TWI738918B - Chassis switches, network interface cards, and methods for management of packet forwarding - Google Patents

Abstract

A chassis switch including a network interface card is provided. The network interface card includes a first Virtual Local Area Network (VLAN) ID to a first packet originated from an internal Internet Protocol (IP) address, so that the first packet is not transmitted to the outside of the chassis switch. In addition, the network interface card further includes a second VLAN ID to a second packet originated from an external IP address, so that the second packet is transmitted to the outside of the chassis switch.

Description

Box-type switch, network interface card, and packet forwarding management method

This application is mainly about the management technology of packet forwarding, especially a management technology of packet forwarding suitable for box-type switches.

With the rapid development of network technology, people's demand for network bandwidth has not only begun to increase year by year, but the demand for the network environment has also changed from time to time. Therefore, the network environment needs to be dynamic and easy to consider. Make adjustments accordingly.

Because the switch chassis can selectively carry different communication components, such as one or more network interfaces, depending on the requirements of different network environments. Therefore, box-type switches are widely used in the network environment, and because box-type switches usually contain multiple cards, there is a need to manage these cards. In addition, if multiple box-shaped switches are installed in a network environment, in addition to managing multiple cards in each box-shaped switch, there is also a need to manage multiple box-shaped switches.

Generally speaking, each network interface card in the box-type switch will be configured with at least an internal network protocol (Internet Protocol, IP) address and an external network protocol address. , The Internet protocol address of the external network is configured by a Dynamic Host Configuration Protocol (DHCP) server, which is uniquely identifiable in a network environment composed of at least two box-shaped switches. Mainly used to manage the network interface cards of other box-type switches; in contrast, the intranet network protocol address is determined by the slot position of each network interface card in the box-type switch To be clear, each slot position corresponds to a fixed intranet network protocol address, and each network interface card is configured with an intranet network protocol address according to the slot position where it is installed , Used to manage the network interface card inside the box switch.

In this way, the network interface cards in the same slot position in each box-type switch will be configured with the same intranet network protocol address. In a network environment composed of multiple box-type switches, if the box-type switches use an intranet network protocol address to forward packets between them, an IP conflict problem may occur.

Figure 1 is a schematic diagram showing that the communication between box-type switches has a network protocol address conflict due to the use of an intranet network protocol address. As shown in Figure 1, when the corresponding relationship between the same slot position in two box-type switches and the intranet network protocol address is the same configuration rule, the network of the same slot position in the two box-type switches The road interface card will be configured with the same intranet network protocol address. Under this setting, the network interface card 1 in the box switch A first uses the intranet network protocol address (such as: 169.254.251.1) to forward the packet X. When the packet X arrives at the router, the router will send the packet X The source network protocol address and the arrival port (such as: port-1) are recorded in the forwarding table; then, the network interface card 1 in box switch B uses the same intranet network protocol address ( For example: 169.254.251.1) forwarding packet Y, when packet Y arrives at the router, the router will record the source network protocol address of packet Y and the port (such as port-2) of the packet Y in the forwarding table.

Since the recording method of the forwarding table is based on the primary key of the source network protocol address, the data of the previous packet X will be copied by the data of the packet Y, so that the intranet network protocol address recorded in the forwarding table 169.254.251.1 is connected to port-2. After that, when any packet wants to be sent to the network interface card 1 in the box switch A, the packet will be erroneously forwarded to the network interface card 1 in the box switch B in the router.

Therefore, there is a great need for a packet forwarding management method that can effectively solve the above-mentioned problems.

In order to solve the above problems, this application proposes a packet forwarding management method suitable for box-type switches, mainly by establishing a virtual local area network (VLAN) in the box-type switches to block the use of intranet network protocol bits. The packet of the address is forwarded outside, and it does not affect the packet forwarding using the protocol address of the external network.

