CN103179222B - Method and device for distributing double-stack addresses - Google Patents

Abstract

The present invention discloses a dual-stack address allocation method and equipment, the method comprising: an access controller AC receives an IPv4 address acquisition request sent by a user terminal; the AC judges whether the user terminal has passed the authentication; if it judges yes, The AC allocates an IPv4 address to the user; otherwise, the AC refuses to allocate an IPv4 address to the user terminal. In the present invention, the IPv4 address allocation mechanism is optimized, and the IPv4 address consumption is saved.

Description

A dual-stack address allocation method and device

technical field

The present invention relates to the technical field of communication, in particular to a dual-stack address allocation method and equipment.

Background technique

In the current WLAN (Wireless Local Area Network, wireless local area network) network based on IPv4 (Internet Protocol version 4, Internet Protocol version 4), the user terminal obtains a public IPv4 address through the DHCP (Dynamic host configuration protocol, dynamic host configuration protocol) protocol, thereby Gain Internet access. But it is well known that IPv4 addresses have been basically exhausted at present.

At the same time, WLAN services are in a stage of rapid growth. In the next few years, the number of APs (Access Points, Access Points) will increase exponentially, and the number of WLAN service users will also increase exponentially, requiring a large number of IP addresses. Obviously, the IPv4 addresses that are about to be exhausted can no longer meet the rapidly growing demand. Therefore, it is inevitable to introduce IPv6 in WLAN.

With the development of network equipment, the current AC (Access Controller, Access Controller) has basically supported IPv6, which provides a basis for developing IPv6 services. However, because a large amount of stored content in the WLAN network is still based on IPv4, it is difficult for IPv6 to completely replace the application of IPv4 in the WLAN network in a short period of time. Therefore, the WLAN network needs to provide users with IPv4 and IPv6 dual-stack capabilities.

In the existing dual-stack address allocation technology, when the AC receives the IPv4 acquisition request and the IPv6 address acquisition request sent by the user terminal, it directly allocates the IPv4 address and the IPv6 address to the user terminal.

In the process of realizing the present invention, the inventor finds that there are at least the following problems in the prior art:

In the existing dual-stack address allocation method, users have obtained IPv4 and IPv6 addresses before authentication, that is, for some unregistered users, or users who do not plan to use the WLAN service, as long as their terminals are associated with the AP, they can Obtaining IPv4 and IPv6 addresses intensifies the consumption of IPv4 addresses, resulting in a waste of addresses.

Contents of the invention

Embodiments of the present invention provide a dual-stack address allocation method and equipment to optimize the IPv4 address allocation mechanism and save IPv4 address consumption.

In order to achieve the above purpose, an embodiment of the present invention provides a dual-stack address allocation method, including:

The AC receives the IPv4 address acquisition request sent by the user terminal;

The AC judges whether the user terminal is authenticated; if it judges yes, the AC allocates an IPv4 address to the user; otherwise, the AC refuses to allocate an IPv4 address to the user terminal.

The embodiment of the present invention also provides a dual-stack address allocation method, including:

If the user terminal fails to obtain an address by sending an IPv4 address acquisition request to the AC, and receives a notification message that it has passed the authentication, the user terminal sends an IPv4 address acquisition request to the AC again and receives the IPv4 address assigned by the AC; After the AC receives the IPv4 address acquisition request sent by the user terminal, if it determines that the user terminal has not passed the authentication, it refuses to assign an IPv4 address to the user terminal.

The embodiment of the present invention also provides an AC, including:

A receiving module, configured to receive an IPv4 address acquisition request sent by a user terminal;

A judging module, configured to judge whether the user terminal has passed the authentication;

An address allocation module, configured to allocate an IPv4 address to the user terminal when the determination result of the determination module is yes; and refuse to allocate an IPv4 address to the user terminal when the determination result of the determination module is no.

The embodiment of the present invention also provides a user terminal, including:

A sending module, configured to send an IPv4 address acquisition request to the access controller AC;

A receiving module, configured to receive the IPv4 address assigned by the AC;

An indication module, configured to trigger the sending module to re-acquire if the user terminal fails to obtain an address by sending an IPv4 acquisition request to the AC through the sending module, and the receiving module receives a notification message that the user terminal has passed the authentication Sending an IPv4 address acquisition request to the AC; wherein, after receiving the IPv4 address acquisition request sent by the user terminal, the AC refuses to assign an IPv4 address to the user terminal if it determines that the user terminal has not passed the authentication.

