Access control
AssigneeNew H3C Technologies Co., Ltd.
InventorHongshu Shi
Life of this patent
Estimating the term…
Abstract
A VXLAN Tunnel End Point (VTEP) sends an authentication request packet to an authentication server upon receiving a user access request from a user terminal, so as to cause the authentication server to perform an authentication for a user. The VTEP receives authorization information of the user for which the authentication is passed. The authorization information is sent by the authentication server, and includes a Virtual Switch Instance (VSI) identifier or a Virtual eXtensible LAN (VXLAN) identifier. The VTEP creates an Attachment Circuit (AC) interface on a user port connecting the user terminal of the VTEP. The VTEP associates the AC interface with the authorization information.
Claims14
A method of controlling access, comprising:
- sending, by a VXLAN Tunnel End Point VTEP, an authentication request packet to an authentication server upon receiving a user access request from a user terminal, so as to cause the authentication server to perform an authentication for a user;
- receiving, by the VTEP, authorization information of the user for which the authentication is passed, wherein the authorization information is sent by the authentication server and comprises a Virtual Switch Instance VSI identifier or a Virtual eXtensible LAN VXLAN identifier;
- creating, by the VTEP, upon the VTEP receiving the authorization information, an Attachment Circuit AC interface on a user port connecting the user terminal of the VTEP;
- and associating, by the VTEP, the AC interface with the authorization information,
- wherein the method further comprises:
- receiving, by the VTEP, a user packet from the user terminal through the user port;
- determining, by the VTEP, the AC interface corresponding to the user port, and at least one of:
- a source Media Access Control, MAC, address of the user packet and a Virtual Local Area Network, VLAN, identifier carried in the user packet;
- determining, by the VTEP, the authorization information associated with the determined AC interface;
- and
- obtaining, by the VTEP, a VXLAN packet by performing a VXLAN encapsulation on the user packet according to the authorization information;
- and
- sending out, by the VTEP, the obtained VXLAN packet.
A VXLAN Tunnel End Point VTEP device, comprising a processor and a non-transitory machine-readable storage medium storing machine-readable instructions which are executable by the processor to:
- send an authentication request packet to an authentication server upon receiving a user access request from a user terminal, so as to cause the authentication server to perform an authentication for a user;
- receive authorization information of the user for which the authentication is passed, wherein the authorization information is sent by the authentication server and comprises a Virtual Switch Instance VSI identifier or a Virtual eXtensible LAN VXLAN identifier;
- create, upon receiving the authorization information, an Attachment Circuit AC interface on a user port connecting the user terminal of the VTEP device;
- associate the AC interface with the authorization information;
- receive a user packet from the user terminal through the user port;
- determine the AC interface corresponding to the user port, and at least one of:
- a source Media Access Control, MAC, address of the user packet and a Virtual Local Area Network, VLAN, identifier carried in the user packet;
- determine the authorization information associated with the determined AC interface;
- obtain a VXLAN packet by performing a VXLAN encapsulation on the user packet according to the authorization information;
- and send out the obtained VXLAN packet.
Dependencies are inferred from the claim text.