An embodiment of the present application provides a box-type switch including a network interface card. The network interface card includes an external port used for communication outside the box-type switch. The network interface card is used for processing a first packet originating from an intranet network protocol address and a second packet originating from an external network protocol address. The processing of the first packet includes: adding a first virtual area network identification tag to the first packet, and according to the first virtual area network identification tag and a first destination media access control included in the first packet ( The Media Access Control (MAC) address determines a first egress port (egress port) of the first packet, and discards the first packet when the first egress port is the egress port. The processing of the second packet includes: adding a second virtual area network identification tag in the second packet, based on the second virtual area network identification tag and a second destination media access control bit included in the second packet The address determines a second exit port of the second packet, removes the second identification tag from the second packet, and transmits the second packet through the second exit port.

Another embodiment of the present application provides a packet forwarding management method, which is suitable for a network interface card in a box-type switch. The above-mentioned packet forwarding management method includes the following steps: processing a first packet originating from an intranet network protocol address; and processing a second packet originating from an external network protocol address. The processing of the first packet includes: adding a first virtual area network identification tag in the first packet, according to the first virtual area network identification tag and a first destination media access control bit included in the first packet The address determines one of the first outgoing ports of the first packet, and discards the first packet when the first outgoing port is an external port used for communication other than the box-type switch. The processing of the second packet includes: adding a second virtual area network identification tag in the second packet, based on the second virtual area network identification tag and a second destination media access control bit included in the second packet The address determines a second outbound port of the second packet, removes the second virtual local area network identification tag from the second packet, and transmits the second packet through the second outbound port.

Another embodiment of the present application provides a network interface card, which is set in a box-type switch. The network interface card includes: an external port for communication other than the box-type switch; a controller for generating a first packet derived from an intranet network protocol address, and source A second packet from a protocol address of an external network; and a switching device for adding a first virtual area network identification tag in the first packet, according to the first virtual area network identification tag and the first A first destination media access control address included in a packet determines a first outgoing port of the first packet. When the first outgoing port is the outer port, the first packet is discarded. A second virtual area network identification tag is added to the two packets, and one of the second packets is determined to go out according to the second virtual area network identification tag and a second destination media access control address included in the second packet Port, removing the second virtual local area network identification tag from the second packet and transmitting the second packet through the second outbound port.

Regarding other additional features and advantages of this application, those skilled in the field, without departing from the spirit and scope of this application, can use the box-type switch, network interface card, and packet forwarding disclosed in the implementation method of this case The management method is obtained with a little modification and retouching.

200‧‧‧Network environment

10‧‧‧ Router

20, 30‧‧‧Box type switch

310, 320, 410, 420‧‧‧controller

330、430‧‧‧Exchange device

340-1~340-8、440-1~440-4‧‧‧Internal port

340-9‧‧‧External port

S510~S570, S810~S890‧‧‧Step number

6a~6f, 7a~7e, 9a~9f, 10a~10f‧‧‧Step number

A, B‧‧‧Box type switch

Figure 1 is a schematic diagram showing that the communication between box-type switches has a network protocol address conflict due to the use of an intranet network protocol address.

Figure 2 is a diagram of the network environment architecture according to an embodiment of the present application.

Figure 3 is a schematic diagram of an exchange card according to an embodiment of the present application.

Figure 4 is a schematic diagram of a line card according to an embodiment of the present application.

Figure 5 is a flowchart of a method for forwarding management of packets using an intranet network protocol address according to an embodiment of the present application.

Fig. 6 is a schematic diagram of the operation of forwarding management of packets using an intranet network protocol. address according to an embodiment of the present application.

Figure 7 is a schematic diagram of the transfer management of packets using an intranet network protocol address according to another embodiment of the present application.

Figures 8A to 8B are a flowchart of a method for forwarding management of packets using an external network protocol address according to an embodiment of the present application.

FIG. 9 is a schematic diagram of the operation of forwarding management for packets using an external network protocol address according to an embodiment of the present application.

FIG. 10 is a schematic diagram of the operation of forwarding management for packets using an external network protocol address according to another embodiment of the present application.

The description in this chapter is a preferred way to implement this application, and the purpose is to illustrate the spirit of this application rather than to limit the scope of protection of this application. "" and other words are used to indicate the presence of specific technical features, values, method steps, operations, components, and/or components, but it does not exclude the possibility of adding more technical features, values, method steps, operations, and components , Components, or any combination of the above.

