Access network device selection method and apparatus

1 . A method, comprising:

sending, by a terminal device, a query message to a domain name server (DNS), wherein the query message comprises one or more of: first indication information, second indication information, or at least one group identifier for network selection (GIN),

wherein the first indication information indicates onboarding, and the second indication information indicates external authentication, and the at least one GIN comprises an identifier of a group to which one or more default credentials servers or credentials holders belong, and

wherein the query message requests to obtain a non-3 rd generation partnership project (3GPP) access network device identifier, and a non-3GPP access network device corresponding to the non-3GPP access network device identifier is located in a first non-public network; and

receiving, by the terminal device, a query response from the DNS, wherein the query response comprises the non-3GPP access network device identifier identifying the non-3GPP access network device.

2 . The method according to claim 1 , wherein the query message further comprises a non-public network identifier, and the first non-public network comprises a non-public network corresponding to the non-public network identifier.

3 . The method according to claim 1 , wherein the query message further comprises domain name information and the first indication information.

4 . The method according to claim 1 , wherein the query message further comprises domain name information and the second indication information.

5 . The method according to claim 1 , wherein the query message further comprises domain name information, and the at least one GIN is comprised in the domain name information.

6 . The method according to claim 1 , wherein when the query message comprises the at least one GIN, the first non-public network supports connecting to a default credentials server or a credentials holder corresponding to the at least one GIN to perform onboarding, or the first non-public network supports connecting to the default credentials server or the credentials holder corresponding to the at least one GIN to perform external authentication.

7 . The method according to claim 1 , wherein the non-3GPP access network device supports onboarding or external authentication.

8 . The method according to claim 1 , further comprising:

sending, by the terminal device, first information to the non-3GPP access network device, wherein the first information indicates onboarding or external authentication.

9 . The method according to claim 1 , wherein the non-3GPP access network device comprises an untrusted non-3GPP access network device, a non-3GPP interworking function, a trusted non-3GPP access network device, a trusted non-3GPP access point, a trusted non-3GPP gateway function, a trusted wireless local area network interworking function, a wireline access gateway function, or a trusted non-3GPP access network.

10 . A method, comprising:

receiving, by a domain name server (DNS), a query message from a terminal device, wherein the query message comprises one or more of: first indication information, second indication information, and at least one group identifier for network selection (GIN),

wherein the first indication information indicates onboarding, and the second indication information indicates external authentication, and the at least one GIN comprises an identifier of a group to which one or more default credentials servers or credentials holders belong, and

wherein the query message requests to obtain a non-3 rd generation partnership project (3GPP) access network device identifier, and a non-3GPP access network device corresponding to the non-3GPP access network device identifier is located in a first non-public network; and

sending, by the DNS, a query response to the terminal device, wherein the query response comprises the non-3GPP access network device identifier identifying the non-3GPP access network device, and the non-3GPP access network device identifier is determined based on the query message.

11 . The method according to claim 10 , wherein the query message further comprises a non-public network identifier, and the first non-public network comprises a non-public network corresponding to the non-public network identifier.

12 . The method according to claim 10 , wherein the query message further comprises domain name information, and one or more of the first indication information, the second indication information, and the at least one GIN are comprised in the domain name information.

13 . The method according to claim 10 , wherein when the query message comprises the at least one GIN, the first non-public network supports connecting to a default credentials server or a credentials holder corresponding to the at least one GIN to perform onboarding, or the first non-public network supports connecting to the default credentials server or the credentials holder corresponding to the at least one GIN to perform external authentication.

14 . The method according to claim 10 , wherein the non-3GPP access network device comprises an untrusted non-3GPP access network device, a non-3GPP interworking function, a trusted non-3GPP access network device, a trusted non-3GPP access point, a trusted non-3GPP gateway function, a trusted wireless local area network interworking function, a wireline access gateway function, or a trusted non-3GPP access network.

15 . A method, comprising:

obtaining, by a terminal device, one or more identifiers of at least one non-public network;

determining, by the terminal device, an identifier of a first non-public network from the identifiers of the at least one non-public network based on configuration information, wherein the configuration information indicates a non-public network that supports onboarding or a non-public network that supports external authentication; and

setting up, by the terminal device, a connection to a trusted non-3 rd generation partnership project (3GPP) access network device based on a message the terminal device receives from a domain name server (DNS), wherein the trusted non-3GPP access network device is located in the first non-public network, and the message comprises a non-3GPP access network device identifier identifying the trusted non-3GPP access network device.

16 . The method according to claim 15 , further comprising:

receiving, by the terminal device, one or more of first indication information, second indication information, or at least one group identifier for network selection (GIN),

wherein the first indication information indicates that the at least one non-public network supports onboarding, the second indication information indicates that the at least one non-public network supports external authentication, and the at least one GIN comprises an identifier of a group to which one or more default credentials servers or credentials holders belong.

17 . The method according to claim 15 , wherein receiving, by the terminal device, the one or more identifiers of the at least one non-public network comprises:

obtaining, by the terminal device, the one or more identifiers of the at least one non-public network from a broadcast message.

18 . A communication apparatus, comprising:

at least one transmitter; and

one or more processors, configured to execute computer instructions stored in at least one memory, to enable the communication apparatus to, using the at least one transmitter:

send a query message to a domain name server (DNS), wherein the query message comprises one or more of: first indication information, second indication information, and at least one group identifier for network selection (GIN), the first indication information indicates onboarding, and the second indication information indicates external authentication, and the at least one GIN comprises an identifier of a group to which one or more default credentials servers or credentials holders belong,

wherein the query message requests to obtain a non-3 rd generation partnership project (3GPP) access network device identifier, and a non-3GPP access network device corresponding to the non-3GPP access network device identifier is located in a first non-public network; and

receive a query response from the DNS, wherein the query response comprises the non-3GPP access network device identifier identifying the non-3GPP access network device.

19 . The communication apparatus according to claim 18 , wherein the query message further comprises a non-public network identifier, and the first non-public network comprises a non-public network corresponding to the non-public network identifier.

20 . The communication apparatus according to claim 18 , wherein the communication apparatus is further enabled to:

send first information to the non-3GPP access network device, wherein the first information indicates onboarding or external authentication.