[go: up one dir, main page]

WO2018019299A1 - 一种虚拟宽带接入方法、控制器和系统 - Google Patents

一种虚拟宽带接入方法、控制器和系统 Download PDF

Info

Publication number
WO2018019299A1
WO2018019299A1 PCT/CN2017/094985 CN2017094985W WO2018019299A1 WO 2018019299 A1 WO2018019299 A1 WO 2018019299A1 CN 2017094985 W CN2017094985 W CN 2017094985W WO 2018019299 A1 WO2018019299 A1 WO 2018019299A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
access
information
packet
user equipment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2017/094985
Other languages
English (en)
French (fr)
Inventor
吴波
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to EP17833602.0A priority Critical patent/EP3493483A4/en
Publication of WO2018019299A1 publication Critical patent/WO2018019299A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/2854—Wide area networks, e.g. public data networks
    • H04L12/2856—Access arrangements, e.g. Internet access
    • H04L12/2869—Operational details of access network equipments
    • H04L12/287—Remote access server, e.g. BRAS
    • H04L12/2876—Handling of subscriber policies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/2801—Broadband local area networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/2854—Wide area networks, e.g. public data networks
    • H04L12/2856—Access arrangements, e.g. Internet access
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/2854—Wide area networks, e.g. public data networks
    • H04L12/2856—Access arrangements, e.g. Internet access
    • H04L12/2869—Operational details of access network equipments
    • H04L12/287—Remote access server, e.g. BRAS
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H04L12/4645—Details on frame tagging
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/20—Support for services
    • H04L49/201—Multicast operation; Broadcast operation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/30—Peripheral units, e.g. input or output ports
    • H04L49/3009—Header conversion, routing tables or routing tags
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/35—Switches specially adapted for specific applications
    • H04L49/354—Switches specially adapted for specific applications for supporting virtual local area networks [VLAN]