Compared with the prior art, the present invention has at least the following advantages:

In the embodiment of the present invention, after the AC receives the IPv4 address acquisition request sent by the user terminal, it determines whether to assign an IPv4 address to the user terminal by judging whether the user terminal has passed the authentication. IPv4 address; if the user terminal fails to obtain the address by sending an IPv4 address acquisition request to the AC, in the subsequent process, when the user terminal receives the notification message that it has passed the authentication, it will initiate an IPv4 address acquisition request to the AC again, and receive the address assigned by the AC. IPv4 address, optimized IPv4 address allocation mechanism, saving IPv4 address consumption.

Description of drawings

FIG. 1 is a schematic flow diagram of a dual-stack address allocation method provided by an embodiment of the present invention;

FIG. 2 is a schematic flow diagram of a dual-stack address allocation method in a specific application scenario provided by an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of an AC provided by an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a user terminal provided by an embodiment of the present invention.

detailed description

In view of the problems existing in the above-mentioned prior art, the embodiment of the present invention provides a dual-stack address allocation technical solution, which is applied to the address allocation process of a dual-stack user terminal. When the AC receives an IPv4 address acquisition request (DHCP discover (discovery) message), judge whether the user terminal is authenticated; if the user terminal is authenticated, assign an IPv4 address to the user terminal; otherwise, refuse to assign an IPv4 address to the user terminal. Through this technical solution, the allocation mechanism of IPv4 addresses can be optimized, and the consumption of IPv4 addresses can be saved.

The technical solutions in this application will be clearly and completely described below in conjunction with the drawings in this application. Apparently, the described embodiments are part of the embodiments of this application, not all of them. Based on the embodiments in the present application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present application.

As shown in Figure 1, the schematic flow chart of the dual-stack address allocation method provided by the embodiment of the present invention may include the following steps:

Step 101, the user terminal sends an IPv4 address acquisition request to the AC.

Specifically, after the user terminal is associated with the AP, it may send an IPv4 address acquisition request (IPv4 discover) to the AC through the DHCP protocol, so as to acquire the IPv4 address. In addition, the user terminal can also obtain an IPv6 address through the AC, and the obtaining process is the same as the process in which the dual-stack user terminal obtains the IPv6 address through the AC in the prior art, and will not be repeated here.

Step 102: After receiving the IPv4 address acquisition request sent by the user terminal, the AC judges whether the user terminal has passed the authentication. If the judgment is yes, go to step 103; otherwise, go to step 104.

Specifically, in order to prevent the AC from allocating IPv4 addresses to unregistered user terminals and causing waste of IPv4 addresses, in the technical solution provided by the embodiment of the present invention, after the AC receives the IPv4 address acquisition request sent by the user terminal, it will not directly To assign an IPv4 address to the user terminal, it is necessary to judge whether the user terminal has passed the authentication, and determine whether to assign an IPv4 address to the user terminal according to the judgment result. Wherein, the AC stores authentication information of each user terminal corresponding to the user terminal identifier, and the AC determines whether the corresponding user terminal passes the authentication according to the authentication information.

Step 103, the AC allocates an IPv4 address to the user terminal.

Specifically, when the AC receives the response message that the user terminal passes the authentication returned by the authentication server, the AC determines that the user terminal needs to use the service of the WLAN. Correspondingly, the AC can assign an IPv4 address to the user terminal through the DHCP protocol. After the user terminal obtains the IPv4 address, data forwarding can be performed through the IPv4 address and the obtained IPv6 address.

Step 104, the AC refuses to allocate an IPv4 address to the user terminal, and goes to step 105.

Specifically, when the AC determines that the user terminal has not passed the authentication, the AC will not allocate an IPv4 address to the user terminal in order to prevent IPv4 addresses from being wasted due to allocating IPv4 addresses to users who do not plan to use the WLAN service. Wherein, the AC may not process the IPv4 address acquisition request and directly discard it; it may also return an address acquisition failure message to the AC to inform the user terminal that the IPv4 address acquisition failed this time.

Step 105: If the user terminal fails to obtain an address by sending an IPv4 address acquisition request to the AC, and receives a notification message that it has passed the authentication, the user terminal sends an IPv4 address acquisition request to the AC again, and goes to step 102.

Specifically, if the user terminal does not receive the IPv4 address allocated by the AC, it is considered that the acquisition of the IPv4 address fails this time. The user may send an IPv4 address acquisition request to the AC again when receiving the notification message that the user has passed the authentication. Wherein, the user terminal can perform authentication according to the obtained IPv6 address, and the authentication process is similar to the corresponding authentication process in the prior art, and will not be repeated here.

