CN108712496B

CN108712496B - Port mirroring method and device of OLT (optical line terminal) equipment

Info

Publication number: CN108712496B
Application number: CN201810490230.9A
Authority: CN
Inventors: 程翔; 刘俊; 万良栋
Original assignee: Topvision Technology Incies Co ltd
Current assignee: Topvision Technology Incies Co ltd
Priority date: 2018-05-21
Filing date: 2018-05-21
Publication date: 2021-08-24
Anticipated expiration: 2038-05-21
Also published as: CN108712496A

Abstract

The invention provides a port mirroring method and a port mirroring device of OLT equipment, wherein the method part comprises the following steps: determining a target VLAN, wherein the target VLAN is a VLAN not occupied by other services; copying data flow in the outgoing direction and/or the incoming direction of a PON port needing mirroring to obtain a mirrored data packet, and adding the VLAN as an outer layer tag to the mirrored data packet; and the control board redirects the mirrored data packet to a specified monitoring port according to the outer layer label of the mirrored data packet. The invention can carry out single-port mirroring and has the positive effects of cost saving and accuracy.

Description

Port mirroring method and device of OLT (optical line terminal) equipment

Technical Field

The invention relates to the technical field of communication, in particular to a port mirroring method and device of OLT equipment.

Background

The port mirror image is a functional characteristic that must be possessed by most products such as routers, switches, and OLT (optical line terminal) devices, and particularly requires a scenario with a relatively high data security, and requires real-time monitoring of data in and out of the device through the port mirror image function.

For the OLT access network device, not only the ingress and egress direction of the monitoring device is required, but also data of the ingress and egress direction of a single PON port needs to be monitored in the occasions of specific camera monitoring and the like.

In the prior art, with the development of PON technology and the improvement of integration level, a PON single-board port and an upstream single-board mirror image port of OLT large-scale equipment are not on the same board card equipment, and a mirror image function needs to be realized across board cards; in the prior art, there are two main methods for port mirroring on OLT large-scale equipment: one is as shown in fig. 1, a switching chip is provided in the PON single-board hardware, one end of the switching chip is connected to the switching chip of the upper connection single board, and the other end is connected to each port of the PON chip to form a one-to-one correspondence relationship; in the hardware structure, the PON port in-out direction data flow is forwarded to the corresponding exchange chip port, and the port of the exchange chip is subjected to mirroring operation, so that the PON port data flow mirroring function is realized. In the scheme, the exchange chip in the hardware must have a mirror image function; another is as shown in fig. 2, the data packet in the ingress and egress direction of the service port is directly mirrored to the mirror port.

The inventor finds in research that the above first method in the prior art has the following disadvantages by adding a switch chip to perform port mirroring: the hardware cost is high, and the product design complexity and the later maintenance cost are high; in the second method, data in the incoming and outgoing directions of the service port are directly mirrored, so that the defects that data streams of the non-source PON port also reach the mirror port and real data of the PON port cannot be distinguished exist.

Disclosure of Invention

In view of this, the present invention aims to provide a port mirroring method and apparatus for an OLT device, so as to reduce hardware cost, implement accurate mirroring of a target port, and reduce hardware cost.

In a first aspect, an embodiment of the present invention provides a port mirroring method for an OLT device, including:

determining a target VLAN, wherein the target VLAN is a VLAN not occupied by other services;

copying data flow in the outgoing direction and/or the incoming direction of a PON port needing mirroring to obtain a mirrored data packet, and adding the VLAN as an outer layer tag to the mirrored data packet;

and the control board redirects the mirrored data packet to a specified monitoring port according to the outer layer label of the mirrored data packet.

With reference to the first aspect, an embodiment of the present invention provides a first possible implementation manner of the first aspect, where before the redirecting the data packet to a specified monitor port according to the outer label, the controlling board includes:

and setting to converge the data packet of the mirror image added with the VLAN as the outer layer label to the PON board aggregation port.

With reference to the first aspect or the first possible implementation manner of the first aspect, an embodiment of the present invention provides a second possible implementation manner of the first aspect, where the redirecting, by the control board, the data packet to a specified monitor port according to the outer label includes:

and performing ACL matching by using the outer layer label as a matching mark, and redirecting the data packet to a specified monitoring port.

