CN103731347A

CN103731347A - VPNV4 routing processing method and device based on nested VPN

Info

Publication number: CN103731347A
Application number: CN201210381750.9A
Authority: CN
Inventors: 田钧宇
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: Ziguang Hengyue Technology Co.,Ltd.
Priority date: 2012-10-10
Filing date: 2012-10-10
Publication date: 2014-04-16
Anticipated expiration: 2032-10-10
Also published as: CN103731347B

Abstract

The invention discloses a VPNV4 routing processing method and device based on the nested VPN. The method comprises the steps that a PE device of a second operator receives a first VPNV4 route from a PE device of a first operator, an RD message carried in a second field of the first VPNV4 route is utilized for replacing an RD message carried in a first field of the first VPNV4 route, and a second field is deleted so that a second VPNV4 route can be obtained; the PE device of the second operator sends the second VPNV4 route to a user MPLSVP network. According to the VPNV4 routing processing method and device based on the nested VPN, the VPN can be distinguished, and the problem that the independence of private network routing is damaged is solved.

Description

A kind of VPNV4 route processing method and equipment based on nested VPN network

Technical field

The present invention relates to communication technical field, especially relate to a kind of based on nested VPN(Virtual Private Network, Virtual Private Network) VPNV4 route processing method and the equipment of network.

Background technology

At MPLS(Multiprotocol Label Switching, multiprotocol label switching) L3VPN(Layer 3 Virtual Private Network, Layer3 Virtual Private Network) in network, by operator, manage MPLS VPN backbone network, and by PE(Provider Edge, backbone network edge) equipment provides VPN service; Wherein, VPN user is by CE(Customer Edge, customer network edge) equipment and PE apparatus interconnection, and access MPLS VPN network, thereby realization belongs to the different Site(websites of this VPN) between communication.

In actual networking, when VPN user inside needs a plurality of VPN of Further Division, the settling mode of nested VPN has been proposed, as shown in Figure 1, network diagram for nested VPN, comprising: the PE of operator equipment (Provider PE1, Provider PE2), with the CE equipment (CE1, CE2) of the PE of operator equipment connection, user PE equipment (Customer PE1, Customer PE2, Customer PE3), with the CE equipment (CE3, CE4, CE5) of user PE equipment connection etc.; User affiliated VPN on the MPLS VPN of operator network is VPN A, divides sub-VPN: VPN A-1 and VPN A-2 in user MPLS VPN network internal; The PE of operator equipment is used as user MPLS VPN network as common VPN user and is treated, and does not participate in the division of sub-VPN, by the VPN of user management user MPLS VPN network internal, is divided.

In prior art, Customer PE1 needs the VPNV4 route that comprises sub-VPN (being VPN A-1) routing iinformation to send to CE1, by CE1, VPNV4 route is sent to Provider PE1, this VPNV4 route comprises RD information (100:1) and the RT information (100:1) of sub-VPN (VPN A-1).

About RD(Route Distinguish, route is distinguished) information, due to BGP(Border Gateway Protocol, Border Gateway Protocol) cannot correctly process the overlapping VPN route of address space and (suppose that VPN A-1 and VPN A-2 have all been used the address of the 1.1.1.1/32 network segment, and issued separately a route of going to this network segment, BGP can select a route wherein, thereby causes another lost route); Based on this, by RD information, make BGP can correctly process the overlapping VPN route of address space; In VPNV4 route, carried the VPN-IPv4 address that comprises RD information, and this VPN-IPv4 address has 12 bytes, comprise the IPv4 address prefix of RD information and 4 bytes of 8 bytes.

About RT(Route Target, route target) information, by using BGP extended community attribute RT(also to claim VPN Target) control the issue of VPN route; RT information comprises: Export(outlet) (local PE equipment will be distributed to other PE equipment from the VPN-IPv4 route of acquiring with self direct-connected Site Target attribute, for these routes arrange Export Target attribute) and Import(entrance) (PE equipment is when receiving the VPN-IPv4 route of other PE equipment issue for Target attribute, check Export Target attribute, only have when this attribute and local Import Target attributes match, just route is joined to VPN routing table); Therefore RT information definition VPN-IPv4 route can be received by which Site, PE equipment can receive the route which Site sends, and in subsequent descriptions, supposes that Export Target configures identical with Import Target.

Further, CE1 sends to VPNV4 route after Provider PE1, Provider PE1 can replace with self RD information (200:1) by the RD information (100:1) in this VPNV4 route, and by the VPNV4 route transmission of having replaced RD information to Provider PE2; In addition, Provider PE1 can add the RT information (100:1) of self in this VPNV4 route (because the RT information in VPNV4 route is 100:1, therefore current do not add), and by the VPNV4 route transmission of having added RT information to Provider PE2.

The PE of operator equipment replaces with self RD information by the RD information in VPNV4 route, and transmit while having replaced the VPNV4 route of RD information, RD information overlap when a VPN instance of the PE of operator equipment and user PE equipment, and when IP route is overlapping, will cause distinguishing VPN due to RD information overlap.

As shown in Figure 2, CE3, CE4 are website in VPN A-1, CE5 is website in VPN A-2, on Customer PE1 and Customer PE2, the RD of configuration VPN A-1 is 100:1, on Customer PE3, the RD of configuration VPN A-2 is 200:1, and on Provider PE1 and Provider PE2, the RD of configuration VPN A is 200:1.

