CN101237699A - Control method for establishing multi-tunnel between wireless network node and access server - Google Patents

Abstract

A control method used to establish multiple tunnels between a wireless network node and an access server comprises the following steps: the capacity identification whether the access server supports an independent reverse tunnel is stored in a wireless control point; the wireless network node sends a conversation information request to the wireless control point after receiving a conversation update notification sent by a terminal; the wireless control point carries the identification in the conversation information response sent back to the wireless network node; after the wireless network node with concentrated terminal routes is turned into a data attachment point, whether the access server supports the independent reverse tunnel is judged according to the receives identification when a tunnel establishment request is sent to the access server; if the access server supports the independent reverse tunnel, a tunnel type identification which supports a reverse tunnel and a main tunnel at the same time is carried in the tunnel establishment request; otherwise, a tunnel type identification which supports a main tunnel is carried in the tunnel establishment request. Compared with the prior art, the control method effectively increases route adding efficiency and reduces the overhead and the load of a wireless communication system.

Description

Control method for establishing multi-tunnel between wireless network node and access server

technical field

The invention relates to the communication field, in particular to a control method for establishing multi-tunnels between wireless network nodes and access servers in a wireless communication network.

Background technique

In order to ensure the convenience of switching across wireless network nodes, a separate reverse tunnel needs to be established between the wireless network nodes that support independent reverse tunnels and the access server. There are multiple independent reverse tunnels between the servers, so that the reverse data can be directly sent from the wireless network node to the access server and the realization of switching.

The establishment of a reverse tunnel requires the access server to have the capability of an independent reverse tunnel. The operation of tunnel establishment will be performed when the user accesses and the route is added. It is mainly completed by the cooperation of the wireless network node, the wireless control point and the access server. The function of establishing multiple tunnels of the terminal.

FIG. 1 is a reference model diagram of an architecture of an existing network for implementing packet data user access. Wherein, in order to provide packet data service, the wireless network node and the access server exchange media messages, maintain and control the data link. As the signaling functional entity of the wireless access network, the wireless control point is responsible for functions such as session storage, paging and location management, idle state management, and access authentication. The authentication authorization server performs access authentication and user authentication for terminal access. Authorized features. Any wireless network node supporting an independent reverse tunnel in the routing set of the terminal will establish a separate reverse tunnel with the access server capable of independent reverse tunneling. Therefore, if the wireless network node 1 and the wireless network node 2 exist in the routing set of the terminal, they will respectively establish independent reverse tunnels with the access server.

Figure 2 shows a simplified flow of multi-tunnel establishment when a user initially accesses an existing wireless communication network, and the specific steps are as follows:

Step 201, when the user terminal accesses, perform access authentication and authorization operations by communicating with the wireless control point, the access server, and the authentication and authorization server;

Step 202, after the access authentication succeeds, the authentication authorization server returns an authentication response to the access server, which includes the authorization information of the user;

Step 203, the access server sends an authentication response to the wireless control point, and the message carries authentication authorization session ID, service quality parameters and other information;

Step 204, after receiving the authentication response message, the wireless control point sends an authentication success response to the terminal;

Step 205, the wireless control point and the terminal perform session information configuration;

Step 206, after the session information configuration is completed, the terminal sends a session update request to all wireless network nodes (such as wireless network node 1, etc.) in the routing set, and notifies the wireless network nodes to perform session update;

Step 207, after receiving the session update notification, the wireless network node requests session information from the wireless control point;

Step 208, the wireless control point responds to the wireless network node with session information, which carries information such as access server address and user name;

Step 209, the wireless network node transmits the access server identifier (which may be composed of the IP address of the access server) to the terminal, so that the terminal can judge whether it is necessary to perform the operation of applying for an IP address;

Step 210 (optional), the terminal initiates a data attachment point movement request to wireless network node 1, requesting wireless network node 1 to become a data attachment point;

Since the wireless network node 1 can also be judged by the network as a data attachment point, that is, the wireless network node 1 can know that it will be a data attachment point without requiring the terminal to initiate a request trigger, so this step is optional;

Step 211, the wireless network node 1 requests the access server to establish a tunnel, carrying the tunnel type identifier: both reverse tunnel and main tunnel are supported;

Step 212, if the access server supports an independent reverse tunnel, return a response that the reverse tunnel and the main tunnel are successfully established to the wireless network node 1; otherwise, if the access server does not support an independent reverse tunnel, then respond to the wireless network node 1 The response of 1 carries the information that the establishment of the reverse tunnel failed, and only the main tunnel is established between the wireless network nodes 1;

Step 213, the wireless network node 1 notifies the terminal that the allocation of the data attachment point is completed;

Step 214, the wireless network node 1 notifies the active set member data attachment point information of the terminal;

Step 215, the terminal requests IP address allocation, and obtains the IP address through the access server.

