Access Control Method, Apparatus, and System

    公开(公告)号:US20220329566A1

    公开(公告)日:2022-10-13

    申请号:US17809657

    申请日:2022-06-29

    Abstract: A control point obtains a correspondence between a plurality of groups and a plurality of access policies; determines that a user in a first group accesses a network by using a first policy enforcement point, where the first group belongs to the plurality of groups; and sends, to the first policy enforcement point, a first access policy corresponding to the first group, where the first access policy belongs to the plurality of access policies, and the first access policy is used to determine whether the first group is accessible by a second group.

    Route processing method, device, and system

    公开(公告)号:US11277348B2

    公开(公告)日:2022-03-15

    申请号:US16709287

    申请日:2019-12-10

    Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

    Method for implementing service chain, device, and system

    公开(公告)号:US10700891B2

    公开(公告)日:2020-06-30

    申请号:US15835603

    申请日:2017-12-08

    Abstract: A method of implementing a service chain in a service chain-enabled domain network includes: receiving, by an intermediate service node (SN), an extended first Border Gateway Protocol (BGP) packet from a downstream SN that is on a service chain path and immediately adjacent to the intermediate SN, the extended first BGP packet including a service chain path identifier identifying the service chain path and a first service chain path including a service chain path from an ingress SN to the intermediate SN, determining an upstream SN that is on the first service chain path and immediately adjacent to the intermediate SN, and sending an extended second BGP packet to the upstream SN, the extended second BGP packet including the service chain path identifier and a second service chain path including a service chain path from the ingress SN to the upstream SN.

    Route processing method, device, and system

    公开(公告)号:US10554567B2

    公开(公告)日:2020-02-04

    申请号:US15866080

    申请日:2018-01-09

    Abstract: A route processing method, a device, and a system, where the method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device. Therefore, limited-time effective information is automatically disseminated, a limited-time effective requirement for a traffic control policy is met, configuration workload is reduced, and maintenance difficulty is lowered.

Patent Agency Ranking