Abstract: Provided are a processing method for a Network Address Translation, NAT, technology, an NAT device and a BNG device, the method includes: the NAT device determining whether or not session establishment of a UE reaches a preset threshold, and notifying the BNG device to execute a security strategy for the UE if the session establishment of the UE reaches the preset threshold, wherein the security strategy is used for stopping the attack behavior of the UE and informing the UE of the attack behavior of the UE. In the disclosure, the technical problem in the related art that the user lodges complaints against the operator for the abnormal behavior of the host user is solved, thus by reminding the user to check the security of the host user, the disclosure increases the utilization rate of the NAT device and improves user experience.

Abstract: A method is disclosed for synchronizing user protocol messages between service nodes. The method includes, when receiving a user-related protocol message, a service node judging whether a state of a backup group to which a user belongs corresponding to the protocol message is active or standby on the service node, and according to a type of the protocol message, determining whether to send the protocol message to another service node on which the state of the backup group is standby or active. The method also includes, when determining to send the protocol message, the service node encapsulating the protocol message through a service backup protocol and sending the protocol message to the other service node. A service node includes a message receiving module, a state judging module and a message sending module.

Abstract: Disclosed is a portal authentication method including: sending, by a portal server, an information query message to the Broadcast Network Gateway (BNG) currently accessed by a User Equipment (UE) after the portal server receives a Hyper Text Transport Protocol (HTTP) request sent from the UE; and collecting, by the BNG, the information of the UE according to the information query message sent from the portal server and feeding the collected information of the UE back to the portal server through a response message. A BNG, a portal server, a system and a computer storage medium are also disclosed.

Abstract: An accounting method and device are disclosed in the disclosure. The method includes that: a BNG transmits a second Accounting-Request message to an AAA server after receiving a first Accounting-Request message from an AC, wherein the first Accounting-Request message is used for activating the BNG to execute an accounting operation; and the BNG transmits a second Accounting-Stop message to the AAA server after receiving a first Accounting-Stop message from the AC, wherein the first Accounting-Stop message is used for activating the BNG to stop the accounting operation. By the disclosure, the problem that the function division of the AC and the BNG is not yet clear during the accounting operation in the related art is solved, so that functions of the AC and the BNG are clearly divided during the accounting operation, an accounting operation flow is further made clear, and the accounting efficiency is improved.

Abstract: The present disclosure discloses a Deep Packet Inspection (DPI) control method and device, and a storage medium. The method includes that: a traffic collection request is sent to a network controller according to a pre-set collection policy, wherein the traffic collection request is used for allowing the network controller to send a request for traffic collection to one or more corresponding network devices; traffic data collected by the one or more network devices are received (S11); and the received traffic data of the one or more network devices are analyzed and processed to generate a network control policy corresponding to each network device, and the network control policies are sent to the network controller correspondingly to allow the network controller to send each network control policy to the corresponding network device.

Abstract: Methods for processing a raw Internet Protocol (IP) packet and corresponding devices are provided.

Abstract: A portable guitar stand has two stand racks, two supporting racks and two holding racks. The stand racks are pivotally connected to each other. The supporting racks are respectively and pivotally connected to the stand racks. The holding racks are respectively and pivotally connected to the stand racks. The holding rack and the supporting rack are pivotally connected to different sides of the corresponding stand rack. When the guitar stand is folded, the stand racks, the supporting racks and the holding racks are parallel to each other. When expanded, the supporting racks and the holding racks, which extend toward different sides, may firmly support the guitar on the guitar stand. When folded, the stand racks, the supporting racks and the holding racks are parallel to each other, thereby lowering the volume of the guitar stand for ease of transportation and storage.

Abstract: Disclosed are a client, a server, an RADIUS capability negotiation method and system, and the method includes: a client transmits to a server a first message carrying RADIUS capability parameters of the client; the server captures the RADIUS capability parameters in the first message, matches the RADIUS capability parameters in the first message with RADIUS capability parameters of the server to obtain a matching result, and transmits the matching result to the client through a second message; and the client determines whether to establish effective communication with the server according to the matching result in the second message. By means of the technical solutions of the disclosure, it is possible to extend the RADIUS protocol, and to solve the problem existing in the current RADIUS protocol that both sides in communication cannot perform RADIUS capability negotiation.

Abstract: Disclosed is a method for forwarding information in a distributed network, including that when receiving a message of an Application (APP) protocol, a forwarding device sends, according to a forwarding rule that is sent by a Software Defined Networking (SDN)/OpenFlow controller and corresponds to the APP protocol, the message to a corresponding application server directly or sends the message to a corresponding terminal directly. The disclosure further discloses a system for forwarding information in a distributed network. A transmission bandwidth of a control message between a network control layer and a forwarding layer can be ensured by means of the disclosure, thereby ensuring the stability of an SDN/OpenFlow message between the network control layer and the forwarding layer and ensuring system expansibility.

Abstract: Provided are a network access method and device for equipment. The method includes that: first equipment receives a first message, wherein the first message is used for indicating that a controller structuring and sending the first message can provide a reachable path reaching a network address allocation server; the first equipment sends a first request message to the controller according to the first message, wherein the first request message is used for requesting the controller and/or the path-reachable network address allocation server controlled by the controller to allocate a network address to the first equipment; and the first equipment accesses the network according to the allocated network address.

