System and implementation method of controlled multicast

A controlled multicast system, comprising:

• an Ethernet switch;
• a multicast router,
• wherein:
• the Ethernet switch connects with each of a plurality of hosts in a downlink, and connects with the multicast router in an uplink,
• the multicast router connects with a multicast router of other systems in the uplink,
• the Ethernet switch implementing multicast exchange of a layer 2, and
• an IGMP V2 protocol is adopted as group management protocol between the Ethernet switch and the host;
• wherein the controlled multicast system further comprises:
• a portal server, connecting with the multicast router and providing an interface of user access authentication;
• an authentication sewer, storing configuration of privilege for the host which wants to join in the multicast group;
• wherein:
• the multicast router and the authentication server are configured to adopt a Client-sewer structure by which the authentication server authenticates identification of the host to join in a multicast group with information inputted through the interface provided by the portal sewer, and
• the multicast router records a User ID and a vlan ID corresponding to the User ID of the authenticated host and then distributes control commands according to results of the authentication to control multicast forwarding operations of the Ethernet switch;
• configuration of privilege comprises a corresponding relation between the User ID of the host and a address of multicast group in which the host wants to join;
• the information inputted through the interface provided by the portal server comprises the User ID and a password;
• each port through which the host is connected to the Ethernet switch is a vlan port;
• wherein the authentication sewer in the system further for, after receiving an extended RADIUS authentication message from the multicast router, of which attributes include the User ID as the user name and the address of multicast group in which the host wants to join, detecting whether to accept the host joining in the multicast group based on the configuration of privilege;
• responding with an acceptance message to the multicast router if the host has suitable privilege, otherwise returning a reject message;
• wherein the multicast router in the system further for, after receiving an IGMP Membership Report message from the Ethernet switch, according to the vlan ID in the message, searching the corresponding User ID in a multicast access privilege table of the multicast router, and then sending the said extended RADIUS authentication message, to the authentication server;
• after receiving the acceptance message from the authentication server, writing the address of the multicast group in which the host can join into the said multicast access privilege table, and implementing a routine disposal on join messages of the host, then generating a Join message, which comprises the vlan ID corresponding to the port that links with the host which wants to join in the multicast group, the address of the multicast group that is applied for, and a Join command field, and then transmitting to the Ethernet switch moreover, completing a routine processing of creating multicast forwarding tree on the IGMP Membership Report message;
• doing nothing after receiving the reject message;
• the Ethernet switch for, forwarding the IGMP Membership Report message from the host, wherein the IGMP Membership Report message forwarded to the multicast router port carries with the vlan ID of the host;
• after receiving the Join message from the multicast router, searching the MAC address corresponding to the address of the multicast group in the forwarding table;
• if the entry corresponding with the MAC address is found, obtaining the port number of the host via searching in the forwarding table with the vlan ID in the Join message, and then adding the port number into the said entry;
• if nothing is found, adding an entry in the forwarding table, which comprises the MAC address corresponding to the multicast address, the port number of the host which applies to join in the multicast group, and the port number of the multicast router connected with the Ethernet switch;
• after receiving a multicast flow from the multicast router, forwarding it to ports of the Ethernet switch with the current forwarding table.