JP5679349B2 - Packet switching apparatus and network system - Google Patents

Description

  The present invention relates to a packet switching apparatus and a network system that can reduce the time for identifying a defect.

  A conventional packet switching apparatus exists as a means for investigating the cause of a network abnormality by capturing data flowing through the network using a LAN analyzer and checking whether there is an abnormal packet that adversely affects the network. In this case, the occurrence of an abnormality in the terminal having the IP address can be known from the information of the transmission source IP address in the captured packet (see, for example, Patent Document 1).

Japanese Patent Laid-Open No. 08-171524

  The conventional packet switching apparatus needs to manage the correspondence between the terminal and the IP address, and it may be caused by a terminal having an unmanaged IP address connected to the network without permission or intentionally, or in the first place. If the terminal to be connected is not managed, there is a problem that it cannot be grasped where the terminal exists on the network and it takes a very long time to specify the terminal.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to provide a packet switching apparatus and a network system that can reduce the time for identifying a problem.

The packet switching device of the present invention is
In a packet switching device connected to a network and exchanging packets,
Multiple ports,
A packet switching unit for exchanging the packets input from the ports and transmitting the packets to the outside from the ports;
Between each port and the packet switching unit,
An identification information adding unit that adds identification information including the packet switching device information and the port information to the packet input through the port and transmits the packet information to the packet switching unit;
An identification information search unit for searching for the packet having a set IP address among the packets transmitted to the packet switching unit;
A search result storage unit that stores the identification information of the packet searched by the identification information search unit;
And an identification information removing unit that removes the identification information when the packet exchange unit transmits the packet to the outside.

The network system of the present invention
In the network system packet switching device is connected via a plurality network, among the packet switching device, the one of the packet switching device, against all of the plurality of packet switching devices, the packet A setting monitoring terminal for monitoring the setting of the identification information composed of the switching device information and the port information and the information of the set IP address, and the identification information of each search result storage unit is connected.

The packet switching device of the present invention is
In a packet switching device connected to a network and exchanging packets,
Multiple ports,
A packet switching unit for exchanging the packets input from the ports and transmitting the packets to the outside from the ports;
Between each port and the packet switching unit,
An identification information adding unit that adds identification information including the packet switching device information and the port information to the packet input through the port and transmits the packet information to the packet switching unit;
An identification information search unit for searching for the packet having a set IP address among the packets transmitted to the packet switching unit;
A search result storage unit that stores the identification information of the packet searched by the identification information search unit;
Since the packet switching unit includes the identification information removing unit that removes the identification information when transmitting the packet to the outside,
It is possible to reduce the time for identifying a defect.

Moreover, according to the network system of the present invention ,
It is possible to reduce the time for identifying a defect.

It is the figure which showed the structure of the network system of Embodiment 1 of this invention. It is the figure which showed the structure of the packet switching apparatus shown in FIG. It is the figure which showed the structure of the identification information processing part of the packet switching apparatus shown in FIG. It is a figure for demonstrating the operation | movement in the identification information addition part of the packet switching apparatus shown in FIG. It is a figure for demonstrating the operation | movement in the identification information removal part of the packet switching apparatus shown in FIG. It is the figure which showed the packet used with the packet switching apparatus shown in FIG. It is the figure which showed the detail of the packet used with the packet switching apparatus shown in FIG. FIG. 8 is a diagram illustrating a setting example of the packet illustrated in FIG. 7. It is a figure for demonstrating the packet using the packet switching apparatus of Embodiment 2 of this invention. It is the figure which showed the structure of the packet switching apparatus of Embodiment 2 of this invention. It is the figure which showed the packet used with the packet switching apparatus shown in FIG.

Embodiment 1 FIG.
Embodiments of the present invention will be described below. 1 is a diagram showing a configuration of a packet switching apparatus according to Embodiment 1 of the present invention, FIG. 2 is a diagram showing a configuration of the packet switching apparatus shown in FIG. 1, and FIG. 3 is a diagram of the packet switching apparatus shown in FIG. FIG. 4 is a diagram showing the configuration of the identification information processing unit, FIG. 4 is a diagram for explaining the operation of the identification information adding unit of the packet switching apparatus shown in FIG. 3, and FIG. 5 is the identification information of the packet switching apparatus shown in FIG. FIG. 6 is a diagram for explaining the operation in the removal unit, FIG. 6 is a diagram showing a packet used in the packet switching apparatus shown in FIG. 1, and FIG. 7 is a detailed diagram of a packet used in the packet switching apparatus shown in FIG. FIG. 8 is a diagram showing a setting example of the packet shown in FIG.