Abstract: A powder metallurgical method for fabricating a high-density soft magnetic metallic material comprises steps of providing an initial powder; using a spray drying process to fabricate the initial powder into a spray-dried powder; placing the spray-dried powder in a mold and compacting the spray-dried powder under a compacting pressure and a compacting temperature to form a green compact; and sintering the green compact at a sintering temperature to form a soft magnetic metallic material. The spray-dried powder, which is fabricated by the spray drying process, has superior flowability, compactability and compressibility and is suitable for the press-and-sinter process. The soft magnetic metallic material fabricated by the present invention is outstanding in sintered density and magnetic performance. The present invention adopts the inexpensive press-and-sinter process and has a low fabrication cost.

Abstract: The present invention relates to the field of communications. Disclosed are an 802.1X access session keepalive method, device, and system. The method comprises: during network access of a 802.1X client, an authenticating node used for access authentication sending, to the 802.1X client according to an actual keepalive period of the authenticating node, a keepalive request message used for determining whether the 802.1X client is off-net abnormally; and during a preset duration of the authenticating node, if the authenticating node does not receive a keepalive response message from the 802.1X client in response to the keepalive request message, the authenticating node determining that the 802.1X client is off-net abnormally; otherwise, determining that the 802.1X client is on-net normally. The embodiments of the present invention improve network resource utilization, reduce the security problem caused by too heavy load of the authenticating node, and lower the risk of errors in charging on time.

Abstract: A method and apparatus for keeping alive an L2TP tunnel state are provided, where the method includes: an active device and an opposite-end device establish an L2TP tunnel, the active device transmits to a standby device an interactive L2TP control message between the active device and the opposite-end device, and the active device performs corresponding processing on the L2TP control message only after having received a response about having stored the L2TP control message sent by the standby device; and when active-standby switching occurs between the active device and the standby device, the standby device connects to the opposite-end device via the L2TP tunnel, and performs corresponding processing according to the L2TP control message which has already been stored.

Abstract: A method and device for informing user address are disclosed. The method comprises: a defined network allocating, according to a user address prefix provided by a mobile network, a user address to a mobile network user accessing the mobile network from the defined network; and the defined network informing the mobile network of the allocated user address. The disclosure address the problems of complex flow for allocating user address and low allocation efficiency, and how to inform a mobile network of an allocated user address existing in the related art, thus achieving the allocation of an user address and improving informing efficiency.

Abstract: A method for controlling an access point in a wireless local area network (WLAN) and a communication system, the method includes: authenticating an access point; after the authentication succeeds, delivering an access controller list to the access point; the access point selecting an access controller from the access controller list according to a preset rule, and communicating with the selected access controller. Only in the case that the access point is successfully authenticated is the access controller list sent to the successfully-authenticated access point, thus solving the problem that the information of the access controller is leaked out because of delivering the access controller list to an illegitimately-set access point, and ensuring the security of network device information.

Abstract: A Broadband Network Gateway (BNG) pool based responding method is described, including that a BNG device in the BNG pool receives a user access request, and the BNG device responds according to the user access request and a delayed response strategy corresponding to the BNG device. A BNG device, a user equipment and a BNG pool based responding system are also described. Thus a BNG device in a BNG pool can respond to a user access request according to a delayed response strategy, then a user equipment can take a BNG device corresponding to a first response message received as a server, thereby being capable of ensuring system stability.

Abstract: A method and system for a wireless local area network user accessing a fixed broadband network, the method includes: a broadband network gateway (BNG) device initiating an identity authenticating process to an authentication authorization accounting (AAA) server for a wireless local area network (WLAN) user; after the AAA server successfully authenticates the WLAN user, the BNG device acquiring a mobility identifier of the WLAN user from the AAA server; after receiving the mobility identifier of the WLAN user, the BNG device allowing the mobility access of the WLAN user.

Abstract: Disclosed is a method for a mobile user to access a fixed network, comprising: after a BNG and a TWAG establish a multi-protocol label switching (MPLS) tunnel and/or pseudowire, or a layer 2 tunneling protocol (L2TP) tunnel and/or session, the TWAG establishes a GPRS tunneling protocol (GTP)/proxy mobile internet protocol (PMIP) connection with a mobile network gateway according to user information, and acquires the address and service parameter of the user; and the TWAG transmits the service parameter of the user to the BNG via an MPLS control message or an L2TP control message. Also disclosed is a system for a mobile user to access a fixed network. The present invention standardizes user QoS security after the introduction of a TWAG, and can provide a user with better communication service, thus improving user experience.

Abstract: A method for a Wireless Local Area Network (WLAN) user to access a fixed network is disclosed, which includes: after the WLAN user is authenticated successfully, a Broadband Network Gateway (BNG) sends obtained user subscription information to a WLAN device; and after the WLAN device performs related configuration according to the user subscription information, a WLAN user terminal accesses a network. A system for a WLAN user to access a fixed network is also disclosed. The present disclosure can solve the problem that a WLAN network cannot perceive the user subscription information and further cannot provide differentiated services based on different users and different subscription information because a WLAN user passes through BNG authentication.

Abstract: An accounting method and device are disclosed in the disclosure. The method includes that: a BNG transmits a second Accounting-Request message to an AAA server after receiving a first Accounting-Request message from an AC, wherein the first Accounting-Request message is used for activating the BNG to execute an accounting operation; and the BNG transmits a second Accounting-Stop message to the AAA server after receiving a first Accounting-Stop message from the AC, wherein the first Accounting-Stop message is used for activating the BNG to stop the accounting operation. By the disclosure, the problem that the function division of the AC and the BNG is not yet clear during the accounting operation in the related art is solved, so that functions of the AC and the BNG are clearly divided during the accounting operation, an accounting operation flow is further made clear, and the accounting efficiency is improved.