CN103326918A

CN103326918A - Message forwarding method and message forwarding equipment

Info

Publication number: CN103326918A
Application number: CN2013101861249A
Authority: CN
Inventors: 赵昌峰
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: New H3C Information Technologies Co Ltd
Priority date: 2013-05-17
Filing date: 2013-05-17
Publication date: 2013-09-25
Anticipated expiration: 2033-05-17
Also published as: CN103326918B

Abstract

The invention discloses a message forwarding method which is applied to equipment which simultaneously connects a shortest-routine bridge SPB network with an L3VPN network. The message forwarding method includes the following steps that a virtual forwarding channel VFC which links a VPN example in the L3VPN network and an SPB example in the SPB network is set up, different virtual local area network VLAN identification in the SPB example corresponds to different VFCs. Each VFC is bound with a VPN example. Flow is intercommunicated in the SPB network and the VPN network through VFC interfaces corresponding to the examples. The invention further discloses BEB-PE equipment and BEB equipment. The message forwarding method, the BEB-PE equipment and the BEB equipment can reduce operation cost.

Description

A kind of message forwarding method and equipment

Technical field

The present invention relates to communication technical field, particularly a kind of message forwarding method and equipment.

Background technology

Shortest path bridge MAC-in-MAC(SPBM) technology can apply to the SPB network.The SPB network is by provider backbone bridging (PBB, Provider Backbone Bridge) equipment of type and the backbone links between the equipment are formed, equipment can be divided into backbone network edge bridges (BEB, Backbone Egdge Bridge), backbone network core bridges types such as (BCB, Backbone Core Bridge).On the application final body of SPBM technology in the SPB network transmitted now: BEB equipment will carry out the MAC-in-MAC encapsulation from the message of user's network, and will abbreviate the M-in-M message as through the message that MAC-in-MAC encapsulates and be forwarded in the backbone network; BCB equipment is according to backbone network Media Access Control Address (B-MAC) and backbone network VLAN(B-VLAN) forwarding M-in-M message; Last message arrives the BEB equipment of destination, and BEB equipment will carry out decapsulation from the M-in-M message of backbone network, and be forwarded in the destination user network.

For with the existing VPN of operator Web-compatible, need be with SPB network and three-layer virtual special network (L3VPN) intercommunication, the networking that prior art SPB inserts L3VPN as shown in Figure 1.Among Fig. 1, when inserting the L3VPN network, two edge devices are arranged, one is the BEBR1 on the SPB network boundary, and one is the PER1 on the L3VPN network boundary.Therefore, during two network integrations, edge device quantity is many in the prior art, and running cost compared is higher.

Summary of the invention

The object of the present invention is to provide a kind of message forwarding method and equipment, can reduce operation cost.

For achieving the above object, the invention provides a kind of message forwarding method, this method is applied to connect simultaneously in the equipment of shortest path bridge SPB network and L3VPN network, and this method comprises:

Set up VPN instance in the related L3VPN network and the virtual forwarding passage VFC of the SPB example in the SPB network, the corresponding different VFC of different virtual LAN VLAN sign in the described SPB example, VPN instance of each VFC binding;

By the route table items of described VFC from SPB network side study VPN instance correspondence, the content of described route table items comprises: purpose IP address, outgoing interface, next-hop ip address and forwarding encapsulation, and described forwarding encapsulation is used for the data message that mails to the SPB network side is carried out the MAC-in-MAC encapsulation;

When receiving the message that mails to the SPB network, route table items according to the described VPN instance correspondence of purpose IP address search of message, obtain corresponding forwarding encapsulation, and after according to the forwarding encapsulation that obtains message being carried out the MAC-in-MAC encapsulation, the VFC by described VPN instance correspondence sends to message in the SPB network;

When receiving the message that mails to the L3VPN network, according to the incidence relation of SPB instance identification and VPN instance, the VFC interface by correspondence is forwarded to the L3VPN network with message.

For achieving the above object, the present invention also provides a kind of BEB-PE equipment, and described BEB-PE equipment comprises:

Virtual forwarding passage VFC interface configuration unit, be used for setting up the VPN instance of related L3VPN network and the virtual forwarding passage VFC of the SPB example in the SPB network, the corresponding different VFC of different virtual LAN VLAN sign in the described SPB example, VPN instance of each VFC binding;

Unit, be used for the route table items from SPB network side study VPN instance correspondence by described VFC, the content of described route table items comprises: purpose IP address, outgoing interface, next-hop ip address and forwarding encapsulation, and described forwarding encapsulation is used for the data message that mails to the SPB network side is carried out the MAC-in-MAC encapsulation;

The processing forward unit, be used for when receiving the message that mails to the SPB network, route table items according to the described VPN instance correspondence of purpose IP address search of message, obtain corresponding forwarding encapsulation, and after according to the forwarding encapsulation that obtains message being carried out the MAC-in-MAC encapsulation, the VFC by described VPN instance correspondence sends to message in the SPB network;

For achieving the above object, the present invention also provides a kind of BEB equipment, and described BEB equipment comprises:

Receiving element, be used for receiving BEB-PE and be carried at the VFC gateway type length value TLV that Link State packet LSP sends, the content of described VFC gateway TLV comprises the VLAN in the SPB example, the VFC interface IP address of each VLAN correspondence, the VFC interface mac address of each VLAN correspondence; Also be used for receiving the ARP request message;

Processing unit is used for the content of the VFC gateway TLV in the corresponding SPB example is taken out, and is issued to local for answering list item; When also being used for receiving purpose IP address that user's side sends and answering the ARP request message of list item VFC interface IP address for local generation, answer from local generation and to obtain corresponding informance the list item user's side is carried out arp response.

