CN101459673B

CN101459673B - Method and equipment for communication between members of VPLN

Info

Publication number: CN101459673B
Application number: CN2008102392721A
Authority: CN
Inventors: 汪朋军
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2008-12-08
Filing date: 2008-12-08
Publication date: 2012-02-29
Anticipated expiration: 2028-12-08
Also published as: CN101459673A

Abstract

The invention provides a communicating method between virtual special-purpose local area network members and a device thereof, wherein the communicating method between virtual special-purpose local area network members comprises: receiving an entrance message, obtaining a source group number of members who send the entrance message and a target group number of members who obtain the message, judging whether the target group number and the source group number have same group number or not, transmitting the message if the target group number and the source group number have same group number, and discarding the message if the target group number and the source group number do not have same group number. The communicating method of the invention allocates a group number to each member and only the members with same group number are allowed to communicate mutually when the message passes through a Router. The members who need communication can communicate mutually after the restriction, and the members who do not need communication can be isolated, the network safety is improved, and the demands of user diversification are satisfied. Simultaneously, an existing data transmission flow is not changed, and the realization is very easy.

Description

Communication means between a kind of members of VPLN and equipment

Technical field

The present invention relates to network communication field, relate in particular to the communication means and the device that carry out intercommunication between the different members in a kind of VPLS (Virtual Private LANServices, VPLS) network or isolate.

Background technology

VPLS is a kind of two-layer VPN (Virtual Private Network, VPN) technology based on MPLS (Multiprotocol Label Switch, multiprotocol label switching) and ethernet technology.VPLS can realize the VPN networking of multiple spot to multiple spot.In the present VPLS networking, if network needs expansion, increase a PE (Provider Edge, tag edge router) equipment, this equipment need be set up once totally interconnected with all PE in the network more so.In order to address this is that, produced HVPLS (Hierarchical Virtual Private LAN Service, the service of hierarchical virtual private local area network).The core concept of HVPLS is through network classification.

In the basic model of HVPLS, can be divided into two kinds to PE: UPE (User-end Provider Edge, user side tag edge router) and NPE (Network Provider Edge, web tab edge router).UPE is user's a convergence device, and near the PE equipment of user side, the convergence device mainly as the user inserts VPN only need connect with wherein PE of basic VPLS fully-connected network.NPE links UPE, and is positioned at the inner nucleus equipment of basic VPLS fully-connected network, is also referred to as upper strata PE.NPE connects with other inner equipment of basic VPLS fully-connected network.

With reference to shown in Figure 1, Fig. 1 is the basic structure sketch map of existing HVPLS.PE1 among Fig. 1 (representing with 11), PE2 (representing with 9) and PE3 (representing with 10) are totally interconnected.The totally interconnected core virtual link that PE1, PE2, PE3 set up is hub (hub) character, and the edge virtual link between UPE and the NPE is spoke (vehicle wheel spoke) character.With among the VPLS (in VPLS, PE2 directly and CE (Customer Edge, customer edge) 2a-1 be connected with CE2a-2) PE2 be defined as NPE2 (Network Provider Edge, web tab edge router).UPE2-1 and UPE2-2 only connect with NPE2.

Each device flag: CE1a-1, CE1a-2 among Fig. 1 represent with 1,2 respectively; CE3a representes with 5; UPE2-1 representes that with 12 CE2a-2 representes that with 13 CE2a-1 representes that with 14 UPE2-2 representes with 15.

At present, be intercommunication between each member (comprising local member and far-end member) in the same VPN of the VPLS among Fig. 1, special control is not carried out in each member's communication.

But along with VPLS begins extensive use, user's demand more and more presents variation, and for example, from security consideration, some VPN member does not hope some the member's intercommunication etc. with other.But user's this demand has been satisfied not in present VPLS networking.

Summary of the invention

The purpose of this invention is to provide communication means and equipment between a kind of members of VPLN, to solve the problem that can not selectively communicate between present VPN member.Communication means between members of VPLN of the present invention may further comprise the steps:

Obtain the inlet message;

Obtain the member's who sends said inlet message source cohort number and the member's that said message will arrive purpose cohort number;

Judge whether comprise identical cohort number in said purpose cohort number and the source cohort number,, then transmit said message,, then abandon said message if do not comprise if comprise identical cohort number.

The step of the member's that said source cohort that obtains the member who sends said inlet message number and said message will arrive purpose cohort number specifically comprises:

Judge the send mode and the entry position of said inlet message;

According to the send mode of said message, from the transmission table corresponding, obtain the member's that said message will arrive purpose cohort number with the send mode of said message, said transmission table is preserved member and corresponding cohort number in advance;

According to the entry position of said message, from go into oral thermometer, obtain the member's who sends said message source cohort number, saidly go into oral thermometer and preserve member and corresponding cohort number in advance.

Said send mode comprises: clean culture, broadcasting and multicast;

When said send mode is clean culture, from the media interviews control table, obtain the member's that said message will arrive purpose cohort number;

When said send mode is when broadcasting, from the broadcasting table, obtain the member's that said message will arrive purpose cohort number;

When said send mode is multicast, from multicast table, obtain the member's that said message will arrive purpose cohort number.

Said message entry position comprises: local port and far-end inlet;

When message during, from go into oral thermometer, obtain the member's who sends said message source cohort number through local port from local port;

When message when far-end enters the mouth, from go into oral thermometer, obtain the member's who sends said message source cohort number through the far-end inlet.

The present invention also provides the communication equipment between a kind of members of VPLN, comprising:

Acquisition module is used to obtain the member's who sends the inlet message source cohort number and the member's that said message will arrive purpose cohort number;

Judge module is used for number whether comprising identical cohort number according to the said purpose cohort judged number and source cohort, determines whether to transmit said message.

Said acquisition module specifically comprises:

First judge module is used to judge the send mode and the entry position of said inlet message;

First acquisition module is used for the send mode according to said message, from the transmission table corresponding with the send mode of said message, obtains the member's that message will arrive purpose cohort number, and said transmission table is preserved member and corresponding cohort number in advance;

Second acquisition module is used for according to said message entry position, from go into oral thermometer, obtains the member's who sends message source cohort number, saidly goes into oral thermometer and preserves member and corresponding cohort number in advance.

Said send mode comprises: clean culture, broadcasting and multicast;

When said send mode was clean culture, said first acquisition module obtained the member's that said message will arrive purpose cohort number from the media interviews control table;

When said send mode is when broadcasting, said first acquisition module obtains the member's that said message will arrive purpose cohort number from the broadcasting table;

When said send mode was multicast, said first acquisition module obtained the member's that said message will arrive purpose cohort number from multicast table.

Said message entry position comprises: local port and far-end inlet;

When message during from local port, said second acquisition module obtains the member's who sends said message source cohort number from go into oral thermometer through local port;

When message when far-end enters the mouth, said second acquisition module obtains the member's who sends said message source cohort number from go into oral thermometer through the far-end inlet.

Compared with prior art, the present invention has following beneficial effect:

Communication means between VPLS member of the present invention has disposed a cohort number for each member; When message process router; Only to arrive member's purpose cohort when number identical at the source cohort of judging the member who sends message number and message; Just allow to continue to E-Packet, that is to say, only allow intercommunication between number identical member of cohort.After limiting like this, just can make intercommunication between the member who needs communication, and the member that will need not communicate by letter isolates, and has improved the fail safe of network, has satisfied the diversified demand of user.Simultaneously, the present invention does not change the available data transfer process, implements to be easy to.

Description of drawings

Fig. 1 is the basic structure sketch map of existing HVPLS;

Fig. 2 is a communication means flow chart of the present invention;

Fig. 3 is the network diagram that method of the present invention is implemented;

Fig. 4 is a routing device structural representation of the present invention.

Embodiment

Communication means of the present invention proposes the notion of cohort; That is,, need member's the cohort of intercommunication number identical for each member in the VPN distributes a cohort number (GROUP ID); The member's of not intercommunication cohort is number inequality, cohort number identical cohort of member composition.According to the needs of telex network,, the member's of needs communication cohort number is set to identical at first in the configuration of the enterprising line command of routing device.In when communication, routing device is through judging whether source cohort number and purpose cohort be number identical, decides between the member whether intercommunication.

Do further explain below in conjunction with the accompanying drawing specific embodiments of the invention.

With reference to figure 2, Fig. 2 is a communication means flow chart of the present invention, comprises step:

Whether the send mode of judging VPLS inlet message is clean culture, if not, be exactly broadcasting;

Certainly can also be multicast mode, here only with clean culture with broadcast as example and describe.

After judging send mode, judge that message still enters the mouth from far-end from local port;

If judge is from local port, then obtains source cohort number from the local port table, and from corresponding table, obtains purpose cohort number according to the send mode of judging.When send mode is clean culture, from MAC (Media Access Control, media interviews control) table, obtain purpose cohort number, when send mode is broadcasting, from the broadcasting table, obtain purpose cohort number.

If judge is from far-end inlet, then goes into to obtain the oral thermometer source cohort number from far-end, and from corresponding table, obtains purpose cohort number according to the send mode of judging.When send mode is clean culture, from MAC table, obtain purpose cohort number, when send mode is broadcasting, from the broadcasting table, obtain purpose cohort number.

The source and destination cohort number all is to be kept in advance in MAC table or the broadcasting table.

No matter still from the far-end inlet, whether the source cohort that all will relatively obtain number and purpose cohort be number identical from local port for message, if identical, then continue to E-Packet, otherwise, abandon this message.

With reference to figure 3, Fig. 3 is the network diagram that method of the present invention is implemented.Distribution in the face of each member's among Fig. 3 cohort number describes down.

The member divides two types: local member and far-end member.The member of CE side is local member, and the member of PW (Pseudo-Wires, virtual link) side is the far-end member.Have 4 members in this VPLS territory on the PE1 (representing with 11), two local member CE1a-1, CE1a-2 represent with 1,2 respectively; Two far-end member PW1-3, PW1-2 represent with 3,4 respectively.PE2 (representing with 9) goes up and has 4 members, and PW1-2, PW2-3, PW2-22, PW2-21 represent with 4,6,7,8 respectively, all are the far-end members.PE3 (representing with 10) goes up and has 3 members: a local member CE3a, represent with 5; Two far-end member PW2-3, PW1-3.For each member distributes cohort number, specifically referring to table 1, table 1 is member and a cohort thereof number in the VPLS territory among Fig. 2 on PE.

Table 1

According to above-mentioned classification, hereinafter will the signal intelligence between the member be specified according to message forwarding direction and communication mode to the member.Message routing direction and communication mode reference table 2.

Table 2

	Forwarding put to	Communication mode
			1	Local---local (CE1a-1---->PE1--->CE1a-2)	Clean culture
2	Local---local (CE1a-1---->PE1--->CE1a-2)	Broadcasting
			3	Local---far-end (CE1a-1---->PE1---->PW1-2)	Clean culture
4	Local---far-end (CE1a-1---->PE1---->PW1-2)	Broadcasting
			5	Far-end---local (PW1-3---->PE3---->CE3a)	Clean culture
6	Far-end---local (PW1-3---->PE3---->CE3a)	Broadcasting
			7	Far-end---far-end (PW2-21---->NPE2---->PW2-22, HVPLS is peculiar)	Clean culture
8	Far-end---far-end (PW2-21---->NPE2---->PW2-22, HVPLS is peculiar)	Broadcasting

Routing direction 1～4 is a message from local port:

1, this locality---local (CE1a-1---->PE1--->the CE1a-2 clean culture)

The last existence of PE1 two local members, CE1a-1 and CE1a-2.CEla-1 arrives CE1a-2 through PE1.When communication mode was clean culture, the corresponding relation in the table 1 was kept in oral thermometer and the MAC table simultaneously, and inlet source cohort number obtains from go into oral thermometer, and outlet purpose cohort number obtains from the MAC table.Communication mode is when broadcasting, and the corresponding relation in the table 1 is kept in oral thermometer and the broadcasting table simultaneously, and inlet source cohort number obtains from go into oral thermometer, and outlet purpose cohort number obtains from MAC shows.

Except clean culture and broadcasting, can also multicast mode communication, at this moment, the corresponding relation in the table 1 is kept in oral thermometer and the multicast table simultaneously, and inlet source cohort number obtains from go into oral thermometer, number from multicast table, obtains and export the purpose cohort.Below with clean culture with broadcast as example and describe.

Step 1 PE1 local port is looked into into oral thermometer and is obtained inlet source cohort number (GROUP ID), and the table of comparisons 1 can know that the corresponding cohort of CE1a-1 number is A;

Step 2 PE1 looks into VPLS MAC table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can know that the corresponding cohort of CE1a-2 number is B;

If step 3 PE1 contrast source cohort A and purpose cohort B consistent, then are transmitted to CE1a-2 according to outlet; If inconsistent, then abandon.

2, this locality---local (CE1a-1---->PE1--->CE1a-2 broadcasting)

Step 1 PE1 local port is looked into into oral thermometer and is obtained inlet source cohort number (GROUP ID), and the table of comparisons 1 can be known the group number A that CE1a-1 is corresponding;

Step 2 PE1 looks into the broadcasting table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number B that CE1a-2 is corresponding;

3, this locality---far-end (CE1a-1---->PE1---->the PW1-2 clean culture)

The last message of receiving from the local member of CE1a-1 of PE1, and, finally arrive PE2 to the pseudo-line forwarding of PW1-2.

Step 2 PE1 looks into VPLS MAC table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number D that PW1-2 is corresponding;

If step 3 PE1 contrast source cohort A and purpose cohort D consistent, then transmit to PE2 according to outlet; If inconsistent, then abandon.

4, this locality---far-end (CE1a-1---->PE1---->PW1-2 broadcasting)

Step 2 PE1 looks into the broadcasting table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number D that PW1-2 is corresponding;

Local---far-end also can be CE1a-1---->PE1---->PW1-3, or CE1a-2----PE1----PW1-3, or CE1a-2----PE1----PW1-2.

Message enters the mouth from far-end:

5, far-end---local (PW1-3---->PE3---->the CE3a clean culture)

Suppose that PE3 receives the message that comes from the pseudo-line of far-end PE 1 process PW1-3, sends out to local CE3a.

Step 1 PE3 far-end inlet is looked into into oral thermometer and is obtained inlet source cohort number (GROUP ID), and the table of comparisons 1 can be known the group number J that PW1-3 is corresponding;

Step 2 PE3 looks into VPLS MAC table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number I that CE3a is corresponding;

If step 3 PE3 contrast source cohort J and purpose cohort I consistent, then are transmitted to CE3a according to outlet; If inconsistent, then abandon.

6, far-end---local (PW1-3---->PE3---->CE3a broadcasting)

Step 2 PE3 looks into the broadcasting table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number I that CE3a is corresponding;

Far-end--the mode of-this locality is except 5 and 6; Also comprise: PW2-3----PE3----CE3a; Its communication means and PW1-3---->PE3---->CE3a is identical; Look into into oral thermometer by PE3 in when inlet and to obtain source cohort number, broadcast by the PE3 verification certificate then or multicast or broadcasting table are obtained purpose cohort number, and decide between the member whether intercommunication through contrast source cohort number and purpose cohort number be whether identical.

7, far-end---far-end (PW2-21---->NPE2---->the PW2-22 clean culture)

The mode of far-end---far-end only exists in HVPLS.For the HVPLS structure, PE2 is defined as NPE2.NPE2 receives from the next message of the pseudo-line of UPE2-1 process PW2-21, and to the pseudo-line forwarding of PW2-22, finally arrives UPE2-2.

Step 1 NPE2 far-end inlet is looked into into oral thermometer and is obtained inlet source cohort number (GROUP ID), and the table of comparisons 1 can be known the group number H that PW2-21 is corresponding;

Step 2 NPE2 looks into VPLS MAC table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number G that PW2-22 is corresponding;

If step 3 NPE2 contrast source cohort H and purpose cohort G consistent, then transmit to UPE2-2 according to outlet; If inconsistent, then abandon.

8, far-end---far-end (PW2-21---->NPE2---->PW2-22 broadcasting)

Step 2 NPE2 looks into the broadcasting table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number G that PW2-22 is corresponding;

For far-end--the situation of-far-end the situation in the 7th and 8, can also be PW1-2--->PW2-22, or PW1-2---PW2-21, or PW1-2---PW2-3 etc., so long as said method communication all capable of using between the far-end member of NPE2.

The communication mode of describing in the preceding text all is to be the explanation that example is carried out through single PE or NPE, in the time will passing through a plurality of PE or NPE, also is to utilize said method; One by one judge that whether source cohort number and purpose cohort number consistent, if consistent, then allow intercommunication; If inconsistent, then abandon.Specify with an example below.

Suppose that CE1a-1 will communicate by letter with the mode of broadcasting with CE2a-2, then CE1a-1 is the source, and CE2a-2 is a purpose.In CE1a-1 and process that CE2a-2 communicates by letter, pass through PE1, NPE2 and UPE2-2 successively, step is following:

1, PE1 local port is looked into into oral thermometer and is obtained inlet source cohort number (GROUP ID), and the table of comparisons 1 can be known the group number A that CE1a-1 is corresponding;

2, PE1 looks into the broadcasting table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number D that PW1-2 is corresponding;

3, if PE1 contrast source cohort A and purpose cohort D consistent, then transmit to NPE2 according to outlet, and carry out for the 4th step; If inconsistent, then abandon.

4, NPE2 far-end inlet is looked into into oral thermometer and is obtained inlet source cohort number (GROUP ID), and the table of comparisons 1 can be known the group number E that PW1-2 is corresponding;

5, NPE2 looks into the broadcasting table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number G that PW2-22 is corresponding;

6, if NPE2 contrast source cohort E and purpose cohort G consistent, then transmit to UPE2-2 according to outlet, and carry out for the 7th step; If inconsistent, then abandon.

7, UPE2-2 far-end inlet is looked into into oral thermometer and is obtained inlet source cohort number (GROUP ID), and the table of comparisons 1 can be known the group number M that PW2-22 is corresponding;

8, UPE2-2 looks into the broadcasting table, obtains outlet purpose cohort number (GROUP ID), and the table of comparisons 1 can be known the group number L that CE2a-2 is corresponding;

9, if UPE2-2 contrast source cohort M and purpose cohort L consistent, then transmit to CE2a-2 according to outlet, if inconsistent, then abandon.

Communication among the VPLS between each member all is to realize explanation no longer one by one here according to method mentioned above.Source and destination all is relative, and a side who sends message is referred to as the source, and a side who receives is referred to as purpose.

In the said method, each member has unique cohort number, certainly, under the situation that the list item size allows, also can realize like this disposing more flexibly for each member distributes a plurality of cohorts number.For example, 3 members 1～3 are arranged, member 1 has cohort R and S, and member 2 has cohort R, and member 3 has cohort S.At this moment, member 1 both can with member's 2 intercommunications, also can with member's 3 intercommunications.But

member

2 and 3 cohort are number different, therefore, this two between directly intercommunication.That is to say that each member can have at least one cohort number, at least one cohort number, as long as include identical cohort number, just directly intercommunication between these two members.Method for communicating sees above, and repeats no more here.

The present invention also provides a kind of routing device, is used for realizing the communication between VPLS member.With reference to figure 4, Fig. 4 is a routing device structural representation of the present invention.Routing device of the present invention comprises: judge module 1, judge module 2, first acquisition module, second acquisition module and judge module 3.

Judge module 1 is used to judge the send mode of message.The send mode of message comprises: clean culture, broadcasting and multicast.

Judge module 2 is used to judge the message entry position.The message entry position comprises: local port and far-end inlet.

First acquisition module is used for obtaining from the transmission table corresponding with the send mode of said message the member's that message will arrive purpose cohort number, in this transmission table in advance correspondence preserve member and cohort thereof number.

Send mode comprises clean culture, broadcasting and multicast, and the transmission table also should be MAC table, broadcasting table and multicast table mutually.When send mode is clean culture, from MAC table, obtain purpose cohort number; When send mode is when broadcasting, from the broadcasting table, obtain purpose cohort number; When send mode is multicast, from multicast table, obtain purpose cohort number.

Second acquisition module is used for through the message entry position, from go into oral thermometer, obtains the member's who sends message source cohort number.

If from local port, then obtain source cohort number from going into oral thermometer through local port; If from far-end inlet, then from go into oral thermometer, obtain source cohort number through the far-end inlet.

Judge module 3 is used to judge whether purpose cohort that message will arrive number and the source cohort that sends message be number identical, if identical, then transmits this message, if inequality, then abandons this message.

Routing device of the present invention can be formed VPLS network shown in Figure 3, is the function that example specifies routing device of the present invention in the network of Fig. 3, to send message below.

Suppose that NPE2 receives the message that comes through the pseudo-line of PW2-21 from UPE2-1, and transmit, finally arrive UPE2-2 to the pseudo-line of PW2-22.

The judge module 1 of supposing NPE2 is judged message and is sent with mode of unicast.

The judge module 2 of NPE2 is judged message and is entered the mouth from far-end.

The send mode that first acquisition module of NPE2 sends according to clean culture obtains the member's that message will arrive purpose cohort number from the MAC table, the table of comparisons 1 can be known the group number G that PW2-22 is corresponding.

Second acquisition module of NPE2 enters the mouth from far-end according to message, obtains the member's who sends message source cohort number through far-end inlet from going into oral thermometer, and the table of comparisons 1 can be known the group number H that PW2-21 is corresponding.

Then, whether the purpose cohort G that the judge module 3 of NPE2 relatively obtains is identical with source cohort H, if identical, then allows to transmit this message according to outlet to UPE2-2, if inequality, then abandons this message.

Communication between all members of VPLS can realize explanation no longer one by one here through the above-mentioned functions of routing device of the present invention.

Be that member and corresponding cohort number are kept at respectively in the transmission table corresponding with send mode in the foregoing description, and be kept in the oral thermometer.Can certainly member and corresponding cohort number be preserved separately, when obtaining cohort, can from the member of independent preservation and corresponding cohort number, obtain through the entry position.When obtaining through send mode, can be from obtaining the message outlet accordingly the transmission table with send mode, from member and corresponding cohort number, obtain the member's that message will arrive purpose cohort number again according to outlet.

The above only is a preferred implementation of the present invention; Should be pointed out that for those skilled in the art, under the prerequisite that does not break away from the principle of the invention; Can also make some improvement and retouching, these improvement and retouching also should be regarded as protection scope of the present invention.

Claims

1. the communication means between a members of VPLN is characterized in that, may further comprise the steps:

Obtain the inlet message;

Judge whether comprise identical cohort number in said purpose cohort number and the source cohort number,, then transmit said message,, then abandon said message if do not comprise if comprise identical cohort number;

Judge the send mode and the entry position of said inlet message;

2. the communication means between members of VPLN as claimed in claim 1 is characterized in that, said send mode comprises: clean culture, broadcasting and multicast;

3. the communication means between members of VPLN as claimed in claim 1 is characterized in that, said message entry position comprises: local port and far-end inlet;

4. the communication equipment between a members of VPLN is characterized in that, comprising:

Judge module is used for number whether comprising identical cohort number according to the said purpose cohort judged number and source cohort, determines whether to transmit said message;

Said acquisition module specifically comprises:

5. the communication equipment between members of VPLN as claimed in claim 4 is characterized in that, said send mode comprises: clean culture, broadcasting and multicast;

6. the communication equipment between members of VPLN as claimed in claim 4 is characterized in that, said message entry position comprises: local port and far-end inlet;