Method for raising control efficiency of access controllers in MESH network and access controllers

Abstract

The invention discloses a method for raising the control efficiency of access controllers in a MESH network and access controllers. A plurality of ACs (Access Controllers) are arranged in each MKD (MESH Key Distributor) domain of a MESH network. Each AC is provided with the same configuration to the MESH network. All the ACs form a logic MKD. The method comprises the following steps: a random AC is searched by an on-line MP (Mesh Point), the AC and the on-line MP establish a CAPWAP (Configuration and Provisioning for Wireless Access Points) tunnel, and as the main AC of the on-line MP, the main AC delivers configuration downwards and carries out configuration management to the on-line MP; a random AC receives a PMK-MA request message carrying an identification of an Supplicant sent by a random MA, executes a MKD role, and distributes layered secret key for the Supplicant so that the MA and the Supplicant can use the MESH link established by the secret key. According to the invention, the AC control efficiency is raised.

Description

technical field [0001] The present invention relates to the technical field of MESH, in particular to a method, a system and an AC for improving the control efficiency of an access controller (AC, Access Controller) in a MESH network. Background technique [0002] The MESH network refers to a wireless local area network that conforms to the 802.11s technology of the Institute of Electrical and Electronic Engineers (IEEE, Institute of Electrical and Electronic Engineers). The centralized control MESH network is the same as the ordinary centralized control access network. The MESH node (MP, Mesh Point) is connected to the wireless access control through the wireless access point configuration and provision (CAPWAP, Configuration and Provisioning for Wireless Access Points) tunnel. A controller (AC, Access Controller) is used for the AC to configure and maintain the MP, and to apply a unified security policy. [0003] When the MP goes online, it first finds its own AC and esta...

AI Technical Summary

Problems solved by technology

[0035] It can be seen from the above that the AC is not only the configuration management center in the MESH network, but more importantly, it serves as the core of MESH security. In this way, the processing burden of the AC is heavy, which will make the work efficiency of the AC low.

In addition, the single point of failure effect of the MESH network is very easy to appear in the current implementation, that is, the AC fails or the network leading to the AC fails. At this time, the AC can not only manage each MP, but also cannot establish a secure MESH link. It is a problem that must be solved for networking solutions that require high security and reliability

Images