  In the figure, a network 100 is connected to a plurality of packet switching apparatuses 1a to 1e for exchanging packets. The IP terminals 8a to 8e are connected to the packet switching apparatuses 1a to 1e via LAN lines 2aa to 2ea, respectively. The IP terminals 8a to 8e have IP addresses 9a to 9e, respectively. In the figure, for convenience of explanation, an example in which one IP terminal is connected to one packet switching apparatus is shown. However, the present invention is not limited to this, and a plurality of IP terminals are connected to respective ports. In general, the connection is made through the network. The packet switching devices 1a to 1e are connected to line termination units (synonymous with ports) 3a to 3n for connection to each connected packet switching device or IP terminal, and to the line termination units 3a to 3n, respectively. The identification information processing units 7a to 7n, the packet switching unit 4 to which all the identification information processing units 7a to 7n are connected, the line termination units 3a to 3n, the identification information processing units 7a to 7n, and the packet switching unit 4 And a processor unit 5 connected through an internal setting / monitoring bus 6.

  A setting / monitoring terminal 80 is connected to the processor unit 5 of the packet switching apparatus 1b. 1 shows an example in which the setting / monitoring terminal 80 is connected to the packet switching device 1b. However, the configuration / monitoring terminal 80 is not limited to this and is provided in any one or more of the packet switching devices 1a to 1e. May be. The identification information processing units 7a to 7n then add an additional VLAN tag in which identification information is embedded in the packets received from the line termination units 3a to 3n (hereinafter referred to as “additional VLAN tag in which identification information is embedded”). ”), The FCS is recalculated, the additional VLAN tag is removed from the identification information adding unit 71 transmitted to the first selector 73 and the packet received from the packet switching unit 4, and the FCS is recalculated. The identification information removing unit 72 that transmits to the second selector 74 and the first selector 73 are connected to monitor the packet from the first selector 73 and identify the additional VLAN tag of the packet that matches the set IP address. An identification information search unit 76 that searches for information and a search result storage unit 77 that stores identification information that is a search result of the identification information search unit 76 are provided.

  Further, information on the additional VLAN tag, such as route selection information, packet switching device number and port number information for setting identification information, and information on the IP addresses 9a to 9e of the IP terminals 8a to 8e from which information is to be obtained. Information such as a packet switching device number and a port number, which is set from the setting / monitoring terminal 80 via the processor unit 5 and transmits route selection information to the first and second selectors 73 and 74 and sets identification information, Information of the IP address set and transmitted to the identification information adding unit 71 is provided with a setting information storage unit 75 which is transmitting to the identification information search unit 76. In the packet switching apparatuses 1a, 1c to 1e to which the setting / monitoring terminal 80 is not connected, the route selection information and the identification information set from the setting / monitoring terminal 80 via the processor unit 5 are set. Information on the additional VLAN tag, such as information on the packet switching device number and port number, and information on the set IP address for which information is to be obtained, are transmitted from the packet switching device 1b to each packet switching device 1a, 1c-1e. To be set respectively. Similarly, the search result transmitted from the processor unit 5 to the setting / monitoring terminal 80 is also transmitted as a packet from the packet switching device 1a, 1c to 1e to the packet switching device 1b, and transmitted to the setting / monitoring terminal 80. .