Under above-mentioned application scenarios, CE1 is in sending to the VPNV4 route of Provider PE1, RD information is 100:1, IP route is 1.1.1.1, Provider PE1 is revised as 200:1 by the RD information of VPNV4 route, amended VPNV4 route is sent to Provider PE2, and Provider PE2 sends to CE2 by amended VPNV4 route, and CE2 sends to Customer PE2 by amended VPNV4 route; Customer PE2 learns this VPNV4 route, and puts this VPNV4 route into BGP-VPNV4 routing table, and in this VPNV4 route, RD information is 200:1, and IP route is 1.1.1.1.Customer PE3, from CE5 receives this route of 1.1.1.1, sends VPNV4 route to Provider PE2; Customer PE3 configuration RD is 200:1, therefore in the VPNV4 route sending to Customer PE2, RD information is 200:1, IP route is 1.1.1.1, Customer PE2 learns this VPNV4 route, and puts this VPNV4 route into BGP-VPNV4 routing table, in this VPNV4 route, RD information is 200:1, and IP route is 1.1.1.1.

In sum, occur two identical VPNV4 routes in the BGP-VPNV4 routing table of Customer PE2, RD information is 200:1, and IP route is 1.1.1.1, but down hop is respectively CE2 and Customer PE3; BGP can carry out preferably these two VPNV4 routes, only has a VPNV4 route to come into force.

The PE of operator equipment adds the RT information of self in VPNV4 route, and transmit while having added the VPNV4 route of RT information, when the RT information overlap of the PE of operator equipment and user PE equipment, due to user PE equipment, cannot in VPNV4 route, distinguish which RT information is that the PE of operator equipment adds, cause for isolating the RT information configuration of VPN route, losing efficacy on user PE equipment, cannot distinguish study VPN route.

As shown in Figure 3, CE3, CE5 are website in VPN A-1, CE6 is website in VPN A-2, on Customer PE1 and Customer PE2, the RT of configuration VPN A-1 is 100:1, and the RT of configuration VPN A-2 is 200:1 on Customer PE2, on Provider PE1 and Provider PE2, the RT of configuration VPN A is 200:1; In addition, the route of can learning from each other between CE3 and CE5, between CE3 and CE6, not allowing to learn from each other does not allow the route of learning from each other between route and CE5 and CE6.

Under above-mentioned application scenarios, CE1 is in sending to the VPNV4 route of Provider PE1, RT information is 100:1, Provider PE1 adds RT information 200:1 in VPNV4 route, amended VPNV4 route is issued to Provider PE2, Provider PE2 issues CE2 by amended VPNV4 route, and CE2 issues Customer PE2 by amended VPNV4 route; Customer PE2 learns amended VPNV4 route, and RT information is 100:1 and 200:1; Because the RT of VPN A-1 is 100:1, the RT of VPN A-2 is 200:1, so Customer PE2 can be inserted into amended VPNV4 route the routing table of VPN A-1 and the routing table of VPN A-2, and amended VPNV4 route is sent to respectively to CE5 and CE6; In this process, Customer PE2 lost efficacy for isolating the RT information configuration of VPN route, cannot distinguish study VPN route.

Summary of the invention

The embodiment of the present invention provides a kind of VPNV4 route processing method and equipment based on nested VPN network, the problem existing while transmitting VPNV4 route to solve in nested VPN network.

In order to achieve the above object, the embodiment of the present invention provides a kind of VPNV4 route processing method based on nested virtual private network network, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, the method comprises the following steps: described the second PE of operator equipment receives the VPNV4 route from described the first PE of operator equipment, the route of carrying in the first field of a described VPNV4 route after described first operator's PE equipment replaces it is distinguished RD information, and in the second field of a described VPNV4 route, carry described first operator's PE equipment and replace it front RD information, described the second PE of operator equipment is when needs send a described VPNV4 route to user MPLS VPN network, utilize the RD information of carrying in described the second field to replace the RD information of carrying in described the first field, and delete described the second field, to obtain the 2nd VPNV4 route, described the second PE of operator equipment sends to described user MPLS VPN network by described the 2nd VPNV4 route.

Described the second PE of operator equipment receives the VPNV4 route from described the first PE of operator equipment, also comprise: the first PE of operator equipment is when receiving the 3rd VPNV4 route from user MPLS VPN network before, the RD information of carrying in the first field of the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of the 3rd VPNV4 route is written in described the second field, to obtain a described VPNV4 route; And described the first PE of operator equipment sends to described the second PE of operator equipment by a described VPNV4 route.

In described first field of a described VPNV4 route, also carry the corresponding MPLS label of a VPNV4 route described in the described MPLS VPN of operator network, and also carried identical MPLS label in described second field of a described VPNV4 route; The RD information of carrying in the second field described in described the second PE of operator equipment utilization is replaced the RD information of carrying in described the first field, specifically comprise: the MPLS label carrying in described second field of a VPNV4 route described in the MPLS tag match of carrying in described first field of described the second PE of operator equipment by a described VPNV4 route, and utilize the corresponding RD information of MPLS label matching to replace the RD information of carrying in described first field of a described VPNV4 route.

Described method further comprises: the second PE of operator equipment receives the 4th VPNV4 route from described the first PE of operator equipment, in the 3rd field of described the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment; The second PE of operator equipment is when needs send described the 4th VPNV4 route to user MPLS VPN network, utilize the RT information of being added by the first PE of operator equipment in the 3rd field described in the RT information deletion of described the 4th field identification, and delete described the 4th field, to obtain the 5th VPNV4 route; And, described the 5th VPNV4 route is sent to user MPLS VPN network.

Described the second PE of operator equipment receives the 4th VPNV4 route from described the first PE of operator equipment, also comprise: the first PE of operator equipment is when receiving the 6th VPNV4 route from user MPLS VPN network before, in the 3rd field of the 6th VPNV4 route, add local RT information, and add the 4th field, the RT information of being added by the first PE of operator equipment with sign, to obtain the 4th VPNV4 route; And, described the 4th VPNV4 route is sent to described the second PE of operator equipment.