Figure 2 is a diagram of the network environment architecture according to an embodiment of the present application. The network environment 200 is a local area network and includes a router 10 and at least two box-type switches 20-30, wherein the box-type switches 20-30 are connected through the router 10.

The local area network can be a network constructed by Ethernet, Wireless Fidelity (WiFi) network, twisted pair network, or coaxial cable network, etc. It is called an intranet, which usually covers a local area, such as an office or a certain floor in a building.

The router 10 is mainly responsible for providing routing and forwarding functions in the local area network, and realizes the packet exchange between the box-type switch 20 and 30, and between the box-type switch 20/30 and other network terminal devices in the local network. Packet exchange. In addition, although not shown, the router 10 can also bridge the local area network to an external wide area network to provide external routing and forwarding functions of the local area network.

Both box-type switches 20 and 30 have multiple slots, and each slot can be accessed by a network interface card. For example, the network interface card can be a fabric card or a line card, and the slot can be subdivided into a switch card slot and a line card slot for the switch card and the line card respectively. Access. In particular, the box-type switches 20 and 30 have the same configuration rules for the intranet network protocol addresses of the internal network interface cards. In other words, the network interface cards (such as line cards/switch cards) in the same slot positions in the box-type switches 20 and 30 will be configured with the same intranet network protocol address.

Box type switches 20 and 30 mainly provide network architecture variability for local area networks. Through the configuration of the network interface cards inside the box type switches 20 and 30, it can dynamically adapt to changes in the network structure of the local area network. To accommodate more or fewer network terminal devices. For example, each of the network interface cards (such as line cards) in the box-type switches 20 and 30 can be further coupled to a network terminal device, such as a notebook computer, a desktop computer, and a smart device. Mobile phones, tablets, workstations, or servers, etc.

Figure 3 is a schematic diagram of an exchange card according to an embodiment of the present application. In this embodiment, the box-type switches 20 and 30 both include 4 switch cards and 8 line cards. The hardware architecture of each switch card is shown in Figure 3, including a controller 310, a controller 320, and a switching device. 330. Internal ports 340-1~340-8, and external ports 340-9.

Any one of the controllers 310 and 320 can be a general-purpose processor, a central processing unit (CPU), a microprocessor (Micro Control Unit, MCU), an application processor (AP), or a digital signal A processor (Digital Signal Processor, DSP), etc., may include various circuit logics to provide data processing and calculation functions, and to control the operation of the switching device 330 to perform packet transfer management operations.

In addition, each of the controllers 310 and 320 is configured with an intranet network protocol address and an external network protocol address.

The switching device 330 is used to receive control signals from the controller 310 or 320 to provide a packet forwarding function. In one embodiment, the switching device 330 may be a (Gibabit) Ethernet switch that complies with IEEE 802.3, 802.3u, 802.3ab, and 802.3x standards, such as Broadcom. BCM5396 wafer.

In one embodiment, the switching device 330 may include a storage device, such as random access memory (RAM), flash memory, cache memory, or other types of memory Body, or other storage media, used to store machine-readable instructions or program codes and data, such as forwarding tables for recording packet parameters, and virtual network tables for setting parameters of virtual local area networks, etc.

The internal ports 340-1 to 340-8 are respectively used to couple to the 8 line cards in the box-type switch 20 or 30, to receive packets from the line cards, and to transmit/forward the packets to the line cards.

The external port 340-9 is used to couple to the external communication port of the box-type switch 20 or 30, and is used as an access port for the network management of the box-type switch 20 or 30 by an external device, and transmits/transmits packets to the box Box-type switches or network terminal devices other than the type switch 20 or 30.

It is worth noting that the controller 310 or 320 can execute the configuration file in the switching device 330 to allow the switching device 330 to establish the first virtual area network and the second virtual area network, and their respective member ports, where the first The virtual local area network is specially created to process packets using an intranet network protocol address, and the second virtual area network is specifically created to process packets using an external network protocol address. In one embodiment, all ports except the external port 340-9 are set as member ports of the first virtual area network, and all ports are set as member ports of the second virtual area network.