  The first selector 73 selects the route from the identification information adding unit 71 when the one connected to the line termination units 3a to 3n is the IP terminals 8a to 8e according to the route selection information. In the case of other packet switching apparatuses 1a to 1e, a route that does not pass through the identification information adding unit 71 is selected. The second selector 74 selects the route from the identification information removal unit 72 when the line termination units 3a to 3n are connected to the IP terminals 8a to 8e according to the route selection information. In the case of the packet switching devices 1a to 1e, a route that does not pass through the identification information removing unit 72 is selected. Further, for example, as shown in FIG. 4, the additional VLAN tag of the identification information adding unit 71 is added from (1) the frame state before passing the identification information adding unit 71 to (2) the frame after passing the identification information adding unit 71. It becomes a state and an additional VLAN tag is added. Further, the removal of the additional VLAN tag by the identification information removing unit 72 is performed, for example, as shown in FIG. 5, from (1) the frame state before passing the identification information removing unit 72 to (2) the frame after passing the identification information removing unit 72. The status is reached and the additional VLAN tag is deleted. Then, the processor unit 5 reads the identification information as the search result from the search result storage unit 77 and displays the search result on the setting / monitoring terminal 80.

  The operation of the packet switching apparatus of the first embodiment configured as described above will be described. First, a method for setting an additional VLAN tag will be described. Normally, frames used for packet communication are set as shown in FIG. On the other hand, the additional VLAN tag is composed of TPID and TCI, and among these, “TCI” is composed of priority, CFI, and VID as shown in FIG. The identification information is set using 12 bids of “VID”. Information to be set includes a packet switching device number and a port number. Therefore, as a setting method for setting these for 12 bits, patterns from setting 1 to setting 9 are possible as shown in FIG. For example, in the case of setting 1, when three packet switching device numbers are set, 2 bits are required, and the remaining 10 bits can be used for setting the port number. Can be set. The following settings 2 to 9 can also be set in the same manner, and are appropriately set according to the number of packet switching apparatuses and the number of ports required in the actual use environment. However, the same setting is performed in each of the packet switching apparatuses 1a to 1e.

  In the network 100, the IP terminal 8a transmits an abnormal packet to the network 100, and it is assumed that a network abnormality has occurred. At this time, a case will be described in which it is found that the frame of the IP address 9a is the cause of the abnormality in the packet captured by the LAN analyzer 101 on the IP terminal 8c side. In this case, it is necessary to restore the network abnormality by disconnecting the IP terminal 8a having the IP address 9a from the network 100. For this reason, it is necessary to search to which port of which packet switching apparatus the IP terminal 8a is connected. In order to detect this, the following operation is performed.

  First, the information processing units 7a to 7n of the packet switching devices 1a to 1e are connected to the route selection information, the packet switching device number and the port number as the identification information setting from the setting / monitoring terminal 80 via the processor unit 5. The information for creating the additional VLAN tag and the information of the set IP address for which information is to be obtained are set. Hereinafter, specifically, the connection of the IP terminal 8a in FIG. 1 will be described as the line termination unit 3a and the identification information processing unit 7a of the packet switching apparatus 1a.

  Further, since it is determined from the information of the LAN analyzer 101 that the IP terminal 8a is abnormal, the IP address 9a of the IP terminal 8a is set as the set IP address for which information is to be obtained. The setting information storage unit 75 of the identification information processing unit 7a stores information on route selection that the IP terminal 8a is connected. Then, information of the packet switching device number (number of the packet switching device 1a) and the port number (port number of the line termination unit 3a to which the IP terminal 8a is connected to the packet switching device 1a) as identification information setting is stored. . In addition, information on the IP address 9a of the IP terminal 8a for which information is desired is stored. Then, the route information to which the IP terminal 8a is connected is set from the setting information storage unit 75 to the first selector 73 and the second selector 74.

  Further, in the identification information adding unit 71, information of a packet switching device number and a port number as identification information for setting an additional VLAN tag is set. In the identification information search unit 76, information on the IP address 9a for which information is desired is set. When data is input from the IP terminal 8a to the identification information processing unit 7a via the line termination unit 3a, the identification information adding unit 71 adds the identification information of the packet switching device number and the port number as an additional VLAN tag. Then, the data is transmitted to the first selector 73. Then, when the IP terminal 8a is connected, the first selector 73 selects the packet to which the additional VLAN tag from the identification information adding unit 71 is added based on the route selection information. Next, the packet is transmitted to the packet switching unit 4 and inspected by the identification information searching unit 76. Then, the source IP address of this packet is inspected to detect that this IP address is the IP address 9a, and the identification information of the additional VLAN tag of this packet is stored in the search result storage unit 77 as a search result.

