MAC Address-based User Traffic Statistics Report by the FW
This section describes the mechanism for the FW to report user application traffic statistics to the cloud management platform based on the MAC address.
To provide better network services for users, the cloud management platform needs to acquire the traffic distribution of each user on the network. This requires the FW collect users' network access traffic statistics and report the statistics to the cloud management platform for the platform to manage traffic accordingly.
After the cloud management platform brings the FW under its management, it acquires users' traffic distribution from the FW as required. The platform delivers a traffic statistics collection instruction to the FW. The FW collects users' traffic statistics accordingly and reports the statistics to the platform. The detailed process is as follows.
- The cloud management platform sends a traffic statistics collection instruction to the FW through the NETCONF channel.
The instruction specifies the traffic statistics collection period, which is 5 minutes by default.
- The FW collects traffic statistics.
Users are authenticated on the FW before they access network resources. After they are authenticated, the FW generates an online user list that describes mappings between user names and device MAC addresses. After traffic statistics collection is enabled and packets sent by users arrive at the FW, the FW extracts MAC addresses of the packets and confirms user information corresponding to the packets based on the online user list. In addition, the FW performs application identification on user packets, identifies traffic of various types, and calculates the types and volumes of traffic sent from various users in the statistics collection period.
- The FW reports the statistics to the cloud management platform.
The cloud management platform displays traffic statistics of each user in a statistics collection period or calculates the statistics to offer traffic processing information of a FW.