It should be noted that in the technical solution provided by the embodiment of the present invention, for the user terminal side, when receiving the notification message that it has passed the authentication, it can initiate an IPv4 address acquisition request to the AC again in the following manner:

A plug-in is installed in the existing dual-stack user terminal, which is used to trigger the user terminal to initiate an IPv4 address acquisition request to the AC again when receiving a notification message that it has passed the authentication. Wherein, the plug-in can be pre-installed in the user terminal, and can also be stored in the Portal server. When the user terminal is authenticated, the Portal server prompts the user terminal to download and install the plug-in.

The technical solutions provided by the embodiments of the present invention will be described in more detail below in conjunction with specific application scenarios.

As shown in Figure 2, it is a schematic flow diagram of a dual-stack address allocation method in a specific application scenario provided by the embodiment of the present invention. In this embodiment, the user terminal applies for an address for the first time, and the method may include the following steps:

In step 201, the user terminal finds an available AP through a broadcast probe, and receives a probe response message returned by the AP.

Step 202, the user terminal sends an association request message to the AP, the AP forwards the received association request message to the AC, the AC responds with an association success message, the AP forwards the message to the terminal after receiving the message, and the terminal successfully establishes a network connection.

Step 203, the user terminal obtains an IPv6 address through the AC.

Wherein, the processing flow of steps 201-203 is similar to the flow of the dual-stack address allocation method in the prior art, and will not be repeated here.

Step 204, the AC receives the IPv4 address acquisition request message sent by the user terminal, detects that the user terminal has not passed the authentication, and does not allocate an IPv4 address to the user terminal.

Specifically, in the technical solution provided by the embodiment of the present invention, after the AC receives the IPv4 address acquisition request sent by the user terminal, it will not directly assign an IPv4 address to the user terminal, but needs to detect whether the user terminal has passed the authentication, and then Determine whether to assign an IPv4 address to the user terminal. In this embodiment, since the user terminal applies for an address for the first time, the AC detects that the user has not passed the authentication, and cannot determine whether the user terminal plans to use the corresponding WLAN service. In order to save the IPv4 address, it does not respond to the received IPv4 address acquisition request.

Step 205, the user terminal sends an HTTP request.

Step 206, the AC receives the user's HTTP request, and since the user has not passed the authentication, the AC returns an HTTP redirection message to the user terminal.

Step 207, the user terminal resends the HTTP request to access the WEB authentication page, and the user fills in information such as user name and password on the authentication page and submits it to the Portal server.

Step 208, the Portal server submits the account number and password to the AC, and initiates authentication.

Step 209, the AC sends an authentication request carrying the user name and password to the AAA authentication server.

Step 210, the AAA authentication server judges whether the user terminal is legal according to the user information, and the user terminal performs password authentication. The AAA server sends an authentication response to the AC. If the authentication is successful, an authentication success message is returned to the AC, carrying protocol parameters and relevant service attributes of the user terminal to authorize the user. If the authentication fails, return an authentication failure message to the AC.

Step 211, the AC returns the authentication result to the Portal server.

Step 212, the Portal server pushes the authentication result page according to the authentication result. After the authentication is successful, the AAA server starts billing, and the user starts to go online after the user goes online.

Among them, the processing flow of steps 205-212 is similar to the WEB authentication flow in the dual-stack address allocation method in the prior art. It is carried out, and its specific implementation will not be repeated here.

Step 213, when the AC learns that the user terminal has passed the authentication, it sends an indication message to the user terminal to instruct the user to apply for an IPv4 address.

Specifically, after the AAA server authenticates the user terminal, it notifies the AC of the authentication result. When the AC learns that the user terminal has passed the authentication, it needs to send an indication message to the user terminal to instruct the user to apply for an IPv4 address again.

Step 214: After receiving the indication message, the user terminal sends an IPv4 address acquisition request message to the AC again according to the indication message, and receives the IPv4 address allocated by the AC.

Specifically, different from the prior art, in the technical solution provided by the embodiment of the present invention, when the user terminal receives the notification message that it has passed the authentication (in this embodiment, it receives the indication message sent by the AC), it again Initiate an IPv4 address acquisition request to the AC. After receiving the IPv4 address acquisition request, the AC confirms that the user terminal has passed the authentication, and allocates an IPv4 address to the user terminal.

Step 215, the user terminal performs data forwarding through the IPv4 address and the IPv6 address.

