WO2025051027A1 - Procédé de détermination de politique de trafic, dispositif électronique, et support de stockage - Google Patents

Procédé de détermination de politique de trafic, dispositif électronique, et support de stockage Download PDF

Info

Publication number
WO2025051027A1
WO2025051027A1 PCT/CN2024/114881 CN2024114881W WO2025051027A1 WO 2025051027 A1 WO2025051027 A1 WO 2025051027A1 CN 2024114881 W CN2024114881 W CN 2024114881W WO 2025051027 A1 WO2025051027 A1 WO 2025051027A1
Authority
WO
WIPO (PCT)
Prior art keywords
message
terminal
information
mapping relationship
gateway
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
PCT/CN2024/114881
Other languages
English (en)
Chinese (zh)
Inventor
沈金志
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ruijie Networks Co Ltd
Original Assignee
Ruijie Networks Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ruijie Networks Co Ltd filed Critical Ruijie Networks Co Ltd
Publication of WO2025051027A1 publication Critical patent/WO2025051027A1/fr
Anticipated expiration legal-status Critical
Pending legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/40—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using virtualisation of network functions or resources, e.g. SDN or NFV entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2101/00—Indexing scheme associated with group H04L61/00
    • H04L2101/60—Types of network addresses
    • H04L2101/618—Details of network addresses
    • H04L2101/622—Layer-2 addresses, e.g. medium access control [MAC] addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2101/00—Indexing scheme associated with group H04L61/00
    • H04L2101/60—Types of network addresses
    • H04L2101/618—Details of network addresses
    • H04L2101/659—Internet protocol version 6 [IPv6] addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming

Definitions

  • the present application relates to the field of communication technology, and in particular to a traffic strategy determination method, an electronic device, and a storage medium.
  • network administrators need to uniformly manage users' network access rights and require users to access the network according to pre-planned network segments and locations.
  • users' access locations will move over a large range.
  • Network administrators often need to reassign network access rights to users, which brings great inconvenience to network management and maintenance.
  • Policy mobility means that no matter where the user moves, the user experience remains unchanged, which breaks the limitation of the traditional network access location and truly embodies the characteristic of network moving with people.
  • the present application provides a traffic strategy determination method, an electronic device, and a storage medium.
  • the present application provides a method for determining a traffic policy, wherein the method is applied to a policy execution node, and the method includes: obtaining first information, wherein the first information corresponds to a first message from a gateway, and the first information indicates a first correspondence between an Internet Protocol version 6 IPv6 address of a terminal and a media access control MAC address of the terminal; obtaining a first mapping relationship, wherein the first mapping relationship indicates a relationship between an Internet Protocol version 4 IPv4 address of the terminal, the MAC, and a traffic policy corresponding to the IPv4 address of the terminal; and determining the traffic policy corresponding to the IPv6 address of the terminal based on the first information and the first mapping relationship.
  • the traffic policy corresponding to the IPv6 address of the terminal is determined based on the first information and the first mapping relationship, including: determining the traffic policy corresponding to the IPv6 address of the terminal based on the traffic policy corresponding to the IPv4 address of the terminal; wherein the traffic policy corresponding to the IPv6 address of the terminal is the same as the traffic policy corresponding to the IPv4 address of the terminal.
  • obtaining the first mapping relationship includes: obtaining the first mapping relationship from a controller through a network configuration protocol NETCONF interface.
  • the obtaining of the first mapping relationship includes: obtaining second information, wherein the second information corresponds to a second message from the gateway, and the second information indicates a second correspondence between the IPv4 address of the terminal and the MAC address of the terminal; obtaining third information, The third information indicates the correspondence between the IPv4 address of the terminal and the traffic policy corresponding to the IPv4 address of the terminal; and based on the second information and the third information, the first mapping relationship is obtained.
  • obtaining the second information includes: obtaining the second information from the gateway through an Ethernet-based virtual private network EVPN; wherein the gateway and the policy execution node are in a Border Gateway Protocol BGP neighbor relationship, and the second message is one of the following messages: an Address Resolution Protocol ARP message, an ARP table entry, a Dynamic Host Configuration Protocol snooping DHCP Snooping message, or a DHCP Snooping table entry.
  • obtaining the second information includes: obtaining the second information from the controller through a network configuration protocol NETCONF interface; wherein the second message is an ARP message or an ARP table entry.
  • obtaining the second information includes: directly obtaining the second information from the gateway, wherein the policy execution node is set on the gateway, and the second message is an ARP message or an ARP table entry.
  • obtaining the first information includes: obtaining the first information from the gateway through an Ethernet-based virtual private network EVPN; wherein the gateway and the policy execution node are in a Border Gateway Protocol BGP neighbor relationship, and the first message is one of the following messages: a neighbor discovery ND message, an ND table entry, a neighbor discovery snooping ND Snooping message, or an ND Snooping table entry.
  • obtaining the first information includes: obtaining the first information from the controller through a network configuration protocol NETCONF interface; wherein the first message is an ND message or an ND table entry.
  • obtaining the first information includes: directly obtaining the first information from the gateway, wherein the policy execution node is set on the gateway, and the first message is an ND message or an ND table entry.
  • a method for determining a traffic policy comprising: sending a first message, wherein the first message allows a policy execution node to determine a traffic policy corresponding to an IPv6 address of a terminal based on first information and a first mapping relationship; wherein the first information corresponds to a first message from a gateway, and the first information indicates a first correspondence between an IPv6 address of a terminal and a MAC address of the terminal; and the first mapping relationship is a relationship between an Internet Protocol version 4 IPv4 address of the terminal, the MAC, and the traffic policy corresponding to the IPv4 address of the terminal.
  • sending the first message includes: sending the first message through an Ethernet-based virtual private network EVPN; wherein the gateway and the policy execution node are in a Border Gateway Protocol BGP neighbor relationship, and the first message is one of the following messages: a neighbor discovery ND message, an ND table entry, a neighbor discovery snooping ND Snooping message, or an ND Snooping table entry.
  • sending the first message includes: sending the first message to the controller through a remote procedure call protocol GRPC interface or a NETCONF interface to allow The controller sends the first message to the policy execution node; wherein the first message is a neighbor discovery ND message or an ND table entry.
  • sending the first message includes: directly sending the first message to the policy execution node; wherein the policy execution node is set on the gateway, and the first message is an ND message or an ND table entry.
  • the method before sending the first message and the second message, the method also includes: learning the first message and the second message from the terminal.
  • the present application provides a method for determining a traffic policy, wherein the method is applied to a controller, and the method includes: receiving a first message sent by a gateway; and sending the first message to a policy execution node, wherein the first message allows the policy execution node to determine the traffic policy corresponding to the IPv6 address of the terminal based on first information and a first mapping relationship; wherein the first information corresponds to a first message from the gateway, and the first information indicates a first correspondence between the IPv6 address of the terminal and the MAC address of the terminal; and the first mapping relationship is the relationship between the Internet Protocol version 4 IPv4 address of the terminal, the MAC, and the traffic policy corresponding to the IPv4 address of the terminal.
  • the method further includes: sending the first mapping relationship to the policy execution node through a network configuration protocol NETCONF interface.
  • the method also includes: receiving a second message sent by the gateway; sending second information and third information to the policy execution node; wherein the second information and the third information allow the policy execution node to determine the first mapping relationship; the second information corresponds to a second message from the gateway, the second information indicates a second correspondence between the IPv4 address of the terminal and the MAC address of the terminal; and the third information indicates a correspondence between the IPv4 address of the terminal and the traffic policy corresponding to the IPv4 address of the terminal.
  • the present application provides a method for determining a traffic policy, wherein the method is applied to a policy execution node, and the method includes: receiving fourth information, wherein the fourth information indicates the traffic policy corresponding to the IPv6 address of the terminal; the fourth information is determined based on first information and a first mapping relationship, the first information corresponds to a first message from a gateway, and the first information indicates a first correspondence between the IPv6 address of the terminal and the MAC address of the terminal; the first mapping relationship indicates the relationship between the Internet Protocol version 4 IPv4 address of the terminal, the MAC, and the traffic policy corresponding to the IPv4 address of the terminal; and based on the fourth information, determining the traffic policy corresponding to the IPv6 address of the terminal.
  • the present application provides a method for determining a traffic policy, wherein the method is applied to a gateway, and the method includes: sending a first message, wherein the first message allows a controller to determine the traffic policy corresponding to the IPv6 address of the terminal based on first information and a first mapping relationship, and send the traffic policy corresponding to the IPv6 address of the terminal to a policy execution node; wherein the first information corresponds to a first message from a gateway, and the first information indicates a first correspondence between the IPv6 address of the terminal and the MAC address of the terminal; and the first mapping relationship is the relationship between the Internet Protocol version 4 IPv4 address of the terminal, the MAC, and the traffic policy corresponding to the IPv4 address of the terminal.
  • the present application provides a method for determining a traffic strategy, wherein the method is applied to Controller, the method includes: receiving a first message sent by a gateway; the first message allows the controller to determine fourth information based on the first information and the first mapping relationship; wherein the first information corresponds to the first message from the gateway, and the first information indicates a first correspondence between the IPv6 address of the terminal and the MAC address of the terminal; the first mapping relationship is the relationship between the Internet Protocol version 4 IPv4 address of the terminal, the MAC and the traffic policy corresponding to the IPv4 address of the terminal; the fourth information indicates the traffic policy corresponding to the IPv6 address of the terminal; and sending the fourth information to the policy execution node.
