CN106533984B - A social resource access method and device - Google Patents

Abstract

The invention discloses a social resource access method and device. The access gateway establishes a tunnel connection with the access server according to the pre-configured IP address of the access server, listens to the data packets sent by the social resources in the social resource network, and Push the information of social resources that need to be connected to the public platform to the access server, and then establish the mapping relationship between the actual IP address of the social resource and the virtual IP address according to the virtual IP address allocated by the access server to the social resource, and then according The mapping relationship forwards the data packets between the social resource and the access server through the established tunnel connection. The invention can connect social resources in various networking modes to the public platform without any change and configuration of devices in the social resource network.

Description

A social resource access method and device

technical field

The invention belongs to the field of data communication, and in particular relates to a method and device for accessing social resources.

Background technique

The social resource access plan needs to connect the independent video surveillance resources built by various units in the society to the public platform for unified management. For example, the NVR/DVR of social resources such as Internet cafes, hotels, supermarkets, and bus stations can be connected to the internal platform of the public security for unified management. With regard to the monitoring and crime-fighting capabilities of these densely populated areas, once a case occurs, the public security investigators can directly call the surveillance video of the incident location within the public security, which greatly improves the efficiency of case handling and saves the cost of case handling.

At present, there are two main methods of connecting social resources to the public platform:

1. Map the service port number of the NVR/DVR on the exit router of the social resource network, and then add the public network IP address or dynamic domain name of the router as the IP address of the social resource NVR/DVR on the management platform. The public platform directly initiates a connection to the public network address, or first resolves the dynamic domain name of the NVR/DVR, and then initiates a connection to the address obtained by analyzing the dynamic domain name.

Although social resources can be connected to the public platform through this solution, the IP address obtained by the public network interface of the exit router of the social resources is not the real public network IP address, but the operator's private network IP address assigned to it by the operator. , this scheme is not feasible.

2. Use a dedicated social resource access box to establish a VPN tunnel with the public platform, and connect social resources to the public platform through the VPN tunnel.

This solution needs to connect the social resource access box between the NVR/DVR and the switch of the social resource network, or hang the social resource access box sideways on the switch of the social resource network. No matter which method is used to add a static route, the existing network of the user needs to be changed.

Contents of the invention

The purpose of the present invention is to provide a social resource access method and device, without making any changes and configurations to the existing social resource network equipment, through the access gateway and the access server to integrate the current various networking methods and social resources under the business model to access the public platform.

In order to achieve the above object, the technical scheme of the present invention is as follows:

A method for accessing social resources, used for connecting social resources in a social resource network to a public platform, where an access gateway is provided on the social resource network side, an access server is provided on the public platform side, and the The access method of social resources is applied to the access gateway, including:

Establish a tunnel connection with the access server according to the pre-configured IP address of the access server;

Listen to the data packets sent by social resources in the social resource network, push the information of social resources that need to be connected to the public platform to the access server, and then establish the actual IP of social resources according to the virtual IP address assigned by the access server to social resources The mapping relationship between addresses and virtual IP addresses;

According to the established mapping relationship, the data packets between the social resource and the access server are forwarded through the established tunnel connection.

Further, the interception of data packets sent by social resources in the social resource network, and pushing the information of social resources that need to be accessed to the public platform to the access server includes:

Listen to the data packet sent by the social resource at the LAN port, analyze the IP address and MAC address information of the social resource from the header of the data packet sent by the social resource, and then write the IP address and MAC address of the social resource into the social resource information table;

Select social resources that need to be connected to the public platform from the social resource information table, and push the information of the selected social resources to the access server.

