CA2337907A1 - Multiple virtual router - Google Patents

Multiple virtual router Download PDF

Info

Publication number
CA2337907A1
CA2337907A1 CA002337907A CA2337907A CA2337907A1 CA 2337907 A1 CA2337907 A1 CA 2337907A1 CA 002337907 A CA002337907 A CA 002337907A CA 2337907 A CA2337907 A CA 2337907A CA 2337907 A1 CA2337907 A1 CA 2337907A1
Authority
CA
Canada
Prior art keywords
routing
routing modules
modules
media
management
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
CA002337907A
Other languages
French (fr)
Inventor
Scott Pegrum
Enrico Antinucci
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nortel Networks Ltd
Original Assignee
Nortel Networks Limited
Scott Pegrum
Enrico Antinucci
Northern Telecom Limited
Nortel Networks Corporation
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nortel Networks Limited, Scott Pegrum, Enrico Antinucci, Northern Telecom Limited, Nortel Networks Corporation filed Critical Nortel Networks Limited
Priority claimed from CA002255294A external-priority patent/CA2255294A1/en
Publication of CA2337907A1 publication Critical patent/CA2337907A1/en
Abandoned legal-status Critical Current

Links

Abstract

A multiple virtual router is a subsystem that allows multiple network layer protocols (i.e. IP, IPX and Bridging protocols) to co-exist on the same physical port 14. It provides a common set of interfaces between the Media Layer and the protocol processes.
Media events or changes in the protocol port (i.e. port deletion, media deregistration, media registration, media state change, media mtu change, connectionless routing metric change, etc.) may be broadcast to each protocol giving them an accurate view of the system.
A multiple virtual router is disclosed which includes a housing and multiple routing modules distributed therein. A separate table is associated with each protocol within each routing module. The multiple virtual router also includes a management module for configuring the routing modules. Communications between the management module and the routing modules occurs out of band from the user traffic. Further, the housing has multiple ports each of which is logically coupleable to different routing modules.

Description

MULTIPLE VIRT 1A1 RC~tTTF1?
The invention relates generally to the field of routers and more particularly, to a single device having multiple independent router modules therein.
S Background of the Inve.,r;.,n With the growing popularity of the Internet and with the growing popularity of networks in general, there is a trend towards centralized network services and centralized network service providers. To be profitable, however, network service providers need to co«stantly maintain and if possible enlarge their customer base and their profits. However, leased line services are coming under increased competition causing profit margins to decrease for these providers. Thus, an increased number of providers are trying to attract small and medium sized businesses by providing centralized network management. Part of this network management should be that the service is provided from a centralized, secure network facility.
'There has been di~culty providing thi$ service, however, due to address conflicts, security problems and costly upgrade requirements to customer premise equipment. Historical independent network development has resulted in conflicting and overlapping address space between the individual networks and the management networks.
Others have attempted to solve these problems by using encapsulating techniques, such as Internet protocol (IP) tunneling, to separate network traffic from unrelated networks. This method, however, suffers from many of the same problems. Inter-network security can not be guaranteed in IP tunneling as it relies upon customer premise equipment to be correctly configured. These encapsulating techniques also require upgrading the customer premise equipment to be compatible with the IP tunneling. Further, performance can be a problem since routing disturbances caused by one customer may affect the routing performance of another customer's network.
Accordingly there exists the need for a centralized device which allows the implementation of separate networks over common infrastructure wlule providing security and performance to each network without the need to upgrade customer premise equipment.
The need also exists for such a device which is smaller and cheaper than multiple separate routers yet easily managed.
The need also exist for such a device which prevents unauthorized users on any of the networks from reconfiguring or otherwise managing the device.
It is accordingly an object of the present invention to provide a centralized device which allows the implementation of separate networks over common infrastructure while providing security and performance to each network without the need to upgrade customer premise equipment.
It is another object of the invention to provide such a device which is smaller and cheaper than multiple separate routers and is easily managed.
It is another object of the invention to provide such a device which prevents unauthorized users on any of the networks from reconfiguring or otherwise managing the device.
It is another object of the invention to provide such a device having the ability to provide different quality of service to different networks.
According to one aspect, the invention provides an apparatus comprising: a management routing module connectable to each of a plurality of routing modules and capable of selectively communicating with and configuring each of said plurality of routing modules so as to allow configuration and diagnostic access to said plurality of routing modules in a manner that takes place out-of-band from normal user traffic through at least one of said plurality of routing modules.
According to another aspect, the invention provides an apparatus, comprising: management means for configuring a plurality of routing means so as to allow configuration and diagnostic access to said plurality of routing means in a manner that takes place out-of-band from normal user traffic through at least one of said plurality of routing means, said 2a management means being disposed within said housing and being arranged to be logically coupled to said plurality of routing means.
According to another aspect, the invention provides a method comprising: logically coupling a management module to a plurality of routing modules; and configuring said plurality of routing modules with said management module so as to allow configuration and diagnostic access to said plurality of routing modules in a manner that takes place out-of-band from normal user traffic through at least one of said plurality of routine modules.
These and other objects of the invention will become apparent to those skilled in the art from the following description thereof.
It has now been discovered that these and other objects may be accomplished by the present multiple virtual router. The invention includes a housing having at least one physical port. It also includes multiple routing modules disposed within the housing. A
first of the routing modules has a first routing table associated therewith, while a second routing module has a second routing table associated therewith. The physical port may be logically connectable to both the first and the second routing modules.
In one embodiment, the invention may include a management router module capable of selectively communicating with and configuring each of the routing modules.
The management module may be capable of doing this communication and configuration out-of .
band from normal user traffic.
The invention will next be described in connection with certain illustrated embodiments;
however, it should be clear to those skilled in the art that various modifications, additions and subtractions can be made without departing from the spirit or scope of the claims.
Brief Description of the Drawines For a fuller understanding of the nature and objects of the invention, reference should be made to the following detailed description and accompanying drawings, in which:
FIG. 1 depicts a block diagram of the preferred embodiment of a multiple virtual router in accordance with the invention;
FIG. 2 depicts the embodiment of FIG. 1 showing a management module connected to multiple routing modules;
FIG. 3 depicts a possible configuration of multiple virtual routers in accordance with the present invention, being utilized by multiple networks using different protocols.
Detailed Description of the Invention A multiple virtual router is a subsystem that allows multiple network layer protocols (i.e. IP, IPX and Bridging protocols) to co-exist on the same physical port 14. It provides a common set of interfaces between the Media Layer and the protocol processes.
Media events or changes in the protocol port (i.e. port deletion, media deregistration, media registration, media state change, media mtu change, connectionless routing metric change, etc.) may be broadcast to each protocol giving them an accurate view of the system.
Multiple virtual routers maintain a set of logical network interfaces 16 mapped to the physical ports 14 (i.e. DS3 frame relay ports) that allow a protocol to forward packets between different media, such as local area networks (i.e. Fddi, Ethernet, and Token Ring) and wide area networks (i.e. FrDte, X25Dte, and Ppp). The logical ports (i.e. DLCI on the frame relay port) are distributed to each logical processor and updated by a forwarding agent. The forwarding agent is used to provide current information about the node and physical interfaces 14 to the routing modules 12 so that forwarding decisions can be readily made.
Each physical port 14 may contain information about the media and data used by the protocol to forward packets to that physical port 14. The media specific portion is sent by media applications when they register with the multiple virtual router.
Similarly the protocol data is specified by the protocol when it registers with the multiple virtual router.
FIG. 1 is an illustration of an embodiment of the invention including various multi-protocol router modules 12 disposed within a common housing 10. Those skilled in the art will recognize that while FIG. 1 illustrates these routing modules 12 as being entirely disjoint, it is possible to connect some or all of them together without departing from the scope of the invention. The housing 10 has at least one physical port 14 which may be selectively, logically connected to various ones of the router modules 12 as represented by logical connections 16 (interfaces). While FIG. 1 illustrates only one physical. port 14 and two routing modules 10, those skilled in the art will recognize that more than two routing modules 12 and/or more than one physical port 14 may be employed. Further, a particular physical port 14 may be selectively, logically connected/connectable to (i) one router module 12, (ii) multiple router modules 12, or (iii) all of the available router modules 12. With certain exceptions which will become evident from this disclosure, the routing modules 12 perform the same as conventional routers.

The routing modules 12 may be assigned different priorities for performing certain tasks. For example, assigning one routing module 12 a higher priority route calculation (i.e. the recalculation of forwarding information upon receiving routing update/changes from other nodes) and forwarding of data than another routing module 12 enables the higher priority routing 5 module 12 to route traffic received on the links 16 to that routing module 12 at a higher priority than traffic on lower priority routing modules 12. In this way, a high priority client could be provided a high priority virtual router and a low priority client could be assigned a lower priority virtual router. In addition, routing table updates, and routing processing may be prioritized as well. This prioritization would give the service provider the opportunity to offer different services and charge different rates for different clients.
A multiple virtual router may also include a management router module 18 as illustrated in FIG. 2. The management router module 18 allows configuration and diagnostic access to the router modules 12 in a secure manner which may be out-of band with normal user traffic as shown by connections 20. Connections 20 may be a bus, point to point connections or simply logical connections. The management router module 18 may enable a management network to access each individual router. module 12 in a particular multiple virtual router without being connected to each individual router module 12 (i.e. without the need for a full mesh interconnection between the management network and each individual router module 12).
Additionally,. a management router module 18 could route management traffic to another multiple virtual router if necessary. In this way, a variety of multiple virtual routers could be managed using normal IP or IPX routing techniques.
In today's IP and IPX networks, management of routers occurs in-band with user traffic. Thus great efforts must be expended to protect the management interface from illegitimate access by users of the network. Another concern is that the managing authority could be denied access to the router and a customer could be denied service.
By providing a completely separate management network (including a management router module 18) as the present invention can, the management authority can effectively configure and control the router network in a secure and consistent fashion without these typical security and accessability concerns. One skilled in the art will recognize that it is possible to use conventional in-band management techniques with the present invention, however, then the management authority would still need to be concerned with the present security and accessability issues.
FIG. 3 illustrates a possible configuration of multiple virtual routers in operation. The virtual routers allow each protocol (i.e. IP and IPX) to share the same physical link. This gives each protocol access to a private virtual network.. In the configuration illustrated in FIG.
3, network C is visible to network A through IPX's routing tables, just as networks D and E
are visible to network B through IP's routing tables. To each protocol it appears as though it is the only protocol running on the network. The virtual routers isolate the protocols, but maintain connectivity to the media (i.e. the WAN) so that events are broadcast and status information is kept current. Those skilled in the art will realize that each router module 12 may be a multi-protocol router capable of running multiple protocols concurrently. Since it is common for one network to be running many protocols simultaneously, the multiple virtual routers may provide isolation (i.e. independent address space and independent network routing updates for each network) between different clients running the same or different routing protocols.
It will. thus be seen that the invention efficiently attains tle objects set forth above, among those made apparent from the preceding description. In particular, the invention provides multiple virtual routers. Those skilled in the art will appreciate that the configurations depicted in FIGS. 1, 2 and 3 disclose centralized devices which allow the implementation of separate networks over common infrastructure while providing security and performance to each network without the need to upgrade customer premise equipment..
It will be understood that changes may be made in the above construction and in the foregoing sequences of operation without departing from the scope of the invention. It is accordingly intended that all matter contained in the above description or shown in the accompanying drawings be interpreted as illustrative rather than in a limiting sense.
It is also to be understood that the following claims are intended to cover all of the generic and specific features of the invention as described herein, and all statements of the scope of the invention which, as a matter of language, might be said to fall therebetween.
Having described the invention, what is claimed as new and secured by Letters Patent is:

Claims (10)

1. An apparatus, comprising:
a management routing module connectable to each of a plurality of routing modules and capable of selectively communicating with and configuring each of said plurality of routing modules so as to allow configuration and diagnostic access to said plurality of routing modules in a manner that takes place out-of-band from normal user traffic through at least one of.said plurality of routing modules.
2. The apparatus as claimed in claim 1 wherein said management routing module is configured to have a higher priority for communicating than said plurality of routing modules.
3. The apparatus as claimed in claim 1 wherein a first of said plurality of routing modules is assigned a higher priority for routing data than others of said plurality of routing modules.
4. The apparatus as claimed in claim 1 wherein a first of said plurality of routing modules is configured to forward traffic at a higher priority than others of said plurality of routing modules.
5. The apparatus as claimed in claim 1 wherein said management module is capable of configuring at least two of said plurality of routing modules for use by different networks.
6. The apparatus as claimed in claim 5 wherein said housing has a plurality of ports; at least one of said plurality of ports is logically coupled to each of said plurality of routing modules; and said management module is coupled to said at least one of said plurality of ports.
7. An apparatus, comprising:
management means for configuring a plurality of routing means so as to allow configuration and diagnostic access to said plurality of routing means in a manner that takes place out-of-band from normal user traffic through at least one of said plurality of routing means, said management means being disposed within said housing and being arranged to be logically coupled to said plurality of routing means.
8. The apparatus as claimed in claim 7 wherein said management means is selectively configured to have a higher priority for communicating than said plurality of routing means.
9. A method comprising:
logically coupling a management module to a plurality of routing modules;
and configuring said plurality of routing modules with said management module so as to allow configuration and diagnostic access to said plurality of routing modules in a manner that takes place out-of-band from normal user traffic through at least one of said plurality of routing modules.
10. The method recited in claim 9 further comprising:
configuring said management module to have a higher priority for routing than said plurality of routing modules.
CA002337907A 1997-12-23 1998-12-08 Multiple virtual router Abandoned CA2337907A1 (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US99693497A 1997-12-23 1997-12-23
US08/996,934 1997-12-23
CA002255294A CA2255294A1 (en) 1997-12-23 1998-12-08 Multiple virtual router

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
CA002255294A Division CA2255294A1 (en) 1997-12-23 1998-12-08 Multiple virtual router

Publications (1)

Publication Number Publication Date
CA2337907A1 true CA2337907A1 (en) 1999-06-23

Family

ID=25680658

Family Applications (1)

Application Number Title Priority Date Filing Date
CA002337907A Abandoned CA2337907A1 (en) 1997-12-23 1998-12-08 Multiple virtual router

Country Status (1)

Country Link
CA (1) CA2337907A1 (en)

Similar Documents

Publication Publication Date Title
EP0926859B1 (en) Multiple virtual router
US8611363B2 (en) Logical port system and method
US8194570B2 (en) Configuration tool for MPLS virtual private network topologies
US7489700B2 (en) Virtual access router
US7152115B2 (en) Virtual private networks
CN102461089B (en) For the method and apparatus using label to carry out strategy execution
WO2005031532A2 (en) Method and apparatus for modeling and analyzing mpls and virtual private networks
JP4381639B2 (en) Apparatus and method in a switched telecommunications system
JP2010283894A (en) Method and apparatus for managing remote ip network elements through sonet network elements
WO2005018174A1 (en) Multiple services provisioning in a packet forwarding device with logical ports
EP1518367B1 (en) Vlan inheritance
Cisco Router Products Configuration Guide Internetwork Operating System Release 10 Chapters 18 to 25
Cisco Configuring Transparent Bridging
Cisco Configuring Transparent Bridging
Cisco Configuring Transparent Bridging
Cisco Configuring Transparent Bridging
Cisco Configuring Transparent Bridging
Cisco Configuring Transparent Bridging
Cisco Configuring Transparent Bridging
Cisco Advanced Cisco Router Configuration Cisco Internetwork Operating System Release 10.3
Cisco Configuring Transparent Bridging
Cisco Router Products Configuration Guide Cisco Internetwork Operating System Release 11.0 Chapters 1 to 6
Cisco Gateway System Manual
Cisco Router Products Configuration Guide Internetwork Operating System Release 10 Chapter 1 to 9
Cisco Advanced Cisco Router Configuration: Student Guide Cisco Internetwork Operating System Release 11.2

Legal Events

Date Code Title Description
EEER Examination request
FZDE Dead