Assuming that wireless network node 1 has established a main tunnel connection with the access server, when the terminal determines that wireless network node 2 needs to be added to its routing set, the control method for establishing a reverse tunnel between wireless network node 2 and the access server And the specific steps are as follows:

Step 301, the terminal sends a route addition request to the wireless network node 2, requesting that the wireless network node 2 be added to the routing set;

Step 302, the wireless network node 2 sends a session information request to the wireless control point, requesting to obtain session information, such as access server address, user name, etc.;

Step 303, after receiving the session request message, the wireless control point sends the session information to the wireless network node 2;

Step 304, the wireless network node 2 initiates a reverse tunnel establishment request to the access server, and the request carries a tunnel type identifier: reverse tunnel is supported;

Step 305, if the access server supports an independent reverse tunnel, respond to the wireless network node 2 with a tunnel establishment success message; otherwise, respond to the wireless network node 2 with a tunnel establishment failure message;

Step 306, the wireless network node 2 sends a route addition response to the terminal, notifying the terminal that the route addition is successful.

It can be seen from the above process that when the terminal performs initial access and route addition, regardless of whether the access server has the capability of independent reverse tunneling, the wireless network node will request the operation of tunnel establishment from the access server, if the access server does not support The independent reverse tunnel will reject the reverse tunnel establishment request, see step 212 and step 305, thus, even if the access server does not support the independent reverse tunnel, the wireless network node will initiate the reverse tunnel establishment request, thereby It causes waste of system resources and increases network burden.

Contents of the invention

The technical problem to be solved by the present invention is to provide a control method for establishing multiple tunnels between a wireless network node and an access server, which can effectively improve the efficiency of route addition and reduce the overhead and burden of the wireless communication system.

In order to solve the above problems, the present invention provides a control method for establishing multiple tunnels between a wireless network node and an access server, comprising the following steps:

During the authentication and authorization process of the terminal's initial access, the access server sends its support capability identifier for the independent reverse tunnel to the wireless control point, and the wireless control point saves the identifier after receiving it;

After receiving the session update notification sent by the terminal, the wireless network node in the terminal routing group initiates a session information request to the wireless control point; after receiving the session information request, the wireless control point carries the session information response to the wireless network node. logo;

After the wireless network node in the terminal routing set becomes a data attachment point, when it initiates a tunnel establishment request to the access server, it judges whether the access server supports an independent reverse tunnel according to the received identifier, and if so, it The establishment request carries the tunnel type identifier supporting both the reverse tunnel and the main tunnel; otherwise, the tunnel establishment request carries the tunnel type identifier supporting the main tunnel.

Further, during the initial access authentication and authorization process of the terminal, the identification of the support capability of the access server for the independent reverse tunnel is sent to the wireless control point through the following steps:

The terminal performs access authentication and authorization during initial access through the wireless control point, the access server, and the authentication and authorization server. After the access authentication is successful, the authentication and authorization server returns the authentication response to the access server. The ingress server sends the authentication response to the wireless control point, and carries the identifier in the authentication response message.

Further, after receiving the authentication response message, the wireless control point saves the identifier carried in the authentication response message.

Further, after the authentication and authorization of the terminal's initial access is successful, a wireless network node in the terminal routing set is requested by the terminal or judged by the network to become a data attachment point.

The present invention also provides a control method for establishing multiple tunnels between a wireless network node and an access server, comprising the following steps:

During the authentication and authorization process of the terminal's initial access, the access server's support capability identifier for the independent reverse tunnel is sent to the wireless control point, and the wireless control point saves the identifier after receiving it;

After receiving the route addition request initiated by the terminal, the wireless network node initiates a session information request to the wireless control point, and the wireless control point carries the identifier in the session information responded to the wireless network node after receiving the session information request;

After receiving the identifier, the wireless network node judges whether the access server supports an independent reverse tunnel according to the identifier, and if so, initiates a reverse tunnel establishment request to the access server, and carries a support echo in the tunnel establishment request. Tunnel type identifier for the tunnel.

Further, during the initial access authentication and authorization process of the terminal, the identification of the support capability of the access server for the independent reverse tunnel is sent to the wireless control point through the following steps:

The terminal performs access authentication and authorization during initial access through the wireless control point, the access server, and the authentication and authorization server. After the access authentication is successful, the authentication and authorization server returns the authentication response to the access server. The ingress server sends the authentication response to the wireless control point, and carries the identifier in the authentication response message.

Further, before the terminal initiates the route addition request to the wireless network node, a certain wireless network node in the terminal route set has established a main tunnel connection with the access server.

Compared with the prior art, the method of the present invention saves the capability identifier of whether the access server supports an independent reverse tunnel in the wireless control point, and when the wireless network node is added to the terminal routing set, the access server can be obtained from the wireless control point. The ability identification of the server, thereby solving the problem that the wireless network node will request the access server to establish a tunnel no matter whether the access server has the ability of an independent reverse tunnel when the terminal adds a route in the prior art; and effectively The efficiency of route addition is improved, and the overhead and burden of the wireless communication system are reduced.

Description of drawings

FIG. 1 is a schematic diagram of a wireless communication network architecture;

Fig. 2 is a flow chart of user's initial access in the existing wireless communication network;

Fig. 3 is a flowchart of adding a wireless network node to a terminal routing set in an existing wireless communication network;

Fig. 4 is a flow chart of realizing the initial access of users in the wireless communication network in the preferred mode of the present invention;

Fig. 5 is a flow chart of adding a wireless network node to a terminal routing set in a wireless communication network in a preferred manner of the present invention.

Detailed ways

In order to better describe the implementation features and methods of the present invention, the implementation of the technical solution will be further described in detail below in conjunction with the accompanying drawings, wherein both the wireless network node 1 and the wireless network node 2 support the establishment of multiple tunnels.

Fig. 4 is the flow chart that realizes the user's initial access in the wireless communication network in the preferred mode of the present invention, and its control method and specific steps are as follows:

Step 401, when the mobile terminal accesses, through the wireless control point, the access server communicates with the authentication and authorization server to perform access authentication and authorization operations;

Step 402, after the access authentication is successful, the authentication authorization server returns an authentication response to the access server, which includes the authorization information of the user;

Step 403, the access server sends an authentication response to the wireless control point, and the message carries the identification of the access server's ability to support the independent reverse tunnel;

Step 404, after receiving the authentication response message, the wireless control point saves the identification of the support capability of the access server for the independent reverse tunnel, so as to transmit the information to the wireless network node 1; after that, the wireless control point sends an authentication success message to the terminal response;

Step 405, the wireless control point and the terminal perform session information configuration;

Step 406, after the session information configuration is completed, the terminal notifies all wireless network nodes in the routing set (such as wireless network node 1 in the figure) to update the session;

Step 407, after receiving the session update notification, the wireless network node 1 requests session information from the wireless control point;

Step 408, the wireless control point responds to the wireless network node 1 with the session information, which carries the identification of the support capability of the access server for the independent reverse tunnel;

Step 409, the wireless network node 1 transmits the access server identifier to the terminal, so that the terminal can judge whether it needs to perform the operation of applying for an IP address;

Step 410 (optional), the terminal initiates a data attachment point movement request to wireless network node 1, requesting wireless network node 1 to become a data attachment point;

Step 411, the wireless network node 1 checks the support capability identification of the access server for the independent reverse tunnel, if the access server supports the independent reverse tunnel, the wireless network node 1 requests the access server to establish a tunnel, carrying the tunnel type identification: at the same time Support reverse tunnel and main tunnel. If the access server does not support independent reverse tunnel, wireless network node 1 requests the access server to establish a tunnel, carrying the tunnel type identifier: support main tunnel;

Step 412, the access server returns a tunnel establishment response to the wireless network node 1;

Step 413, the wireless network node 1 notifies the terminal that the assignment of the data attachment point is completed;

Step 414, the wireless network node 1 notifies the active set member data attachment point information of the terminal;

Step 415, the terminal requests the distribution of the IP address, and obtains the IP address through the access server.

It can be seen from the above process that when the terminal initially accesses, after receiving the wireless network node establishment tunnel request, if the access server does not support the independent reverse tunnel, the wireless network node will only initiate the main tunnel establishment request, Instead of initiating a reverse tunnel establishment request, see step 410, thereby preventing the access server from responding to the information that the reverse tunnel establishment failed in the response message, see step 211 in FIG. 2, thus simplifying the processing response of the access server .

Fig. 5 is a flow chart of adding a wireless network node to a terminal routing set in a wireless communication network in a preferred manner of the present invention. Assuming that wireless network node 1 is already in the routing set of the terminal, and has established a main tunnel connection with the access server, when the terminal judges that wireless network node 2 needs to be added to its routing set, it will establish a connection between wireless network node 2 and the access server. The control method and specific steps of the reverse tunnel are as follows:

Step 501, the terminal requests to add the wireless network node 2 into the routing set;

Step 502, the wireless network node 2 requests the wireless control point to obtain session information, such as access server address, user name, etc.;

Step 503, after receiving the session request message, the wireless control point sends the session information to the wireless network node 2, including the identification of the access server's ability to support the independent reverse tunnel;

Step 504, the wireless network node 2 checks the support capability identifier of the access server for the independent reverse tunnel, and if the access server supports the independent reverse tunnel, the wireless network node 2 requests the access server to establish a tunnel, carrying the tunnel type identifier: support For a reverse tunnel, if the access server does not support an independent reverse tunnel, there is no need to initiate a tunnel establishment operation, and the process will go to step 506;

Step 505, the access server responds to the wireless network node 2 with a tunnel establishment message;

Step 506, the wireless network node 2 informs the terminal that the route is added successfully.

It can be seen from the above flow that when adding a route, if the access server does not support an independent reverse tunnel, the wireless network node will no longer request to establish a reverse tunnel, see step 504, thus omitting the In step 305, therefore, the efficiency of route addition can be improved, and the overhead and burden of the wireless communication system can be effectively reduced.

The invention realizes a control method for establishing multi-tunnels between wireless network nodes and access servers in the wireless communication network under the condition of minimum modification and influence on the existing system.

In addition to the wireless communication system, the location update process in the above embodiment can also be applied to other systems that adopt the same method as mentioned in the background technology. When applied to other systems, the messages used may be different, but the logic in the process Relationships are the same.

Claims (7)

1. A control method for establishing multiple tunnels between a wireless network node and an access server, comprising the following steps: During the authentication and authorization process of the terminal's initial access, the access server sends its support capability identifier for the independent reverse tunnel to the wireless control point, and the wireless control point saves the identifier after receiving it; After receiving the session update notification sent by the terminal, the wireless network node in the terminal routing group initiates a session information request to the wireless control point; after receiving the session information request, the wireless control point carries the session information response to the wireless network node. logo; After the wireless network node in the terminal routing set becomes a data attachment point, when it initiates a tunnel establishment request to the access server, it judges whether the access server supports an independent reverse tunnel according to the received identifier, and if so, it The establishment request carries the tunnel type identifier supporting both the reverse tunnel and the main tunnel; otherwise, the tunnel establishment request carries the tunnel type identifier supporting the main tunnel. 2. The method according to claim 1, characterized in that, in the initial access authentication and authorization process of the terminal, the access server is sent to the wireless control point by the following steps: The terminal performs access authentication and authorization during initial access through the wireless control point, the access server, and the authentication and authorization server. After the access authentication is successful, the authentication and authorization server returns the authentication response to the access server. The ingress server sends the authentication response to the wireless control point, and carries the identifier in the authentication response message. 3. The method of claim 2, wherein: After receiving the authentication response message, the wireless control point saves the identifier carried in the authentication response message. 4. The method of claim 1, wherein: After the authentication and authorization of the terminal's initial access is successful, a wireless network node in the terminal routing set is requested by the terminal or judged by the network to become a data attachment point. 5. A control method for establishing multiple tunnels between a wireless network node and an access server, comprising the following steps: During the authentication and authorization process of the terminal's initial access, the access server's support capability identifier for the independent reverse tunnel is sent to the wireless control point, and the wireless control point saves the identifier after receiving it; After receiving the route addition request initiated by the terminal, the wireless network node initiates a session information request to the wireless control point, and the wireless control point carries the identifier in the session information responded to the wireless network node after receiving the session information request; After receiving the identifier, the wireless network node judges whether the access server supports an independent reverse tunnel according to the identifier, and if so, initiates a reverse tunnel establishment request to the access server, and carries a support echo in the tunnel establishment request. Tunnel type identifier for the tunnel. 6. The method according to claim 5, characterized in that, during the initial access authentication and authorization process of the terminal, the identification of the support capability of the access server for the independent reverse tunnel is sent to the wireless control point through the following steps: The terminal performs access authentication and authorization during initial access through the wireless control point, the access server, and the authentication and authorization server. After the access authentication is successful, the authentication and authorization server returns the authentication response to the access server. The ingress server sends the authentication response to the wireless control point, and carries the identifier in the authentication response message. 7. The method of claim 5, wherein: Before the terminal initiates the route adding request to the wireless network node, a certain wireless network node in the terminal route set has established a main tunnel connection with the access server.

Images