Access control method and apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorsYating Xiao, Qianqian Wu
Life of this patent
Estimating the term…
Abstract
An access control method. A BNG CP may receive a first message from first user equipment. The first message is used by the first user equipment to request to access a network, a primary gateway through which the first user equipment accesses the network is a first BNG, and a backup gateway through which the first user equipment accesses the network is a second BNG. After receiving the first message, the BNG CP may determine, from a first network segment, an IP address assigned to the first user equipment, and send the IP address of the first user equipment to the first user equipment. The first network segment is only used to assign an IP address to user equipment that accesses the network by using the first BNG as a primary gateway and the second BNG as a backup gateway.
Claims17
An access control method, performed by a virtual broadband network gateway control plane (vBNG CP) in a virtual broadband network gateway (vBNG) system in which the vBNG CP and a user plane (UP) are separated, the method comprising:
- receiving a first message from first user equipment, wherein the first message is used by the first user equipment to request to access a network, a primary gateway through which the first user equipment accesses the network is a first UP in the vBNG system, and a backup gateway through which the first user equipment accesses the network is a second UP in the vBNG system;
- determining, from a first network segment based on the first message, an Internet Protocol (IP) address assigned to the first user equipment, wherein the first network segment is used to assign the IP address to user equipment that accesses the network by using the first UP as a primary gateway and the second UP as a backup gateway;
- and sending the IP address of the first user equipment to the first user equipment;
- receiving a second message from second user equipment, wherein the second message is used by the second user equipment to request to access the network, a primary gateway through which the second user equipment accesses the network is the first UP, and a backup gateway through which the second user equipment accesses the network is a third UP in the vBNG system;
- determining, from a second network segment based on the second message, an IP address assigned to the second user equipment, wherein the second network segment is used to assign the IP address to user equipment that accesses the network by using the first UP as a primary gateway and the third UP as a backup gateway, and the first network segment is different from the second network segment;
- and
- sending the IP address of the second user equipment to the second user equipment.
An access control apparatus, applied to a virtual broadband network gateway control plane (vBNG CP) in a virtual broadband network gateway (vBNG) system in which the vBNG CP and a user plane (UP) are separated, the apparatus comprising:
- at least one processor;
- one or more memories coupled to the at least one processor and storing programming instructions, wherein the at least one processor is configured to execute the programming instructions to cause the apparatus to:
- receive a first message from first user equipment, wherein the first message is used by the first user equipment to request to access a network, a primary gateway through which the first user equipment accesses the network is a first UP in the vBNG system, and a backup gateway through which the first user equipment accesses the network is a second UP in the vBNG system;
- determine, from a first network segment based on the first message, an Internet Protocol (IP) address assigned to the first user equipment, wherein the first network segment is used to assign the IP address to user equipment that accesses the network by using the first UP as a primary gateway and the second UP as a backup gateway, and the first network segment is not used to assign the IP address to user equipment that uses the first UP as a backup gateway and the second UP as a primary gateway;
- and send the IP address of the first user equipment to the first user equipment;
- wherein the programming instructions, when executed by the at least one processor, further cause the network device to:
- receive a second message from second user equipment, wherein the second message is used by the second user equipment to request to access the network, a primary gateway through which the second user equipment accesses the network is the first UP, and a backup gateway through which the second user equipment accesses the network is a third UP in the vBNG system;
- determine, from a second network segment based on the second message, an IP address assigned to the second user equipment, wherein the second network segment is used to assign the IP address to user equipment that accesses the network by using the first UP as a primary gateway and the third UP as a backup gateway, and the first network segment is different from the second network segment;
- and
- send the IP address of the second user equipment to the second user equipment.
A virtual broadband network gateway (vBNG) system, comprising:
- a virtual broadband network gateway control plane (vBNG CP) implemented on a server device;
- and
- at least one user plane (UP), wherein the vBNG CP and the at least one UP are separated, wherein the vBNG CP is configured to:
- receive a first message from first user equipment, wherein the first message is used by the first user equipment to request to access a network, a primary gateway through which the first user equipment accesses the network is a first UP in the vBNG system, and a backup gateway through which the first user equipment accesses the network is a second UP in the vBNG system;
- determine, from a first network segment based on the first message, an Internet Protocol (IP) address assigned to the first user equipment, wherein the first network segment is used to assign the IP address to user equipment that accesses the network by using the first UP as a primary gateway and the second UP as a backup gateway, and the first network segment is not used to assign the IP address to user equipment that uses the first UP as a backup gateway and the second UP as a primary gateway;
- and send the IP address of the first user equipment to the first user equipment;
- wherein the vBNG CP is further configured to:
- receive a second message from second user equipment, wherein the second message is used by the second user equipment to request to access the network, a primary gateway through which the second user equipment accesses the network is the first UP, and a backup gateway through which the second user equipment accesses the network is a third UP in the vBNG system;
- determine, from a second network segment based on the second message, an IP address assigned to the second user equipment, wherein the second network segment is used to assign the IP address to user equipment that accesses the network by using the first UP as a primary gateway and the third UP as a backup gateway, and the first network segment is different from the second network segment;
- and
- send the IP address of the second user equipment to the second user equipment.
Dependencies are inferred from the claim text.