Definitions

  • the present disclosure relates to the field of communications, and more particularly to a virtual broadband access method, controller and system.
  • the wired data communication network provides Internet (Internet) access and Internet value-added services for home users and enterprise users.
  • the access control is implemented by a dedicated device such as a broadband access server (BRAS), a service router (SR), and a broadband network gateway (BNG).
  • BRAS broadband access server
  • SR service router
  • BNG broadband network gateway
  • the wired data communication network has many users, large traffic, and complicated services.
  • the virtualization technology adopts a common hardware architecture, and the general hardware is resource pooled, which makes the service deployment control flexible.
  • the number of users in the central office network of a single switch (CO, Central Office) is 10,000 to hundreds of thousands, and the number is huge.
  • Two virtualization schemes are provided in the BBF standard organization to solve the business flexibility problem. One is to assign each user a virtual function instance (VCPE, Virtual Custom Premise Equipment), and the other is to virtualize the entire business device.
  • VCPE Virtual Custom Premise Equipment
  • the number of ways to assign a virtual function instance to each user is too large, usually a server machine
  • the rack can realize up to thousands of users. If hundreds of thousands of users need hundreds of server racks, the floor consumption is very large. If the entire business equipment, such as BNG, is virtualized, the server architecture cannot achieve high performance. Forward.
  • Dedicated devices can be deployed or dedicated service boards can be used on the routing architecture, which is expensive and the entire deployment process is complex and time consuming; the virtualization technology uses a common hardware architecture, which consumes a lot of energy, and cannot implement high-performance forwarding based on the server architecture. .
  • This document provides a virtual broadband access method, controller, and system that avoids the deployment of dedicated equipment or the use of dedicated service boards on routing architectures known in the art, is expensive, and the entire deployment process is complex and time consuming;
  • the general hardware architecture consumes a lot of energy and cannot achieve high-performance forwarding based on the server architecture.
  • the embodiment of the present disclosure provides a virtual broadband access method, which is applied to a virtual broadband access system, where the virtual broadband access system includes a repeater, a controller, and a broadband network gateway control pool, and the method includes:
  • selecting the broadband network gateway control pool instance for the user equipment according to the service deployment policy further includes:
  • the tunnel configuration information between the forwarder and the broadband network gateway control pool instance is created, the forwarder is configured by using the tunnel configuration information, and a forwarding tunnel is established between the forwarder and the broadband network gateway control pool instance.
  • performing access, or authentication, or access and authentication with the user equipment according to the user access protocol message, and generating a user table includes:
  • selecting a broadband network gateway control pool instance for the user equipment according to the service deployment policy includes:
  • the user data forwarding table when the user table includes multicast information, the user data forwarding table further includes a multicast forwarding table, where the multicast forwarding table includes a multicast group, a multicast source, a port, and a VLAN. information;
  • Generating a user data forwarding table according to the user table includes: receiving multicast information related to the user equipment, and sending multicast information related to the multicast group or the multicast source or the multicast group and the multicast source to the core network, where Adding the multicast information to the multicast forwarding table, and advertising the multicast information to the vBNG;
  • Receiving the user data packet, and forwarding the user data packet according to the user data forwarding table includes: receiving multicast traffic from the core network, and using the multicast forwarding table to access the user equipment on the network side Forward.
  • receiving a user access protocol message from the user equipment includes: receiving a user access protocol message received by the access node, and sending the receiving port to the controller;
  • the method further includes:
  • the tunnel configuration information between the access node and the broadband network gateway control pool instance is created, the access node is configured by using the tunnel configuration information, and a forwarding tunnel is established between the access node and the broadband network gateway control pool instance.
  • the method further includes:
  • the access protocol response packet is generated, and the Ethernet source address included in the access protocol response packet is a MAC address of the VBNG, and the destination address is a MAC address of the user equipment.
  • the embodiment of the present disclosure further provides a virtual broadband access controller, which is applied to a virtual broadband access system, where the virtual broadband access system includes: a virtual broadband access controller, a repeater, and a broadband network. a gateway control pool, where the virtual broadband access controller includes:
  • the packet load sharing module is configured to: receive a user access protocol packet and a receiving port sent by the repeater, and select a broadband network gateway control pool instance for the user equipment according to the service deployment policy;
  • the user table management module is configured to: receive a user table from the broadband network gateway control pool, and send the user table to a forwarder corresponding to the user equipment, and the forwarder forwards the table according to the user data generated based on the user table. Forward user data packets.
  • the packet load sharing module includes:
  • the identifier identifying module is configured to: query the VLAN identification information carried by the receiving port and the user access protocol packet, where the VLAN identifier information includes an outer VLAN, an inner VLAN, or an outer VLAN and an inner VLAN, Or user MAC information;
  • the new device identification module is configured to: after confirming that the user equipment is a new access user equipment, select a broadband network gateway control pool instance for the new access user equipment, and create an entry of the user packet load sharing table to store The broadband access gateway control pool instance to which the new access user equipment is allocated;
  • the controller also includes:
  • the tunnel management module is configured to: create tunnel configuration information between the forwarder and the broadband network gateway control pool instance, and send the tunnel configuration information to the forwarder and the underlying network, so as to establish a tunnel between the forwarder and the broadband network gateway control pool.
  • User protocol forwarding tunnel is configured to: create tunnel configuration information between the forwarder and the broadband network gateway control pool instance, and send the tunnel configuration information to the forwarder and the underlying network, so as to establish a tunnel between the forwarder and the broadband network gateway control pool.
  • the tunnel management module is further configured to: create tunnel configuration information between the access node and the broadband network gateway control pool instance, and configure the access node and the underlying network by using the tunnel configuration information. Establish a forwarding tunnel between the access node and the broadband network gateway control pool instance.
  • the embodiment of the present disclosure further provides a virtual broadband access system, including:
  • the transponder is configured to: receive a user access protocol packet from the user equipment, and send the user access protocol packet and the receiving port to the controller;
  • the broadband network gateway control pool includes at least one broadband network gateway control pool instance, configured to: complete access, or authentication, or access and authentication according to the user access protocol message and the user equipment; and generate a user table Sending a user table to the controller;
  • the controller is configured to: select a broadband network gateway control pool instance for the user equipment according to the service deployment policy, and send the user table to the forwarder corresponding to the user equipment;
  • the transponder is further configured to: generate a user data forwarding table according to the user table; receive the user data packet, and forward the user data packet according to the user data forwarding table.
  • the controller includes: a message load sharing module, a tunnel management module, and a user table management module, where:
  • the packet load sharing module is configured to: receive a user access protocol packet and a receiving port sent by the forwarder, select a vBNG instance for the user equipment according to the service deployment policy, and send the vBNG instance to the tunnel management module;
  • the tunnel management module is configured to: create tunnel configuration information between the forwarder and the vBNG, and send the tunnel configuration information to the forwarder and the underlying network, so that a forwarding tunnel is established between the forwarder and the broadband network gateway control pool instance;
  • the user table management module is configured to: receive a user table from the broadband network gateway control pool, and send the user table to a forwarder corresponding to the user equipment.
  • the repeater includes: a user forwarding management module and a routing module, wherein:
  • the user forwarding management module is configured to: receive a user table sent by the controller, create a user data forwarding table according to the user table, and configure a route advertisement; after receiving the user data packet from the access network or the core network, according to the An entry of the user data forwarding table to forward the user data packet;
  • the routing module is configured to: receive the tunnel configuration information, and create a forwarding tunnel between the forwarder and the vBNG instance according to the tunnel configuration information.
  • the broadband network gateway control pool includes a user protocol processing module, and the user protocol processing module includes: a PPPoE protocol module, a dynamic host configuration protocol module, an 802.1x protocol module, and an AAA module;
  • the PPPoE protocol module, the dynamic host configuration protocol module, and the 802.1x protocol module are configured to: interact with the user equipment;
  • the AAA module is configured to: authenticate the accessed user equipment, and obtain user policy information, where the user policy information includes security, QoS, multicast authorization, and charging.
  • the PPPoE protocol module is configured to: when the user access protocol packet is a PPPoE packet, receive the user access protocol packet forwarded by the forwarder, and complete the access by interacting with the user equipment. After the authentication, or the access and authentication succeeds, replying to the access protocol response message;
  • the AAA module is configured to: authenticate the user equipment authentication information to the AAA server, and the AAA server and the controller are independent of each other.
  • the packet load sharing module includes:
  • the identifier identifying module is configured to: query the VLAN identification information carried by the receiving port and the user access protocol packet, where the VLAN identifier information includes an outer VLAN, an inner VLAN, or an outer VLAN and an inner VLAN, Or user MAC information;
  • the new device identification module is configured to: after confirming that the user equipment is a new access user equipment, select a broadband network gateway control pool instance for the new access user equipment, and create an entry of the user packet load sharing table to store The new access user equipment is assigned a broadband network gateway control pool instance.
  • the repeater is further configured to: when the user table includes the multicast information, receive the multicast information sent by the controller, and send the multicast group or the group to the core network.
  • an access node is further included;
  • the access node is configured to: receive the user access protocol packet, and send the user access protocol packet and the receiving port to the controller;
  • the packet load sharing module is configured to: apply to the tunnel management to establish a forwarding tunnel between the access node and the vBNG instance;
  • the tunnel management module is configured to: send a tunnel configuration information to the access node and the underlying network, so as to establish a forwarding tunnel between the access node and the vBNG;
  • the dynamic host configuration protocol module is configured to: when the user access protocol packet is a DHCP packet, receive the DHCP packet forwarded by the access node;
  • the AAA module is configured to: interact with the AAA server to verify the user authentication information, and notify the vBNG user management module to save the user policy information in the authentication process;
  • the vBNG user management module is configured to: generate a user table, and send the user table to the controller.
  • Embodiments of the present disclosure also provide a computer readable storage medium storing computer executable instructions that, when executed, implement the virtual broadband access method described above.
  • the beneficial effects of the embodiments of the present disclosure are as follows: in the process of forwarding user data messages, the control will be The function is stripped off and implemented by virtualization technology. The controller and other devices control the forwarding of user data packets. No special equipment is deployed or a dedicated service board is used on the routing architecture known in the art, which reduces the overall energy consumption. And achieve high performance forwarding.
  • FIG. 1 is a schematic structural diagram of a virtual broadband access system
  • FIG. 2 is a schematic diagram showing another architecture of a virtual broadband access system
  • FIG. 3 is a schematic structural diagram of a virtual broadband access system
  • FIG. 4 is a schematic diagram showing still another architecture of the virtual broadband access system
  • FIG. 5 is a schematic diagram showing still another architecture of a virtual broadband access system
  • FIG. 6 is a schematic flowchart of processing a user access protocol packet by a virtual broadband access system
  • FIG. 7 is a schematic flowchart of an optional manner for a virtual broadband access system to process user access protocol packets
  • FIG. 8 is a schematic diagram showing a network architecture of an access node accessing a network side access device
  • FIG. 9 is a schematic flowchart of processing a user access protocol message by a virtual broadband access system in an application scenario
  • FIG. 10 is a schematic flowchart diagram of a virtual broadband access method.
  • the virtual broadband access system is the OSS/BSS (Operating System/Billing System) and the network function virtualization management and coordination (NFV MANO, Network Function Virtualization Management). And Orchestrator) The general name for the system.
  • the virtual broadband access system can dynamically create a virtual network function (VNF) to provide users with various network services.
  • VNF virtual network function
  • BNG Broadband Network Gateway
  • VBNG Virtual Broadband Network Gateway
  • the controller can be configured to: create a broadband network gateway subnet for the broadband network gateway, create a subnet for the forwarder (Forwarder), enable the forwarding device and other service nodes such as vBNG to communicate, and manage the user identifier (ID, Identifier), broadband network gateway subnet and vBNG instance, repeater information, repeater subnet and instance, and management user table, user load sharing table;
  • vBNG is a general description of the function, a vBNG instance is running in the computer system A system that integrates various resources of a computer system.
  • the Forwarder is a central computer network user protocol and data access device. It can be configured to connect to the underlying network through two or more interfaces, and can be set to initiate a connection to the controller after startup, and determine the user and The path between vBNGs, users, and other virtual services;
  • the broadband network gateway control pool can be configured to: after the startup, request the controller to create a subnet for the vBNG instance and the virtual service node, implement interworking between the vBNG instance and other virtual service nodes, and send relevant traffic information to the controller periodically or according to events. ;
  • the virtualized service pool can be configured to adopt general-purpose hardware, and can be configured to: perform resource pool management on the general-purpose hardware to form the virtualized service pool.
  • the virtual broadband access system of the central office room may include an underlay network, a controller, a repeater, a virtual broadband network gateway (vBNG), and a virtualized service pool.
  • vBNG virtual broadband network gateway
  • the virtual broadband access system can dynamically create a virtual network function (VNF) according to the requirements of service deployment and operation and maintenance.
  • VNF virtual network function
  • the VNF runs in a network function virtualization infrastructure solution (NFVI, Network). Above the Function Virtualization Infrastructure).
  • the controller can have the underlying network routing information and set the underlying network to establish the interworking path.
  • the virtual broadband network gateway can be a VNF for wired user access management.
  • VNFs such as vBNG and Content Delivery Network (CDN), Network Address Translation (NAT), etc. can all run on general-purpose computing devices.
  • the embodiment of the present disclosure provides a virtual broadband access system, as shown in FIG. 3, including:
  • the transponder is configured to: receive a user access protocol packet from the user equipment, and send the user access protocol packet and the receiving port to the controller;
  • a broadband network gateway control pool configured to: implement a broadband network gateway control pool vBNG instance, and complete access, or authentication, or access and authentication according to the user access protocol message and the user equipment; and generate a user table Sending a user table to the controller;
  • the controller is configured to: select a broadband network gateway control pool instance according to the service deployment policy, and send the user table to the forwarder corresponding to the user equipment;