It can be seen from the above description that in the technical solution provided by the embodiment of the present invention, after the AC receives the IPv4 address acquisition request sent by the user terminal, it determines whether to assign an IPv4 address to the user terminal by judging whether the user terminal has passed the authentication. If the user terminal passes the authentication, an IPv4 address will be assigned, otherwise, no IPv4 address will be assigned; if the user terminal does not receive the IPv4 address assigned by the AC within the preset time, in the subsequent process, when the user terminal detects that it has passed the authentication, it will send an IP address to the AC again. IPv4 address acquisition request and receive the IPv4 address assigned by the AC, which optimizes the IPv4 address allocation mechanism and saves IPv4 address consumption.

Based on the same technical concept as the above-mentioned method flow, an AC is also provided in the embodiment of the present invention, which can be applied to the above-mentioned flow.

As shown in FIG. 3, a schematic structural diagram of an AC provided in an embodiment of the present invention may include:

A receiving module 31, configured to receive an IPv4 address acquisition request sent by a user terminal;

A judging module 32, configured to judge whether the user terminal is authenticated;

The address assignment module 33 is used for distributing an IPv4 address to the user terminal when the judgment result of the judgment module 32 is yes; when the judgment result of the judgment module 32 is no, refusing to assign an IPv4 address to the user terminal address.

Among them, the AC provided by the embodiment of the present invention may also include:

Instructing module 34, configured to, when the address assignment module 33 refuses to assign an IPv4 address to the user terminal, and the AC receives a response message returned by the authentication server that the user terminal has passed the authentication, send the message to the user terminal sending an indication message to instruct the user terminal to send an IPv4 address acquisition request.

Wherein, the receiving module 31 is further configured to receive an IPv6 address acquisition request sent by the user terminal;

The address allocation module 32 is further configured to allocate an IPv6 address to the user terminal.

Based on the same technical concept as the above-mentioned method flow, an embodiment of the present invention also provides a user terminal, which can be applied to the above-mentioned flow.

As shown in FIG. 4, a schematic structural diagram of a user terminal provided in an embodiment of the present invention may include:

A sending module 41, configured to send an IPv4 address acquisition request to the access controller AC;

A receiving module 42, configured to receive the IPv4 address assigned by the AC;

An indication module 43, configured to trigger the AC if the user terminal fails to obtain an address by sending an IPv4 acquisition request to the AC through the sending module 41, and the receiving module 42 receives a notification message that the user terminal passes the authentication. The sending module 41 sends an IPv4 address acquisition request to the AC again; wherein, after receiving the IPv4 address acquisition request sent by the user terminal, the AC refuses to assign an IPv4 address to the user terminal if it determines that the user terminal has not passed the authentication.

Wherein, the instruction module 43 is specifically configured to, when the user sends an IPv4 address acquisition request to the AC through the sending module 41 and fails to obtain an address, and the receiving module 42 receives the instruction message sent by the AC , triggering the sending module 41 to send an IPv4 address acquisition request to the AC again; wherein the AC sends the indication to the user terminal when receiving a response message that the user terminal passes the authentication returned by the authentication server information.

The sending module 41 is also configured to send an IPv6 address acquisition request to the AC;

The receiving module 42 is also configured to receive the IPv6 address assigned by the AC;

The user terminal also includes:

An authentication module 44, configured to perform authentication according to the IPv6 address received by the receiving module 42.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is a better implementation Way. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to make a A computer device (which may be a personal computer, a server, or a network device, etc.) executes the methods described in various embodiments of the present invention.

Those skilled in the art can understand that the drawing is only a schematic diagram of a preferred embodiment, and the modules or processes in the drawing are not necessarily necessary for implementing the present invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be distributed in the device in the embodiment according to the description in the embodiment, and can also be changed and located in one or more devices different from the embodiment. The modules in the above embodiments can be combined into one module, and can also be further split into multiple sub-modules.

The serial numbers of the above embodiments of the present invention are for description only, and do not represent the advantages and disadvantages of the embodiments.

The above disclosures are only a few specific embodiments of the present invention, however, the present invention is not limited thereto, and any changes conceivable by those skilled in the art shall fall within the protection scope of the present invention.