With reference to the first aspect or the first possible implementation manner of the first aspect, an embodiment of the present invention provides a third possible implementation manner of the first aspect, where the determining a target VLAN includes:

acquiring state data of all VLANs;

judging whether the VLAN is occupied or not based on the state data, and screening out the unoccupied VLAN;

randomly screening one VLAN from unoccupied VLANs as a target VLAN.

With reference to the first aspect, an embodiment of the present invention provides a fourth possible implementation manner of the first aspect, where the method further includes:

and carrying out data analysis on the data packet of the monitoring port to complete the monitoring of the PON port data message.

In a second aspect, an embodiment of the present invention further provides a port mirroring apparatus on a PON integrated device, including:

the device comprises a determining module, a judging module and a judging module, wherein the determining module is used for determining a target VLAN, and the target VLAN is a VLAN which is not occupied by other services;

the adding module is used for copying data flow in the outgoing direction and/or the incoming direction of a PON port needing mirroring to obtain a mirrored data packet, and adding the VLAN as an outer layer tag to the mirrored data packet;

and the control board is used for redirecting the mirrored data packet to a specified monitoring port according to the outer layer label of the mirrored data packet.

With reference to the second aspect, an embodiment of the present invention provides a first possible implementation manner of the second aspect, where the apparatus further includes:

and the setting module is used for setting that the data packet added with the VLAN as the mirror image of the outer layer label is copied to the PON board aggregation port before the control board redirects the data packet to the specified monitoring port according to the outer layer label.

With reference to the second aspect or the first possible implementation manner of the second aspect, an embodiment of the present invention provides a second possible implementation manner of the second aspect, where the control board is specifically configured to:

With reference to the second aspect or the first possible implementation manner of the second aspect, an embodiment of the present invention provides a third possible implementation manner of the second aspect, where the determining module includes:

the acquiring unit is used for acquiring the state data of all the VLANs;

the screening unit is used for judging whether the VLAN is occupied or not based on the state data and screening out the unoccupied VLAN;

and the screening unit is used for randomly screening one VLAN from the unoccupied VLANs as a target VLAN.

With reference to the second aspect, an embodiment of the present invention further provides a fourth possible implementation manner of the first aspect, where the apparatus further includes: and the analysis module is used for carrying out data analysis on the data packet of the monitoring port so as to complete the monitoring of the PON port data message.

Compared with the mode in the prior art, the method and the device for port mirroring of the OLT equipment provided by the embodiment of the invention can realize single-port mirroring without adding hardware equipment, and have the positive effects of cost saving and accuracy.

In order to make the aforementioned and other objects, features and advantages of the present invention comprehensible, preferred embodiments accompanied with figures are described in detail below.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the embodiments will be briefly described below, it should be understood that the following drawings only illustrate some embodiments of the present invention and therefore should not be considered as limiting the scope, and for those skilled in the art, other related drawings can be obtained according to the drawings without inventive efforts.

FIG. 1 is a diagram illustrating a hardware mirror in the prior art;

FIG. 2 is a schematic diagram illustrating a prior art service port mirroring;

fig. 3 is a schematic flowchart illustrating a port mirroring method of an OLT device according to an embodiment of the present invention;

fig. 4 is a schematic diagram illustrating a port mirroring method of an OLT apparatus according to an embodiment of the present invention;

fig. 5 is a schematic structural diagram illustrating a port mirroring apparatus of an OLT device according to another embodiment of the present invention;

fig. 6 is a schematic structural diagram illustrating a port mirroring apparatus of an OLT device according to an embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. The components of embodiments of the present invention generally described and illustrated in the figures herein may be arranged and designed in a wide variety of different configurations. Thus, the following detailed description of the embodiments of the present invention, presented in the figures, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments of the present invention without making any creative effort, shall fall within the protection scope of the present invention.

In consideration of the prior art, when port mirroring is performed on large-scale OLT equipment, mirroring is generally performed by adding hardware equipment, so that the cost is high, and the structural complexity is increased; or the data message in the business port in-out direction is directly mirrored to the mirror image port without data differentiation, so that the data flow which is not the PON port can also reach the mirror image port; based on this, embodiments of the present invention provide a method and an apparatus for port mirroring of OLT equipment, which are described below by embodiments.

