Huawei Technologies Co., Limited

Zhouyi Yu

Rongrong Hua

Tao Peng

Hongtao Guo

Jie Chen

Tianfu Fu

Chengguang Niu

Jing Liu

Guoyi Chen

Li Ping Yang

Yang Liu

Hai Gao

Yun Ma

Qian Cao

Shuping Peng

Xiaodong Wang

Zhiwang Zhao

Yuping Jiang

Baowu Su

This application relates to methods, devices, and systems for generating a detection policy. An example method can be applied to a controller. In the example method, the controller obtains path information, where the path information includes information about a first network device, and the first network device belongs to a network device through which a packet passes from a source end to a destination end. The controller generates a detection policy for a second network device based on the path information and delivers the detection policy to the second network device, where the second network device is the same as or different from the first network device.

Method for generating detection policy, device, and system

This application provides a dial-up packet processing method. The method is applied to a dial-up packet processing system. The system includes a controller, an access gateway, a forwarding plane network element, and a control plane network element that are connected to each other. The method includes: The control plane network element receives a dial-up packet from the access gateway, where the dial-up packet is a dial-up packet sent by user equipment to the access gateway; the control plane network element sends an authentication request to an external server, where the authentication request is generated by the control plane network element based on the dial-up packet; the control plane network element receives dial-up success information sent by the external server; and the control plane network element determines the forwarding plane network element based on the dial-up success information.

Dial-up packet processing method, network element, system, and network device

This application provides a communication method, a CP device, and a NAT device; pertains to the field of communication technologies; and relate to a scenario of performing NAT tracing based on a CU-separated BNG. The CP device delivers, to the NAT device, an IP address assigned to a user. Under a trigger condition of receiving the IP address delivered by the CP device, the NAT device assigns a public network IP address to the user, and reports the public network IP address to the CP device. The CP device adds, to an accounting packet, the IP address assigned by the CP device and the public network IP address assigned by the NAT device, and sends the accounting packet to a RADIUS server, to report the public network IP address to the RADIUS server, so that the NAT tracing is performed on the RADIUS server.

Communication method, CP device, and NAT device

This application discloses a communication method, and relates to the communications field. In the method, a fixed mobile interworking function (FMIF) receives an access request message that carries first authentication information of a fixed network device and that is sent by a broadband network gateway (BNG), where the first authentication information is generated by the BNG based on a dial-up packet sent by the fixed network device, and the first authentication information includes an identifier of the fixed network device. The FMIF encapsulates the first authentication message in a message format supported by a control plane interface between the FMIF and a core network device, to obtain a second authentication message; and the FMIF sends the second authentication message to the core network device through the control plane interface. The core network device performs authentication on the fixed network device based on the second authentication message.

Communication method, communications apparatus, and communications system

This application discloses a method and an apparatus for accessing a gateway, and pertains to the field of communications technologies. A service level agreement (SLA) level may be obtained based on user information of a terminal, and further a user plane (UP) device corresponding to the terminal is determined based on the SLA level of the terminal. Thus, terminals with different SLA levels may be allocated to different UP devices for bearing, so that a specific terminal may access a specified UP device. This resolves a problem in a related technology that a terminal relatively randomly accesses a UP device. In addition, because an SLA level may be used to indicate a level of quality of service of a terminal, after terminals with different SLA levels access different UP devices, differentiated services may be provided on the different UP devices. Therefore, user requirements are met, and revenues are increased.

Method and apparatus for accessing gateway

This application relates to message sending and receiving methods and apparatuses, and a communication system. A control plane CP device in a communication system in which a CP and a user plane UP are separated generates a first message, where the first message includes route information and a control indication for the route information, and the route information is associated with a UP device. The CP device sends the first message to the UP device, so that the UP device updates the route information based on the control indication, where the first message is a packet forwarding control protocol PFCP message. Based on the technical solutions provided herein, interaction on routing control between the CP device and the UP device in a communication system architecture in which a CP and a UP are separated may be implemented.

Message sending and receiving methods and apparatuses, and communication system

A method includes: receiving a service request, where the service request includes service information of a terminal device that is to perform access; and determining a first device and a first sliced network based on the service information of the terminal device, where the first sliced network is between the first device and a second device, the service request is forwarded by the second device, and the first sliced network transmits a data packet of the terminal device.

Packet transmission method, apparatus, and system, and storage medium

A BRAS system-based packet encapsulation method includes obtaining user access information when receiving a user access protocol packet and performing VXLAN GPE encapsulation on the user access protocol packet based on the user access information. The encapsulation structure includes a user information header that is used to store the user access information, and a quantity of bytes occupied by the user information header is less than or equal to 12. In this application, the foregoing encapsulation structure is used to encapsulate a packet.

Broadband remote access server (BRAS) system-based packet encapsulation

A communication method, a device, and a system are disclosed. An SF device adds a first location identifier including an identifier of the SF device and an identifier of a first physical port to a received first packet sent by first user equipment, and sends a second packet to which the first location identifier is added to a first UP device. The first UP device sends a third packet to a CP device, and the CP device sends the third packet to a USF device. The USF device interacts with an SDN controller, to enable the SDN controller to deliver a configuration instruction to the corresponding SF device. The first packet may be a DHCP packet or a PPPoE packet, and OPTION82/OPTION18 is added to carry the first location identifier.

Communication method, apparatus, device, system, and computer-readable storage medium

This application provides a packet transmission method, apparatus, and system, and relates to the field of network technologies. The method is applied to a network architecture including a user terminal, a first forwarding device and a second forwarding device. A tunnel is disposed between the first forwarding device and the second forwarding device. The method includes: The first forwarding device receives packets forwarded by the user terminal in the load balancing mode, where the packets include a keepalive packet, and the first forwarding device is a standby forwarding device corresponding to the user terminal. The first forwarding device forwards the keepalive packet to the second forwarding device through the tunnel, where the second forwarding device is an active forwarding device corresponding to the user terminal.

Packet transmission method, apparatus, and system utilizing keepalive packets between forwarding devices

A BRAS system-based packet encapsulation method includes: obtaining user access information when receiving a user access protocol packet, performing VXLAN GPE encapsulation on the user access protocol packet based on the user access information, the encapsulation structure includes a user information header that is used to store the user access information, a quantity of bytes occupied by the user information header is less than or equal to 12. In this application, the foregoing encapsulation structure is used to encapsulate a packet.

A network attack defense policy sending method and apparatus are presented. The method includes receiving attack information which includes a target Internet Protocol (IP) address, and the attack information is used to indicate that a network attack packet whose destination address is the target IP address exists in a first network; determining that the network attack packet enters the first network through a first edge network device, where the first edge network device is an edge device in the first network; sending a defense policy to the first edge network device, where the defense policy is used to instruct the first edge network device to process, according to the defense policy, a packet whose destination address is the target IP address. By means of this application, network resources occupied by a network attack packet can be reduced, and an effect of defending against the network attack packet can be improved.

Network attack defense policy sending method and apparatus, and network attack defending method and apparatus

A network device executes a method including receiving a request message for a first service sent by a user equipment; determining a first service requested by the request message for the first service; and sending the request message for the first service to a first value added service server.

Growing community of inventors

Beijing, China

Zhouyi Yu