In sum, in the embodiment of the invention, during SPB network insertion L3VPN network, perhaps during L3VPN network insertion SPB network, VPN instance and SPB example get up by the BEB-PE device association, BEB-PE equipment had both had the function of BEB equipment in the SPB network, also had the function of PE equipment in the L3VPN network.At the BEB-PE equipment configuration VFC of related VPN instance and SPB example interface, VPN instance of each VFC interface binding, and a VLAN ID in the corresponding SPB example, flow is realized intercommunication by the VFC interface of corresponding instance in SPB network and VPN network.

Description of drawings

Fig. 1 inserts the networking schematic diagram of L3VPN for prior art SPB.

Fig. 2 is the networking schematic diagram that SPB inserts L3VPN in the first embodiment of the invention.

Fig. 3 is the networking schematic diagram that SPB inserts L3VPN in the second embodiment of the invention.

Fig. 4 is third embodiment of the invention VFC gateway TLV structural representation.

Fig. 5 is the structural representation of backbone network edge bridges-provider edge equipment in the embodiment of the invention.

Fig. 6 is the structural representation of backbone network edge bridges equipment in the embodiment of the invention.

Embodiment

For making purpose of the present invention, technical scheme and advantage clearer, below with reference to the accompanying drawing embodiment that develops simultaneously, scheme of the present invention is described in further detail.

The present invention inserts mutually for realizing SPB network and L3VPN network, VPN instance and SPB example are associated by backbone network edge bridges-provider edge equipment (BEB-PE), BEB-PE equipment had both had the function of BEB equipment in the SPB network, also had the function of PE equipment in the L3VPN network.Key is, set up virtual forwarding passage (VFC) interface that is used for related VPN instance and SPB example at BEB-PE, each VLAN ID in the same SPB example (VLAN ID) by corresponding VFC interface, is tied to the VPN instance that is associated with described SPB example respectively.Obviously, the VFC interface is virtual logic interfacing, disposes corresponding IP address and MAC Address on each VFC interface.Dispose MAC Address at BEB-PE equipment with the interface that the BCB equipment of SPB network is connected; Dispose IP address and MAC Address at BEB-PE equipment with the public network interface that the PE equipment of L3VPN network is connected.Need to prove, in the SPB network, a MAC-in-MAC example has represented the class business that operator provides, I-SID(Backbone Service Instance Identifier, backbone network Service Instance numbering) be exactly the unique number of this MAC-in-MAC example, the MAC-in-MAC example that SPB example described in the present invention just refers to, the i.e. example that is identified by I-SID.VPN instance described in the present invention refers to all is VPN instance in the L3VPN network.When the SPB network inserts the L3VPN network by a plurality of VLAN, the VFC passage corresponding with each VLAN can be arranged, so we can say, each VFC has a VPN embodiment bound, and a VLAN ID VLAN ID in the corresponding SPB example, therefore, on BEB-PE, according to the VLAN ID in the SPB example, just can find corresponding VPN instance VFC interface.

Fig. 2 is the networking schematic diagram that SPB inserts L3VPN in the first embodiment of the invention.The last the same SPB-ISIS that moves with other BEB of BEB-PE, study and calculating respective path are by VFC interface " connection " L3VPN network side.The SPB example is associated with VFC interface " left side ".The last the same BGP/MPLS L3VPN agreement of moving with other PE equipment of BEB-PE is by VFC interface " connection " SPB network side.VPN instance is associated with VFC interface " right side ".Site1 and Site2 are by the SPB network insertion, and Site3 is by the L3VPN network insertion.Site1 and Site2 belong to same SPB example, and belong to same VLAN100, and the I-SID of this SPB example correspondence is 1.Site3 belongs to the VPN instance that is associated with Site1 and Site2 place SPB example, is called VPN1.It is 1.1.1.1 that gateway device IP address is arranged among the Site2, and MAC Address is 0-1-1; It is 4.0.0.2 that the device address is arranged among the Site3, and corresponding PE2 interface IP address is 4.0.0.1; VLAN100 under the Site2 in the SPB example (I-SID is 1), by VFC interface (VFC1), VPN instance (VPN1) under the Site3 that binding is associated with described SPB example, the IP address of this VFC1 interface is 1.1.1.2.