Referring to the embodiment shown in fig. 3, in this embodiment, a method for port mirroring of an OLT device is provided, where the method includes the following steps:

s101, determining a target VLAN, wherein the target VLAN is a VLAN not occupied by other services;

specifically, the method for determining the target VLAN includes the following steps:

step 201, acquiring state data of all VLANs;

the state data includes: data marking the usage status of the VLAN from which it can be determined whether the VLAN is in an occupied state.

Step 202, judging whether the VLAN is occupied based on the state data, and screening out the unoccupied VLAN;

and step 203, randomly screening one VLAN from the unoccupied VLANs as a target VLAN.

S102, copying data flow in the outgoing direction and/or the incoming direction of a PON port needing mirroring to obtain a mirrored data packet, and adding the VLAN as an outer layer tag to the mirrored data packet;

s103, the control board redirects the mirrored data packet to a designated monitoring port according to the outer layer label of the mirrored data packet.

In this embodiment, before the step S103, where the control board redirects the data packet to the designated monitor port according to the outer label, the method includes:

Specifically, the redirecting the data packet to a designated monitoring port by the control board according to the outer layer label includes:

and performing ACL matching by using the outer layer label as a matching mark, and redirecting the data packet to a specified monitoring port. The matched ACL rule contains identification information of the monitoring port and the corresponding relation between the label and the identification of the monitoring port.

The method further comprises the following steps: and carrying out data analysis on the data packet of the monitoring port to complete the monitoring of the PON port data message.

In this embodiment, as shown in fig. 4, a specified VLAN tag is added to a data packet of a mirror image of a PON port (source port of the mirror image) that needs the mirror image, the PON board aggregation port (shown in the figure as an aggregation port) is copied on a PON board, and then the mirror image function is implemented by matching the main control board with a redirection mode, specifically, the main control board obtains the VLAN tag, redirects the data packet of the mirror image to a corresponding monitor port (shown in the figure as a monitor port) according to the VLAN tag, and further implements a mirror image function of a single PON port in a PON system aggregation apparatus, and the scheme has the following advantages:

1) realizing the mirror image function of a single cross-board port in the polymerization device;

the proposal solves the problem of port mirror image in the current mainstream PON system and provides support for flexible design of software and hardware of the OLT system.

2) The resource occupation is less;

hardware resources and the influence on the normal throughput of the port are small.

3) Accurately carrying out data mirroring;

data flows not on this PON port are not mirrored to the mirror port (monitor port).

4) The compatibility is good;

the scheme has good compatibility to different PON system schemes and different chip schemes, and can be used for EPON and GPON systems.

In another embodiment of the present invention, there is provided a port mirroring apparatus of an OLT device, which is shown in fig. 5 and includes:

a determining module 201, configured to determine a target VLAN, where the target VLAN is a VLAN not occupied by other services;

an adding module 202, configured to copy a data stream in an outgoing direction and/or an incoming direction of a PON port that needs mirroring to obtain a mirrored data packet, and add the VLAN as an outer layer tag to the mirrored data packet;

and the control board 203 is configured to redirect the mirrored data packet to a designated monitor port according to the outer layer tag of the mirrored data packet.

The port mirroring apparatus of the OLT device in the above embodiment further includes:

Preferably, the control board 203 is specifically configured to:

Specifically, the determining module includes:

the acquiring unit is used for acquiring the state data of all the VLANs;

In this embodiment, the port mirroring apparatus of the OLT device further includes:

and the analysis module is used for carrying out data analysis on the data packet of the monitoring port so as to complete the monitoring of the PON port data message.

An embodiment of the present application provides a non-volatile computer storage medium, where the computer storage medium stores computer-executable instructions, and the computer-executable instructions may execute a port mirroring method of an OLT device in any of the above method embodiments.

Fig. 6 is a schematic hardware structure diagram of an electronic device for performing a port mirroring method of an OLT device according to an embodiment of the present application, where as shown in fig. 6, the electronic device includes:

one or more processors 301 and a memory 302, with one processor 301 being illustrated in fig. 6.

The apparatus for performing the port mirroring method may further include: an input device and an output device.

The processor 301, memory 302, input devices, and output devices may be connected by a bus 303, as exemplified by the bus connection in fig. 6, or otherwise.

The memory 302, which is a non-volatile computer-readable storage medium, may be used for storing non-volatile software programs, non-volatile computer-executable programs, and modules, such as program instructions/modules corresponding to the port mirroring method in the embodiments of the present application. The processor 30 executes various functional applications of the server and data processing by executing nonvolatile software programs, instructions and modules stored in the memory 302, namely, implements the port mirroring method of the above-mentioned method embodiment.

The memory 302 may include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function; the storage data area may store data created according to use of the port mirroring device, and the like. Further, the memory 302 may include high speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device. In some embodiments, memory 302 optionally includes memory located remotely from processor 301, and these remote memories may be connected to the port mirroring method apparatus via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The input device may receive input numeric or character information and generate key signal inputs related to user settings and function controls of the port mirroring device. The output device may include a display device such as a display screen.

The one or more modules are stored in the memory 302 and, when executed by the one or more processors 301, perform the port mirroring method of any of the method embodiments described above.

The product can execute the method provided by the embodiment of the application, and has the corresponding functional modules and beneficial effects of the execution method. For technical details that are not described in detail in this embodiment, reference may be made to the methods provided in the embodiments of the present application.

The computer program product for performing the port mirroring method provided in the embodiment of the present invention includes a computer-readable storage medium storing a program code, where instructions included in the program code may be used to execute the method described in the foregoing method embodiment, and specific implementation may refer to the method embodiment, which is not described herein again.

The port mirroring device provided by the embodiment of the present invention may be specific hardware on the device, or software or firmware installed on the device, or the like. The device provided by the embodiment of the present invention has the same implementation principle and technical effect as the method embodiments, and for the sake of brief description, reference may be made to the corresponding contents in the method embodiments without reference to the device embodiments. It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the foregoing systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.

In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one logical division, and there may be other divisions when actually implemented, and for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection of devices or units through some communication interfaces, and may be in an electrical, mechanical or other form.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, functional units in the embodiments provided by the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit.

The functions, if implemented in the form of software functional units and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.

It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus once an item is defined in one figure, it need not be further defined and explained in subsequent figures, and moreover, the terms "first", "second", "third", etc. are used merely to distinguish one description from another and are not to be construed as indicating or implying relative importance.

Finally, it should be noted that: the above-mentioned embodiments are only specific embodiments of the present invention, which are used for illustrating the technical solutions of the present invention and not for limiting the same, and the protection scope of the present invention is not limited thereto, although the present invention is described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: any person skilled in the art can modify or easily conceive the technical solutions described in the foregoing embodiments or equivalent substitutes for some technical features within the technical scope of the present disclosure; such modifications, changes or substitutions do not depart from the spirit and scope of the present invention in its spirit and scope. Are intended to be covered by the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A port mirroring method of an OLT device, comprising:

the control board redirects the mirrored data packet to a designated monitoring port according to the outer layer label of the mirrored data packet;

the control board redirects the data packet to a designated monitoring port according to the outer layer label, and the method comprises the following steps: setting a data packet added with the VLAN as a mirror image of an outer layer label to be converged to a PON board aggregation port;

the control board redirects the data packet to a designated monitoring port according to the outer layer label, and the steps include: performing ACL matching by taking the outer layer label as a matching mark, and redirecting the data packet to a specified monitoring port, wherein the matched ACL rule comprises identification information of the monitoring port and a corresponding relation between the outer layer label and the identification information;

the determining the target VLAN comprises the following steps: acquiring state data of all VLANs; judging whether the VLAN is occupied or not based on the state data, and screening out the unoccupied VLAN; randomly screening one VLAN from unoccupied VLANs as a target VLAN.

2. The method of claim 1, further comprising:

3. A port mirroring apparatus of an OLT device, comprising:

the control board is used for redirecting the mirrored data packet to a specified monitoring port according to the outer layer label of the mirrored data packet;

a setting module, configured to set, before the control board redirects the data packet to a specified monitoring port according to the outer layer tag, that the data packet added with the VLAN as a mirror image of the outer layer tag is copied to a PON board aggregation port;

the control panel is specifically configured to: performing ACL matching by taking the outer layer label as a matching mark, and redirecting the data packet to a specified monitoring port, wherein the matched ACL rule comprises identification information of the monitoring port and a corresponding relation between the outer layer label and the identification information;

the determining module includes: the acquiring unit is used for acquiring the state data of all the VLANs; the screening unit is used for judging whether the VLAN is occupied or not based on the state data and screening out the unoccupied VLAN; and the screening unit is used for randomly screening one VLAN from the unoccupied VLANs as a target VLAN.

4. The apparatus of claim 3, further comprising: