This application claims priority for Taiwan patent application no. 105105330 filed on Feb. 23, 2016, the content of which is incorporated in its entirely.
Field of the Invention
The present invention relates to a setting device, particularly to a wireless access setting device.
Description of the Related Art
For wireless network access, different users use different rear-end network services nowadays. For example, staffs of a company use an internal network of the company, or clients use a dedicated wireless network for clients. Based on security considerations, packets of the two networks are distributed. In the conventional technology, different service set identifiers (SSIDs) are used to connect with the networks. However, not all the wireless access points are provided with 802.3q virtual local area networks (VLANs) to distribute the network data. As a result, the users that need different services cannot use this kind of wireless access point to effectively distribute the data and to guarantee security of the data. Besides, a switch connected with the wireless access point needs to be also set. For example, the switch is manually set for VLANs, which results in burdens and confusion of a manager.
In the conventional technology, a media access control address of a user is firstly recorded. Then, a corresponding VLAN value is inputted and set in the switch. Finally, the Internet is opened to the user. If there are many users or wireless access points, the manager repeatedly performs the abovementioned setting many times, which costs a lot of time and may be faulted. For example, in order to distribute the packets from the users, before transmitting the packets, the manager manually collects media access control (MAC) addresses of the users and sets the MAC addresses to correspond to VLANs according to a group of used SSIDs, thereby binding MAC/VLAN/SSID. If the wireless access point has a VLAN tagging function, the packets are automatically distributed to the corresponding VLAN when passing the switch. For example, when 802.1q packets from the wireless access point enter into a switch processing unit, the 802.1q tagging packets are directly dumped to ports of the corresponding VLANs. Since the user does not transmit the MAC data back to the wireless access controller, there is security consideration that the MAC addresses of the users are not tracked by the manager but directly connects to the Internet. If the wireless access point does not have the VLAN tagging function, the manager has to set the MAC addresses one by one in the switches. If a turnover of staff occurs, the manager immediately has to set the MAC addresses to achieve different requirement of different users. For example, the user roams among different wireless access points or different groups. If the setting is not automatized, the manager endlessly sets the equipment. To overcome the abovementioned problems, the present invention provides a wireless access setting device, so as to solve the afore-mentioned problems of the prior art.
A primary objective of the present invention is to provide a wireless access setting device, which presets pairing data for target identification datum corresponding to virtual local area networks (VLANs) in a wireless access controller, whereby packets are automatically dumped to the VLAN as a destination according to the setting when a user is in connection to manage and distribute the packets, thereby reducing the times of the additional setting and overcoming the problem with difficult management and security for data distribution.
To achieve the abovementioned objectives, the present invention provides a wireless access setting device connected with at least two virtual local area networks (VLANs) and controlling at least one or a plurality of wireless communication devices and the VLAN to transmit packets. The wireless access setting device comprises at least one wireless access point and a wireless access controller. The wireless access point broadcasts at least one target identification datum, such as a service set identifier (SSID). When at least one wireless communication device receives the target identification datum, the wireless communication device transmits its first media access control address and the target identification datum corresponded thereof to the wireless access point according to the target identification datum received and stores them in the wireless access point. The wireless access point outputs its second media access control address, the first media access control address and the target identification datum corresponded thereof. The wireless access controller is connected with the wireless access point and the VLANs through unshielded twisted pairs (UTPs) and presets pairing data for the target identification datum corresponding to the VLAN. The wireless access controller automatically receives the second media access control address, the first media access control address and the target identification datum corresponded thereof, stores them in pairs and uses them and the pairing data to control the wireless communication device and the corresponding VLAN to transmit the packets through the wireless access point.