  • the present application provides a traffic policy determination device, wherein the device includes: an acquisition module, used to obtain first information and a first mapping relationship, wherein the first information corresponds to a first message from a gateway, and the first information indicates a first correspondence between an IPv6 address of a terminal and a MAC address of the terminal; the first mapping relationship indicates a relationship between an Internet Protocol version 4 IPv4 address of the terminal, the MAC, and a traffic policy corresponding to the IPv4 address of the terminal; and
  • a traffic policy determination module is used to determine the traffic policy corresponding to the IPv6 address of the terminal based on the first information and the first mapping relationship.
  • the present application provides a policy accompanying method, the method is applied to a software defined network SDN, the method comprising:
  • the first mapping relationship represents a relationship between MAC address information, IPv4 address information and a user group of the terminal
  • a second mapping relationship between IPv6 address information and user groups is generated, and the traffic policy of IPv6 address information is determined according to the second mapping relationship, so as to realize policy following of terminal IPv6 service traffic.
  • the target identification mode is any one of a controller identification mode, a local Ethernet virtual private network EVPN identification mode, and a local gateway identification mode.
  • obtaining a first mapping relationship and a message of the terminal includes:
  • the generating, according to the first mapping relationship and the message, a second mapping relationship between the IPv6 address information of the terminal and the user group includes:
  • the third mapping relationship is compared with the first mapping relationship to generate a second mapping relationship between the IPv6 address information and the user group, so that the policy execution node in the SDN determines the traffic policy of the IPv6 address information according to the second mapping relationship.
  • a second mapping relationship between the IPv6 address information and the user group is generated based on the controller, and the second mapping relationship is sent to the policy execution node, thereby realizing policy-based mobility of the terminal IPv6 service traffic without relying on the authentication device to report the IPv6 address information.
  • obtaining a first mapping relationship and a message of the terminal includes:
  • the generating, according to the first mapping relationship and the message, a second mapping relationship between the IPv6 address information of the terminal and the user group includes:
  • the controller sends the first mapping relationship to the policy execution node, and the policy execution node parses the message to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal;
  • the third mapping relationship is compared with the first mapping relationship based on the policy execution node to generate a second mapping relationship between the IPv6 address information and the user group.
  • a second mapping relationship between the IPv6 address information and the user group is generated based on the policy execution node, thereby eliminating the need for the controller to separately send down the traffic policy of the IPv6 address information, thereby improving the performance of policy delivery.
  • obtaining a first mapping relationship and a message of the terminal includes:
  • the generating, according to the first mapping relationship and the message, a second mapping relationship between the IPv6 address information of the terminal and the user group includes:
  • the controller sends the first mapping relationship to the gateway, and the gateway parses the message to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal;
  • the gateway compares the third mapping relationship with the first mapping relationship to generate a second mapping relationship between the IPv6 address information and the user group.
  • the second mapping relationship between the IPv6 address information and the user group can be directly generated based on the gateway.
  • the present application provides a policy accompanying device, which is applied to a software defined network (SDN), and the device includes:
  • An acquisition module configured to acquire a first mapping relationship and a message of a terminal in response to a user operation of selecting a target recognition mode, wherein the first mapping relationship represents a relationship between the MAC address information, the IPv4 address information and the user group of the terminal;
  • a generating module configured to generate an IPv6 address of the terminal according to the first mapping relationship and the message. a second mapping relationship between address information and the user group;
  • a policy accompanying module is used to determine the traffic policy of the IPv6 address information according to the second mapping relationship.
  • the target identification mode is any one of a controller identification mode, a local Ethernet virtual private network EVPN identification mode, and a local gateway identification mode.
  • the acquisition module is specifically used for:
  • the generation module is specifically used for:
  • the third mapping relationship is compared with the first mapping relationship to generate a second mapping relationship between the IPv6 address information and the user group, so that the policy execution node in the SDN determines the traffic policy of the IPv6 address information according to the second mapping relationship.
  • the acquisition module is further used for:
  • the generation module is also used for:
  • the controller sends the first mapping relationship to the policy execution node, and the policy execution node parses the message to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal;
  • the third mapping relationship is compared with the first mapping relationship based on the policy execution node to generate a second mapping relationship between the IPv6 address information and the user group.
  • the acquisition module is further used for:
  • the generation module is also used for:
  • the controller sends the first mapping relationship to the gateway, and the gateway parses the message to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal;
  • the gateway compares the third mapping relationship with the first mapping relationship to generate a second mapping relationship between the IPv6 address information and the user group.
  • the present application provides an electronic device, including:
  • Memory used to store computer programs
  • the processor is used to implement the above-mentioned traffic policy determination method steps or policy following method steps when executing the computer program stored in the memory.
  • the present application provides a computer-readable storage medium, wherein the computer-readable
  • the storage medium stores a computer program, which, when executed by a processor, implements the above-mentioned traffic policy determination method steps or policy following method steps.
  • the present application provides a computer program product, which includes: computer program code (or instructions), when the computer program code is executed by one or more processors, it enables the device including the processor to perform the above-mentioned traffic policy determination method steps or policy following method steps.
  • a first message is obtained from a gateway, and first information is determined based on the first message to determine a first correspondence between the IPv6 address of the terminal and the MAC address of the terminal, and a flow policy corresponding to the IPv6 address of the terminal is determined based on the first information and the first mapping relationship.
  • the authentication device there is no need for the authentication device to support IPv6 authentication and audit functions, nor is there a need to set a private message in the authentication message to carry IPv6-related information, thereby achieving decoupling of the flow policy determination process of the IPv6 address information of the terminal from the authentication device, reducing the burden on the authentication device.
  • FIG1 is a flow chart of a method for determining a traffic strategy provided in an embodiment of the present application.
  • FIG. 2 is a schematic diagram of signaling interaction of a controller identification mode provided in an embodiment of the present application.
  • FIG3 is a schematic diagram of signaling interaction in a local EVPN identification mode provided in an embodiment of the present application.
  • FIG4 is a schematic diagram of signaling interaction in a local gateway identification mode provided in an embodiment of the present application.
  • FIG5 is a flow chart of a method for determining a traffic strategy provided in an embodiment of the present application.
  • FIG6 is a schematic diagram of the structure of a traffic strategy determination device provided in an embodiment of the present application.
  • FIG. 7 is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application.
  • FIG8 is a schematic diagram of the structure of a traffic strategy determination device provided in an embodiment of the present application.
  • SDN Software Defined Network
  • the controller is the brain of SDN, which not only provides different levels of programmability to upper-layer network applications through the northbound interface, but also uniformly configures, manages and controls the data plane through the southbound interface.
  • LDAP Lightweight Directory Access Protocol
  • component information for example, server names and connection properties
  • Office Automation is a new way of working that combines modern office and computer technology.
  • OA server is a cloud server used to store various OA office software.
  • Ethernet Virtual Private Network is a VPN technology used for Layer 2 network interconnection.
  • EVPN extends the BGP protocol to transfer the learning and publishing process of MAC address information between Layer 2 networks from the data plane to the control plane.
  • An autonomous system is a group of routers managed by the same technical management organization and running the same dynamic routing protocol.
  • Border Gateway Protocol is an AS-based protocol. BGP neighbor relationships are manually configured to enable two parties running BGP to find each other and establish connections.
  • Address Resolution Protocol is a protocol that obtains MAC address information based on IP address information.
  • Neighbor Discovery Protocol is mainly responsible for discovering the corresponding address information of other nodes on the link, determining available routes, and maintaining information about available paths and other active nodes. ND defines five types of messages.
  • NS Neighbor Solicitation
  • NA message is the response of IPv6 node to NS message.
  • Router Solicitation is a message sent by an IPv6 node to the router after it is started, requesting the network prefix and other configuration information for automatic configuration of the IPv6 node address information.
  • Router Advertisement is a message sent periodically by a router, which includes key information about the network configuration, such as the network prefix, or the router responds to an RS message with a RA message.
  • Redirect message When the router finds that the incoming interface and outgoing interface of the message are the same, it can notify the terminal through the redirect message to select another better next hop address information for sending subsequent messages.
  • Network Configuration Protocol is a network management protocol based on Extensible Markup Language. It provides a programmable method for the controller to configure and manage the gateway and obtain the gateway data.
  • RPC Remote Procedure Call Protocol
  • GRPC refers to the RPC framework developed by Google.
  • Telemetry technology is a comprehensive technology that uses sensor technology, communication technology, and data processing technology to transmit short-range measurement values of object parameters to a distant measurement station to achieve long-distance measurement.
  • Type 2 routing also known as MAC/IP routing, is used to advertise MAC and IP address information.
  • a host table is a mapping table used in computer networks to associate IP address information with corresponding host names.
  • the southbound interface is the communication protocol between the controller and the switch (gateway, policy execution node, terminal).
  • Strategy mobility means that no matter where the user moves, the user experience remains unchanged. It breaks the limitation of traditional network access location and truly embodies the characteristic of network following people.
  • IPv4 Internet Protocol version 4
  • IPv6 Internet Protocol version 6
  • the embodiment of the present application provides a method for determining a traffic strategy, which can realize the policy accompanying the terminal IPv6 service traffic by generating a second mapping relationship between IPv6 address information and a user group, and determining the traffic strategy of the IPv6 address information according to the second mapping relationship.
  • the method and device described in the embodiment of the present application are based on the same technical concept. Since the principles of the problems solved by the method and the device are similar, the embodiments of the device and the method can refer to each other, and the repeated parts will not be repeated.
  • the embodiment of the present application provides the method operation steps shown in the following embodiments or drawings, the method may include more or fewer operation steps based on routine or no creative labor. In the steps that do not logically have a necessary causal relationship, the execution order of these steps is not limited to the execution order provided by the embodiment of the present application.
  • the method is actually During the processing or when the device is executed, the methods shown in the embodiments or drawings may be executed sequentially or in parallel.
  • FIG1 is a flow chart of a method for determining a traffic strategy provided by an embodiment of the present application.
  • the method is applied to a traffic strategy determination system.
  • the process can be executed by a policy accompanying device, which can be implemented by software, hardware, or a combination of software and hardware to ensure the normal operation of the system. As shown in FIG1 , the process includes the following steps.
  • S12 Generate a second mapping relationship between the IPv6 address information of the terminal and the user group according to the first mapping relationship and the message.
  • the traffic policy of the IPv6 address of the same terminal may be the same as the traffic policy of the IPv4 address of the terminal, which will not be described in detail below.
  • a user group is a collection of multiple user devices.
  • Traffic policies can be set for user groups through the controller to ensure that network resources are not illegally used or accessed.
  • Traffic policies are access control policies. Traffic policies can be permission and rejection, as well as full access, partial access, speed-limited access, or time-limited access. Ordinary technicians in this field should be aware of the various types of traffic policies, which will not be described in detail in this article.
  • Each user group can correspond to a traffic policy. When the policy execution node determines the user group corresponding to the terminal IPv4 address or IPv6 address, the traffic policy corresponding to the terminal IPv4 address or IPv6 address can be determined. When the terminal devices in the user group access the network at any location, the access control policy of the user device is the same, realizing business mobility.
  • the user operation of selecting the target identification mode may refer to determining the traffic policy determination method of the device through device configuration according to requirements during the device deployment stage or the operation stage.
  • the SDN controller when configuring the network, the SDN controller will obtain the organizational relationship (user group) within the organization from the LDAP, OA and other servers, and send the user group and its corresponding traffic policy to the policy execution node.
  • the controller is used to refer to the SDN controller below.
  • devices that do not have corresponding specific user groups in the organizational relationship such as printers or monitoring devices, they can also be individually set up as user groups corresponding to one or more user groups (for example, shared user groups), and the user groups corresponding to these devices and the traffic policies corresponding to the user groups can be sent to the policy execution node.
  • user groups corresponding to one or more user groups for example, shared user groups
  • the policy execution node is used to store the IP address of the terminal device and the corresponding traffic policy.
  • the policy execution node can store the IP address of the terminal device and the corresponding user group information, wherein the user group information corresponds to the traffic policy.
  • the policy execution node receives a message sent by the terminal device, it queries the source IP address corresponding to the message and the user group information to which it belongs, and executes the traffic policy corresponding to the user group.
  • the policy execution node receives a message sent to the terminal device, it queries the destination IP address corresponding to the message and the user group information to which it belongs, and executes the traffic policy corresponding to the user group.
  • the target identification mode is any one of a controller identification mode, a local Ethernet virtual private network EVPN identification mode, and a local gateway identification mode.
  • the controller identification mode is used in the following scenarios: When configured as a policy execution node, and there is no Border Gateway Protocol BGP neighbor relationship configured between the gateway and the policy execution node.
  • a signaling interaction diagram of a controller identification mode provided in an embodiment of the present application includes: obtaining a first mapping relationship of a terminal based on a controller, wherein the first mapping relationship represents the relationship between the MAC address information, IPv4 address information and user group of the terminal.
  • the specific method for obtaining the first mapping relationship may be: the terminal initiates an authentication request to the authentication device, and after receiving the authentication request, the authentication device sends the authentication request and the billing message to the controller through RADIUS. After receiving the authentication request and the billing message, the controller performs proxy authentication, for example, sends the authentication request to the authentication server, and after the authentication is successful, the authentication server returns the authentication pass information to the controller, so that the controller returns the authentication pass information to the terminal via the authentication device, and the terminal authentication is successful.
  • the controller can bind the IPv4 address information, MAC address information and user identity information of the terminal carried in the billing message, determine the user group to which the user belongs through the user identity information, and generate the first mapping relationship between the terminal's MAC address information, IPv4 address information and user group.
  • the controller obtains a message corresponding to the terminal, such as an ARP message and an ND message, wherein the ARP message includes the correspondence between the MAC address of the terminal and the IPv4 address of the terminal, and the ND message includes the correspondence between the MAC address of the terminal and the IPv6 address of the terminal.
  • a message corresponding to the terminal such as an ARP message and an ND message
  • the ARP message includes the correspondence between the MAC address of the terminal and the IPv4 address of the terminal
  • the ND message includes the correspondence between the MAC address of the terminal and the IPv6 address of the terminal.
  • the message corresponding to the terminal can also be replaced by a table item corresponding to the terminal, such as an ARP table item and an ND table item, wherein the ARP table item includes the correspondence between the MAC address of the terminal and the IPv4 address of the terminal, and the ND table item includes the correspondence between the MAC address of the terminal and the IPv6 address of the terminal.
  • a message contains more data information, and the table item is information extracted from the message. If the table item is used to transmit the correspondence between the IP address and the MAC address, the transmission efficiency can be improved.
  • the gateway learns the message or table entry of the terminal and sends the message or table entry to the controller, for example, through NETCONF, GRPC or telemetry technology.
  • the controller parses the message or table entry to obtain a third mapping relationship between the terminal's MAC address information and the IPv6 address information, and based on the third mapping relationship and the first mapping relationship, generates a second mapping relationship between the IPv6 address information and the above-mentioned user group.
  • the controller can send the second mapping relationship to the policy execution node through, for example, the network configuration protocol NETCONF, so that the policy execution node determines the traffic policy of the IPv6 address information according to the second mapping relationship.
  • the policy execution node notifies the second mapping relationship to the solution application component of the policy companion to perform policy association.
  • the policy execution node will also install the second mapping relationship into the host table.
  • the controller may send the message or table entry to the policy execution node.
  • the policy execution node parses the message or table entry to obtain the third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the policy execution node obtains a first mapping relationship from the controller, where the first mapping relationship includes a mapping relationship between MAC address information of the terminal, IPv4 address information, and a user group.
  • the policy execution node generates the IPv6 address information based on the first mapping relationship and the third mapping relationship. and a second mapping relationship between the terminal and the user group, and determining a traffic policy corresponding to the IPv6 address of the terminal based on the second mapping relationship.
  • the controller may send the message or table entry to the policy execution node.
  • the policy execution node parses the message or table entry to obtain the third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the controller when the controller sends the traffic policy corresponding to the IPv4 address, the controller can send the correspondence between the IPv4 address information and the user group to the policy execution node.
  • the policy execution node can obtain the correspondence between the IPv4 address and the MAC address of the terminal based on the ARP message or ARP table entry, and then obtain the first mapping relationship in combination with the traffic policy corresponding to the IPv4 address.
  • the policy execution node may generate a second mapping relationship between the IPv6 address information and the user group based on the first mapping relationship and the third mapping relationship, and determine a traffic policy corresponding to the IPv6 address of the terminal based on the second mapping relationship.
  • the above message is sent to the controller based on the gateway.
  • the authentication device There is no need for the authentication device to support IPv6 authentication and audit functions, nor is there any need to set a private message in the authentication message to carry IPv6-related information, thereby achieving the decoupling of the traffic policy determination process of the terminal's IPv6 address information from the authentication device, reducing the burden on the authentication device.
  • the use scenario of the local EVPN identification mode is: the gateway is not configured as a policy execution node, and a BGP neighbor relationship is configured between the gateway and the policy execution node.
  • a signaling interaction diagram of the local EVPN identification mode provided in an embodiment of the present application is shown.
  • the corresponding message or table item of the terminal is obtained, for example, an ARP message or table item, and an ND message or table item.
  • the message or table item corresponding to the terminal obtained by the policy execution node may also be a dynamic host configuration protocol snooping DHCP snooping message or table item, and a neighbor discovery snooping ND snooping message or table item.
  • the gateway learns the terminal's message and sends the message to the policy execution node through BGP. For example, the gateway sends the message to the policy execution node through EVPN's Type 2 routing.
  • the policy execution node When receiving the message, the policy execution node parses the message to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the first mapping relationship of the terminal is obtained through the controller, wherein the specific method for obtaining the first mapping relationship is consistent with the method for obtaining the first mapping relationship in the controller identification mode, and is not described repeatedly here.
  • the controller sends the first mapping relationship to the policy execution node through the southbound interface.
  • the policy execution node When receiving the first mapping relationship, the policy execution node generates a second mapping relationship between the terminal's IPv6 address information and the user group based on the first mapping relationship and the above-mentioned third mapping relationship; determines the traffic policy of the IPv6 address information according to the second mapping relationship; and installs the second mapping relationship into the host table.
  • the policy execution node determines the traffic policy of the IPv6 address information according to the second mapping relationship. For example, the policy execution node notifies the second mapping relationship to the solution application component of the policy companion to perform policy association. At the same time, the policy execution node also installs the second mapping relationship into the host table.
  • a policy execution node when a policy execution node receives an ND message or an ND table entry, The message is analyzed to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the controller when the controller sends the traffic policy corresponding to the IPv4 address, the controller can send the correspondence between the IPv4 address information and the user group to the policy execution node.
  • the policy execution node can obtain the correspondence between the IPv4 address and the MAC address of the terminal based on the ARP message or ARP table entry, and then obtain the first mapping relationship in combination with the traffic policy corresponding to the IPv4 address.
  • the policy execution node may generate a second mapping relationship between the IPv6 address information and the user group based on the first mapping relationship and the third mapping relationship, and determine a traffic policy corresponding to the IPv6 address of the terminal based on the second mapping relationship.
  • the above messages are synchronized based on EVPN, and the existing protocols are used. There is no need to add a new private protocol to transmit the binding relationship between IPv6 address information and MAC address information, which can reduce the performance consumption of the policy execution node.
  • the mapping association between IPv6 address information and user groups is performed at the policy execution node, and the traffic policy of the IPv4 address is determined.
  • the traffic policy of the IPv6 address does not need to be determined through the controller, avoiding centralized management of the controller, which can reduce the burden on the controller and improve reliability.
  • the local gateway identification mode is used in a scenario where the gateway is configured as a policy execution node.
  • FIG4 a signaling interaction diagram of a local gateway identification mode provided in an embodiment of the present application is shown.
  • the controller obtains the first mapping relationship of the terminal, wherein the specific method for obtaining the first mapping relationship is consistent with the method for obtaining the first mapping relationship in the controller identification mode, and is not described again here.
  • the controller sends the first mapping relationship to the policy execution node, i.e., the gateway, through the southbound interface.
  • gateway learning terminal's message or table entry such as ARP message or table entry, and ND message or table entry
  • the gateway when the gateway obtains the message or table entry, it can obtain the third mapping relationship between the terminal's MAC address information and IPv6 address information by parsing the message or table entry.
  • the gateway generates a second mapping relationship between the IPv6 address information and the user group based on the third mapping relationship and the first mapping relationship, and then the gateway determines the traffic policy of the IPv6 address information according to the second mapping relationship. For example, the gateway notifies the second mapping relationship to the solution application component of the policy companion to perform policy association. At the same time, the gateway also installs the second mapping relationship into the host table.
  • the policy execution node when receiving an ND message or an ND table entry, parses the message to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the controller when the controller sends the traffic policy corresponding to the IPv4 address, the controller can send the correspondence between the IPv4 address information and the user group to the policy execution node.
  • the policy execution node obtains the correspondence between the IPv4 address and the MAC address of the terminal based on the received ARP message or ARP table entry, and then obtains the first mapping relationship in combination with the traffic policy corresponding to the IPv4 address.
  • the policy execution node generates a second mapping relationship between the IPv6 address information and the user group based on the first mapping relationship and the third mapping relationship, and determines the IPv6 address of the terminal based on the second mapping relationship. Corresponding traffic strategy.
  • the gateway when the gateway is configured as a policy execution node, there is no need to send messages or table entries to the controller.
  • the IPv6 address information of the terminal is directly associated with the user group based on the gateway to achieve policy-based mobility of the terminal IPv6 service traffic.
  • Figure 5 is a flow chart of a method for determining a traffic strategy provided by an embodiment of the present application.
  • the method for determining a traffic strategy is applied to a policy execution point. As shown in Figure 5, the process includes the following steps.
  • the first mapping relationship indicates a relationship between the Internet Protocol version 4 IPv4 address of the terminal, the MAC, and a traffic policy corresponding to the IPv4 address of the terminal.
  • S53 Determine a traffic policy corresponding to the IPv6 address of the terminal based on the first information and the first mapping relationship.
  • a first message is obtained from a gateway, and first information is determined based on the first message to determine a first correspondence between the IPv6 address of the terminal and the MAC address of the terminal, and a traffic policy corresponding to the IPv6 address of the terminal is determined based on the first information and the first mapping relationship.
  • the authentication device there is no need for the authentication device to support IPv6 authentication and audit functions, nor is there a need to set a private message in the authentication message to carry IPv6-related information, thereby achieving decoupling of the traffic policy determination process of the IPv6 address information of the terminal from the authentication device, reducing the burden on the authentication device.
  • the policy execution node obtains a first mapping relationship from the controller, wherein the first mapping relationship is a mapping relationship between the IPv4 address and MAC address of the terminal and the traffic policy corresponding to the IPv4 address of the terminal.
  • the policy execution node determines the traffic policy corresponding to the IPv4 address of the terminal based on the first mapping relationship, and determines the traffic policy corresponding to the IPv6 address of the terminal based on the first corresponding relationship and the traffic policy corresponding to the IPv4 address of the terminal.
  • the policy execution node obtains second information, wherein the second information corresponds to a second message from the gateway, and the second information indicates a second correspondence between the IPv4 address of the terminal and the MAC address of the terminal.
  • the policy execution node obtains third information from the controller, wherein the third information indicates a correspondence between the IPv4 address of the terminal and the traffic policy corresponding to the IPv4 address of the terminal.
  • the policy execution node obtains the first mapping relationship based on the second information and the third information.
  • the terminals include but are not limited to: mobile phones, tablet computers, laptop computers, PDAs, mobile Internet devices (English: Mobile Internet Device, abbreviated as MID), wearable devices, virtual reality (English: Virtual Reality, abbreviated as VR) devices, augmented reality (English: Augmented Reality, abbreviated as AR) devices, wireless terminal devices in industrial control, wireless terminal devices in unmanned driving, wireless terminal devices in smart grids, wireless terminal devices in transportation safety, wireless terminal devices in smart cities, or wireless terminal devices in smart homes, etc.
  • mobile Internet devices English: Mobile Internet Device, abbreviated as MID
  • VR Virtual Reality
  • AR Augmented Reality
  • a traffic strategy determination device is also provided in an embodiment of the present application, as shown in FIG6 , which is a structural diagram of a traffic strategy determination device provided in an embodiment of the present application.
  • the traffic strategy determination device may be a policy execution node.
  • the device comprises: an acquisition module 51, which is used to acquire a first mapping relationship and a message of a terminal in response to a user operation of selecting a target recognition mode, wherein the first mapping relationship represents the relationship between the MAC address information, IPv4 address information and user group of the terminal.
  • the generating module 52 is used to generate a second mapping relationship between the IPv6 address information of the terminal and the user group according to the first mapping relationship and the message.
  • the traffic policy determination module 53 is used to determine the traffic policy of the IPv6 address information according to the second mapping relationship.
  • the target identification mode is any one of a controller identification mode, a local Ethernet virtual private network EVPN identification mode, and a local gateway identification mode.
  • the acquisition module 51 is specifically used to: in response to a user operation of selecting the controller identification mode, acquire the first mapping relationship of the terminal and the message based on the controller.
  • the generating module 52 is specifically configured to: parse the message based on the controller to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the controller generates a second mapping relationship between the IPv6 address information and the user group based on the third mapping relationship and the first mapping relationship, so that the policy execution node determines the traffic policy of the IPv6 address information according to the second mapping relationship.
  • the acquisition module 51 is further used to: in response to a user operation of selecting the local EVPN identification mode, acquire the first mapping relationship of the terminal based on the controller, and acquire the message of the terminal based on the policy execution node.
  • the generating module 52 is further configured to: send the first mapping relationship to the policy execution node based on the controller, and parse the message based on the policy execution node to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the policy execution node generates a second mapping relationship between the IPv6 address information and the user group based on the third mapping relationship and the first mapping relationship.
  • the acquisition module 51 is further configured to: in response to a user operation of selecting the local gateway identification mode, acquire the first mapping relationship of the terminal based on the controller, and acquire the message of the terminal based on the gateway.
  • the generating module 52 is further configured to: send the first mapping relationship to the gateway based on the controller, and parse the message based on the gateway to obtain a third mapping relationship between the MAC address information and the IPv6 address information of the terminal.
  • the gateway generates a second mapping relationship between the IPv6 address information and the user group based on the third mapping relationship and the first mapping relationship.
  • the above-mentioned traffic strategy determination device generates a second mapping relationship between the IPv6 address information and the user group, and determines the traffic strategy of the IPv6 address information according to the second mapping relationship, thereby realizing the policy accompanying the terminal IPv6 service traffic.
  • the traffic strategy determination device may be a policy execution node.
  • the device includes: an acquisition module 71, used to obtain first information and a first mapping relationship, wherein the first information corresponds to a first message from a gateway, the first information indicates a first correspondence between an IPv6 address of a terminal and a MAC address of the terminal; and the first mapping relationship indicates a relationship between an Internet Protocol version 4 IPv4 address of the terminal, the MAC, and a traffic policy corresponding to the IPv4 address of the terminal.
  • an acquisition module 71 used to obtain first information and a first mapping relationship, wherein the first information corresponds to a first message from a gateway, the first information indicates a first correspondence between an IPv6 address of a terminal and a MAC address of the terminal; and the first mapping relationship indicates a relationship between an Internet Protocol version 4 IPv4 address of the terminal, the MAC, and a traffic policy corresponding to the IPv4 address of the terminal.
  • the traffic policy determination module 72 is used to determine the traffic policy corresponding to the IPv6 address of the terminal based on the first information and the first mapping relationship.
  • an electronic device is also provided in an embodiment of the present application, and the electronic device can realize the function of the aforementioned traffic strategy determination device.
  • the electronic device includes: at least one processor 61, and a memory 62 connected to at least one processor 61.
  • the specific connection medium between the processor 61 and the memory 62 is not limited in the embodiment of the present application.
  • Figure 7 takes the connection between the processor 61 and the memory 62 through the bus 60 as an example.
  • the bus 60 is represented by a thick line in Figure 7, and the connection method between other components is only for schematic illustration and is not limited.
  • the bus 60 can be divided into an address information bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in Figure 7, but it does not mean that there is only one bus or one type of bus.
  • the processor 61 can also be called a controller, and there is no restriction on the name.
  • the memory 62 stores instructions that can be executed by at least one processor 61, and the at least one processor 61 can execute the traffic strategy determination method discussed above by executing the instructions stored in the memory 62.
  • the processor 61 can implement the functions of each module in the device shown in Figures 6 and 8.
  • the processor 61 is the control center of the device, and can use various interfaces and lines to connect the various parts of the entire control device.
  • the processor 61 By running or executing instructions stored in the memory 62 and calling data stored in the memory 62, the various functions of the device and processing data, the device can be monitored as a whole.
  • the processor 61 may include one or more processing units, and the processor 61 may integrate an application processor and a modem processor, wherein the application processor mainly processes an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communications. It is understandable that the modem processor may not be integrated into the processor 61.
  • the processor 61 and the memory 62 may be implemented on the same chip, and in some embodiments, they may also be implemented separately on separate chips.
  • the processor 61 may be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, and may implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of the present application.
  • a general-purpose processor may be a microprocessor or any conventional processor, etc.
  • the steps of the traffic policy determination method disclosed in the embodiments of the present application may be directly embodied as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.
  • the memory 62 is a non-volatile computer-readable storage medium that can be used to store non-volatile software programs, non-volatile computer executable programs, and modules.
  • the memory 62 may include at least one type of storage medium, such as a flash memory, a hard disk, a multimedia card, a card-type memory, a random access memory, or a memory card.
  • the memory 62 is any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by the computer, but is not limited to this.
  • the memory 62 in the embodiment of the present application can also be a circuit or any other device that can realize the storage function, used to store program instructions and/or data.
  • the code corresponding to the traffic policy determination method described in the above embodiment can be fixed into the chip, so that the chip can execute the steps of the traffic policy determination method of the embodiment shown in Figures 1 and 5 when running.
  • How to design and program the processor 61 is a technology known to those skilled in the art and will not be described in detail here.
  • an embodiment of the present application further provides a storage medium, which stores computer instructions.
  • the computer instructions When the computer instructions are executed on a computer, the computer executes the traffic strategy determination method discussed above.
  • various aspects of the traffic policy determination method provided in the present application can also be implemented in the form of a program product, which includes a program code.
  • the program product When the program product is run on an apparatus, the program code is used to enable the control device to execute the steps of the traffic policy determination method according to various exemplary embodiments of the present application described above in this specification.
  • the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.
  • a computer-usable storage media including but not limited to disk storage, CD-ROM, optical storage, etc.
  • These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device that implements the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

La présente demande divulgue un procédé de détermination de politique de trafic, un dispositif électronique, et un support de stockage. Le procédé est appliqué à un nœud d'exécution de politique et comprend les étapes suivantes : acquisition de premières informations, les premières informations correspondant à un premier paquet provenant d'une passerelle, et les premières informations indiquant une première correspondance entre une adresse de protocole Internet version 6 (IPv6) d'un terminal et une adresse de contrôle d'accès au support (MAC) du terminal ; acquisition d'une première relation de mappage, la première relation de mappage indiquant une relation entre une adresse de protocole Internet version 4 (IPv4) du terminal, le MAC, et une politique de trafic correspondant à l'adresse IPv4 du terminal ; et sur la base des premières informations et de la première relation de mappage, détermination d'une politique de trafic correspondant à l'adresse IPv6 du terminal.
PCT/CN2024/114881 2023-09-07 2024-08-27 Procédé de détermination de politique de trafic, dispositif électronique, et support de stockage Pending WO2025051027A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202311149908.4A CN119583447A (zh) 2023-09-07 2023-09-07 一种策略随行方法、装置及电子设备
CN202311149908.4 2023-09-07

Publications (1)

Publication Number Publication Date
WO2025051027A1 true WO2025051027A1 (fr) 2025-03-13

