Virtual private network node information processing method, relevant device and system

1. A Virtual Private Network (VPN) node information processing method performed by a network entity communicating with at least two nodes, the at least two nodes including a first node and a second node, comprising:

receiving an access request message sent by a second node, wherein the access request message at least carries authentication information, a current real Internet Protocol (IP) address, a node name of the second node and information indicating whether to accept extranet connection of the second node;

allocating, by a processor coupled to a memory storage, a virtual IP address of the second node when the authentication information of the node is correct;

registering the current real IP address, the node name of the second node, the information indicating whether to accept the extranet connection, and the virtual IP address of the second node as registration information;

receiving a query message sent by the first node, wherein the query message carries at least one of a node name of the second node and the virtual IP address of the second node;

querying registration information of the second node by the first node according to at least one of the node name of the second node and the virtual IP address of the second node;

sending the registration information of the second node to the first node, wherein the registration information of the second node at least carries information indicating whether the second node accepts the extranet connection;

when neither the second node nor the first node accepts the extranet connection, receiving a network tunnel establishing request sent by the first node and a network tunnel establishing request sent by the second node:

sending a network tunnel establishing response to the first node and a network tunnel establishing response to the second node so as to establish a network tunnel between the first node and the second node; and

delivering information between the first node and the second node by using the network tunnel between the first node and the second node.

2. The method according to claim 1 , further comprising:

receiving a query message sent by the first node, wherein the query message carries at least one of a node name of the first node and a virtual IP address of the first node;

querying registration information of the first node according to at least one of the node name of the first node and the virtual IP address of the first node; and

sending the registration information of the first node to the first node, wherein the registration information of the first node at least carries information indicating whether the first node accepts the extranet connection.

3. A Virtual Private Network (VPN) node information processing device, comprising:

a first receiver, configured to receive an access request message sent by a second node, wherein the access request message at least carries authentication information, a current real Internet Protocol (IP) address, a node name of the second node and information indicating whether to accept extranet connection of the second node;

a second receiver, configured to receive a query message sent by a first node, wherein the query message carries a node name of the second node or a virtual IP address of the second node or their both the node name of the second node and the virtual IP address of the second node;

a processor, configured to judge whether the authentication information of the second node is correct, allocate a virtual IP address for the second node when the authentication information of the second node is judged as correct, register the current real IP address, the node name of the second node, the information indicating whether to accept the extranet connection, and the virtual IP address of the second node as registration information, and query registration information of the second node according to the node name of the second node or the virtual IP address of the second node or both the node name of the second node and the virtual IP address of the second node; and

a transmitter, configured to send the registration information of the second node to the first node, wherein the registration information of the second node at least carries information indicating whether the second node accepts the extranet connection;

when neither the second node nor the first node accepts the extranet connection, the first receiver is further configured to receive a network tunnel establishing request sent by the first node and a network tunnel establishing request sent by the second node;

wherein the transmitter is further configured to send a network tunnel establishing response to the first node so as to establish a network tunnel between the transmitter and the first node, and send a network tunnel establishing response to the second node so as to establish a network tunnel between the transmitter and the second node: and

wherein the processor is further configured to control the second receiver to receive information sent by the first node to the second node, and control the transmitter to transmit the information to the second node, and control the second receiver to receive information sent by the second node to the first node, and control the transmitter to transmit the information to the first node.

4. The processing device according to claim 3 , wherein

the second receiver is configured to receive a query message sent by the first node, wherein the query message carries at least one of a node name of the first node and a virtual IP address of the first node;

the processor is configured to query registration information of the first node according to at least one of the node name of the first node and the virtual IP address of the first node; and

the transmitter is configured to send the registration information of the first node to the first node, wherein the registration information of the first node at least carries information indicating whether the first node accepts the extranet connection.