Pass-through multicast admission control signaling
View Patent ↗In general, techniques are described for simplifying admission control signaling between subscriber devices, access nodes, and service edge routers to facilitate subscriber-specific admission control for multicast streams. In one example, a service edge router receives a service request and accesses a subscriber profile to determine whether the requesting subscriber is authorized to receive the service. Upon authorization, the service edge router returns the service request to the access node in a substantially similar form in which the service request was received. The access node receives the service request on a service edge router-facing interface, indicating the service edge router has granted authorization for the subscriber device to receive multicast traffic associated with the multicast group identified within the service request. The access node therefore modifies internal mapping tables that determine local elaboration of multicast traffic associated with the multicast group to include an interface to the subscriber device.
1. A method comprising:
receiving, by a services router from a layer 2 (L2) network device located between the services router and a subscriber device, a multicast join request that specifies a requested multicast group for the subscriber device and indicates a request by the subscriber device to receive multicast traffic associated with the requested multicast group, wherein the multicast join request comprises an Internet Protocol (IP) packet header having a protocol field that specifies an Internet Group Management Protocol (IGMP);
authorizing, by the services router, a subscriber associated with the subscriber device to receive the multicast traffic associated with the requested multicast group; and
by the services router, only when the subscriber is authorized to receive the multicast traffic associated with the requested multicast group, outputting the multicast join request from the services router toward the L2 network device, wherein the outputted multicast join request comprises the IP packet header having the protocol field that specifies the IGMP.
2. The method of claim 1 ,
wherein outputting the multicast join request from the services router toward the L2 network device comprises generating, by the services router, a modified multicast join request by encapsulating the multicast join request received from the L2 network device with an L2 header and sending the modified multicast join request toward the L2 network device.
3. The method of claim 1 , further comprising:
only when the subscriber is not authorized to receive multicast traffic associated with the requested multicast group, dropping the multicast join request.
4. The method of claim 1 ,
wherein receiving the multicast join request comprises receiving, by the services router, the multicast join request on a customer virtual local area network (CVLAN) for the subscriber device, and
wherein outputting the multicast join request from the services router toward the L2 network device comprises outputting, by the services router, the multicast join request toward the L2 network device on the CVLAN for the subscriber device.
5. The method of claim 1 , wherein authorizing the subscriber associated with the subscriber device comprises requesting, by the services router, authorization for the subscriber associated with the subscriber device from an accounting, authorization, and authentication server.
6. The method of claim 1 , further comprising:
forwarding, by the services router, multicast traffic for the requested multicast group to the L2 network device.
7. The method of claim 1 , further comprising:
mapping, by the services router, the requested multicast group to an L2 address for the subscriber device and storing the mapping;
after storing the mapping, determining the L2 address for the subscriber device using the mapping; and
outputting a multicast leave group message toward the L2 network device to remove the subscriber device from a list of receivers for the requested multicast group, wherein the multicast leave group message specifies the requested multicast group and comprises an L2 source address that is set to the L2 address for the subscriber device.
8. The method of claim 1 ,
wherein the multicast join request comprises a first L2 header having an L2 source address that is set to an L2 address of the subscriber device, and
wherein the outputted multicast join request comprises a second L2 header having an L2 source address that is set to the L2 address of the subscriber device.
9. The method of claim 1 , wherein the outputted multicast join request indicates the subscriber is authorized to receive multicast traffic associated with the requested multicast group.
10. A services router comprising:
a memory; and
one or more processors, the one or more processors configured to execute:
a service request handler configured to receive, from a layer 2 (L2) network device located between the services router and a subscriber device, a multicast join request that specifies a requested multicast group for the subscriber device and indicates a request by the subscriber device to receive multicast traffic associated with the requested multicast group, wherein the multicast join request comprises an Internet Protocol (IP) packet header having a protocol field that specifies an Internet Group Management Protocol (IGMP); and
an authorization module configured to authorize a subscriber associated with the subscriber device to receive the multicast traffic associated with the requested multicast group,
wherein the service request handler is further configured to, only when the subscriber is authorized to receive the multicast traffic associated with the requested multicast group, output the multicast join request toward the L2 network device, wherein the outputted multicast join request comprises the IP packet header having the protocol field that specifies the IGMP.
11. The services router of claim 10 ,
wherein to output the multicast join request toward the L2 network device the service request handler is further configured to generate a modified multicast join request by encapsulating the multicast join request received from the L2 network device with an L2 header and output the modified multicast join request toward the L2 network device.
12. The services router of claim 10 , wherein the service request handler is further configured to, only when the subscriber is not authorized to receive multicast traffic associated with the requested multicast group, drop the multicast join request.
13. The services router of claim 10 ,
wherein to receive the multicast join request the service request handler is configured receive the multicast join request on a customer virtual local area network (CVLAN) for the subscriber device, and
wherein to output the multicast join request toward the L2 network device the service request handler is configured to output the multicast join request toward the L2 network device on the CVLAN for the subscriber device.
14. The services router of claim 10 , further comprising:
an accounting, authorization, and authentication client configured to request authorization for the subscriber associated with the subscriber device from an accounting, authorization, and authentication server.
15. The services router of claim 10 , where the one or more processors are further configured to forward multicast traffic for the requested multicast group to the L2 network device.
16. The services router of claim 10 , wherein the service request handler is further configured to:
map the requested multicast group to an L2 address for the subscriber device and store the mapping;
after storing the mapping, determine the L2 address for the subscriber device using the mapping; and
output a multicast leave group message toward the L2 network device to remove the subscriber device from a list of receivers for the requested multicast group, wherein the multicast leave group message specifies the requested multicast group and comprises an L2 source address that is set to the L2 address for the subscriber device.
17. The services router of claim 10 ,
wherein the multicast join request comprises a first L2 header having an L2 source address that is set to an L2 address of the subscriber device, and
wherein the outputted multicast join request comprises a second L2 header having an L2 source address that is set to the L2 address of the subscriber device.
18. A non-transitory computer-readable medium comprising instructions for causing at least one programmable processor of a services router to:
receive, from a layer 2 (L2) network device located between the services router and a subscriber device, a multicast join request that specifies a requested multicast group for the subscriber device and indicates a request by the subscriber device to receive multicast traffic associated with the requested multicast group, wherein the multicast join request comprises an Internet Protocol (IP) packet header having a protocol field that specifies an Internet Group Management Protocol (IGMP);
authorize a subscriber associated with the subscriber device to receive the multicast traffic associated with the requested multicast group; and
only when the subscriber is authorized to receive the multicast traffic associated with the requested multicast group, output the multicast join request from the services router toward the L2 network device, wherein the outputted multicast join request comprises the IP packet header having the protocol field that specifies the IGMP.