CN103685082B - A kind of method and apparatus for realizing virtual unit on switches - Google Patents

Abstract

The invention discloses a kind of method and apparatus for realizing virtual unit on switches, scheme is：For each forwarding chip of each VD in interchanger configures two layers of segregation table；When E-Packeting when the message that the outside port in forwarding chip is received and from the internal port of forwarding chip, source port is carried in messages；When message is received in the internal port of forwarding chip, source port according to message and two layers of segregation table for forwarding chip configuration judge whether message belongs to forwarding chip place VD, determined to filter the exit port of message or do not filter according to judged result, message is passed in and out from same VD.The present invention disclosure satisfy that demand of the interchanger the flow isolation between VD, extend the application scenarios of interchanger.

Description

A kind of method and apparatus for realizing virtual unit on switches

Technical field

The application is related to communication technical field, and more particularly to one kind realizes virtual unit on switches（Virtual Device, VD）Method and apparatus.

Background technology

One big physical equipment can be invented many skinny devices, namely virtual unit by network equipment virtualization.Respectively VD just as an independent skinny device, there is routing daemon, two or three layer protocols, the forward table of oneself independent operating for a user Item, interface, the user of oneself can be added, can alone be restarted and be read the configuration file of oneself.Resource between each VD can be with Management is allocated by ordering, is independent of each other, when the resource that VD takes exceedes the resource constraint of distribution, it is impossible to seize Other VD resources.

After equipment supports VD functions, whole physical equipment is exactly a VD, referred to as default VD, when User logs in physical equipment When, actual log is exactly default VD.User's configuration essence on the physical devices is exactly the configuration to default VD.Default VD's Numbering is 1, it is not necessary to created, it is impossible to be deleted.That corresponding with default VD is non-default VD, i.e., newly created on the physical equipment The VD for building.

Product will support VD characteristics, it is necessary to while issue the configuration of multiple VD on same veneer, and come into force simultaneously；Tool Body, from the message that different port enters, the VD according to where port goes to match the configuration of the VD and forwarding-table item is processed. For router product, typically realize that message is forwarded by CPU, NP etc., can flexibly be set by software mode, each VD is not Can be coexisted on same veneer with configuration, conflict is not had.It is different and most of interchanger by chip due to being restricted The configuration of VD is probably conflict, such as L2_entry, Fib etc., it is impossible to accomplish the list item of conflict while issuing, matching respectively.

In order to solve the problems, such as the configuration conflict of different VD, interchanger generally divides VD ports according to chip, it is stipulated that same All outside ports of chip are pertaining only to a VD, when this VD turns into effective VD, are only issued on this chip and this VD phase The configuration of pass and forwarding-table item, can solve the problems, such as possible configuration conflict between different VD.Additionally, to realize being divided by chip VD ports, in addition it is also necessary to solve the problems such as flow isolation, communication between plates, Mac address learnings between VD.

The content of the invention

In order to achieve the above object, it is an object of the invention to provide a kind of side for realizing virtual unit on switches Method, the method can solve the problem that demand of the interchanger to VD characteristics, extend the application scenarios of interchanger.

In order to achieve the above object, the invention provides a kind of method for realizing virtual unit on switches, the friendship It is the minimum unit that adds and exit VD to change planes with forwarding chip, and sets up the corresponding relation for having forwarding chip and VD；The method Including：

Corresponding relation according to forwarding chip and VD in current VD each forwarding chip be configured to isolation non-present VD Message two layers of segregation table；

Current VD determines the exit port of message when the outside port of any forwarding chip of itself receives message, right Belong to each exit port of the outside port of the forwarding chip, E-Packeted from the exit port；To being not belonging to the forwarding chip Each exit port of outside port, the port that will receive message is carried in messages and by the forwarding as the source port of message The internal port of chip E-Packets；

Current VD determines message when the internal port of any forwarding chip of itself receives the message for carrying source port Exit port, source port according to message and two layers of segregation table for forwarding chip configuration judge whether message belongs to current VD, if it is, being E-Packeted from the exit port for determining, otherwise, belongs to the outer of the forwarding chip in the exit port for filtering message Portion port, E-Packets from rear remaining exit port is filtered.

Present invention also offers a kind of virtual unit VD, interchanger is applied to, the interchanger is to add with forwarding chip With the minimum unit for exiting VD, and set up and have the corresponding relation of forwarding chip and VD；The VD includes：Dispensing unit, receiving unit, Processing unit, transmitting element；

The dispensing unit, forwarding chip and the corresponding relation of VD for being set up according to the interchanger are every in this VD Individual forwarding chip is configured to isolate non-the two of the message of VD layers of segregation table；

The receiving unit, the outside port for any forwarding chip in this VD receives message；For this VD's The internal port of any forwarding chip receives the message for carrying source port；

The processing unit, for receiving unit when the outside port of any forwarding chip of this VD receives message, Determine the exit port of message, each exit port of the outside port to belonging to the forwarding chip notifies that transmitting element goes out end from this Mouth E-Packets；Each exit port to being not belonging to the outside port of the forwarding chip, notifies that transmitting element will receive message Port E-Packets as the internal port that the source port of message is carried in messages and by the forwarding chip；For receiving list When the internal port of any forwarding chip of this VD of unit receives the message for carrying source port, the exit port of message is determined, according to The source port and dispensing unit of message are that two layers of segregation table of forwarding chip configuration judge whether message belongs to this VD, if It is then to notify that transmitting element E-Packets from the exit port for determining, otherwise, the forwarding chip is belonged in the exit port for filtering message Outside port, and notify that transmitting element E-Packets from rear remaining exit port is filtered.

As can be seen from the above technical solution, the present invention by interchanger each VD each forwarding chip configuration two layers every From table and according to receive message port be forwarding chip internal port or outside port and to message perform different disposal stream Journey：When E-Packeting when the message that the outside port in forwarding chip is received and from the internal port of forwarding chip, in message Middle carrying source port；When message is received in the internal port of forwarding chip, source port according to message and be the forwarding Two layers of segregation table of chip configuration judge whether message belongs to VD where the forwarding chip, are determined to message according to judged result Exit port is filtered or not filtered, and performs message forwarding accordingly, message is passed in and out from same VD.The present invention disclosure satisfy that Interchanger extends the application scenarios of interchanger to the demand of the flow isolation between VD.

Brief description of the drawings

Fig. 1 is the broadcasting packet handling process schematic diagram that the embodiment of the present invention realizes VD in a switch；

Fig. 2 is the known unicast Message processing schematic flow sheet that the embodiment of the present invention realizes VD in a switch；

Fig. 3 is the known multicast message handling process schematic diagram that the embodiment of the present invention realizes VD in a switch；

Fig. 4 is the structural representation of virtual unit provided in an embodiment of the present invention.

Specific embodiment

In order to make the purpose , technical scheme and advantage of the present invention be clearer, develop simultaneously embodiment below in conjunction with the accompanying drawings, Technical scheme is described in detail.

In the present invention, for the ease of description, beyond on forwarding chip for connecting interchanger where the forwarding chip The port of the network equipment be referred to as the outside port of forwarding chip；Friendship where being used to connect the forwarding chip on forwarding chip The internal port of the port of other forwarding chips in changing planes referred to as forwarding chip；By on forwarding chip for connecting the forwarding The port of the CPU on veneer where chip is referred to as cpu port.

In order to realize VD in a switch, the present invention divides VD according to forwarding chip, in a switch with forwarding chip To add and exiting the minimum unit of VD, and set up the corresponding relation of forwarding chip and VD；According to forwarding chip and the correspondence of VD Relation is that each forwarding chip of each VD is configured to isolate two layers of segregation table of the message of the non-VD；Any turn at itself of VD When the outside port for sending out chip receives message, E-Packet if desired to other forwarding chips, then will receive the end of message Mouth is forwarded as the internal port that the source port of message is carried in messages and by the forwarding chip, by the source port of message The affiliated VD of identification message；VD the internal port of any forwarding chip of itself receive carry source port message when, according to The source port of message and two layers of segregation table for forwarding chip configuration judge whether message belongs to the VD, when message is not belonging to this During VD, message is not allowed to be forwarded from the outside port of the forwarding chip so that the message of the non-VD will not be from any turn of the VD The outside port for sending out chip is forwarded, and can realize the two laminar flow amounts isolation between VD.

The above-mentioned corresponding relation according to forwarding chip and VD is that each forwarding chip of each VD is configured to the non-VD of isolation The method of two layers of segregation table of message have following two：

The first：The outside port that will not belong to all forwarding chips of the VD is added to the outer end of the forwarding chip Two layers of segregation table of mouth configuration.In this case, source port according to message and two layers of segregation table for forwarding chip configuration Judge that the method whether message belongs to the VD is：If the source port of message be for the forwarding chip configuration two layers of segregation table in Outside port, then can determine that message is not belonging to the VD, otherwise, it determines message belongs to the VD.

Second：The outside port that all forwarding chips of the VD will be belonged to is added to the outside port of the forwarding chip Two layers of segregation table of configuration.In this case, source port according to message and two layers of segregation table for forwarding chip configuration are sentenced The method whether disconnected message belongs to the VD is：If the source port of message be for the forwarding chip configuration two layers of segregation table in Outside port, it is determined that message belongs to the VD, otherwise, it determines message is not belonging to the VD.

Above-mentioned message includes broadcasting packet, unicast message（Including known unicast message and unknown unicast message）, multicast report Text（Including known multicast message and unknown unicast message）, message is different, and the handling process of VD is also differed, with reference to Fig. 1, Fig. 2 and Fig. 3 are illustrated respectively.

Handling process first to broadcasting packet is illustrated：

In order to realize VD in a switch, it is necessary to carry out two layers of isolation the broadcasting packet between VD.For this reason, it may be necessary to be each VD Each forwarding chip be configured to two layers of segregation table of the message of VD where the non-forwarding chip of isolation, be that each of each VD turns Hair chip two layers of method of segregation table of configuration can be any one of above two collocation method.Further, since same VD can So that including multiple forwarding chips, an outside port for forwarding chip is into the broadcasting packet of VD, it is necessary to from the VD's therefrom The outside port of all forwarding chips（Except receiving port）Forward, this is accomplished by across forwarding chip forwarding broadcasting packet, In order to across forwarding chip forwarding broadcasting packet, it is necessary to by the internal port addition interchanger of each forwarding chip in interchanger In the VLAN of all VD so that the internal port of each forwarding chip can allow for all broadcasting packets and pass through.Above-mentioned setting can be with Realize two layer isolation of the broadcasting packet between VD.

Referring to Fig. 1, Fig. 1 is the broadcasting packet handling process schematic diagram that the embodiment of the present invention realizes VD in a switch, bag Include following steps：

Step 101, VD receive broadcasting packet in any forwarding chip of itself.

Step 102, the port for judging reception broadcasting packet, if the port for receiving broadcasting packet is the outer of the forwarding chip Portion port, then perform step 103；If the port for receiving broadcasting packet is the internal port of the forwarding chip, step is performed 104。

Step 103, the port of reception broadcasting packet are the outside ports of the forwarding chip, search VLAN broadcast tables and determine report The exit port of text, for each exit port, if the exit port is the outside port of the forwarding chip, from exit port forwarding Broadcasting packet, if the exit port is the internal port of the forwarding chip, will receive the outside port of broadcasting packet as wide The source port for reporting text is carried in broadcasting packet and forwards broadcasting packet from the exit port.

Broadcast is added in the exit port of the broadcasting packet that the outside port of forwarding chip is received includes the forwarding chip The all of the port of the affiliated VLAN of message（Except receiving port）, can be the outside port and/or internal port of the forwarding chip. In adding the VLAN of all VD in interchanger due to the internal port of the forwarding chip, all internal ports of forwarding chip are equal It is the exit port of broadcasting packet；In addition, all outside ports that the affiliated VLAN of broadcasting packet is added on the forwarding chip are also The exit port of broadcasting packet.

For each exit port of the outside port for belonging to the forwarding chip of broadcasting packet, need to only be forwarded from the exit port Broadcasting packet.For each exit port of the internal port for belonging to the forwarding chip of broadcasting packet, then need to receive and broadcast The outside port of message is broadcasted as the source port of broadcasting packet with identifying the affiliated VD of broadcasting packet, and being forwarded from the internal port Message so that the neighbours' forwarding chip being connected on the internal port can be received and forward the broadcasting packet.

Step 104, the port of reception broadcasting packet are the internal ports of the forwarding chip, search VLAN broadcast tables and determine extensively The exit port of text is reported, source port according to broadcasting packet and two layers of segregation table for forwarding chip configuration judge broadcasting packet Whether the forwarding chip affiliated VD is belonged to, if it is, broadcasting packet is forwarded from each exit port, otherwise, by all exit ports In belong to the outside port of the forwarding chip and filter, from filtering rear remaining each exit port forwarding broadcasting packet.

Broadcast is added in the exit port of the broadcasting packet that the internal port of forwarding chip is received includes the forwarding chip The all of the port of VLAN described in message（Except receiving port）, can be the outside port and/or internal port of the forwarding chip. In adding the VLAN of all VD in interchanger due to the internal port of the forwarding chip, all internal ports of forwarding chip are equal It is the exit port of broadcasting packet；In addition, all outside ports that the affiliated VLAN of broadcasting packet is added on the forwarding chip are also The exit port of broadcasting packet.

The broadcasting packet received in the internal port of forwarding chip carries source port.When the source according to broadcasting packet Mouthful and for two layers of segregation table of forwarding chip configuration judge that broadcasting packet belongs to the forwarding chip affiliated VD when, it is allowed to from this turn The outside port forwarding broadcasting packet of chip is sent out, therefore the exit port of broadcasting packet need not be filtered, go out to hold from all Mouth forwarding broadcasting packet.When the source port according to broadcasting packet and for two layers of segregation table of forwarding chip configuration judge wide When reporting text and being not belonging to the affiliated VD of the forwarding chip, do not allow to forward broadcasting packet from the outside port of the forwarding chip, therefore Need to filter the outside port that all exit ports of broadcasting packet belong to the forwarding chip, from filter it is rear it is remaining it is all go out end Mouth forwarding broadcasting packet.

As can be seen that VD is received extensively in the outside port of the forwarding chip of itself from the embodiment of the present invention shown in Fig. 1 When reporting text, the outside port that will receive broadcasting packet identifies the affiliated VD of broadcasting packet as the source port of broadcasting packet, makes Other forwarding chips when receiving the broadcasting packet, according to the source port of broadcasting packet and can be described other forwarding chips Two layers of segregation table of configuration judge whether broadcasting packet belongs to the affiliated VD of described other forwarding chips, and then are selected according to judged result The outside port for selecting filtering other forwarding chips or the outside port for not filtering other forwarding chips so that message from Passed in and out with VD, realize two layers of isolation of broadcasting packet between VD.It should be noted that VD is to unknown unicast message, unknown multicast report The handling process of text is identical with the handling process to broadcasting packet, it is possible to achieve unknown unicast message and unknown multicast packets between VD Two layers isolation, repeat no more.

In actual applications, when VD receives message in the internal port of any forwarding chip of itself（Reported including broadcast Text, unknown unicast message and unknown multicast packets）When, in addition it is also necessary to MAC address learning is carried out to message.Any turn at itself of VD The message that the internal port of chip is received is sent out, is divided to for two kinds of situations according to the affiliated VD of message：

One, message belongs to VD where the forwarding chip.In this case, it is necessary to carry out MAC address learning to message, study The source MAC of message generates the corresponding MAC address entries of source MAC, to instruct subsequently received mesh to the source port of message The MAC Address source MAC unicast message forwarding.

Two, message is not belonging to VD described in the forwarding chip.In this case, it is necessary to forbid carrying out MAC Address to message Practise, to avoid the MAC address entries conflict of different VD and reduce the MAC address entries number that each VD is generated.

Secondly, the handling process to known unicast message is illustrated：

In order to realize VD in a switch, it is necessary to carry out two layers of isolation the known unicast message between VD.For this reason, it may be necessary to be Each forwarding chip of each VD is configured to two layers of segregation table of the message of VD where the non-forwarding chip of isolation, is the every of each VD Two layers of method of segregation table of individual forwarding chip configuration can be any one of above two collocation method.Further, since same VD can include multiple forwarding chips, and an outside port for forwarding chip, may into the known unicast message of VD therefrom Need to be forwarded from the outside port of another forwarding chip of the VD, this is accomplished by across forwarding chip forwarding known unicast report Text, in order to across forwarding chip forwarding known unicast message, it is necessary to the internal port of each forwarding chip in interchanger is added In interchanger in the VLAN of all VD so that the internal port of each forwarding chip can allow for all known unicast messages and pass through. Above-mentioned setting can realize two layer isolation of the known unicast message between VD.

Referring to Fig. 2, Fig. 2 is that the embodiment of the present invention realizes that the known unicast Message processing flow of VD is illustrated in a switch Figure, comprises the following steps：

Step 201, VD receive known unicast message in any forwarding chip of itself.

Step 202, the port for judging reception known unicast message, if the port for receiving known unicast message is the forwarding The outside port of chip, then perform step 203；If the port for receiving message is the internal port of the forwarding chip, perform Step 204.

Step 203, the port of reception known unicast message are the outside ports of the forwarding chip, search MAC forward tables true Determine the exit port of message, if the exit port is the outside port of the forwarding chip, known unicast report is forwarded from the exit port Text, if the exit port is the outside port of other forwarding chips, will receive the outside port of known unicast message, searches Forwarding chip where the exit port for arriving and the exit port respectively as the source port of known unicast message, purpose exit port, The internal port that purpose forwarding chip carries in known unicast message and by the forwarding chip forwards known unicast message.

The exit port of the known unicast message received in the outside port of forwarding chip can be its of the forwarding chip The outside port of his outside port or other forwarding chips with VD, can be determined by searching MAC forward tables.Work as known unicast When the exit port of message is the outside port of the forwarding chip, known unicast message can be forwarded from the exit port.When known list The exit port of text is reported when being the outside port of other forwarding chips, it is necessary to using the outside port of known unicast message as known The source port of unicast message is carried in known unicast message, in addition, in addition it is also necessary to by the exit port of known unicast message, known list The purpose exit port of the exit port place forwarding chip respectively as known unicast message of text, purpose forwarding chip is reported to carry and exist In known unicast message, known unicast message is then forwarded by the internal port of the forwarding chip.

In actual applications, the chip that is stored with forwarding chip forwards mapping table, is forwarded including multiple chips and mapped List item, chip forwarding mapping item includes purpose forwarding chip information and internal port information, expression forwarding chip need by , it is necessary to be forwarded from which internal port of forwarding chip when message is forwarded to purpose forwarding chip.

In this step, it is necessary to will when it is determined that the exit port of known unicast message be the outside port of other forwarding chips Described other forwarding chips of message forwarding, this is accomplished by determining described other forwarding chips by searching forwarding chip mapping table Corresponding internal port, so as to known unicast message be forwarded from the internal port, is connected to internal port neighbours and turns Hair chip receive the known unicast message after, can according in known unicast message carry source port, purpose exit port and Purpose forwarding chip, performs and determines the exit port of known unicast message, judges that the affiliated VD of known unicast message and forwarding are known Unicast message etc. is operated.

Step 204, the port of reception known unicast message are the internal ports of the forwarding chip, determine known unicast message Exit port be the purpose exit port of known unicast message, source port according to known unicast message and be forwarding chip configuration Two layers of segregation table judge whether known unicast message belongs to the affiliated VD of the forwarding chip, if it is, from the exit port forwarding Known unicast message, otherwise, belongs to the outside port of the forwarding chip in the exit port for filtering known unicast message, if known list The exit port for reporting text is not filtered out, then forward known unicast message by the internal port of the forwarding chip.

Here, the forwarding in the method and step 203 of known unicast message is forwarded by the internal port of the forwarding chip Method is identical, is to look for forwarding chip mapping table to determine the corresponding inside end of purpose forwarding chip of known unicast message Mouthful, then forward known unicast message from the internal port.

The known unicast message received in the internal port of forwarding chip carries source port, purpose exit port, purpose Forwarding chip, it is known that the purpose exit port that unicast message is carried is the exit port of known unicast message.When in forwarding core When the known unicast message that piece is received belongs to the forwarding chip affiliated VD, it is allowed to from the outside port forwarding of the forwarding chip Know unicast message, therefore the exit port of known unicast message need not be filtered, turn from the exit port of known unicast message Hair known unicast message.When the known unicast message received in forwarding chip is not belonging to the affiliated VD of the forwarding chip, Do not allow to forward known unicast message, it is necessary to the exit port of known unicast message was carried out from the outside port of the forwarding chip Filter, if it is known that the exit port of unicast message is the outside port of the forwarding chip, then can be filtered, otherwise, will not be by mistake Filter.

As can be seen that VD is received in the outside port of the forwarding chip of itself from the embodiment of the present invention shown in Fig. 2 When the exit port for knowing unicast message and known unicast message is the outside port of other forwarding chips, known unicast message will be received Outside port, the exit port of known unicast message, forwarding chip where the exit port of known unicast message respectively as known The source port of unicast message, purpose exit port, purpose forwarding chip are carried and forwarded in messages so that receive the known unicast The forwarding chip of message can be held according to the source port, purpose exit port and purpose forwarding chip carried in known unicast message Row determines the exit port of known unicast message, judges the affiliated VD of known unicast message and forwards the operation such as known unicast message, Realize two layers of isolation of the known unicast message between VD.

In addition, VD is when the internal port of any forwarding chip of itself receives known unicast message, if it is known that single VD where text belongs to the forwarding chip is reported, then also needs to carry out known unicast message MAC address learning, refresh corresponding MAC address entries, if it is known that VD where unicast message is not belonging to the forwarding chip, then also need to forbid carry out known unicast message MAC address learning.

Finally, the handling process to known multicast message is illustrated：

In order to realize VD in a switch, it is necessary to carry out two layers of isolation the known multicast message between VD.For this reason, it may be necessary to be Each forwarding chip of each VD is configured to two layers of segregation table of the message of VD where the non-forwarding chip of isolation, is the every of each VD Two layers of method of segregation table of individual forwarding chip configuration can be any one of above two collocation method.Further, since same VD can include multiple forwarding chips, therefrom outside port for forwarding chip enter VD known multicast message, it is necessary to The all of the port of the known affiliated multicast group of multicast message has been added to from the outside port of all forwarding chips of the VD（Connect Except receiving end mouthful）Forward, this is accomplished by multicast message known to across forwarding chip forwarding, in order to be forwarded across forwarding chip Known multicast message by the internal port of each forwarding chip in interchanger, it is necessary to be added to the corresponding multicast list of all multicast groups Exit port list in so that the internal port of each forwarding chip can allow for all known multicast messages and pass through.Above-mentioned setting Two layer isolation of the known multicast message between VD can be realized.

Referring to Fig. 3, Fig. 3 is that the embodiment of the present invention realizes that the known multicast message handling process of VD is illustrated in a switch Figure, comprises the following steps：

Step 301, VD receive known multicast message in any forwarding chip of itself.

Step 302, the port for judging multicast message known to receiving, if the port of multicast message is the forwarding known to receiving The outside port of chip, then perform step 303；If the port for receiving known multicast message is the inside end of the forwarding chip Mouthful, then perform step 304.

Step 303, the port of the known multicast message of reception are the outside ports of the forwarding chip, search known multicast message The outgoing interface list of the corresponding multicast list of the multicast group determines the exit port of message, for each exit port, if this goes out Port is the outside port of the forwarding chip, then from the known multicast message of exit port forwarding, if the exit port is the forwarding The internal port of chip, the then outside port that will receive known multicast message is carried as the source port of known multicast message Know in multicast message and from the known multicast message of exit port forwarding.

Added in the exit port of the known multicast message that the outside port of forwarding chip is received includes the forwarding chip The all of the port of the known affiliated multicast group of multicast message（Except receiving port）, can be the forwarding chip outside port and/ Or internal port.The outgoing interface row of the corresponding multicast list of all multicast groups have been added to due to the internal port of the forwarding chip In table, therefore, all internal ports of forwarding chip are the exit ports of known multicast message；In addition, adding on the forwarding chip The all outside ports entered to the outgoing interface list of the corresponding multicast list of the affiliated multicast group of known multicast message are also known group Report the exit port of text.

For each exit port of the outside port for belonging to the forwarding chip of known multicast message, only need to be from the exit port The known multicast message of forwarding.For each exit port of the internal port for belonging to the forwarding chip of known multicast message, then need The outside port of multicast message known to receiving is as the source port of known multicast message to identify belonging to known multicast message VD, and forward known multicast message from the internal port so that the neighbours' forwarding chip being connected on the internal port can connect Receive and forward the known multicast message.

Step 304, the port of the known multicast message of reception are the internal ports of the forwarding chip, search known multicast message The outgoing interface list of the corresponding multicast list of the multicast group determines all exit ports of message, according to the source of known multicast message Port and two layers of segregation table for forwarding chip configuration judge whether known multicast message belongs to the affiliated VD of the forwarding chip, such as Fruit is, then from the known multicast message of each exit port forwarding, otherwise, the outer end of the forwarding chip will to be belonged in all exit ports Mouth is filtered, and known multicast message is forwarded from rear remaining each exit port is filtered.

Added in the exit port of the known multicast message that the internal port of forwarding chip is received includes the forwarding chip The all of the port of the known affiliated multicast group of multicast message（Except receiving port）, can be the forwarding chip outside port and/ Or internal port.The outgoing interface row of the corresponding multicast list of all multicast groups have been added to due to the internal port of the forwarding chip In table, therefore, all internal ports of forwarding chip are the exit ports of known multicast message；In addition, adding on the forwarding chip The all outside ports entered to the outgoing interface list of the corresponding multicast list of the affiliated multicast group of known multicast message are also known group Report the exit port of text.

The known multicast message received in the internal port of forwarding chip carries source port.When according to known multicast report The source port of text and two layers of segregation table for forwarding chip configuration judge that known multicast message belongs to the affiliated VD of the forwarding chip When, it is allowed to from the known multicast message of outside port forwarding of the forwarding chip, therefore end need not be gone out to known multicast message Mouth is filtered, from the known multicast message of all exit ports forwarding.When the source port according to known multicast message and be this When two layers of segregation table of forwarding chip configuration judge that known multicast message is not belonging to the forwarding chip affiliated VD, do not allow from this turn Send out the known multicast message of outside port forwarding of chip, it is therefore desirable to which all exit ports of known multicast message are belonged into the forwarding The outside port of chip is filtered, and known multicast messages are forwarded from rear remaining all exit ports are filtered.

As can be seen that VD is received in the outside port of the forwarding chip of itself from the embodiment of the present invention shown in Fig. 1 When knowing multicast message and multicast message known from internal port forwarding, the outside port of known multicast message will be received as known The source port of multicast message identifies the affiliated VD of known multicast message so that other forwarding chips receive the known multicast message When, can be according to the source port of known multicast message and the group known to two layers of segregation table judgement of described other forwarding chips configuration Report whether text belongs to the affiliated VD of described other forwarding chips, and then other forwarding chips according to judged result selection filtering Outside port or do not filter the outside port of other forwarding chips so that known multicast message is passed in and out from same VD, realize Two layers of isolation of known multicast message between VD.

In addition, VD is when the internal port of any forwarding chip of itself receives known multicast message, if it is known that group VD where text belongs to the forwarding chip is reported, then also needs to carry out known multicast message MAC address learning, refresh corresponding MAC address entries, if it is known that VD where multicast message is not belonging to the forwarding chip, then also need to forbid carry out known multicast message MAC address learning.

The broadcast report that the embodiment of the present invention shown in above-mentioned Fig. 1, Fig. 2, Fig. 3 is received to VD in any forwarding chip of itself Text, known unicast message, the handling process of known multicast message have been described in detail.In fact, VD sets as a logic It is standby, it is also possible to be actively sent out Radio Broadcasting Agreements message, any turn of the VD that Radio Broadcasting Agreements message is actively generated by CPU and sent The cpu port of chip is sent out, and the final outside port via each forwarding chip of VD sends, without allowing from other VD's The outside port of forwarding chip sends, and this is accomplished by carrying out the cpu port of each forwarding chip of each VD in interchanger Two layers of isolation are set.

In order to distinguish the Radio Broadcasting Agreements message that each VD actively sends, can in advance for each VD distributes a CPU source port. If using the first to configure two layers of method of segregation table for forwarding chip, all forwarding chips of the VD are being will not belong to Outside port be added to the forwarding chip outside port configuration two layers of segregation table when, also simultaneously will be in addition to the VD other The pre-assigned CPU source ports of each VD are added to two layers of segregation table of forwarding chip configuration.If use second for Forwarding chip configures two layers of method of segregation table, then the outside port in all forwarding chips that will belong to the VD is added to this During two layers of segregation table of the outside port configuration of forwarding chip, will also be added to for the pre-assigned CPU source ports of the VD simultaneously It is two layers of segregation table of forwarding chip configuration.

So, when VD receives Radio Broadcasting Agreements message in the cpu port of any forwarding chip of itself, can search VLAN broadcast tables determine all exit ports of message, for each exit port, if the exit port is the outside of the forwarding chip Port, then forward Radio Broadcasting Agreements message from the exit port, if the exit port is the internal port of the forwarding chip, will be pre- First for the CPU source ports of VD distribution are carried in Radio Broadcasting Agreements message to identify broadcast association as the source port of Radio Broadcasting Agreements message The view affiliated VD of message, and forward Radio Broadcasting Agreements message from the exit port.

When VD receives the Radio Broadcasting Agreements message for carrying source port in the internal port of any forwarding chip of itself, can To search all exit ports that VLAN broadcast tables determine Radio Broadcasting Agreements message, and source port according to Radio Broadcasting Agreements message and be this Two layers of segregation table of forwarding chip configuration judge whether Radio Broadcasting Agreements message belongs to the VD, if it is, turning from all exit ports Hair Radio Broadcasting Agreements message, otherwise, will belong to the outside port filtering of the forwarding chip in all exit ports, all from after filtering Exit port forwards Radio Broadcasting Agreements message.

Wherein, when using the first for the method for forwarding chip two layers of segregation table of configuration, according to Radio Broadcasting Agreements message Source port and two layers of segregation table for forwarding chip configuration judge that the method whether Radio Broadcasting Agreements message belongs to the VD is：If The source port of Radio Broadcasting Agreements message is the CPU source ports in two layers of segregation table for forwarding chip configuration, it is determined that broadcast association View message is not belonging to the VD, otherwise, it determines Radio Broadcasting Agreements message belongs to the VD；

When using second for the method for forwarding chip two layers of segregation table of configuration, according to the source port of Radio Broadcasting Agreements message Judge that the method whether Radio Broadcasting Agreements message belongs to the VD is with the two layers of segregation table configured for the forwarding chip：If broadcast association The source port for discussing message is the CPU source ports in two layers of segregation table for forwarding chip configuration, it is determined that Radio Broadcasting Agreements message Belong to the VD, otherwise, it determines Radio Broadcasting Agreements message is not belonging to the VD.

The Radio Broadcasting Agreements report received to the cpu port or internal port of any forwarding chip at itself by above-mentioned VD The processing procedure of text, the Radio Broadcasting Agreements message that VD can be made actively to send is merely able to the outside port from each forwarding chip of the VD Forward, and can not be forwarded from the outside port of the forwarding chip of other VD, it is possible to achieve it is wide that each VD actively sends Broadcast between VD two layers of isolation of protocol massages.

Additionally, being configured to isolate two layers of side of segregation table of the message of the non-VD from above-mentioned each forwarding chip for VD Method can be seen that the present invention and not set to carrying out two layers of isolation between the cpu port of each forwarding chip, therefore, respectively forward core Communication between plates can be realized with intercommunication communication between plates message between the cpu port of piece.

The method to the embodiment of the present invention has been described in detail above, and the present invention gives a kind of virtual unit, should For interchanger.

Referring to Fig. 4, Fig. 4 is the structural representation of virtual unit provided in an embodiment of the present invention, is applied to interchanger, described Interchanger take forwarding chip as the minimum unit for adding and exiting VD, and sets up the corresponding relation for having forwarding chip and VD；The VD Including：Dispensing unit 401, receiving unit 402, processing unit 403, transmitting element 404；Wherein,

Dispensing unit 401, forwarding chip and the corresponding relation of VD for being set up according to the interchanger are every in this VD Individual forwarding chip is configured to isolate non-the two of the message of VD layers of segregation table；

Receiving unit 402, the outside port for any forwarding chip in this VD receives message；For appointing in this VD The internal port of one forwarding chip receives the message for carrying source port；

Processing unit 403, the outside port for receiving unit 402 in any forwarding chip of this VD receives message When, determine the exit port of message, each exit port of the outside port to belonging to the forwarding chip, notify transmitting element 404 from The exit port E-Packets；Each exit port to being not belonging to the outside port of the forwarding chip, notifies that transmitting element 404 will connect Internal port of the literary port as the source port carrying of message in messages and by the forwarding chip of receiving telegraph E-Packets；With When the internal port of any forwarding chip of 402 VD of receiving unit receives the message for carrying source port, message is determined Exit port, source port and dispensing unit 401 according to message are whether two layers of segregation table of forwarding chip configuration judge message Belong to this VD, if it is, notifying that transmitting element 404 E-Packets from the exit port for determining, otherwise, filter the exit port of message In belong to the outside port of the forwarding chip, and notify that transmitting element 404 E-Packets from rear remaining exit port is filtered.

In above-mentioned VD, the transmitting element 404 is carried in message in the port that will receive message as the source port of message In and when being E-Packeted by the internal port of the forwarding chip, be used for：If the exit port is the inside end of the forwarding chip Mouthful, then the source port carrying that will receive port as the message of message E-Packets in messages and from the exit port；If should Exit port is the outside port of other forwarding chips, then will receive forwarding core where port, the exit port, exit port of message Piece is carried in messages respectively as the source port of message, purpose exit port, purpose forwarding chip, and searches forwarding chip mapping Table determines the corresponding internal port of purpose forwarding chip of message, is E-Packeted from the internal port for determining；

The transmitting element 404 is used for when remaining exit port E-Packets from after filtering：It is rear remaining for filtering Each exit port, if the exit port is the internal port of the forwarding chip, E-Packets from the exit port, if this goes out end Mouth is the outside port of other forwarding chips, then search forwarding chip mapping table and determine that the purpose forwarding chip of message is corresponding interior Portion port, E-Packets from the internal port for determining.

Each forwarding chip configuration in being this VD according to the corresponding relation of forwarding chip and VD of the dispensing unit 401 is used When non-the two of the message of VD layers of segregation table is isolated, each internal port of the forwarding chip is further added to the friendship Change planes in the VLAN of all VD, and the internal port is added to the exit port list of the corresponding multicast list of all multicast groups In；

The processing unit 403 is it is determined that receiving unit 402 is received in the outside port of any forwarding chip of this VD Message exit port when, be used for：If message is unicast message, the exit port that MAC forward tables determine message is searched, if Message is multicast message, then what the outgoing interface list for searching the corresponding multicast list of the affiliated multicast group of message determined message goes out end Mouthful, for failing to determine the unicast message of exit port according to MAC forward tables, not can determine that according to the outgoing interface list of multicast list The multicast message and broadcasting packet of exit port, then search the exit port that VLAN broadcast tables determine message；It is determined that receiving unit During the exit port of 402 messages received in the internal port of any forwarding chip of this VD, it is used for：If message is unicast report Text and carrying purpose exit port, it is determined that the exit port of message is the purpose exit port, if message is multicast message, is searched The outgoing interface list of the corresponding multicast list of the affiliated multicast group of message determines the exit port of message, for not carrying purpose exit port Unknown unicast message, according to the outgoing interface list of multicast list fail determine exit port multicast message and broadcasting packet, Then search the exit port that VLAN broadcast tables determine message.

In above-mentioned VD, the processing unit 403 it is determined that receiving unit 402 any forwarding chip of this VD inside end The message that mouth is received belongs to after this VD, is further used for：Learn the source MAC of the message to the source port of message； Determine that receiving unit 402 after the message that the internal port of any forwarding chip of this VD is received is not belonging to this VD, enters one Walking is used for：Forbid carrying out MAC address learning to the message.

In above-mentioned VD, the receiving unit 402 is further used for being received in the cpu port of any forwarding chip of this VD Radio Broadcasting Agreements message；The internal port being further used in any forwarding chip of this VD receives the Radio Broadcasting Agreements for carrying source port Message；

The processing unit 403, the cpu port for being further used for receiving unit 402 in any forwarding chip of this VD connects When receiving Radio Broadcasting Agreements message, the exit port that VLAN broadcast tables determine message is searched, for each exit port, if the exit port It is the outside port of the forwarding chip, then notifies that transmitting element 404 forwards Radio Broadcasting Agreements message from the exit port, if this goes out end Mouthful it is the internal port of the forwarding chip, then notifies that transmitting element 404 will be in advance the CPU source ports of this VD distribution as broadcast The source port of protocol massages is carried in Radio Broadcasting Agreements message, and forwards Radio Broadcasting Agreements message from the exit port；It is further used for connecing Unit 402 is received when the internal port of any forwarding chip of this VD receives the Radio Broadcasting Agreements message for carrying source port, is searched VLAN broadcast tables determine the exit port of Radio Broadcasting Agreements message, source port according to Radio Broadcasting Agreements message and be forwarding chip configuration Two layers of segregation table judge whether Radio Broadcasting Agreements message belongs to this VD, if it is, notify transmitting element 404 from message go out end Mouth forwarding Radio Broadcasting Agreements message, otherwise, will belong to the outside port filtering of the forwarding chip, and notify hair in the exit port of message Send exit port forwarding Radio Broadcasting Agreements message of the unit 404 from after filtering.

Each forwarding chip configuration in being this VD according to the corresponding relation of forwarding chip and VD of the dispensing unit 401 is used When non-the two of the message of VD layers of segregation table is isolated, it is used for：The outside port that will not belong to all forwarding chips of this VD adds It is two layers of segregation table of forwarding chip configuration to be added to, and will be that the pre-assigned CPU source ports of other each VD add in addition to this VD It is two layers of segregation table of forwarding chip configuration to be added to；

The processing unit 403 is in the source port according to message and for two layers of segregation table of forwarding chip configuration judge report When whether text belongs to this VD, it is used for：If the source port of message is the outside in two layers of segregation table for forwarding chip configuration Port, it is determined that message is not belonging to this VD, otherwise, it determines message belongs to this VD；In the source port according to Radio Broadcasting Agreements message and When judging whether Radio Broadcasting Agreements message belongs to this VD for two layers of segregation table of forwarding chip configuration, it is used for：If Radio Broadcasting Agreements The source port of message is the CPU source ports in two layers of segregation table for forwarding chip configuration, it is determined that Radio Broadcasting Agreements message is not Belong to this VD, otherwise, it determines Radio Broadcasting Agreements message belongs to this VD；

Or,

Each forwarding chip configuration in being this VD according to the corresponding relation of forwarding chip and VD of the dispensing unit 401 is used When non-the two of the message of VD layers of segregation table is isolated, it is used for：The outside port addition of all forwarding chips of this VD will be belonged to To the two layers of segregation table configured for the forwarding chip, the forwarding chip will be added to for the pre-assigned CPU source ports of this VD Configuration, two layers of segregation table；

The processing unit 403 is in the source port according to message and for two layers of segregation table of forwarding chip configuration judge report When whether text belongs to this VD, it is used for：If the source port of message is the outside in two layers of segregation table for forwarding chip configuration Port, it is determined that message belongs to this VD, otherwise, it determines message is not belonging to this VD；In the source port according to Radio Broadcasting Agreements message and When judging whether Radio Broadcasting Agreements message belongs to this VD for two layers of segregation table of forwarding chip configuration, it is used for：If Radio Broadcasting Agreements The source port of message is the CPU source ports in two layers of segregation table for forwarding chip configuration, it is determined that Radio Broadcasting Agreements message belongs to In this VD, otherwise, it determines Radio Broadcasting Agreements message is not belonging to this VD.

Presently preferred embodiments of the present invention is the foregoing is only, is not intended to limit the invention, it is all in essence of the invention Within god and principle, any modification, equivalent substitution and improvements done etc. should be included within the scope of protection of the invention.

Claims (12)

1. a kind of method for realizing virtual unit VD on switches, the interchanger is to add and exit VD's with forwarding chip Minimum unit, and set up the corresponding relation for having forwarding chip and VD；Characterized in that, the method includes：

Corresponding relation according to forwarding chip and VD is the report that each forwarding chip is configured to isolate non-present VD in current VD Two layers of segregation table of text；

Current VD determines the exit port of message, to belonging to when the outside port of any forwarding chip of itself receives message Each exit port of the outside port of the forwarding chip, E-Packets from the exit port；Outside to being not belonging to the forwarding chip Each exit port of port, the port that will receive message carries in messages as the source port of message and passes through the forwarding chip Internal port E-Packet；

Current VD determines going out for message when the internal port of any forwarding chip of itself receives the message for carrying source port Port, source port according to message and two layers of segregation table for forwarding chip configuration judge whether message belongs to current VD, such as Fruit is then to be E-Packeted from the exit port for determining, otherwise, the outer end of the forwarding chip is belonged in the exit port for filtering message Mouthful, E-Packeted from rear remaining exit port is filtered；

Wherein,

The outside port of forwarding chip is being set for connecting the network beyond interchanger where the forwarding chip on forwarding chip Standby port；The internal port of forwarding chip is for other in the interchanger where connecting the forwarding chip on forwarding chip The port of forwarding chip.

2. the method for realizing VD on switches according to claim 1, it is characterised in that

Described pair of each exit port for the outside port for being not belonging to the forwarding chip, will receive the port of message as the source of message Port carries the method for E-Packeting in messages and by the internal port of the forwarding chip：If the exit port is this turn The internal port of chip is sent out, then the source port carrying that will receive port as the message of message turns in messages and from the exit port Transmit messages text；If the exit port is the outside port of other forwarding chips, the port of message, the exit port will be received, this goes out Forwarding chip where port is carried in messages, and looked into respectively as the source port of message, purpose exit port, purpose forwarding chip Look for forwarding chip mapping table to determine the corresponding internal port of purpose forwarding chip of message, report is forwarded from the internal port for determining Text；

It is described to be from filtering the method that rear remaining exit port E-Packets：For filtering rear remaining each exit port, if The exit port is the internal port of the forwarding chip, then E-Packeted from the exit port, if the exit port is other forwarding cores The outside port of piece, then search the corresponding internal port of purpose forwarding chip that forwarding chip mapping table determines message, from determination Internal port E-Packet.

3. the method for realizing VD on switches according to claim 2, it is characterised in that

The corresponding relation according to forwarding chip and VD is that each forwarding chip is configured to isolation non-present VD in current VD Message two layers of segregation table when, each internal port of the forwarding chip is further added to all VD in the interchanger VLAN in, and the internal port is added in the exit port list of the corresponding multicast list of all multicast groups；

Current VD when the outside port of any forwarding chip of itself receives message, the method for determining the exit port of message For：If message is unicast message, the exit port that MAC forward tables determine message is searched, if message is multicast message, looked into The outgoing interface list of the corresponding multicast list of the affiliated multicast group of long message determines all exit ports of message, for being turned according to MAC Deliver and fail the unicast message for determining exit port, the multicast message for failing determination exit port according to the outgoing interface list of multicast list And broadcasting packet, then search all exit ports that VLAN broadcast tables determine message；

Current VD when the internal port of any forwarding chip of itself receives message, the method for determining the exit port of message For：If message is unicast message and carries purpose exit port, it is determined that the exit port of message is the purpose exit port, such as retribution Text is multicast message, then the outgoing interface list for searching the corresponding multicast list of the affiliated multicast group of message determines that all of message go out to hold Mouthful, for do not carry purpose exit port unicast message, according to the outgoing interface list of multicast list fail determine exit port group Text and broadcasting packet are reported, then searches all exit ports that VLAN broadcast tables determine message.

4. the method for realizing VD on switches according to claim 1, it is characterised in that

Current VD is further wrapped after the internal port of any forwarding chip receives message and determines that message belongs to current VD Include：Learn the source MAC of the message to the source port of message；

Current VD after the internal port of any forwarding chip receives message and determines that message is not belonging to current VD, further Including：Forbid carrying out MAC address learning to the message.

5. the method for realizing VD on switches according to any claims of claim 2-4, it is characterised in that the method is entered One step includes：

Current VD searches VLAN broadcast tables true when the cpu port of any forwarding chip of itself receives Radio Broadcasting Agreements message Determine all exit ports of message, for each exit port, if the exit port is the outside port of the forwarding chip, go out from this Port forwards Radio Broadcasting Agreements message, if the exit port is the internal port of the forwarding chip, will in advance for current VD is distributed CPU source ports as Radio Broadcasting Agreements message source port carry in Radio Broadcasting Agreements message, and from the exit port forwarding broadcast association View message；

Current VD is searched when the internal port of any forwarding chip of itself receives the Radio Broadcasting Agreements message for carrying source port VLAN broadcast tables determine all exit ports of Radio Broadcasting Agreements message, source port according to Radio Broadcasting Agreements message and be the forwarding chip Two layers of segregation table of configuration judge whether Radio Broadcasting Agreements message belongs to current VD, if it is, forwarded from all exit ports broadcasting Protocol massages, otherwise, will belong to the outside port filtering of the forwarding chip, all exit ports from after filtering in all exit ports Forwarding Radio Broadcasting Agreements message.

6. the method for realizing VD on switches according to claim 5, it is characterised in that

The corresponding relation according to forwarding chip and VD is that each forwarding chip is configured to isolation non-present VD in current VD The method of two layers of segregation table of message be：The outside port that will not belong to all forwarding chips of current VD is added to this turn Two layers of segregation table of hair chip configuration, will be that the pre-assigned CPU source ports of other each VD are added to this in addition to current VD Two layers of segregation table of forwarding chip configuration；

The source port according to message and for two layers of segregation table that the forwarding chip is configured judge whether message belongs to current VD Method be：If the source port of message is the outside port in two layers of segregation table for forwarding chip configuration, it is determined that report Text is not belonging to current VD, otherwise, it determines message belongs to current VD；

The source port according to Radio Broadcasting Agreements message and for two layers of segregation table that the forwarding chip is configured judge Radio Broadcasting Agreements report Whether text belongs to the method for current VD：If the source port of Radio Broadcasting Agreements message is two layers of isolation for forwarding chip configuration CPU source ports in table, it is determined that Radio Broadcasting Agreements message is not belonging to current VD, otherwise, it determines Radio Broadcasting Agreements message belongs to current VD；

Or,

The corresponding relation according to forwarding chip and VD is that each forwarding chip is configured to isolation non-present VD in current VD The method of two layers of segregation table of message be：The outside port that all forwarding chips of current VD will be belonged to is added to the forwarding Two layers of segregation table of chip configuration, forwarding chip configuration will be added to for the pre-assigned CPU source ports of current VD two Layer segregation table；

The source port according to message and for two layers of segregation table that the forwarding chip is configured judge whether message belongs to current VD Method be：If the source port of message is the outside port in two layers of segregation table for forwarding chip configuration, it is determined that report Text belongs to current VD, otherwise, it determines message is not belonging to current VD；

The source port according to Radio Broadcasting Agreements message and for two layers of segregation table that the forwarding chip is configured judge Radio Broadcasting Agreements report Whether text belongs to the method for current VD：If the source port of Radio Broadcasting Agreements message is two layers of isolation for forwarding chip configuration CPU source ports in table, it is determined that Radio Broadcasting Agreements message belongs to current VD, otherwise, it determines Radio Broadcasting Agreements message is not belonging to currently VD。

7. a kind of virtual unit VD, is applied to interchanger, and the interchanger take forwarding chip as the minimum list for adding and exiting VD Unit, and set up the corresponding relation for having forwarding chip and VD；Characterized in that, the VD includes：Dispensing unit, receiving unit, treatment Unit, transmitting element；

The dispensing unit, forwarding chip and the corresponding relation of VD for being set up according to the interchanger are each turn in this VD Hair chip is configured to isolate non-the two of the message of VD layers of segregation table；

The receiving unit, the outside port for any forwarding chip in this VD receives message；For any in this VD The internal port of forwarding chip receives the message for carrying source port；

The processing unit, for receiving unit when the outside port of any forwarding chip of this VD receives message, it is determined that The exit port of message, each exit port of the outside port to belonging to the forwarding chip notifies that transmitting element turns from the exit port Transmit messages text；Each exit port to being not belonging to the outside port of the forwarding chip, notifies that transmitting element will receive the port of message The internal port carried in messages and by the forwarding chip as the source port of message E-Packets；For receiving unit sheet When the internal port of any forwarding chip of VD receives the message for carrying source port, the exit port of message is determined, according to message Source port and dispensing unit be the forwarding chip configuration two layers of segregation table judge whether message belongs to this VD, if it is, Notify that transmitting element E-Packets from the exit port for determining, otherwise, the outer of the forwarding chip is belonged in the exit port for filtering message Portion port, and notify that transmitting element E-Packets from rear remaining exit port is filtered；

Wherein,

The outside port of forwarding chip is being set for connecting the network beyond interchanger where the forwarding chip on forwarding chip Standby port；The internal port of forwarding chip is for other in the interchanger where connecting the forwarding chip on forwarding chip The port of forwarding chip.

8. VD according to claim 7, it is characterised in that

The transmitting element is carried in messages as the source port of message in the port that will receive message and passes through the forwarding core When the internal port of piece E-Packets, it is used for：If the exit port is the internal port of the forwarding chip, message will be received Port carries as the source port of message and E-Packets in messages and from the exit port；If the exit port is other forwarding cores The outside port of piece, then will receive forwarding chip where the port of message, the exit port, the exit port as the source of message Port, purpose exit port, purpose forwarding chip are carried in messages, and search the purpose turn that forwarding chip mapping table determines message The corresponding internal port of hair chip, E-Packets from the internal port for determining；

The transmitting element is used for when remaining exit port E-Packets from after filtering：For filter it is rear it is remaining each go out Port, if the exit port is the internal port of the forwarding chip, E-Packets from the exit port, if the exit port is it The outside port of its forwarding chip, then search the corresponding inside end of purpose forwarding chip that forwarding chip mapping table determines message Mouthful, E-Packeted from the internal port for determining.

9. VD according to claim 8, it is characterised in that

The dispensing unit each forwarding chip in being this VD according to the corresponding relation of forwarding chip and VD is configured to isolation During non-the two of the message of VD layers of segregation table, further each internal port of the forwarding chip is added in the interchanger In the VLAN of all VD, and the internal port is added in the exit port list of the corresponding multicast list of all multicast groups；

The processing unit is it is determined that the receiving unit message that is received in the outside port of any forwarding chip of this VD goes out During port, it is used for：If message is known unicast message, the exit port that MAC forward tables determine message is searched, if message is Known multicast message, the then outgoing interface list for searching the corresponding multicast list of the affiliated multicast group of message determines the exit port of message, For failing to determine the unicast message of exit port according to MAC forward tables, failing to determine according to the outgoing interface list of multicast list The multicast message of port and or broadcasting packet, then search VLAN broadcast tables and determine the exit port of message；It is determined that receiving unit During the exit port of the message received in the internal port of any forwarding chip of this VD, it is used for：If message is unicast message And carrying purpose exit port, it is determined that the exit port of message is the purpose exit port, if message is multicast message, searches report The outgoing interface list of the corresponding multicast list of multicast group belonging to literary determines the exit port of message, for not carrying purpose exit port Unicast message, multicast message and broadcasting packet that determination exit port is failed according to the outgoing interface list of multicast list, then search VLAN broadcast tables determine the exit port of message.

10. VD according to claim 7, it is characterised in that

The processing unit is it is determined that receiving unit belongs in the message that the internal port of any forwarding chip of this VD is received After this VD, it is further used for：Learn the source MAC of the message to the source port of message；It is determined that receiving unit is in this VD The message that receives of internal port of any forwarding chip be not belonging to after this VD, be further used for：Forbid entering the message Row MAC address learning.

11. VD according to any claims of claim 7-10, it is characterised in that

The receiving unit, is further used for receiving Radio Broadcasting Agreements message in the cpu port of any forwarding chip of this VD；Enter one The internal port walked for any forwarding chip in this VD receives the Radio Broadcasting Agreements message for carrying source port；

The processing unit, is further used for receiving unit and receives broadcast association in the cpu port of any forwarding chip of this VD During view message, the exit port that VLAN broadcast tables determine message is searched, for each exit port, if the exit port is the forwarding core The outside port of piece, then notify that transmitting element forwards Radio Broadcasting Agreements message from the exit port, if the exit port is the forwarding core The internal port of piece, then notify that transmitting element will be in advance the CPU source ports of this VD distribution as the source of Radio Broadcasting Agreements message Mouth is carried in Radio Broadcasting Agreements message, and forwards Radio Broadcasting Agreements message from the exit port；It is further used for receiving unit this VD's When the internal port of any forwarding chip receives the Radio Broadcasting Agreements message for carrying source port, search VLAN broadcast tables and determine broadcast The exit port of protocol massages, source port according to Radio Broadcasting Agreements message and two layers of segregation table for forwarding chip configuration judge wide Broadcast whether protocol massages belong to this VD, if it is, notify that transmitting element forwards Radio Broadcasting Agreements message from the exit port of message, it is no Then, the outside port filtering of the forwarding chip will be belonged in the exit port of message, and notifies that transmitting element goes out end from after filtering Mouth forwarding Radio Broadcasting Agreements message.

12. VD according to claim 11, it is characterised in that

The dispensing unit each forwarding chip in being this VD according to the corresponding relation of forwarding chip and VD is configured to isolation During non-the two of the message of VD layers of segregation table, it is used for：The outside port that will not belong to all forwarding chips of this VD is added to Two layers of segregation table of forwarding chip configuration, will be that the pre-assigned CPU source ports of other each VD are added in addition to this VD Two layers of segregation table of forwarding chip configuration；

The processing unit is in the source port according to message and for whether two layers of segregation table of forwarding chip configuration judge message When belonging to this VD, it is used for：If the source port of message is the outside port in two layers of segregation table for forwarding chip configuration, Determine that message is not belonging to this VD, otherwise, it determines message belongs to this VD；In the source port according to Radio Broadcasting Agreements message and be the forwarding When two layers of segregation table of chip configuration judge whether Radio Broadcasting Agreements message belongs to this VD, it is used for：If the source of Radio Broadcasting Agreements message Port is the CPU source ports in two layers of segregation table for forwarding chip configuration, it is determined that Radio Broadcasting Agreements message is not belonging to this VD, Otherwise, it determines Radio Broadcasting Agreements message belongs to this VD；

Or,

The dispensing unit each forwarding chip in being this VD according to the corresponding relation of forwarding chip and VD is configured to isolation During non-the two of the message of VD layers of segregation table, it is used for：The outside port that all forwarding chips of this VD will be belonged to is added to this Two layers of segregation table of forwarding chip configuration, will be added to forwarding chip configuration for the pre-assigned CPU source ports of this VD Two layers of segregation table；

The processing unit is in the source port according to message and for whether two layers of segregation table of forwarding chip configuration judge message When belonging to this VD, it is used for：If the source port of message is the outside port in two layers of segregation table for forwarding chip configuration, Determine that message belongs to this VD, otherwise, it determines message is not belonging to this VD；In the source port according to Radio Broadcasting Agreements message and be the forwarding When two layers of segregation table of chip configuration judge whether Radio Broadcasting Agreements message belongs to this VD, it is used for：If the source of Radio Broadcasting Agreements message Port is the CPU source ports in two layers of segregation table for forwarding chip configuration, it is determined that Radio Broadcasting Agreements message belongs to this VD, no Then, determine that Radio Broadcasting Agreements message is not belonging to this VD.