CN102811153A

CN102811153A - VLAN state negotiating method and edge device

Info

Publication number: CN102811153A
Application number: CN2012102932459A
Authority: CN
Inventors: 宋小恒
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: New H3C Technologies Co Ltd
Priority date: 2012-08-17
Filing date: 2012-08-17
Publication date: 2012-12-05
Anticipated expiration: 2032-08-17
Also published as: CN102811153B

Abstract

The invention discloses a VLAN (virtual local area network) state negotiating method and an edge device. The VLAN state negotiating method comprises the following steps that: a first edge device performs identity authentication on a neighboring second edge device of a same EVI (Ethernet virtual interconnection) instance in a website, and after success of the identity authentication, switches the VLAN state corresponding to the EVI instance from an initial state to an exchange state; the first edge device and the second edge device notify respectively-determined VLAN final states to each other; the first edge device judges whether the VLAN final state determined by itself is the same as the VLAN final state determined by the second edge device; if the first edge device determines that the VLAN final state determined by itself is different from the VLAN final state determined by the second edge device, the first edge device switches the VLAN state from the exchange state to the final state determined by itself; and if the first edge device determines that the VLAN final state determined by itself is the same as the VLAN final state determined by the second edge device, the first edge device switches the VLAN state from the exchange state to the initial state.

Description

The machinery of consultation of vlan state and edge device

Technical field

The present invention relates to communication technical field, particularly a kind of machinery of consultation of vlan state and edge device.

Background technology

EVI (Ethernet Virtual Interconnection; Ethernet connects virtual) be the interconnected technology of a kind of Ethernet; Can dispose a plurality of data centers in the strange land and realize load balancing and high reliability, and between data center, carry out free migration through virtual machine.A big data center can be made up of a plurality of websites (site) that are distributed in the different location.In the data center network of utilizing the EVI technique construction (being called the EVI network); Website is through edge device (Edge Device; When ED) inserting core net; In order to realize high reliability, prevent the Single Point of Faliure of equipment in the network, use two edge of table equipment to insert core net (neighbours of the same each other EVI instance of this two edge of table equipment) usually with dual-homed mode (i.e. website of two edge of table equipment ownership).Inserting with dual-homed mode in the website of core net, may there be loop.For anti-loops; Usually the solution that adopts at present is: in a website; Make the data flow of each VLAN (Virtual Local Area Network, VLAN) pass in and out core net from same edge device, this VLAN is the active vlan of this edge device; That is, each VLAN can only be the active vlan of an edge device in the website.The set of the active vlan of edge device is the subclass of expansion VLAN (that is, private network VLAN) of configuration, and from certain specific expansion VLAN angle, network remains single ownership, thereby does not have loop.

In EVI dual-home network as shown in Figure 1; Edge device ED1 in the website 1 and ED2 insert core net (i.e. EVI among the figure) with dual-homed mode; ED1 and ED2 have hung a large amount of servers and main process equipment 10 times through CE (Customer Edge, customer edge); Edge device ED3 and ED4 in the website 2 insert core net with dual-homed mode, and ED3 and ED4 are through having hung a large amount of servers and main process equipment under the CE20.VLAN100 is active vlan on ED1 and ED4, is non-active vlan on ED2 and ED3, thereby the quantity of VLAN100 stream only can pass in and out core net between ED1 and these two edge devices of ED4, can not have loop in the website 1 with in the website 2.

In order to be implemented in the website; The data flow of a VLAN is only from same edge device turnover core net; ISIS (Intermediate System-to-Intermediate System in the operation website on the network of each edge device (promptly belonging to two edge of table equipment of same website) in website in the same website; Intermediate System-to-Intermediate System) agreement is consulted the active vlan and the non-active vlan of each edge device.Must guarantee the edge device accessibility each other in the same website, independently control VLAN and carry ISIS protocol massages in the website to accomplish the reciprocal process of ISIS protocol massages in the website, when the layout data central site network, will dispose.In the prior art; The user vlan state of each edge device has two: Active (activation) and Inactive (non-activation); The edge device that has only the state of user vlan to be in Active just can be transmitted the data flow among this VLAN, and concrete user vlan state negotiations process is following:

Message forms neighborhood to the mutual Site ISIS of edge device both sides Hello (ISIS neighbours find in the website), and the state of the user vlan among the both sides is Active when initialization; Then, both sides send protocol massages each other through connecting interface between the two, with the expansion VLAN of mutual each self-configuring of announcement; Afterwards; Both sides carry out computing in this locality according to certain algorithm independently of one another after the protocol massages that receives the other side's transmission, so that from expansion VLAN, select oneself active vlan and non-active vlan; Wherein, to each VLAN all according to identical mode computing; Last both sides revise the attribute of each VLAN separately according to active vlan of oneself selecting and non-active vlan.For example, after ED1 among Fig. 1 and ED2 held consultation through above-mentioned negotiations process, obtain: VLAN100 was Active VLAN for ED1, and was Inactive VLAN for ED2, and ED1 and ED2 revise the attribute of VLAN100 separately afterwards.Therefore, in website 1, only transmit the data flow of VLAN100 by ED1.

By on can know that equipment carries out in the process that the user vlan state consults on the edge of because the state of the user vlan among the both sides is Active during initialization; Like this; Before the attribute of final each VLAN of modification, both sides think that the VLAN of oneself is Active VLAN, all are the situation of Active VLAN for both sides thereby can cause some within a certain period of time VLAN; When a VLAN is Active VLAN for two dual-homed edge devices in the same website; This two edge of table equipment all can be transmitted the data flow of this VLAN, just can have loop in the network in this website, causes a large amount of loop messages to impact server and the main process equipment of hanging down.And; Consult both sides when active vlan and the non-active vlan of selecting separately; Be to carry out computing independently of one another in this locality; Both sides do not know the other side's selection result, and may occurring both sides like this, all to select some VLAN be the situation of Active VLAN, have loop equally in the network in the website.

Summary of the invention

In view of this, the invention provides a kind of machinery of consultation and edge device of vlan state, the network loop problem that causes with the negotiation that solves prior art at least.

Technical scheme of the present invention is following:

On the one hand; A kind of machinery of consultation of vlan state is provided; This method is applied to the EVI network; This method comprises: first edge device carries out authentication to neighbours' second edge device of same EVI instance in the website, and after the authentication success, the state of the VLAN that this EVI instance is corresponding switches to swap status from initial condition; Wherein, when the state of VLAN was in initial condition or swap status on the edge device, this edge device did not allow to transmit the message among the corresponding VLAN of this EVI instance, and after the edge device initialization, the state of the VLAN that this EVI instance is corresponding on it gets into initial condition; First edge device and second edge device are announced the end-state of determined VLAN separately each other; And whether first edge device is judged own identical with the end-state of the determined VLAN of second edge device; If first edge device determines own different with the end-state of the determined VLAN of second edge device, then first edge device switches to own determined end-state with the state of VLAN from swap status; Wherein, when this end-state was state of activation, first edge device allowed to transmit the message among this VLAN, and when this end-state was unactivated state, first edge device did not allow to transmit the message among this VLAN; If first edge device determines own identical with the end-state of the determined VLAN of second edge device, then first edge device switches to initial condition with the state of VLAN from swap status.

On the other hand, a kind of edge device is provided also, has been applied to the EVI network, edge device comprises: authentication module is used for being that neighbours' second edge device of same EVI instance carries out authentication with this edge device in the website at this edge device place; The vlan state handover module; Be used for authentication module is carried out the authentication success to second edge device after; The state of the VLAN that this EVI instance of this edge device is corresponding switches to swap status from initial condition; And the end-state that determines this edge device and the determined VLAN of second edge device at judge module switches to the determined end-state of this edge device with the state of VLAN from swap status not simultaneously; Determine the end-state of this edge device and the determined VLAN of second edge device when identical at judge module, the state of VLAN is switched to initial condition from swap status; Wherein, when the state of VLAN was in initial condition or swap status on the edge device, this edge device did not allow to transmit the message among the corresponding VLAN of this EVI instance, and after the edge device initialization, the state of the VLAN that this EVI instance is corresponding on it gets into initial condition; When the end-state of the determined VLAN of this edge device is state of activation; This edge device allows to transmit the message among this VLAN; When the end-state of the determined VLAN of this edge device was unactivated state, this edge device did not allow to transmit the message among this VLAN; Confirm announcement module, be used for the vlan state handover module with the state of VLAN after initial condition switches to swap status, announce the end-state of this edge device and the determined VLAN of second edge device each other with second edge device; Judge module is used to judge whether this edge device is identical with the end-state of the determined VLAN of second edge device.

Above technical scheme of the present invention; Get into initial condition during the edge device both sides VLAN initialization consulted, after the other side being carried out the authentication success, VLAN is switched to swap status from initial condition; When VLAN is in swap status; The other side is given in the end-state of the VLAN that can will confirm separately (activation or unactivated state) announcement, in the end-state of confirming own and the VLAN that the other side confirms not simultaneously, just can VLAN be switched to own determined end-state from swap status.Since a VLAN on the edge device in initial condition or swap status the time this edge device all do not allow to transmit the message among this VLAN, therefore, when consulting beginning and in the negotiations process; All can not there be loop in the network; And edge device just can switch to own determined end-state from swap status with VLAN in the end-state of confirming own and the VLAN that the other side confirms not simultaneously; Thereby can guarantee that same VLAN is to be in different possible final states in the EVI dual-home network on two edge of table equipment; Can on an edge of table equipment, be the Active state only promptly, and on another edge of table equipment, be the Inactive state that can not occur on the two edge of table equipment all is that the Active state all is the situation of Inactive state perhaps; Further eliminated the possibility that loop exists; Thereby through optimizing the vlan state negotiation mechanism of EVI dual-home network, fundamentally eliminated the network loop that negotiation causes, safeguarded the stability of dual-home network.

Description of drawings

Fig. 1 is the configuration diagram of the EVI dual-home network of prior art;

Fig. 2 is the transition diagram according to the vlan state of embodiments of the invention one;

Fig. 3 is a kind of flow chart according to the vlan state machinery of consultation of state transition diagram execution as shown in Figure 2;

Fig. 4 is the another kind of flow chart according to the vlan state machinery of consultation of state transition diagram execution as shown in Figure 2;

Fig. 5 is the schematic flow sheet according to the vlan state negotiation method of embodiments of the invention two;

Fig. 6 is a kind of structural representation according to the edge device of embodiments of the invention three;

Fig. 7 is the another kind of structural representation according to the edge device of embodiments of the invention three;

Fig. 8 is another structural representation according to the edge device of embodiments of the invention three;

Fig. 9 is a kind of structural representation according to the edge device of embodiments of the invention four;

Figure 10 is the another kind of structural representation according to the edge device of embodiments of the invention four.

Embodiment

The network loop problem that is caused for the vlan state machinery of consultation that solves prior art; Following examples of the present invention are improved prior art; The edge device of improving one's methods and can use this method that provides a kind of VLAN (also can be described as user vlan) state that can be applied in the EVI dual-home network to consult; Can avoid in negotiations process and consult to accomplish in the network of back loop occurring the broadcast storm in the minimizing EVI dual-home network.

In following examples of the present invention; For the vlan state of each ED equipment has increased by two intermediateness: Initial (initially) state and Exchange (exchange) state; That is, there are three states in VLAN: Initial state, Exchange state and end-state (end-state is Active state or Inactive state).Wherein, The Initial state is used to identify the initial condition (state when being the VLAN initialization) of VLAN; The Exchange state is used for identifying that ED equipment begins to consult and the state (being the state of VLAN in negotiations process) of negotiations process VLAN, and Inactive state and Active state are final result phase.Generally speaking; Have only the VLAN of Active state could guarantee the data flow intercommunication between public network side and the user side; The VLAN of Inactive state can abandon data message according to user's configuration requirement selectivity; Intermediateness Initial and Exchange then do not allow to carry out data message forwarding, under the demanding network environment of prevention loop, can preferentially select to abandon data message, that is to say; When the state of a VLAN on the edge device is in Initial state, Exchange state or Inactive state; This edge device does not allow to transmit the data message among this VLAN, and when only being in the Active state, this edge device just allows to transmit the data message among this VLAN.And after the edge device initialization, state of VLAN promptly gets into the Initial state on it.

Embodiment one

Fig. 2 is the transition diagram according to the vlan state of embodiments of the invention one, and each VLAN on the edge device carries out state transition between these three states of Initial state, Exchange state and end-state situation has been shown in Fig. 2.According to state transition diagram as shown in Figure 2; Vlan state machinery of consultation in the EVI dual-home network of the embodiment of the invention one is as shown in Figure 3, and this method can be carried out by any edge of table equipment (can be called first edge device) in the website in the EVI dual-home network.As shown in Figure 3, this machinery of consultation may further comprise the steps:

Step S302, when VLAN was in the Initial state, first edge device is to the neighbours of same EVI instance in the website: second edge device carried out authentication, if the authentication success then gets into step S304, otherwise, get into step S306;

Step S304, the state of the VLAN that first edge device is corresponding with this EVI instance switches to the Exchange state from the Initial state;

In step S302-S304, when the state of VLAN was in the Initial state, first edge device sent authentication message to second edge device; Equally; Second edge device also can send authentication message to first edge device; First edge device is after receiving the authentication message that second edge device sends; Will carry out authentication to second edge device, if the authentication success, then first edge device switches to the Exchange state with the state of VLAN from the Initial state.For example: can comprise in the authentication message: bridge MAC (the Media Access Control that is used for unique identification one edge of table equipment; Media interviews are controlled) and identity identification information; Identity identification information can comprise: user configured password and AES (like MD5), and so, concrete authentication process can receive after the authentication message that second edge device sends for: first edge device; The bridge MAC of second edge device that carries in this authentication message and the bridge MAC in the local list related of preserving are mated; If match a bridge MAC in this tabulation, the password to second edge device that carries in password that should bridge MAC and this authentication message in then will tabulating carries out computing according to the AES that carries in this authentication message, and the result that computing is obtained carries out validity checking; If inspection is passed through; Then authentication success, otherwise authentication is unsuccessful.Perhaps, identity identification information also can only comprise password, at this moment; The authentication process can receive after the authentication message that second edge device sends for: first edge device; The bridge MAC of second edge device that carries in this authentication message and the bridge MAC in the local list related of preserving are mated,, then the password that carries in this authentication message is carried out validity checking if match a bridge MAC in this tabulation; If inspection is passed through; Then authentication success, otherwise authentication is unsuccessful.Obviously, can adopt other concrete identification authentication mode, the present invention does not do qualification to this yet.

In a kind of application scenarios, possibly only be equipped with this ED equipment of first edge device when beginning in some websites, this first edge device inserts core net; Be responsible for transmitting mutual message between interior server of this website and PC (a large amount of servers and the PC that hang under the CE that promptly first edge device connects) and the core net, so, after first edge device powers on; VLAN in all instances promptly gets into the Initial state; Also can ceaselessly periodically send hello packet after the device power simultaneously, if behind the waiting-timeout of certain time interval T 1, do not detect any neighbours' exist (that is, not receiving hello packet within a certain period of time); Then VLAN switches to the Exchange state from the Initial state; Wherein, T1 can be set to 30 seconds, the transmission time interval of general hello packet normally 10 seconds; Therefore, the transmission time interval that can T1 be set to 3 times hello packet; Get into after the Exchange state,, then switch to the Active state from the Exchange state if behind the waiting-timeout of certain time interval T 2, still do not detect any neighbours; Wherein, T2 can be set to 6 seconds, when the transmission time interval of vlan state message (is considered the Network Packet Loss problem generally speaking; Generally can multiple several vlan state message) when being 3 seconds, can T2 be set to the transmission time interval of 2 times vlan state message).Afterwards; In order to prevent the Single Point of Faliure of equipment in the station network; In this website, increase an ED equipment (i.e. second edge device) again; Let this two edge of table equipment insert core net when (this moment, this two edge of table equipment dual homed belonged to this website) with dual-homed mode; At this moment, first edge device detects the neighbours that same EVI instance is arranged in the website: (first edge device has the neighbours of same EVI instance in detecting website: after second edge device, can periodically send authentication message to second edge device after the authentication message that second edge device (promptly receive second edge device and send hello packet) exists and receive second edge device to send; Equally; Second edge device has the neighbours of same EVI instance in detecting website: after first edge device, also can periodically send authentication message to first edge device, perhaps survey less than these neighbours until the authentication success); (concrete authentication process is the same according to this authentication message second edge device to be carried out authentication; Here repeat no more), if authentication success, then first edge device can enter into the Initial state from the Active state with VLAN and comes to carry out vlan state with second edge device and consult (detailed process sees step S302 ~ S314 or step S302 ' ~ S318 ' for details); If the authentication failure, then first edge device abandons this authentication message, can not carry out state and switch.

Also has a kind of possible application scenarios; Just be equipped with first edge device and these two ED equipment of second edge device when beginning in some websites, let this two edge of table equipment insert core net, at this moment with dual-homed mode; Two edge of table equipment power on simultaneously; Powering on, all VLAN promptly get into the Initial state among the both sides of back, and the back both sides that power on all ceaselessly periodically send hello packet, receive within a certain period of time can assert automatically behind the other side's the hello packet and detect neighbours and set up neighborhood; Promptly periodically send authentication message after detecting neighbours to these neighbours; In the authentication message that receives the other side and after carrying out the authentication success, be about to VLAN and switch to Exchange, detailed process sees step S302 ~ S314 or step S302 ' ~ S318 ' for details.

Each edge of table equipment is after powering on; Promptly periodically send hello packet always; And detecting after neighbours exist; Promptly periodically send authentication message,, perhaps overtimely can not receive the hello packet (thinking that promptly these neighbours have not existed) that these neighbours send until authentication success to these neighbours.Perhaps, each edge of table equipment also can periodically send authentication message to the opposite end neighbours after vlan state is moved to the Initial state, to carry out authentication and state negotiations process again.

Step S306, first edge device maintains the Initial state with the state of VLAN, returns step S302;

Step S308, after the state of VLAN entered into the Exchange state, first edge device was confirmed the end-state of the VLAN of oneself, announces the end-state of determined VLAN separately each other with second edge device then; Specifically can accomplish through following steps 1 ~ 3:

Step 1; When the state of VLAN is in the Exchange state; First edge device sends vlan state message to second edge device; Include in this vlan state message: EVI attribute information of oneself (the EVI attribute information can be provided with by the user according to actual needs) and the VLAN that will hold consultation; Wherein, the EVI attribute information can comprise: the priority of EVI instance (instance) identifier (being used for EVI instance of unique identification), EVI instance priority and the VLAN that will hold consultation; When reality is implemented, can send a vlan state message to a VLAN, at this moment, the VLAN that hold consultation is that VLAN that is directed against; If just in time there are a plurality of VLAN to enter into the Exchange state simultaneously, also can send a vlan state message to these a plurality of VLAN, at this moment, the VLAN that hold consultation is this a plurality of VLAN.

Equally; Second edge device also can be carried at the EVI attribute information of oneself and send to first edge device in the vlan state message with the VLAN that will consult; And; After receiving the vlan state message of first edge device; Just can confirm the end-state of the VLAN of second edge device, and can give first edge device through the vlan state message announcement the end-state of determined VLAN according to the EVI attribute information of first edge device and the EVI attribute information of second edge device;

Step 2; First edge device receives after the vlan state message that second edge device sends; The EVI attribute information of second edge device that carries in EVI attribute information and this vlan state message according to oneself; Confirm the end-state of the VLAN of oneself, and be saved in this locality, through vlan state message the end-state of own determined VLAN is announced to second edge device simultaneously;

Because the state negotiation is based on the EVI instance; And include a plurality of VLAN in an EVI instance; Therefore; When the end-state of the VLAN that confirms oneself, if the EVI instance priority of oneself is higher than the other side's EVI instance priority, the end-state of all VLAN that then comprise in this EVI instance is all confirmed as Active; If EVI instance priority is identical, then compare the priority of each VLAN respectively, that priority is high is Active, if VLAN priority is also identical, that then the bridge MAC Address of equipment is big is Active.

Obviously, can also include other information in the EVI attribute information, for example; Self-defining qos field etc.; This self-defining qos field for example can be the maximum bandwidth of edge device permission, at this moment, if the bridge MAC of edge device is also identical; That the maximum bandwidth that then allows is maximum is Active, and the present invention does not do qualification to this.To different EVI attribute informations, also can adopt different ways to confirm the end-state of VLAN, the present invention does not do qualification to this.

Step 3; First edge device receives the vlan state message of the end-state that carries the determined VLAN of second edge device that second edge device sends; And the end-state of the determined VLAN of second edge device is saved in this locality, get into step S310 then.

Step S310, whether first edge device is judged own identical with the end-state of the determined VLAN of second edge device, if different, then gets into step S312, otherwise, get into step S314;

First edge device receives in step S308 after the vlan state message of end-state of the VLAN that carries second edge device that second edge device sends; The end-state of the VLAN that the end-state of the VLAN that relatively oneself confirms and second edge device are confirmed; Both are inequality, that is, and and to same VLAN; What ED equipment was confirmed is the Active state, and what another ED equipment was confirmed is the Inactive state; Both are identical, that is, to same VLAN, what two ED equipment was all confirmed is the Active state, and what perhaps all confirm is the Inactive state.

Step S312, first edge device switches to own determined end-state with the state of VLAN from the Exchange state;

For example; The end-state of first edge device is confirmed in step S308 the VLAN of oneself is the Active state, then in step S312, the state of VLAN is switched to the Active state from the Exchange state; Perhaps; The end-state of first edge device is confirmed in step S308 the VLAN of oneself is the Inactive state, then in step S312, the state of VLAN is switched to the Inactive state from the Exchange state.

Step S314, first edge device switches to the Initial state with the state of VLAN from the Exchange state, and returns step S302.

In actual implementation process; Consider and have shake or delay in the network; By error VLAN is switched to end-state from the Exchange state for fear of edge device, the both sides of negotiation can also carry out the affirmation of vlan state again to the other side after the end-state that determines the VLAN that own and the other side confirms is different; After confirming successfully, just VLAN is switched to own determined end-state from the Exchange state.Like this, the another kind of execution mode of the vlan state machinery of consultation of the embodiment of the invention can be:

Step S302 ' ~ S308 ' with above-mentioned step S302 ~ S308, repeats no more here;

Step S310 ', whether first edge device is judged own identical with the end-state of the determined VLAN of second edge device, if different, then gets into step S312 ', otherwise, get into step S318 ';

First edge device receives in step S308 ' after the vlan state message of end-state of the VLAN that carries second edge device that second edge device sends; The end-state of the VLAN that the end-state of the VLAN that relatively oneself confirms and second edge device are confirmed; Both are inequality, that is, and and to same VLAN; What ED equipment was confirmed is the Active state, and what another ED equipment was confirmed is the Inactive state; Both are identical, that is, to same VLAN, what two ED equipment was all confirmed is the Active state, and what perhaps all confirm is the Inactive state.

Step S312 ', first edge device sends acknowledge message to second edge device, wherein, carries the end-state of own determined VLAN and the end-state of the determined VLAN of second edge device (in step S308 ', obtaining) in the acknowledge message;

Equally, second edge device also can send the affirmation message of the end-state that carries own and the VLAN that first edge device is confirmed to first edge device.

Step S314 '; After receiving the affirmation message that second edge device sends; Respectively whether the corresponding end-state with this locality preservation is consistent for first edge device that carries in the affirmation message that the judgement of first edge device receives and the end-state of the determined VLAN of second edge device, if all consistent, then gets into step S316 '; Otherwise (wherein any one inconsistent; That is, the end-state of the determined VLAN of first edge device that carries in the affirmation message that receives is inconsistent with local corresponding end-state of preserving, perhaps; The end-state of the determined VLAN of second edge device that carries in the affirmation message that receives is inconsistent with local corresponding end-state of preserving), get into step S318 ';

Whether the end-state that first edge device can be judged the VLAN that first edge device that carries in the affirmation message that receives is confirmed is consistent with the end-state of local oneself the definite VLAN that preserves; And whether the end-state of the VLAN that second edge device that carries in the affirmation message that judgement receives is confirmed is consistent with the end-state of the VLAN that local second edge device of preserving is confirmed.For example; The end-state of first edge device that carries in the affirmation message that receives and the determined VLAN of second edge device is respectively Active state and Inactive state; If the end-state of the VLAN that local own and second edge device of preserving of first edge device is confirmed also is respectively Active state and Inactive state; Then get into step S316 '; If the end-state of the VLAN that local own and second edge device of preserving of first edge device is confirmed is respectively Inactive state and Active state, then get into step S318 '.

Step S316 ', first edge device switches to own determined end-state with the state of VLAN from the Exchange state; With above-mentioned step S312, repeat no more here.

After getting into end-state, first edge device and second edge device can periodically send acknowledge message to announce the vlan state of oneself, until no longer being in end-state to the other side.

Step S318 ', first edge device switches to the Initial state with the state of VLAN from the Exchange state, and returns step S302 '.

In above-mentioned two execution modes; After step S312 or S316 ' end; So far a vlan state negotiations process is accomplished; The state of VLAN on first edge device and second edge device all is in end-state at this moment; If follow-up first edge device has received the neighbours of oneself: the authentication message that second edge device is sent (must also can receive the hello packet that second edge device is sent this moment) afterwards, will be carried out authentication to second edge device according to this authentication message, after the authentication success; Can the state of VLAN be switched to the Initial state from end-state; With hold consultation again (execution in step S302 ~ S314 or step S302 ' ~ S318 ' once more), wherein, this authentication message be second edge device in following information one of at least: EVI attribute information, identity identification information, bridge MAC send at the back that changes.That is to say; Second edge device is after oneself EVI attribute information, identity identification information and/or bridge MAC have taken place to change; Can be once more to own neighbours: first edge device transmission authentication message, like this, at this moment; The VLAN of first edge device is if be in end-state (Active or Inactive); Then can receive the hello packet that second edge device is sent, promptly there be (because the periodicity that can always not stop of edge device is sent hello packet) in neighborhood, and receives after the authentication message and authentication success that second edge device sends; Switch to the Initial state from end-state, carry out authentication and state again and consult.

Perhaps; Second edge device detects the neighbours that same EVI instance is arranged in the website for the first time after getting into website: also can be to the authentication message of first edge device transmission when first edge device exists; At this moment; First edge device is just receiving hello packet (because edge device promptly ceaselessly periodically sends hello packet after powering on) and the authentication message that second edge device is sent if be in end-state (Active or Inactive), and second edge device is carried out after the authentication successfully; Switch to the Initial state from end-state, carry out authentication and state again and consult.Can prevent to attack through authentication.

Equally; When the state of VLAN is in end-state; In the following information of first edge device one of at least: after EVI attribute information, identity identification information, bridge MAC change; First edge device also can send authentication message (must also can send hello packet this moment) to second edge device, afterwards, will the state of VLAN be switched to initial condition from end-state.

In addition, after S316 ' finished, this moment, both sides' VLAN all was in end-state; If first edge device or second edge device are among either party; Change has taken place in the EVI attribute information, and bridge MAC relevant with identity and identity identification information be not when changing, at this moment; Also can take not return the mode that Initial carries out authentication again, directly be updated to the end-state of confirming again from current end-state.Because bridge MAC and the identity identification information relevant with identity do not change, so both sides need not to have carried out authentication again, and only needs again the end-state of definite VLAN get final product.Detailed process can be following:

When change had taken place the EVI attribute information of (1) first edge device, step was following:

Step 11; When the state of VLAN is in end-state; After the EVI of first edge device attribute information changes; EVI attribute information after first edge device will change is carried at and sends to second edge device in the vlan state message, so that the EVI attribute information of second edge device after changing according to first edge device that carries in the EVI attribute information of second edge device and this vlan state message, confirms the end-state of the VLAN of second edge device again;

For the message resource that practices every conceivable frugality; Also can only the field that changes be carried in the acknowledge message; For example, have only the EVI instance priority in the EVI attribute information that change has taken place, the EVI instance priority after then only will changing is carried in the vlan state message and gets final product.

Second edge device can be given first edge device through the vlan state message announcement with the end-state of the VLAN that confirms again.

Step 12; The EVI attribute information after first edge device changes according to oneself and the EVI attribute information (in step S308 ', obtaining) of second edge device; Again confirm the end-state of own VLAN and upgrade the end-state (promptly upgrading the end-state of the VLAN of local first edge device of preserving) of local correspondence of preserving, simultaneously through the vlan state message announcement to second edge device;

Step 13; In the end-state (being carried in the vlan state message) that receives the VLAN that second edge device confirms again afterwards; First edge device upgrades the end-state (promptly upgrading the end-state of the VLAN of second edge device of preserving this locality) of local correspondence of preserving with the end-state of second edge device definite VLAN again; And after the end-state that determines the VLAN that own and second edge device confirm again is different, to second edge device transmission acknowledge message; If own end-state with second edge device definite VLAN again is identical,, the state of VLAN is switched to initial condition from end-state then according to state transition diagram as shown in Figure 2;

Obviously, carried first edge device and second edge device end-state of definite VLAN again in this acknowledge message.

Step 14; After receiving the affirmation message that second edge device sends; If it is consistent with the corresponding end-state that preserve this locality respectively that first edge device determines the end-state of the VLAN that first edge device that carries in the affirmation message of reception and second edge device confirm again, then first edge device is updated to definite again end-state with the end-state of the VLAN of oneself.Obviously, if inconsistent, then VLAN is switched to initial condition from end-state.

For example, the VLAN end-state before first edge device upgrades is Active, and the end-state of the VLAN that confirms again is Inactive, and then direct end-state with VLAN is updated to Inactive from Active, and need not to return the Initial state.

When change had taken place the EVI attribute information of (2) second edge devices, step was following:

Step 21, when the state of VLAN was in end-state, first edge device receives that second edge device sends after the EVI attribute information changes carried the vlan state message of the EVI attribute information after the change;

Step 22; First edge device is according to EVI attribute information of oneself and the EVI attribute information after the change of second edge device; Again confirm the VLAN end-state of oneself and the end-state of the local correspondence of preserving of renewal, second edge device (can the end-state of definite again VLAN be carried in the vlan state message) is given in announcement simultaneously;

Step 23; In the end-state (being carried in the vlan state message) that receives the VLAN that second edge device confirms again afterwards; First edge device upgrades the end-state of local correspondence of preserving with the end-state of second edge device definite VLAN again; And after the end-state that determines the VLAN that own and second edge device confirm again is different, to second edge device transmission acknowledge message; If it is identical to determine own end-state with second edge device definite VLAN again, then the state with VLAN switches to initial condition from end-state;

Step 24; After receiving the affirmation message that second edge device sends; If it is consistent with the corresponding end-state that preserve this locality respectively that first edge device determines the end-state of the VLAN that first edge device that carries in the affirmation message of reception and second edge device confirm, then first edge device is updated to definite again end-state with the end-state of the VLAN of oneself.Obviously, if inconsistent, then the state with VLAN switches to initial condition from end-state.

Wherein, the execution in step of second edge device repeats no more with first edge device in (1) here.

Like this, consult both sides and can directly in end-state, carry out the state renewal, carry out authentication and state negotiations process again, can guarantee that the data flow in the network is not interrupted and need not to return the Initial state.

In actual implementation process; In two execution modes of above-mentioned steps S302 ~ S314 and step S302 ' ~ S318 '; The negotiation of the state of VLAN can be based on that instance carries out, and each instance includes a plurality of VLAN, that is to say; During negotiation, can consult a plurality of VLAN in the instance simultaneously.But above-mentioned state transitions is to a VLAN on edge device, and each VLAN on edge device carries out state according to state transition diagram shown in Figure 2 independently of each other and switches.The end-state of an above-mentioned determined VLAN of edge device refers to; The determined VLAN of this edge device is in the end-state of local terminal; For example, for VLAN1, the end-state of the determined VLAN of first edge device is: the end-state of VLAN1 on first edge device.

In the above embodiment of the present invention; Get into initial condition during the edge device both sides VLAN initialization consulted, the other side is carried out the authentication success after, VLAN is switched to swap status from initial condition; When VLAN is in swap status; The other side is given in the end-state of the VLAN that can will confirm separately (activation or unactivated state) announcement, in the end-state of confirming own and the VLAN that the other side confirms not simultaneously, just can VLAN be switched to own determined end-state from swap status.Since a VLAN on the edge device in initial condition or swap status the time this edge device all do not allow to transmit the message among this VLAN; Therefore, when consulting beginning and in the negotiations process, all can not there be loop in the network; And; Edge device just can switch to own determined end-state from swap status with VLAN, thereby can guarantee that same VLAN is to be in different possible final states in the EVI dual-home network on two edge of table equipment in the end-state of confirming own and the VLAN that the other side confirms not simultaneously; Can on an edge of table equipment, be the Active state only promptly; And on another edge of table equipment, be the Inactive state, can not occur on the two edge of table equipment all is that the Active state all is the situation of Inactive state perhaps, has further eliminated the possibility that loop exists.The embodiment of the invention has been optimized the vlan state negotiation mechanism of EVI dual-home network, has fundamentally eliminated the network loop that negotiation causes, and has safeguarded the stability of dual-home network.

In addition; After consulting mutual each other oneself the EVI attribute information of both sides; The end-state of confirming the VLAN of oneself separately is activation or unactivated state; The end-state of the VLAN that need oneself be confirmed then announced to the other side, and whether the end-state of judging own definite VLAN separately and the other side confirm identical, not simultaneously; Ability switches to the end-state of oneself confirming with the state of the VLAN of oneself from swap status, does the status error that can avoid under the unsettled situation of link like this and switches.

For example, under the unsettled situation of Link State, the EVI attribute information of the opposite end that might receive is not up-to-date; Such as, two EVI attribute informations have been sent out in the opposite end, and the VLAN priority in first is 10; And the VLAN priority in second is 20, and the priority that local terminal ED goes up this VLAN is that 15, the second information are only up-to-date; But because shake has taken place in link; Second information arrives first, and arrives after first information, and this moment is if consult the end-state that both sides do not announce the VLAN that confirms separately; The EVI attribute information of receiving the opposite end has confirmed just directly to switch after oneself the end-state of VLAN the words of local vlan state; Local terminal equipment finally can also carry out state switching (go out correct state according to second information calculations and should be non-activation) for activation according to the state that first information errors ground calculates own VLAN by error, and the opposite end goes out according to second information calculations, and the state of oneself is a state of activation also, and both sides are state of activation; So the state handoff error has taken place, has caused the generation of loop.And the end-state of the VLAN that oneself confirms is announced to the other side; The end-state of judging the own VLAN that confirms separately and the other side confirm inequality the time, ability switches to oneself definite end-state with the state of the VLAN of oneself from swap status, like this; No matter whether link flapping is arranged; As long as find opposite end and oneself definite coming to the same thing, just consult again, produce thereby do not have loop.

In addition, acknowledge message also can be used for vlan state and consult to finish state-maintenance afterwards, and in time whether perception opposite end current state is correct, anti-in real time loops.

In practical application, for intermediateness Initial and Exchange, can confirm the operation that edge device will be carried out when VLAN was in these two intermediatenesses as required, the message under can these two intermediatenesses is transmitted and is set to abandon, in case loops.

Embodiment two

As shown in Figure 5, present embodiment is an example with two edge of table equipment ED_A in some websites in the EVI dual-home network and ED_B, describes the vlan state negotiations process between interior two the ED equipment of website, is that example describes with equipment ED_A.

When beginning to hold consultation; VLAN on two equipment of ED_A and ED_B can enter into the Initial state; Even when two equipment have had one of them or two equipment all to enter into Active state or Inactive state (when two equipment all were end-state, this situation belonged to user's configuration error) before.

In for example a kind of application scenarios; Only be equipped with this ED equipment of ED_A when beginning in some websites, ED_A inserts core net, is responsible for transmitting mutual message between interior server of this website and PC (a large amount of servers and the PC that hang under the CE that promptly first edge device connects) and the core net; So; After ED_A powered on, the VLAN in all instances promptly got into the Initial state, also can ceaselessly periodically send hello packet after the device power simultaneously; If behind the waiting-timeout of certain time interval T 1, do not detect any neighbours' existence, then VLAN switches to the Exchange state from the Initial state; Get into after the Exchange state,, then switch to the Active state from the Exchange state if behind the waiting-timeout of certain time interval T 2, still do not detect any neighbours.Afterwards; In order to prevent the Single Point of Faliure of equipment in the station network, in this website, increased ED equipment a: ED_B again, let this two edge of table equipment insert core net when (this moment, this two edge of table equipment dual homed belonged to this website) with dual-homed mode; At this moment; ED_A and ED_B can detect existence each other separately, set up neighborhood, and periodically send authentication message to the other side.ED_A detect neighbours have (promptly receiving hello packet) and receive authentication message that this neighbours send and according to this authentication message to this neighbours' authentication success after, will enter into the Initial state from the Active state.

Step 1, after ED_A got into the Initial state, the neighbours of same EVI instance: ED_B sent authentication message in the website that monitors, and wherein, carries bridge MAC and the identity identification information of ED_A in the authentication message;

Equally, after ED_B got into the Initial state, also the neighbours of same EVI instance: ED_A sent authentication message in the website that monitors, and wherein, carries bridge MAC and the identity identification information of ED_B in the authentication message;

Step 2, ED_A receives after the authentication message that ED_B sends, according to bridge MAC and the identity identification information of the ED_B that wherein carries; ED_B is carried out authentication; After the authentication success, be about to VLAN and switch to the Exchange state, if the authentication failure from the Initial state; Then remain on the Initial state, consult to carry out authentication and state again;

Equally, ED_B also can carry out identical operations, repeats no more here.

Step 3; After VLAN gets into the Exchange state; ED_A sends vlan state message to ED_B; Wherein carry the EVI attribute information of oneself, the EVI attribute information can comprise: the VLAN priority of each VLAN that comprises in EVI Provisioning Instance Identifier, EVI instance priority, the EVI instance etc. can customize according to user's needs;

Equally, ED_B also can do same operation, repeats no more here.

Step 4; ED_A receives after the vlan state message that ED_B sends; According to EVI attribute information that carries in this vlan state message and the EVI attribute information of oneself; The end-state of confirming the VLAN of oneself is Active state or Inactive state, is assumed to be the Active state, and the VLAN end-state of oneself confirming is sent to ED_B through vlan state message;

Equally, equipment ED_B also can do same operation, and the VLAN end-state of oneself confirming is sent to ED_A through vlan state message, is assumed to be the Inactive state, repeats no more here.

Step 5; ED_A receives the VLAN end-state that ED_B sends over: behind the Inactive state; With local own definite VLAN end-state: the Active state compares; Find that this locality is an Active state and ED_B is the Inactive state, that is, the end-state of the VLAN that local own that confirm and ED_B are definite is different; Think that then the authentication of VLAN end-state is legal, the VLAN end-state that VLAN end-state that oneself is definite and ED_B confirm is encapsulated in the message (being called acknowledge message) and sends to ED_B; And if the VLAN end-state that the ED_B that receives confirms is identical with the local VLAN end-state of oneself confirming, then failure is consulted in explanation, VLAN is directly turned back to the Initial state from Exchange carry out authentication again;

Equally, ED_B also can be with comparing the own VLAN end-state of confirming with ED_A, and not simultaneously, ED_A is encapsulated in own definite VLAN end-state sends to ED_A in the acknowledge message, repeats no more here.

Step 6, after ED_A received the affirmation message of ED_B, the VLAN end-state of preserving with this locality compared; If it is consistent; Then VLAN is switched to the end-state of oneself confirming: Active from Exchange,, then directly turn back to the Initial state and carry out authentication again if inconsistent.

Equally, ED_B also can carry out identical operations, repeats no more here.

Embodiment three

To the method among the above embodiments one and two, the embodiment of the invention provides a kind of edge device, can use the foregoing description one and two method to carry out the negotiation of vlan state, and this edge device can be applied in the EVI dual-home network.

As shown in Figure 6, this edge device comprises: authentication module 10, vlan state handover module 20, confirm announcement module 30 and judge module 40, wherein:

Authentication module 10 is used for being that neighbours' second edge device of same EVI instance carries out authentication with this edge device in the website at this edge device place;

Vlan state handover module 20; Be used for after 10 pairs second edge devices of authentication module carry out the authentication success; The state of the VLAN that this EVI instance of this edge device is corresponding switches to swap status from initial condition; And the end-state that determines this edge device and the determined VLAN of second edge device at judge module 40 switches to the determined end-state of this edge device with the state of VLAN from swap status not simultaneously; Determine the end-state of this edge device and the determined VLAN of second edge device when identical at judge module 40, the state of VLAN is switched to initial condition from swap status; Wherein, when the state of VLAN was in initial condition or swap status on the edge device, this edge device did not allow to transmit the message among the corresponding VLAN of this EVI instance, and after the edge device initialization, the state of the VLAN that this EVI instance is corresponding on it gets into initial condition; When the end-state of the determined VLAN of this edge device is state of activation; This edge device allows to transmit the message among this VLAN; When the end-state of the determined VLAN of this edge device was unactivated state, this edge device did not allow to transmit the message among this VLAN;

Confirm announcement module 30, be used for vlan state handover module 20 with the state of VLAN after initial condition switches to swap status, announce the end-state of determined VLAN separately each other with second edge device;

Judge module 40 is used to judge whether this edge device is identical with the end-state of the determined VLAN of second edge device.

Consider and have shake or delay in the network; By error VLAN is switched to end-state from the Exchange state for fear of edge device; The both sides that consult are after the end-state that determines the VLAN that own and the other side confirms is different; Can also carry out the affirmation of vlan state again to the other side, confirm successfully after, just VLAN is switched to own determined end-state from the Exchange state.Therefore, as shown in Figure 7, can also comprise in the edge device: confirm module 50, wherein:

Confirm module 50 be used for judge module 40 determine the end-state of this edge device and the determined VLAN of second edge device different after; And vlan state handover module 20 switches to the determined end-state of this edge device with the state of VLAN from swap status before; Send acknowledge message to second edge device; And receive the affirmation message that second edge device is sent; Wherein, carry the end-state of this edge device and the determined VLAN of second edge device in the acknowledge message;

Judge module 40 also be used for judging confirm this edge device that affirmation message that module 50 receives is carried and the determined VLAN of second edge device end-state whether respectively with this edge device in the corresponding end-state of preserving consistent; And when unanimity, notice vlan state handover module 20 switches to the determined end-state of this edge device with the state of VLAN from swap status.

When the corresponding end-state that vlan state handover module 20 also is used in judge module 40 determines the end-state of confirming this edge device that affirmation message that module 50 receives is carried or the determined VLAN of second edge device and this edge device, preserving is inconsistent, the state of VLAN is switched to initial condition from swap status; Determine the end-state of this edge device and the determined VLAN of second edge device when identical at judge module 40, the state of VLAN is switched to initial condition from swap status; And, after 10 pairs second edge devices of authentication module carry out authentication failure, the state of VLAN is maintained initial condition.

As shown in Figure 8, authentication module 10 may further include: first transceiver module 102 and authentication Executive Module 104, then:

First transceiver module 102 sends authentication message to second edge device when the state of VLAN is in initial condition, and, receive the authentication message that second edge device is sent;

Authentication Executive Module 104 is after first transceiver module 102 receives the authentication message that second edge device sends; Second edge device is carried out authentication; And after the authentication success, notice vlan state handover module 20 switches to swap status with the state of VLAN from initial condition.

As shown in Figure 8, confirm that announcement module 30 also may further include: second transceiver module 302, state determination module 304 and preserve module 306, then:

Second transceiver module 302; Be used for when the state of VLAN is in swap status; Send the vlan state message of the EVI attribute information that carries this edge device to second edge device; So that second edge device is confirmed the end-state of the VLAN of second edge device according to the EVI attribute information of this edge device and second edge device; Receive the vlan state message of the EVI attribute information that carries second edge device that second edge device sends; The end-state of the VLAN of 304 determined edge devices of state determination module is announced to second edge device (can be carried in the vlan state message), and, the end-state (can be carried in the vlan state message) of the determined VLAN of second edge device that second edge device sends received; Wherein, the EVI attribute information can comprise: the priority of EVI Provisioning Instance Identifier, EVI instance priority and the VLAN that will hold consultation;

State determination module 304 is used for the EVI attribute information according to this edge device and second edge device, confirms the end-state of the VLAN of this edge device;

Preserve module 306, be used for the end-state of the VLAN of 304 determined edge devices of preservation state determination module, and the end-state of the determined VLAN of second edge device that receives of second transceiver module 302.

Wherein, the EVI attribute information can comprise: the priority of EVI Provisioning Instance Identifier, EVI instance priority and the VLAN that will hold consultation; Then, the state determination module comprises: first comparing unit is used for the EVI instance priority of this edge device of comparison and the EVI instance priority of second edge device; Confirm the unit; Be used for comparing under the EVI instance priority condition of different of this edge device and second edge device at first comparing unit; When the EVI of this edge device instance priority is higher than second edge device; The end-state of the VLAN that will hold consultation that confirms to comprise in the EVI instance of this edge device is a state of activation, and when being lower than, and the end-state of the VLAN that will hold consultation that confirms to comprise in the EVI instance of this edge device is a unactivated state; Compare at second comparing unit under the priority condition of different of this VLAN on this edge device and second edge device; When the priority of this VLAN of this edge device is higher than second edge device; The state of confirming this VLAN of this edge device is a state of activation; And when being lower than, the state of confirming this VLAN of this edge device is a unactivated state; Under the situation that the priority VLAN priority of this VLAN is identical on this edge device and second edge device; In the address of the bridge MAC of this edge device during greater than second edge device; The state of confirming this VLAN of this edge device is a state of activation; And less than the time, the state of confirming this VLAN of this edge device is a unactivated state; Second comparing unit; Be used for comparing under this edge device situation identical with the EVI instance priority of second edge device at first comparing unit; To each VLAN that will hold consultation, compare the priority of this VLAN on this edge device and second edge device.

Embodiment four

As shown in Figure 9, can also comprise in this edge device: message sink module 60, then:

Message sink module 60 is used to receive hello packet and the authentication message that second edge device is sent, and notice authentication module 10 (being specially authentication Executive Module 104) is carried out authentication to second edge device;

Vlan state handover module 20 also is used for when the state of VLAN is in end-state; Receive hello packet and the authentication message that second edge device is sent in message sink module 60; And 10 pairs second edge devices of authentication module carry out after the authentication success; The state of VLAN is switched to initial condition from this end-state; Wherein, to be second edge device send when initial probe has with own this edge device for same EVI instance in the website at oneself place authentication message, or the transmission when following information changes one of at least of second edge device: EVI attribute information, identity identification information, bridge MAC.

Second edge device detects the neighbours that same EVI instance is arranged in the website at the initial website that gets into: after this edge device, can periodically send authentication message to this edge device, until the authentication success or survey less than till this edge device.This edge device is if be in end-state (activating or unactivated state) this moment; Will be in hello packet that receives second edge device (because edge device will periodically send hello packet after powering on) and authentication message always; And second edge device is carried out after the authentication success according to this authentication message; Switch to initial condition from end-state, to carry out authentication and vlan state negotiation with second edge device.

Perhaps; After this edge device and second edge device are consulted to accomplish; Both sides' VLAN is in end-state; This moment is if change has taken place in EVI attribute information, identity identification information and/or the bridge MAC of second edge device; Second edge device can be once more sends authentication message to this edge device, and this edge device is in hello packet that receives second edge device (the proof neighborhood exists) and authentication message, and according to this authentication message second edge device is carried out after the authentication success; Will the state of VLAN be switched to initial condition from end-state, to carry out authentication and state negotiation with second edge device again.

In addition, shown in figure 10, this edge device can also comprise: message transmission module 70, then:

Message transmission module 70 is used for when the state of VLAN is in end-state, in the following information of this edge device one of at least: after EVI attribute information, identity identification information, bridge MAC change, send authentication message to second edge device;

Vlan state handover module 20 also is used in message transmission module 70 after second edge device sends authentication message, and the state of VLAN is switched to initial condition from this end-state.

This edge device is after oneself EVI attribute information, identity identification information and/or bridge MAC change; Also need send authentication message to second edge device; After authentication message is sent; The state that is about to VLAN switches to initial condition from end-state, to carry out authentication and state negotiation with second edge device again.

Obviously, in actual implementation process, also can include message sink module and message transmission module simultaneously in this edge device.

In addition, after this edge device and second edge device were once consulted to finish, both sides' VLAN all was in end-state; If this edge device or second edge device are among either party; Have only the EVI attribute information that change has taken place, and bridge MAC relevant with identity and identity identification information be not when changing, at this moment; Also can take not return the mode that the Initial state carries out authentication again, directly be updated to the end-state of confirming again from current end-state.Because bridge MAC and the identity identification information relevant with identity do not change, so both sides need not to have carried out authentication again, and only needs again the end-state of definite VLAN get final product.Detailed process can be following:

When (1) change had taken place the EVI attribute information of this edge device, step was following:

Step 11; The vlan state handover module with the state of VLAN after swap status switches to end-state; Confirm that module is when the EVI of this edge device attribute information changes; EVI attribute information after changing is carried at sends to second edge device in the vlan state message; So that the EVI attribute information after second edge device changes according to this edge device that carries in the EVI attribute information of second edge device and this vlan state message, confirm the end-state of the VLAN of second edge device again;

Step 12; Confirm EVI attribute information and the EVI attribute information of second edge device after announcement module changes according to this edge device; Again confirm the end-state of the VLAN of this edge device, through vlan state message the end-state of own determined VLAN is announced to second edge device simultaneously;

Step 13; The vlan state message of the end-state that carries the VLAN that second edge device confirms again of confirming that announcement module receives that second edge device sends; And the notice judge module judges whether the end-state of the VLAN that this edge device and second edge device are confirmed again is identical; The end-state of the correspondence of wherein, preserving in this edge device is updated to respectively: the end-state of the VLAN that this edge device is confirmed again and second edge device that the receives end-state of definite VLAN again;

Step 14; Judge module judges whether the end-state of the VLAN that this edge device and second edge device are confirmed again is identical; If it is different; Confirm that then module to second edge device transmission acknowledge message, wherein carries this edge device and second edge device end-state of definite VLAN again;

Step 15; After confirming that module receives the affirmation message that second edge device sends; The end-state of the VLAN that this edge device that judge module judge to be confirmed to carry in the affirmation message that module receives and second edge device are confirmed again whether respectively with this edge device in the corresponding end-state of preserving consistent; If consistent, then the vlan state handover module is updated to the end-state that this edge device is confirmed again with the end-state of VLAN.

Step 21, the vlan state message that carries the EVI attribute information after the change of confirming that module receives that second edge device sends after the EVI attribute information changes;

Step 22 is confirmed announcement module according to EVI attribute information of this edge device and the EVI attribute information after the change of second edge device, and the VLAN end-state of definite this edge device is given second edge device through the vlan state message announcement simultaneously again;

Step 23; The vlan state message of the end-state that carries the VLAN that second edge device confirms again of confirming that announcement module receives that second edge device sends; And the notice judge module judges whether the end-state of the VLAN that this edge device and second edge device are confirmed again is identical; The end-state of the correspondence of wherein, preserving in this edge device is updated to respectively: the end-state of the VLAN that this edge device is confirmed again and second edge device that the receives end-state of definite VLAN again;

Step 24; Judge module judges whether the end-state of the VLAN that this edge device and second edge device are confirmed again is identical; If it is different; Confirm that then module to second edge device transmission acknowledge message, wherein carries this edge device and second edge device end-state of definite VLAN again;

Step 25; After confirming that module receives the affirmation message that second edge device sends; The end-state of the VLAN that this edge device that judge module judge to be confirmed to carry in the affirmation message that module receives and second edge device are confirmed whether respectively with this edge device in the corresponding end-state of preserving consistent; If consistent, then the vlan state handover module is updated to the end-state of confirming again with the end-state of VLAN.

To sum up, the above embodiment of the present invention can reach following technique effect:

Get into initial condition during the edge device both sides VLAN initialization consulted; After the other side carried out authentication success; VLAN is switched to swap status from initial condition, when VLAN is in swap status, can give the other side end-state (activating or the unactivated state) announcement of the VLAN that confirms separately; In the end-state of confirming own and the VLAN that the other side confirms not simultaneously, just can VLAN not switched to own determined end-state from swap status.Since a VLAN on the edge device in initial condition or swap status the time this edge device all do not allow to transmit the message among this VLAN, therefore, when consulting beginning and in the negotiations process; All can not there be loop in the network; And edge device just can switch to own determined end-state from swap status with VLAN in the end-state of confirming own and the VLAN that the other side confirms not simultaneously; Thereby can guarantee that same VLAN is to be in different possible final states in the EVI dual-home network on two edge of table equipment; Can on an edge of table equipment, be the Active state only promptly, and on another edge of table equipment, be the Inactive state that can not occur on the two edge of table equipment all is that the Active state all is the situation of Inactive state perhaps; Further eliminated the possibility that loop exists; Thereby through optimizing the vlan state negotiation mechanism of EVI dual-home network, fundamentally eliminated the network loop that negotiation causes, safeguarded the stability of dual-home network.

The above is merely preferred embodiment of the present invention, and is in order to restriction the present invention, not all within spirit of the present invention and principle, any modification of being made, is equal to replacement, improvement etc., all should be included within the scope that the present invention protects.

Claims

1. the machinery of consultation of a virtual LAN VLAN state is applied to Ethernet and connects virtual EVI network, it is characterized in that said method comprises:

First edge device carries out authentication to neighbours' second edge device of same EVI instance in the website, and after the authentication success, the state of the VLAN that this EVI instance is corresponding switches to swap status from initial condition; Wherein, When the state of VLAN is in initial condition or swap status on the edge device; This edge device does not allow to transmit the message among the corresponding VLAN of this EVI instance, and after the edge device initialization, the state of the VLAN that this EVI instance is corresponding on it gets into said initial condition;

Said first edge device and second edge device are announced the end-state of determined VLAN separately each other; And whether said first edge device is judged own identical with the end-state of the determined VLAN of said second edge device;

If said first edge device determines own different with the end-state of the determined VLAN of said second edge device, then said first edge device switches to own determined end-state with the state of VLAN from swap status; Wherein, when this end-state was state of activation, said first edge device allowed to transmit the message among this VLAN, and when this end-state was unactivated state, said first edge device did not allow to transmit the message among this VLAN;

If said first edge device determines own identical with the end-state of the determined VLAN of said second edge device, then said first edge device switches to said initial condition with the state of VLAN from said swap status.

2. method according to claim 1; It is characterized in that; Said first edge device determine own end-state with the determined VLAN of said second edge device different after; And said first edge device switches to the state of VLAN own determined end-state from swap status before, also comprise:

Said first edge device sends acknowledge message to said second edge device, wherein, carries end-state own and the determined VLAN of said second edge device in the said acknowledge message;

After receiving the affirmation message that said second edge device sends, the end-state that said first edge device determines said first edge device that carries in the affirmation message of reception and the determined VLAN of said second edge device is consistent with the corresponding end-state that preserve this locality respectively.

3. method according to claim 2 is characterized in that, said receive the affirmation message that said second edge device sends after, also comprise:

If it is inconsistent with the corresponding end-state of local preservation to determine the end-state of said first edge device that carries in the affirmation message of reception or the determined VLAN of said second edge device, then said first edge device switches to said initial condition with the state of VLAN from said swap status.

4. according to each described method in the claim 1 to 3, it is characterized in that if said first edge device carries out the authentication failure to said second edge device, then said first edge device maintains said initial condition with the state of VLAN.

5. according to each described method in the claim 1 to 3, it is characterized in that said first edge device and second edge device announce each other separately that the end-state of determined VLAN comprises:

When the state of VLAN is in said swap status; Said first edge device sends the vlan state message that the Ethernet that carries oneself connects virtual EVI attribute information to said second edge device, so that said second edge device is confirmed the end-state of the VLAN of said second edge device according to the EVI attribute information of said first edge device and said second edge device;

Said first edge device receives after the vlan state message of the EVI attribute information that carries said second edge device that said second edge device sends; According to EVI attribute information own and said second edge device; Confirm the end-state of the VLAN of oneself, and be saved in this locality;

Said first edge device announces determined oneself the end-state of VLAN to said second edge device;

Said first edge device receives the end-state of the determined VLAN of said second edge device, and is saved in this locality.

6. method according to claim 5 is characterized in that, said EVI attribute information comprises: the priority of EVI Provisioning Instance Identifier, EVI instance priority and the VLAN that will hold consultation; Said first edge device confirms that according to EVI attribute information own and said second edge device the end-state of the VLAN of oneself comprises:

Said first edge device is the EVI instance priority of oneself and the EVI instance priority of said second edge device relatively;

If said first edge device is different with the EVI instance priority of said second edge device; When then said first edge device is higher than said second edge device in oneself EVI instance priority; The end-state of the VLAN that will hold consultation that confirms to comprise in the EVI instance of oneself is a state of activation; And when being lower than, the end-state of the VLAN that will hold consultation that confirms to comprise in the EVI instance of oneself is a unactivated state;

If said first edge device is identical with the EVI instance priority of said second edge device,, compare the priority of this VLAN on own and said second edge device then to each VLAN that will hold consultation;

If the priority of this VLAN is different on own and said second edge device; When then said first edge device is higher than said second edge device in the priority of this VLAN of oneself; The state of confirming this VLAN of oneself is a state of activation; And when being lower than, confirm that the state of this VLAN of oneself is a unactivated state;

If the priority VLAN priority of this VLAN is identical on own and said second edge device; Then said first edge device is in the address of the bridge MAC of oneself during greater than said second edge device; The state of confirming this VLAN of oneself is a state of activation; And less than the time, confirm that the state of this VLAN of oneself is a unactivated state.

7. according to each described method in the claim 1 to 3, it is characterized in that, also comprise:

When the state of VLAN is in end-state; Said first edge device is receiving after neighbours that said second edge device sends find hello packet and authentication message; Said second edge device is carried out authentication; Wherein, This authentication message is that said second edge device sends when initial probe has said first edge device of neighbours of same EVI instance to exist in website, or the VLAN of said second edge device is when being in end-state, in the following information of said second edge device one of at least: send after EVI attribute information, identity identification information, bridge MAC change;

After the authentication success, said first edge device switches to initial condition with the state of VLAN from this end-state.

8. according to each described method in the claim 1 to 3, it is characterized in that, also comprise:

When the state of VLAN is in end-state; In the following information of said first edge device one of at least: after EVI attribute information, identity identification information, bridge MAC change; Said first edge device sends authentication message to said second edge device, and the state with VLAN switches to initial condition from this end-state afterwards.

9. method according to claim 2 is characterized in that, said first edge device switches to the state of VLAN own determined end-state from swap status after, also comprises:

When the state of VLAN is in end-state; After the EVI of said first edge device attribute information changes; EVI attribute information after said first edge device will change is carried at and sends to said second edge device in the vlan state message; So that said second edge device according to the EVI attribute information of said second edge device and the EVI attribute information after the change of said first edge device, is confirmed the end-state of the VLAN of said second edge device again;

The EVI attribute information after said first edge device changes according to oneself and the EVI attribute information of said second edge device are confirmed the end-state of the VLAN of oneself again, and are announced and give said second edge device;

After the end-state that receives the VLAN that said second edge device confirms again; Said first edge device; And determine own end-state with said second edge device definite VLAN again different after; Send acknowledge message to said second edge device, wherein, the end-state of local correspondence of preserving is updated to respectively: the end-state of the VLAN that the end-state of the VLAN that said first edge device is confirmed again and said second edge device that receives are confirmed again;

After receiving the affirmation message that said second edge device sends; If it is consistent with the corresponding end-state that preserve this locality respectively that said first edge device determines the end-state of the VLAN that said first edge device that carries in the affirmation message of reception and said second edge device confirm, then said first edge device is updated to definite again end-state with the end-state of the VLAN of oneself.

10. an edge device is characterized in that, is applied to Ethernet and connects virtual EVI network, and said edge device comprises:

Authentication module is used for being that neighbours' second edge device of same EVI instance carries out authentication with this edge device in the website at this edge device place;

The vlan state handover module; Be used for said authentication module is carried out the authentication success to said second edge device after; The state of the VLAN that this EVI instance of this edge device is corresponding switches to swap status from initial condition; And; The end-state that determines this edge device and the determined VLAN of said second edge device at judge module is not simultaneously; The state of VLAN is switched to the determined end-state of this edge device from said swap status, determine the end-state of this edge device and the determined VLAN of said second edge device when identical, the state of VLAN is switched to said initial condition from said swap status at said judge module; Wherein, When the state of VLAN is in initial condition or swap status on the edge device; This edge device does not allow to transmit the message among the corresponding VLAN of this EVI instance, and after the edge device initialization, the state of the VLAN that this EVI instance is corresponding on it gets into said initial condition; When the end-state of the determined VLAN of this edge device is state of activation; This edge device allows to transmit the message among this VLAN; When the end-state of the determined VLAN of this edge device was unactivated state, this edge device did not allow to transmit the message among this VLAN;

Said definite announcement module, be used for said vlan state handover module with the state of VLAN after initial condition switches to swap status, announce the end-state of determined VLAN separately each other with said second edge device;

Said judge module is used to judge whether this edge device is identical with the end-state of the determined VLAN of said second edge device.

11. equipment according to claim 10 is characterized in that, also comprises: confirm module, wherein:

Said affirmation module be used for said judge module determine the end-state of this edge device and the determined VLAN of said second edge device different after; And before said vlan state handover module switches to the determined end-state of this edge device with the state of VLAN from said swap status; Send acknowledge message to said second edge device; And receive the affirmation message that said second edge device is sent; Wherein, carry the end-state of this edge device and the determined VLAN of said second edge device in the said acknowledge message;

The end-state that said judge module also is used for judging this edge device that affirmation message that said affirmation module receives is carried and the determined VLAN of said second edge device whether respectively with this edge device in the corresponding end-state of preserving consistent; And when unanimity, notify said vlan state handover module that the state of VLAN is switched to the determined end-state of this edge device from said swap status.

12. equipment according to claim 11 is characterized in that,

When the corresponding end-state that said vlan state handover module also is used in end-state that said judge module determines this edge device that affirmation message that said affirmation module receives carries or the determined VLAN of said second edge device and this edge device, preserving is inconsistent, the state of VLAN is switched to said initial condition from said swap status.

13. according to each described equipment in the claim 10 to 12, it is characterized in that,

Said vlan state handover module also is used for said authentication Executive Module carries out authentication failure to said second edge device after, and the state of VLAN is maintained said initial condition.

14., it is characterized in that said definite announcement module comprises according to each described equipment in the claim 10 to 12:

Second transceiver module; Be used for when the state of VLAN is in said swap status; Send the vlan state message that the Ethernet that carries this edge device connects virtual EVI attribute information to said second edge device; So that said second edge device is confirmed the end-state of the VLAN of said second edge device according to the EVI attribute information of this edge device and said second edge device; Receive the vlan state message of the EVI attribute information that carries said second edge device that said second edge device sends; The end-state of the VLAN of determined edge device of said state determination module is announced to said second edge device, and, the end-state of the determined VLAN of said second edge device that said second edge device sends received;

Said state determination module is used for the EVI attribute information according to this edge device and said second edge device, confirms the end-state of the VLAN of this edge device;

Preserve module, be used to preserve the end-state of the VLAN of determined edge device of said state determination module, and the end-state of the determined VLAN of said second edge device that receives of said second transceiver module.

15. equipment according to claim 14 is characterized in that, said EVI attribute information comprises: the priority of EVI Provisioning Instance Identifier, EVI instance priority and the VLAN that will hold consultation; Said state determination module comprises:

First comparing unit is used for the EVI instance priority of this edge device of comparison and the EVI instance priority of said second edge device;

Confirm the unit; Be used for comparing under the EVI instance priority condition of different of this edge device and said second edge device at said first comparing unit; When the EVI of this edge device instance priority is higher than said second edge device; The end-state of the VLAN that will hold consultation that confirms to comprise in the EVI instance of this edge device is a state of activation, and when being lower than, and the end-state of the VLAN that will hold consultation that confirms to comprise in the EVI instance of this edge device is a unactivated state; Compare at said second comparing unit under the priority condition of different of this VLAN on this edge device and said second edge device; When the priority of this VLAN of this edge device is higher than said second edge device; The state of confirming this VLAN of this edge device is a state of activation; And when being lower than, the state of confirming this VLAN of this edge device is a unactivated state; Under the situation that the priority VLAN priority of this VLAN is identical on this edge device and said second edge device; In the address of the bridge MAC of this edge device during greater than said second edge device; The state of confirming this VLAN of this edge device is a state of activation; And less than the time, the state of confirming this VLAN of this edge device is a unactivated state;

Said second comparing unit; Be used for comparing under this edge device situation identical with the EVI instance priority of said second edge device at said first comparing unit; To each VLAN that will hold consultation, compare the priority of this VLAN on this edge device and said second edge device.

16. according to each described equipment in the claim 10 to 12, it is characterized in that, also comprise: the message sink module, wherein:

Said message sink module is used to receive the neighbours that said second edge device sends and finds hello packet and authentication message; And notify the authentication Executive Module in the said authentication module that said second edge device is carried out authentication; Wherein, This authentication message is that said second edge device sends when initial probe has in the website that oneself belongs to and oneself exists for this edge device of neighbours of same EVI instance; Or the VLAN of said second edge device is when being in end-state, in the following information of said second edge device one of at least: send after EVI attribute information, identity identification information, bridge MAC change;

Said vlan state handover module also is used for when the state of VLAN is in end-state; Receive hello packet and the authentication message that said second edge device is sent in said message sink module; And said authentication Executive Module carries out said second edge device after the authentication success, and the state of VLAN is switched to initial condition from this end-state.

17. according to each described equipment in the claim 10 to 12, it is characterized in that, also comprise: message transmission module, wherein:

Said message transmission module is used for when the state of VLAN is in end-state; In the following information of this edge device one of at least: after EVI attribute information, identity identification information, bridge MAC change, send authentication message to said second edge device;

Said vlan state handover module also is used in said message transmission module after said second edge device sends authentication message, and the state of VLAN is switched to initial condition from this end-state.

18. equipment according to claim 11 is characterized in that,

Said affirmation module also be used for said vlan state handover module with the state of VLAN after said swap status switches to end-state; When the EVI of this edge device attribute information changes; EVI attribute information after changing is carried at sends to said second edge device in the vlan state message; So that said second edge device is according to the EVI attribute information of said second edge device and the EVI attribute information after the change of this edge device; Again confirm the end-state of the VLAN of said second edge device, and the end-state that determines the VLAN that this edge device and said second edge device confirm again at said judge module is not simultaneously; Send acknowledge message to said second edge device, and receive the affirmation message that said second edge device is sent;

Said definite announcement module also is used for according to the EVI attribute information after the change of this edge device and the EVI attribute information of said second edge device; Again confirm the end-state of the VLAN of this edge device; And said second edge device is given in announcement; And; Receive the end-state of the VLAN that said second edge device that said second edge device sends confirms again; And whether the end-state of notifying said judge module to judge the VLAN that this edge device and said second edge device are confirmed again is identical, and wherein, the end-state of the correspondence of preserving in this edge device is updated to respectively: the end-state of the VLAN that this edge device is confirmed again and said second edge device that the receives end-state of definite VLAN again;

Said judge module also is used for after said affirmation module receives the affirmation message that said second edge device sends, the end-state of judging the VLAN that this edge device that carries in the affirmation message that receives and said second edge device are confirmed again whether respectively with this edge device in the corresponding end-state of preserving consistent;

Said vlan state handover module also be used for end-state that said judge module determines the VLAN that this edge device that the affirmation message of reception carries and said second edge device confirm again respectively with this edge device in the corresponding end-state of preserving when consistent, the end-state of VLAN is updated to the definite again end-state of this edge device.