Introduce the repeating process of flow from the L3VPN network to the SPB network below in detail.If message is transmitted according to the direction of arrow that has dotted line among Fig. 2, namely message sends from Site3, and purpose IP address is 1.1.1.1.

BEB-PE disposes (for example keeper's manual configuration) SPB example (I-SID is 1) and VPN instance (VPN1) respectively and since I-SID be 1 SPB example with VPN instance VPN1 between need communicate by letter, so, SPB example and VPN1 need be disposed and bind.And because Site2 belongs to the VLAN100 under the SPB example, so the VLAN100 in this SPB example by the VFC1 interface, binds VPN1, therefore, at BEB-PE configuration VFC1 interface, the IP address is 1.1.1.2.

When message sent from Site3, purpose IP address was 1.1.1.1, and target MAC (Media Access Control) address is the MAC Address of PE2, and PE2 receives the back according to existing L3VPN forwarding processing, and message arrives BEB-PE.Here, how to determine message is transmitted to BEB-PE for PE2, concrete grammar comprises: behind the last configuration of the BEB-PE VFC1 interface, in the address 1.1.1.2 that generates VFC1 interface 32 bitmasks, generate the network segment route 1.1.1.0 of VFC1 interface 24 bitmasks; BEB-PE suppose that by Border Gateway Protocol (BGP) route 1.1.1.0 application private network tags (applying for) for this reason the private network tags of applying for is 1000 from the label pond; BEB-PE sends to PE2 with this route 1.1.1.0 and private network tags 1000 thereof, is used for PE2 formation VPN route table and determines message is transmitted to BEB-PE.Receive that for PE2 the back according to existing L3VPN forwarding processing, refers to according to prior art message is carried out the label encapsulation, be encapsulated as the message that has private network tags, public network label, concrete encapsulation process is prior art, does not repeat them here.Message arrives BEB-PE, determine affiliated VPN instance according to private network tags, peel the label of message off, purpose IP address 1.1.1.1 according to message searches the route table items of this VPN instance correspondence, match the 1.1.1.1/32 list item, obtain the forwarding encapsulation in the described route table items, and according to transmitting encapsulation message is carried out the M-in-M encapsulation, forward at the VFC of this VPN instance correspondence interface.

Wherein, the route table items of this VPN instance correspondence, BEB-PE equipment is obtained by agreement study from the SPB dypass by the VFC1 interface, and the content of route table items comprises: purpose IP address, outgoing interface, next-hop ip address and forwarding encapsulation.From as can be seen, unlike the prior art, increased the content of transmitting encapsulation in this VPN route table items here.

In the present embodiment, the route table items of this VPN instance correspondence is as shown in table 1:

Purpose IP address	Outgoing interface	Next-hop ip address	Transmit encapsulation
				1.1.1.1	VFC1	1.1.1.1	Obtain according to the ARP list item

Table 1

BEB-PE is by SPB e-learning ARP(Address Resolution Protocol, address resolution protocol), form the ARP list item in the SPB network.Among this embodiment, particularly, BEB-PE sends the ARP request to the 1.1.1.1 among the Site2, the MAC Address of request 1.1.1.1;

The IP address of gateway is 1.1.1.1 among the Site2, send arp response to BEB-PE, carry the MAC Address 0-1-1 of 1.1.1.1 correspondence in this arp response, carried out the M-in-M encapsulation during this arp response process BEB2, so the B-SA of this arp response is BEB2, and can find corresponding virtual link (PW), i.e. PW between BEB2 and the BEB-PE by arp response;

After BEB-PE receives arp response, obtain corresponding SPB example according to the I-SID that encapsulates in the arp response message, know the VPN instance VFC interface VFC1 that this arp response is corresponding according to VLAN in this SPB example with the VFC binding relationship, the message incoming interface is designated as corresponding VPN instance VFC interface VFC1, generate the ARP list item, the content of this ARP list item comprises: the virtual link between IP address, MAC Address, VFC outgoing interface, VLAN ID, opposite end BEB equipment, opposite end BEB equipment and the BEB-PE equipment, specifically as shown in table 2:

Table 2

Content in the above-mentioned ARP list item is exactly to transmit the content of encapsulation in table 1 routing table, therefore, and in the middle of the forwarding encapsulation fields with the correspondence in route table items of the content record in the ARP list item.

BEB-PE carries out the M-in-M encapsulation according to transmitting encapsulation to the data message, at the VFC1 interface data message is sent to corresponding virtual link.Among this embodiment, send to the virtual link between BEB-PE and the BEB2, arrive BEB2, so in the M-in-M encapsulation,

B-SA is the backbone network source MAC, also is the outer source MAC of M-in-M encapsulation, extends this as BEB-PE in the MAC Address of SPB network side configuration;

B-DA is the backbone network target MAC (Media Access Control) address, also is the outer target MAC (Media Access Control) address of M-in-M encapsulation, extends this as BEB2;

B-Tag extends this as the B-Tag of the virtual link correspondence between BEB-PE and the BEB2;

Backbone network Service Instance sign (I-SID) in the backbone network service instance tag (I-Tag) extends this as the I-SID of corresponding SPB example, C-DA is the user network target MAC (Media Access Control) address, extend this as next and jump corresponding MAC Address 0-1-1, C-SA is the user network source MAC, extend this as local VFC interface MAC in this example, i.e. the MAC Address of VFC outgoing interface VFC1 in the ARP list item;

C-Tag is the VLAN of VFC1 interface correspondence, extends this as VLAN100 in the present embodiment;

Ethernet type is IP agreement (value is 0x0800);

The Data field is the data message (IP header and load thereof) that needs forwarding.