Figure 4 is a schematic diagram of a line card according to an embodiment of the present application. In this embodiment, the box-type switches 20 and 30 both include 4 switching cards and 8 line cards. The hardware architecture of each line card is shown in Figure 4, including a controller 410, a controller 420, and a switching device. 430, and the internal ports 440-1~440-4.

Any one of the controllers 410 and 420 can be a general-purpose processor, a central processing unit, a microprocessor, an application processor, or a digital signal processor, etc., which can include various circuit logics to provide data processing and calculations. Function to control the operation of the switching device 430 to manage the packet forwarding. In addition, each of the controllers 410 and 420 is configured with an intranet network protocol address and an external network protocol address.

The switching device 430 is used to receive control signals from the controller 410 or 420 to provide a packet forwarding function. In one embodiment, the switching device 430 may be a (Gigabit) Ethernet switch that complies with IEEE 802.3, 802.3u, 802.3ab, and 802.3x standards, such as Broadcom's BCM5389 chip.

In one embodiment, the switching device 430 may include a storage device, such as random access memory, flash memory, cache memory, or other types of memory, or other storage media for storing machine-readable Get the command or program code, and data.

The internal ports 440-1 to 440-4 are respectively used to couple to the 4 switch cards in the box-type switch 20 or 30, to receive packets from the switch card, and to transmit/redirect the packets to the switch card.

It is worth noting that the controller 410 or 420 can execute the configuration file in the switching device 430 to allow the switching device 430 to establish the first virtual area network and the second virtual area network, and their respective corresponding member ports, where the first The virtual local area network is specially created to process packets using an intranet network protocol address, and the second virtual area network is specifically created to process packets using an external network protocol address. It should be understood that although the line card shown in Figure 4 does not include external ports (such as external ports 340-9), this application is not limited to this, that is, in other embodiments, the line card It can also include an external port, and when the line card includes an external port, all ports except the external port can be set as member ports of the first virtual area network, and all ports are set It is a member port of the second virtual local area network.

Those skilled in the art should understand that the circuit logic in the controller 310, 320, 410, 420 usually includes a plurality of transistors to control the operation of the circuit logic to provide required functions and operations. Furthermore, the specific structure of the transistor and the connection relationship between them are usually determined by the compiler. For example, the register transfer language (RTL) compiler can be operated by the processor and will be similar to the assembly language. The script of the code is compiled into a form suitable for designing or manufacturing the circuit logic.

It should be understood that the elements shown in Figures 3 and 4 are only used to provide an illustrative example, and are not used to limit the scope of protection of the present application. For example, the switch card or the line card may include only a single controller or more There are more than 8, and the number of internal ports in the switch card and line card can be adjusted accordingly.

Fig. 5 is a flowchart of a method for forwarding management of packets using an intranet network protocol address according to an embodiment of the present application. In this embodiment, the packet forwarding management method is applicable to the network interface card (such as a switch card or a line card) in a box-type switch.

First, a packet originating from an intranet network protocol address is received (step S510). Specifically, the header part of the packet contains multiple packet parameters, including the source network protocol address and the destination network protocol address , Source Media Access Control (MAC) address, and destination Media Access Control address, etc., where the source network protocol address is used to indicate the network protocol address from which the packet was sent , And when the source network protocol address is an intranet network protocol address, it means that the packet originates from an intranet network protocol address.

Then, an identification tag corresponding to the first virtual area network is added to the packet (step S520). Specifically, the identification tag is used to indicate the virtual area network identification code, for example: the identification code of the first virtual area network Set to 4088.

Then, it is determined whether the ingress port of the packet is a member port of the first virtual area network (step S530), and if so, the forwarding table is inquired according to the identification tag and the destination media access control address of the packet to determine The egress port outside the packet (step S540).

Following step S540, it is determined whether the outbound port is a member port of the first virtual local area network (step S550), if so, the packet is forwarded through the outbound port (step S560), and the process ends.

Following step S550, if the outbound port is not a member port of the first virtual area network, the packet is directly discarded without forwarding (step S570), and the process ends.

Following step S530, if the entry port is not a member port of the first virtual area network, the process proceeds to step S570.

Figure 6 is a schematic diagram of the transfer management of packets using an intranet network protocol address according to an embodiment of the present application. In this embodiment, when a switch card in the box-type switch 12 wants to ping a line card, it will send a packet using an intranet network protocol address. Specifically, the source network protocol address of this packet is The internal network protocol address where a controller of the switch card (such as controller 310) is configured, and the destination network protocol address is the internal network where a controller (such as controller 410) of the line card is configured Network protocol address.

First, in step 6a, the controller 310 decides to PING the controller 410, and then generates the third layer (referring to: the network layer in the Open System Interconnection Reference Model) packet (that is, the fifth layer). The picture shows a packet using an intranet network protocol address), and a virtual local area network identification tag TAG is added to the packet.

Specifically, the header part of the packet includes: destination network protocol address, source network protocol address, virtual local area network identification tag TAG, source media access control address, and destination media access control address. Among them, the destination network protocol address is 169.254.251.1, the source network protocol address is 169.254.251.33, the virtual local area network identification tag TAG is used to record the virtual local area network identification code 4088, and the source media access control address is marked as FC1, the destination media access control address is marked as LC1.

Then, in step 6b, the controller 310 sends the packet to the port 14 of the switching device 330, that is, the port 14 is the ingress port.

In step 6c, the switching device 330 performs an ingress check on the packet. Specifically, the ingress check is based on the packet's virtual area network identification code 4088 and the entry port 14 to query the virtual area network table (marked as VLAN table) to determine whether the access port 14 is a legal port of the virtual local area network. In this embodiment, for the virtual LAN ID 4088, all ports except for the external port are set as legal ports as recorded in the virtual LAN table. The external port is port 9, so enter the port Port 14 is a legal port, that is, the packet passes the ingress inspection.

In step 6d, the switching device 330 performs media access control relay processing on the packet. Specifically, the media access control relay processing is based on the destination media access control address LC1 and the virtual area network identification code of the packet. 4088 to query the forwarding form to determine the outbound port of the packet. In this embodiment, the exit port is port 5.

Next, in step 6e, the switching device 330 performs an egress check on the packet. Specifically, the egress check is based on the packet's virtual local area network identification code 4088 and the outbound port 5 to query the virtual local area network table to decide to go out. Whether port 5 is a legal port of the virtual local area network. In this embodiment, since the outgoing port 5 is not the port 9, it is a legal port, that is, the packet passes the egress inspection.

Finally, in step 6f, the switching device 330 forwards the packet through the port 5.

Figure 7 is a schematic diagram of the transfer management of packets using an intranet network protocol address according to another embodiment of the present application.

First, in step 7a, the controller 310 decides to use the intranet protocol address to PING the network terminal device 13, and then generates the third layer packet (that is, the intranet protocol address described in Figure 5). Packet), and add a virtual local area network identification tag TAG to the packet.

Specifically, the header part of the packet includes: destination network protocol address, source network protocol address, virtual local area network identification tag TAG, source media access control address, and destination media access control address. Among them, the destination network protocol address is 169.254.251.99, the source network protocol address is 169.254.251.33, the virtual local area network identification tag TAG is used to record the virtual local area network identification code 4088, and the source media access control address is marked as FC1, the destination media access control address is marked as PC.

Next, in step 7b, the controller 310 sends the packet to the port 14 of the switching device 330, that is, the port 14 is the ingress port.

In step 7c, the switching device 330 performs an ingress inspection on the packet. Specifically, the ingress inspection is based on the virtual area network identification code 4088 of the packet and the entry port 14 to query the virtual area network table to determine whether the entry port 14 is virtual. The legal port of the local area network. In this embodiment, for the virtual LAN ID 4088, all ports except for the external port are set as legal ports as recorded in the virtual LAN table. The external port is port 9, so enter the port Port 14 is a legal port, that is, the packet passes the ingress inspection.

In step 7d, the switching device 330 performs media access control relay processing on the packet. Specifically, the media access control relay processing is based on the destination media access control address PC of the packet and the virtual local area network identification code 4088 to query Forward the form to determine the outbound port of the packet. In this embodiment, the exit port is port 9.