  • the forwarder is further configured to: generate a user data forwarding table according to the user table, and advertise a user route to the core network; receive the user data packet, and forward the user data packet according to the user data forwarding table.
  • the virtual broadband access system strips out the control functions during the process of forwarding user data packets, and implements virtualization technology.
  • the controller and other devices control the forwarding of user data packets without deploying dedicated data.
  • the use of dedicated service boards on devices or routing architectures known in the art reduces overall power consumption and enables high performance forwarding.
  • the virtual broadband access system can be located in the central computer room, one side can be connected to the access network, and the user equipment can be interoperable with the virtual broadband access system through the access network, and the virtual broadband access system is another.
  • the side can be connected to the core network, where:
  • the access network, the user access protocol packet and the user data packet can access the virtual broadband access system of the network access center room network, and the forwarder can receive the user access protocol packet, and the forwarder can connect the user.
  • the protocol packet and the receiving port are sent to the controller.
  • the access device may be a user access protocol packet of the central office network and an access device for the user data packet, and is configured to be connected to the underlying network through two or more interfaces, and configured to: initiate to the controller after startup Connection, at this time, the controller can create a subnet for the repeater, so that the repeater and the virtual service nodes such as vBNG, CDN, and NAT can communicate.
  • the information of the repeater such as network information such as an IP address, can be saved by the controller.
  • the forwarder can create a user data forwarding table according to the service information in the user table and forward the related information, and enter the user data packet according to the user data forwarding table. Line fast forwarding.
  • the controller can be connected.
  • the vBNG instance can send relevant information to the controller periodically or according to events, such as the number of access users, CPU (Central Processing Unit) load, and the like.
  • a virtual service node such as vBNG, CDN, or NAT
  • the controller can be requested to create a subnet for a virtual service node such as a vBNG, so that virtual service nodes such as vBNG, CDN, and NAT can communicate with each other.
  • the information of the vBNG instance such as the subnet and the vBNG ID of the vBNG instance, and the subnet ID, such as the virtual eXtensible Local Area Network (VXLAN), may be saved by the controller.
  • VXLAN virtual eXtensible Local Area Network
  • the information of the repeater and the information of the vBNG instance can be saved by the controller.
  • the protocol running between the controller and the vBNG may include, but is not limited to, an open flow protocol or a network configuration (Netconf), a delegate state transfer configuration (Restconf) protocol, and the controller may allocate a vBNG instance to the user equipment.
  • Networkconf network configuration
  • Resolutionconf delegate state transfer configuration
  • the vBNG can process the user access protocol packet and create a user table.
  • the vBNG can send the user table to the controller.
  • the user table is configured to configure the forwarding of the user data packet and the route advertisement of the forwarder, and can include the user session (session) related.
  • the information such as session ID, user account name, online time, authentication information, service information, and forwarding related information, etc., can be sent to the controller by the vBNG.
  • the controller can send the user table to the repeater.
  • the forwarder may also be configured to: create a bidirectional forwarding path of the user equipment to other virtual service nodes according to the user table, and issue a user route to the network side.
  • the virtual broadband access system that can realize multi-service multi-user access is connected to the access network while the other side is connected to the core network. To achieve its functions.
  • the controller may include: a packet load sharing module, a tunnel management module, a user table management module, and a route calculation topology module:
  • the packet load sharing module is configured to: receive a user access protocol packet and a receiving port sent by the forwarder, select a vBNG instance according to the service deployment policy, and send the vBNG instance to the tunnel management module;
  • the tunnel management module is configured to: create tunnel configuration information between the forwarder and the vBNG, and send the tunnel configuration information to the forwarder to configure the forwarder;
  • the user table management module is configured to: receive a user table from the broadband network gateway control pool, where the user table includes information about the user session, and send the user table to the forwarder corresponding to the user equipment.
  • the repeater may be a user equipment access device of the central office, and the repeater may be interconnected with the vBNG and other virtual service nodes through the underlying network.
  • the forwarder may include: a user forwarding management module, a routing module, a multicast module, an access control list (ACL) module, and a quality of service (QoS) module:
  • the routing module is configured to: receive the tunnel configuration information sent by the controller, and create a forwarding tunnel between the forwarder and the vBNG according to the tunnel configuration information.
  • the routing module can be configured to: receive the tunnel configuration information, and create a tunnel between the forwarder and the vBNG.
  • the user data forwarding table may include a multicast forwarding table and a network address translation NAT forwarding table
  • the starting point of the user uplink traffic may be a forwarder, and the service starting point of the downlink traffic may be introduced by the user route.
  • VNFs such as vBNG, CDN, and NAT can all run on general-purpose computing devices managed by a virtualized service pool; vBNG, CDN, and NAT can be dynamically increased or decreased to accommodate user business needs.
  • the vBNG may include a user protocol processing module; the user protocol processing module may include, but is not limited to, Point to Point Protocol over Ethernet (PPPoE) and Dynamic Host Configuration Protocol (DHCP). , Dynamic Host Configuration Protocol), 802.1x protocol module and authentication, authorization and accounting (AAA, Authentication, Authorization, Accounting) modules.
  • PPPoE Point to Point Protocol over Ethernet
  • DHCP Dynamic Host Configuration Protocol
  • AAA authentication, authorization and accounting
  • the AAA module is configured to: interact with the AAA server to authenticate the access of the user equipment, and obtain user policy information, where the user policy information includes security, QoS, multicast authorization, and accounting.
  • the vBNG can receive the user access protocol packet forwarded by the forwarder and the receiving port, then the PPPoE protocol
  • the module, the dynamic host configuration protocol module, the 802.1x protocol module of the Institute of Electrical and Electronic Engineers (IEEE) can interact with the user equipment according to the type of the user access protocol message, and can pass the AAA module. (Authentication, Authorization, Accounting) and AAA server interactive authentication.
  • the user management module of the vBNG can be configured to: save user protocol processing information and related information acquired by the AAA module.
  • the user access protocol packet may be a PPPoE packet or other type of packet.
  • the packet load sharing module may be configured to: query the virtual local area network (VLAN) identifier information carried by the receiving port and the user access protocol packet, where the VLAN identifier information includes an outer VLAN or an inner layer. VLAN, or outer VLAN and inner VLAN, or user media access control (MAC, Media Access Control) information to confirm whether it is an access user; if it is a new access user, the controller assigns the new access user The vBNG instance of the service, and the user packet load balancing entry is created, and the vBNG instance to which the new access user is assigned is stored;
  • VLAN virtual local area network
  • the tunnel management module may be configured to: send a tunnel configuration information to the forwarder and the underlying network, so as to establish a user protocol forwarding tunnel between the forwarder and the vBNG;
  • the PPPoE protocol module receives the user access protocol packet forwarded by the forwarder, and the vBNG interacts with the user to complete access, or authentication, or access and authentication; if the access is successful, the PPPoE protocol module can be set to: reply Access protocol response message;
  • the AAA module can interact with the AAA server to perform user authentication information verification in the above authentication process, and the AAA server can be a system independent of the controller.
  • the method for processing a user access protocol packet by a virtual broadband access system includes:
  • Step S601 The forwarder receives the user access protocol packet, and sends the user access protocol packet and the receiving port to the controller.
  • the user access protocol packet may be a PPPoE packet.
  • Step S602 The packet load sharing module queries the VLAN identification information carried by the receiving port and the user access protocol packet, where the VLAN identifier information includes an outer VLAN, an inner VLAN, or an outer VLAN and an inner VLAN. Or user MAC information to confirm whether it is an access user.
  • the controller can allocate the vBNG served by the new access user, and create Create a user packet load balancing entry to store the vBNG to which the new access user is assigned.
  • User packet load balancing entries can include, but are not limited to, user ID, port, VLAN, vBNG ID, and forwarder ID.
  • the controller can select a vBNG instance according to the service deployment policy, such as the number of accesses of each vBNG user.
  • the packet load sharing module applies to the tunnel management module to establish a tunnel between the forwarder and the vBNG instance.
  • the tunnel management module sends the tunnel configuration information to the forwarder and the underlying network to establish a user protocol forwarding tunnel between the forwarder and the vBNG.
  • the tunnel forwarding information may include but is not limited to port, VLAN, MAC, PPPoE/DHCP/IEEE 802.1. Protocol type such as x and tunnel encapsulation information; tunnel encapsulation information may include, but is not limited to, a VXLAN encapsulation.
  • Step S603 The PPPoE protocol module receives the user access protocol packet forwarded by the forwarder, and the vBNG interacts with the user to complete access, or authentication, or access and authentication.
  • the PPPoE protocol module can reply to the access protocol response packet, such as PPPoE/DHCP.
  • the Ethernet address of the access protocol response packet can be the MAC address of the vBNG, and the destination address can be the user MAC address.
  • the vBNG can save the user policy information in the authentication process.
  • the user policy information can include, but is not limited to, VLAN, MAC, Internet Protocol (IP), session ID, ACL (Access Control List), and policy routing (PBR). (policy-Based routing)/Committed Access Rate (CAR), Hierarchical Quality of Service (HQoS) and other information.
  • the vBNG can generate a user table, including but not limited to information such as a VLAN, a MAC, a Point to Point Protocol (PPP) session ID, an IP address, and the like, and can send the user table to the controller.
  • a user table including but not limited to information such as a VLAN, a MAC, a Point to Point Protocol (PPP) session ID, an IP address, and the like, and can send the user table to the controller.
  • PPP Point to Point Protocol
  • the vBNG AAA module can perform user authentication information verification by interacting with the AAA server during the above authentication process, and the AAA server can be a system independent of the controller.
  • the vBNG can periodically send information such as the number of access users and traffic to the packet load balancing module in the controller.
  • Step S604 in the controller, the user table management module receives the user table sent by the vBNG, and sends it to the forwarder corresponding to the user.
  • the repeater can include one or more, and the function of the repeater can include But not limited to: QoS, security policy and other functions.
  • Step S605 the forwarder receives the user table, generates a user data forwarding table, and issues a user route to the network side.
  • the forwarder supports Open Shortest Path First (OSPF), Intermediate System to Intermediate System (ISIS), Routing Information Protocol (RIP), and Border Gateway Protocol (BGP). Agreements such as Border Gateway Protocol).
  • OSPF Open Shortest Path First
  • ISIS Intermediate System to Intermediate System
  • RIP Routing Information Protocol
  • BGP Border Gateway Protocol
  • Agreements such as Border Gateway Protocol).
  • Step S606 The forwarder receives the user uplink data packet or the downlink data packet, and processes the user uplink or downlink data packet according to the user data forwarding table.
  • the forwarder can periodically send traffic forwarding information to the controller.
  • the function of the virtual broadband access system can be very rich, not only capable of processing user access protocol messages, but also capable of processing multicast information.
  • the multicast information processed by the virtual broadband access system may include: an unauthorized multicast group and an authorized multicast group.
  • the user table may include multicast information.
  • the repeater may be configured to: receive the multicast information sent by the controller, and send the multicast information including the multicast group, or the multicast source, or the multicast group and the multicast source to the core network; to the vBNG The multicast information is advertised; the multicast traffic is received from the core network side and forwarded to the user side.
  • Method flow can include:
  • Steps S701-S702 the functional steps performed are the same as steps S601-S602.
  • the vBNG may include multicast information, such as an authorized multicast group address, or a multicast source, or a multicast group and a multicast source address, and a number of multicast groups, in addition to the S406.
  • step S704 the controller not only performs the function of step S604, but also delivers multicast information to the forwarder.
  • the user side may use a Protocol Independent Multicast (PIM) protocol to specify a router (DR, Designated Router). ) Election and delivery of multicast traffic.
  • PIM Protocol Independent Multicast
  • Step S705 not only the function of step S605 is performed, but also the forwarder receives the multicast information related to the user, and the forwarder sends the multicast information including the multicast group, or the multicast source, or the multicast group and the multicast source to the network side. .
  • Step S706 the forwarder receives the multicast group access message, and if it is an authorized multicast group, it will authorize The port, VLAN information, or port and VLAN information that the multicast group joins are added to the multicast forwarding table.
  • the multicast forwarding table can include, but is not limited to, multicast groups, multicast sources, ports, and VLANs.
  • the repeater can advertise the multicast information to the vBNG.
  • Step S707 the forwarder receives the multicast traffic from the core network side, and forwards the traffic to the user side.
  • a virtual broadband access system that implements multi-service multi-user access can process user access protocol packets, and the access node (AN, Access Network) can be used as a central device user side access device. As shown in Figure 8, in the network networking, the AN can be used as the access device on the user side of the equipment room. The AN can interconnect with the forwarders, vBNGs, and other virtual service nodes through the underlying network.
  • AN Access Network
  • a virtual broadband access system may further include:
  • the access node is configured to: receive the user access protocol packet, and send the user access protocol packet and the receiving port to the controller;
  • the packet load sharing module is configured to: apply to the tunnel management to establish a tunnel between the access node AN and the vBNG instance;
  • the tunnel management module is configured to: send a tunnel configuration information to the AN and the underlying network, so as to establish a user protocol forwarding tunnel between the AN and the vBNG;
  • the DHCP module is configured to: when the user access protocol packet is a DHCP packet, receive the DHCP packet forwarded by the AN;
  • the AAA module can be configured to: perform interaction with the AAA server for user authentication information verification;
  • the DHCP module or the AAA module may notify the vBNG user management module to save user policy information related to the verification.
  • the AAA module is used as an example.
  • the AAA module can obtain user policy information from the AAA server through the protocol.
  • the AAA module and the vBNG user management module can be linked through the internal interface.
  • the AAA module can send user policy information to the vBNG user.
  • the management module is saved by the vBNG user management module.
  • the vBNG user management module is configured to: generate a user table, and send the user table to the controller.
  • a method for processing a user access protocol packet, such as a DHCP packet, in a virtual broadband access system that implements multi-service multi-user access may include:
  • step S901 the access node AN receives the user access protocol message, such as a DHCP message, and the AN sends the user access protocol message and the receiving port to the controller.
  • the user access protocol message such as a DHCP message
  • Step S902 The controller load balancing module queries the VLAN identification information carried by the receiving port and the user access protocol packet to confirm whether it is an access user, and the VLAN identification information may include an outer VLAN, or Inner VLAN, or outer VLAN and inner VLAN, or user MAC information.
  • the controller can allocate the vBNG instance served by the new access user, and create a user packet load balancing entry, and store the vBNG allocated by the new access user, and the user packet load sharing entry can be Includes, but is not limited to, user ID, port, VLAN, vBNG ID, and AN ID.
  • the controller can select a vBNG instance according to the service deployment policy, such as the number of accesses of each vBNG user.
  • the service deployment policy such as the number of accesses of each vBNG user.
  • the packet load sharing module applies to the tunnel management to establish a tunnel between the AN and the vBNG instance.
  • the tunnel management module sends the tunnel configuration information to the AN and the underlying network to establish a user protocol forwarding tunnel between the AN and the vBNG.
  • the tunnel configuration information may include tunnel forwarding information and tunnel encapsulation information, and the tunnel forwarding information may include but is not limited to a port. Protocol types such as VLAN, MAC, PPPoE/DHCP/802.1x, and tunnel encapsulation information; tunnel encapsulation information may include, but is not limited to, VXLAN encapsulation.
  • Step S903 The vBNG DHCP module receives the DHCP packet forwarded by the AN.
  • the vBNG interacts with the user to complete access, or authentication, or access and authentication. If the access is successful, the vBNG replies to the access protocol response packet.
  • the vBNG DHCP module may notify the vBNG user management module to save the user policy information in the authentication process, where the user policy information may include, but is not limited to, any one or a combination of VLAN, MAC, IP, and user traffic control policy information, such as an ACL. PBR, CAR or HQoS information, etc.
  • the DHCP module can perform user authentication information verification by interacting with the AAA server through the AAA module.
  • the DHCP module or the AAA module can notify the vBNG user management module to save the authentication related information.
  • the vBNG user management module can generate a user table, which includes but is not limited to VLAN, MAC, IP information, and flow control policy information, and can send the user table to the controller.
  • the user table management module may receive the user table sent by the vBNG; the user table management module may request the forwarder of the user from the packet load sharing module, and the load sharing module may Assign and return forwarder information.
  • the load sharing module can select a forwarder instance according to the service deployment policy, such as the load of each forwarder user.
  • the user table management module may send a user data forwarding table to the AN, where the user data forwarding table may include, but is not limited to, port, VLAN, MAC, IP, and tunnel encapsulation information, and the tunnel encapsulation information may include, but is not limited to, a VXLAN encapsulation;
  • the forwarder sends the user table.
  • Step S905 In the forwarder, the user forwards the management module, receives the user table, implements the user data forwarding table, and issues the user route to the network side.
  • the repeater supports protocols such as OSPF, ISIS, RIP, and BGP.
  • Step S906 The forwarder receives the uplink data packet or the downlink data packet of the user, and processes the user data packet according to the entry of the user data forwarding table.
  • the functions performed by the repeater may include, but are not limited to, QoS, security policies, and the like.
  • the AN may include one or more, the vBNG instance may have one or more, the repeater may have one or more, and the access node AN may be an optical line terminal (OLT, Optical Line Terminal). ), Digital Subscriber Line Access Multiplexer (DSLAM, Digital Subscriber Line Access Multiplexer).
  • OLT optical line terminal
  • DSLAM Digital Subscriber Line Access Multiplexer
  • the embodiment of the present disclosure provides a virtualization management controller, which is applied to a virtual broadband access system.
  • the virtual broadband access system includes: a controller, a repeater, and a broadband network gateway control pool.
  • the controller includes:
  • the packet load sharing module is configured to: receive a user access protocol packet and a receiving port sent by the forwarder, and select a broadband network gateway control pool instance according to the service deployment policy;
  • the user table management module is configured to: receive a user table from the broadband network gateway control pool, where the user table includes information of the user session, and send the user table to the forwarder corresponding to the user equipment, and the forwarder is based on the The user data forwarding table generated by the user table forwards the user data packet.
  • the packet load sharing module is configured to: query the VLAN identification information carried by the receiving port and the user access protocol packet, where the VLAN identifier information includes an outer VLAN or an inner layer. VLAN, or outer VLAN and inner VLAN, or user MAC information; after confirming that it is a new access user equipment, select a broadband network gateway control pool instance for the new access user equipment, and create a user packet load sharing table. An entry to store an instance of the broadband network gateway control pool to which the new access user equipment is allocated;
  • the tunnel management module is configured to: create tunnel configuration information between the forwarder and the broadband network gateway control pool instance, and send tunnel configuration information to the forwarder and the underlying network, thereby establishing a user agreement between the forwarder and the broadband network gateway control pool. Forward the tunnel.
  • the embodiment of the present disclosure further provides a virtual broadband access method, which is applied to a virtual broadband access system, where the virtual broadband access system includes a repeater, a controller, and a broadband network gateway control pool.
  • the method includes :
  • Step S101 Receive a user access protocol message from the user equipment.
  • Step S102 Select a broadband network gateway control pool instance for the user equipment according to the service deployment policy.
  • Step S103 Perform access, or authentication, or access and authentication, and generate a user table according to the user access protocol packet and the user equipment.
  • Step S104 Generate a user data forwarding table according to the user table.
  • Step S105 Receive a user data packet, and forward the user data packet according to the user data forwarding table.
  • the method may further include:
  • the tunnel configuration information between the forwarder and the broadband network gateway control pool instance is created, the forwarder is configured by using the tunnel configuration information, and a forwarding tunnel is established between the forwarder and the broadband network gateway control pool instance.
  • performing access, or authentication, or access and authentication, and generating the user table according to the user access protocol packet and the user equipment may include:
  • the user table is generated according to the user access protocol packet, and the generated user table includes a VLAN, a MAC, a PPP session ID, an IP address information, traffic control policy information, multicast information, or traffic control policy information, and multicast information.
  • selecting the broadband network gateway control pool instance for the user equipment according to the service deployment policy may include:
  • the gateway After confirming that it is a new access user equipment, selecting a broadband network gateway control pool instance for the new access user equipment, and creating an entry of the user packet load sharing table to store the broadband network to which the new access user equipment is allocated.
  • the gateway controls the pool instance.
  • the packet load sharing module can query the VLAN identification information carried by the receiving port and the user access protocol packet, and the VLAN identifier information can include the outer VLAN or the inner VLAN. Layer VLAN, or outer VLAN and inner VLAN, or user MAC information. After confirming that it is a new access user equipment, you can select a broadband network gateway control pool instance for the new access user equipment, and create a user packet payload. An entry of the distribution table to store an instance of the broadband network gateway control pool to which the new access user equipment is allocated;
  • the tunnel management module may apply to establish a tunnel between the forwarder and the vBNG instance
  • the tunnel management module can send the tunnel configuration information to the forwarder and the underlying network, so as to establish a user protocol forwarding tunnel between the forwarder and the vBNG;
  • the PPPoE protocol module can receive the user access protocol packet forwarded by the forwarder, and the vBNG can interact with the user equipment to complete access, or authentication, or access and authentication; if the access is successful, the PPPoE protocol module can reply to the access. Protocol response message;
  • the AAA module can interact with the AAA server to verify user authentication information, and the AAA server can be independent of the controller.
  • the user data forwarding table further includes a multicast forwarding table, where the multicast forwarding table includes a multicast group, a multicast source, a port, and VLAN information.
  • Generating a user data forwarding table according to the user table includes: receiving multicast information related to the user equipment, and sending multicast information related to the multicast group or the multicast source or the multicast group and the multicast source to the core network, where Adding the multicast information to the multicast forwarding table, and advertising the multicast information to the vBNG;
  • Receiving the user data packet, and forwarding the user data packet according to the user data forwarding table includes: receiving multicast traffic from the core network, and using the multicast forwarding table to access the user equipment on the network side Forward.
  • Receiving the user access protocol packet from the user equipment including: receiving the user access protocol packet received by the access node, and sending the receiving port to the controller;
  • the method further includes:
  • the tunnel configuration information between the access node and the broadband network gateway control pool instance is created, the access node is configured by using the tunnel configuration information, and a forwarding tunnel is established between the access node and the broadband network gateway control pool instance.
  • the DHCP module receives the DHCP packet forwarded by the AN.
  • the DHCP module or the AAA module notifies the vBNG user management module to save the user policy information in the authentication process;
  • the user table is sent to the controller.
  • the method further includes:
  • the access protocol response packet is generated, and the Ethernet source address included in the access protocol response packet is a MAC address of the VBNG, and the destination address is a MAC address of the user equipment.
  • the embodiment of the present disclosure further provides a virtual broadband access network, including an access network, a core network, a virtual broadband access system package, and a user equipment, where the user equipment is connected to the access network;
  • Virtual broadband access systems include:
  • the transponder is configured to: receive a user access protocol packet from the user equipment, and send the user access protocol packet and the receiving port to the controller;
  • Controller set to: select broadband network gateway control pool vBNG according to business deployment strategy For example, creating tunnel configuration information between the forwarder and the broadband network gateway control pool;
  • the broadband network gateway control pool is configured to: implement a vBNG instance, complete access, or authentication, or access and authentication according to the user access protocol message and the user equipment; and generate a user table, and send the user table Giving the controller
  • the controller is configured to: send the user table to a forwarder corresponding to the user equipment;
  • the transponder is configured to: generate a user data forwarding table according to the user table, and advertise a user route to the core network; receive the user data packet, and perform the user data packet according to the entry of the user data forwarding table. Forward.
  • the controller includes: a packet load sharing module, a route calculation topology module, a tunnel management module, and a user table management module, where:
  • the packet load sharing module is configured to: receive a user access protocol packet and a receiving port sent by the forwarder, select a vBNG instance according to the service deployment policy, and send the vBNG instance to the tunnel management module;
  • the route calculation topology module is configured to: calculate a tunnel between the forwarder and the vBNG, and optionally find an IP address of the node of the tunnel and the tail node, and perform corresponding processing;
  • the tunnel management module is configured to: create tunnel configuration information between the forwarder and the vBNG, and send the tunnel configuration information to the forwarder to configure the forwarder;
  • the user table management module is configured to: receive a user table from the broadband network gateway control pool, and the user table includes information of the user session.
  • the forwarder includes: a user forwarding management module and a routing module, where:
  • the user forwarding management module is configured to: receive a user table sent by the controller, where the user table is configured to configure the forwarder to forward user data packets and route advertisements, create a user data forwarding table, and receive the access network or the core network. After the user data packet, the user data packet is forwarded according to the user data forwarding table;
  • the routing module is configured to: receive the tunnel configuration information, and create a tunnel between the forwarder and the vBNG.
  • the vBNG, the CDN, and the NAT are all running on the general-purpose computing device hardware managed by the virtualized service pool, and all belong to the virtual network function virtual network function (VNF, Virtualized). Network Function);
  • the broadband network gateway control pool may include a user protocol processing module, and the user protocol processing module may include: a PPPoE protocol module, a dynamic host configuration protocol module, an 802.1x protocol module, and an AAA module;
  • the PPPoE protocol module, the dynamic host configuration protocol module, and the 802.1x protocol module can be configured to: interact with the user equipment;
  • the AAA module can be configured to: authenticate the access of the user equipment, and obtain the user policy information, where the user policy information includes security, QoS, multicast authorization, and accounting.
  • the virtualized service pool may also be configured to dynamically increase or decrease the number of the vBNG, CDN, and NAT.
  • the user access protocol packet is a PPPoE packet.
  • the packet load sharing module is configured to: query the VLAN identification information carried by the receiving port and the user access protocol packet, where the VLAN identifier information includes an outer VLAN, an inner VLAN, or an outer VLAN, and an inner VLAN. Layer VLAN, or user MAC information; to confirm whether it is an access user equipment, if it is a new access user equipment, assign a vBNG instance served by the new access user equipment, and create a user packet load sharing entry, and store The vBNG instance to which the new access user equipment is assigned;
  • the tunnel management module is configured to: send a tunnel configuration information to the forwarder and the underlying network, so as to establish a user protocol forwarding tunnel between the forwarder and the vBNG;
  • the PPPoE protocol module is configured to: receive a user access protocol packet forwarded by the forwarder, and the vBNG interacts with the user equipment to complete access, or authentication, or access and authentication; if the access is successful, the PPPoE protocol module replies to the access. Protocol response message;
  • the AAA module is configured to: interact with the AAA server to verify user device authentication information, and the AAA server and the controller are independent of each other.
  • the user table contains multicast information
  • the forwarder is further configured to: receive the multicast information sent by the controller, and send the information to the core network.
  • the multicast information is advertised to the vBNG.
  • the multicast traffic is received from the core network and forwarded to the user equipment on the access network. .
  • the access node is configured to: receive the user access protocol packet, and send the user access protocol packet and the receiving port to the controller;
  • the packet load sharing module is configured to: apply to the tunnel management to establish a tunnel between the AN and the vBNG instance;
  • the tunnel management module is configured to: send a tunnel configuration information to the AN and the underlying network, so as to establish a user protocol forwarding tunnel between the AN and the vBNG;
  • the DHCP module is configured to: when the user access protocol packet is a DHCP packet, receive the DHCP packet forwarded by the AN;
  • the DHCP module or the AAA module notifies the vBNG user management module to save the user policy information in the authentication process;
  • the vBNG user management module is configured to: generate a user table, and send the user table to the controller.
  • the repeater completion function can include QoS and security policy functions
  • the AN may include one or more, the vBNG instance may have one or more, the repeater may have one or more, and the AN may be at least one of an OLT, a DSLAM, a switch, and an openflow switch.
  • the control function is stripped off, and the virtualization technology is implemented, and the controller and other devices control the forwarding of the user data packets without deploying special equipment or
  • the use of dedicated service boards on the known routing architecture in the domain reduces overall energy consumption and enables high performance forwarding.
  • Embodiments of the present disclosure also provide a computer readable storage medium storing computer executable instructions that, when executed, implement the virtual broadband access method described above.
  • computer storage medium includes volatile and nonvolatile, implemented in any method or technology for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media.
  • Computer storage media include, but are not limited to, Random Access Memory (RAM), Read-Only Memory (ROM), and Electrically Erasable Programmable Read-only Memory (EEPROM). Flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical disc storage, magnetic cassette, magnetic tape, disk storage or other magnetic storage device, or Any other medium used to store the desired information and that can be accessed by the computer.
  • communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media. .
  • control function is stripped out and implemented by using a virtualization technology, and the device such as the controller controls the forwarding of the user data packet, thereby reducing the overall energy consumption. And achieve high performance forwarding.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

一种虚拟宽带接入方法包括：接收到来自用户设备的用户接入协议报文；根据业务部署策略为所述用户设备选择宽带网络网关控制池实例；根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证，以及生成用户表；根据所述用户表生成用户数据转发表；收到用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发。

Description

一种虚拟宽带接入方法、控制器和系统 技术领域
本公开涉及通信领域，尤其是一种虚拟宽带接入方法、控制器和系统。
背景技术
随着互联网应用和宽带业务的普及，运营商为宽带用户提供了更多的网络业务，例如安全、虚拟网络、过滤、负载均衡、多媒体及多媒体增强等。为了提供这些业务，运营商大致是采用专用设备或路由器专用业务板来提供业务。
部署专用设备或在本领域已知的路由架构上使用专用业务板，价格昂贵并且整个部署过程复杂且耗时，导致网络运营商无法快速部署硬件来支持业务。此外，专用设备或业务板的部署维护费用高，需要进行特定的定制和手工配置。有线数据通信网为家庭用户以及企业用户提供因特网(Internet)接入及互联网增值服务。接入控制通过宽带接入服务器(BRAS，Broadband Remote Access Server)、业务路由器(SR，Service Router)、宽带网络网关(BNG，Broadband Network Gateway)等专用设备实现。然而，有线数据通信网的用户多、流量大且业务复杂。
虚拟化技术采用通用硬件架构，并且将通用硬件进行资源池化管理，使得业务部署控制灵活。单个交换机(CO，Central Office)中心机房网络承载的用户数有一万到几十万，数目巨大；BBF标准组织中给出两种虚拟化方案来解决业务灵活性问题。一种是为每个用户分配一个虚拟功能实例(VCPE，Virtual Custom Premise Equipment)，一种是整个业务设备进行虚拟化。
发明内容
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求的保护范围。
为每个用户分配一个虚拟功能实例的方式数目太大，通常一个服务器机 架最多实现上千个用户，如果几十万用户就需要几百个服务器机架，占地耗能都很大；而如果整个业务设备，如BNG进行虚拟化，基于服务器架构又无法实现高性能转发。
可以部署专用设备或在路由架构上使用专用业务板，价格昂贵并且整个部署过程复杂且耗时；虚拟化技术采用通用硬件架构，占地耗能都很大，基于服务器架构又无法实现高性能转发。
本文提供一种虚拟宽带接入方法、控制器和系统，能够避免部署专用设备或在本领域已知的路由架构上使用专用业务板，价格昂贵并且整个部署过程复杂且耗时；虚拟化技术采用通用硬件架构，占地耗能都很大，基于服务器架构又无法实现高性能转发。
本公开实施例提供一种虚拟宽带接入方法，应用于虚拟宽带接入系统，所述虚拟宽带接入系统包括转发器、控制器和宽带网络网关控制池，方法包括：
接收到来自用户设备的用户接入协议报文；
根据业务部署策略为所述用户设备选择宽带网络网关控制池实例；
根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证，以及生成用户表；
根据所述用户表生成用户数据转发表；
收到用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发。
在一种示例性实施方式中，根据业务部署策略为所述用户设备选择宽带网络网关控制池实例还包括：
创建转发器和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对转发器进行配置，在转发器和宽带网络网关控制池实例之间建立转发隧道。
在一种示例性实施方式中，根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证，以及生成用户表包括：
向AAA服务器认证用户设备，保存认证过程中的用户策略信息；
根据所述用户接入协议报文生成用户表，用户表包括VLAN、MAC、PPP  Session ID、IP地址信息、流量控制策略信息和组播信息中任意一个或其组合。
在一种示例性实施方式中，根据业务部署策略为所述用户设备选择宽带网络网关控制池实例包括：
查询用户接入协议报文及接收端口所携带的VLAN标识信息；
确认是新接入用户设备，为所述新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例。
在一种示例性实施方式中，当用户表中包含组播信息时，所述用户数据转发表还包括组播转发表，所述组播转发表包含组播组、组播源、端口和VLAN信息；
根据所述用户表生成用户数据转发表包括：收到用户设备相关的组播信息，向核心网络发送组播组、或组播源、或组播组和组播源相关的组播信息，将所述组播信息加入到所述组播转发表中，以及向vBNG通告组播信息；
收到用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发包括：从核心网络接收到组播流量，根据所述组播转发表向接入网络一侧的用户设备进行转发。
在一种示例性实施方式中，接收到来自用户设备的用户接入协议报文包括：将接入节点接收到的用户接入协议报文，以及接收端口发送给控制器；
根据业务部署策略为所述用户设备选择宽带网络网关控制池实例之后还包括：
创建接入节点和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对接入节点进行配置，在接入节点和宽带网络网关控制池实例之间建立转发隧道。
在一种示例性实施方式中，根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证之后还包括：
生成接入协议响应报文，所述接入协议响应报文报文包含的以太源地址是VBNG的MAC地址，目的地址是用户设备的MAC地址。
本公开实施例还提供一种虚拟宽带接入控制器，应用于虚拟宽带接入系统，所述虚拟宽带接入系统包括：虚拟宽带接入控制器、转发器和宽带网络 网关控制池，所述虚拟宽带接入控制器包括：
报文负载分担模块，设置为：接收转发器传送来的用户接入协议报文和接收端口，根据业务部署策略为用户设备选择宽带网络网关控制池实例；
用户表管理模块，设置为：接收来自所述宽带网络网关控制池的用户表，将所述用户表发送给用户设备对应的转发器，由转发器根据基于所述用户表生成的用户数据转发表对用户数据报文进行转发。
在一种示例性实施方式中，所述报文负载分担模块包括：
标识识别模块，设置为：查询所述接收端口和所述用户接入协议报文所携带的VLAN标识信息，VLAN标识信息包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户MAC信息；
新设备识别模块，设置为：在确认所述用户设备是新接入用户设备之后，为该新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例；
控制器还包括：
隧道管理模块，设置为：创建转发器和宽带网络网关控制池实例之间的隧道配置信息，向转发器及底层网络下发所述隧道配置信息，从而使转发器与宽带网络网关控制池之间建立用户协议转发隧道。
在一种示例性实施方式中，隧道管理模块，还设置为：创建接入节点和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对接入节点及底层网络进行配置，在接入节点和宽带网络网关控制池实例之间建立转发隧道。
本公开实施例还提供一种虚拟宽带接入系统，包括：
转发器，设置为：接收到来自用户设备的用户接入协议报文，将所述用户接入协议报文和接收端口发送给控制器；
宽带网络网关控制池，包括至少一个宽带网络网关控制池实例，设置为：根据所述用户接入协议报文与所述用户设备完成接入、或认证、或接入和认证；以及生成用户表，将用户表发送给所述控制器；
控制器，设置为：根据业务部署策略为所述用户设备选择宽带网络网关控制池实例，以及将所述用户表发送给所述用户设备对应的转发器；
所述转发器，还设置为：根据所述用户表生成用户数据转发表；接收用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发。
在一种示例性实施方式中，控制器包含：报文负载分担模块、隧道管理模块和用户表管理模块，其中：
报文负载分担模块，设置为：接收转发器上送的用户接入协议报文和接收端口，根据业务部署策略为所述用户设备选择vBNG实例，发送vBNG实例给隧道管理模块；
隧道管理模块，设置为：创建转发器和vBNG之间的隧道配置信息，向转发器及底层网络发送所述隧道配置信息，从而使转发器与宽带网络网关控制池实例之间建立转发隧道；
用户表管理模块，设置为：接收来自所述宽带网络网关控制池的用户表，将所述用户表发送给所述用户设备对应的转发器。
在一种示例性实施方式中，转发器包含：用户转发管理模块和路由模块，其中：
用户转发管理模块，设置为：收到控制器发送的用户表，根据所述用户表创建用户数据转发表以及配置路由发布；收到来自接入网络或核心网络的用户数据报文后，根据所述用户数据转发表的表项来转发用户数据报文；
路由模块，设置为：收到所述隧道配置信息，根据所述隧道配置信息创建转发器到vBNG实例之间的转发隧道。
在一种示例性实施方式中，所述宽带网络网关控制池包含用户协议处理模块，用户协议处理模块包括：PPPoE协议模块、动态主机配置协议模块、802.1x协议模块和AAA模块；
PPPoE协议模块、动态主机配置协议模块、802.1x协议模块设置为：和用户设备进行交互；
AAA模块，设置为：认证接入的用户设备，获取用户策略信息，所述用户策略信息包括安全、QoS、组播授权和计费。
在一种示例性实施方式中，PPPoE协议模块，设置为：当用户接入协议报文是PPPoE报文时，接收转发器转发的用户接入协议报文，在与该用户设备交互完成接入、或认证、或接入和认证成功后，回复接入协议响应报文；
AAA模块，设置为：向AAA服务器验证用户设备鉴权信息，AAA服务器与控制器相互独立。
在一种示例性实施方式中，报文负载分担模块包括：
标识识别模块，设置为：查询所述接收端口和所述用户接入协议报文所携带的VLAN标识信息，VLAN标识信息包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户MAC信息；
新设备识别模块，设置为：在确认所述用户设备是新接入用户设备之后，为该新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例。
在一种示例性实施方式中，所述转发器，还设置为：当用户表中包含组播信息时，收到控制器下发的组播信息，向核心网络发送包含组播组、或组播源、或组播组和组播源的组播信息；向vBNG通告组播信息；从核心网络接收到组播流量，向接入网络一侧的用户设备进行转发。
在一种示例性实施方式中，还包括接入节点；
接入节点，设置为：收到用户接入协议报文，将所述用户接入协议报文及接收端口发送给控制器；
所述报文负载分担模块，设置为：向隧道管理申请建立接入节点和vBNG实例之间的转发隧道；
所述隧道管理模块，设置为：向接入节点及底层网络下发隧道配置信息，从而在接入节点和vBNG之间建立转发隧道；
动态主机配置协议模块，设置为：当用户接入协议报文是DHCP报文时，接收接入节点转发的DHCP报文；
AAA模块，设置为：与AAA服务器交互以验证用户鉴权信息，以及通知vBNG用户管理模块保存认证过程中的用户策略信息；
所述vBNG用户管理模块，设置为：生成用户表，并将用户表发送给控制器。
本公开实施例还提供了一种计算机可读存储介质，存储有计算机可执行指令，所述计算机可执行指令被执行时实现上述虚拟宽带接入方法。
本公开实施例的有益效果如下：在转发用户数据报文的过程中，将控制 功能剥离出来，采用虚拟化技术实现，由控制器等设备来控制实现用户数据报文的转发，无需部署专用设备或在本领域已知的路由架构上使用专用业务板，降低了整体的耗能，且实现了高性能转发。
在阅读并理解了附图和详细描述后，可以明白其他方面。
附图概述
图1表示虚拟宽带接入系统的一种架构示意图；
图2表示虚拟宽带接入系统的另一种架构示意图；
图3表示一种虚拟宽带接入系统的结构示意图；
图4表示虚拟宽带接入系统的再一种架构示意图；
图5表示虚拟宽带接入系统的又一种架构示意图；
图6表示虚拟宽带接入系统处理用户接入协议报文的流程示意图；
图7表示虚拟宽带接入系统处理用户接入协议报文可选方式的流程示意图；
图8表示接入节点为接入网络侧接入设备的网络架构示意图；
图9表示在一个应用场景中虚拟宽带接入系统处理用户接入协议报文的流程示意图；
图10表示一种虚拟宽带接入方法的流程示意图。
本公开的较佳实施方式
下面结合附图对本公开的实施方式进行描述。
以下通过应用示例对本公开实施例进行清楚详细的说明，应用示例仅用于陈述本公开实施例，并不用于限定本公开的保护范围。
如图1所示，中心机房中，虚拟宽带接入系统是运营支撑系统/业务支撑系统(OSS/BSS，Operating System/Billing System)和网络功能虚拟化管理和统筹(NFV MANO，Network Function Virtualization Management and Orchestrator)系统的总称。虚拟宽带接入系统可以动态的创建虚拟网络功能(VNF，Virtual Network Function)，为用户提供各种网络业务。
宽带网络网关(BNG，Broadband Network Gateway)，本公开中的宽带网络网关通常是指虚拟宽带网络网关(vBNG，Virtual Broadband Network Gateway)。
控制器(Controller)，可设置为：为宽带网络网关创建宽带网络网关子网、为转发器(Forwarder)创建子网，使得转发器和vBNG等其他业务节点可以互通，以及管理用户标识(ID，Identifier)，宽带网络网关子网和vBNG实例，转发器信息，转发器子网和实例，以及管理用户表、用户负载分担表；vBNG是功能的概括性描述，一个vBNG实例是计算机系统里正在运行的一个系统，这个vBNG实例能够整合计算机系统的各种资源。
转发器(Forwarder)是中心机房网络用户协议和数据接入设备，可设置为：通过两个或多个接口与底层网络相连，以及可设置为：启动后向控制器发起连接，以及确定用户和vBNG之间、用户和其他虚拟业务之间的路径；
宽带网络网关控制池，可设置为：启动后请求控制器为vBNG实例及虚拟业务节点创建子网，实现vBNG实例和其他虚拟业务节点之间互通，以及定期或根据事件向控制器发送相关流量信息；
虚拟化业务池，可设置为：采用通用硬件，以及可设置为：将所述通用硬件进行资源池化管理形成所述虚拟化业务池。
如图2所示，中心机房的虚拟宽带接入系统可包含有底层(Underlay)网络、控制器、转发器、虚拟宽带网络网关(vBNG，virtual Broadband Network Gateway)以及虚拟化业务池。
如图2所示，虚拟宽带接入系统，可以根据业务部署和运维的需求，动态创建虚拟网络功能(VNF，Virtualization Network Function)，VNF运行在网络功能虚拟化基础设施解决方案(NFVI，Network Function Virtualization Infrastructure)之上。
控制器可以有底层网络路由信息，并且设置底层网络建立互通路由。
虚拟宽带网络网关可以是一种进行有线用户接入管理的VNF。
vBNG和内容分发网络(CDN，Content Delivery Network)、网络地址翻译(NAT，Network Address Translation)等VNF都可以是运行在通用计算设备上。vBNG及CDN、NAT可以动态地增加或减少，以适应用户业务需 求。
