Method, equipment and system for accessing intranet server

Abstract

The invention provides a method, equipment and a system for accessing an intranet server. The method includes enabling CGN [carrier-grade NAT (network address translation)] equipment to preliminarily configure a public network IP (internet protocol) address and a public network port identifier according to application information of an internal server, and storing configuration information in an access list of the internal server; judging whether first configuration information matched with network access information is available in the access list of the internal server or not when the network access information which is transmitted by an extranet user terminal and contains a destination IP address, a destination port identifier and a transmission protocol is received; and enabling a port corresponding to a first public network port identifier to forward the network access information to a port which is located on the intranet server corresponding to a first private network IP address and corresponds to a first application port identifier if the first configuration information is available in the access list of the internal server. The application information of the internal server is transmitted by an intranet user terminal, and the public network IP address and the public network port identifier correspond to a private network IP address, an application port identifier and an application transmission protocol. The method, the equipment and the system have the advantage that extranet users can actively access the internal server via the address translation technology by the aid of the CGN equipment.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of communications, and in particular, to a method, device and system for accessing an intranet server. Background technique [0002] With the development of the Internet, the number of broadband users has increased sharply, and IP public addresses are close to exhaustion. In order to solve the problem of insufficient IP addresses, Network Address Translation (NAT) technology is proposed and Carrier-Grade Network Address Translation (Carrier-Grade NAT, CGN) equipment supports multi-terminal equipment for network access. [0003] At present, the NAT technology based on CGN equipment mainly solves the problem of internal network users (that is, private network address users) accessing the external network. Since the private network IP address of the internal network user terminal cannot be identified by external network users on the public network, the NAT technology based on the curr...

AI Technical Summary

Problems solved by technology

[0003] At present, the NAT technology based on CGN equipment mainly solves the problem of internal network users (that is, private network address users) accessing the external network. Since the private network IP address of the internal network user terminal cannot be identified by external network users on the public network, the NAT technology based on the current CGN equipment cannot solve the problem of external network users actively accessing the internal server. The existing technology can use IP address mapping To solve the problem of internal server application after NAT conversion

That is to map all the information received by a public network address to a private network address, but this implementation will cause a private network address to occupy all the ports of a public network address, losing the meaning of NAT translation

Images