CN102006336A

CN102006336A - Allocation method and device of Internet protocol version 6 (IPv6) address prefixes

Info

Publication number: CN102006336A
Application number: CN2010105572545A
Authority: CN
Inventors: 王瑾
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2010-11-23
Filing date: 2010-11-23
Publication date: 2011-04-06
Anticipated expiration: 2030-11-23
Also published as: CN102006336B; WO2012068869A1

Abstract

The invention discloses an allocation method and device of Internet protocol version 6 (IPv6) address prefixes. The allocation method comprises the following steps: carrying out CLASS-MAP classification on virtual private network (VPN) users belonging to the same CIP user access group or different CIP user access groups; and allocating the same IPv6 address prefixes to the VPN users of the same class. By adopting the CLASS-MAP mode, the invention allocates the V6 prefixes to the VPN users so that the allocation of the V6 prefixes can be independent of domains or CIP user access groups, thereby realizing the flexible allocation of the V6 prefixes.

Description

The distribution method of IPv6 address prefix and device

Technical field

The present invention relates to the communications field, in particular to a kind of distribution method and device of IPv6 address prefix.

Background technology

In L2VPN (two-layer VPN), CIP is exactly the mapping virtual interface of UNI according to different CE-VLAN mapping policy correspondences, a UNI (User Network Interface, User Network Interface) down many mapping policys can be arranged, be mapped to respectively on the different CIP (ClientInterface Provider, user interface provides); And access link AC (AttachmentCircuit), i.e. connection between CE (Client Edge, customer edge) and the PE (Provider Edge, provider edge equipment), it can be the actual physical interface, also can be virtual interface.After VPN (Virtual Private Network, Virtual Private Network) user inserted by the CIP virtual interface, by V6 (being IPv6) user's Neighbor Discovery Protocol and prefix assignment, the V6 prefix that slave unit distributes obtained the IPV6 address.

Have the following disadvantages in the distribution method of above-mentioned existing IPv6 address prefix: the V6 prefix is bound mutually with territory Domain usually, use identical V6 prefix by the customer group that same CIP virtual interface inserts, the method of salary distribution of existing this V6 prefix is associated with user's physical port, makes that the distribution of V6 prefix is very dumb; In addition, the classification that VPN is inserted the user is limited to (the Virtual Path Identifier/VirtualChannel Identifier by vlan, vpi/vci substantially, identifier of the virtual route/tunnel sign) waits the coupling of two layers of resource to classify, make the mode classification underaction of CIP access customer group.

Summary of the invention

Main purpose of the present invention is to provide a kind of distribution method and device of IPv6 address prefix, to solve the inflexible problem of distribution of above-mentioned IPv6 address prefix at least.

According to an aspect of the present invention, provide a kind of distribution method of IPv6 address prefix, having comprised: inserted the group or belong to different CIP users and insert VPN user among the group and carry out the CLASS-MAP classification belonging to same CIP user; Distribute identical IPv6 address prefix for belonging to of a sort VPN user.

Further, insert the group or belong to different CIP users and insert VPN user among the group and carry out the CLASS-MAP classification and comprise belonging to same CIP user: QoS (the Quality of Service that uses VPN user, service quality) information, insert the group or belong to different CIP users and insert VPN user among the group belonging to same CIP user, classify according to match-all among the CLASS-MAP or match-any.

Further, it is one of following that QoS information comprises at least: DSCP (DifferentiatedService Code Point, differentiated services code points), MPLS-EXP (Multiple ProtocolLabel Switching EXP, multi protocol label exchange EXP territory).

Further, insert the group or belong to different CIP users and insert VPN user among the group and carry out before the CLASS-MAP classification belonging to same CIP user, also comprise: the VPN user of butt joint access customer network interface UNI carries out the CLASS-MAP classification according to predetermined condition, and will belong to of a sort VPN user and be mapped on the same CIP virtual interface; VPN user and corresponding access strategy binding with being mapped on the same CIP virtual interface insert customer group to form a CIP.

Further, the VPN user of butt joint access customer network interface UNI carries out the CLASS-MAP classification according to predetermined condition and comprises: according to predetermined condition VPN user is classified according to match-all among the CLASS-MAP or match-any.

