Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: Embodiments of this application disclose a data transmission method, a device, and a computer-readable storage medium. The method in embodiments of this application includes: a first end sends, to a second end, a transport layer protocol connection establishment request message carrying first capability information, and receives a transport layer protocol connection establishment response message from the second end, where the first capability information indicates a support status of the first end for a plurality of types of indication information, and second capability information carried in the transport layer protocol connection establishment response message indicates a support status of the second end for the plurality of types of the indication information or indicates a joint support status of the first end and the second end for the plurality of types of the indication information. a message carrying indication information of the first subtype.

Abstract: A control point obtains a correspondence between a plurality of groups and a plurality of access policies; determines that a user in a first group accesses a network by using a first policy enforcement point, where the first group belongs to the plurality of groups; and sends, to the first policy enforcement point, a first access policy corresponding to the first group, where the first access policy belongs to the plurality of access policies, and the first access policy is used to determine whether the first group is accessible by a second group.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: A method includes: An AP device sends, to an AC device, a data tunnel support capability used to indicate a type of at least one data tunnel supported by the AP device, where the type of the at least one data tunnel includes a VXLAN; the AP device receives configuration information that is of a VXLAN tunnel and that is sent by the AC device, where a local device of the VXLAN tunnel is the AP device, and the configuration information of the VXLAN tunnel includes an internet protocol IP address of at least one peer device of the VXLAN tunnel and VNI information of the VXLAN tunnel; and the AP device generates tunnel encapsulation information and routing information based on the IP address of the at least one peer device of the VXLAN tunnel and the VNI information.

Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: Embodiments of the present invention provide a Flow Specification-based communications method, device, and system. The method includes: obtaining, by a controller, a requirement indicating that a first resource on a forwarding device needs to be associated with a second resource on the forwarding device; and sending, by the controller, a Border Gateway Protocol Flow Specification BGP Flow Spec protocol packet according to the requirement, where the BGP Flow Spec protocol packet includes a network layer reachability information field and an extended community attribute field, the network layer reachability information field carries characteristic information of the first resource, the extended community attribute field carries a global identifier GID used to indicate the second resource, and the BGP Flow Spec protocol packet is used to instruct to associate the first resource with the second resource.

Abstract: A method of implementing a service chain in a service chain-enabled domain network includes: receiving, by an intermediate service node (SN), an extended first Border Gateway Protocol (BGP) packet from a downstream SN that is on a service chain path and immediately adjacent to the intermediate SN, the extended first BGP packet including a service chain path identifier identifying the service chain path and a first service chain path including a service chain path from an ingress SN to the intermediate SN, determining an upstream SN that is on the first service chain path and immediately adjacent to the intermediate SN, and sending an extended second BGP packet to the upstream SN, the extended second BGP packet including the service chain path identifier and a second service chain path including a service chain path from the ingress SN to the upstream SN.

Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: A route processing method, a device, and a system, where the method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device. Therefore, limited-time effective information is automatically disseminated, a limited-time effective requirement for a traffic control policy is met, configuration workload is reduced, and maintenance difficulty is lowered.

Abstract: Embodiments of this application provide a method for obtaining path information and an apparatus, relate to the communications field, and can accurately obtain a forwarding path for detecting a service packet. A service packet is obtained, where the service packet is a target service packet or an updated target service packet, the target service packet is a service packet that matches a flow rule, and the flow rules used to obtain the service packet that matches the flow rule; an ingress interface information field and/or an egress interface information field is/are generated according to a path detection tag on an ingress interface and/or an egress interface through which the service packet passes. The method is used to obtain path information of the service packet.

Abstract: This application discloses a method for implementing communication between an NVO3 network, to implement inter-AS communication between an NVO3 network and an MPLS VPN network. The method includes: obtaining an identifier of a PE device in the MPLS network and an MPLS label allocated by an ASBR in the MPLS network; allocating an IP address for the MPLS label from a local address pool; sending routing information to an NVE, where the routing information includes an identifier of the PE device and the allocated IP address, and the allocated IP address is used as an outer destination address of an NVO3 encapsulated packet sent by a TES in the NVO3 network to a CE device connected to the PE device in the MPLS network.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: Disclosed are a client, a server, an RADIUS capability negotiation method and system, and the method includes: a client transmits to a server a first message carrying RADIUS capability parameters of the client; the server captures the RADIUS capability parameters in the first message, matches the RADIUS capability parameters in the first message with RADIUS capability parameters of the server to obtain a matching result, and transmits the matching result to the client through a second message; and the client determines whether to establish effective communication with the server according to the matching result in the second message. By means of the technical solutions of the disclosure, it is possible to extend the RADIUS protocol, and to solve the problem existing in the current RADIUS protocol that both sides in communication cannot perform RADIUS capability negotiation.

Abstract: Embodiments of the present invention provide a Flow Specification-based communications method, device, and system. The method includes: obtaining, by a controller, a requirement indicating that a first resource on a forwarding device needs to be associated with a second resource on the forwarding device; and sending, by the controller, a Border Gateway Protocol Flow Specification BGP Flow Spec protocol packet according to the requirement, where the BGP Flow Spec protocol packet includes a network layer reachability information field and an extended community attribute field, the network layer reachability information field carries characteristic information of the first resource, the extended community attribute field carries a global identifier GID used to indicate the second resource, and the BGP Flow Spec protocol packet is used to instruct to associate the first resource with the second resource.

Abstract: Embodiments of this application provide a method for obtaining path information and an apparatus, relate to the communications field, and can accurately obtain a forwarding path for detecting a service packet. A service packet is obtained, where the service packet is a target service packet or an updated target service packet, the target service packet is a service packet that matches a flow rule, and the flow rules used to obtain the service packet that matches the flow rule; an ingress interface information field and/or an egress interface information field is/are generated according to a path detection tag on an ingress interface and/or an egress interface through which the service packet passes. The method is used to obtain path information of the service packet.