Further, the private network tags that encapsulates in the L3VPN network is relevant with next jumping, and M-in-M in SPB network encapsulation also is that the ARP list item according to next jumping encapsulates, and is associated by next jumping so private network tags encapsulates with M-in-M.Because data message needs to peel off label in the L3VPN network at BEB-PE, and carry out the M-in-M encapsulation and enter the SPB network, for making the BEB-PE device processes easy, preferably, private network tags is associated by next jumping with the M-in-M encapsulated content, wherein, the i.e. content of the forwarding encapsulation fields in the table 1 of M-in-M encapsulated content.Next jumping is 1.1.1.1 in the present embodiment, according to the incidence relation of private network tags and M-in-M encapsulation, private network tags and public network label is peeled off then, replaces with the M-in-M encapsulation.For clearly demonstrating the present invention, realize that below by table 3 private network tags and M-in-M encapsulate direct replacement management:

Table 3

Particularly, table 3 also can be thought a kind of special label mapping table of going into, according to the private network tags value 1000 of going in the label, executable operations: jumping to M-in-M encapsulation, is that 1000 private network tags and public network label replace with the M-in-M encapsulation that forms according to the corresponding ARP list item of next jumping (1.1.1.1) with label value.

Introduce the repeating process of flow from the SPB network to the L3VPN network below in detail.For example message is transmitted according to the direction of arrow that has solid line among Fig. 2, and namely message sends from Site2, and purpose IP address is 4.0.0.2.

At first, h.323-configured gateway IP is the IP address 1.1.1.2 of BEB-PE VFC1 interface in Site2, and learns BEB-PE VFC1 interface mac address by ARP, therefore, the gateway MAC of message is made as BEB-PE VFC1 interface mac address, and purpose IP address is 4.0.0.2.Realize transmitting according to existing SPB after arriving BEB2, arrive BEB-PE.Here, realize transmitting according to existing SPB behind the arrival BEB2, refer to according to prior art message is carried out the M-in-M encapsulation, concrete encapsulation process is prior art, does not repeat them here.

Because arriving BEB-PE, message has the M-in-M encapsulation, so message arrives BEB-PE, check user network purpose MAC(C-DA) whether be the MAC Address of this machine VFC interface correspondence, if, and the purpose IP address of message is not the IP address of this machine VFC interface correspondence, then obtain corresponding SPB example according to I-SID, according to VLAN and VFC binding relationship in this SPB example, find corresponding VPN instance VFC interface, the message incoming interface is designated as corresponding VPN instance VFC interface, and searches corresponding VPN instance routing table and carry out three layers of forwarding;

If the MAC Address of this machine VFC interface correspondence, and the purpose IP address of message is the IP address of this machine VFC interface correspondence, illustrate that this message is to need the local protocol massages of handling, send central processing unit (CPU) to handle on needing, then obtain corresponding SPB example according to I-SID, according to VLAN and VFC binding relationship in this SPB example, find corresponding VPN instance VFC interface, the message incoming interface is designated as corresponding VPN instance VFC interface, message is handled; If described message is the ARP message here, then need ARP message up sending ARP protocol module is handled.

MAC Address if not this machine VFC interface correspondence then abandons this unicast message.

In the present embodiment, the purpose MAC of unicast message is BEB-PE VFC1 interface mac address, and purpose IP address is 4.0.0.2, so the message incoming interface is designated as VFC1, searches corresponding VPN instance routing table coupling 4.0.0.0/24 list item and carries out three layers of forwarding.Arrive PE2 through the L3VPN network then, PE2 searches the corresponding routing table of VPN, is transmitted to the corresponding device among the Site3.

In addition, if what arrive BEB-PE is multicast or broadcasting packet, check whether user network purpose MAC is the MAC Address that native protocol needs, if, then obtain corresponding SPB example according to I-SID, according to VLAN and VFC binding relationship in this SPB example, find corresponding VPN instance VFC interface, the message incoming interface is designated as corresponding VPN instance VFC interface, message is handled; If not, then this multicast or broadcasting packet are abandoned.For example, equipment among the Site2 sends the ARP request message to BEB-PE, its broadcasting MAC is the MAC Address that BEB-PE need handle, then BEB-PE is according to VLAN ID(VLAN100 in the message), find corresponding VPN instance VFC interface, the message incoming interface is designated as VFC1, and the equipment in Site2 sends arp response, namely broadcasting packet is handled.