Next, the identification information of the additional VLAN tag is displayed on the setting / monitoring terminal 80 via the processor unit 5, that is, the packet switching device number and the port number to which the IP terminal 8a having the IP address 9a is connected. Can be displayed. In practice, the search unit information is packetized by the processor unit 5, transmitted to the packet switching device 1 b via the packet switching unit 4 and the network 100, and transmitted to the setting / monitoring terminal 80.
Further, the additional VLAN tag is deleted from the packet transmitted to the identification information removing unit 72 via the packet switching unit 4, and the packet is transmitted to the second selector 74.

  Then, when the IP terminal 8a is connected, the second selector 74 selects a packet from which the additional VLAN tag from the identification information removing unit 72 has been deleted from the route selection information, and the line terminal unit 3a to the IP terminal To 8a. When the terminal connected to the line termination unit is a packet switching apparatus, the operations of the identification information adding unit and the identification information removing unit are performed, but the first selector 73 and the second selector 74 are substantially used. A packet other than the identification information adding unit and the identification information removing unit is selected. Therefore, although the function of the present invention is not necessary for the line termination unit to which the packet switching apparatus is connected, it is necessary to be able to freely set which line termination unit the packet switching apparatus is connected to. It is configured.

  When the IP terminal having the IP address transmits the packet, the packet switching apparatus according to the first embodiment configured as described above is connected to which port of which packet switching apparatus for each IP address. Since it is set as identification information, it can be easily detected. Further, when not used, the additional VLAN tag can be deleted and the packet can be transmitted, so that other operations are not affected.

Embodiment 2. FIG.
In the first embodiment, the case where the VLAN tag is not actually used in the data communication in the packet is shown. In the second embodiment, the case where the VLAN tag is used in the data communication of the packet will be described. First, as shown in FIG. 9A, the first VLAN tag is generally set in a frame when performing VLAN tag communication. Further, as shown in FIG. 9B, the frame in the case of using the double tag is set by inserting the second VLAN tag before the first VLAN. In the present invention, this double tag frame is used. A normal VLAN tag used for normal communication (hereinafter referred to as a normal VLAN tag) is set for a case where a normal VLAN tag is set on a port basis and a case where a normal VLAN tag is set on a tag base. The VLAN type can be considered.

  When the normal VLAN tag is set on a port basis, the normal VLAN tag is set by the packet switching unit 4. Further, when setting a normal VLAN tag on a tag basis, the normal VLAN tag is set from the beginning. Therefore, when setting the additional VLAN tag of the present invention, it is necessary to confirm each VLAN type and add or delete the additional VLAN tag from a predetermined location.

  FIG. 10 is a diagram showing the configuration of the packet switching apparatus according to the second embodiment of the present invention. In the figure, the same parts as those in the first embodiment are denoted by the same reference numerals, and the description thereof is omitted. In the second embodiment, in addition to the first embodiment, VLAN type information is set in the information set in the setting information storage unit 75 from the setting / monitoring terminal 80 via the processor unit 5. The setting information storage unit 75 sets the VLAN type information in the identification information adding unit 71 and the identification information removing unit 72. Then, the identification information adding unit 71 and the identification information removing unit 72 add the additional VLAN tag to a predetermined position according to the information of the VLAN type, and the identification information removing unit 72 adds the additional VLAN tag. Delete a tag from a predetermined position.

  The operation of the packet switching apparatus of the second embodiment configured as described above will be described. Since the second embodiment can be performed in the same manner as in the first embodiment, the relationship between the normal VLAN tag and the additional VLAN tag in the port-based case and the tag-based case will be described here. To do. FIG. 11A illustrates a case where a normal VLAN tag is set on a port basis. When a normal VLAN tag is set on a port basis, since the normal VLAN tag is set by the packet switching unit 4, the frame before passing through the identification information adding unit 71 is shown in FIGS. Thus, a packet is transmitted in an untagged frame. And when passing the identification information addition part 71, as shown to FIG. 11 (A) (2), an additional VLAN tag is added. Then, in the packet switching unit 4, the normal VLAN tag is set before the additional VLAN tag as shown in FIGS.

