CN101076016A - Structure for protecting network topological structure - Google Patents

Abstract

The method comprises: on the exchange starting up the MSTP protocol, a enforced instance zero port attributes is added into the port; said port doesn't use the VLAN attribute of port to decide which instance of MSTP in the port will be made with a tree generating calculation, but neglects the VLAN attribute and directly joins in the instance zero of the exchange to make calculation; according to the calculation result in the instance zero, determining the states of all instances.

Description

A kind of method of protecting network topological structure

Technical field

The present invention relates to the network topology structure resist technology, relate in particular on the switch that has disposed 802.1s (MSTP, many examples Spanning-Tree Protocol) method of protecting network topological structure.

Background technology

For a long time, the webmaster personnel of design double layer network rely on IEEE 802.1s Spanning-Tree Protocol (STP) always provides redundancy, guarantees the loop free connectivity between a plurality of bridges and switches.Yet the combination of 802.1D and 802.1Q VLAN has but brought challenge to people.If the user separates the VLAN transport stream with multilink, STP can make some data paths wherein ineffective.802.1s a plurality of generation trees in Multiple Spanning Tree Protocol (MSTP) network enabled, thereby solved this problem.This standard can be assigned to VLAN (VLAN) transport stream on the specific path administrative staff.802.1s (MSTP) in present networking is used, obtained application more and more widely.

Sometimes have this situation in actual applications, on switch, have a plurality of VLAN, each VLAN correspondence the example of a MSTP.The user should use different equipment to insert among the different VLAN according to reason, but the user for convenience sometimes, couple together with the port of hub in addition different VLAN, subscriber equipment is connected on this hub, so only need configuration a plurality of IP address and dispose corresponding main frame route, subscriber equipment just can be visited a plurality of VLAN simultaneously, but can cause a problem like this, the isolation that is connected between the VLAN of the hub that the user increases privately is just destroyed, also destroyed the whole topological structure of network, in some cases, can cause broadcast storm or other problems.Though this situation causes owing to user error uses, and also is exist actually, needing a kind of mechanism can address this problem.

Summary of the invention

The objective of the invention is at the problems referred to above, provide when having disposed 802.1s (MSTP), make certain port ignore a kind of method of VLAN attribute, prevent that the user is communicated with VLAN the purpose that changes network topology structure thereby reach.

The present invention is such specific implementation:

A kind of method of protecting network topological structure is characterized in that:

On the switch that starts the MSTP agreement, port is increased by one force example zero port attribute, prepare the port of forcing example zero port attribute and carried out many examples when generating tree and calculating, ignore in the example zero that the VLAN attribute directly joins switch and calculate, and decide the state of port in all examples according to the result of calculation in the example zero.

Described port is for connecting user's port;

When port is reached the standard grade or received the Spanning-Tree Protocol administrative message, judge at first whether this port has the example of pressure zero port attribute, if do not have, then according to normal MSTP flow processing; If have, directly port is placed in the example zero of MSTP and calculates.

Do not possess and put teeth in zero port attribute, will in which example, calculate according to the VLAN attribute decision port of port, and in corresponding example, calculate the state of port.

Possess and put teeth in zero port attribute, ignore the VLAN attribute of port, directly only in the example zero of MSTP, calculate, then the port status that calculates in the example zero is copied in all spanning-tree instances relevant with port.

Compare with existing 802.1s (MSTP) realization flow, advantage of the present invention is: can prevent that effectively the different vlan ports that meet the user are communicated with by the user when having disposed 802.1s (MSTP).And on the switch of operation 802.1s (MSTP), do not need to increase extra burden, only need on the port that connects the user, increase and force example zero port attribute, and the process that one step of increase is judged pressure example zero port attribute of port when Spanning-Tree Protocol is calculated, can shield the difference of exchange chip on implementation.

Description of drawings

Fig. 1 is the flow chart of the method for the invention.

Embodiment

Be elaborated below in conjunction with the concrete enforcement of accompanying drawing to the method for the invention.

As shown in Figure 1, on the switch that starts the MSTP agreement, port is carrying out many examples when generating tree and calculating, judge at first whether port has the example of pressure zero port attribute, put teeth in zero port attribute if possess, the VLAN attribute of ignoring port directly only calculates in the example zero of MSTP, then the port status that calculates in the example zero is copied in all spanning-tree instances relevant with port; Otherwise, do not put teeth in zero port attribute if do not possess, will in which example, calculate according to the VLAN attribute decision port of port, and in corresponding example, calculate the state of port.Directly join in the example zero of switch and calculate, and decide the state of port in all examples according to the result of calculation in the example zero.

Method provided by the invention is, on the switch that starts operation 802.1s (MSTP) agreement, increase particular community of configuration (the pressure example of MSTP zero port attribute for the port that connects the user, be called for short and force example zero port), the interconnect port between the network does not then need to dispose this attribute.The port that has this attribute does not decide port to generate the calculating of tree in which example of MSTP based on the VLAN attribute of port, calculate but ignore in the example zero that the VLAN attribute directly joins switch (instance 0), and decide the state of port in all examples according to the result of calculation in the example zero.

Like this, if when the user attempts to use privately hub to connect port between the different VLAN, switch can prevent that network topology structure from being got through according to the port status in the example zero.

When port reach the standard grade (link up) get up or receive Spanning-Tree Protocol administrative message (BPDU) when bag, judge at first whether this port has the example of pressure zero port attribute, if do not have, then enter the protocol processes flow process of normal 8021s (MSTP), VLAN attribute decision port according to port will calculate in which example, and calculate the state of port in corresponding example; If port has the example of pressure zero port attribute, then ignore the VLAN attribute of port, directly only in the example zero of MSTP, calculate, then the port status that calculates in the example zero is copied in all spanning-tree instances relevant with port.

The final like this port operation 802.1s (MSTP) that can be implemented in the network interconnection on the switch, and the port that connects the user is similar to operation 802.1d or 802.1w, thereby can effectively prevent the user uses hub that the VLAN that isolates is communicated with, change network topology structure, cause network unusual.

Claims (4)

1, a kind of method of protecting network topological structure is characterized in that:

On the switch that starts the MSTP agreement, port is increased by one force example zero port attribute, prepare the port of forcing example zero port attribute and carried out many examples when generating tree and calculating, to ignore in the example zero that the VLAN attribute directly joins switch MSTP and calculate, and decide the state of port in all examples according to the result of calculation in the example zero.

2, the method for protecting network topological structure as claimed in claim 1 is characterized in that:

Described port is for connecting user's port;

When port is reached the standard grade or received the Spanning-Tree Protocol administrative message, judge at first whether this port has the example of pressure zero port attribute, if do not have, then according to normal MSTP flow processing; If have, directly port is placed in the example zero of MSTP and calculates.

3, the method for protecting network topological structure as claimed in claim 1 or 2 is characterized in that:

Do not possess and put teeth in zero port attribute, will in which example, calculate according to the VLAN attribute decision port of port, and in corresponding example, calculate the state of port.

4, the method for protecting network topological structure as claimed in claim 1 or 2 is characterized in that:

Possess and put teeth in zero port attribute, ignore the VLAN attribute of port, directly only in the example zero of MSTP, calculate, then the port status that calculates in the example zero is copied in all spanning-tree instances relevant with port.