Fig. 3 is the networking schematic diagram that SPB inserts L3VPN in the second embodiment of the invention.Different with Fig. 2 is that Site4 inserts (being that BEB-PE and Site4 connected interface insert SPB) by BEB-PE in two layers of mode.It is 1.1.1.3 that IP address of equipment is arranged among the Site4, and MAC Address is 0-1-4.

If flow, is transmitted according to the direction of arrow that has solid line among Fig. 3, when message sends from Site3 to Site4 from the Site3 of L3VPN network, purpose IP address is 1.1.1.3, target MAC (Media Access Control) address is the PE2MAC address, and PE2 receives the back according to existing L3VPN forwarding processing, and message arrives BEB-PE.Here, PE2 receives that the back according to existing L3VPN forwarding processing, refers to according to prior art message is carried out the label encapsulation, is encapsulated as the message that has private network tags, public network label, and concrete encapsulation process is prior art, does not repeat them here.Message arrives BEB-PE, VPN instance under BEB-PE determines according to private network tags, peel the label of message off, purpose IP address 1.1.1.3 according to message searches the route table items of this VPN instance correspondence, match the 1.1.1.3/32 list item, obtain the forwarding encapsulation in the described route table items, and E-Packet according to the local virtual link list item of the clean culture of transmitting this user site in the encapsulation.

Wherein, the route table items of this VPN instance correspondence, BEB-PE equipment obtains from the study of Site4 Routing Protocol by the VFC1 interface, and in the present embodiment, the route table items of this VPN instance correspondence is as shown in table 4:

Purpose IP address	Outgoing interface	Next-hop ip address	Transmit encapsulation
				1.1.1.3	VFC1	1.1.1.0	Obtain according to the ARP list item

Table 4

BEB-PE equipment is learnt ARP by Site4, and the local virtual link list item of clean culture that forms this user site is as shown in table 5, is recorded in the forwarding encapsulation of route table items;

Target MAC (Media Access Control) address	Outgoing interface	VLAN
			0-1-4	BEB-PE and Site4 connected interface	VLAN100

Table 5

If the Site2 of flow from Site4 to the SPB network, transmit according to the direction of arrow that has dotted line among Fig. 3, BEB-PE receives the message of Site4, if unicast message, the purpose MAC of message is not the MAC Address of this machine VFC interface correspondence, then searches SPB example MAC table and carries out message forwarding; If multicast or broadcasting packet check whether the purpose MAC of message is the MAC Address that native protocol needs, if, then message is handled, simultaneously message is transmitted; Otherwise message is transmitted.

In addition, when having user site directly to insert on the BEB-PE equipment, BEB-PE equipment is created the MAC address entries of this user site, and creates the local virtual link list item of broadcasting of this user site automatically.

If flow from the Site2 of SPB network to Site4, transmit according to having the dashdotted direction of arrow among Fig. 3, because arriving BEB-PE, message has the M-in-M encapsulation, so if unicast message, the user network purpose MAC of message is not the MAC Address of this machine VFC interface correspondence, and then the BEB-PE MAC address entries of searching this user site carries out message forwarding; If multicast or broadcasting packet, BEB-PE checks whether the user network purpose MAC of message is the MAC Address that native protocol needs, if, then message is handled, simultaneously message is transmitted; Otherwise message is transmitted.Here native protocol can be the ARP agreement, also can be other agreements such as Routing Protocol.

The local virtual link list item of the broadcasting of the Site4 that BEB-PE creates in the present embodiment is as shown in table 6:

Target MAC (Media Access Control) address	Outgoing interface	VLAN
			FFFF-FFFF-FFFF	BEB-PE and Site4 connected interface	VLAN100

Table 6

BEB-PE equipment sends broadcasting or multicast message according to the local virtual link list item of above-mentioned broadcasting to the corresponding VLAN in the Site4.

Embodiment three

When the SPB example that inserts by BEB-PE or the equipment among the Site more for a long time, because when the equipment in the SPB example inserts L3VPN, corresponding instance VFC interface that need BEB-PE is set to gateway, so BEB-PE need handle more ARP message, the BEB-PE processing pressure is more.Can use BEB equipment to carry out generation and answer to reduce the BEB-PE message this moment.Method has two kinds: 1, and static configuration disposes the ARP of the corresponding VLAN of corresponding instance for answering function at BEB equipment.Shortcoming is, BEB-PE may not understand device A RP fast and change, and revises during configuration variation complicated.2, BEB-PE dynamically issues network management information.Behind BEB-PE configuration VFC virtual interface address, VFC virtual interface address and corresponding vlan information thereof are distributed to other BEB.

Particularly, newly-increased a kind of type lengths values (tlv) in SPB-ISIS: VFC gateway TLV, BEB-PE are carried at and conduct other BEB equipment of giving in the Link State packet (LSP).Third embodiment of the invention VFC gateway TLV structural representation as shown in Figure 4.Wherein, VFC-Gateway: show that this TLV is VFC gateway TLV; Length L ength: the length that shows this TLV; I-SID: the I-SID that shows corresponding SPB example; Number Number: the quantity that shows the corresponding a plurality of VLAN of this SPB example; VLAN: show a certain VLAN in this SPB example; IP address ip Address: the VFC interface IP address of this VLAN correspondence; VFC MAC: the VFC interface mac address that shows this VLAN correspondence.

