route to the local area network;

The L2TP access concentrator is installed in the local area network, and is connected to the Internet through the NAT gateway in the local area network to automatically establish an L2tp tunnel with the relay LNS;

A local area network is connected under the NAT gateway. In this application, the L2tp access concentrator is installed in the local area network; then the L2tp access concentrator and the relay LNS are configured to automatically establish an L2tp tunnel; As in the local area network, you can freely access the local area network terminal, so that the remote terminal can use the tunnel established by the relay LNS to remotely access the local area network terminal when the NAT gateway is not open, and the NAT server and VPN are not available.

Embodiment 1 of the present invention proposes a method for actively accessing a local area network through a relay LNS. By relaying the LNS, the existing gateway function and authority restrictions are eliminated, the problem of actively accessing the local area network is flexibly solved, and the requirements for remote debugging and control are satisfied. .

Example 2

Based on a system for actively accessing a local area network through a relay LNS proposed in Embodiment 1 of the present invention, FIG. 4 is a schematic diagram of a system for actively accessing a local area network through a relay LNS in Embodiment 2 of the present invention; the system includes: a first configuration module , a second configuration module and a connection module;

The first configuration module is used to configure the first information for communication with the remote terminal on the relay LNS, and configure the first static routing information for the communication between the remote terminal and the local area network, the relay LNS generates the host route for communication with the remote terminal, and the remote terminal Obtain the first static route to the local area network;

The second configuration module is configured to configure the second information communicated with the L2TP access concentrator on the relay LNS, and configure the second static routing information from the relay LNS to the local area network;

The connection module is used to connect the L2TP access concentrator to the local area network, and the L2TP access concentrator establishes a communication connection with the relay LNS through automatic dialing, so that the remote terminal can actively access the local area network through the relay LNS.

The detailed process implemented by the first configuration module includes: configuring the first information for communication with the remote terminal on the relay LNS, and configuring the first static routing information for the communication between the remote terminal and the local area network, after the configuration is completed, the remote terminal creates L2TP by dialing Tunnel, after the L2TP tunnel is successfully established, the remote terminal obtains the first static route to the local area network, and at the same time the relay LNS generates a host route for communicating with the remote terminal.

The detailed process implemented by the second configuration module includes: configuring a second VT interface on the relay LNS for accessing the L2TP access concentrator, and assigning a fixed IP address to the third VT interface on the L2TP access concentrator; using host routing to configure The source NAT policy translates the source IP of the access LAN traffic into the address of the second VT interface configured for the L2TP access concentrator on the relay LNS. The next hop is the address of the third VT interface on the L2TP access concentrator.

The detailed process of connection module implementation includes:

Configure the third VT interface and the LNS server address on the L2TP access concentrator, configure the L2TP access concentrator as automatic dialing, and automatically establish an L2tp tunnel with the relay LNS;

Configure an address on the same network segment as the LAN terminal for the outgoing interface of the L2TP access concentrator;

Configure the route from the L2TP access concentrator to the LAN, the next hop is the gateway address of the outgoing interface of the L2TP access concentrator; and configure the backhaul route to the relay LNS;

Configure the source NAT policy to convert the source IP of the access LAN traffic to the outgoing interface address of the L2TP access concentrator;

The L2TP tunnel is automatically established between the L2TP access concentrator and the relay LNS, so that the remote terminal can not only actively access the LAN terminal, but also have the same access authority as the LAN terminal.

The second embodiment of the present invention proposes a system for actively accessing a local area network through a relay LNS, and implements the entire process of the method through a virtual system. It solves the problem of active access to the local area network, and meets the requirements of remote debugging and control. The system has simple configuration and strong portability.

It should be noted that, in this document, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any relationship between these entities or operations. any such actual relationship or sequence exists. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that elements inherent to a process, method, article or apparatus of a list of elements are included. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element. In addition, parts of the above technical solutions provided in the embodiments of the present application that are consistent with the implementation principles of the corresponding technical solutions in the prior art are not described in detail, so as to avoid redundant descriptions.

Although the specific embodiments of the present invention have been described above with reference to the accompanying drawings, they are not intended to limit the protection scope of the present invention. For those skilled in the art, on the basis of the above description, other modifications or variations in different forms can also be made. There is no need and cannot be exhaustive of all implementations here. On the basis of the technical solutions of the present invention, various modifications or deformations that can be made by those skilled in the art without creative work still fall within the protection scope of the present invention.