The wireless access controller regularly transmits check packets to the corresponding wireless access point according to the target identification datum. The wireless access point uses the check packets to find the first media access control address which is stored by itself and which corresponds to the target identification datum, and transmits response packets corresponded thereof to the wireless access controller. When at least one first media access control address leaves the wireless access point and the wireless access controller uses the response packets to determines the first media access control address stored in the wireless access controller is not stored in the wireless access point, the wireless access controller removes the first media access control address which is stored by itself and which is not stored in the wireless access point, and its setting for the second media access control address, the target identification datum and the VLAN.
The wireless access point finds the first media access control address which is stored by itself and which corresponds to the target identification datum, and regularly transmits leave packets corresponded thereof to the wireless access controller. When at least one first media access control address leaves the wireless access point and the wireless access controller uses the leave packets to determines the first media access control address stored in the wireless access controller is not stored in the wireless access point, the wireless access controller removes the first media access control address which is stored by itself and which is not stored in the wireless access point, and its setting for the second media access control address, the target identification datum and the VLAN.
The wireless access controller further comprises a first power supply, a transmission power source unit, a first processor, a first memory and a packet switch. The first power supply receives a first external voltage, converts the first external voltage into a first direct-current (DC) voltage and outputs the first DC voltage, wherein the first external voltage is an alternative-current (AC) voltage or a DC voltage. The transmission power source unit is connected with the first power supply and the wireless access point and receives the first DC voltage. The first processor is connected with the transmission power source unit, receives the first DC voltage, and uses the first DC voltage to control the transmission power source unit to supply the first DC voltage to the wireless access point. The first memory is connected with the first processor and stores the pairing data. The packet switch is connected with the VLANs, the transmission power source unit and the first processor, receives the first DC voltage to receive the second media access control address, the first media access control address and the target identification datum corresponded thereof through the transmission power source unit, and uses the first processor to store them in the first memory in pairs. The packet switch and the first processor use the second media access control address, the first media access control address, the target identification datum corresponded thereof and the pairing data to control the wireless communication device and the corresponding the VLAN through the transmission power source unit and the wireless access point.
The wireless access point is realized with at least two embodiments. In an embodiment, the wireless access point further comprise a wireless transceiver unit, a second memory, a transmission powered unit and a second processor. The second memory stores the target identification datum. The transmission powered unit is connected with the transmission power source unit. The second processor is connected with the transmission powered unit, the wireless transceiver unit and the second memory, receives the first DC voltage through the transmission powered unit, uses the wireless transceiver unit to broadcast the target identification datum and to receive the first media access control address and the target identification datum corresponded thereof, stores the first media access control address in the second memory, and outputs its the second media access control address, the first media access control address and the target identification datum corresponded thereof through the transmission powered unit.
In another embodiment, the wireless access point further comprise a wireless transceiver unit, a second memory, a second power supply, a transmission powered unit and a second processor. The second memory stores the target identification datum. The second power supply receives a second external voltage and converts the second external voltage into a second DC voltage. The transmission powered unit is connected with the transmission power source unit and the second power supply. The second processor is connected with the transmission powered unit, the wireless transceiver unit and the second memory, receives the second DC voltage through the transmission powered unit, uses the wireless transceiver unit to broadcast the target identification datum and to receive the first media access control address and the target identification datum corresponded thereof, stores the first media access control address in the second memory, and outputs its the second media access control address, the first media access control address and the target identification datum corresponded thereof through the transmission powered unit.
Below, the embodiments are described in detail in cooperation with the drawings to make easily understood the technical contents, characteristics and accomplishments of the present invention.