Then, in step 7e, the switching device 330 performs export inspection on the packet. Specifically, the export inspection is based on the packet's virtual area network identification code 4088 and the outgoing port 9 to query the virtual area network table to determine whether the outgoing port 9 is It is the legal port of the virtual local area network. In this embodiment, since the outbound port 9 is not a legal port, that is, the packet fails the egress inspection, so the packet is directly dropped.

It is worth noting that the first virtual area network described in Figures 5 to 7 is specially created to process packets using an intranet network protocol address. Specifically, it is to prevent packets that use the intranet network protocol address from being forwarded, causing network protocol address conflicts. However, for packets using an external network protocol address, the above-mentioned first virtual area network will cause the packet using the external network protocol address to be unable to be forwarded smoothly. Therefore, in addition to establishing the above-mentioned first virtual area network in the box-type switch, this application also establishes a second virtual area network to specifically process packets using an external network protocol address.

Figures 8A to 8B are a flowchart of a method for forwarding management of packets using an external network protocol address according to an embodiment of the present application. In this embodiment, the packet forwarding management method is applicable to the network interface card (such as a switch card or a line card) in a box-type switch.

First, a packet originating from an external network protocol address is received (step S810). Specifically, the header part of the packet contains multiple packet parameters, including the source network protocol address and the destination network protocol address , Source media access control address, and destination media access control address, etc., where the source network protocol address is used to indicate which network protocol address the packet is sent from, and when the source network protocol When the address is an external network protocol address, it means that the packet originates from an external network protocol address.

Next, it is determined whether the packet is received from the external port (step S820), and if so, it is determined whether the packet carries the identification tag of the virtual area network (step S830). If the packet does not carry the identification tag of the virtual area network, then the identification tag corresponding to the second virtual area network is added to the packet (step S840). Specifically, the identification tag is used to indicate the virtual area network identification code. For example: the identification code of the second virtual area network can be set to 4089.

Following step S820, if the packet is not received by the external port, the process proceeds to step S840.

Following step S830, if the packet already carries the identification tag of the virtual area network, the flow proceeds to step S850.

In step S850, it is determined whether the entry port of the packet is a member port of the second virtual area network (step S850). If so, the forwarding table is checked according to the virtual area network identification tag and the destination media access control address of the packet. Determine the outgoing port of the packet (step S860).

Then, it is determined whether the outbound port is a member port of the second virtual area network (step S870), if so, the virtual area network identification tag is removed from the packet and the packet is forwarded through the outbound port (step S880), and the end Process.

Following step S850, if the entry port is not a member port of the second virtual area network, the packet is directly discarded without forwarding (step S890), and the process ends.

Following step S870, if the outbound port is not a member port of the second virtual local area network, the process proceeds to step S890, and then the process ends.

FIG. 9 is a schematic diagram of the operation of forwarding management for packets using an external network protocol address according to an embodiment of the present application.

First, in step 9a, the controller 310 decides to use the external network protocol address to PING the controller 410, and then generates the third layer packet (that is, the packet using the external network protocol address described in Figure 5) .

Specifically, the header part of the packet includes: the destination network protocol address, the source network protocol address, the source media access control address, and the destination media access control address. Among them, the destination network protocol address The address is 192.168.1.1, the source network protocol address is 191.1681.33, the source media access control address is marked as FC1, and the destination media access control address is marked as LC1.

Then, in step 9b, the controller 310 sends the packet to the port 14 of the switching device 330, that is, the port 14 is the ingress port.

In step 9c, the switching device 330 first adds a virtual local area network identification tag TAG to the packet using an external network protocol address. In this embodiment, the virtual local area network identification code is 4089. Then, the packet is checked for ingress. Specifically, the ingress check is based on the packet's virtual area network identification code 4089 and the entry port 14 to query the virtual area network table to determine whether the entry port 14 is legal for the virtual area network. Port. In this embodiment, as recorded in the virtual local area network table, for the virtual local area network identification code 4089, all ports are set as legal ports, so entering the legal port of port 14 means that the packet passes the ingress inspection.

