Tunnel connection request distribution method and device

Abstract

The invention provides a tunnel connection request distribution method which is applied to an NAT (Network Address Translation) gateway to dispatch an L2TP connection request from a user outside the NAT gateway. The method comprises the steps of judging whether an L2TP connection request message from the user requires local authentication according to a preset policy, conducting local processing if required, otherwise returning an authentication failure message to the user, storing session characteristics of the authentication failure message in a session table when the authentication failure message is received, acquiring the session characteristics of a request message when the request message is received subsequently, and searching whether the preposed session table contains a corresponding table entry according to the session characteristics, and forwarding the message to an LNS (Lonworks Network Service) server in the NAT gateway if the table contains the entry, otherwise locally processing the L2TP connection request message. A service network served by the LNS server is different from a local service network. According to the tunnel connection request distribution method, the objective LNS server to which the user is intended to access can be identified intelligently while the existing standard protocol is followed.

Description

technical field [0001] The invention relates to the field of data communication, in particular to a method and device for distributing tunnel connection requests in an enterprise network environment. Background technique [0002] With the continuous development of standardized and easily expandable network technology, especially IP technology, intelligent video surveillance technology based on IP network has developed rapidly, and IP surveillance has become the mainstream of current surveillance. For security and cost reasons, most surveillance networks are deployed in private networks. Many mobile users or public network users use the decoding client (such as VC) to access the monitoring resources in the private network (such as the live resources on the encoder EC). private network access, figure 1 It is such a typical application scenario. For related technologies of using tunnels to traverse the monitoring network NAT, reference may be made to related patent applicatio...

AI Technical Summary

Problems solved by technology

However, the RFC2661 standard document issued by the IETF (Internet Engineering Task Force) stipulates that the L2TP destination port number can only be 1701. If the above changes are made, it means that it cannot be compatible with the standard method, and a privatized protocol transformation is required, which is not conducive to large-scale business application

Images