Refer to
The wireless access controller 16 further comprises a first power supply 18, a transmission power source unit 20, a first processor 22, a first memory 24 and a packet switch 26, wherein the transmission power source unit 20 complies with a communication protocol of IEEE802.3af or IEEE802.3at. The first power supply 18 receives a first external voltage VE1, converts the first external voltage VE1 into a first direct-current (DC) voltage and outputs the first DC voltage, wherein the first external voltage VE1 is an alternative-current (AC) voltage or a DC voltage. The transmission power source unit 20 is connected with the first power supply 18 and the wireless access point 14 and receives the first DC voltage. The first processor 22 is connected with the transmission power source unit 20, receives the first DC voltage, and uses the first DC voltage to control the transmission power source unit 20 to supply the first DC voltage to the wireless access point 14. The first memory 24 is connected with the first processor 22 and stores the pairing data. The packet switch 26 is connected with the VLANs 10a and 10b, the transmission power source unit 20 and the first processor 22, receives the first DC voltage, uses the first DC voltage and the network control protocol to receive the second media access control address, the first media access control addresses and the target identification data corresponded thereof through the transmission power source unit 20, and uses the first processor 22 to store them in the first memory 24 in pairs. The packet switch 26 and the first processor 22 use the second media access control address, the first media access control addresses, the target identification data corresponded thereof and the pairing data to control the wireless communication devices 12a and 12b and the corresponding the VLANs 10a and 10b to transmit the packets through the transmission power source unit 20 and the wireless access point 14.
The wireless access point 14 further comprise a wireless transceiver unit 28, a second memory 30 storing the two target identification data, a transmission powered unit 32 and a second processor 34, wherein the wireless transceiver unit 28 complies with a communication protocol of IEEE802.11a, IEEE802.11b, IEEE802.11g, IEEE802.11n or IEEE802.11ac, and wherein the transmission powered unit 32 complies with a communication protocol of IEEE802.3at or IEEE802.3af. The transmission powered unit 32 is connected with the transmission power source unit 20. The second processor 34 is connected with the transmission powered unit 32, the wireless transceiver unit 28 and the second memory 30, receives the first DC voltage through the transmission powered unit 32, uses the wireless transceiver unit 28 to broadcast the target identification data and to receive the first media access control addresses and the target identification data corresponded thereof, and stores the first media access control addresses in the second memory 30. Using the network control protocol, the second processor 34 outputs its the second media access control address, the first media access control addresses and the target identification data corresponded thereof through the transmission powered unit 32. When a user uses an appointed target identification datum to perform connection, the wireless access controller 16 immediately and automatically dumps packets to the VLAN as a destination according to the setting, so as to conveniently manage and distribute the packets, thereby achieving central automation setting, reducing the times of the additional setting and overcoming the problem with difficult management and security for data distribution.
Refer to
The present invention has two kinds of ways of cleaning the first media access address. The first way is introduced below. The wireless access controller 16 regularly transmits check packets to the corresponding wireless access point 14 according to the two target identification data and the network control protocol. The wireless access point 14 uses the check packets to find the first media access control addresses which are stored by itself and which correspond to the two target identification data, and transmits response packets corresponded thereof to the wireless access controller 16 by using the network control protocol. When at least one first media access control address leaves the wireless access point 14 and the wireless access controller 16 uses the response packets to determines the first media access control address stored in the wireless access controller 16 is not stored in the wireless access point 14, the wireless access controller 16 removes the first media access control address which is stored by itself and which is not stored in the wireless access point 14, and its setting for the second media access control address, the target identification datum and the VLAN.
Specifically, refer to
In addition to the abovementioned way, the second way of cleaning the first media access control address is introduced below. Refer to
Specifically, refer to
Refer to
The operation process of the second embodiment of the present invention is similar to that of
In conclusion, the present invention presets pairing data for target identification datum corresponding to virtual local area networks (VLANs) in a wireless access controller, whereby packets are automatically dumped to the VLAN as a destination according to the setting when a user is in connection, and uses central setting automation to manage the packets to overcome the problem with security for data distribution.
The embodiments described above are only to exemplify the present invention but not to limit the scope of the present invention. Therefore, any equivalent modification or variation according to the shapes, structures, features, or spirit disclosed by the present invention is to be also included within the scope of the present invention.
Number | Date | Country | Kind |
---|---|---|---|
105105330 | Feb 2016 | TW | national |