Further, according to the established mapping relationship, forwarding the data packets between the social resource and the access server through the established tunnel connection includes:

Generate an access control list based on the virtual IP address allocated by the access server to social resources and the virtual IP address of the access server;

Detect the destination IP address of the received data packet;

If the destination IP address of the data packet is the virtual IP address of the social resource in the access control list, then replace the destination IP address of the data packet with the actual After the IP address is forwarded to the social resource;

If the destination IP address of the data packet is the virtual IP address of the access server in the access control list, then according to the mapping relationship table between the actual IP address of the social resource and the virtual IP address, the source IP address of the data packet is changed from the real IP address of the social resource After the IP address is replaced with a virtual IP address, it is sent to the access server through the established tunnel.

Further, the social resource access method also includes:

Directly forward the data packets that communicate with social resources connected to the public platform and other devices in the social resource network.

The present invention also proposes a social resource access device, which is used to connect social resources in the social resource network to the public platform. The social resource network side is provided with an access gateway, and the public platform side is provided with an access gateway. Into the server, the access device of the social resources is applied to the access gateway, including:

A tunnel establishment module, configured to establish a tunnel connection with the access server according to the pre-configured IP address of the access server;

The social resource push module is used to listen to the data packets sent by the social resources in the social resource network, push the information of the social resources that need to be connected to the public platform to the access server, and then assign the virtual IP to the social resources according to the access server Address, establishes the mapping relationship between the actual IP address of social resources and the virtual IP address;

The forwarding module is configured to forward the data packets between the social resource and the access server through the established tunnel connection according to the established mapping relationship.

Further, the social resource push module listens to the data packets sent by the social resources in the social resource network, and pushes the information of the social resources that need to be connected to the public platform to the access server, including:

Listen to the data packet sent by the social resource at the LAN port, analyze the IP address and MAC address information of the social resource from the header of the data packet sent by the social resource, and then write the IP address and MAC address of the social resource into the social resource information table;

Select social resources that need to be connected to the public platform from the social resource information table, and push the information of the selected social resources to the access server.

Further, when the forwarding module forwards the data packet between the social resource and the access server through the established tunnel connection according to the established mapping relationship, it performs the following operations:

Generate an access control list based on the virtual IP address allocated by the access server to social resources and the virtual IP address of the access server;

Detect the destination IP address of the received data packet;

If the destination IP address of the data packet is the virtual IP address of the social resource in the access control list, then replace the destination IP address of the data packet with the actual After the IP address is forwarded to the social resource;

If the destination IP address of the data packet is the virtual IP address of the access server in the access control list, then according to the mapping relationship table between the actual IP address of the social resource and the virtual IP address, the source IP address of the data packet is changed from the real IP address of the social resource After the IP address is replaced with a virtual IP address, it is sent to the access server through the established tunnel.

Further, the forwarding module is also used for directly forwarding the data packets that the social resources connected to the public platform communicate with other devices in the social resource network.

The present invention proposes a social resource access method and device. By deploying an access gateway in a social resource network and deploying an access server on a public platform, the access gateway and the access server establish a VPN tunnel, and provide access The social resources of the public platform are allocated virtual IP addresses to realize the connection of social resources in various networking modes to the public platform, and at the same time, the access gateway communicates the data packets between the social resources connected to the public platform and other devices in the social resource network For direct forwarding, there is no need to make any changes and configurations to devices in the social resource network.

Description of drawings

Fig. 1 is a flow chart of the access method of social resources of the present invention;

Fig. 2 is the network structure Fig. 1 that social resources are connected to the public platform in this embodiment;

Fig. 3 is the network structure Fig. 2 that social resources are connected to the public platform in this embodiment;

Fig. 4 is the network structure Fig. 3 that social resources are connected to the public platform in this embodiment;

FIG. 5 is a schematic structural diagram of a device for accessing social resources in the present invention.

Detailed ways

The technical solution of the present invention will be described in further detail below in conjunction with the accompanying drawings and embodiments, and the following embodiments do not constitute a limitation of the present invention.

In this embodiment, a social resource access method is used for connecting social resources in a social resource network to a public platform, where an access gateway is provided on the social resource network side, and an access server is provided on the public platform side In this embodiment, a method for accessing social resources is applied to an access gateway, as shown in FIG. 1 , including:

Step S1, establish a tunnel connection with the access server according to the pre-configured IP address of the access server.

The current social resource network networking methods are mainly divided into the following three types:

1. The social resource network is an independent local area network and is not connected to any other network.

2. The social resource network is connected to the Internet through gateway devices such as routers.

3. The social resource network is connected to other private networks through devices such as layer-3 switches, such as access to education networks.

The access method of social resources in this embodiment is not limited by the social resource network networking mode when social resources are connected to the public platform, by deploying the access gateway in the social resource network and deploying the access server in the public platform , to connect social resources in various current networking modes to the public platform, and in this embodiment, when social resources are connected to the public platform, there is no need to make any changes and configurations to the devices in the social resource network.

This embodiment is aimed at the first networking mode of the above-mentioned social resource network. As shown in FIG. The ingress gateway is connected to the NVR and DVR equipment in the social resource network through the LAN port, connected to the layer 2 switch in the social resource network, and connected to the external IP network through the WAN port to realize the connection with the access server. The access gateway adopts the gateway mode. Through the VPN tunnel established with the access server and the virtual IP address assigned to the NVR/DVR, the NVR/DVR in the social resource network can be connected to the public platform. The data packets sent between the IPC and the video client are directly forwarded, so that social resources can be connected to the public platform without any changes and configurations to the devices in the social resource network.

This embodiment is directed at the second networking mode of the above-mentioned social resource network. As shown in FIG. Connect the NVR and DVR equipment in the social resource network through the LAN port, and connect the router in the social resource network through the WAN port, and realize the connection with the access server through the router and the external IP network. The access gateway adopts the bridging mode, through the VPN tunnel established with the access server and the virtual IP address assigned to the NVR/DVR, the NVR/DVR in the social resource network can be connected to the public platform, and the access gateway can connect the NVR/DVR and The data packets sent between IPC, video client and public network users are directly forwarded, so that social resources can be connected to the public platform without any changes and configurations to the devices in the social resource network.

This embodiment is aimed at the third networking mode of the above-mentioned social resource network. As shown in FIG. The ingress gateway connects to the NVR and DVR equipment in the social resource network through the LAN port, connects to the layer-3 switch in the social resource network, and connects to the external IP network through the WAN port to realize the connection with the access server. The access gateway adopts the gateway mode. Through the VPN tunnel established with the access server and the virtual IP address assigned to the NVR/DVR, the NVR/DVR in the social resource network can be connected to the public platform. The data packets sent between IPC, video client and education network users are directly forwarded, so that social resources can be connected to the public platform without any changes and configurations to the devices in the social resource network.

In this embodiment, after the deployment of the access gateway and the access server and the corresponding configuration are completed, for example, the IP address of the access server is configured on the access gateway. The server initiates a tunnel establishment request; after the access server authenticates the access gateway, it assigns a virtual IP address to the access gateway, and through the tunnel establishment confirmation message, it will be assigned to the virtual IP address of the access gateway and the virtual IP of the access server The address is sent to the access gateway; the access gateway completes the establishment of the tunnel after receiving the tunnel establishment confirmation message. The access gateway and the access server communicate with each other through their respective virtual IP addresses.

It should be noted that, when the tunnel is established between the access gateway and the access server in this embodiment, it is not limited by specific protocols. This embodiment preferably adopts softetherVPN, which can support various protocols, such as L2TP, PPTP, IPSec A VPN tunnel can be established using a single protocol, such as an L2TP tunnel, which will not be repeated here.

Step S2, listen to the data packets sent by the social resources in the social resource network, push the information of the social resources that need to be connected to the public platform to the access server, and then establish a social network according to the virtual IP address allocated by the access server to the social resources. The mapping relationship between the actual IP address of the resource and the virtual IP address.