The VFC interface that comprises the VLAN correspondence of each SPB example among the VFC gateway TLV that BEB-PE sends to BEB equipment;

After BEB equipment receives VFC gateway TLV, the content of the VFC gateway TLV in the corresponding SPB example is taken out, be issued to local for answering list item;

BEB equipment receives purpose IP address that user's side sends when answering the ARP request message of VFC interface IP address in the list item for local generation, answers from local generation and obtains corresponding informance the list item user's side is carried out arp response.

For instance, BEB equipment is 1 interior IP Address:1.1.1.2 with I-SID, VFC MAC:0-1-2, and the content of VLAN:VLAN100 is taken out, and is issued to local for answering list item;

If BEB equipment receives purpose IP that Site2 sends when being the ARP request message of 1.1.1.2, answer from local generation and obtain corresponding MAC Address 0-1-2 the list item, Site2 is responded, thereby make Site2 obtain the gateway VFC MAC of BEB-PE.

Therefore, if do not dispose the ARP of the corresponding VLAN of corresponding instance for answering function at BEB equipment, BEB equipment receives purpose IP address that user's side sends when being the ARP request message of VFC interface IP address, and BEB equipment copies the ARP request message, and is transmitted to BEB-PE; BEB-PE handles the ARP request message that receives.Through after the optimization of the present invention, realized the autogateway ARP proxy at BEB equipment, reduce the processing pressure of BEB-PE equipment.

Based on same inventive concept, the present invention also proposes a kind of backbone network edge bridges-provider edge equipment, being applied to the shortest path bridge network incorporates in the three-layer virtual special network, referring to Fig. 5, Fig. 5 is for being applied to the structural representation of the backbone network edge bridges-provider edge equipment of said method in the specific embodiment of the invention.This backbone network edge bridges-provider edge equipment comprises:

Virtual forwarding passage VFC interface configuration unit 501, be used for setting up the VPN instance of related L3VPN network and the virtual forwarding passage VFC of the SPB example in the SPB network, the corresponding different VFC of different virtual LAN sign VLAN in the described SPB example, VPN instance of each VFC binding;

Unit 502, be used for the route table items from SPB network side study VPN instance correspondence by described VFC, the content of described route table items comprises: purpose IP address, outgoing interface, next-hop ip address and forwarding encapsulation, and described forwarding encapsulation is used for the data message that mails to the SPB network side is carried out the MAC-in-MAC encapsulation;

Processing forward unit 503, be used for when receiving the message that mails to the SPB network, route table items according to the described VPN instance correspondence of purpose IP address search of message, obtain corresponding forwarding encapsulation, and after according to the forwarding encapsulation that obtains message being carried out the MAC-in-MAC encapsulation, the VFC by described VPN instance correspondence sends to message in the SPB network;

Wherein, unit 502 is further used for by described VFC from SPB network side learned addresses analysis protocol ARP list item, content according to described ARP list item, obtain being recorded in the forwarding encapsulation in the described route table items, described ARP list item comprises the virtual link between IP address, MAC Address, VFC outgoing interface, VLANID, opposite end BEB equipment, opposite end BEB equipment and this equipment.

Described processing forward unit 503 also is used for private network tags is associated by next jumping with the MAC-in-MAC encapsulated content; When receiving the message that mails to the SPB network, incidence relation according to private network tags and MAC-in-MAC encapsulation, private network tags and public network label are peeled off, replaced with MAC-in-MAC encapsulation, the VFC by described VPN instance correspondence sends to message in the SPB network.

Described processing forward unit 503 is further used for, and during message in receiving the SPB network, judges the type of message of the message that receives:

If unicast message, check whether user network purpose MAC is the MAC Address of this machine VFC interface correspondence, if, and the purpose IP address of message is not the IP address of this machine VFC interface correspondence, then according to VLAN ID in the message, find the VFC interface of corresponding VPN instance, the message incoming interface is designated as the VFC interface of corresponding VPN instance, and search corresponding VPN instance routing table and carry out three layers of forwarding; And if the purpose IP address of message is the IP address of this machine VFC interface correspondence, then according to VLAN ID in the message, finds the VFC interface of corresponding VPN instance, the message incoming interface is designated as the VFC interface of corresponding VPN instance, message is carried out respective handling; If not, then this unicast message is abandoned;

If multicast or broadcasting packet check whether user network purpose MAC is the MAC Address that native protocol needs, if, then according to VLAN ID in the message, find the VFC interface of corresponding VPN instance, the message incoming interface is designated as the VFC interface of corresponding VPN instance, message is carried out respective handling; If not, then this multicast or broadcasting packet are abandoned.

Further, when having user site directly to insert on the BEB-PE equipment,

Processing forward unit 503 also is used for the user site study ARP by directly inserting, and forms the local virtual link list item of clean culture of this user site, is recorded in the forwarding encapsulation of route table items; Behind the message in receiving the VPN network, peel the label of message off, purpose IP address according to message, search the route table items of this VPN instance correspondence, determine that purpose IP address is the user in the user site that directly inserts, obtain the forwarding encapsulation in the described route table items, and E-Packet according to the local virtual link list item of the clean culture of transmitting this user site in the encapsulation;

Also be used for creating automatically the local virtual link list item of broadcasting of this user site, send broadcasting or multicast message according to the local virtual link list item of the broadcasting of this user site to the corresponding VLAN in this user site.

Also be used for after the unicast message that receives the SPB network, the user network purpose MAC of message is not the MAC Address of this machine VFC interface correspondence, and the MAC address entries of then searching this user site carries out message forwarding;

Behind the multicast or broadcasting packet in receiving the SPB network, check whether the user network purpose MAC of message is the MAC Address that native protocol needs, if, then message is handled, simultaneously message is transmitted; Otherwise message is transmitted.

Behind the message that receives the user site that directly inserts, if unicast message, the purpose MAC of message is not the MAC Address of this machine VFC interface correspondence, then searches SPB example MAC table and carries out message forwarding; If multicast or broadcasting packet check whether the purpose MAC of message is the MAC Address that native protocol needs, if, then message is handled, simultaneously message is transmitted; Otherwise message is transmitted.

The present invention also proposes a kind of backbone network edge bridges equipment, is applied to the shortest path bridge network and incorporates in the three-layer virtual special network, and referring to Fig. 6, Fig. 6 is for being applied to the structural representation of the backbone network edge bridges equipment of said method in the specific embodiment of the invention.This backbone network edge bridges equipment comprises:

Receiving element 601 is used for receiving BEB-PE and is carried at the VFC gateway TLV that LSP sends, and the content of described VFC gateway TLV comprises the VLAN in the SPB example, the VFC interface IP address of each VLAN correspondence, the VFC interface mac address of each VLAN correspondence; Also be used for receiving the ARP request message;

Processing unit 602 is used for the content of the VFC gateway TLV in the corresponding SPB example is taken out, and is issued to local for answering list item; When also being used for receiving purpose IP address that user's side sends and answering the ARP request message of list item VFC interface IP address for local generation, answer from local generation and to obtain corresponding informance the list item user's side is carried out arp response.

Above-mentioned modular unit is based on the logic function division, and in actual applications, the function of a modular unit can be realized that also perhaps the function of a plurality of modular units is realized by a modular unit by a plurality of modular units.

In sum, the embodiment of the invention associates VPN instance and SPB example by BEB-PE, set up the virtual forwarding passage VFC interface that is used for related VPN instance and SPB example at BEB-PE, VPN instance of each VFC interface binding, and a VLAN ID in the corresponding SPB example, message is realized intercommunication by the VFC interface of corresponding instance in SPB network and VPN network.Further, insert the subscriber equipment of SPB network, with the VFC interface mac address of BEB-PE equipment as gateway MAC, so BEB-PE equipment will inevitably carry out arp response to the subscriber equipment that inserts the SPB network, for reducing the processing pressure of BEB-PE equipment, adopt BEB to carry out ARP for answering, realized the autogateway ARP proxy at BEB equipment.

The above is preferred embodiment of the present invention only, is not for limiting protection scope of the present invention.Within the spirit and principles in the present invention all, any modification of doing, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. a message forwarding method is characterized in that, this method is applied to connect simultaneously in the equipment of shortest path bridge SPB network and three-layer virtual special network L3VPN, and this method comprises:

2. the method for claim 1 is characterized in that, and is described by the route table items of VFC from SPB network side study VPN instance correspondence, further comprises:

By described VFC from SPB network side learned addresses analysis protocol ARP list item, content according to described ARP list item, obtain being recorded in the forwarding encapsulation in the described route table items, described ARP list item comprises the virtual link between IP address, MAC Address, VFC outgoing interface, VLAN ID VLAN ID, opposite end backbone network edge bridges BEB equipment, opposite end BEB equipment and this equipment.

3. the method for claim 1 is characterized in that, this method further comprises:

Private network tags is associated by next jumping with the MAC-in-MAC encapsulated content, when receiving the message that mails to the SPB network, incidence relation according to private network tags and MAC-in-MAC encapsulation, private network tags and public network label are peeled off, replace with MAC-in-MAC encapsulation, the VFC by described VPN instance correspondence sends to message in the SPB network.

4. the method for claim 1 is characterized in that, described method further comprises, during message in receiving the SPB network, judges the type of message of the message that receives:

5. the method for claim 1 is characterized in that,

When having user site directly to insert on this equipment, create the local virtual link list item of clean culture of this user site; Wherein, by the user site study ARP of direct access, form the local virtual link list item of clean culture of this user site, be recorded in the forwarding encapsulation of described route table items; This method also comprises:

Receive the message in the VPN network, peel the label of message off, purpose IP address according to message, search the route table items of this VPN instance correspondence, when the user in the user site that definite purpose IP address is directly access, obtain the forwarding encapsulation in the described route table items, and E-Packet according to the local virtual link list item of the clean culture of transmitting this user site in the encapsulation;

When having user site directly to insert on this equipment, create the local virtual link list item of broadcasting of this user site automatically; This equipment sends broadcasting or multicast message according to the local virtual link list item of the broadcasting of described this user site to the corresponding VLAN in this user site.

6. the method for claim 1 is characterized in that, when having user site directly to insert on this equipment, creates the MAC address entries of this user site; This method also comprises:

Receive the message in the SPB network, if unicast message, the user network purpose MAC of message is not the MAC Address of this machine VFC interface correspondence, and the MAC address entries of then searching this user site carries out message forwarding; If multicast or broadcasting packet check whether the user network purpose MAC of message is the MAC Address that native protocol needs, if, then message is handled, simultaneously message is transmitted; Otherwise message is transmitted;

When having user site directly to insert on this equipment, receive the message of the user site that directly inserts, if unicast message, the purpose MAC of message is not the MAC Address of this machine VFC interface correspondence, then searches SPB example MAC table and carries out message forwarding; If multicast or broadcasting packet check whether the purpose MAC of message is the MAC Address that native protocol needs, if, then message is handled, simultaneously message is transmitted; Otherwise message is transmitted.

7. the method for claim 1 is characterized in that, this method further comprises:

BEB equipment in described SPB network sends the Link State packet LSP that carries VFC gateway type length value TLV, so that can generating generation according to the content of described VFC gateway TLV, the BEB equipment in the described SPB network answers list item, and receiving purpose IP address that user's side sends when answering the ARP request message of VFC interface IP address in the list item for local generation, answer list item according to described generation and carry out arp response on behalf of this equipment;

The content of described VFC gateway TLV comprises the VLAN in the SPB example, the VFC interface IP address of each VLAN correspondence, the VFC interface mac address of each VLAN correspondence.

8. backbone network edge bridges-provider edge equipment BEB-PE is applied to shortest path bridge SPB network and incorporates among the three-layer virtual special network L3VPN, and described BEB-PE equipment comprises:

The processing forward unit, be used for when receiving the message that mails to the SPB network, route table items according to the described VPN instance correspondence of purpose IP address search of message, obtain corresponding forwarding encapsulation, and after according to the forwarding encapsulation that obtains message being carried out the MAC-in-MAC encapsulation, the VFC by described VPN instance correspondence sends to message in the SPB network; When receiving the message that mails to the L3VPN network, according to the incidence relation of SPB instance identification and VPN instance, the VFC interface by correspondence is forwarded to the L3VPN network with message.

9. BEB-PE equipment as claimed in claim 8, it is characterized in that, described unit is further used for by described VFC from SPB network side learned addresses analysis protocol ARP list item, content according to described ARP list item, obtain being recorded in the forwarding encapsulation in the described route table items, described ARP list item comprises the virtual link between IP address, MAC Address, VFC outgoing interface, VLAN ID, opposite end BEB equipment, opposite end BEB equipment and this equipment.

10. BEB-PE equipment as claimed in claim 8 is characterized in that, described processing forward unit also is used for private network tags is associated by next jumping with the MAC-in-MAC encapsulated content; When receiving the message that mails to the SPB network, incidence relation according to private network tags and MAC-in-MAC encapsulation, private network tags and public network label are peeled off, replaced with MAC-in-MAC encapsulation, the VFC by described VPN instance correspondence sends to message in the SPB network.

11. BEB-PE equipment as claimed in claim 8 is characterized in that, described processing forward unit is further used for, and during message in receiving the SPB network, judges the type of message of the message that receives:

12. BEB-PE equipment as claimed in claim 8 is characterized in that, when having user site directly to insert on the BEB-PE equipment,

The processing forward unit also is used for the user site study ARP by directly inserting, and forms the local virtual link list item of clean culture of this user site, is recorded in the forwarding encapsulation of described route table items; Behind the message in receiving the VPN network, peel the label of message off, purpose IP address according to message, search the route table items of this VPN instance correspondence, when the user in the user site that definite purpose IP address is directly access, obtain the forwarding encapsulation in the described route table items, and E-Packet according to the local virtual link list item of the clean culture of transmitting this user site in the encapsulation;

13. BEB-PE equipment as claimed in claim 8 is characterized in that, when having user site directly to insert on the BEB-PE equipment,

The processing forward unit also is used for after the unicast message that receives the SPB network, and the user network purpose MAC of message is not the MAC Address of this machine VFC interface correspondence, and the MAC address entries of then searching this user site carries out message forwarding;

14. a backbone network edge bridges equipment B EB is applied to the shortest path bridge network and incorporates in the three-layer virtual special network, described BEB equipment comprises: