Identification and business management for network user

Abstract

This invention relates to broadband access field, specially relates to a method by which can make certification to network users and carry out operational management, first build up the network analysis situs of access equipment on the access server, and register the capacity of access equipment; the access equipment sends the basic information of users to the access sever, the access server sends the certification information of users to AAA server, the AAA server confirms this certification of users has passed, sends the passing information and authorization message to the access equipment, after the access equipment receives the authorization message, completes stated action, implements the certification and operational management to users. This method can complete the control for multicast, broadband operation on the bottom layer access equipment.

Description

technical field [0001] The invention relates to the field of broadband access technology, in particular to a method for authenticating network users and managing services. Background technique [0002] The current user access system completes user authentication access and management on one device, but some services such as multicast services, refer to figure 1 , after user 1 joins multicast group A, the access server sends the multicast stream to the first-level access device 1, and the first-level access device 1 sends it all the way to the Nth-level access device 1 closest to the user; When user 4 wants to join the multicast group A, in order to ensure that only one copy of the multicast is sent between the access server and the first-level access device, the first-level access device 1 must know whether the user 4 joins the multicast group A through Only after obtaining the authentication of the access server can it be decided whether to forward the multicast stream to ...

AI Technical Summary

Problems solved by technology

[0005] In the Ethernet access environment, in order to realize the effective identification of users and prevent users from changing the Internet address (hereinafter referred to as IP address) and link layer address (hereinafter referred to as MAC address) at will, the access device uses VLAN ID to identify users, so as to Realize the management of end users, but because the VLAN ID ranges from 0 to 4095, 0 and 4095 have special meanings and are generally not used, so the actual available values ​​​​are only 1 to 4094, and they must be allocated to different services. Limits the expansion of Ethernet access to broadband networks

Images