Method and device for passing through isolation device in surveillance network

摘要

The present invention provides a method for a surveillance node to pass through a network isolation device in an IP surveillance system. The method comprises steps of using a first IP address of a surveillance node per se to initiate a tunnel connection request towards a tunnel server, so as to establish a tunnel connection with the tunnel server. After establishing the tunnel connection, the step is obtaining a second IP address distributed by the tunnel server from the tunnel server, and decapsulating a tunnel packet received from the tunnel server to obtain an inner-layer IP packet indicating the content is surveillance signaling. The method further comprises the step of processing the surveillance signaling, encapsulating the surveillance signaling generated by the surveillance node into the inner-layer IP packet, and then encapsulating the inner-layer IP packet into the tunnel packet and sending the same to the tunnel server. The tunnel server forwards the inner-layer IP packet to a surveillance node of an outside network of a network isolation device. The present invention can effectively assist a surveillance node in a surveillance system to pass through a network isolation device, and solve various service problems caused by the isolation device.

主权项

1. A surveillance node passing through a network isolation device in an Internet Protocol (IP) surveillance system, wherein the surveillance node is located within an inner network of a network isolation device, said surveillance node comprising a processor, network interface and computer readable storage medium, wherein the processor is configured to:
send and receive a packet in the IP network; process a surveillance signaling; initiate a tunnel connection request towards the tunnel server by a first IP address of the surveillance node so as to establish a tunnel connection with the tunnel server, and obtain a second IP address assigned by the tunnel server after establishing the tunnel connection; decapsulate a tunnel packet received from the tunnel server to obtain an inner-layer IP packet indicating the surveillance signaling; wherein the inner-layer IP packet is a packet forwarded from an outside surveillance node of the network isolation device, a destination address of the tunnel packet being the first IP address, a source address of the tunnel packet being an IP address of the tunnel server itself; a destination address of the inner-layer IP packet being the second IP address, a source IP address being an IP address of the outside surveillance node; wherein the processor is further configured to encapsulate the generated surveillance signaling into the inner-layer IP packet, and to encapsulate the inner-layer IP packet into the tunnel packet and the tunnel packet is sent to the tunnel server via the network interface wherein a source address of the inner-layer IP packet is the second IP address, a destination IP address of the inner-layer packet being the IP address of the outside surveillance node, a source address of the tunnel packet being the first IP address, and a destination address of the tunnel packet being the IP address of the tunnel server.