  In contrast, FIG. 11B illustrates a case where a normal VLAN tag is set on a tag basis. When a normal VLAN tag is set on a tag basis, since the normal VLAN tag is set, the frame before passing through the identification information adding unit 71 is shown in FIGS. Thus, a packet is transmitted in a tagged frame. Then, when passing through the identification information adding unit 71, an additional VLAN tag is added after the normal VLAN tag as shown in FIGS. Then, it is transmitted to the packet switching unit 4 with the additional VLAN tag added by the identification information adding unit 71 as shown in FIGS.

  According to the packet switching apparatus of the second embodiment configured as described above, the same effects as those of the first embodiment can be obtained, but when a normal VLAN tag is used in normal communication, the VLAN Since the type can be confirmed and added and deleted, communication using the normal VLAN tag can be performed in the same manner as normal without causing any trouble.

  In the present invention, the embodiments can be appropriately modified and omitted within the scope of the invention.

1a to 1e packet switching device, 2aa to 2ea LAN line,
2aa-2an LAN line, 3a-3n line termination part, 4 packet switching part,
5 processor unit, 7a-7n identification information processing unit, 8a-8e IP terminal,
9a to 9e IP address, 71 identification information adding unit, 72 identification information removing unit,
73 first selector, 74 second selector, 75 setting information storage unit,
76 identification information search unit, 77 search result storage unit, 80 setting / monitoring terminal,
100 network, 101 LAN analyzer.

Claims (7)

In a packet switching device connected to a network and exchanging packets,
Multiple ports,
A packet switching unit for exchanging the packets input from the ports and transmitting the packets to the outside from the ports;
Between each port and the packet switching unit,
An identification information adding unit that adds identification information including the packet switching device information and the port information to the packet input through the port and transmits the packet information to the packet switching unit;
An identification information search unit for searching for the packet having a set IP address among the packets transmitted to the packet switching unit;
A search result storage unit that stores the identification information of the packet searched by the identification information search unit;
A packet switching apparatus comprising: an identification information removing unit that removes the identification information when the packet is transmitted from the packet switching unit to the outside. The identification information adding unit adds identification information including the packet switching device information and the port information to the VLAN tag of the packet frame, and adds the identification information as an additional VLAN tag.
The packet switching apparatus according to claim 1, wherein the identification information removing unit removes the additional VLAN tag. In a packet switching apparatus for exchanging a packet with a normal VLAN tag set in the packet and the normal VALN tag set ,
The identification information adding unit and the identification information removing unit are preset with VLAN type information indicating whether the normal VLAN tag is port-based or tag-based, and the identification information adding unit is predetermined according to the VLAN type information. The packet switching apparatus according to claim 2, wherein the additional VLAN tag is added at a position, or the identification information removing unit removes the additional VLAN tag from a predetermined position. A first selector that selects a packet that has not passed through the identification information adding unit or a packet that has passed through the identification information adding unit, and transmits the selected packet to the packet switching unit;
A second selector that selects a packet that has not passed through the identification information removing unit or a packet that has passed through the identification information removing unit, and transmits the second selector to the outside.
If another packet switching device is connected to the port,
The first selector selects a packet that has not passed through the identification information adding unit,
The second selector selects a packet that has not passed through the identification information removing unit,
If any other packet switching device is connected to the above port,
The first selector selects a packet passing through the identification information adding unit,
4. The packet switching device according to claim 1, wherein the second selector selects a packet passing through the identification information removing unit. 5. A setting information storage unit for inputting the packet switching device information and the port information to be added to the packet and storing the input IP address information from the outside;
The identification information is sent to the identification information adding unit.
5. The packet switching apparatus according to claim 1, wherein the set IP address information is transmitted to the identification information search unit. 6. The packet switching device according to claim 1, wherein the search result storage unit transmits the identification information of the packet searched by the identification information search unit to the outside. A network system in which a plurality of packet switching apparatuses according to any one of claims 1 to 6 are connected via a network, wherein any one of the packet switching apparatuses includes the packet switching apparatus. , against all of the plurality of packet switching devices, setting the identification information and the configured IP address information consisting of the packet switching device information and the port information, and identification information of each of the search result storage unit A network system to which a monitoring terminal is connected.

Images