本公开实施例提供一种虚拟宽带接入系统，如图3所示，包括：
转发器，设置为：接收到来自用户设备的用户接入协议报文，将所述用户接入协议报文和接收端口发送给控制器；
宽带网络网关控制池，设置为：实现宽带网络网关控制池vBNG实例，以及根据所述用户接入协议报文与所述用户设备完成接入、或认证、或接入和认证；以及生成用户表，将用户表发送给所述控制器；
控制器，设置为：根据业务部署策略选择宽带网络网关控制池实例，以及将所述用户表发送给所述用户设备对应的转发器；
所述转发器，还设置为：根据所述用户表生成用户数据转发表，向核心网络发布用户路由；接收用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发。
应用所提供的虚拟宽带接入系统，在转发用户数据报文的过程中，将控制功能剥离出来，采用虚拟化技术实现，由控制器等设备来控制实现用户数据报文的转发，无需部署专用设备或在本领域已知的路由架构上使用专用业务板，降低了整体的耗能，且实现了高性能转发。
在实际应用当中，虚拟宽带接入系统可以位于中心机房，一侧可与接入网络连接，用户设备则可以是通过接入网络实现与虚拟宽带接入系统互通的，虚拟宽带接入系统另一侧则可与核心网络连接，这其中：
接入网络，用户接入协议报文和用户数据报文可通过接入网络接入中心机房网络的虚拟宽带接入系统，转发器可接收到用户接入协议报文，转发器可将用户接入协议报文及接收端口上送给控制器。
转发器，可以是中心机房网络的用户接入协议报文和用户数据报文的接入设备，设置为：通过两个或多个接口与底层网络相连，以及设置为：启动后向控制器发起连接，此时，控制器可为转发器创建子网，使得转发器和vBNG、CDN和NAT等虚拟业务节点可以互通。可由控制器保存转发器的信息，如IP地址等网络信息。以及，转发器可根据用户表中的业务信息及转发相关信息，创建用户数据转发表，根据用户数据转发表将用户数据报文进 行快速转发。
vBNG实例启动后可连接控制器，vBNG实例可向控制器定期或根据事件向控制器发送相关信息，如接入用户数、中央处理器(CPU，Central Processing Unit)负载等。并且，vBNG、CDN、NAT等虚拟业务节点启动时，可请求控制器为vBNG等虚拟业务节点创建子网，使得vBNG、CDN和NAT等虚拟业务节点之间可以互通。可由控制器保存vBNG实例的信息，如vBNG实例所属子网及vBNG ID，子网ID如虚拟可扩展局域网(VXLAN，Virtual eXtensible Local Area Network)ID。
换言之，转发器的信息、vBNG实例的信息都可以是由控制器来保存的。
控制器和vBNG之间运行的协议可包括且不限于开放流(openflow)协议或网络配置(Netconf)、代表状态传递配置(Restconf)协议，并且控制器可为用户设备分配vBNG实例。
vBNG可处理用户接入协议报文，并创建用户表，vBNG可将用户表发送给控制器；用户表用于配置转发器的用户数据报文转发和路由发布，可包含用户会话(session)相关的信息，如session ID、用户帐户名、上线时间、认证信息、业务信息和转发相关信息等，用户表可被vBNG发送给控制器。控制器可将用户表下发给转发器。
转发器，还可设置为：根据用户表创建用户设备到其他虚拟业务节点的双向转发路径，并向网络侧发布用户路由。
在中心机房的虚拟化管理网络中，在不同的实施例以及不同的应用场合中，可实现多业务多用户接入的虚拟宽带接入系统一边与接入网络连接，另一边则与核心网络连接，实现其所担负的功能。
在一个可选实施例中，如图4所示，控制器可包含：报文负载分担模块、隧道管理模块、用户表管理模块以及路由计算拓扑模块：
报文负载分担模块，设置为：接收转发器上送的用户接入协议报文和接收端口，根据业务部署策略选择vBNG实例，发送vBNG实例给隧道管理模块；
隧道管理模块，设置为：创建转发器和vBNG之间的隧道配置信息，向转发器发送所述隧道配置信息对转发器进行配置；
用户表管理模块，设置为：接收来自所述宽带网络网关控制池的用户表，用户表包含用户会话的信息，将所述用户表发送给所述用户设备对应的转发器。
在一个可选实施例中，如图5所示，转发器可以是中心机房用户侧接入设备，转发器可通过底层网络与vBNG及其他虚拟业务节点互联。转发器可包含：用户转发管理模块、路由模块、组播模块、访问控制列表(ACL，Access Control List)模块及服务质量(QoS，Quality of Service)模块：
路由模块，可设置为：收到控制器发送的隧道配置信息，根据所述隧道配置信息创建转发器到vBNG之间的转发隧道。
用户转发管理模块，可设置为：收到控制器发送的用户表，根据所述用户表创建用户数据转发表以及配置路由发布；收到来自接入网络或核心网络的用户数据报文后，根据所述用户数据转发表的表项来转发用户数据报文。
路由模块，可设置为：收到所述隧道配置信息，创建转发器到vBNG之间的隧道。
在一个可选实施例中，用户数据转发表可包含组播转发表和网络地址翻译NAT转发表；
用户上行流量起点可以是转发器，下行流量的业务起点可以靠用户路由引入。
vBNG、CDN和NAT等VNF都可以是运行在虚拟化业务池所管理的通用计算设备上；vBNG、CDN和NAT可以动态地增加或减少，以适应用户业务需求。
在一个可选实施例中，vBNG可包含有用户协议处理模块；用户协议处理模块可包括但不限于以太网上运行点对点协议模块(PPPoE，Point to Point Protocol over Ethernet)、动态主机配置协议模块(DHCP，Dynamic Host Configuration Protocol)、802.1x协议模块和验证、授权和记账(AAA，Authentication、Authorization、Accounting)模块等。
AAA模块，可设置为：和AAA服务器交互以认证用户设备的接入，获取用户策略信息，用户策略信息包括安全、QoS、组播授权、计费等。
vBNG可收到转发器转发的用户接入协议报文及接收端口，则PPPoE协 议模块、动态主机配置协议模块、电器和电子工程师学会(IEEE，Institute of Electrical and Electronic Engineers)802.1x协议模块等可根据用户接入协议报文的类型与用户设备进行交互，并可通过AAA模块(Authentication、Authorization、Accounting)和AAA服务器交互认证。vBNG的用户管理模块可设置为：保存用户协议处理信息及AAA模块获取的相关信息。
在一个可选实施例中，用户接入协议报文可以是PPPoE报文或者其他类型的报文；
报文负载分担模块，可以是设置为：查询所述接收端口及用户接入协议报文所携带的虚拟局域网(VLAN，Virtual Local Area Network)标识信息，VLAN标识信息包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户媒体访问控制(MAC，Media Access Control)信息，以确认是否为已接入用户；如果是新接入用户，控制器分配该新接入用户所服务的vBNG实例，并创建用户报文负载分担表项，存储该新接入用户被分配的vBNG实例；
以及，向隧道管理模块申请建立转发器和vBNG实例之间的隧道；
隧道管理模块，可以是设置为：向转发器及底层网络下发隧道配置信息，从而在转发器和vBNG之间建立用户协议转发隧道；
PPPoE协议模块，等收到转发器转发的用户接入协议报文，vBNG与该用户交互完成接入、或认证、或接入和认证；若接入成功，则PPPoE协议模块可以设置为：回复接入协议响应报文；
AAA模块在上述认证过程中可与AAA服务器交互进行用户鉴权信息验证，AAA服务器可以是与控制器相互独立的系统。
如图6所示，虚拟宽带接入系统处理用户接入协议报文的方法包括：
步骤S601，转发器收到用户接入协议报文，将用户接入协议报文及接收端口发送给控制器。其中，用户接入协议报文可以是PPPoE报文。
步骤S602，报文负载分担模块，查询所述接收端口及用户接入协议报文所携带的VLAN标识信息，VLAN标识信息包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户MAC信息，以确认是否为已接入用户。
如果是新接入用户，控制器可分配该新接入用户所服务的vBNG，并创 建用户报文负载分担表项，存储该新接入用户被分配的vBNG。用户报文负载分担表项可包含却不限于：用户ID，端口，VLAN，vBNG ID和转发器ID等。控制器可以根据业务部署策略选择vBNG实例，如每个vBNG用户接入数等。
报文负载分担模块，向隧道管理模块申请建立转发器和vBNG实例之间的隧道。
隧道管理模块，向转发器及底层网络下发隧道配置信息，从而在转发器和vBNG之间建立用户协议转发隧道；隧道转发信息可包括但不限于端口、VLAN、MAC、PPPoE/DHCP/IEEE 802.1x等协议类型及隧道封装信息；隧道封装信息可包含但不限于VXLAN封装。
步骤S603，PPPoE协议模块，等收到转发器转发的用户接入协议报文，vBNG与该用户交互完成接入、或认证、或接入和认证。
若接入成功，则PPPoE协议模块可回复接入协议响应报文，如PPPoE/DHCP等，接入协议响应报文以太源地址可以是vBNG的MAC地址，目的地址可以是用户MAC地址。
vBNG可保存认证过程中的用户策略信息，用户策略信息可包括但不限于VLAN、MAC、网络协议(IP，Internet Protocol)、session ID、ACL(Access Control List，访问控制列表)/策略路由(PBR，policy-Based routing)/约定访问速率(CAR，Committed Access Rate)/分层服务质量(HQoS，Hierarchical Quality of Service)等信息。
vBNG可生成用户表，用户表包括但不限于VLAN、MAC、点对点协议(PPP，Point to Point Protocol)Session ID、IP地址等信息，并可将用户表发送给控制器。
vBNG AAA模块可在上述认证过程中与AAA服务器交互进行用户鉴权信息验证，AAA服务器可以是与控制器相互独立的系统。
vBNG可定期向控制器中的报文负载分担模块下发接入用户数、流量等信息。
步骤S604，控制器中，用户表管理模块，收到vBNG发送的用户表，下发给该用户对应的转发器。转发器可包括一个或多个，转发器的功能可包含 但不限于：QoS、安全策略等功能。
步骤S605，转发器收到用户表，生成用户数据转发表，并向网络侧发布用户路由。转发器可支持开放式最短路径优先(OSPF，Open Shortest Path First)、中间系统到中间系统(ISIS，Intermediate System to Intermediate System)、路由信息协议(RIP，Routing Information Protocol)和边界网关协议(BGP，Border Gateway Protocol)等协议。
步骤S606，转发器收到用户上行数据报文或下行数据报文，根据用户数据转发表对用户上行或下行数据报文进行处理。
转发器可定期向控制器发送流量转发信息。
虚拟宽带接入系统的功能可以是非常丰富的，不仅能够处理用户接入协议报文，而且能够处理组播信息。
虚拟宽带接入系统处理的组播信息可包括：非授权组播组、授权组播组，如图7所示，在一个可选实施例中，用户表中可包含组播信息；
所述转发器，还可设置为：收到控制器下发的组播信息，向核心网络发送包含组播组、或组播源、或组播组和组播源的组播信息；向vBNG通告组播信息；从核心网络侧收到组播流量，向用户侧进行转发。
方法流程可包括：
步骤S701-S702，所执行的功能步骤与步骤S601-S602相同。
步骤S703，vBNG在除S406之外，用户表中可包含组播信息，如包含授权的组播组地址、或组播源、或组播组和组播源地址、组播组数目等。
步骤S704，控制器不仅执行步骤S604的功能，而且向转发器下发组播信息。
在一个可选实施例中，为了防止多个转发器向用户侧发送重复组播组流量，用户侧可以通过运行协议无关组播(PIM，Protocol Independent Multicast)协议，通过指定路由器(DR，Designated Router)选举下发组播流量。
步骤S705，不仅执行步骤S605的功能，而且转发器收到用户相关的组播信息，转发器向网络侧发送包含组播组、或组播源、或组播组和组播源的组播信息。
步骤S706，转发器收到组播组接入报文，如果是授权组播组，则将授权 组播组加入的端口、或VLAN信息、或端口和VLAN信息加入到组播转发表中，组播转发表可包含且不限于组播组、组播源、端口和VLAN信息。
转发器可向vBNG通告组播信息。
步骤S707，转发器从核心网络侧收到组播流量，向用户侧进行转发。
实现多业务多用户接入的虚拟宽带接入系统处理用户接入协议报文，还可以以接入节点(AN，Access Network)为中心机房用户侧接入设备。如图8所示，网络组网中，可以以AN为中心机房用户侧接入设备，AN可通过底层网络与转发器、vBNG及其他虚拟业务节点互联。
在一个可选实施例中，一种虚拟宽带接入系统还可包括：
接入节点，设置为：收到用户接入协议报文，将所述用户接入协议报文及接收端口发送给控制器；
报文负载分担模块，设置为：向隧道管理申请建立接入节点AN和vBNG实例之间的隧道；
隧道管理模块，设置为：向AN及底层网络下发隧道配置信息，从而在AN和vBNG之间建立用户协议转发隧道；
DHCP模块，设置为：当用户接入协议报文是DHCP报文时，收到AN转发的DHCP报文；
AAA模块可设置为：与AAA服务器交互进行用户鉴权信息验证；
DHCP模块或AAA模块可通知vBNG用户管理模块来保存与验证相关的用户策略信息。这一过程中，以AAA模块为例，AAA模块可通过协议向AAA服务器获取用户策略信息，AAA模块和vBNG用户管理模块之间可通过内部接口链接，AAA模块可将用户策略信息发送给vBNG用户管理模块，由vBNG用户管理模块进行保存。
所述vBNG用户管理模块，设置为：生成用户表，并将用户表发送给控制器。
在一个应用场景中，如图9所示，一种实现多业务多用户接入的虚拟宽带接入系统处理用户接入协议报文，例如DHCP报文的方法流程可包括：
步骤S901，接入节点AN收到用户接入协议报文，如DHCP报文，AN将所述用户接入协议报文及接收端口发送给控制器。
步骤S902，控制器中，报文负载分担模块，查询所述接收端口、用户接入协议报文所携带的VLAN标识信息以确认是否为已接入用户，VLAN标识信息可包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户MAC信息。
如果是新接入用户，控制器可分配该新接入用户所服务的vBNG实例，并创建用户报文负载分担表项，存储该新接入用户分配的vBNG，用户报文负载分担表项可包含但不限于：用户ID、端口、VLAN、vBNG ID和AN ID等。
控制器可以根据业务部署策略选择vBNG实例，如每个vBNG用户接入数等。控制器中：
报文负载分担模块，向隧道管理申请建立AN和vBNG实例之间的隧道。
隧道管理模块，向AN及底层网络下发隧道配置信息，从而在AN和vBNG之间建立用户协议转发隧道；隧道配置信息可包括隧道转发信息、隧道封装信息，隧道转发信息可包括但不限于端口、VLAN、MAC、PPPoE/DHCP/802.1x等协议类型及隧道封装信息；隧道封装信息可包含但不限于VXLAN封装。
步骤S903，vBNG DHCP模块，收到AN转发的DHCP报文。vBNG与该用户交互完成接入、或认证、或接入和认证，若接入成功，则vBNG回复接入协议响应报文。
vBNG DHCP模块，可通知vBNG用户管理模块保存认证过程中的用户策略信息，用户策略信息可包括但不限于VLAN、MAC、IP和用户流量控制策略信息中的任意一种或其组合，例如ACL、PBR、CAR或HQoS信息等。
DHCP模块，可通过AAA模块与AAA服务器交互进行用户鉴权信息验证。
DHCP模块或AAA模块可通知vBNG用户管理模块保存认证相关信息。
vBNG用户管理模块，可生成用户表，用户表包括但不限于VLAN、MAC、IP信息及流量控制策略信息，并可将用户表发送给控制器。
步骤S904，控制器中，用户表管理模块可收到vBNG发送的用户表；用户表管理模块可向报文负载分担模块请求该用户的转发器，负载分担模块可 分配并返回转发器信息。
负载分担模块，可以根据业务部署策略选择转发器实例，如每个转发器用户负载情况。
用户表管理模块，可向AN发送用户数据转发表，用户数据转发表可包含但不限于端口、VLAN、MAC、IP及隧道封装信息，隧道封装信息可包含但不限于VXLAN封装；以及，可向转发器发送用户表。
步骤S905，转发器中，用户转发管理模块，收到用户表，实施用户数据转发表，以及向网络侧发布用户路由。
可选地，转发器支持OSPF、ISIS、RIP和BGP等协议。
步骤S906，转发器收到用户的上行数据报文或下行数据报文，根据用户数据转发表的表项对用户数据报文进行处理。
这一过程中，转发器完成的功能可包含但不限于QoS、安全策略等功能。
在一个可选实施例中，AN可包括一台或多台，vBNG实例可以有一个或多个，转发器可以有一个或多个；接入节点AN可以是光线路终端(OLT，Optical Line Terminal)、数字用户线路接入复用器(DSLAM，Digital Subscriber Line Access Multiplexer)等。
本公开实施例提供一种虚拟化管理控制器，应用于虚拟宽带接入系统，如图4所示，所述虚拟宽带接入系统包括：控制器、转发器和宽带网络网关控制池，所述控制器包括：
报文负载分担模块，设置为：接收转发器传送来的用户接入协议报文和接收端口，根据业务部署策略选择宽带网络网关控制池实例；
用户表管理模块，设置为：接收来自所述宽带网络网关控制池的用户表，用户表包含用户会话的信息，将所述用户表发送给所述用户设备对应的转发器，由转发器根据基于所述用户表生成的用户数据转发表对所述用户数据报文进行转发。
可选地，
报文负载分担模块，是设置为：查询所述接收端口和所述用户接入协议报文所携带的VLAN标识信息，VLAN标识信息包括外层VLAN、或内层 VLAN、或外层VLAN和内层VLAN、或用户MAC信息；在确认是新接入用户设备之后，为该新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例；
还包括：
隧道管理模块，设置为：创建转发器和宽带网络网关控制池实例之间的隧道配置信息，向转发器及底层网络下发隧道配置信息，从而使转发器与宽带网络网关控制池之间建立用户协议转发隧道。
本公开实施例还提供一种虚拟宽带接入方法，应用于虚拟宽带接入系统，所述虚拟宽带接入系统包括转发器、控制器和宽带网络网关控制池，如图10所示，方法包括：
步骤S101，接收到来自用户设备的用户接入协议报文；
步骤S102，根据业务部署策略为所述用户设备选择宽带网络网关控制池实例；
步骤S103，根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证，以及生成用户表；
步骤S104，根据所述用户表生成用户数据转发表；
步骤S105，收到用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发。
在一个可选实施例中，根据业务部署策略为所述用户设备选择宽带网络网关控制池实例之后还可包括：
创建转发器和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对转发器进行配置，在转发器和宽带网络网关控制池实例之间建立转发隧道。
可选地，根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证，以及生成用户表可包括：
向AAA服务器认证用户设备的用户鉴权信息，保存认证过程中的用户策略信息；
根据所述用户接入协议报文生成用户表，生成的用户表中包括VLAN、MAC、PPP Session ID、IP地址信息、流量控制策略信息、组播信息、或流量控制策略信息和组播信息。
可选地，根据业务部署策略为所述用户设备选择宽带网络网关控制池实例可包括：
查询用户接入协议报文及接收端口所携带的VLAN标识信息；
在确认是新接入用户设备之后，为所述新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例。
当用户接入协议报文是PPPoE报文时，报文负载分担模块，可查询所述接收端口及用户接入协议报文所携带的VLAN标识信息，VLAN标识信息可包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户MAC信息，在确认是新接入用户设备之后，可以为该新接入用户设备选择宽带网络网关控制池实例，并可创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例；
以及，可向隧道管理模块申请建立转发器和vBNG实例之间的隧道；
隧道管理模块可向转发器及底层网络下发隧道配置信息，从而在转发器和vBNG之间建立用户协议转发隧道；
PPPoE协议模块可收到转发器转发的用户接入协议报文，vBNG可与该用户设备交互完成接入、或认证、或接入和认证；若接入成功，则PPPoE协议模块可回复接入协议响应报文；
AAA模块可与AAA服务器交互验证用户鉴权信息，AAA服务器可与控制器相互独立。
可选地，
当用户表中包含组播信息时，所述用户数据转发表还包括组播转发表，所述组播转发表包含组播组、组播源、端口和VLAN信息；
根据所述用户表生成用户数据转发表包括：收到用户设备相关的组播信息，向核心网络发送组播组、或组播源、或组播组和组播源相关的组播信息，将所述组播信息加入到所述组播转发表中，以及向vBNG通告组播信息；
收到用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发包括：从核心网络接收到组播流量，根据所述组播转发表向接入网络一侧的用户设备进行转发。
可选地，
接收到来自用户设备的用户接入协议报文包括：将接入节点接收到的用户接入协议报文，以及接收端口发送给控制器；
根据业务部署策略为所述用户设备选择宽带网络网关控制池实例之后还包括：
创建接入节点和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对接入节点进行配置，在接入节点和宽带网络网关控制池实例之间建立转发隧道。
可选地，
当用户接入协议报文是DHCP报文时，DHCP模块收到AN转发的DHCP报文；
通过AAA模块与AAA服务器交互进行用户鉴权信息验证；
DHCP模块或AAA模块通知vBNG用户管理模块保存认证过程中的用户策略信息；
当所述vBNG用户管理模块生成用户表后，将用户表发送给控制器。
可选地，根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证之后还包括：
生成接入协议响应报文，所述接入协议响应报文报文包含的以太源地址是VBNG的MAC地址，目的地址是用户设备的MAC地址。
本公开实施例还提供一种虚拟宽带接入网络，包括接入网络、核心网络、虚拟宽带接入系统包和用户设备，用户设备与接入网络连接；
虚拟宽带接入系统包括：
转发器，设置为：接收到来自用户设备的用户接入协议报文，将所述用户接入协议报文和接收端口发送给控制器；
控制器，设置为：根据业务部署策略选择宽带网络网关控制池vBNG实 例，创建所述转发器和宽带网络网关控制池之间的隧道配置信息；
宽带网络网关控制池，设置为：实现vBNG实例，以及根据所述用户接入协议报文与所述用户设备完成接入、或认证、或接入和认证；以及生成用户表，将用户表发送给所述控制器；
所述控制器，设置为：将所述用户表发送给所述用户设备对应的转发器；
所述转发器，设置为：根据所述用户表生成用户数据转发表，向核心网络发布用户路由；接收用户数据报文，根据所述用户数据转发表的表项对所述用户数据报文进行转发。
可选地，控制器包含：报文负载分担模块、路由计算拓扑模块、隧道管理模块和用户表管理模块，其中：
报文负载分担模块，设置为：接收转发器上送的用户接入协议报文和接收端口，根据业务部署策略选择vBNG实例，发送vBNG实例给隧道管理模块；
路由计算拓扑模块，设置为：计算出转发器到vBNG之间的隧道，可选地，寻找到隧道的头节点和尾节点这两个节点的IP地址，并进行相应的处理；
隧道管理模块，设置为：创建转发器和vBNG之间的隧道配置信息，向转发器发送所述隧道配置信息对转发器进行配置；
用户表管理模块，设置为：接收来自所述宽带网络网关控制池的用户表，用户表包含用户会话的信息。
可选地，
转发器包含：用户转发管理模块和路由模块，其中：
用户转发管理模块，设置为：收到控制器发送的用户表，所述用户表用于配置转发器转发用户数据报文和路由发布，创建用户数据转发表；收到接入网络或核心网络的用户数据报文后，根据所述用户数据转发表来转发用户数据报文；
路由模块，设置为：收到所述隧道配置信息，创建转发器到vBNG之间的隧道。
可选地，vBNG和CDN、NAT均运行在所述虚拟化业务池所管理的通用计算设备硬件上，均属于虚拟网络功能虚拟网络功能(VNF，Virtualized  Network Function)；
所述宽带网络网关控制池可包含用户协议处理模块，用户协议处理模块可包括：PPPoE协议模块、动态主机配置协议模块、802.1x协议模块和AAA模块；
PPPoE协议模块、动态主机配置协议模块、802.1x协议模块可设置为：和用户设备进行交互；
AAA模块，可设置为：认证用户设备的接入，获取用户策略信息，用户策略信息包括安全、QoS、组播授权和计费。
所述虚拟化业务池，还可设置为：动态的增加或减少所述vBNG、CDN和NAT的数量。
可选地，
用户接入协议报文是PPPoE报文；
报文负载分担模块，是设置为：查询所述接收端口和所述用户接入协议报文所携带的VLAN标识信息，VLAN标识信息包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户MAC信息；以确认是否为已接入用户设备，如果是新接入用户设备，分配该新接入用户设备所服务的vBNG实例，并创建用户报文负载分担表项，存储该新接入用户设备被分配的vBNG实例；
以及，向隧道管理模块申请建立转发器和vBNG实例之间的隧道；
隧道管理模块，是设置为：向转发器及底层网络下发隧道配置信息，从而在转发器和vBNG之间建立用户协议转发隧道；
PPPoE协议模块，设置为：接收转发器转发的用户接入协议报文，vBNG与该用户设备交互完成接入、或认证、或接入和认证；若接入成功，则PPPoE协议模块回复接入协议响应报文；
AAA模块，设置为：与AAA服务器交互来验证用户设备鉴权信息，AAA服务器与控制器相互独立。
可选地，
用户表中包含组播信息；
所述转发器，还设置为：收到控制器下发的组播信息，向核心网络发送 组播组、或组播源、或组播组和组播源相关的组播信息；向vBNG通告组播信息；从核心网络收到组播流量，向接入网络一侧的用户设备进行转发。
可选地，
还包括接入节点；
接入节点，设置为：收到用户接入协议报文，将所述用户接入协议报文及接收端口发送给控制器；
报文负载分担模块，设置为：向隧道管理申请建立AN和vBNG实例之间的隧道；
隧道管理模块，设置为：向AN及底层网络下发隧道配置信息，从而在AN和vBNG之间建立用户协议转发隧道；
DHCP模块，设置为：当用户接入协议报文是DHCP报文时，收到AN转发的DHCP报文；
通过AAA模块与AAA服务器交互进行用户鉴权信息验证；
DHCP模块或AAA模块通知vBNG用户管理模块保存认证过程中的用户策略信息；
所述vBNG用户管理模块，设置为：生成用户表，并将用户表发送给控制器。
转发器完成功能可包含QoS、安全策略功能；
AN可包括一台或多台，vBNG实例可以有一个或多个，转发器可以有一个或多个；AN可以是OLT、DSLAM、交换机、openflow交换机中的至少一种。
本公开实施方式中，在转发用户数据报文的过程中，将控制功能剥离出来，采用虚拟化技术实现，由控制器等设备来控制实现用户数据报文的转发，无需部署专用设备或在本领域已知的路由架构上使用专用业务板，降低了整体的耗能，且实现了高性能转发。通过将BNG用户的会话(session)实现虚拟化，可以根据部署需求，动态扩展会话相关管理以及灵活扩展相关业务。
本公开实施例还提供了一种计算机可读存储介质，存储有计算机可执行指令，所述计算机可执行指令被执行时实现上述虚拟宽带接入方法。
以上所述是本公开实施例的可选实施方式，本领域普通技术人员可以理 解，上述方法中的全部或部分步骤可通过程序来指令相关硬件(例如处理器)完成，所述程序可以存储于计算机可读存储介质中，如只读存储器、磁盘或光盘等。可选地，上述实施例的全部或部分步骤也可以使用一个或多个集成电路来实现。相应地，上述实施例中的每个模块/单元可以采用硬件的形式实现，例如通过集成电路来实现其相应功能，也可以采用软件功能模块的形式实现，例如通过处理器执行存储于存储器中的程序/指令来实现其相应功能。本公开实施例不限制于任何特定形式的硬件和软件的结合。
本领域普通技术人员可以理解，上文中所公开方法中的全部或某些步骤、系统、装置中的功能模块/单元可以被实施为软件、固件、硬件及其适当的组合。在硬件实施方式中，在以上描述中提及的功能模块/单元之间的划分不一定对应于物理组件的划分；例如，一个物理组件可以具有多个功能，或者一个功能或步骤可以由若干物理组件合作执行。某些组件或所有组件可以被实施为由处理器，如数字信号处理器或微处理器执行的软件，或者被实施为硬件，或者被实施为集成电路，如专用集成电路。这样的软件可以分布在计算机可读介质上，计算机可读介质可以包括计算机存储介质(或非暂时性介质)和通信介质(或暂时性介质)。如本领域普通技术人员公知的，术语计算机存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、程序模块或其他数据)的任何方法或技术中实施的易失性和非易失性、可移除和不可移除介质。计算机存储介质包括但不限于随机存取存储器(RAM，Random Access Memory)、只读存储器(ROM，Read-Only Memory)、电可擦除只读存储器(EEPROM，Electrically Erasable Programmable Read-only Memory)、闪存或其他存储器技术、光盘只读存储器(CD-ROM，Compact Disc Read-Only Memory)、数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。此外，本领域普通技术人员公知的是，通信介质通常包含计算机可读指令、数据结构、程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据，并且可包括任何信息递送介质。
本领域的普通技术人员可以理解，可以对本公开的技术方案进行修改或者等同替换，而不脱离本公开技术方案的精神和范围，均应涵盖在本公开的 权利要求范围当中。
工业实用性
通过本公开实施例，在转发用户数据报文的过程中，将控制功能剥离出来，采用虚拟化技术实现，由控制器等设备来控制实现用户数据报文的转发，降低了整体的耗能，且实现了高性能转发。