In this embodiment, the access gateway connects social resources such as IPC, NVR and DVR in the social resources through the LAN port, and the access gateway listens to the data packets sent by the social resources at the LAN port, and parses out the IP packet header sent by the social resources. The IP address and MAC address information of social resources, and judge the manufacturer corresponding to the MAC address according to the MAC address of the social resource, and then write the IP address, MAC address and manufacturer of the social resource into the social resource information table, and the social resource information The specific content of the table is shown in the following table:

serial number type name manufacturers MAC address IP address 1 Hikvision 7B-AC-CD-9D-54-28 192.168.1.201 2 Dahua 8C-32-56-5B-46-22 192.168.1.202 3 other 9A-54-C4-8D-55-90 192.168.1.203 4 Uniview 5B-34-C7-9A-74-78 192.168.1.204 ... ... ... ...

Table 1

According to the IP address information or MAC address information of the NVR/DVR deployed in the social resource network, the user selects the NVR/DVR device that needs to be connected to the public platform from the social resource information table, and configures the corresponding NVR/DVR device for the selected NVR/DVR device. After the device type and name, a social resource information table is generated and pushed to the access server. The specific content of the social resource information table is as follows:

serial number type name manufacturers MAC address IP address 1 NVR The second floor of the supermarket Hikvision 7B-AC-CD-9D-54-28 192.168.1.201 2 DVR R&D 7th floor Dahua 8C-32-56-5B-46-22 192.168.1.202 3 NVR Building 10 South Uniview 5B-34-C7-9A-74-78 192.168.1.204 ... ... ... ... ... ...

Table 2

The access gateway sends the generated social resource information in the social resource information table pushed to the access server through the established tunnel, including the device type, name, manufacturer, MAC address and IP address of the social resource, to the access server. After receiving the social resource information sent by the access gateway, the access server assigns a virtual IP address to each social resource, and feeds back the assigned virtual IP address and the virtual IP address of the access server to the access gateway.

It should be noted that in this embodiment, the access gateway can also pre-configure the IP address, device type, and name of the social resources that need to access the public platform. After the access gateway detects the data packet sent by the social resource, The source IP address and MAC address are parsed from the data packet. If the parsed source MAC address is the same as the IP address of the pre-configured social resource that needs to access the fair platform, then it is judged according to the parsed MAC address that the MAC address corresponds to manufacturer, and generate social resource information including the IP address, MAC address, manufacturer, device type and name of the social resource, and then send the generated social resource information to the access server. After receiving the social resource information sent by the access gateway, the access server allocates a virtual IP address to the social resource, and feeds back the allocated virtual IP address and the virtual IP address of the access server to the access gateway.

The access gateway generates a mapping relationship table between the actual IP address and the virtual IP address of the social resource according to the virtual IP address allocated by the access server to the social resource. The specific content of the mapping relationship table is as follows:

serial number real IP address Virtual IP address 1 192.168.1.201 10.10.11.20 2 192.168.1.202 10.10.11.22 3 192.168.1.204 10.10.11.24 ... ... ...

table 3

According to the mapping relationship table between the actual IP address and the virtual IP address of the social resources, the access gateway performs corresponding IP address conversion on the IP data packets sent between the social resources and the access server before forwarding them, so as to realize the connection between social resources and access servers. Integrate the mutual communication between servers, and connect social resources to the public platform.

It should be noted that, in the above embodiment, the type, name and manufacturer of the social resource are not necessary in the social resource information table, but for the convenience of the access server when establishing business with the social resource, they can be listed in the social resource information table Join and push to the access server. These information will not be used in the implementation of the technical solution, and will not be repeated here.

Step S3. According to the established mapping relationship, forward the data packet between the social resource and the access server through the established tunnel connection.

After the access gateway in this embodiment receives the virtual IP address allocated by the access server to the social resource in the social resource information table, it writes the virtual IP address allocated by the access server to the social resource and the virtual IP address of the access server into the file In /proc/tun_ip, the network card driver of the access gateway reads the file, extracts the virtual IP address of the social resource and the virtual IP address of the access server from the file, generates an access control list, and transfers the generated access control list Issued to the switching chip of the access gateway.

The switching chip of the access gateway of the present embodiment detects the destination IP address of the received data packet, if the destination IP address of the data packet is not the virtual IP address in the access control list, then directly forwards the data packet through the switching chip; If the destination IP address of the data packet is the virtual IP address of the social resource in the access control list, the data packet is sent to the CPU of the access gateway, and the CPU of the access gateway is based on the mapping relationship between the actual IP address of the social resource and the virtual IP address Table, replace the destination IP address of the data packet with the actual IP address of the social resource and forward it to the social resource; if the destination IP address of the data packet is the virtual IP address of the access server in the access control list, the data packet will be sent For the CPU of the access gateway, the CPU of the access gateway replaces the source IP address of the data packet from the real IP address of the social resource with the virtual IP address according to the mapping relationship table between the actual IP address of the social resource and the virtual IP address, It is sent to the access server through the established tunnel.

For example, as shown in Figure 2, the IP address of social resource NVR1 is 192.168.1.201, the virtual IP address assigned to NVR1 by the access server is 10.10.11.20, and the IP address of IPC1 is 192.168.1.203. When the public platform requests the video on NVR1, the access server accesses NVR1 through the virtual IP address 10.10.11.20 assigned to NVR1, and the destination IP address of the data packet received by the access gateway is the virtual IP address 10.10 of NVR1. On 11.20, the access gateway obtains the real IP address 192.168.1.201 corresponding to the virtual IP address 10.10.11.20 by querying the mapping relationship table between the actual IP address of the social resource and the virtual IP address, and the access gateway transfers the destination IP address of the data packet to 10.10.11.20 is replaced with 192.168.1.201 and forwarded to NVR1. When IPC1 accesses NVR1, the destination IP address of the data packet sent by IPC1 is the real IP address 192.168.1.201 of NVR1. After receiving the data packet, the access gateway finds the destination IP address of the data packet by querying the IP header of the data packet. is the real IP address of NVR1, the data packet is directly forwarded to NVR1 according to the normal data packet forwarding rules.

It should be noted that the access gateway in this embodiment may not generate an access control list. After the switching chip of the access gateway detects the destination IP address of the received data packet, it directly uses the detected destination IP address and the social resource The actual IP address of the virtual IP address is compared with the virtual IP address in the virtual IP address mapping table and the virtual IP address of the access server. If the detected destination IP address is the same as the virtual IP address of the social resource, the The destination IP address is replaced with the actual IP address of the social resource and forwarded to the social resource; if the detected destination IP address is the same as the virtual IP address of the access server, the source IP address of the data packet is changed from the real IP address of the social resource After the IP address is replaced with a virtual IP address, it is sent to the access server through the established tunnel; if the detected destination IP address is different from the virtual IP address of the social resource and the virtual IP address of the access server, the data packet is directly Forward it.

Through the above method, the data packets for communication between the social resources connected to the public platform and other devices in the social resource network are directly forwarded without any changes and configurations to the devices in the social resource network, and the line speed can be maintained. In this embodiment, without making any changes and configurations to the existing social resource network equipment, the NVR/DVR in the social resource network is connected to the public platform through the access gateway and the access server, and the NVR/DVR connected to the public platform NVR/DVR communicates normally with other devices in the social resource network in the original way.

This embodiment also proposes a social resource access device, which is used to connect social resources in the social resource network to the public platform. It is characterized in that an access gateway is set on the social resource network side, and the public The platform side is provided with an access server, and the access device of the social resources is applied to the access gateway, as shown in Figure 5, the device includes:

A tunnel establishment module, configured to establish a tunnel connection with the access server according to the pre-configured IP address of the access server;

The social resource push module is used to listen to the data packets sent by the social resources in the social resource network, push the information of the social resources that need to be connected to the public platform to the access server, and then assign the virtual IP to the social resources according to the access server Address, establishes the mapping relationship between the actual IP address of social resources and the virtual IP address;

The forwarding module is configured to forward the data packets between the social resource and the access server through the established tunnel connection according to the established mapping relationship.

In this embodiment, the social resource push module listens to the data packets sent by the social resources in the social resource network, pushes the information of the social resources that need to be connected to the public platform to the access server, and performs the following operations:

Listen to the data packet sent by the social resource at the LAN port, analyze the IP address and MAC address information of the social resource from the header of the data packet sent by the social resource, and then write the IP address and MAC address of the social resource into the social resource information table;

Select social resources that need to be connected to the public platform from the social resource information table, and push the information of the selected social resources to the access server.

In this embodiment, the forwarding module performs the following operations when forwarding the data packets between the social resource and the access server through the established tunnel connection according to the established mapping relationship:

Generate an access control list based on the virtual IP address allocated by the access server to social resources and the virtual IP address of the access server;

Detect the destination IP address of the received data packet;

If the destination IP address of the data packet is the virtual IP address of the social resource in the access control list, then replace the destination IP address of the data packet with the actual After the IP address is forwarded to the social resource;

If the destination IP address of the data packet is the virtual IP address of the access server in the access control list, then according to the mapping relationship table between the actual IP address of the social resource and the virtual IP address, the source IP address of the data packet is changed from the real IP address of the social resource After the IP address is replaced with a virtual IP address, it is sent to the access server through the established tunnel.

The forwarding module in this embodiment is also used to directly forward the data packets that communicate with the social resources connected to the public platform and other devices in the social resource network.

The above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and changes according to the present invention. deformation, but these corresponding changes and deformations should belong to the scope of protection of the appended claims of the present invention.

Claims (6)

1. a kind of cut-in method of social resources, for the social resources in social resources network to be linked into common platform, It is characterized in that, the social resources network side is provided with access gateway, and the common platform side is provided with access server, described The cut-in method of social resources is applied to access gateway, comprising:

According to the IP address of preconfigured access server, tunnel is established with access server and is connect；

The data packet that social resources are sent in social resources network is listened to, will need to be linked into the letter of the social resources of common platform Breath is pushed to access server, and the virtual ip address then distributed according to access server to social resources establishes social resources The mapping relations of real ip address and virtual ip address；

It is generated and is visited to the virtual ip address of virtual ip address and access server that social resources distribute according to access server Ask control list；

The purpose IP address of the data packet received is detected；

If the purpose IP address of data packet is the virtual ip address of social resources in accesses control list, according to social resources Real ip address and virtual ip address mapping table, the purpose IP address of data packet is replaced with to the reality of the social resources The social resources are transmitted to after the IP address of border；

If the purpose IP address of data packet is the virtual ip address of access server in accesses control list, provided according to society The real ip address in source and the mapping table of virtual ip address, by the source IP address of the data packet by the real IP of social resources After address replaces with virtual ip address, access server is sent to by the tunnel of foundation；

The data packet communicated to other equipment in the social resources and social resources network of access common platform carries out straight Switch through hair.

2. the cut-in method of social resources according to claim 1, which is characterized in that described to listen in social resources network The data packet that social resources are sent, is pushed to access server for the information for needing to be linked into the social resources of common platform, wraps It includes:

The data packet that social resources transmission is listened at LAN mouthfuls parses social money from the packet header that social resources are sent Then social resources information table is written in the IP address of social resources, MAC Address by the IP address and mac address information in source；

The social resources for needing to be linked into common platform are chosen from social resources information table, by the information of the social resources of selection It is pushed to access server.

3. a kind of access device of social resources, for the social resources in social resources network to be linked into common platform, It is characterized in that, the social resources network side is provided with access gateway, and the common platform side is provided with access server, described The access device of social resources is applied to access gateway, comprising:

Module is established in tunnel, for the IP address according to preconfigured access server, is established tunnel with access server and is connected It connects；

Needs are linked by social resources pushing module for listening to the data packet that social resources are sent in social resources network The information of the social resources of common platform is pushed to access server, the void then distributed according to access server to social resources Quasi- IP address, establishes the mapping relations of social resources real ip address and virtual ip address；

Forwarding module passes through the tunnel connection forwarding social resources of foundation and access service for the mapping relations according to foundation Data packet between device；

The forwarding module passes through the tunnel connection forwarding social resources of foundation and access service in the mapping relations according to foundation When data packet between device, perform the following operations:

It is generated and is visited to the virtual ip address of virtual ip address and access server that social resources distribute according to access server Ask control list；

The purpose IP address of the data packet received is detected；

If the purpose IP address of data packet is the virtual ip address of social resources in accesses control list, according to social resources Real ip address and virtual ip address mapping table, the purpose IP address of data packet is replaced with to the reality of the social resources The social resources are transmitted to after the IP address of border；

If the purpose IP address of data packet is the virtual ip address of access server in accesses control list, provided according to society The real ip address in source and the mapping table of virtual ip address, by the source IP address of the data packet by the real IP of social resources After address replaces with virtual ip address, access server is sent to by the tunnel of foundation；

The data packet communicated to other equipment in the social resources and social resources network of access common platform carries out straight Switch through hair.

4. the access device of social resources according to claim 3, which is characterized in that the social resources pushing module exists The data packet that social resources are sent in social resources network is listened to, the information for needing to be linked into the social resources of common platform is pushed away Access server is given, is performed the following operations:

The data packet that social resources transmission is listened at LAN mouthfuls parses social money from the packet header that social resources are sent Then social resources information table is written in the IP address of social resources, MAC Address by the IP address and mac address information in source；

The social resources for needing to be linked into common platform are chosen from social resources information table, by the information of the social resources of selection It is pushed to access server.

5. a kind of cut-in method of social resources, for the social resources in social resources network to be linked into common platform, It is characterized in that, the social resources network side is provided with access gateway, and the common platform side is provided with access server, described The cut-in method of social resources includes:

The access gateway is established tunnel with access server and is connect according to the IP address of preconfigured access server；

The access gateway listens to the data packet that social resources are sent in social resources network, will need to be linked into common platform The information of social resources is pushed to access server；

The access server receives the information of the social resources of push, distributes virtual ip address for corresponding social resources；

The virtual ip address that the access gateway is distributed according to access server to social resources, with establishing social resources practical IP The mapping relations of location and virtual ip address；

The access gateway passes through the tunnel connection forwarding social resources and access server of foundation according to the mapping relations of foundation Between data packet, perform the following operations:

It is generated and is visited to the virtual ip address of virtual ip address and access server that social resources distribute according to access server Ask control list；

The purpose IP address of the data packet received is detected；

If the purpose IP address of data packet is the virtual ip address of social resources in accesses control list, according to social resources Real ip address and virtual ip address mapping table, the purpose IP address of data packet is replaced with to the reality of the social resources The social resources are transmitted to after the IP address of border；

If the purpose IP address of data packet is the virtual ip address of access server in accesses control list, provided according to society The real ip address in source and the mapping table of virtual ip address, by the source IP address of the data packet by the real IP of social resources After address replaces with virtual ip address, access server is sent to by the tunnel of foundation；

The data packet communicated to other equipment in the social resources and social resources network of access common platform carries out straight Switch through hair.

6. the cut-in method of social resources according to claim 5, which is characterized in that the access gateway listens to social money The information for needing to be linked into the social resources of common platform is pushed to access clothes by the data packet that social resources are sent in source network Business device, comprising:

The data packet that social resources transmission is listened at LAN mouthfuls parses social money from the packet header that social resources are sent Then social resources information table is written in the IP address of social resources, MAC Address by the IP address and mac address information in source；

The social resources for needing to be linked into common platform are chosen from social resources information table, by the information of the social resources of selection It is pushed to access server.