In step 9d, the switching device 330 performs media access control relay processing on the packet. Specifically, the media access control relay processing is based on the destination media access control address LC1 of the packet and the virtual area network identification code 4089 to query Forward the form to determine the outbound port of the packet. In this embodiment, the exit port is port 5.

Next, in step 9e, the switching device 330 performs export inspection on the packet. Specifically, the export inspection is based on the packet's virtual area network identification code 4089 and the outbound port 5 to query the virtual area network table to determine whether the outbound port 5 is It is the legal port of the virtual local area network. In this embodiment, since the outbound port 5 is a legal port, the packet passes the egress inspection. Then, the switching device 330 removes the virtual local area network identification tag TAG from the packet.

Finally, in step 9f, the switching device 330 forwards the packet through the port 5.

FIG. 10 is a schematic diagram of the operation of forwarding management for packets using an external network protocol address according to another embodiment of the present application.

First, in step 10a, the controller 310 decides to use the external network protocol address to PING the network terminal device 13, and then generates the third layer packet (that is, the external network protocol address described in Figure 5). Packet).

Specifically, the header part of the packet includes: the destination network protocol address, the source network protocol address, the source media access control address, and the destination media access control address. Among them, the destination network protocol address The address is 192.168.1.99, the source network protocol address is 191.1681.33, the source media access control address is marked as FC1, and the destination media access control address is marked as PC.

Then, in step 10b, the controller 310 sends the packet to the port 14 of the switching device 330, that is, the port 14 is the ingress port.

In step 10c, the switching device 330 first adds a virtual local area network identification tag TAG to the packet using an external network protocol address. In this embodiment, the virtual local area network identification code is 4089. Then, check the ingress of the packet. Specifically, the ingress check is based on the packet's virtual area network identification code 4089 and the entry port 14 to query the virtual area network table to determine whether the entry port 14 is legal for the virtual area network. Port. In this embodiment, as recorded in the virtual local area network table, for the virtual local area network identification code 4089, all ports are set as legal ports, so entering the legal port of port 14 means that the packet passes the ingress inspection.

In step 10d, the switching device 330 performs media access control relay processing on the packet. Specifically, the media access control relay processing is based on the destination media access control address PC of the packet and the virtual area network identification code 4089 to query Forward the form to determine the outbound port of the packet. In this embodiment, the exit port is port 9.

Then, in step 10e, the switching device 330 performs export inspection on the packet. Specifically, the export inspection is based on the packet's virtual area network identification code 4089 and the outgoing port 9 to query the virtual area network table to determine whether the outgoing port 9 is It is the legal port of the virtual local area network. In this embodiment, since all ports are set as legal ports of the virtual area network, the packet passes the egress inspection. Then, the switching device 330 removes the virtual area network identification tag TAG from the packet.

Finally, in step 10f, the switching device 330 forwards the packet through the port 9.

According to the embodiments in Figures 5-10, it should be understood that the packet forwarding management method of this application establishes a virtual area network on a box-type switch, which can not only block the use of intranet network protocol addresses The packet is forwarded outside, and at the same time, it can also not affect the packet forwarding using the protocol address of the external network. Therefore, it effectively solves the problem of network protocol address conflict that exists when the box-type switch uses the intranet network protocol address to forward packets to the outside.

Although this application discloses the above with various embodiments, it is only for reference and not to limit the scope of this application. Anyone who is familiar with this technique can make some changes without departing from the spirit and scope of this application. And retouch. For example, although the embodiments in Figures 6-7 and 9-10 are illustrated by using a switch card as an example, as long as the design of the line card includes an external port, the packet forwarding management method described in this application can also be implemented. Therefore, the above-mentioned embodiments are not used to limit the scope of this application, and the scope of protection of this application shall be subject to those defined by the attached patent scope.

The terms "first" and "second" used in the scope of the patent application are used to modify the elements in the claims. They are not used to indicate that there is an order of priority, an antecedent relationship, or that one element precedes another. An element, or the chronological order of execution of method steps, is only used to distinguish elements with the same name.