Claims (4)

1. a kind of pair of stack address distribution method is it is characterised in that include：

The IPv4 address acquisition request that access controller AC receive user terminal sends；

Described AC judges whether described user terminal passes through certification；If being judged as YES, described AC is to described user distribution IPv4 ground Location；Otherwise, described AC refuses to distribute IPv4 address to described user terminal；

Wherein, the corresponding user terminal identification of described AC is stored with the authentication information of each user terminal, and AC is true according to this authentication information Determine whether relative users terminal passes through certification；

Wherein, before the IPv4 address acquisition request that described access controller AC receive user terminal sends, described AC receives and uses The IPv6 address acquisition request that family terminal sends, and distribute IPv6 address to described user terminal；

Described user terminal is authenticated according to the IPv6 address obtaining；

Wherein, described AC refuses, to after described user terminal distribution IPv4 address, also to include：

When described AC receives the described user terminal of certificate server return by the response message of certification, to described user eventually End sends instruction message, is asked with indicating that described user terminal sends IPv4 address acquisition.

2. a kind of pair of stack address distribution method is it is characterised in that include：

If user terminal passes through to send the failure of IPv4 address acquisition acquisition request address to access controller AC, and receives itself By the notification message of certification, described user terminal sends IPv4 address acquisition to described AC again and asks and receive described AC to divide The IPv4 address joined；Wherein, after described AC receives the IPv4 address acquisition request of user terminal transmission, if judging this user eventually End is not authenticated, then refuse to distribute IPv4 address to this user terminal；

Wherein, the corresponding user terminal identification of described AC is stored with the authentication information of each user terminal, and AC is true according to this authentication information Determine whether relative users terminal passes through certification；

Wherein, before the IPv4 address acquisition request that described access controller AC receive user terminal sends, described user terminal Send the request of IPv6 address acquisition to described AC；

Described user terminal receives the IPv6 address of described AC distribution, and is authenticated according to the IPv6 address receiving；

Wherein, described user terminal receives the notification message self by certification, sends IPv4 address to described AC again and obtains Take request, specially：

Described user terminal receives the instruction message that described AC sends, and sends IPv4 address according to this instruction message to described AC and obtains Take request；Wherein, described AC is when receiving the described user terminal of certificate server return by the response message of certification, to Described user terminal sends described instruction message.

3. a kind of access controller AC is it is characterised in that include：

Receiver module, the IPv4 address acquisition request sending for receive user terminal；

Judge module, for judging whether described user terminal passes through certification；

Address assignment module, for when the judged result of described judge module is to be, to described user terminal distribution IPv4 ground Location；When the judged result of described judge module is no, refuse to distribute IPv4 address to described user terminal；

Wherein, the corresponding user terminal identification of described AC is stored with the authentication information of each user terminal, and AC is true according to this authentication information Determine whether relative users terminal passes through certification；

Wherein, described receiver module is additionally operable to, and the IPv4 address acquisition that described access controller AC receive user terminal sends please Before asking, receive the IPv6 address acquisition request that described user terminal sends；

Described address assignment module is additionally operable to, and distributes IPv6 address to described user terminal；

Described user terminal is authenticated according to the IPv6 address obtaining；

Indicating module, after refusing to described user terminal distribution IPv4 address when described address assignment module and described When AC receives the described user terminal of certificate server return by the response message of certification, send to described user terminal and refer to Show message, asked with indicating that described user terminal sends IPv4 address acquisition.

4. a kind of user terminal is it is characterised in that include：

Sending module, for sending the request of IPv4 address acquisition to access controller AC；

Receiver module, for receiving the IPv4 address of described AC distribution；

Indicating module, if send IPv4 by described sending module to described AC for described user terminal to obtain acquisition request ground Location failure, and described receiver module receives the notification message by certification for the described user terminal, triggers described sending module again Secondary to described AC send IPv4 address acquisition request；Wherein, described AC receive user terminal transmission IPv4 address acquisition please After asking, if judging, this user terminal is not authenticated, refuses to distribute IPv4 address to this user terminal；

Wherein, the corresponding user terminal identification of described AC is stored with the authentication information of each user terminal, and AC is true according to this authentication information Determine whether relative users terminal passes through certification；

Described sending module is additionally operable to, and the IPv4 address acquisition that described access controller AC receive user terminal sends asks it Before, send the request of IPv6 address acquisition to described AC；

Described receiver module is additionally operable to, and receives the IPv6 address of described AC distribution；

This user terminal also includes：

Authentication module, the IPv6 address for being received according to described receiver module is authenticated；

Wherein, described indicating module is specifically for sending IPv4 address when described user passes through described sending module to described AC Obtain the failure of acquisition request address, and when described receiver module receives the instruction message that described AC sends, trigger described transmission Module sends the request of IPv4 address acquisition to described AC again；Wherein, described AC is receiving described in certificate server return When user terminal passes through the response message of certification, send described instruction message to described user terminal.