Further, it is one of following that predetermined condition comprises at least: virtual local area network No. VLANID (Virtual Local Area Network Identifier, VLAN ID), SVLANID (Super VLAN Identifier, super VLAN ID), VPI (Virtual PathIdentifier, identifier of the virtual route), VCI (Virtual Channel Identifier, tunnel sign), the physical interface of link layer, network layer information, transport layer information.

Further, CIP access customer group is that L2VPN inserts customer group.

Further, access strategy is VFI (Virtual Forward Instance, a virtual forward direction example).

According to a further aspect in the invention, provide a kind of distributor of IPv6 address prefix, having comprised: first sort module is used for inserting the group or belonging to the VPN user that different CIP users insert the group and carry out the CLASS-MAP classification belonging to same CIP user; The prefix assignment module is used to belong to of a sort VPN user and distribute identical IPv6 address prefix.

Further, the distributor of IPv6 address prefix also comprises: second sort module is used for the VPN user who inserts UNI is carried out the CLASS-MAP classification according to predetermined condition; The CIP mapping block is used for being mapped to same CIP virtual interface with belonging to of a sort VPN user; The strategy binding module is used for being mapped to VPN user and corresponding access strategy binding on the same CIP virtual interface, to form a CIP access customer group.

By the present invention, utilize that CLASS-MAP can provide more comprehensively, the characteristics of user classification more flexibly, adopt the CLASS-MAP mode that the VPN user that CIP user inserts among the group is classified, make the distribution of V6 prefix can be independent of territory or CIP customer group, realized the flexible allocation of V6 prefix.

Description of drawings

Accompanying drawing described herein is used to provide further understanding of the present invention, constitutes the application's a part, and illustrative examples of the present invention and explanation thereof are used to explain the present invention, do not constitute improper qualification of the present invention.In the accompanying drawings:

Fig. 1 is the distribution method flow chart according to the IPv6 address prefix of the embodiment of the invention;

Fig. 2 is the distribution method flow chart according to the IPv6 address prefix of the embodiment of the invention one;

Fig. 3 is the distributor block diagram according to the IPv6 address prefix of the embodiment of the invention; And

Fig. 4 is another distributor block diagram according to the IPv6 address prefix of the embodiment of the invention.

Embodiment

Hereinafter will describe the present invention with reference to the accompanying drawings and in conjunction with the embodiments in detail.Need to prove that under the situation of not conflicting, embodiment and the feature among the embodiment among the application can make up mutually.

In order to understand embodiments of the invention better, below relational language related among the embodiment is explained as follows:

1, V6 prefix (PREFIX) is distributed with the stateless address of Neighbor Discovery Protocol

The method for expressing of IPv6 address prefix is similar to the IPv4 address prefix, and the IPv6 address prefix is expressed as: IPv6 address/prefix length, wherein prefix length is a decimal number, is used for decision and begins what composition prefixes from IPv6 address high order end.For example, 12AB:0D86:5454:6634: :/32 is correct prefixes.Prefix is found: the address prefix that node uses this mechanism to obtain the address prefix of link-local and need router to transmit.Router can given host use stateless to dispose (automatic address configuration) automatically, by the router and the prefix discovery mechanism of Neighbor Discovery Protocol, makes main frame according to the prefix generation IPV6 address of router for its distribution.

2, VBAS and AAA

VBAS (Virtual Broadband Access Server) is the english abbreviation of Virtual Broadband Access Server, it is a kind of vlan query protocol VLAN of between IP-DSLAM and BRAS equipment, expanding, adopt two layers of point-to-point communication mode between BRAS and the IP-DSLAM, i.e. port information inquiry and response message directly are encapsulated in two layers of ethernet data frame.

AAA is meant mandate (Authorization), authentication (Authentication) and charge (Accounting).Concerning the route switch, AAA can authenticate the user of visit multi-layer switches, prevents entering of disabled user, thereby improves the fail safe of equipment.

3, Domain (territory)

Domain is a template that is used to authenticate, charge, insert, but corresponding strategies and templates such as the following binding authentication in territory, charging, access.Bind with BAS logic interfacing in the territory again, and all users under the logic interfacing are come into force, and the V6 prefix also can be bound under the territory, acts on all users under the affiliated BAS logic interfacing in territory.

In existing AAA and V6 access technology, usually below the territory, bind a prefix list, the distribution with prefix of issuing of access authentication, charging policy is carried out in the territory by binding interface or sub-interface, and interface is classified to the user by binding vlan or resources such as vpi, vpc, is limited to coupling classification to two layers of resources such as vlan, vpi/vci substantially but the user who supports on switch or BRAS equipment at present inserts sorting technique.

