Huawei Technologies Co., Limited

Zte Corporation

Xi'an Zhongxing New Software Co., Ltd.

Qiandeng Liang

Jianjie You

Shunwan Zhuang

Liang Liang Fan

Nan Wu

Yong Jun Chen

Bo Yuan

Weiguo Hao

Yuxi Gan

Huaxing Zhu

Zhenbin Li

Xiaohu Xu

Qin Wu

Wei Li

Shibi Huang

Xia Chen

Yong Chen

Fangwei Hu

Wei Wan

Na Song

Shuyi Wang

Jian Yi

Embodiments of this disclosure include a method where an access point (AP) device sends, to an access point controller (AC) device, a data tunnel support capability used to indicate a type of at least one data tunnel supported by the AP device. The type of the at least one data tunnel includes a virtual extensible local area network (VXLAN). The AP device receives configuration information of a VXLAN tunnel sent by the AC device. A local device of the VXLAN tunnel is the AP device, and the configuration information of the VXLAN tunnel includes an internet protocol (IP) address of at least one peer device of the VXLAN tunnel and virtual network index (VNI) information of the VXLAN tunnel. The AP device generates tunnel encapsulation information and routing information based on the IP address of the at least one peer device of the VXLAN tunnel and the VNI information.

Tunnel configuration method, apparatus, system, and device, and storage medium

The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

FlowSpec message processing method and system, and apparatus

A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Route processing method, device, and system

Embodiments of the present invention provide a Flow Specification-based communications method, device, and system. The method includes: obtaining, by a controller, a requirement indicating that a first resource on a forwarding device needs to be associated with a second resource on the forwarding device; and sending, by the controller, a Border Gateway Protocol Flow Specification BGP Flow Spec protocol packet according to the requirement, where the BGP Flow Spec protocol packet includes a network layer reachability information field and an extended community attribute field, the network layer reachability information field carries characteristic information of the first resource, the extended community attribute field carries a global identifier GID used to indicate the second resource, and the BGP Flow Spec protocol packet is used to instruct to associate the first resource with the second resource.

Flow specification protocol-based communications method, device, and system

A method of implementing a service chain in a service chain-enabled domain network includes: receiving, by an intermediate service node (SN), an extended first Border Gateway Protocol (BGP) packet from a downstream SN that is on a service chain path and immediately adjacent to the intermediate SN, the extended first BGP packet including a service chain path identifier identifying the service chain path and a first service chain path including a service chain path from an ingress SN to the intermediate SN, determining an upstream SN that is on the first service chain path and immediately adjacent to the intermediate SN, and sending an extended second BGP packet to the upstream SN, the extended second BGP packet including the service chain path identifier and a second service chain path including a service chain path from the ingress SN to the upstream SN.

Method for implementing service chain, device, and system

Embodiments of this application provide a method for obtaining path information and an apparatus, relate to the communications field, and can accurately obtain a forwarding path for detecting a service packet. A service packet is obtained, where the service packet is a target service packet or an updated target service packet, the target service packet is a service packet that matches a flow rule, and the flow rules used to obtain the service packet that matches the flow rule; an ingress interface information field and/or an egress interface information field is/are generated according to a path detection tag on an ingress interface and/or an egress interface through which the service packet passes. The method is used to obtain path information of the service packet.

Method for obtaining path information and apparatus

A route processing method, a device, and a system, where the method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device. Therefore, limited-time effective information is automatically disseminated, a limited-time effective requirement for a traffic control policy is met, configuration workload is reduced, and maintenance difficulty is lowered.

This application discloses a method for implementing communication between an NVO3 network, to implement inter-AS communication between an NVO3 network and an MPLS VPN network. The method includes: obtaining an identifier of a PE device in the MPLS network and an MPLS label allocated by an ASBR in the MPLS network; allocating an IP address for the MPLS label from a local address pool; sending routing information to an NVE, where the routing information includes an identifier of the PE device and the allocated IP address, and the allocated IP address is used as an outer destination address of an NVO3 encapsulated packet sent by a TES in the NVO3 network to a CE device connected to the PE device in the MPLS network.

Method for implementing communication between NVO3 network and MPLS network, and apparatus

Disclosed are a client, a server, an RADIUS capability negotiation method and system, and the method includes: a client transmits to a server a first message carrying RADIUS capability parameters of the client; the server captures the RADIUS capability parameters in the first message, matches the RADIUS capability parameters in the first message with RADIUS capability parameters of the server to obtain a matching result, and transmits the matching result to the client through a second message; and the client determines whether to establish effective communication with the server according to the matching result in the second message. By means of the technical solutions of the disclosure, it is possible to extend the RADIUS protocol, and to solve the problem existing in the current RADIUS protocol that both sides in communication cannot perform RADIUS capability negotiation.

Client, server, radius capability negotiation method and system between client and server

Disclosed is a method for forwarding information in a distributed network, including that when receiving a message of an Application (APP) protocol, a forwarding device sends, according to a forwarding rule that is sent by a Software Defined Networking (SDN)/OpenFlow controller and corresponds to the APP protocol, the message to a corresponding application server directly or sends the message to a corresponding terminal directly. The disclosure further discloses a system for forwarding information in a distributed network. A transmission bandwidth of a control message between a network control layer and a forwarding layer can be ensured by means of the disclosure, thereby ensuring the stability of an SDN/OpenFlow message between the network control layer and the forwarding layer and ensuring system expansibility.

Method and system for forwarding information in distributed network

A method and system for sending a flow table in a Software Defined Network (SDN) are described in the present disclosure, an OpenFlow (OF) controller, and an OF switch. The method includes that an OF switch receives a flow table entry modification message sent from an OF controller, wherein the message includes a table number, a flow table entry, and a cache label; and the OF switch stores, in a control module of the OF switch, the table number and the flow table entry in the flow table entry modification message according to an indication of the cache label.

Method and system for sending flow table in SDN, of controller, and of switch

Provided are a method and device for authenticating a static user terminal. The method comprises: an identity request message used for acquiring a user identity of the static user terminal is sent to the static user terminal; a response message is received from the static user terminal, wherein the response message carries the user identity of the static user terminal; and, an Extensible Authentication Protocol (EAP) authentication is performed on the static user terminal according to the user identity of the static user terminal. The present disclosure solves the problem in the related art of low security in the authentication on the static user terminal access the network, thus achieving the effects of increasing the security and reliability in the authentication on the static user terminal accessing the network and improving the WLAN service using experience of the static user.

Growing community of inventors

Shenzhen, China

Qiandeng Liang