In the 3rd field of a described VPNV4 route, carried all RT information, and the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment; Described the second PE of operator equipment is in obtaining the process of the 2nd VPNV4 route, described method further comprises: the RT information of being added by described the first PE of operator equipment in the 3rd field described in the RT information deletion of the 4th field identification described in described the second PE of operator equipment utilization, and delete described the 4th field, to obtain described the 2nd VPNV4 route.

Described the second PE of operator equipment receives the VPNV4 route from described the first PE of operator equipment, also comprise: described the first PE of operator equipment is when receiving the 3rd VPNV4 route from user MPLS VPN network before, the RD information of carrying in the first field of described the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in the second field of described the 3rd VPNV4 route, in the 3rd field of described the 3rd VPNV4 route, add local RT information, and add the 4th field, the RT information of adding to identify described the first PE of operator equipment, to obtain a described VPNV4 route, and, a described VPNV4 route is sent to described the second PE of operator equipment.

The embodiment of the present invention provides a kind of VPNV4 route processing equipment based on nested virtual private network network, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, described treatment facility is described the second PE of operator equipment, and described second operator's PE equipment comprises: receiver module, for receiving the VPNV4 route from described the first PE of operator equipment, the route of carrying in the first field of a described VPNV4 route after described first operator's PE equipment replaces it is distinguished RD information, and in the second field of a described VPNV4 route, carry described first operator's PE equipment and replace it front RD information, processing module, for when needs send a described VPNV4 route to user MPLS VPN network, utilize the RD information of carrying in described the second field to replace the RD information of carrying in described the first field, and delete described the second field, to obtain the 2nd VPNV4 route, sending module, for sending to user MPLS VPN network by described the 2nd VPNV4 route.

In described first field of a described VPNV4 route, also carry the corresponding MPLS label of a VPNV4 route described in the described MPLS VPN of operator network, and also carried identical MPLS label in described second field of a described VPNV4 route; Described processing module, the MPLS label carrying in described the second field specifically for a VPNV4 route described in the MPLS tag match of carrying in described the first field by a described VPNV4 route, and utilize the corresponding RD information of the MPLS label matching to replace the RD information of carrying in the first field of a VPNV4 route.

Described receiver module, also for receiving the 4th VPNV4 route from described the first PE of operator equipment, in the 3rd field of the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment; Described processing module, also for when needs send the 4th VPNV4 route to user MPLS VPN network, utilize the RT information of being added by described the first PE of operator equipment in RT information deletion the 3rd field of described the 4th field identification, and delete described the 4th field, to obtain the 5th VPNV4 route; Described sending module, also for sending to the 5th VPNV4 route on user MPLS VPN network.

In the 3rd field of a described VPNV4 route, carried all RT information, and the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment; Described processing module, also for the process obtaining the 2nd VPNV4 route, utilize the RT information of being added by described the first PE of operator equipment in the 3rd field described in the RT information deletion of described the 4th field identification, and delete described the 4th field, to obtain described the 2nd VPNV4 route.

The embodiment of the present invention provides a kind of VPNV4 route processing equipment based on nested virtual private network network, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, described treatment facility is described the first PE of operator equipment, and described first operator's PE equipment comprises: receiver module, for receiving the 3rd VPNV4 route from user MPLS VPN network; Processing module, for when receiving the 3rd VPNV4 route from user MPLS VPN network, the route of carrying in the first field of described the 3rd VPNV4 route is distinguished to RD information and replace with local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in described the second field, to obtain a described VPNV4 route; Sending module, for a described VPNV4 route is sent to described the second PE of operator equipment, in the first field of a described VPNV4 route, carry the RD information after described first operator's PE equipment replaces it, and in the second field of a described VPNV4 route, carry the RD information of described first operator's PE equipment before replacing it.

Described receiver module, also for receiving the 6th VPNV4 route from user MPLS VPN network; Described processing module, also, for when receiving the 6th VPNV4 route from user MPLS VPN network, in the 3rd field of the 6th VPNV4 route, add local RT information, and add the 4th field, the RT information of being added by the first PE of operator equipment with sign, to obtain the 4th VPNV4 route; Described sending module, also for described the 4th VPNV4 route being sent to described the second PE of operator equipment, in the 3rd field of described the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of described the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment.

Described receiver module, also for receiving the 3rd VPNV4 route from user MPLS VPN network, described processing module, also for when receiving the 3rd VPNV4 route from user MPLS VPN network, the RD information of carrying in the first field of described the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in the second field of described the 3rd VPNV4 route, in the 3rd field of described the 3rd VPNV4 route, add local RT information, and add the 4th field, the RT information of adding to identify described the first PE of operator equipment, to obtain a described VPNV4 route, described sending module, also for a described VPNV4 route being sent to described the second PE of operator equipment, and in the 3rd field of a described VPNV4 route, carried all RT information, the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment.

Compared with prior art, the embodiment of the present invention at least has the following advantages: in the embodiment of the present invention, in nested VPN network, by the RD information before operator's PE equipment is replaced it, carry out record, with when needs send VPNV4 route to user MPLS VPN network, RD information before the operator's PE equipment that can reduce replaces it, thereby the RD information overlap at a VPN instance of the PE of operator equipment and user PE equipment, and when IP route is overlapping, can distinguish VPN, solve the problem that VPN route independence is destroyed.Further, in nested VPN network, by the RT information that the PE of operator equipment is added, carry out record, with when sending VPNV4 route to user MPLS VPN network, can delete the RT information that the PE of operator equipment adds, thereby when the RT information overlap of the PE of operator equipment and user PE equipment, can solve the problem that cannot distinguish study VPN route.