Family

ID=94800898

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2024/114881 Pending WO2025051027A1 (fr) 2023-09-07 2024-08-27 Procédé de détermination de politique de trafic, dispositif électronique, et support de stockage

Country Status (2)

Country Link
CN (1) CN119583447A (fr)
WO (1) WO2025051027A1 (fr)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102025641A (zh) * 2010-12-27 2011-04-20 中兴通讯股份有限公司 一种报文过滤方法和交换设备
EP2506613A2 (fr) * 2009-11-26 2012-10-03 Samsung SDS Co. Ltd. Système et procédé pour la gestion d'adresses ipv6 et politique d'accès
CN104753793A (zh) * 2013-12-26 2015-07-01 联芯科技有限公司 在无状态IPv6配置下有状态管理接入终端的方法
CN110650075A (zh) * 2018-06-26 2020-01-03 华为技术有限公司 基于vxlan的组策略实现方法、网络设备和组策略实现系统
CN110958334A (zh) * 2019-11-25 2020-04-03 新华三半导体技术有限公司 报文处理方法及装置

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2506613A2 (fr) * 2009-11-26 2012-10-03 Samsung SDS Co. Ltd. Système et procédé pour la gestion d'adresses ipv6 et politique d'accès
CN102025641A (zh) * 2010-12-27 2011-04-20 中兴通讯股份有限公司 一种报文过滤方法和交换设备
CN104753793A (zh) * 2013-12-26 2015-07-01 联芯科技有限公司 在无状态IPv6配置下有状态管理接入终端的方法
CN110650075A (zh) * 2018-06-26 2020-01-03 华为技术有限公司 基于vxlan的组策略实现方法、网络设备和组策略实现系统
CN110958334A (zh) * 2019-11-25 2020-04-03 新华三半导体技术有限公司 报文处理方法及装置

Also Published As

Publication number Publication date
CN119583447A (zh) 2025-03-07

Similar Documents

Publication Publication Date Title
CN113950816B (zh) 使用边车代理机构提供多云微服务网关的系统和方法
US11563681B2 (en) Managing communications using alternative packet addressing
US12010030B2 (en) FlowSpec message processing method and system, and apparatus
CN107409089B (zh) 一种在网络引擎中实施的方法及虚拟网络功能控制器
CN107733670B (zh) 一种转发策略配置方法和装置
RU2595517C2 (ru) Объекты виртуального сетевого интерфейса
KR102047197B1 (ko) 사물 인터넷을 위한 광역 서비스 발견
US8767737B2 (en) Data center network system and packet forwarding method thereof
US9485147B2 (en) Method and device thereof for automatically finding and configuring virtual network
US8988983B1 (en) Managing failure behavior for computing nodes of provided computer networks
US10868720B2 (en) Data driven orchestrated network using a voice activated light weight distributed SDN controller
WO2022001669A1 (fr) Procédé permettant d'établir un tunnel vxlan et dispositif associé
CN101009683A (zh) 处理网络流量的计算机系统及方法
CN114745263B (zh) 用于服务基础设施的自主配置系统
CN108259356B (zh) 路由控制方法和装置
US20210273915A1 (en) Multi-access interface for internet protocol security
CN120567769A (zh) 多sdn集群间的路由同步方法、装置、系统、设备及介质
CN116170409B (zh) 一种基于虚拟域名的sd-wan网络地址规划系统
WO2024067338A1 (fr) Système de réseau en nuage, procédé d'accès sécurisé, et dispositif et support de stockage
EP3503484B1 (fr) Procédés et dispositifs de transmission de messages
WO2012075768A1 (fr) Procédé et système de contrôle de réseau de séparation de localisateur/identifiant
WO2025051027A1 (fr) Procédé de détermination de politique de trafic, dispositif électronique, et support de stockage
CN113545130A (zh) 利用分布式散列的无线客户端的快速漫游和统一策略
CN112929193B (zh) 用于配置介质访问控制地址老化时间的方法和装置
CN108259292B (zh) 建立隧道的方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 24861871

Country of ref document: EP

Kind code of ref document: A1