Packet processing method, apparatus, and system, and storage medium

A network device, comprising:

• at least one processor;
• one or more memories coupled to the at least one processor and storing programming instructions that, when executed by the at least one processor, cause the network device to:
• obtain a first packet from a first source device connected to a first customer premises equipment (CPE), wherein the network device is connected to the CPE, the first source device and the CPE belong to a virtual private network (VPN), and the first packet comprises a first group identifier corresponding to the VPN on the network device;
• obtain a second group identifier based on a destination address of the first packet, wherein obtaining the second group identifier comprises performing a lookup in stored correspondence that maps the destination address to the second group identifier, the second group identifier corresponding to the VPN on another network device that is connected to a second CPE providing access to a destination device belonging to the VPN,
• determine, from stored correspondence information, a first processing policy for interconnection between the first CPE and the second CPE, wherein the stored correspondence information correlates the first group identifier and the second group identifier with a processing policy;
• and
• send the first packet to another network device based on the first processing policy, wherein the another network device corresponds to the VPN and is connected to a second CPE that provides access to a destination device belonging to the VPN.

A packet processing system, comprising a first network device and a second network device,

• wherein the second network device is configured to:
• obtain a first packet from a first source device connected to a first customer premises equipment (CPE), the first CPE being connected to the second network device, wherein the first source device and the first CPE belong to a virtual private network (VPN), and the first packet comprises a first group identifier corresponding to the VPN on the second network device;
• and
• send the first packet to the first network device;
• wherein the first network device is configured to:
• receive the first packet sent by the second network device;
• obtain a second group identifier based on a destination address of the first packet, wherein obtaining the second group identifier comprises performing a lookup in stored correspondence that maps a destination address to the second group identifier, and wherein the second group identifier corresponds to the VPN on a third network device connected to a second CPE, the second CPE being connected to a first destination device corresponding to the destination address of the first packet, and the first destination device belongs to the VPN;
• and
• process the first packet based on the first group identifier and the second group identifier by determining, from stored correspondence information, a first processing policy for interconnection between the first and second CPEs,
• wherein the stored correspondence information correlates the first group identifier and the second group identifier with a processing policy.