Accompanying drawing explanation

Fig. 1-Fig. 3 is the network diagram of nested VPN in prior art;

Fig. 4 is a kind of VPNV4 route processing method schematic flow sheet based on nested VPN network that the embodiment of the present invention proposes;

Fig. 5 is the schematic diagram that has added the second field VPNV4 route afterwards in the embodiment of the present invention;

Fig. 6 is the schematic diagram of having deleted the second field VPNV4 route afterwards in the embodiment of the present invention;

Fig. 7 is the extended community attribute schematic diagram that has added Route Target Flag in the embodiment of the present invention;

Fig. 8 is the structural representation of a kind of second PE of operator equipment of embodiment of the present invention proposition;

Fig. 9 is the structural representation of a kind of first PE of operator equipment of embodiment of the present invention proposition.

Embodiment

In prior art, the RD information overlap of a VPN instance of the PE of operator equipment and user PE equipment, and when IP route is overlapping, will cause distinguishing due to RD information overlap the problem of VPN, the embodiment of the present invention proposes a kind of VPNV4 route processing method based on nested VPN network, the method is applied to comprise the nested VPN network of the MPLS VPN of operator network and user MPLS VPN network, in the MPLS VPN of Qie Gai operator network, at least comprise the first PE of operator equipment and the second PE of operator equipment, the application scenarios schematic diagram that Fig. 1-Fig. 3 of take is the embodiment of the present invention, the first PE of operator equipment can be Provider PE1, the second PE of operator equipment can be Provider PE2.

As shown in Figure 4, this VPNV4 route processing method comprises the following steps:

Step 401, the first PE of operator equipment is when receiving the 3rd VPNV4 route from user MPLS VPN network, the RD information of carrying in the first field of the 3rd VPNV4 route is replaced with to local RD information, and add the second field in the 3rd VPNV4 route, the RD information of carrying in the first field is written in this second field, to obtain a VPNV4 route.

In the embodiment of the present invention, this first field includes but not limited to BGP NLRI(Network Layer Reachability Information, Network Layer Reachable Information) field, this second field is that the first PE of operator equipment adds in the 3rd VPNV4 route, and this second field includes but not limited to the initial route difference of Original Route Distinguisher(of BGP extended community attribute) field.

For example, in the NLRI field of the 3rd VPNV4 route, carried RD information 1, and when the RD information of first operator's PE equipment this locality is RD information 2, the first PE of operator equipment is after receiving the 3rd VPNV4 route, RD information 1 in NLRI field is replaced with to RD information 2, and add Original Route Distinguisher field, and write RD information 1 in this Original Route Distinguisher field; Therefore in the VPNV4 route obtaining, being RD information 2 in NLRI field, is RD information 1 in Original Route Distinguisher field.

In the embodiment of the present invention, also can carry out index by MPLS label (being private network tags information), therefore at first operator's PE equipment, send in a VPNV4 route of the second PE of operator equipment, in the label stack of the first field, also carried the corresponding MPLS label of a VPNV4 route in the MPLS VPN of operator network, and the second field has also been carried identical MPLS label; For example, MPLS label 1 and RD information 1 and MPLS label 2 and RD information 2 in the first field, have been carried; MPLS label 1 and RD information 3 and MPLS label 2 and RD information 4 in the second field, have been carried.

Particularly, by defining new BGP extended community attribute, can increase Original Route Distinguisher field for recording the RD information before replacing it as the second field, and can there be 16 bytes in this Original Route Distinguisher field, front 4 bytes are Type(0X1000), rear 8 bytes are used for recording RD information, and last 4 bytes are used for recording MPLS label.In a kind of specific implementation, before the BGP extended community attribute that type is 0X1000 (being Original Route Distinguisher) can be positioned over other extended community attributes.

Step 402, the first PE of operator equipment sends to the second PE of operator equipment by a VPNV4 route, by the second PE of operator equipment, receives the VPNV4 route from the first PE of operator equipment; In the one VPNV4 route, the first field (NLRI) has been carried the RD information after the first PE of operator equipment replacement, the second field (Original Route Distinguisher) has been carried the RD information before the first PE of operator equipment replacement, and a concrete VPNV4 route can be as shown in Figure 5.

Concrete, in application scenarios shown in Fig. 5, the RD information of carrying in the first field of a VPNV4 route is 200:1, and MPLS label is that the RD information of carrying in the second field of 1058, the one VPNV4 routes is 100:1, and MPLS label is 1058.

Step 403, the second PE of operator equipment, when needs send a VPNV4 route to user MPLS VPN network, utilizes the RD information of carrying in the second field to replace the RD information of carrying in the first field, and deletes the second field, to obtain the 2nd VPNV4 route.

Concrete, when the second PE of operator equipment need to send a VPNV4 route to user MPLS VPN network, need to check the Original Route Distinguisher field in BGP extended community attribute, extract the RD information (as RD information 1) of carrying in Original Route Distinguisher field, and replace the RD information (as RD information 2) of carrying in NLRI field by this RD information 1; Afterwards, the second PE of operator unit deletion Original Route Distinguisher field, to obtain the 2nd VPNV4 route, and carried RD information 1 in the NLRI field of the 2nd VPNV4 route, the extended community attribute of the 2nd concrete VPNV4 route can be as shown in Figure 6, there is no Original Route Distinguisher field in this extended community attribute.

In the embodiment of the present invention, first operator's PE equipment sends in a VPNV4 route of the second PE of operator equipment, has also carried MPLS label in the label stack of the first field, and the second field has also been carried identical MPLS label; By MPLS label, undertaken in the process of index, the RD information of carrying in second PE of operator equipment utilization the second field is replaced the RD information of carrying in the first field and is comprised: the MPLS label carrying in the second field of MPLS tag match the one VPNV4 route of carrying in first field of the second PE of operator equipment by a VPNV4 route, and utilize the corresponding RD information of the MPLS label matching to replace the RD information of carrying in the first field of a VPNV4 route.

For example, MPLS label 1 and RD information 1 and MPLS label 2 and RD information 2 in the first field, have been carried; MPLS label 1 and RD information 3 and MPLS label 2 and RD information 4 in the second field, have been carried; Based on this, the second PE of operator equipment is by the MPLS label carrying in MPLS label 1 coupling second field of carrying in the first field, and the RD information 3 that utilization matches is replaced the RD information 1 of carrying in the first fields; And the second PE of operator equipment is by the MPLS label carrying in MPLS label 2 coupling second fields of carrying in the first field, and the RD information 4 that utilization matches is replaced the RD information 2 of carrying in the first fields.

Further, after the second PE of operator equipment receives the VPNV4 route from the first PE of operator equipment, for VPN route learning process, the second PE of operator equipment will be ignored Original Route Distinguisher field, and the RD information of getting in NLRI field is carried out route learning; In addition, if the second PE of operator equipment need to send to a VPNV4 route PE of other operators equipment in the MPLS VPN of operator network, the second PE of operator equipment is not changed extended community attribute (Original Route Distinguisher field) and is directly sent; Said process does not repeat them here.

Step 404, the second PE of operator equipment sends to user MPLS VPN network by the 2nd VPNV4 route.

Based on above-mentioned processing, by the RD information before operator's PE equipment is replaced it, carry out record, with when needs send VPNV4 route to user MPLS VPN network, RD information before the operator's PE equipment that can reduce replaces it, thereby the RD information overlap at a VPN instance of the PE of operator equipment and user PE equipment, and when IP route is overlapping, can distinguish VPN, solve the problem that VPN route independence is destroyed.In the networking shown in Fig. 2, the VPNV4 route that Customer PE2 learns from CE2, RD information is 100:1, and IP route is 1.1.1.1; The VPNV4 route that Customer PE2 learns from Customer PE3, RD information is 200:1, and IP route is 1.1.1.1; Because the RD information of two VPNV4 routes is different, therefore in BGP VPNV4 routing table, two VPNV4 routes can not carried out to preferred process as same route, protected the independence of VPN route.

Further, in prior art, when the RT information overlap of the PE of operator equipment and user PE equipment, due to user PE equipment, cannot in VPNV4 route, distinguish which RT information is that the PE of operator equipment adds, cause for isolating the RT information configuration of VPN route, losing efficacy on user PE equipment, the problem that cannot distinguish study VPN route, in the VPNV4 route processing method based on nested VPN network that the embodiment of the present invention proposes, can also comprise the steps:

Steps A, the first PE of operator equipment are when receiving the 6th VPNV4 route from user MPLS VPN network, in the 3rd field of the 6th VPNV4 route, add local RT information, and add the 4th field, the RT information of being added by the first PE of operator equipment with sign, obtains the 4th VPNV4 route.

In the embodiment of the present invention, the 3rd field includes but not limited to BGP extended community attribute RT(VPN Target) field, the 4th field is for identifying the RT information of being added by the first PE of operator equipment, and the 4th field includes but not limited to the Route Target Flag(route target flag bit adding in BGP extended community attribute) or carried the field by the RT information of the first PE of operator equipment interpolation; As shown in Figure 7, for adding the extended community attribute schematic diagram of Route Target Flag, this Route Target Flag is added by the first PE of operator equipment for representing which RT information, for example, after this Route Target Flag can be positioned at the RT information of RT field, identifying this RT information is the RT information that the first PE of operator equipment adds, or, before this Route Target Flag can be positioned at the RT information of RT field, identifying this RT information is the RT information that the first PE of operator equipment adds; In addition, can also directly carry the RT information of being added by the first PE of operator equipment in the 4th field, the RT information of carrying in the 4th field is the RT information that the first PE of operator equipment adds.

For example, in the RT field of the 6th VPNV4 route, carried RT information 1, and the RT information of first operator's PE equipment this locality is RT information 2, the first PE of operator equipment is after receiving the 6th VPNV4 route, RT information 2 is added in RT field, now in RT field, carried RT information 1 and RT information 2; Further, the first PE of operator equipment adds the 4th field, and carries RT information 2 in the 4th field, for representing that RT information 2 is that the first PE of operator equipment adds; Or the first PE of operator equipment identifies the 4th field (Route Target Flag) after the RT of RT field information 2, for representing that RT information 2 is that the first PE of operator equipment adds; Therefore in the 4th VPNV4 route obtaining, in RT field, carried RT information 1 and RT information 2, the four field identifications RT information 2 be the information that the first PE of operator equipment adds.

Further, by defining new BGP extended community attribute, can increase the Route Target Flag of the RT information for representing to be added by the first PE of operator equipment, and the Type(type of this Route Target Flag) be 0x1001, after Value(value) be entirely zero.

Step B, the first PE of operator equipment send to the second PE of operator equipment by the 4th VPNV4 route, by the second PE of operator equipment, receive the 4th VPNV4 route from the first PE of operator equipment; In the 4th VPNV4 route, in the 3rd field, carried all RT information, and the 4th field identification the RT information of being added by the first PE of operator equipment.

Step C, the second PE of operator equipment are when needs send the 4th VPNV4 route to user MPLS VPN network, utilize the RT information of being added by the first PE of operator equipment in RT information deletion the 3rd field of the 4th field identification, and delete the 4th field, to obtain the 5th VPNV4 route.

Concrete, when the second PE of operator equipment need to send the 4th VPNV4 route to user MPLS VPN network, need to check the Route Target Flag field in BGP extended community attribute, the RT information (as RT information 2) that acquisition is added by the first PE of operator equipment, and delete in the 3rd field the RT information of being added by the first PE of operator equipment, and delete this Route Target Flag field, finally obtain the 5th VPNV4 route, in the 3rd field of the 5th VPNV4 route, only carried RT information 1, do not carried RT information 2(deleted).

Further, after the second PE of operator equipment receives the 4th VPNV4 route from the first PE of operator equipment, for VPN route learning process, the second PE of operator equipment extracts all RT information in extended community attribute, according to the RT information in VPNV4 route, carries out VPN route study; In addition, if the second PE of operator equipment need to send to the 4th VPNV4 route the PE of other operators equipment in the MPLS VPN of operator network, the second PE of operator equipment is not changed extended community attribute (Route Target Flag field) and is directly sent; Said process does not repeat them here.

Step D, the second PE of operator equipment send to user MPLS VPN network by the 5th VPNV4 route.

Based on above-mentioned processing, by the RT information that the PE of operator equipment is added, carry out record, with when needs send VPNV4 route to user MPLS VPN network, can distinguish which the RT information Shi You PE of operator equipment adds, then delete the RT information of being added by operator's PE equipment, thereby when the RT information overlap of the PE of operator equipment and user PE equipment, can solve on user PE equipment and lose efficacy for isolating the RT information configuration of VPN route, cannot distinguish the problem of study VPN route, make user PE equipment distinguish study VPN route, accomplish the isolation of VPN route, in the networking shown in Fig. 3, in the VPNV4 route that Customer PE2 learns, RT information is 100:1, by the attribute of this RT information and local VPN A-1 is contrasted, be inserted into VPN A-1 routing table, there is not common factor in the RT in the attribute of VPN A-2 and VPNV4 route, cannot learn this VPNV4 route.

In the above embodiment of the present invention, be to divide the processing of explanation RD information and the processing of RT information by different VPNV4 Route Areas; But in actual applications, may need the RD information of same VPNV4 route and RT letter to process simultaneously, for this reason, for the handling process shown in Fig. 4, in the embodiment of the present invention, can also specifically comprise following processing procedure:

In step 401, the first PE of operator equipment is when receiving the 3rd VPNV4 route from user MPLS VPN network, the RD information of carrying in the first field of the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of the 3rd VPNV4 route is written in the second field, in the 3rd field of the 3rd VPNV4 route, add local RT information, and add the 4th field, the RT information of being added by the first PE of operator equipment with sign, to obtain a VPNV4 route.

In step 402, the first PE of operator equipment sends to the second PE of operator equipment by a VPNV4 route, by the second PE of operator equipment, receives a VPNV4 route; In the one VPNV4 route, the first field has been carried the RD information after the first PE of operator equipment replacement, the second field has been carried the RD information before the first PE of operator equipment replacement, in the 3rd field, carried all RT information, the 4th field identification the RT information of being added by the first PE of operator equipment.

In step 403, the second PE of operator equipment is when needs send a VPNV4 route to user MPLS VPN network, utilize the RD information of carrying in the second field to replace the RD information of carrying in the first field, delete the second field, utilize the RT information of being added by the first PE of operator equipment in RT information deletion the 3rd field of the 4th field identification, delete the 4th field, obtain the 2nd VPNV4 route.

In step 404, the second PE of operator equipment sends to user MPLS VPN network by the 2nd VPNV4 route, the RD information of carrying in the first field of the 2nd VPNV4 route is the RD information of carrying in the 3rd VPNV4 route, and the RT information of carrying in the 3rd field of the 2nd VPNV4 route is the RT information of carrying in the 3rd VPNV4 route.

Inventive concept based on same with said method, a kind of VPNV4 route processing equipment based on nested virtual private network network is also provided in the embodiment of the present invention, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, described treatment facility is described the second PE of operator equipment, as shown in Figure 8, described second operator's PE equipment comprises:

Receiver module 11, for receiving the VPNV4 route from described the first PE of operator equipment, in the first field of a described VPNV4 route, carry route after described first operator's PE equipment replaces it and distinguish RD information, and the RD information before carrying described first operator's PE equipment in the second field of a described VPNV4 route and replacing it;

Processing module 12, for when needs send a described VPNV4 route to user MPLS VPN network, utilize the RD information of carrying in described the second field to replace the RD information of carrying in described the first field, and delete described the second field, to obtain the 2nd VPNV4 route;

Sending module 13, for sending to user MPLS VPN network by described the 2nd VPNV4 route.

In described first field of a described VPNV4 route, also carry the corresponding MPLS label of a VPNV4 route described in the described MPLS VPN of operator network, and also carried identical MPLS label in described second field of a described VPNV4 route; Described processing module 12, the MPLS label carrying in described the second field specifically for a VPNV4 route described in the MPLS tag match of carrying in described the first field by a described VPNV4 route, and utilize the corresponding RD information of MPLS label matching to replace the RD information of carrying in described first field of a described VPNV4 route.

Described receiver module 11, also for receiving the 4th VPNV4 route from described the first PE of operator equipment, in the 3rd field of the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment; Described processing module 12, also for when needs send the 4th VPNV4 route to user MPLS VPN network, utilize the RT information of being added by described the first PE of operator equipment in RT information deletion the 3rd field of described the 4th field identification, and delete described the 4th field, to obtain the 5th VPNV4 route; Described sending module 13, also for sending to the 5th VPNV4 route on user MPLS VPN network.

In the embodiment of the present invention, in the 3rd field of a described VPNV4 route, carried all RT information, and the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment; Described processing module 12, also for the process obtaining the 2nd VPNV4 route, utilize the RT information of being added by described the first PE of operator equipment in the 3rd field described in the RT information deletion of described the 4th field identification, and delete described the 4th field, to obtain described the 2nd VPNV4 route.

Wherein, the modules of apparatus of the present invention can be integrated in one, and also can separatedly dispose.Above-mentioned module can be merged into a module, also can further split into a plurality of submodules.

Inventive concept based on same with said method, a kind of VPNV4 route processing equipment based on nested virtual private network network is also provided in the embodiment of the present invention, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, described treatment facility is described the first PE of operator equipment, as shown in Figure 9, described first operator's PE equipment comprises:

Receiver module 21, for receiving the 3rd VPNV4 route from user MPLS VPN network;

Processing module 22, for when receiving the 3rd VPNV4 route from user MPLS VPN network, the route of carrying in the first field of described the 3rd VPNV4 route is distinguished to RD information and replace with local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in described the second field, to obtain a described VPNV4 route;

Sending module 23, for a described VPNV4 route is sent to described the second PE of operator equipment, in the first field of a described VPNV4 route, carry the RD information after described first operator's PE equipment replaces it, and in the second field of a described VPNV4 route, carry the RD information of described first operator's PE equipment before replacing it.

Described receiver module 21, also for receiving the 6th VPNV4 route from user MPLS VPN network;

Described processing module 22, also for when receiving the 6th VPNV4 route from user MPLS VPN network, in the 3rd field of described the 6th VPNV4 route, add local RT information, and add the 4th field, the RT information of being added by described the first PE of operator equipment with sign, to obtain described the 4th VPNV4 route;

Described sending module 23, also for described the 4th VPNV4 route being sent to described the second PE of operator equipment, in the 3rd field of described the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of described the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment.

Described receiver module 21, also for receiving the 3rd VPNV4 route from user MPLS VPN network;

Described processing module 22, also for when receiving the 3rd VPNV4 route from user MPLS VPN network, the RD information of carrying in the first field of described the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in the second field of described the 3rd VPNV4 route, in the 3rd field of described the 3rd VPNV4 route, add local RT information, and add the 4th field, the RT information of adding to identify described the first PE of operator equipment, to obtain a described VPNV4 route,

Described sending module 23, also for a VPNV4 route being sent to described the second PE of operator equipment, and in the 3rd field of a described VPNV4 route, carried all RT information, the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment.

Through the above description of the embodiments, those skilled in the art can be well understood to the mode that the present invention can add essential general hardware platform by software and realize, and can certainly pass through hardware, but in a lot of situation, the former is better execution mode.Understanding based on such, the part that technical scheme of the present invention contributes to prior art in essence in other words can embody with the form of software product, this computer software product is stored in a storage medium, comprise that some instructions are with so that a computer equipment (can be personal computer, server, or the network equipment etc.) carry out the method described in each embodiment of the present invention.

It will be appreciated by those skilled in the art that accompanying drawing is the schematic diagram of a preferred embodiment, the module in accompanying drawing or flow process might not be that enforcement the present invention is necessary.

It will be appreciated by those skilled in the art that the module in the device in embodiment can be distributed in the device of embodiment according to embodiment description, also can carry out respective change and be arranged in the one or more devices that are different from the present embodiment.The module of above-described embodiment can be merged into a module, also can further split into a plurality of submodules.

The invention described above embodiment sequence number, just to describing, does not represent the quality of embodiment.

Disclosed is above only several specific embodiment of the present invention, and still, the present invention is not limited thereto, and the changes that any person skilled in the art can think of all should fall into protection scope of the present invention.

Claims

1. a kind of VPNV4 route processing method based on nested virtual private network network, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, it is characterized in that, the method comprises the following steps:

described the second PE of operator equipment receives the VPNV4 route from described the first PE of operator equipment, in the first field of a described VPNV4 route, carry route after described first operator's PE equipment replaces it and distinguish RD information, and the RD information before carrying described first operator's PE equipment in the second field of a described VPNV4 route and replacing it;

described the second PE of operator equipment is when needs send a described VPNV4 route to user MPLS VPN network, utilize the RD information of carrying in described the second field to replace the RD information of carrying in described the first field, and delete described the second field, to obtain the 2nd VPNV4 route;

described the second PE of operator equipment sends to described user MPLS VPN network by described the 2nd VPNV4 route.

2. the method of claim 1, is characterized in that, described the second PE of operator equipment receives the VPNV4 route from described the first PE of operator equipment, also comprises before:

described the first PE of operator equipment is when receiving the 3rd VPNV4 route from user MPLS VPN network, the RD information of carrying in the first field of described the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in described the second field, to obtain a described VPNV4 route; And described the first PE of operator equipment sends to described the second PE of operator equipment by a described VPNV4 route.

3. method as claimed in claim 1 or 2, it is characterized in that, in described first field of a described VPNV4 route, also carry the corresponding MPLS label of a VPNV4 route described in the described MPLS VPN of operator network, and also carried identical MPLS label in described second field of a described VPNV4 route;

the RD information of carrying in the second field described in described the second PE of operator equipment utilization is replaced the RD information of carrying in described the first field, specifically comprises:

the MPLS label carrying in described second field of a VPNV4 route described in the MPLS tag match of carrying in described first field of described the second PE of operator equipment by a described VPNV4 route, and utilize the corresponding RD information of MPLS label matching to replace the RD information of carrying in described first field of a described VPNV4 route.

4. the method of claim 1, is characterized in that, described method further comprises:

described the second PE of operator equipment receives the 4th VPNV4 route from described the first PE of operator equipment, in the 3rd field of described the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of described the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment;

described the second PE of operator equipment is when needs send described the 4th VPNV4 route to user MPLS VPN network, utilize the RT information of being added by described the first PE of operator equipment in the 3rd field described in the RT information deletion of described the 4th field identification, and delete described the 4th field, to obtain the 5th VPNV4 route; And, described the 5th VPNV4 route is sent to user MPLS VPN network.

5. method as claimed in claim 4, is characterized in that, described the second PE of operator equipment receives the 4th VPNV4 route from described the first PE of operator equipment, also comprises before:

described the first PE of operator equipment is when receiving the 6th VPNV4 route from user MPLS VPN network, in the 3rd field of described the 6th VPNV4 route, add local RT information, and add the 4th field, the RT information of being added by described the first PE of operator equipment with sign, to obtain described the 4th VPNV4 route; And, described the 4th VPNV4 route is sent to described the second PE of operator equipment.

6. the method of claim 1, is characterized in that, in the 3rd field of a described VPNV4 route, has carried all RT information, and the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment;

described the second PE of operator equipment is in obtaining the process of the 2nd VPNV4 route, described method further comprises: the RT information of being added by described the first PE of operator equipment in the 3rd field described in the RT information deletion of the 4th field identification described in described the second PE of operator equipment utilization, and delete described the 4th field, to obtain described the 2nd VPNV4 route.

7. method as claimed in claim 6, is characterized in that, described the second PE of operator equipment receives the VPNV4 route from described the first PE of operator equipment, also comprises before:

described the first PE of operator equipment is when receiving the 3rd VPNV4 route from user MPLS VPN network, the RD information of carrying in the first field of described the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in the second field of described the 3rd VPNV4 route, in the 3rd field of described the 3rd VPNV4 route, add local RT information, and add the 4th field, the RT information of adding to identify described the first PE of operator equipment, to obtain a described VPNV4 route, and, a described VPNV4 route is sent to described the second PE of operator equipment.

8. a kind of VPNV4 route processing equipment based on nested virtual private network network, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, it is characterized in that, described treatment facility is described the second PE of operator equipment, and described second operator's PE equipment comprises:

receiver module, for receiving the VPNV4 route from described the first PE of operator equipment, in the first field of a described VPNV4 route, carry route after described first operator's PE equipment replaces it and distinguish RD information, and the RD information before carrying described first operator's PE equipment in the second field of a described VPNV4 route and replacing it;

processing module, for when needs send a described VPNV4 route to user MPLS VPN network, utilize the RD information of carrying in described the second field to replace the RD information of carrying in described the first field, and delete described the second field, to obtain the 2nd VPNV4 route;

sending module, for sending to user MPLS VPN network by described the 2nd VPNV4 route.

9. equipment as claimed in claim 8, it is characterized in that, in described first field of a described VPNV4 route, also carry the corresponding MPLS label of a VPNV4 route described in the described MPLS VPN of operator network, and also carried identical MPLS label in described second field of a described VPNV4 route;

described processing module, the MPLS label carrying in described the second field specifically for a VPNV4 route described in the MPLS tag match of carrying in described the first field by a described VPNV4 route, and utilize the corresponding RD information of MPLS label matching to replace the RD information of carrying in described first field of a described VPNV4 route.

10. equipment as claimed in claim 8, is characterized in that,

described receiver module, also for receiving the 4th VPNV4 route from described the first PE of operator equipment, in the 3rd field of the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment;

described processing module, also for when needs send the 4th VPNV4 route to user MPLS VPN network, utilize the RT information of being added by described the first PE of operator equipment in RT information deletion the 3rd field of described the 4th field identification, and delete described the 4th field, to obtain the 5th VPNV4 route;

described sending module, also for sending to the 5th VPNV4 route on user MPLS VPN network.

11. equipment as claimed in claim 8, is characterized in that, in the 3rd field of a described VPNV4 route, has carried all RT information, and the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment;

described processing module, also for the process obtaining the 2nd VPNV4 route, utilize the RT information of being added by described the first PE of operator equipment in the 3rd field described in the RT information deletion of described the 4th field identification, and delete described the 4th field, to obtain described the 2nd VPNV4 route.

12. a kind of VPNV4 route processing equipment based on nested virtual private network network, be applied to comprise the nested VPN network of the multiprotocol label switching MPLS VPN of operator network and user MPLS VPN network, in the described MPLS VPN of operator network, at least comprise the first operator backbone network edge PE equipment and the second PE of operator equipment, it is characterized in that, described treatment facility is described the first PE of operator equipment, and described first operator's PE equipment comprises:

receiver module, for receiving the 3rd VPNV4 route from user MPLS VPN network;

processing module, for when receiving the 3rd VPNV4 route from user MPLS VPN network, the route of carrying in the first field of described the 3rd VPNV4 route is distinguished to RD information and replace with local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in described the second field, to obtain a described VPNV4 route;

sending module, for a described VPNV4 route is sent to described the second PE of operator equipment, in the first field of a described VPNV4 route, carry the RD information after described first operator's PE equipment replaces it, and in the second field of a described VPNV4 route, carry the RD information of described first operator's PE equipment before replacing it.

13. equipment as claimed in claim 12, is characterized in that,

described receiver module, also for receiving the 6th VPNV4 route from user MPLS VPN network;

described processing module, also for when receiving the 6th VPNV4 route from user MPLS VPN network, in the 3rd field of described the 6th VPNV4 route, add local RT information, and add the 4th field, the RT information of being added by described the first PE of operator equipment with sign, to obtain described the 4th VPNV4 route;

described sending module, also for described the 4th VPNV4 route being sent to described the second PE of operator equipment, in the 3rd field of described the 4th VPNV4 route, carried all route target RT information, and the 4th field identification of described the 4th VPNV4 route the RT information of being added by described the first PE of operator equipment.

14. equipment as claimed in claim 12, is characterized in that,

described receiver module, also for receiving the 3rd VPNV4 route from user MPLS VPN network;

described processing module, also for when receiving the 3rd VPNV4 route from user MPLS VPN network, the RD information of carrying in the first field of described the 3rd VPNV4 route is replaced with to local RD information, and add the second field, the RD information of carrying in the first field of described the 3rd VPNV4 route is written in the second field of described the 3rd VPNV4 route, in the 3rd field of described the 3rd VPNV4 route, add local RT information, and add the 4th field, the RT information of adding to identify described the first PE of operator equipment, to obtain a described VPNV4 route,

described sending module, also for a described VPNV4 route being sent to described the second PE of operator equipment, and in the 3rd field of a described VPNV4 route, carried all RT information, the 4th field identification of a described VPNV4 route RT information of being added by described the first PE of operator equipment.