Claims (10)

1. A method for actively accessing a local area network via a relay LNS, comprising the steps of:

configuring first information communicated with a remote terminal and first static routing information communicated with a local area network by the remote terminal on a relay LNS, generating a host routing communicated with the remote terminal by the relay LNS, and acquiring a first static routing from the remote terminal to the local area network;

configuring second information communicated with the L2TP access concentrator on the relay LNS, and configuring second static routing information from the relay LNS to the local area network;

and accessing the L2TP access concentrator into the local area network, and establishing communication connection between the L2TP access concentrator and the relay LNS through automatic dialing to realize that the remote terminal actively accesses the local area network through the relay LNS.

2. The method of claim 1, wherein the first information comprises a first VT interface, an IP address pool, an L2TP tunnel name, and a dial-up account number.

3. The method of claim 1, wherein the step of generating the host route for the relay LNS to communicate with the remote terminal, and the remote terminal obtaining the first static route to the local area network comprises: after the first information and the first static route information are configured, the remote terminal creates an L2TP tunnel through dialing, and after the L2TP tunnel is successfully established, the remote terminal obtains the first static route to the local area network, and meanwhile, the relay LNS generates a host route for communication with the remote terminal.

4. The method of claim 1, wherein configuring the second information on the relay LNS for communication with the L2TP access concentrator comprises: configuring a second VT interface for the access L2TP access concentrator on the relay LNS, and allocating a fixed IP address for a third VT interface on the L2TP access concentrator; and utilizing a host routing configuration source NAT strategy to convert the access local area network traffic source IP into a second VT interface address configured for the L2TP access concentrator on the relay LNS.

5. The method according to claim 1, wherein the configuring the second static routing information of the relay LNS to the local area network includes: the next hop accesses the third VT interface address on the concentrator for L2 TP.

6. The method of claim 1, wherein the accessing of the L2TP access concentrator to the local area network, the L2TP access concentrator establishing a communication connection with the relay LNS through automatic dialing comprises:

configuring a third VT interface and an LNS server address on the L2TP access concentrator, configuring the L2TP access concentrator as an automatic dialing, and automatically establishing an L2tp tunnel with the relay LNS;

configuring addresses of the same network segments as the local area network terminal for the L2TP access concentrator output interface;

configuring a route from the L2TP access concentrator to the local area network, wherein the next hop is a gateway address of an output interface of the L2TP access concentrator; and configuring a backhaul route to the relay LNS;

and configuring a source NAT policy, and converting the IP of the access local area network traffic source into an outgoing interface address of the L2TP access concentrator.

7. The method according to claim 6, wherein the enabling the remote terminal to actively access the local area network through the relay LNS includes:

the L2TP access concentrator and the relay LNS automatically establish an L2TP tunnel, so that the remote terminal can not only actively access the local area network terminal, but also have the same access right as the local area network terminal.

8. A system for actively accessing a local area network through a relay LNS is characterized by comprising a first configuration module, a second configuration module and a connection module;

the first configuration module is used for configuring first information communicated with a remote terminal and first static routing information communicated with a local area network on the relay LNS, the relay LNS generates a host routing communicated with the remote terminal, and the remote terminal obtains the first static routing to the local area network;

the second configuration module is configured to configure, on the relay LNS, second information for communicating with the L2TP access concentrator, and configure second static routing information from the relay LNS to the local area network;

the connection module is used for accessing the L2TP access concentrator to the local area network, and the L2TP access concentrator establishes communication connection with the relay LNS through automatic dialing, so that the remote terminal can actively access the local area network through the relay LNS.

9. The system according to claim 8, wherein the detailed procedure implemented by the first configuration module includes: configuring first information communicated with a remote terminal and first static routing information communicated with a local area network by the remote terminal on a relay LNS, after configuration is completed, the remote terminal creates an L2TP tunnel through dialing, after the L2TP tunnel is successfully established, the remote terminal obtains a first static routing to the local area network, and meanwhile the relay LNS generates a host routing communicated with the remote terminal.

10. The system according to claim 8, wherein the detailed procedure implemented by the connection module includes:

configuring a third VT interface and an LNS server address on the L2TP access concentrator, configuring the L2TP access concentrator as an automatic dialing, and automatically establishing an L2tp tunnel with the relay LNS;

configuring addresses of the same network segments as the local area network terminal for the L2TP access concentrator output interface;

configuring a route from the L2TP access concentrator to the local area network, wherein the next hop is a gateway address of an output interface of the L2TP access concentrator; and configuring a backhaul route to the relay LNS;

configuring a source NAT strategy, and converting an access local area network traffic source IP into an output interface address of an L2TP access concentrator;

the L2TP access concentrator and the relay LNS automatically establish an L2TP tunnel, so that the remote terminal can not only actively access the local area network terminal, but also have the same access right as the local area network terminal.

Images