200‧‧‧Network environment

10‧‧‧ Router

20, 30‧‧‧Box type switch

Claims (11)

A chassis switch includes: a network interface card (fabric card), including an external port used for communication other than the box-type switch, and is used to process an internal network A first packet of an Internet Protocol (IP) address and a second packet derived from an external network protocol address; wherein the processing of the first packet includes: in the first packet A first virtual area network identification tag is added, and the first packet is determined based on the first virtual area network identification tag and a first destination media access control (MAC) address included in the first packet A first egress port (egress port), and discarding the first packet when the first egress port is the external port; and wherein the processing of the second packet includes: adding an egress port to the second packet The second virtual area network identification tag determines a second exit port of the second packet according to the second virtual area network identification tag and a second destination media access control address included in the second packet, and the The second virtual local area network identification tag is removed from the second packet and the second packet is forwarded through the second outbound port. For the box-type switch described in item 1 of the scope of patent application, the processing of the first packet further includes: when the first outbound port is not the outer port, forwarding the first packet through the first outbound port . For the box-type switch described in claim 1, wherein the network interface card further includes a controller and a switching device, the controller is used for generating the first packet and the second packet, and the switching device is used for Perform the above-mentioned first packet processing and the above-mentioned second packet processing. The box-type switch described in item 3 of the scope of patent application, wherein the switch device also maintains a forwarding table to record the first virtual area network identification tag and the external outbound port corresponding to the first destination media access control address When the corresponding external port is the above-mentioned external port, discard the above-mentioned first packet, and when the corresponding external port is not the above-mentioned external port, then the above-mentioned first packet is forwarded. A packet forwarding management method, applicable to a network interface card in a box-type switch, includes: processing a first packet originating from an intranet network protocol address, wherein the processing of the first packet includes: A first virtual area network identification tag is added to the first packet, and a first destination media access control address included in the first packet is determined based on the first virtual area network identification tag. An outgoing port, and discarding the first packet when the first outgoing port is an external port used for communication other than the box-type switch; and processing the first packet originating from an external network protocol address Two packets, wherein the processing of the second packet includes: adding a second virtual area network identification tag in the second packet, according to the second virtual area network identification tag and a second destination medium included in the second packet The access control address determines a second outbound port of the second packet, removes the second virtual local area network identification tag from the second packet, and transmits the second packet through the second outbound port. For example, the packet forwarding management method described in item 5 of the scope of patent application, wherein the processing of the first packet further includes: when the first outgoing port is not the external port, transmitting the first outgoing port through the first outgoing port A package. The packet forwarding management method described in item 5 of the scope of patent application further includes: generating the first packet and the second packet by a controller of the network interface card; and switching by one of the network interface cards The device executes the processing of the first packet and the processing of the second packet. The packet forwarding management method described in item 5 of the scope of patent application further includes: maintaining a forwarding table by the switching device to record the corresponding first virtual area network identification tag and the first destination media access control address For the external port, when the corresponding external port is the above external port, the first packet is discarded, and when the corresponding external port is not the above external port, the first packet is forwarded. A network interface card, which is set in a box-type switch, includes: an external port for communication other than the box-type switch; and a controller for generating bits derived from an intranet network protocol A first packet of one address, and a second packet derived from an Internet protocol address; and a switching device for adding a first virtual local area network identification tag in the first packet, according to the first A virtual local area network identification tag and a first destination media access control address included in the first packet determine a first outgoing port of the first packet, when the first outgoing port is the external port Discard the first packet, add a second virtual area network identification tag to the second packet, and determine based on the second virtual area network identification tag and a second destination media access control address included in the second packet One of the second outbound ports of the second packet removes the second virtual local area network identification tag from the second packet and transmits the second packet through the second outbound port. For the network interface card described in item 9 of the scope of patent application, the switching device further transmits the first packet through the first external port when the first external port is not the external port. The network interface card described in item 10 of the scope of patent application, wherein the switching device also maintains a forwarding table to record the first virtual local area network identification tag and the external outbound port corresponding to the first destination media access control address When the corresponding external port is the aforementioned external port, the first packet is discarded, and when the corresponding external port is not the aforementioned external port, the aforementioned first packet is forwarded.

Images