Claims (18)

  1. 一种虚拟宽带接入方法，其特征在于，应用于虚拟宽带接入系统，所述虚拟宽带接入系统包括转发器、控制器和宽带网络网关控制池，方法包括：
    接收到来自用户设备的用户接入协议报文；
    根据业务部署策略为所述用户设备选择宽带网络网关控制池实例；
    根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证，以及生成用户表；
    根据所述用户表生成用户数据转发表；
    收到用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发。
  2. 根据权利要求1所述的方法，根据业务部署策略为所述用户设备选择宽带网络网关控制池实例还包括：
    创建转发器和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对转发器进行配置，在转发器和宽带网络网关控制池实例之间建立转发隧道。
  3. 根据权利要求1所述的方法，其中，根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证，以及生成用户表包括：
    向验证、授权和记账AAA服务器认证用户设备，保存认证过程中的用户策略信息；
    根据所述用户接入协议报文生成用户表，用户表包括虚拟局域网VLAN、媒体访问控制MAC、点对点协议会话标识PPP Session ID、网络协议IP地址信息、流量控制策略信息和组播信息中任意一个或其组合。
  4. 根据权利要求1所述的方法，其中，根据业务部署策略为所述用户设备选择宽带网络网关控制池实例包括：
    查询用户接入协议报文及接收端口所携带的VLAN标识信息；
    确认是新接入用户设备，为所述新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例。
  5. 根据权利要求1所述的方法，其中，
    当用户表中包含组播信息时，所述用户数据转发表还包括组播转发表，所述组播转发表包含组播组、组播源、端口和VLAN信息；
    根据所述用户表生成用户数据转发表包括：收到用户设备相关的组播信息，向核心网络发送包含组播组、或组播源、或组播组和组播源的组播信息；将所述组播信息加入到所述组播转发表中，以及向虚拟宽带网络网关vBNG通告组播信息；
    收到用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发包括：从核心网络接收到组播流量，根据所述组播转发表向接入网络一侧的用户设备进行所述组播流量的转发。
  6. 根据权利要求1所述的方法，其中，
    接收到来自用户设备的用户接入协议报文包括：将接入节点接收到的用户接入协议报文，以及接收端口发送给控制器；
    根据业务部署策略为所述用户设备选择宽带网络网关控制池实例之后还包括：
    创建接入节点和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对接入节点进行配置，在接入节点和宽带网络网关控制池实例之间建立转发隧道。
  7. 根据权利要求1所述的方法，根据所述用户接入协议报文与该用户设备完成接入、或认证、或接入和认证之后还包括：
    生成接入协议响应报文，其中，所述接入协议响应报文包含的以太源地址是vBNG的MAC地址，目的地址是用户设备的MAC地址。
  8. 一种虚拟宽带接入控制器，其特征在于，应用于虚拟宽带接入系统，所述虚拟宽带接入系统包括：虚拟宽带接入控制器、转发器和宽带网络网关控制池，所述虚拟宽带接入控制器包括：
    报文负载分担模块，设置为：接收转发器传送来的用户接入协议报文和接收端口，根据业务部署策略为用户设备选择宽带网络网关控制池实例；
    用户表管理模块，设置为：接收来自所述宽带网络网关控制池的用户表，将所述用户表发送给用户设备对应的转发器，由转发器根据基于所述用户表 生成的用户数据转发表对用户数据报文进行转发。
  9. 根据权利要求8所述的控制器，其中，所述报文负载分担模块包括：
    标识识别模块，设置为：查询所述接收端口和所述用户接入协议报文所携带的虚拟局域网VLAN标识信息，VLAN标识信息包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户媒体访问控制MAC信息；
    新设备识别模块，设置为：在确认所述用户设备是新接入用户设备之后，为该新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例；
    控制器还包括：
    隧道管理模块，设置为：创建转发器和宽带网络网关控制池实例之间的隧道配置信息，向转发器及底层网络下发所述隧道配置信息，从而使转发器与宽带网络网关控制池之间建立用户协议转发隧道。
  10. 根据权利要求8所述的控制器，
    隧道管理模块，还设置为：创建接入节点和宽带网络网关控制池实例之间的隧道配置信息，采用所述隧道配置信息对接入节点及底层网络进行配置，在接入节点和宽带网络网关控制池实例之间建立转发隧道。
  11. 一种虚拟宽带接入系统，包括：
    转发器，设置为：接收到来自用户设备的用户接入协议报文，将所述用户接入协议报文和接收端口发送给控制器；
    宽带网络网关控制池，包括至少一个宽带网络网关控制池实例，设置为：根据所述用户接入协议报文与所述用户设备完成接入、或认证、或接入和认证；以及生成用户表，将用户表发送给所述控制器；
    控制器，设置为：根据业务部署策略为所述用户设备选择宽带网络网关控制池实例，以及将所述用户表发送给所述用户设备对应的转发器；
    所述转发器，还设置为：根据所述用户表生成用户数据转发表；接收用户数据报文，根据所述用户数据转发表对所述用户数据报文进行转发。
  12. 根据权利要求11所述的虚拟宽带接入系统，其中，控制器包含：报文负载分担模块、隧道管理模块和用户表管理模块，其中：
    报文负载分担模块，设置为：接收转发器上送的用户接入协议报文和接 收端口，根据业务部署策略为所述用户设备选择虚拟宽带网络网关vBNG实例，发送vBNG实例给隧道管理模块；
    隧道管理模块，设置为：创建转发器和vBNG之间的隧道配置信息；向转发器及底层网络发送所述隧道配置信息，从而使转发器与宽带网络网关控制池实例之间建立转发隧道；
    用户表管理模块，设置为：接收来自所述宽带网络网关控制池的用户表，将所述用户表发送给所述用户设备对应的转发器。
  13. 根据权利要求11所述的虚拟宽带接入系统，其中，转发器包含：用户转发管理模块和路由模块，其中：
    用户转发管理模块，设置为：收到控制器发送的用户表，根据所述用户表创建用户数据转发表以及配置路由发布；收到来自接入网络或核心网络的用户数据报文后，根据所述用户数据转发表的表项来转发用户数据报文；
    路由模块，设置为：收到控制器发送的隧道配置信息，根据所述隧道配置信息创建转发器到vBNG实例之间的转发隧道。
  14. 根据权利要求11或12或13所述的虚拟宽带接入系统，其中，所述宽带网络网关控制池包含用户协议处理模块，用户协议处理模块包括：以太网上运行点对点PPPoE协议模块、动态主机配置协议模块、802.1x协议模块和验证、授权和记账AAA模块；
    PPPoE协议模块、动态主机配置协议模块、802.1x协议模块设置为：和用户设备进行交互；
    AAA模块，设置为：认证接入的用户设备，获取用户策略信息，所述用户策略信息包括安全、服务质量QoS、组播授权和计费。
  15. 根据权利要求14所述的虚拟宽带接入系统，其中，
    AAA模块，是设置为：向AAA服务器验证用户设备鉴权信息，AAA服务器与控制器相互独立；
    PPPoE协议模块，还设置为：当用户接入协议报文是PPPoE报文时，接收转发器转发的用户接入协议报文，在与该用户设备交互完成接入、或认证、或接入和认证成功后，回复接入协议响应报文。
  16. 根据权利要求12所述的虚拟宽带接入系统，其中，报文负载分担模 块包括：
    标识识别模块，设置为：查询所述接收端口和所述用户接入协议报文所携带的VLAN标识信息，VLAN标识信息包括外层VLAN、或内层VLAN、或外层VLAN和内层VLAN、或用户MAC信息；
    新设备识别模块，设置为：在确认所述用户设备是新接入用户设备之后，为该新接入用户设备选择宽带网络网关控制池实例，并创建用户报文负载分担表的表项来存储该新接入用户设备被分配的宽带网络网关控制池实例。
  17. 根据权利要求11所述的虚拟宽带接入系统，
    所述转发器，还设置为：当用户表中包含组播信息时，收到控制器下发的组播信息，向核心网络发送包含组播组、或组播源、或组播组和组播源的组播信息；向vBNG通告组播信息；从核心网络接收到组播流量，向接入网络一侧的用户设备进行转发。
  18. 根据权利要求14所述的虚拟宽带接入系统，还包括接入节点；
    接入节点，设置为：收到用户接入协议报文，将所述用户接入协议报文及接收端口发送给控制器；
    所述报文负载分担模块，还设置为：向隧道管理模块申请建立接入节点和vBNG实例之间的转发隧道；
    所述隧道管理模块，还设置为：向接入节点及底层网络下发隧道配置信息，从而在接入节点和vBNG之间建立转发隧道；
    动态主机配置协议模块，还设置为：当用户接入协议报文是动态主机配置协议DHCP报文时，接收接入节点转发的DHCP报文；
    AAA模块，还设置为：向AAA服务器认证用户设备，以及通知vBNG用户管理模块保存认证过程中的用户策略信息；
    所述vBNG用户管理模块，设置为：生成用户表，并将用户表发送给控制器。
PCT/CN2017/094985 2016-07-28 2017-07-28 一种虚拟宽带接入方法、控制器和系统 Ceased WO2018019299A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP17833602.0A EP3493483A4 (en) 2016-07-28 2017-07-28 VIRTUAL BROADBAND ACCESS METHOD, CONTROL UNIT AND SYSTEM

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610609099.4 2016-07-28
CN201610609099.4A CN107666419B (zh) 2016-07-28 2016-07-28 一种虚拟宽带接入方法、控制器和系统

Publications (1)

Publication Number Publication Date
WO2018019299A1 true WO2018019299A1 (zh) 2018-02-01

Family

ID=61015553

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/094985 Ceased WO2018019299A1 (zh) 2016-07-28 2017-07-28 一种虚拟宽带接入方法、控制器和系统

Country Status (3)

Country Link
EP (1) EP3493483A4 (zh)
CN (1) CN107666419B (zh)
WO (1) WO2018019299A1 (zh)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10560331B2 (en) * 2018-02-07 2020-02-11 Juniper Networks, Inc. Self-driven and adaptable multi-vBNG management orchestration
CN111314200A (zh) * 2020-02-29 2020-06-19 新华三技术有限公司 一种报文转发方法及装置
CN112540773A (zh) * 2020-12-14 2021-03-23 咪咕互动娱乐有限公司 一种云游戏安装方法、装置、电子设备及存储介质
CN116264586A (zh) * 2021-12-15 2023-06-16 中国电信股份有限公司 组播通信方法、装置和系统

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109714223B (zh) * 2018-09-17 2022-03-22 赛特斯信息科技股份有限公司 Nfv架构下实现网络业务接入动态负载分担功能的系统及其方法
CN109787911B (zh) * 2018-12-10 2021-05-04 中兴通讯股份有限公司 负载分担的方法、控制面实体和转发器
CN111277481B (zh) * 2020-01-09 2021-09-24 奇安信科技集团股份有限公司 一种建立vpn隧道的方法、装置、设备及存储介质
CN114143835A (zh) * 2020-09-04 2022-03-04 华为技术有限公司 一种接入网关的方法及装置
CN114531320A (zh) * 2020-11-02 2022-05-24 华为技术有限公司 通信方法、装置、设备、系统及计算机可读存储介质
CN112260913B (zh) * 2020-12-21 2021-04-02 广东省新一代通信与网络创新研究院 一种用于实现分布式宽带的接入方法及系统
EP4319067B1 (en) * 2021-04-26 2025-11-26 Huawei Technologies Co., Ltd. Communication method and apparatus, device, system, and computer-readable storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103379010A (zh) * 2012-04-20 2013-10-30 中兴通讯股份有限公司 一种虚拟网络实现方法及系统
CN103685026A (zh) * 2012-08-31 2014-03-26 中兴通讯股份有限公司 一种虚拟网络的接入方法和系统
CN104426686A (zh) * 2013-08-22 2015-03-18 中国电信股份有限公司 宽带接入网关用户接入方法、装置及宽带接入网关

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100550901C (zh) * 2005-09-23 2009-10-14 中兴通讯股份有限公司 宽带接入服务器获取宽带用户接入端口信息的方法
CN101453399B (zh) * 2007-11-30 2012-07-04 华为技术有限公司 虚拟网络配置方法及系统
CN101674669B (zh) * 2009-10-12 2014-11-05 中兴通讯股份有限公司 用于保活处理的方法、服务节点设备和接入节点设备
US20150350912A1 (en) * 2014-05-28 2015-12-03 Telefonaktiebolaget L M Ericsson (Publ) Residential service delivery based on unique residential apn
US10237092B2 (en) * 2015-03-12 2019-03-19 Telefonaktiebolaget Lm Ericsson (Publ) Technique for routing and switching redundancy
CN107241454B (zh) * 2016-03-29 2019-08-16 中兴通讯股份有限公司 一种实现地址管理的方法、装置、aaa服务器及sdn控制器

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103379010A (zh) * 2012-04-20 2013-10-30 中兴通讯股份有限公司 一种虚拟网络实现方法及系统
CN103685026A (zh) * 2012-08-31 2014-03-26 中兴通讯股份有限公司 一种虚拟网络的接入方法和系统
CN104426686A (zh) * 2013-08-22 2015-03-18 中国电信股份有限公司 宽带接入网关用户接入方法、装置及宽带接入网关

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3493483A4 *

Cited By (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP4224813A3 (en) * 2018-02-07 2023-08-30 Juniper Networks, Inc. Self-driven and adaptable multi-vbng management orchestration
EP4228218A1 (en) * 2018-02-07 2023-08-16 Juniper Networks, Inc. Self-driven and adaptable multi-vbng management orchestration
US12155531B2 (en) * 2018-02-07 2024-11-26 Juniper Networks, Inc. Self-driven and adaptable multi-vBNG management orchestration
US11159378B2 (en) 2018-02-07 2021-10-26 Juniper Networks, Inc. Self-driven and adaptable multi-vBNG management orchestration
US20220038345A1 (en) * 2018-02-07 2022-02-03 Juniper Networks, Inc. Self-driven and adaptable multi-vbng management orchestration
EP3525399B1 (en) * 2018-02-07 2024-02-21 Juniper Networks, Inc. Self-driven and adaptable multi-vbng management orchestration
US20240022476A1 (en) * 2018-02-07 2024-01-18 Juniper Networks, Inc. Self-driven and adaptable multi-vbng management orchestration
US11818009B2 (en) 2018-02-07 2023-11-14 Juniper Networks, Inc. Self-driven and adaptable multi-vBNG management orchestration
EP4224812A3 (en) * 2018-02-07 2023-08-16 Juniper Networks, Inc. Self-driven and adaptable multi-vbng management orchestration
US10560331B2 (en) * 2018-02-07 2020-02-11 Juniper Networks, Inc. Self-driven and adaptable multi-vBNG management orchestration
CN111314200B (zh) * 2020-02-29 2023-10-20 新华三技术有限公司 一种报文转发方法及装置
CN111314200A (zh) * 2020-02-29 2020-06-19 新华三技术有限公司 一种报文转发方法及装置
CN112540773B (zh) * 2020-12-14 2023-08-01 咪咕互动娱乐有限公司 一种云游戏安装方法、装置、电子设备及存储介质
CN112540773A (zh) * 2020-12-14 2021-03-23 咪咕互动娱乐有限公司 一种云游戏安装方法、装置、电子设备及存储介质
CN116264586A (zh) * 2021-12-15 2023-06-16 中国电信股份有限公司 组播通信方法、装置和系统

Also Published As

Publication number Publication date
CN107666419A (zh) 2018-02-06
EP3493483A1 (en) 2019-06-05
EP3493483A4 (en) 2020-02-12
CN107666419B (zh) 2020-12-11

Similar Documents

Publication Publication Date Title
WO2018019299A1 (zh) 一种虚拟宽带接入方法、控制器和系统
US9485147B2 (en) Method and device thereof for automatically finding and configuring virtual network
EP2491684B1 (en) Method and apparatus for transparent cloud computing with a virtualized network infrastructure
US12021699B2 (en) Software defined access fabric without subnet restriction to a virtual network
US8121126B1 (en) Layer two (L2) network access node having data plane MPLS
CN104468574B (zh) 一种虚拟机动态获取ip地址的方法、系统及装置
CN107547351B (zh) 地址分配方法和装置
US20180083968A1 (en) Method and system for authorizing service of user, and apparatus
CN103379010A (zh) 一种虚拟网络实现方法及系统
CN112688814B (zh) 一种设备接入方法、装置、设备及机器可读存储介质
EP3108643B1 (en) Ipoe dual-stack subscriber for routed residential gateway configuration
CN107241454B (zh) 一种实现地址管理的方法、装置、aaa服务器及sdn控制器
CN102148738A (zh) 无缝多协议标签交换网络中标签分配方法、装置和系统
CN106878480B (zh) 一种dhcp服务进程共享方法及装置
US9100206B1 (en) Seamless architecture for cable access networks
CN107770012A (zh) 一种宽带接入方法、装置及虚拟宽带远程接入服务器系统
WO2020238564A1 (zh) 一种流量处理方法及相关设备、建立转发表的方法及装置、存储介质
CN103428061A (zh) 接入底盘节点和利用接入底盘节点进行数据转发的方法
CN108965134B (zh) 报文转发方法及装置
US9438475B1 (en) Supporting relay functionality with a distributed layer 3 gateway
EP3108642B1 (en) Ipoe dual-stack subscriber for bridged residential gateway configuration
US10257118B2 (en) Implementation method and device for VLAN to access VF network, and FCF
CN102480403A (zh) 提供虚拟私有网业务的方法、设备和系统
CN115208857A (zh) 一种地址分配方法、装置及设备
CN117459476A (zh) 网络连接方法、装置、设备及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17833602

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2017833602

Country of ref document: EP

Effective date: 20190228