4、Class-map

Originally Class-map is used for traffic classification, the match condition that has two kinds of rule of logic: match-all to be meant to define among this map be operational criterion, when that is to say the comparison matching condition, whether no matter go up the bar rule mates, continuing next bar rule of comparison finishes until the strictly all rules comparison, carry out the corresponding program action again, match-any is meant that the match condition that defines among this map is with mutually or be operational criterion, find a matching condition as long as that is to say, then exit criteria comparison directly enters program behavior.Class-map is compared to ACL, has the pigeon-hole principle of custom field more flexibly.Class-map provides a series of abundant professional occurrences, can determine a matching rule set according to the wall scroll or the combination of QOS priority, vlan id, mac address, interface message, and can determine between the occurrence with or logical relation, neatly target is classified.

Fig. 1 is the distribution method flow chart according to the IPv6 address prefix of the embodiment of the invention, and as shown in Figure 1, this distribution method may further comprise the steps:

Step S102 inserts the group or belongs to different CIP users and insert VPN user among the group and carry out the CLASS-MAP classification belonging to same CIP user;

Step S104 distributes identical IPv6 address prefix for belonging to of a sort VPN user.

In said method, utilize that CLASS-MAP can provide more comprehensively, the characteristics of user classification more flexibly, by adopting the CLASS-MAP mode VPN user that CIP user inserts among the group is classified, make the distribution of V6 prefix can be independent of territory or CIP customer group, realized the flexible allocation of V6 prefix.

Wherein, inserting the group or belonging to different CIP users and insert VPN user among the group and carry out CLASS-MAP and divide time-like belonging to same CIP user, with VPN quality of services for users QoS information, for example, differentiated services code points DSCP, MPLS-EXP, classify as the match-all of CLASS-MAP or the occurrence of match-any, promptly each occurrence is carried out logical AND/logic OR.

Wherein, CIP user is inserted VPN user among the group carry out also comprising before the CLASS-MAP classification: the VPN user who inserts UNI is carried out the CLASS-MAP classification according to predetermined condition, and will belong to of a sort VPN user and be mapped on the same CIP virtual interface; With the VPN user and corresponding access strategy binding that are mapped on the same CIP virtual interface, for example, binding VFI example inserts customer group with the CIP that forms a L2VPN.It is one of following that predetermined condition comprises at least: virtual local area network No. VLAN ID, SVLAN ID, VPI, VCI, the physical interface of link layer, network layer information, transport layer information.

In existing V6 access technology, usually below the territory, bind a prefix list, access authentication is carried out by binding interface or sub-interface in the territory, charging policy issue distribution with prefix, and interface is by binding vlan or vpi, resources such as vpc are classified to the user, but the user who supports on switch or BRAS equipment at present inserts sorting technique and is limited to substantially vlan, the coupling classification of two layers of resource such as vpi/vci, use class-map that user classification method more flexibly can be provided more comprehensively, not only pass through two layers physical interface or vlan, vpi/vci information is divided customer group, definition access scope can also be by three layers, four layers or other information and between combined information divide customer group.Divided customer group, can determine the access scope of VPN according to this, thereby inserted and transmitted service for the user in drawing the line provides.Be a plurality of V6 prefix lists of VPN user definition simultaneously, and bind corresponding class-map, can the user that CIP inserts under the customer group be segmented so again, and issue can with the irrelevant V6 prefix assignment strategy of physical port.

Fig. 2 is the distribution method flow chart according to the IPv6 address prefix of the embodiment of the invention one.In existing V6 prefix assignment mode, when the user reaches the standard grade from vlan id 10, svlan id 20, interface uses ethernet1/10.100, then vlan id 10, svlan id 20 and ethernet1/10.100 are defined as an access sub-interface, binding V6 prefix (PREFIX) under the territory of AAA, for example: 12AB:0D86:5454:6634: :/32, after authentification of user, it is the V6 prefix of its distribution with accepting device that under this sub-interface all insert the user, and generate the V6 address, carry this V6 address and authorize, charge.This example provides a kind of improved V6 prefix assignment method, as shown in Figure 2, may further comprise the steps:

Step S202, definition CIP100 inserts customer group.

Adopt the match-all definition class access1 of class-map, promptly between vlan id 10, svlanid 20, interface ethernet1/10.100 occurrence, adopt the mode of logical AND, the user who carries vlan id 10, svlan id 20 under this sub-interface can regard a CIP as and insert customer group, is called CIP 100.With other access strategies of class-map access1 and cip100,, make it to become a L2VPN and insert customer group as bindings such as vfi1.

Step S204, definition CIP200 inserts customer group.

Definition class-map access2, defined between vpi 100/vci 200, the interface ethernet1/10.200 adopt and logical operation, the user who promptly carries vpi100/vci200 under this sub-interface can regard one as and insert customer group, be called CIP 200, with bindings such as other access strategies of class-map access2 and cip200 such as vfi2, make it to become another L2VPN and insert customer group.

Step S206, CIP user insert group the basis on classify once more, for the VPN user who satisfies condition distributes identical V6 prefix.

Define a class-map pref class again, wherein, defined between dscp 10,802.1p 5, the mpls-exp 5 adopt and logical operation, so just can the user be repartitioned realm according to QOS information, as long as the user that the user who reaches the standard grade from CIP100 and CIP200 has the QOS information that meets the pref rule can use identical V6 prefix list.Make that prefix does not need to bind mutually with CIP and territory, and can use the independent user classifying rules.

Existing technology provides order vpn prefix under Domain, with the binding of V6 prefix and territory, and territory and the binding of BAS logic interfacing, the v6 prefix can act on all the VPN users under the BAS interface of this territory correspondence like this.In above-mentioned enforcement of the present invention, the VPN V6prefix of global command is provided,, has defined a series of classifying rules among the class-map V6 prefix and class-map binding, can comprise vlan, interface message, QOS information etc., the employed configuration order of present embodiment is as follows:

ZXR10(config)class-map?access1

match?svlanid?list?20

match?vlan-id?10

match?input-interface?Ethernet1/10.100

exit

ZXR10(config-cip-100)#service-type?access1

ZXR10(config)class-map?access2

match?vpi?100vci?200

match?input-interface?ethernet?1/10.200

exit

ZXR10(config-cip-200)#service-type?access2

ZXR10(config)class-map?pref

match?ip-dscp?10

match?mpls-exp?5

match?802.1p?5

exit

ZXR10(config)vpn?prefix?12AB：0D86：5454：6634::/32pref

In the above-described embodiments, adopt class-map definition CIP to insert customer group earlier, for VPN inserts user's classification; Adopt the VPN customer group of class-map Prefix Hierarchy Names effect then, be implemented in and bind prefix outside the territory.

Fig. 3 is the distributor block diagram according to the IPv6 address prefix of the embodiment of the invention, as shown in Figure 3, this distributor comprises: first sort module 10 and prefix assignment module 20, first sort module 10 is coupled with prefix assignment module 20, wherein, first sort module 10 is used for inserting the group or belonging to the VPN user that different CIP users insert the group and carry out the CLASS-MAP classification belonging to same CIP user; Prefix assignment module 20 is used to belong to of a sort VPN user and distribute identical IPv6 address prefix.

As shown in Figure 4, in above-mentioned distributor, can also comprise: second sort module 30, CIP mapping block 40 and tactful binding module 50.Second sort module 30, CIP mapping block 40 and tactful binding module 50 are connected successively, strategy binding module 50 also is coupled with first sort module 10, wherein, second sort module 30 is used for the VPN user who inserts UNI is carried out the CLASS-MAP classification according to predetermined condition; CIP mapping block 40 is used for being mapped to same CIP virtual interface with belonging to of a sort VPN user; Strategy binding module 50 is used for being mapped to VPN user and corresponding access strategy binding on the same CIP virtual interface, to form a CIP access customer group.

In said apparatus embodiment, utilize second sort module 30 to divide CIP and insert customer group, and provide corresponding access strategy, utilize 10 couples of VPN users of first sort module to classify again on the other hand, for the VPN user of a certain class distributes the V6 prefix, realizing V6 user's access, and with equipment between communicate by letter.

In the above embodiment of the present invention, by adopting class-map definition VPN user class on the basis of inserting customer group at CIP, and with this user class and the binding of V6 prefix, make the V6 prefix assignment from the binding mode of territory, discharge, both can distribute the V6 prefix, and also can adopt new classifying rules to distribute the V6 prefix at the user that a plurality of CIP insert in the customer groups with certain common ground to the user of certain CIP access customer group; In addition, also can adopt class-map definition CIP to insert customer group, class-map can provide more comprehensively user classification method more flexibly, not only physical interface by two layers or vlan, vpi/vci information are divided customer group, definition access scope, can also by three layers, four layers or other information and between combined information divide customer group, make that the division that inserts customer group is more flexible.

Obviously, those skilled in the art should be understood that, above-mentioned each module of the present invention or each step can realize with the general calculation device, they can concentrate on the single calculation element, perhaps be distributed on the network that a plurality of calculation element forms, alternatively, they can be realized with the executable program code of calculation element, thereby, they can be stored in the storage device and carry out by calculation element, and in some cases, can carry out step shown or that describe with the order that is different from herein, perhaps they are made into each integrated circuit modules respectively, perhaps a plurality of modules in them or step are made into the single integrated circuit module and realize.Like this, the present invention is not restricted to any specific hardware and software combination.

The above is the preferred embodiments of the present invention only, is not limited to the present invention, and for a person skilled in the art, the present invention can have various changes and variation.Within the spirit and principles in the present invention all, any modification of being done, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. the distribution method of an IPv6 address prefix is characterized in that, comprising:

Provide CIP user to insert the group or belong to different CIP users and insert VPN (virtual private network) VPN user among the group and carry out the CLASS-MAP classification belonging to same user interface;

Distribute identical IPv6 address prefix for belonging to of a sort VPN user.

2. the distribution method of IPv6 address prefix according to claim 1 is characterized in that, inserts the group or belongs to different CIP users and insert VPN user among the group and carry out the CLASS-MAP classification and comprise belonging to same CIP user:

Use described VPN quality of services for users QoS information, belong to same CIP user and insert the group or describedly belong to different CIP users and insert described VPN user among the group, classify according to match-all among the described CLASS-MAP or match-any to described.

3. the distribution method of IPv6 address prefix according to claim 2 is characterized in that, it is one of following that described QoS information comprises at least:

Differentiated services code points DSCP, multi protocol label exchange EXP territory MPLS-EXP.

4. according to the distribution method of each described IPv6 address prefix in the claim 1 to 3, it is characterized in that, insert the group or belong to different CIP users and insert VPN user among the group and carry out also comprising before the CLASS-MAP classification belonging to same CIP user:

The VPN user of butt joint access customer network interface UNI carries out the CLASS-MAP classification according to predetermined condition, and will belong to of a sort VPN user and be mapped on the same CIP virtual interface;

VPN user and corresponding access strategy binding with being mapped on the same CIP virtual interface insert customer group to form a CIP.

5. the distribution method of IPv6 address prefix according to claim 4 is characterized in that, the VPN user of butt joint access customer network interface UNI carries out the CLASS-MAP classification according to predetermined condition and comprises:

According to predetermined condition described VPN user is classified according to match-all among the CLASS-MAP or match-any.

6. the distribution method of IPv6 address prefix according to claim 4 is characterized in that, it is one of following that described predetermined condition comprises at least:

VLAN ID VLAN ID, super VLAN ID SVLANID, identifier of the virtual route VPI, tunnel sign VCI, the physical interface of link layer, network layer information, transport layer information.

7. according to the distribution method of each described IPv6 address prefix in the claim 1 to 3, it is characterized in that it is that L2VPN inserts customer group that described CIP inserts customer group.

8. the distribution method of IPv6 address prefix according to claim 4 is characterized in that, described access strategy is Virtual Switch Instance VFI.

9. the distributor of an IPv6 address prefix is characterized in that, comprising:

First sort module is used for inserting the group or belonging to the VPN user that different CIP users insert the group and carry out the CLASS-MAP classification belonging to same CIP user;

The prefix assignment module is used to belong to of a sort VPN user and distribute identical IPv6 address prefix.

10. the distributor of IPv6 address prefix according to claim 9 is characterized in that, also comprises:

Second sort module is used for the VPN user who inserts UNI is carried out the CLASS-MAP classification according to predetermined condition;

The CIP mapping block is used for being mapped to same CIP virtual interface with belonging to of a sort VPN user;

The strategy binding module is used for being mapped to VPN user and corresponding access strategy binding on the same CIP virtual interface, to form a CIP access customer group.